{"type": "bundle", "id": "bundle--29e61cd6-fe1e-481c-a469-e899a8d86682", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--2031996b-4d7e-4014-a84f-4f6563b0e2a9", "name": "DigitalOcean London", "latitude": 51.5177, "longitude": -0.6215, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "GB"}, {"type": "location", "spec_version": "2.1", "id": "location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--7d3be57f-7b38-41f1-8114-1d90ddb5f714", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--9ec7f19f-d9be-4fad-a20d-c77d531ac685", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--d1e3eec7-9a4d-4067-a3de-1e9e095f1527", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--aa2ef009-5021-4521-8319-5b8cf0be9857", "name": "DigitalOcean London", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e210af39-c27a-4566-8b3c-593ad1ccb65f", "relationship_type": "located-at", "source_ref": "infrastructure--aa2ef009-5021-4521-8319-5b8cf0be9857", "target_ref": "location--2031996b-4d7e-4014-a84f-4f6563b0e2a9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--abdb3ffd-780b-4492-a091-1da269e36dac", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--049ace6a-6f05-4e7c-9ed9-909919618438", "relationship_type": "located-at", "source_ref": "infrastructure--abdb3ffd-780b-4492-a091-1da269e36dac", "target_ref": "location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--7e4570f4-05e2-455a-b21a-922b0e59937e", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--5da48813-a6f3-4585-9c16-755d1c60bacb", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c17d345-5b59-4440-abca-a81082969f4b", "relationship_type": "located-at", "source_ref": "infrastructure--5da48813-a6f3-4585-9c16-755d1c60bacb", "target_ref": "location--7d3be57f-7b38-41f1-8114-1d90ddb5f714", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--3e90ddf1-0c4e-471d-a474-e84a7828cbe8", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a743595-0f4e-4a3d-8d22-65423f323255", "relationship_type": "located-at", "source_ref": "infrastructure--3e90ddf1-0c4e-471d-a474-e84a7828cbe8", "target_ref": "location--9ec7f19f-d9be-4fad-a20d-c77d531ac685", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--b3a43a8c-4055-47cd-b848-be1382d8bafb", "name": "CVE-2002-1149", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--33c5aaa2-79bb-4d86-bd4d-10d895084dad", "name": "CVE-2019-5418", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--d07122aa-0aa0-4e18-8e4d-bd3e7e18dc58", "name": "CVE-2021-31207", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31207", "external_id": "CVE-2021-31207"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--ab3c0f78-a5f5-4522-b5e0-6c6c486bb35d", "name": "CVE-2021-41773", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--e7c3766a-5e2d-41dd-a466-61c956def038", "name": "CVE-2021-42013", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--53f84b33-ae55-4ff3-9a40-daf03764627d", "name": "CVE-2023-1389", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e034770-b5dd-4777-96af-6d69cfef634e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.10.204.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72f82de-8571-4b0e-b53c-5effc9e628c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.21.173.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278f26b6-53be-43ac-95b1-ec3d605757a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c481bdc-b21a-4e2a-97a9-c57b6cf59c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd6c84e-078a-4c37-b23e-3a4b88f65144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.25.234.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ef9017-825d-45b7-a4d9-230c70c8044c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.64.106.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57eb6891-dd3b-448f-b03c-d8b9aedb8021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bede7490-ab2b-4fb5-a5fa-21ac81ed57fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.26.98.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06a11a2-5835-4dfb-86fd-1b567a79d399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444e5a9f-88bf-4a07-8876-1aa75362c8d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aaee3b9-dcfe-44df-942f-bf83e372a4fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3de16fd-1aab-424c-9756-7c234e3a34ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3595a860-d98a-4258-a7a9-fb9a93e79136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2e4f1a-6707-41ca-b60a-a1852b15f2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d64c2fe-d073-4a5c-8cd8-565da4a40061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189a3f9d-1ef0-458b-8654-b85600fe49c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ced3ac-4762-48dd-84a0-176919008ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfb5069-9ef9-413b-9e67-0ea28402ddbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32177b5-caad-4b4e-aee1-3f78f67ad82b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60baa053-07d2-44f3-a65e-8eee780d9e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3291f657-37f0-46b2-a54e-13eb974ab9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc3c8f7-afa2-4167-8b84-d45b6272c870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0ad70c-ef04-43d3-a4a2-fecae50af60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0eb241-793c-43e9-ad47-0604b84db892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4ceca2-a308-4f46-8834-ba3b80fc7c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077d835c-1d49-47a9-98d8-cc9a7b855d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf94763-d209-4fc4-8a8d-5bc3b3827ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8d4f85-f175-4e67-8985-53d93fdc98ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57376f4c-b14f-47e5-8ad8-77bf1a930c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea6728c-8b99-4369-a7d7-25173f6995b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1007861e-dc4c-4110-bdf8-9774cdf465bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76824f1c-ffb2-455e-8ef2-7853e5f2edb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72fe18ae-ebe7-4af0-b8f8-b0d00e6e730c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54cfdc5d-bef4-4947-8914-bab146d0b1e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f76d8d6-d8d6-4362-8f5b-93558c7e8e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28ebe85-6daa-46d0-8968-9b848c8090e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab9927a-7721-457c-aa04-8b13453b5765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7208f96e-d1ac-4bd7-8d68-af5b8147af83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cdffa14-7140-4c33-a1fc-cd05b14aa327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6134ba1e-5efc-4339-9e01-f2d73682294e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637750b3-89a5-43c1-a944-522b735049cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c8a09e-1d82-468a-a661-d0141a229a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37789cc6-08b1-47fc-a99e-8303b0ad79b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f38559-8ca6-4f06-85c6-1ef3d1b9e149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e760842e-94af-4780-86ff-3cd93bc1dd2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd0edfec-33f3-40c1-9ea4-54514285de60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9265a8cb-aee4-4708-b79e-a67689ca4e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763d7741-36a0-4895-b434-298a6543e2b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe5df65-e42c-4837-8bea-6b14a86a6a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3d1679-15e1-4d51-a446-49878b0f747a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.31.87.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f46b2e-1697-4ee9-aef9-1e7066c6335f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00974e6e-1d3f-4a64-98df-93b4d4234f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22bc30b-ca39-4ed1-9c76-f7e641f626b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.58.116.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccac4477-3618-4705-910c-5161c4c7af7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.58.171.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c021c9-e943-4276-b11a-0d8a01222a75", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.108.95.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9b4147-340b-4229-b0e2-3fb40fc39a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.154.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd75599-b764-4bd9-89e2-11093a1d4920", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.88.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534c8a06-ecba-43c2-b534-28a01c964987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.200.132.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db703b8b-30f8-45cc-85ce-11100ca3e9e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.200.242.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45bb6633-f4ca-4902-8866-74f416044d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.201.104.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0ca3d4-c8bc-4a5c-8b6b-50a94574f012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.206.108.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766da8fb-91da-45f0-9b43-77eb014f06bc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.116.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a489560-84bc-4616-b847-17cf0ec7ec95", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.184.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841cb358-1b15-49e8-96b8-4ac53934ff6b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.208.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9648df40-ab35-434e-a0cf-2bbba8ca7098", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.220.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3028ee87-5d06-4299-85b4-8c7e3cce212f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.249.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f253be54-c86d-45fa-88e3-43890752902f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.33.55.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8cc925-532c-4428-b8c7-a5c76878c34f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1690d41c-a25e-4ee1-abd4-a5bee971f461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65827828-64fe-4e3c-ad93-0c09d5542911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5f9340-13b7-46a9-ad96-2f9f6942f366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ad8ef4-8e82-437a-8119-ebcf232b08bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1078582c-4197-468c-9fbf-14b706a5bbb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17b32e9-1b51-415d-a0ee-c6f55f6087f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1269ed07-a543-4d1f-aef9-5e53bae96a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7577a8b-6974-4267-a7a7-2e024e8d157a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d05add-5c82-4c50-a260-7d7400ac20ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38cee80-d043-4914-9196-d581f3996653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c01779-ce6a-4358-9c83-88007027e2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.116.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebceb98-f754-4a32-b301-25edd0c10e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64b622d-acad-4336-ad48-2b848287c5c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a294ec-0d84-4dbb-abb4-4a39556a397d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.119.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e334c24b-8a0f-4b40-b31c-3dacdc458a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2a662f-aae8-4a2a-b2b0-4f860851e071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.122.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c660d17-1c27-4141-a388-64554054d39a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--704c0367-9232-4691-963d-49f66b222464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.127.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8457c82-8fd6-4706-8edf-ebf2c104d047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ef76f5-da46-4e05-a20a-a03a3abe3b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f8a82e-db32-4fe1-9343-acb24a369154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e136d8f9-f1df-44bf-8bc2-7fc0a8400891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8cba8a3-8808-4a48-890c-b4db966cb781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e675c90-e3f6-4bd2-9507-37f6ff4bf48d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68251a5c-edab-4518-8ae6-a4b89a4ceb23", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.42.46.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0baf3e8e-411b-4d43-bcd9-a06c297d60f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.15.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09261153-dff0-45a0-9a21-7c4e4c75a852", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.156.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b77d8f7-9e18-4f74-b889-1a284c6dbe94", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.159.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3ce05b-b11b-47a0-a795-bbece611873a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.17.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef407be7-fbf7-4c64-a22c-da28cdae71ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.18.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277f9fac-6cd7-418d-ae09-f0cd5ebc3490", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.18.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fadb3f4-1ed4-4dd0-b87c-29309ce8401f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.18.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6874eee0-4c8a-468a-aeb8-dae79f4f0b5a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.18.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee778b9c-257a-4d11-b21a-c0fd6eb59a08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.18.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f620c1-5d4a-4a54-b51c-aff92ce4fc91", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.18.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd160da-a493-480d-add0-bf8aeb0d50ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.18.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a92d85-a85b-431f-8678-da01ccdb3e5c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.18.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d362513b-e3cf-408e-ab91-7761bef6e44d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.19.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e3f8fa-8979-4245-8a77-d538fc1075da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.19.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b920d1f-4624-4b40-af60-2a3786fba342", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.19.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312df948-0946-4c1a-b6e6-861984332231", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a71bd4-cef7-4c29-9a7e-48804f5eb452", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a681f784-0aac-4e8c-8037-44f6e3dd1074", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5452dceb-a692-409d-9577-0227a22e63b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee1e239-e587-4182-adaa-a0ed3cf2377a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf8277d-0ee9-4781-af72-4e9ded6e5de2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e3df92-3d15-4247-b14c-34d3b7556795", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f365de-9c12-4882-8951-ec4619818ea0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b748b21-2cb1-4764-bde2-be6c39ee0cbb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c0ce3a-55ec-461b-b5e0-c255a88dc13e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e62b16-c597-460c-b65b-d4454acaf0f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b7d6527-154b-4bd8-82a5-a7e394916b46", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.255']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e51ba40b-a073-4169-a6ba-9a9966b19fa0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f0e933-0e08-4722-a01e-2ff1f24e71ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21c04f0-2d7f-4dd7-9886-ebcce8a20c90", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceaaf066-af0e-4caf-b0ec-efb6f3ab169a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b4f03f-7621-4ac3-aaaf-a1b9b56130a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e213a38-32ca-4fe8-9950-9e50abefd04b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d26d4f6-facd-4184-9358-ae76a435224b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f938279-f87c-4b37-b483-fa6091b59179", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca39f9b-9bb9-4388-bd99-c5f5f20c32f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1791ec00-9a14-463c-837a-890a2c7e5706", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6d174e-294e-413a-8be9-e6f84ed15661", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.255']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5338476f-11d8-44c6-8a5e-8f40cb2380a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ac1b40-8587-433f-9357-04f19d3fb19d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c47f90-b80b-4a9b-b834-01af9cc21e11", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9285d78-7cb6-42de-8e79-c0fff0394635", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d1bd56-6db9-4a50-835d-f2058df0eff6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910ff5c1-8d82-4adc-b3ce-e6efb27e81ff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7139d4-393f-4ee7-bf55-f9a23a638b66", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400397d1-28fa-4675-a7c9-81f1f466074d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a445fdc-5c13-47cc-83fb-85b2c238cbf2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d186543-6087-4105-94f2-0e5354d644b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891e10b2-1540-49c7-ac71-f55a2eb35b21", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70506a15-edfa-4a13-87ef-10f385541143", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb97bf1c-e63d-440d-a1d0-68814c8ba0b3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb34ded-d30a-4aa2-9220-4a47a7e4e8cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--731e1a1d-918c-4439-83bb-9dbb77688cfb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae92b81-b4dd-4d1f-9cb0-dcc6d1db27d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ee7fbf-2cb1-4380-ada7-15eaece17d0d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc4a730-596f-4d5e-8e61-6ea1a0c68138", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--415a40be-fe04-4efd-9587-de3c495247b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e9dcee-0dab-45b3-9895-c71a83e18470", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6a2888-0c76-4752-ba7e-36d0d4b59274", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c83e51-e473-47f5-97a2-ff0be5f28292", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e2cdd3-ca67-4d5f-b548-39ce94d86dec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90d95a0-b8a9-4a45-9f04-836cd803829d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d679ffbc-0115-4b10-ab6f-3e3243ba5da0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434ce068-444d-4f8b-993f-48464e11d624", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7bda419-7792-4407-8aec-151df93e930a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa1680d-ae0f-47f8-8e4c-70b36250e41d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a842d862-fa74-4515-8593-4228705d093f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0ca666-2f2b-483a-ba9b-feea33757e6d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95c4a76-3387-44eb-be15-175a945e8d63", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12e2608-502f-4e2d-8d54-df07a15ecc12", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ad46bb-79fb-4be5-ad59-d3910ee823e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd70daf2-c9c9-4c98-9f4c-9ef3ad38e616", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7a073d-350c-438b-a42c-f17c65ebf243", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c51648-4db7-4144-a94e-ab99d81cf304", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--359523a5-2610-4115-9724-3fb71509d246", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e786653-0fd7-4e0d-8cb6-73d780ceb1b5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23ea0b7-a56a-42d0-9e8a-ab42bca00cfe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d03c9c-6246-47d9-9155-266d8eec3866", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.27.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7d4f7e-59d8-4984-a343-a2096aedb521", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.27.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74e3d02-1388-41c6-8504-78abd0d70c1d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.77.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3b4e76-155d-4b31-b9b1-4872b1192788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.68.7.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adba163d-4ad2-486f-a561-a7323237f286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.71.210.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d857422-9d88-49e8-bd41-c6c59d9cc2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.197.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c92371-73ce-45dc-8993-e736cd373fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.199.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bdcab2a-7ede-4353-90e8-4a855462553a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.200.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ba19f8-e386-4f0c-a95a-3ddd4f311ce6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.200.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8414f348-f0c5-4649-9484-326fcd5b9e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.200.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c30561-b465-4dae-b036-34182e877fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.130.71.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a6bbdd-6b74-4fc5-bbf3-709d5d1ffeab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.163.112.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92bc1829-6bd1-487d-8408-054e5ce31df9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.210.17.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd28ceb-2870-46af-a558-9eef34dfa81b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.213.0.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c343d411-7ee0-41fc-a772-b963e0a28808", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.215.251.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f8afd5-072f-45a6-a80b-abd3288facd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.216.226.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23e676c-2bc4-4417-b214-7942bc030fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e758e2ec-36a6-4ce6-a107-51ebf54ab54e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5aa2662-43e7-488d-8dfa-6607c2f2c173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2927a2-28ca-466b-b818-b5f826c94881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7764174c-6efe-469c-a7e1-589547b5f5c1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586f5534-1906-4876-ad96-020d8e532fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8610cb8-6e04-41fa-946a-8fe3f20aad28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bcc194d-d870-4c56-b1fe-4434639d3e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.223.47.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3be02c-2cf6-490b-9ebd-36078ffded22", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.23.23.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d57d3e-02eb-42f0-aa6f-810e5bd32203", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.252.14.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6e54eb-e3d8-4cf4-b11c-34528cce1802", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.66.146.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2c6b20-efc5-4ec3-9da1-eeae09beb9a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.112.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b65f100-e8f0-48e9-8887-c349a2481614", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.137.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d56331b-f3e4-4f25-bcfd-a5feec9a72cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.21.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04aafc11-404d-4a36-9403-d04450cc9afb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.99.109.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0081b297-ce20-4639-a5ef-92c32cccc4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe26e36-7cd4-4d7b-b958-26bcc0bac27c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.108.151.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03975857-aeae-42c5-ba9d-7852a9c2bced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.112.62.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5e1b01-83dc-4dbe-9ee5-89636ce4f0bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.115.31.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5671c3d2-c5e7-43fa-80cb-68570d4cae91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.116.137.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7b0e1d-4796-47f0-aa39-a467601e046f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.119.179.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4e075c-5da9-45d7-9390-92c9af4d411a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.12.242.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788fabd9-f642-4985-ac9d-6e10d2e8a02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.221.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640d159a-52c3-4b37-a991-edf96e45d5c3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.34.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2662aeec-d6f4-487b-b5b9-e5270943899b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.226.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1731deb-a5ab-44ce-9f79-3eac7813d765", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.126.173.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784579fb-a564-46f6-8d69-27a7e42b6b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.130.209.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c20a92-1b3f-4e61-9493-82af7a54d6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.131.61.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4217adfa-b12a-4c89-b8ef-62b1f75a1da6", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.132.236.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00a9350-6d0f-45c5-9688-191066e20625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.134.222.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b262a3-bd10-4979-9256-e611c7383cc2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.138.123.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18115932-01b2-4bca-84c5-206289d8c7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c659481b-6c7d-4757-9149-dc56511e6159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20947368-77fd-418c-969c-5f821406c4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.145.5.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--620861ba-db80-43c1-b65d-a1398df8decd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.16.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c3537c-c0da-4a91-92fa-e78cf8adc9d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.147.34.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae63aede-dc50-4598-b745-a9d8b9448de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64effec6-8cb3-4899-9151-318cff3e16cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--050df8e8-b55f-499c-8262-440300a1d15d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.28.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9cee763-9d0b-4475-ae5d-60efd25c34ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.222.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95c0a04-7ecb-4ba3-9187-4b90574db090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.222.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdc043d-7921-4874-a27c-b8e005305921", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.110.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7982879-26de-4cca-9e29-8c39a01fc5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.68.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e10692-cf68-4a4b-8854-07b725acfc8b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.154.77.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca51b1e2-1204-4879-8aee-c2d57ac8676d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.156.189.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10fedbda-9f1b-489b-9a08-03386ddb4306", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.16.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57664e86-eb9f-4d66-a10f-fdbad01825a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.34.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f15e6c1-cabe-411d-9d66-1264f6354963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.163.111.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--285e0b9c-9320-4c83-82c5-06a2e612e06d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.163.117.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6525a4f8-9716-4c2e-871d-a014a9e017ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.164.255.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885b166f-ee3f-4cc6-a693-3a6b66abbf30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.166.10.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--416b8d00-b019-434c-b07a-803eb6b1e767", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.166.59.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b52bbc-8109-4060-8d5e-9d3621e4c3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.170.40.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739e209e-4727-4747-ae31-f7c91340b3ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.112.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75468548-484d-4079-be9a-341c18326148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.78.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c31b366-7264-4b05-853d-8c4a8de32687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.175.49.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd294fb-3cef-4c4d-ae5f-c2dcc74656a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.20.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c69b16-3fa8-4526-9f5d-d14b3167ac71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.90.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289c9a09-308c-4bf0-b53b-6c12bbca1224", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.179.174.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85acb6fc-1041-425f-b1b3-d49301ae04d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.180.201.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c09f97d-1252-4a35-be07-d4bcc7eef2cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.180.212.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--484656f1-411d-4491-a7cb-397f01100b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.161.0']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3b88d1-7c96-41b8-ad8b-8ff3f8b33741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.176.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f092d630-c03b-4972-8af5-13c1576ad986", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.182.174.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d886fd6f-5475-4e48-888e-8c56f72434f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.184.93.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29fa92f-2c09-4078-ba78-fd982302f491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.185.53.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43835990-8e1f-4a83-97e7-1c6d23cbf67c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.186.77.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ff8880-41bf-452d-994b-c6855f8b3f21", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.187.147.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9598a2-6b91-442d-8f58-c16841bd9af8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.208.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79690ba8-16d5-47a9-8ccf-fa40007275bf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.234.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3269d3-b877-4492-82e9-6fd889f06967", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.19.49.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf983b4-df7a-4304-a255-81ae27206a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.195.102.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9da5af-dc53-486e-80e3-ed0c06b12ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.200.22.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69f9386-c906-441e-bbc2-a5381f66fe31", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.200.23.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188040ac-fe54-4d37-9af3-3b6fdaaddcc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e71bcda-049a-44e9-9ee1-4994b32a4717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--285a05b5-7727-4edf-95e5-00c92c709635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26162e32-d8a2-4622-a47e-dbf69ae7fe4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95cf9853-1954-4251-b731-249b48453cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc68d79-60c7-4f80-af55-b7623ea8c6dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d1ed49-965f-4003-ae58-e3d5908a7610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb68ee3-c97c-44f8-adcd-a97f47789b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.208.202.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee68201-8bfe-46d3-ad61-03b70847aa2e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.21.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1121db87-f77c-44ba-af56-704ea3cb9ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7a07c8-dda1-4fdd-92c1-1589c768b7df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca9a8b9-76dd-43ef-a781-be2347cc5146", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.212.177.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c81f48-962b-4b12-b450-bdac981e8a71", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.214.202.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2865733-345c-487f-8d5f-e12620d07ee3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.215.195.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e11784-b1d1-45c0-8d2f-17d0d64d8280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.241.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1b9cf8-8fb3-4942-811b-e5b9e6a89c3e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.229.125.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0e4c08-7413-4217-86ba-a90bb6407633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.233.169.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c9f7be-5e97-479e-bc57-87330493fb60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a19f2c-9a7f-4781-afc9-b4820a51db8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554ab1e5-09c9-4db7-a838-98a985f89221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a0d8a7-0e06-41e1-a3dc-01fdbc5d6925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10a25e8-bdaf-4103-b593-bae33b08ac3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb6cf94-137d-4e3d-8604-cf585d03d6d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92117665-097e-4f1c-96ef-abbcd1b599b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efe3551-be8e-4b5a-8d50-40c347eaf8a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dfec033-4e04-4270-a980-1859e9999b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce90b853-8c3c-4a4d-974a-2d877ed85b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de98abd7-54a6-493b-9383-1bd6bf1a29d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589a4e78-654c-42ac-ac5e-8d7585897520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3bcd222-a9d7-42cb-998e-a4f17e50fd57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b172f6c-fe6f-4163-920a-7f9aeb30e0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f474ba1-da23-4f0b-922e-83a92976edbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6c08a8-9d49-4d20-a3d7-da256a92cddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c208d79c-c5ed-4678-967c-8f629d315250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6864b15e-703d-4911-9505-51990f4733ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40beb97f-ed37-4f3c-bdd6-7b83c1f70279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9817b46-caa0-4513-8685-2bcc4ca58b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d557fe-7fcc-4338-8ab2-f2a4d24abff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b10ea8-f55c-48af-b479-c0800bf453cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.241.45.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c9d296-f0c5-47d7-8501-821656a56976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.244.227.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbd51d8-ffed-4aaa-9495-f0ad7a129521", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.248.207.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ba8f91-386d-46a1-8a9a-7edf4acd3527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.249.87.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133e203c-002d-4c39-aa01-34a274238175", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.25.220.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad27ad1-f9ff-4dab-93a4-eaeddba96939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.250.11.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c86abb6-8c20-4862-8b5b-b48fef3595ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.252.12.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d36db2d-b74c-44af-8048-d084700629cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.253.177.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27243250-8bea-43da-84f3-acf1e6c7a059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.176.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd72882c-c397-4416-8500-70ddf6d4a087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a12544-c73d-4071-b3c9-7e450efa7f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1241a5cf-1d9f-4ddc-be59-1399074ee33e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c0eb80-2c95-4282-b2c7-e1939f349985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.38.237.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3eaedd-15f7-43ae-9a03-179a4bb844ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.56.232.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ff63e6-cc03-40e7-b8a6-16748e8f67d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.57.204.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0112bc7b-fe63-4c50-9d57-a2995f709299", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.58.73.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d32716e-f12f-43f7-8850-1be215ad6378", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.59.163.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10163a79-aa55-44b6-8732-72775f695832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.62.95.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cce7d5-a3e5-4d5a-9de9-03f2c832830f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.63.24.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19c806e-518a-4f91-99b7-275cd71e3aad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.66.148.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208acecd-2745-48f7-a9c2-615e92cf8c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.70.0.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00bb3428-d2f1-4bb5-9d30-130f442f7323", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.70.40.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c98fda5-025d-496a-8ec3-14fff6c7a28b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.74.20.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ccca694-1994-4a6a-8452-8be4b53602ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.175.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b58784-ba04-4627-bb47-786ea73212e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.240.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f386eb97-efae-4cee-80d3-91bf181415e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.241.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1504516-32e8-4f89-b25c-b7f6f8c31625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.242.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930d5fe7-2fc8-4964-87ea-9e24c7981810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.79.79.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a38a60c-eee8-4037-900b-d496d9477d9e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.81.29.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb9ea43-d6b4-4292-9ce0-18d856d6479a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.132.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc2c294-571f-43d0-9370-0e999e7a5c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.20.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7174bbab-a9bb-4cd6-8434-57151f5691b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.83.148.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa956e9d-f1a7-447c-a740-5ecb7e52f4bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.83.148.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec61e75-78ff-40ca-a932-3014700af422", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.87.51.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d2afa1-0bcf-4fe7-96d4-c1433b8bcde7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.98.149.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52006bcf-ed1c-40e9-98aa-3d735e0b2617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.9.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ec37e5-7448-4c1e-9748-739a82d69403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe3e5d1-9817-4f96-932c-f515fb682e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37648ae-5ba5-4cec-8759-a85cae752b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5705a0-568a-4c52-83ef-454d82beca30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b12a61-c83d-4f77-9afd-9a9cf92c26bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b20505-e998-47cc-95db-7fc59bd2ea36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f1dd32-25e6-4611-b917-01818dfe2696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0513cb6-f763-4198-9bd9-0b2db26dd869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe52c4e-3981-4b44-9564-f52a2d316f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435a60a2-b4a4-4364-a046-db40c673454a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03dbae90-020b-48b5-85b0-cfe38b5e5a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8cbfad-7314-40ea-a8f5-fc8c1f6448a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2176c3c-8384-49ce-8fe1-41f54a1cd9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d044740-7b3f-4182-9d35-38fd403a5676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1f25c2-90bc-4cbd-bb06-0db824ea08e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d61ad47-c3ef-495e-9d8a-ec0404760211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2af878-be51-4c3e-88c1-8c2b037e5adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709b142c-2a2e-414f-bf30-9dd6ac595f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795dfe72-ae03-4010-a574-f5c533de2805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34acc3d0-961c-4a23-aa80-738f1c44329a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427ce06f-fb67-48e3-b086-a99fcdf4a628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c219e0-5796-4749-9b34-b82417c8ed87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04bab4f5-df90-4ab0-b2c3-261ff94597d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a04ed4d9-7df2-4ad4-bca0-50cc29476da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53cb136-be63-4b75-b253-4a3fa0375f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a07aa8c9-75c8-4c63-b583-bc7258c515ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d297cf2a-76ba-4edb-bcf2-a6dfe40ce4ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23725faa-a510-4c2f-9498-f3ef2734394c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3947a7b-b969-48c7-a2bb-d7a718e8c550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95004164-f494-461b-991a-decb0502110c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.71.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475df440-62f5-43e3-9363-3fa6f05d0315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.164.8.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc98c3c8-f273-4331-be07-95745b74d0d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.168.112.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1be0ad-4c0f-4002-aeb4-8ba6b53441fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.192.3.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43e8b71-36e8-4743-a16a-48df19bc3e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.10.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3e3e65-7eea-4062-b73e-e50cd4daeacd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.9.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c054345a-cc14-4bf4-bfb9-24831e48838d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.54.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2125ea78-7d0d-428b-990e-809eaed63195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.74.255']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3aaa576-cf6d-4cd1-ad05-0dc1deda8133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.77.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19767a7f-3d7e-426c-94c8-28fe57571891", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.202.246.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84b314d-ea20-47e9-bb3f-fff5fdd54567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.206.128.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96eedb09-0d2b-4509-93ea-c53e6ca0d1b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.206.128.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ad2e1f-dad6-4a0b-bc16-31f0e30c4aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.208.108.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6766d7b1-bf0f-4ea2-85fa-8b3a56defaf2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.140.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7b8489-93fe-4ea7-bccf-bb557fbf6c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.223.84.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6cc9bbf-48aa-430d-b745-2579306695eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35896dd-7c75-48ea-b791-054949eda3ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.223.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3871d0a8-675a-4d96-8da3-aeffdf5cd208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.83.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ab9070-cddc-42c2-8c9e-47764de25599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.132.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c893cc58-632d-451a-90d1-08df9f383834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.144.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce33ad52-fdc9-4dee-a580-dba928e3c4c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b068be19-9a09-4e2e-8dd6-1257de9ba50d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890a0738-cba4-457a-95a9-c85d2f74492a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d632f8e4-5ec7-47fc-8f1e-e6953612efa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6270e08b-9359-4534-840c-e2188ea638e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.37.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf8bd8b-432a-471f-86b3-7b26f4562830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.38.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ec267a-07a9-4359-97a9-dbf3dd5587de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.46.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f1d141-cd0f-4444-8b11-ff8627d45e30", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.244.230.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d8873c-881c-40f3-a988-9bdabca9fa75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.130.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c71c99-02f9-484e-b10c-1ed45684020c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.160.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96564bfd-9de1-43e1-9746-8390c761e815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.165.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ddff88-2a34-4618-adae-d8b756113a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.170.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97610536-c5c0-4580-acd6-29d610f9f969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.177.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705a1583-58c8-44ca-956c-dc02239180eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.21.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019e3639-a51d-4fad-b9c2-e3b57cb7c69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.210.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01077c2b-61d9-4689-b7ff-b7e75dca6138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.22.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b91f7d3-2abd-454b-a59a-8c6a491dbd0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.221.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2728086e-4cee-41c3-b54e-f3891b7457de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.229.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbeb79de-1c23-4bd4-a335-4d0c632da015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.231.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb377f46-f44e-4f5b-91a6-91f2b7b1f716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.245.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df422033-ced9-4440-96dc-791b63fb0f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.29.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26227ebb-4a04-48f0-ba8f-ae11beb13e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.32.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0866c70-ffcd-450b-8c73-c264f45a4716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.51.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdaa26d8-3c2c-4cca-a059-11a30b3eb820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.53.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c68923c-856e-47f3-89ec-958775a6b81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.69.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff9abf2-74c8-4976-8308-a3069822e156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.7.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1238ff2e-95ab-4471-aa38-fa1c5bf1ba57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.70.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b691eecd-f6aa-4ad1-82bc-f17abc284c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.180.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab560192-9afa-4482-a10d-42dcdc0525ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.215.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c7fa58-8ed9-40f7-9a52-47de7927c222", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.9.60.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b211a07-dc46-411a-9f57-5a40b40a510b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.0.7.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15610f3e-4ff1-4751-ab81-00a242ef8515", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.106.161.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34324e6-19c2-4097-8b4e-1fe3a9ee12ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.120.129.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42fa509c-4c4b-4a7e-ab6c-167fbaa0df28", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.163.156.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0899e9-61ac-4d11-8b23-7e962822b787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.188.100.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7df5a3-e4a5-4f60-9543-e681dea264c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.225.136.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48a9a97-e01c-409f-9e40-5f60517ef668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.226.7.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0b9f5a-22b6-465b-ae71-356f9d96eabb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.29.172.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10926b2-5ec2-45e9-a68b-bf1cf07afdf0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.68.217.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726acf02-b75f-4300-b271-66ea1d613153", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.76.10.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d13b1f-8fa6-4589-9a68-5a739560a26a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.77.107.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a9a494-7420-47e8-8cd2-70b9bcd1a2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.104.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93552d84-4b52-4d2b-a520-a3345ab2c139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.108.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b601a6c3-c475-46d8-88f5-bfd2969b33d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.109.0']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c30bd98-3656-472d-ba97-c53640951524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.108.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781b29a0-d5aa-4b52-972b-1d14003fd9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.22.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e987046-0d58-4223-ab46-b39c9208b9d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.43.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a137b0b5-ec34-4d4c-a5b8-8e3acd339618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.120.240.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf69c4e-8c09-438a-aad2-1256db268e23", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.14.3.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e893a656-c106-4b65-a05c-4a9bcecb672b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.219.151.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64edb837-8fec-4ce0-a65f-a4dfea509adb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.219.64.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2dbfaea-d073-450a-9f40-8df13f149da7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.243.155.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1bd9a5-66bc-4f7c-af58-089250f6bb37", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.251.244.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60bd2f39-172e-456d-ae67-15b53c96f4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.4.161.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692a7130-7181-4424-bc07-e05cf1ea1b57", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.51.92.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d8e589-ff76-450b-8ac6-c3b7215b7c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.55.63.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b43abb0-c05c-4fc6-aa29-0b1102ed5af9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.74.128.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c860f0-cd5f-4dbe-8137-f2c133815a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.136.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1c019b-3f3f-402b-82e7-461fa91bc5af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.139.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18399ef1-27a3-4edb-8cff-bce7b935eaab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c6b133-02e4-43f6-af81-fd0e5dace6e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2235a7a-3c72-47a0-98bb-89f91bf8d2df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e9bf35-ef2f-4e90-aac7-507c328fb6a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.146.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1306fcdc-2391-4334-b04a-cfeebda1696c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74174e6-685a-4d7a-97c9-27f751556aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633481ee-cc15-4353-9088-4bd56af73b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.175.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05f63b9-a64f-4bd1-ad49-c2b55d1025a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003fa2c0-29bc-48a9-8108-b91c7c57eaa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5eb088-c6ff-493e-9d71-365ca4ab9c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a00934-d864-46e3-9b31-da051818b2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.96.13.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aad4ad6-5be9-4749-b81c-65e88693126c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.96.48.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57c1939-aa34-4aac-97b7-b312d11dd72e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d4a201-6d76-4fa6-b946-0af21e58d142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde80cc5-73ad-493d-a43d-e0ea001b23b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127f89c7-ee02-4e36-97f5-c3f0ca237f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ef91f3-9167-4ed6-b031-edd5dec146a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f58d8fc-57f9-436b-9340-7733bcea8aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74275488-7c8e-4887-bb9a-8c1663f8cd7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77ad06b-a211-4ada-92a8-2f7f87d408a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee63b4c-d980-4057-b105-3ff408b60506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e87a9f-0805-40f6-b4ce-61a2391dd17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879e5aba-d1fd-4cfc-b542-99bdbe5cae61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e010ecb4-2962-4e32-9ada-d398bb64803a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6675ef04-c51f-411c-b095-3d6bf5fe5589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eebb1100-ac6d-458b-b7c8-58c8db0802bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6414c83d-e135-4da7-a7fb-1e5bed4425e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68af717c-2fc5-4a2b-891c-2b86f00a6346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766939fa-c99c-4aaa-81d8-0f19b9022981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee023452-e73b-4bfe-9773-9f46db936c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b597776f-b0f7-4623-91f3-daad2836012c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9e584b-f4b3-4096-b47d-b9da6022844e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c02af08-678a-44a9-985f-a50b62c2ce63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3bcb91-55a6-4f4e-9937-0239bae37f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef3f0fc-3b75-4fbf-8733-943e2013b6a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e4c4f7-a8b2-49f3-b64f-d6b08a85d527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769e6bb2-fcdd-497f-a37b-0e7f76ae01fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbb0a6d-24ae-432f-94f0-ce5f49f87a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384d755e-de36-4169-b106-95101f3c40ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee282c60-a743-4a88-b6f8-12d139ab5bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3641bba0-db84-4c18-96f6-367986e7662c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b271f90-3337-4f96-b4d9-80d2bfe06103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f99ac5-d595-4429-b86b-aed3b3eb0ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025ec0eb-dcb5-4635-9a83-4963a7be2810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf7b624-ab6b-428c-806e-a2f7c06008fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c690e043-46bf-4283-9a57-21f2fdf51e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c099169-0514-47cc-a572-0a0afd0d7031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7f8737-e1c0-4c73-9915-8e0b2ea10d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df69b423-b68a-4e37-81b0-d430c3982d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a640f6e-155c-41ae-a6b1-436719f81bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3841d2b2-5388-42e0-a3e6-32f61847cc05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a265c5da-d4cb-4f59-b568-a65b9deaf7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f18987-6e04-43ba-8491-852d888fb2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43f6cbd-2519-4c90-8eab-2abf57bedeb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b543399a-d80a-4de4-b014-b1c5f063e5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1ac742-9392-45db-a360-9d9dcce3dd96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b817eced-b60e-461e-b039-27c619722e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee69054d-4830-4a95-9838-2632101f3dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.170.247.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec55aaf-9b5a-418f-b92f-0d51132226a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.157.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b60f30-e3d9-4e15-9bc7-92f21ba27cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.182.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b71e60-e06b-4d16-a831-e51007e96a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.90.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f8496b-c0cc-4c5c-bc5e-f94975dd1d4c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.24.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8899210a-5b9c-4633-9f5f-7f540d977774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.30.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd2ce06-f2a4-4ac3-a1cc-ca8fef4da180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.20.23.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b112e1b-14ca-47b4-b3d7-0882df48e5ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.22.139.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab2f4c5-82ff-4a42-8207-0f65da01d9fc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.167.177.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e204b13-3d01-4be3-bd63-ec02af34bc80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.17.61.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86bf2583-e566-48c8-b36c-3397ac5e0d46", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.17.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f28ab28-3a88-45a0-bd48-980b348bad5b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.220.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f49835-8c11-45b0-bfc6-c13438ffbbc4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.56.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00b62d4-4345-42e4-ac49-849821298ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.63.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c13cbee-e954-4164-a4ca-7c4be0c3f181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.34.48.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbc32dc-9b63-43c0-bbbc-38b77dccf1f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.194.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64b7dfb-af85-46a8-8465-89237ce76ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18fd0dc8-2862-4d9b-be75-b6eda8bda4fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7caf9cbc-9ba0-45e2-be3a-177a319a8b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6364718e-7d5a-4265-81a1-6a7ea407c6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a96224-eb33-4d74-86f0-1d02eb415a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc017fe-b772-4432-a5af-c8737db1e90a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6bb5ed-7185-4db2-96a7-8a321f04f366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71eb0e8b-fb32-49ec-916e-a77ccbb4dfa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772df92d-6ab9-4985-b138-0d695e45a674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e25599-3122-4d0c-8b64-50066ea24658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e5279f-c0ae-477e-b852-9da33e8ad8db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a31c6d3-b6e4-4e4b-b085-2609e824a824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8791aa-070a-4fbf-abdc-637ab52a4744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6588ec2f-3433-4ab2-a621-8a63c96a50d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ad7c51-e655-48ee-ade3-1d71a5cfeeea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ef66cd-fee0-427e-ac68-7f788ed2f323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f594aa1e-942c-4669-97a6-6a5ebefe96a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da981757-7267-4985-9528-8594ae3f2769", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.107.224.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b698f8-5763-4637-97e3-7074a315434a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.107.242.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671252f3-40da-4ec9-996a-c518f3b96229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.110.35.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1033682b-1926-4a66-a296-5f9a913dc5d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.206.241.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0d4fee-b867-4fea-98c5-8212710d8933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.207.174.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3900fbf-ecea-42b4-ada1-6ce434d54155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.237.96.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d373e756-b38d-450b-be06-720d4ecc1020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.252.221.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73784294-2231-487b-a040-d579bf32929c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.70.100.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52a9267-73c7-48d3-9062-a4c4912a73f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.139.239.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35df49bc-9e05-47c5-8f70-478392283101", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.139.55.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82561833-de0d-4a23-91ee-30c0e670de69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.159.107.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974e021e-17fe-4953-bd73-aced6823cccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.188.66.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2708e8fe-baa7-4bef-a502-b6aeb7ef28d6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.227.191.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bc7867-1aac-48d1-8396-16a5d62b1793", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.235.184.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a186d2-2a23-49c5-b041-c9a1c0e535ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.38.215.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b019eb0f-7b09-4107-a0a1-54c2bdf98edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.46.12.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46dc4a6-1a1f-47c3-bdcf-4f569d3ae751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.87.105.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20888c10-639c-4b5d-a5d0-4772bbb5c695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4207f4-f282-4650-92d4-45aea90cdbd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4bf9a0d-86f1-49db-9042-790e1713674e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.162.149.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd971eb-a714-4a89-bef1-57b0d6955880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.196.133.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3ea107-a15d-46cc-95b0-6f6960ba3422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.21.50.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db74deb-f706-4d7d-8d36-c8ce6b2a5803", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.225.214.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8deaf3c0-fc6f-4ca0-a728-278c50c4bad7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.225.214.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59e0ac4-fdcb-42dc-a462-e6b4b3ecae28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.242.245.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d463f8a9-3082-4332-a462-861225d6a878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.255.68.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb35bc2-8f48-4722-851b-64e5041a806b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.29.38.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01fa0bb8-06c9-4107-a264-313bc96b13cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.30.98.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03d430b-0691-43fd-b0fa-4bb0aa3b2527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.47.22.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1a41f1-4769-4f26-9954-8de780e60b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.55.205.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894a595c-c06a-4498-867a-6ba5f6091705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.7.96.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ff4b71-ba2a-4c40-8347-e2671d6827b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.1.79.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a721ca1-f4d2-4c34-8f27-0a86c64bea8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.102.227.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb3c418-b643-47d2-be02-2334bc2daa70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.112.16.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4327700b-4e73-4df2-a8d8-6ebc8ba3cf26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.124.67.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a0330c-81ff-45a6-bdec-f4639613505a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.135.172.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7676b479-1278-4a13-b4dd-9d9ddb670fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.151.178.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d8ad5c-3216-4241-8674-3b90e40350f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.156.166.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409073d3-d1de-4005-9d4b-f85baa97c79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.158.147.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f21cc8-1ce7-4d5b-99a9-ff8213e3510d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.166.31.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb90389d-060c-4619-8f19-2a240c520393", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.201.242.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9090fdd5-812c-4f19-a11b-2f5c923b4a4d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.202.116.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032bad56-fae6-4a2e-96e1-bfbf8ee12c2d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.203.52.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15b2ae2-d053-47e1-90ae-134a2cc0d8b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.204.159.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d513be-41ac-49a7-9ba3-9899b6d68a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.212.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14291562-c332-4302-9cab-f27de77a5a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.217.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ec28a0-f114-4d76-9cef-925afbeced30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.6.212.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8d13cb-e89f-4e1c-bc88-86b95e84c848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.91.117.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4eb143d-23b6-43d7-ba06-04121878d538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.252.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27c086e-483c-4c24-be26-75e88f2cab0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.253.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db952b1b-2692-4443-9e09-c01ff8dba8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.161.222.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c30a85b-e0d8-4712-9959-815844407945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.161.88.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f70a5657-e1cd-4c75-be52-0ff3658772c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.162.54.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316bdc43-02e5-4d6e-9572-b418c0fd5c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.172.233.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11080df-c074-4db5-b91d-eb5d7708403e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.177.27.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13f7146-43a1-4d36-a66f-6b154713ac50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.211.215.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4357efe1-33c6-4c28-bb14-ef99ce041128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.249.30.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6dd070-9607-4dd6-be4f-4f3ac9ea8128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.250.177.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a082d4a3-be1e-4ea9-b1eb-faab1fa55976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.45.39.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b11ac78-88a9-436d-9210-47e1f960f225", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.90.83.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d331d078-0c97-471f-aff3-7d8d1ab2a247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.96.35.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52dd21c0-5d8b-446e-a2ec-aacca394406a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.96.35.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947f719f-213b-46cf-becb-8505bd1f8bd6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.10.46.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e55cc27-08c5-466a-9d6b-8423c3fd20c7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.129.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb016fcf-9789-4248-9c95-812bbcbd4dc9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.130.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212cf202-2ed3-4568-a0dc-eca03d4088d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4fc80d-6cd8-4ed4-ac6d-e7c0ba078139", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b7c495-61e0-446e-baa7-db44b3fd8859", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9dde82f-cf89-4537-8133-2c95eddea673", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fabc30-5a57-4a22-a410-f7d8ba105fcb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.135.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd51875-e0ed-430c-82d4-61bea2d0962a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.135.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c263ac5-bcd6-4954-bc10-7897b50753d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0888072a-4ba3-4990-807a-702f9b400b14", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a98117-8a3a-40ac-80a1-eccf319a04e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5a398d-fb16-460c-bc27-462250bd5a82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.138.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7522ba-cbd8-4b7d-978b-b99f2e1ae2d6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0e7f31-14d2-4055-9b21-5a91b2f35c1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca2c253-496f-41c2-9390-4df75d9a0556", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb3d356-d188-4624-937c-aedbe8ea6ac3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.143.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce84ffb-b58a-4c38-abd9-cc27327c1046", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.143.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bacec5c8-072c-4a50-bb70-389a73ab101a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.145.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7631430a-e04f-4d60-972a-605136ad7764", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.149.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce267791-25cf-4577-a0e9-b488d2117030", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd050c0-fbd6-4a38-a005-24817f60ef25", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a12353-e8ad-4baa-90b2-9321ad9a6ccf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d61417-99bf-4c46-a654-aa9a7ca2eea8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2db4f85-1b91-4cf4-9644-1e1248d33f75", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.154.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dabe29d-cc35-4b7e-8d54-4b26f3ff8505", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3545238-a484-4f3f-aa30-ecf3caf6513c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2a18d7-5431-46b6-9fcd-dfe83a254f29", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.157.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e623ae-645d-4f8f-ae19-cb0b00704d4b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e8c31d-d33a-4c19-8e4f-19d255bdf65a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.165.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53de487a-7ec0-408e-b1d5-b1ceb46abf4f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.234.101.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998dfaad-12dc-4865-a1d5-434121d0c128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.29.11.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d82a3f7-99a2-43ea-8f49-fddc5b5c9f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.156.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b357f69-5814-48d0-987b-cf3f74229f31", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1d1da0-9635-4f0d-a402-f4c2de82b133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.47.12.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2198a9c1-ab9b-4e09-8570-58e5d0c1f35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.124.73.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d1d9ff-e89a-4d67-8e06-05f690673e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.151.72.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e8e86f-d803-4b23-9338-14f66a55f465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.153.152.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6f18e2-ae80-4a96-91d5-6ba4dc4bec42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.160.92.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fc85ea-58b4-4918-9b1b-8407a27346c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.165.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b9b129-5bfb-4fde-af5a-36c8f202e1d1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.253.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcbeaf9-0c66-4658-ae98-0c862821d9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.192.236.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14420031-ecc8-4c23-a0e5-2bc59b9e77cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.78.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7973518b-d4e6-4ee1-9230-45b2a84d3960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.49.102.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36216e2f-2271-4ea0-b9a5-6abbc5c70655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.101.68.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa3269a-acd1-4fd4-a205-c9569c11af65", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.149.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23aa84ca-d734-4474-acdd-fd25a23c26ef", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.150.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132d587e-18a5-4101-89ae-08db368b0c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.152.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca9f20c-0b29-4b24-88b6-38a96028ac24", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.211.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfad868-c4df-48d1-af8c-e5d405c5a8c9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.217.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3638ba4-ea93-4530-bf53-1dabb5160dea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.43.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fbfdff-2a66-44dd-896c-82efce04740c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.123.150.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7489d0b-b645-438f-b8d0-67ad400652b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.140.30.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601f9de7-c1d4-44d1-9b4a-faa765f9d7a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.167.4.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a77528-d691-416f-a921-4d5e3e843f80", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eba1621-c497-43ee-8ee1-8b731ca9155f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c5bf02-7968-449a-bc4f-33805469cae1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c716de9-9b75-4c62-9c1b-8bab934b5513", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9a75da-4fc8-4abd-aee5-167ce2b56cdf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a07f4bd-03a2-4955-8d91-574dda775340", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa83058d-4e49-4de6-a8ce-51ff91719e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.198.220.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401657b4-e059-4f85-9254-6ee7795e3ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.202.174.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dde8378-7efa-46a6-9123-8776d14054e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.255.155.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980e524e-a2e4-4353-a6ef-baa80fae8b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.44.232.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bbec8d-da7e-4a7d-afa6-3bde55f21444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.5.85.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fddb9e-279c-459a-92d1-de8109d7e811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.167.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfff77e5-7524-4143-ab77-604ba1b54bdb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.90.105.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5add637a-9052-464c-8c19-fa1534d973a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.90.97.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05aeb047-4451-469d-9459-81c4e65451b6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.172.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16558bed-648b-4564-83dc-e64e838f60f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.107.163.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936d64a0-405d-463c-a1ff-08a39946fac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.136.1.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3a3582-790f-41e4-911c-3288e6bcd05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.14.172.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e10255-105e-42ae-87de-048c5e3e5e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.15.92.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce57ce8a-8d97-4de0-9535-4d57534b900b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.177.102.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3d2fb4-3ab2-4cf4-a3d2-5ceddd8d29cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.193.124.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7aa3cd2-ba34-4bf2-8a46-fe800f55b3fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.2.125.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72453a89-543a-4893-8134-cebc5edcb11e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.2.158.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9423c4e6-42dd-4bc9-9801-782e73c047b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.24.143.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e96622-8acb-4721-b271-60c70d1b6343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.25.124.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f810074-a13e-4e3a-be0c-c69ecee7385c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.25.149.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d361b8b-f457-488c-bd85-e356defb902b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.27.161.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5446ba47-d377-4f12-ba15-e5e6fa38ac06", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.5.152.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c243fe-d7dc-4c03-8c40-0977f923dca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.127.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69623131-0305-4682-9426-414b869e252f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.44.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113d3b06-f559-4a15-8fc9-1aca1a633b75", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.212.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc35e82-0029-4443-9d18-02736e424e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.80.233.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c17ac1-1961-461d-b2a2-124c5dd4e890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.88.69.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ef2a97-966f-46eb-bb82-2e80c8759724", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.173.32.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf760f9f-6813-444c-b1a9-a4d4f7ee5994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d987861e-e5d3-4f1a-aa5f-32f110479f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643e68cf-6cb8-4c3a-aef2-1a9e43e6686b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45e2815-e8da-4f71-95b8-f5feb5fb1782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489fa19b-2502-45b3-a0ee-26b31cf13e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426a257e-6ac3-4820-ae31-e0ab7b3485bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6331fd5b-31a6-4ca6-9e3e-486a67194b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3e9158-238a-4b8d-8b4e-7ad0e906b089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.39.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d731709-27bc-4c58-bb61-4083625f5c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9cb09a5-932c-40b3-a966-d08a956e1f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99070773-66dd-401b-810f-7e02b19d7560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47f194d-c225-4689-9d45-612e3170582a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49cdaf91-14c7-4305-8a4d-8eb474d8e03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644b9a8b-a211-4752-be88-89fa034a64cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360dae37-2718-44e3-8529-cbd629e5b30b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d97143f5-f587-4327-af2d-b704c9868a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23747b4-4369-48b3-a6cb-ca610e0acdc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0275407b-15e8-4d16-938c-e947fb5571b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba39a44-bfdd-47d5-929e-68010d0664fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118a8af7-b61b-436b-89da-147dd431c71f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c885ca0-fa1b-4502-b332-3a5c083bab2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49be491b-530b-4850-90cd-d72132bff50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057ebff7-7e21-4012-9094-23695c1b83ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f036a3-c02b-4382-b99a-9e56e6b68df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4cb814-ea7a-4129-83c9-017e2d609124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abef78d0-0ea8-479b-9fba-dd671bdbca9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0275a427-6ce5-4c38-81f5-62424e4d570c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1b9cf1-bfa9-4035-8b8d-db92e231ab9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587e51b1-1000-43dc-9f28-a484265454cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607d1f1d-0195-4f9b-8047-cbd234da466f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34173513-0467-439c-b70a-a894997b3554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f444cdc-3066-46ab-a3f6-857b2a7453b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c7fb69-f6bf-4431-9d08-a0bdc98c6042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122970e8-1357-4b7f-a13b-3b4dd9d54ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cfc3d49-21ee-4b5e-a42f-0677b91b1d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.72.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa1f2ea-35e3-40d1-bc8d-b943edec3ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e8b60b-262a-4071-a6b4-c139fc1805f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7edbfaa8-1793-4e31-8af0-91430ed0dc23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044888e3-83dd-49ab-95c0-d8cf8caebb2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4388e95f-e02e-4c4d-b17f-aee7db6478d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be04857-6b91-41ec-ad1f-c424a6804317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7765dc4-074b-498b-92f9-4c268e5ccd08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a88c6e-d547-4b43-93a5-cb53b71ff42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1406b0-2488-4a9d-ba7d-cdba9cf4c7b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.238.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--142790d5-8e9a-4ca9-9006-ee319e956d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--009b7bf7-0e3c-4648-b8ac-cb329b0b0ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8550cbb2-7cf8-4e28-b5bb-7725c556e5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd790f8-925a-4ee0-805a-4b3d19f73177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d6172d-9acd-418c-a93b-85ba31814ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ddf616-4eed-47bc-8127-45e5b7c0f77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c9f31b-8ade-4575-84f9-52524a229851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd81730f-dcef-4072-8b46-8f206ba75525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63dd92b3-00c8-446c-a452-45f11f903298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de533dd6-587e-477b-b96a-f0f27a843570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4633ddf-d412-4659-9d38-c81d5fd056c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec621e4-e0db-4b03-b87c-02c727692d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b64287e-5fb8-42de-97e2-54f076988c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb722d9-6a21-4287-b265-239fc971da69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140010ce-12fa-4dfc-b077-eceaca9ab4ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.79.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67bc09d8-7118-442b-b3bc-b75a2525a0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.201.247.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de80d9b-dfe4-4530-983d-4a5fd9c80c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.216.88.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081f0768-8aa8-48db-8079-82513a3afb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8369216-e40f-4069-8996-f65b653a9460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a257ba80-b25d-4ff3-b075-a663b31d7799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7104b58-3454-4b97-9b6a-da29f9a22945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9d55b0-72b0-43e6-a1e2-39812cb940d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d22aa76-5f91-4857-afd3-333727f42a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8588d9f3-0e4b-46f6-baa3-5d8f06e44524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7a6547-892a-48cb-8be1-067f6d23d056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d41e17-d3ea-418f-af3a-362fa43625be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.110.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd83fb76-f160-46d3-92b0-5507ab6372c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58afceec-36a1-4688-8c8c-ca7b75eb74ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6346cb48-9d42-44a2-aedb-820d54ca90ed", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1318b85-beb8-4a58-b95b-9eeca8fa64aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.37.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb5b861-00fb-443f-a1a2-b60babcf9639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.38.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5b168c-f215-4ba0-b556-bb9334ba6c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.31.49.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e589c21-c7db-44ab-ab6b-a6d9b638f845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.38.44.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4178c2ae-3d1b-4848-b204-f12b416a1e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.41.137.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb61e4a-56d1-46da-bd45-75d47901f2a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.81.198.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5cb097-8e2d-4518-8185-d9032d2393e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.81.203.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d90e57-1d79-4848-91cd-caae0f0c5483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.81.204.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61c1f31-e2c8-42e0-b8f3-63c961f00626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.110.235.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ece1589-7661-4b58-8f58-0137f82ece27", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.13.56.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e22ac86-9e12-44ae-9ae9-33a380b59b2d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.156.28.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43a71b2-6460-4958-b8a8-6e7c6009041b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.178.164.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9def0dad-cd1f-4818-8d54-1735e5b50951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.190.231.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e86540d-52c1-4726-97a1-28c13e240389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.193.230.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94384216-b8fc-4223-9785-42aca0aeb11d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.224.65.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b66be0-ed34-4a17-b34a-03e6cae08670", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.249.100.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c278a272-98a1-4ef3-9832-486f85a8103c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.29.198.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82ba55f-c333-496a-98b8-7cfeddfded53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.29.243.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d6dbcd-47fd-4b8e-ac57-98c2484a1a01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.3.162.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8857dd1c-f8f8-4d5e-bf64-953c3984c8ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.45.7.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96834f41-50cd-4a11-b841-041094bb87e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.48.134.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a74fde5-16ff-49c5-a67c-630145841137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.65.80.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fabcd0-d7b1-4eeb-8757-345456d98073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.106.187.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a330f64-860e-4cb4-8abc-dbdb7e292a8b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.1.4.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1efce1-f670-4c61-9217-35d43d70bd54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.194.6.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084ebeeb-6c1c-4213-be64-e422891b940d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.195.54.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa547d75-5546-4068-a7a6-d35faa7cf3d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.195.54.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e9fc31-a3b2-4312-8d6d-f4b6777e3d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.231.208.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f328d893-f7b5-4145-b68b-3693fcba7769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.39.36.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad446ea-28de-4008-9371-b937c2af14df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.42.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f246fc-a903-43d6-984b-4a96408688da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.55.59.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5e6ba9-2c7e-44d5-8f23-3e0714fc0d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.78.9.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1085c7-19c6-4de7-a5e8-ed6b4d15d325", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.89.65.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c6d6d3-9aa4-4eec-88f1-5417860368ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.1.173.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0fdc09-5dcb-414b-8ec2-f8556b74aaf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.12.155.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0522bf3c-22ef-4a0c-b531-02593f2951b1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.122.119.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22811fd-388d-43f5-82ae-3cf9c683c304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.136.59.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9306bfa2-39a6-4d7a-b265-11f507ef9dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.137.29.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fa581e-a3f5-4449-8f45-e9c21ac14508", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.14.34.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4500c84c-79a7-4f64-a494-0265ecb165a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.157.46.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e95735-afe4-4d9e-b8a0-5d434528c1bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.169.155.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36078ea7-b5be-41e9-9ef7-a5022d699807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.172.111.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04a5c1d-089b-466d-8718-cf230ed5389f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.180.67.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e47c78-9cbd-471f-81ea-45b73c510f56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.229.202.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfcdf4aa-1c47-4db3-9e6e-c42530dc3ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.149.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe1b699-6179-43e6-9d2e-d2dddbb5cc05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.149.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b515079f-c374-4e05-a30b-b94b7a965c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.84.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048d2778-c1c2-440f-8cdb-5b3c62b033f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.85.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711e2866-b396-4e77-8a08-b881ef4b1f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.41.171.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c7433a-4d02-4fcf-93f6-c0f179b484a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.178.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0eb89f7-ce52-4292-b223-fde411c3ad80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.78.125.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366e9ba7-b39e-45ef-a5f8-e76a87823d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.103.98.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0db490-b1bf-4ec4-bbb3-a80bd1236036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.166.49.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06915231-cf22-426e-b5da-3f8fc2c4cbfd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.181.102.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a92531-0a6a-4ae1-b052-7b3311ea5e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.191.115.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28868a1-375b-4150-9f39-f01daf47b446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.243.73.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb65dccc-7b90-424e-9ba3-33e7d749a099", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.52.233.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e467f2f-d2e8-45c2-a0a7-e531c5de6947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.54.143.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95e4546-65c6-4d1e-9279-4fdc72250904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a228af-337c-4b40-aa15-8bd8019068e4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.136.31.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5067ae9d-7ff2-47b2-b72d-fa9d17b336ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.138.18.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86897e3f-72ba-42d7-9514-3a066f1faac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.138.79.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e22ded-7074-4fde-aeda-1d3e855d08f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.14.120.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf9e23c-84db-46b4-85a2-bbfc3d33192c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.141.253.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832fd344-e7aa-4de8-b0ab-f481777703f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.144.27.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4829d0de-3c24-4c9b-a13d-092b6a85a30b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.145.28.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cec8062-a13e-4e0f-8e5d-d50d92588f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.154.2.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451d1cbd-d0a7-4658-a149-570e9c4814c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.172.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--488ce061-d0e3-4a6e-86b4-623b500e1f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.174.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4fd79e1-71d0-4829-a6e2-cd0e611b3446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.233.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ab3b2f-ddd8-4811-8817-9af69f245e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.163.114.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64fdb98-8702-4b4b-b486-489518f9ee1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a66ac85-21e7-4882-b9e9-7f4f541cc93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f613f115-1e56-4d05-bbfa-42d02758fdc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46528b65-f79a-47c0-bece-8eb673f4fae3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.207.200.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4ae6c3-4bf4-4e54-8c87-e2f3f1d03cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.209.127.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b769d02a-ada7-4ec9-91c8-27b3e0f57260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.233.239.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84615140-318d-4740-ac42-c9e9c4f6b28c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.233.239.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9cf9732-d3fc-4932-b908-263a65f8a085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.24.206.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cbb6191-deff-43bb-99bc-9776a6aac0ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.84.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbd7be7-d98c-4f9e-8418-4b1eda944c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.85.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a2bc2e-b13b-4f4b-8bb6-9dd706f9dbe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.85.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff487ce-8bff-4f98-8184-96e68f76fe33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.25.115.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e06b86e-e58f-4198-988d-2a819aa23892", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.253.162.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e671ffc-7417-445e-8801-7789802903f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.27.253.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45143d12-3e63-46b4-b6c7-a9ac82b542c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.97.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd34565b-fac9-4d78-b677-e922062e927f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.53.79.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4614a66f-eb81-49cd-95b5-76e337758a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e484bf7-e93d-48f7-9984-2a87c009ba87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4d6617-d956-4dea-a3b9-1fcc48faace0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e12e38d-46b3-4b25-9c37-a44ad61894a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee4a653-9352-4b83-b58b-40a0f4dc709b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52bd2c80-0567-41ab-b42d-76263ff5c2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591081e9-e540-4e49-b861-376e1858552f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e647475e-0efa-4ff4-911e-b61cb3d2bcb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcfc4ecf-f87d-4628-b6b6-68aec90b90ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.59.4.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a974c3cf-51bd-495b-835c-32d436cc7696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.105.174.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad09752-f606-4f5a-bfdc-1362bd3d1cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.194.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288409d8-dd53-4f50-87be-39041c8f1e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.195.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca4f658-ff24-47d4-afad-1e194bb1e280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.195.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13778dc7-ebf2-477e-895e-1cad667654bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.195.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d158436-5f80-4ffd-80c2-61934b3eda6a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.120.178.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b47e671-a55a-4fbf-a837-158bf1868c6b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.174.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f1c74d-f754-4c75-9c24-44c0132204f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.204.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3631047-7df5-4074-97dd-9a1c9f03d48e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.225.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378b3e24-d46a-4728-9139-4ce91fcdb59b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.158.184.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a53184-a780-49c1-8d07-01af6abc6baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.160.203.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986f1e02-f307-404a-8aca-96a441b500c7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.174.86.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a998a89c-a67d-435c-ab06-cc5259dfb5f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.131.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd3d0db-80b9-49c7-aae4-b5c382501af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.221.185.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37d45a3-8d7e-4e69-af9f-c0680954f98c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.31.106.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46dc6032-0536-40f9-8410-7525a5979102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.66.75.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1db07b-aa2b-4b9f-9381-874c17d82dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.74.104.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329a703e-b82c-4edb-be12-396f29c00edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d509264f-c9a8-4b4a-8d00-cd3a54a03c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c6f8d5-397c-4dde-be86-b1b06087fd64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9305cd-4160-4eb3-982a-3084940391f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.89.119.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9482d68f-cb24-4207-9407-5b79f9aaeac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.142.80.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a87d90b-2bde-4565-ab45-227ca0f96339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.20.210.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b4f49e-d800-4d35-becc-4ee9492717a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.23.248.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab67ae37-44b3-4060-85e7-eece13885476", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.31.4.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7931048-e5ae-4910-bb1e-9d0c93ac8d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.32.113.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6ffb2c-b108-487a-91bb-31660a346e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.45.231.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee88b27c-c2da-4093-8fdd-5d7ac6788053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.78.32.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c09c41-afcf-4f4a-b789-73916979d80e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.80.219.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5da5fe-061d-4644-8f72-57718f761341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f095ab1-8fad-4b59-b9dd-4c12f7856b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c600d60-79ba-414f-80fe-aeac925e5a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f67905-355e-4eef-bb6d-5da91e2169eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.44.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e99d10-c0f2-436a-9434-5741f58f221f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6ad9b0-3a33-4cb0-be8a-656286c497ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2763fc94-1200-4a1a-840a-0734a5afda39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e660dd-644f-4ae1-b90b-747032dc59b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360daecd-64e3-493a-a74f-c7019074ce74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aea8fd3-a02c-45d2-afd0-3b0e288d847e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889a4357-a0df-4f18-9bb8-075023769229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e407ae50-dd29-4645-aa13-9604dc86f94e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55103ca-a2fc-4ca7-95dc-a3a08321f1a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef20428-8bbc-4df8-806b-62d11cca8402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3cb80d-0d8a-4880-972e-c8f7c32d91ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14705fb3-88e4-4cd8-8e8e-1b3311085c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c292be3-c843-4e9b-bd15-b44255989fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.204.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437cb869-15f1-42f4-8329-d6309cc44f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.225.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f702da7-862e-454c-9470-521e62a8f582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.255.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a64c3de-daa9-4aa7-b005-5063d54730ee", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.64.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a08672-6d2d-4dfd-ab1c-f7bc4805c65b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b62acc-ec7c-4dcd-9181-31a963a1c196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24cd4e56-5bc5-438d-9114-72e4a7cd1767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67e8672-af4d-4a41-b929-b96a79994d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.202.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f75c02-3dcd-4cc9-ac7d-e689de3e63eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ceb53b8-eafd-4607-9608-c5e0e7c11525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.79.136.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92dd08e6-f94a-4a41-97a4-2556cc0edf56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.8.124.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e582df-6c26-4190-bc87-40a996e20b21", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.78.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909aac69-e4af-4462-ba72-31c3e6dc89ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.90.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0897c1d-5aa8-4de4-91fe-e48dfd4bebed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.152.24.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5e153f-be9d-4fed-8969-22a4a032cf39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.153.133.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e846e5d-bda0-4d34-9417-6e39e7eb6986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.212.231.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842a084e-b79e-4104-adbd-ee3818d4c83f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.224.207.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35920130-d94b-40d2-8b55-5e32a35ae863", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.122.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70be6d0f-1a44-4a2b-953c-b3bc22744702", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.149.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99562523-730a-4add-b83f-44a2f76e6ce6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.88.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077a8c44-2655-4257-94f7-b10281aa404b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.94.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76fee6d2-3849-42fa-a605-eb878e9d1209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.127.222.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfaf947-a2a0-4941-bc85-0a147fb7c2a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.231.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a0ca3d-f9b1-4e2b-89ae-aed7c55d14dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.73.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a655ed1-8393-4199-8921-c5769d0a0313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.113.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a1b8d7-6afb-47b5-b92a-ba789752f8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.253.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8ced30-eaa1-4440-a726-76b759471e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.244.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a24eaf-008e-46d8-b093-d3f84e11927f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.222.142.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3bb166-f7ab-41b9-89e1-785ba780e9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.222.228.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3517bb-8b7f-470d-a819-722ec525b78a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.61.100.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa01595-69b1-4f56-973a-05a01823f847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.71.3.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ea76ca-8500-4809-9f3e-357a507744ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.83.235.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e05bf4-0a2b-44a8-bf89-19afb54dcf97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f70e68-5691-4d10-a356-6adbd679a22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3e7b94-8a98-48bd-a460-ddfcd9b77515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.112.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c181027e-34d5-4bb6-8eb6-70dc75c97e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.113.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f48a96c-63bc-49c0-a0b7-54748448afef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.115.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551c55f1-6c7b-4127-9683-018bbb040e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a552d652-de50-4956-bfb9-acb0e8f6fd00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c8d174-5ab8-4f3f-81c1-8f6985766f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.117.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1384a616-a1b2-4c07-9ebb-b0fdf0e9a8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.121.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4fb03b1-fe9c-4c24-8de7-17b189b79588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31d9882-d03b-417a-bc1d-c8977f852847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be064b44-cb89-46d7-891a-753753cd400a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9849e459-e596-4e04-959b-2a2340515eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e053d8a-c8fc-4bbe-a89a-346e2f395d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c7725c-ffef-46fc-84ca-c578f5f1134d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3f05d7-2e22-4be6-bc5e-1903a796df58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e0a497-d57b-46a7-ac98-499575541c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23b6607-c524-4f07-a960-a8763529daa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9feac244-a47e-4739-9c48-5da99948cba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c42187-6259-40ee-9a74-c42da1bf390e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44303264-abdc-4c62-8b1b-9f573451c329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361b4e30-78c8-4039-86a0-e93d1706b5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3d22d5-7c12-41b0-9b68-9828212202ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe907821-915a-4147-aa7a-6fd1da1e6c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.182.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72cb4a2-d5ef-4c3f-9b86-ee65a002003d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.182.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a354f89b-67cc-4fdc-87ee-c7f9186260fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9551a6-8012-42ec-931c-1e5b14c38a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022b5c60-e933-460d-9ce0-a8366751b181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4549b02-9539-4fad-835e-e5ec2336d3fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01cc5b3a-9f39-4412-a08d-e088ea93817f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3215926f-2944-433d-8d82-24a2bb57eb02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.163.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10461da4-96de-4d3a-be45-a4b61c686abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.185.121.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5021f12c-2401-4f3a-a92e-830d93ab9f12", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.193.208.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e558a9d-fcac-470c-8ab1-6e2e638022bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.77.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38cb7568-296a-401f-8e2b-e8e78778375f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.82.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef26e40-e8f5-40a5-9895-f1771a2582fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.49.215.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07c11a8-0030-4604-b7dc-4c5bed352798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.49.215.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1ba458-1465-41ba-88fe-5b80bca17732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.51.22.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9085e349-2ef8-4b53-9f47-18dd50a3533e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.61.73.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d93129f-b76e-4297-9bcc-e441a8dd3bab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.196.7.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad59c3ef-8b9c-4c2a-9eaf-dfb3d8646d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.72.173.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bcddf3-b039-47f4-9b7f-7e1405783494", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.142.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c73246-339c-4f51-8015-f6400a4e9ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.155.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d83335-5113-489e-8aec-7a8ddbe97c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e0ad95-fbdf-41c7-9648-50c10d9cf7d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87962dd4-0516-4946-a3d3-c4cbdce6cde4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--009c8d88-15e2-4f60-bc7e-41ef3d2d49ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51369c07-d4f6-45e9-89e3-718b7b0b8f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9a4b43-0525-4462-a1c0-5107989f0ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24376bc-8cbc-4efc-91c1-5b2e47af75e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f0533a-b4e2-41db-8645-951d675471ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087378a6-c8db-419f-acfe-dfa7b502bdeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b414bf-471b-42fc-b61e-9c30350a8046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f85e08-9f0c-4001-87b3-38e05371e7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c28a3b3-91cf-442c-ae28-b3ad2fdf2a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448c827b-51c9-4125-9d8a-e0bc194f15cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b686e9-29d4-4d87-b198-a9bc8ab90935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472a801f-a631-4bf1-b20b-6da56ea81d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e70e068-2a1e-4b15-a9c4-d97f3d566e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c3960cb-62d5-424f-9f88-67fd639ece67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1650f3-8478-4636-aa77-50bbece04c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3318a9-194d-40df-b6c2-59ea80c0fa3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9195a7bf-b4b7-49f7-b0a7-81daedf6280e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6efe59c1-cca5-460f-a77b-b08329e732ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a401a9-7555-4e35-95bc-7e31780247d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e4ee72-7380-4f34-886c-8020d13e73c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02de9218-e909-414b-b954-30378bd3540e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b858d8-261a-480b-8b61-192ea45d7e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5fe4d5-7d40-4989-af3d-0776523e4c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e25a8e-3dba-4b4c-9e5e-0de52f391bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92bd1012-26ff-42c5-a151-461f56e2340b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd32db3-3465-41c1-8b77-169e59fea386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457d50d7-b709-41b8-99f5-535e64521277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725376b9-f4a8-4747-9f06-4fccb0ffe1bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc610730-df11-41fd-aa6b-6679a477fb3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb5a44f-25c5-42ce-b29c-ac9e81ddbe69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa545357-5fed-47a0-bc2d-d0246ee281a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527228a4-1a85-4efb-85a6-5c46b187ce13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57232b8f-d8f7-40b7-9ac7-581783554b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29df77d9-53c0-4d53-aeef-341580ce51bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb42e3b-e622-49e0-94d2-aa0e41398a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43d0e58-2061-476b-86ca-31e658651b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebfb522a-8e5e-4119-9c75-027acb58249f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.133.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b39c9fc-abe1-466c-8d3b-f672f9d6bd20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4dd698-a9b4-47c5-8b01-2ea35ac56b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e136888-fa1e-4c39-8407-43138e29ebbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06ef8ab-665a-4521-96bf-dade1ce7d7f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1e1ba5-f464-48c6-864c-a3ac50dccd49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d837d015-2df1-4853-a6fe-f3fcd3e44401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65298e0-3ffa-432e-870d-70afab876007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3aa9ad-ecd5-485a-a707-909f622f009f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e10e2e0-df84-4f3c-9847-182db4a719da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70616421-0e41-4cc2-aa97-146055be5a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8712eaae-04d1-4712-97ab-bdf1bf2a8f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b72221-5027-424a-9266-c8cbf13b88a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd3796f-dcb4-4696-a2de-06b8369e01a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c955141-17e3-477a-8470-8c0e501aad76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98effd3-e777-4742-842d-757b9568d86c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573f2115-8aeb-4366-b264-ac336a94ecdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338aa082-b3af-4163-bd27-577e00d71dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43ddb8b-bac8-4fbc-b4ec-15f932d1f53a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee957c5-fbf8-4801-a98c-89090eff16d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988c36b4-eed6-4ba8-84d3-47373948b43f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b322704-91c3-44a5-9727-9da73384a334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac39b3fc-c9b8-4b61-a310-31bd5cad8dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27dff473-7618-49d2-a590-e14e23a41dbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979ec573-b1ae-4009-9208-9f2970eef132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67d33d6-2fdf-48d4-b93d-82f0cc338869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df24fdca-1ac1-456d-a8dc-22430506d44d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dddadc76-7e7a-4633-a2ff-a5f7fcd08851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0706a42e-3c9d-4f7f-bede-f24196f7b5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a012eb-3011-4079-a1c7-684dc343c679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0460ea85-5140-4e6d-b6bf-6be761148408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2d966e-1338-476a-9e12-d05db19eb8c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219067e8-e0ab-4e95-9bf1-a430d7a287af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a961ed1-56e9-4e43-8f11-40c831da813e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee391551-f9a5-4ef4-91c1-4f4812d04291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ccaf45c-39c1-4c96-8b3f-fd8c7d51df45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd18fad-a6d0-430b-8e12-e0b02f098455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e782e3c1-7d66-479d-85bf-8a870095b21a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48613981-bdaf-4837-bcc4-14176369b49a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.135.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f87b6c-4b02-40dc-bad5-70c1c9733add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.33.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13287db9-472b-41d5-abd7-f5006028a0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.78.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3b4558-410f-44a0-84f4-7e0d236139ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.89.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74f497c-afb0-4b7c-932c-1f6ac381e275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.19.177.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bda71b-2fc3-42db-897b-cb8b387ae730", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.149.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8562b6-4764-4f34-a0a8-4f325fab8f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.198.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23b5a70-79fe-4fec-b53a-6f67a526c2bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.228.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de265336-50c0-4443-9e28-3fef659e4666", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.120.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e20b6e5-08fb-419d-a013-ce062627e4c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.127.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58cb871d-7237-4ad9-86b7-e4ba2db39586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.166.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edec3d0f-a057-41f8-87c7-d1ba11bbaad0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.186.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70ddd06-faad-41f8-97e3-4cc2bbb1b2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.186.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444120dc-0a3f-4c10-9f57-7f0edcdccc47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.208.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdac6523-7ba8-4c36-9363-2a1b0d73d0f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.213.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe9b382-f80f-42ca-b356-c846e9b0feaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.249.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bff6bdb-8e5a-4ce9-b966-aee221b0473f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.251.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d33e952-abcd-4ddc-a307-d474e66693a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.69.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b1a662-b380-4e3c-87c7-6e2d886856ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.73.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35be2474-97e8-433d-8340-c9f09d7a38a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84cb4dc-d4dd-4b90-a7ec-c9c26360093f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.88.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1fce08-6572-4d4a-8ad5-16ce7bb9f05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1928d8-8c55-4c43-b6ae-2c97b13277c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0fb018d-263c-4afa-8642-bcd187d0b9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1619900-d2b2-4f26-b292-ac10abbcb500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c543d4ec-1c21-45b9-a4eb-30e1423a558f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b4cbab-fc66-4193-9aab-e02d8a97dbbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.97.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcdf23ce-4c7e-4ec4-a513-f97b653cda47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7b236a-345a-4b75-9cc9-5c3668917faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c07d3c3-3332-4702-bb34-80b14fd83634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91051924-5927-4e05-b8aa-acadbabcfa7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ab7613-e3b8-4a69-b2ba-a3d840bcb422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.96.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b25d13-3277-466e-b691-9878b98e3a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea0c10f-483e-44b1-a988-c315d042ce1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e204b5c7-64f0-4df7-94b1-2f78c0108410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b1663d-9147-46e6-b761-d8085579e908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139eb534-ee02-473f-b99b-ccce1c8824c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb21405-2ae9-4f65-8b9d-01e9a0faf410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7d13ed-0ba9-41ed-b679-106618744173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4ee772-c7f9-45f7-850c-1a5d9022b7c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055e7382-0ff3-4fb9-9d6a-b013d48592a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240ec945-fe2c-466d-8b82-e93664286afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b8056a-6c3e-4d86-a9cb-569838a5b3a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e42b123-9ddc-4503-8564-dc4df3e09cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07319293-f045-4ae5-aae3-7b9bb2a86121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a49fdecf-7034-481b-8717-fb316aa407e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c84c45-6386-405d-9b1d-63393411e05b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15bc77a-e42c-4b60-8988-e7bb10ba42c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af736c70-5fc8-418a-8561-8f3d7267c0ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfca0f20-891c-402c-a8cb-aea1e381b746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d672dc-501d-4b43-a010-7ce6b7c8eabf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c89cdc9-d515-408c-8fa9-d3b1fe68de12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5382a55f-5074-455a-b121-51d276d3abda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4bcfc4-b8d9-4f3f-a54c-89f578f806cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef2c23f-947d-4e9f-84ab-6d13541effe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c293421e-c9a6-4bd9-bb88-fda14d8d65fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19dc975-fc0f-4b91-b33e-af2e158e7d61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f985d91-1984-410b-8127-6484f3ec767b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e6956c-5ef7-48cf-8589-4878ccaf6016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1673951-b98c-4ad6-8e07-25dcf9582b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb26a65-1f56-4ef1-9c31-d879e5e621e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9265a0-2681-4168-ae30-0c2a10cbb3e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e6c6be4-4766-4d74-86e0-d676d57c0917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2fa191-b340-4b65-b261-e964244fd3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95450f9-710d-4142-b114-5de0e5de63a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8217e8fc-a220-463a-aebe-e826711fafce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817fb348-67f7-4442-b334-7ce296a6c55d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d557e4eb-6495-4d1a-a23a-ea0d6fac2981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--957419c3-cbc4-4321-a6a9-7fcc425e5f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dca2ef7-195c-46d1-8932-3fa88b284fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ec0051-fcc0-4b35-a670-faba21b9a606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3bea2f-3e82-4273-9292-3de732d51542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d67a159-23da-4512-ad5a-f8c0dda8f001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4775b66b-7c72-4d3b-b02e-54b409c04f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07038454-7198-4ed8-b642-f0c4f4e5f37b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7945ae6a-a559-4be8-b343-1f333df371cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e29ffb-6e50-4bb4-8b7c-c2fa1e0b1928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ceffd41-f182-4f1d-866c-000b41acb389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb31d0c-cc62-4684-8ff2-7a41d216e10c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067c6587-cc15-442f-b200-c2f36d0b8ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc415e6-b63f-47c4-8317-5518aba1a99e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.115.78.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b232b1d-faee-43b7-b193-698924670400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.175.187.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2733a87e-61ea-4cbc-9bb8-37cf49984747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.41.5.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b192dcbc-73cb-4800-a1fe-c0c0e9dd6947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.103.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a629c7ce-7568-4d63-ac1c-29ba61686d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.11.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247e5ccb-fceb-43f9-9a18-94ee0beeb4c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.14.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0825cf83-e8b5-46d8-8edd-22614af593b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.141.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb94579-fa8f-4f0c-ab7d-01b5f9ee262b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.152.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f08195-41be-4ed9-94f3-043f2217cb3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.159.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686913e1-9b3d-43f5-ae8e-38fc9912e6fc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.17.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dca9442-793e-4835-907b-d6d85e9149fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.210.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575c4cc0-89c7-4868-89fe-1f04ea73b878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.36.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f220f11f-491f-4d38-aea7-2dda52d744a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.46.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875d6ee0-9e36-4cb4-b955-40355bb4de21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.65.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a35eee8-5d85-411a-870e-c73fce7b7e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.75.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51563f20-be65-4cae-9e4f-2eaf70ef6528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.59.54.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5652f30c-34b1-4424-9e9b-d3fbe664266c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.155.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637a78c6-01da-4ba4-b1ae-e8342348b362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325a9b70-25ed-4210-a801-fe4951905f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2306eb46-9004-47e8-ba09-f5fef26a4189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d52c634-1a8f-40fc-9bfe-bb73fc969b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789639ab-7b9d-4025-ac19-15d6704deeb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc6ccec-c6b7-4e79-9689-2ac99c25eb73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85090123-532d-41c0-b9fd-346661d9f6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140d3235-188c-4dea-8fd9-c2938f865f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a13c762-30cd-4886-a6b0-46a600327f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92603ac1-dbc9-4c10-8919-d99cf93952a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c080283-c19f-47a4-b206-8061e9616121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2daf3a37-e2f6-47e3-8133-46373c2edd31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd9c225-c158-493e-ab38-cbfb7f52bd1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a88a491-c15c-44ca-8fab-03819363fcb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5653036-9d9d-4e75-8c1f-bfb6e38c3f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24aadb6f-804a-4c4b-9137-4f3f485ecdde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4302e1-e565-4e25-a069-82e0eb79451c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6da8f5c-3f75-4a9e-aeb4-dc575710a8c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6129010c-1a44-40fe-a1b1-9e82bd2d01c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e5f7f7-484a-4bae-a188-497d953b15b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b264eef-4925-4f96-9f47-0239ea801e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5728480-3928-402d-a0c4-24d7a104dae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a3aaec-98f9-4271-99df-af0a3f84265b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb897448-ee82-4d87-9c48-9cc91373f605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf059a4-3644-449f-a64d-d6ae510ec2d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee00476a-9166-4c54-b263-ae51f85606d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc7180f-380b-4966-83bf-c36d0e4c67bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50d6f4c-4066-48ee-a792-4b99232477ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeff1a9e-cc4c-4b53-ba30-2cf575a306ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8df733b-d48a-4eac-9fe2-0c48aeb3b0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d736763e-ca85-427a-82bf-4c1d5b6464b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73686f6-b3a1-4b33-b68f-3ab90caedea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d452b5-6b53-4d89-88fd-44a18989b9b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ed47b8-1aeb-4b09-9805-3cbb49eaa474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d297d3-3d7c-437b-83c2-65a4ecb51da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4ee44e-d3cf-4dda-832a-ba057d34cacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.193.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640c78a6-1be4-42d4-8fbe-d6d5e0dd22df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.124.31.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc0e803-f21c-4577-9cd1-4cf115006b2e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.185.21.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2dfaab7-836f-4527-825b-507a056c25a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.185.67.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8c99c1-3c47-4aed-a0f4-e95611b5ec3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af31f6b-e80b-4d28-824b-9323c7d9cfd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.184.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2879868-1fbb-4d73-9a93-09e8155dcc5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.218.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311c9634-9178-43fd-bf0f-5782ed17ad63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.222.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9dfdf5-55d5-4e27-b09d-8ec355e32acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.24.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5691bc9-8f97-497e-a8e1-d1fd12508cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.41.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a48858-bb54-41f7-9314-6ca9f1a7ddab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.87.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad26618a-bde9-4fc0-bb83-45facd0f8525", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.204.87.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6c66a6-b64d-4f28-ab41-147b2948d76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.219.158.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28eae1f-4e3e-40ee-a08b-430c7f046571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d02a18-92b0-4073-aab8-7fe064b3c232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8583b1f3-48d8-486b-9b05-d07cdf0ccbcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e4cec4-6c5c-4f0a-8bd1-f93e9c6ade1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.252.175.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5d9be0-de11-4b1a-934d-c7022d18c840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.143.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e2332b-e5fe-4244-a452-22a465271016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.144.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3bb5316-452d-4f84-b639-724ea4fb4e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.157.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a895e0b3-33b3-4d0f-b0b5-0c03a2b070e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.162.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4268f09f-aadb-424c-87dc-4f004cd6c286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.171.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b9ccc1-b4f0-4909-8ef9-76d70716ed60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.181.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16eece29-9ea2-4cb7-bb5b-bdb54b291e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.4.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc49934-d7f5-4d2c-a7a0-3630d9516df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.41.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6013ae0a-aed2-4d4f-b062-ef2b657d7713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83d5718-9470-4ddb-af3c-41e3dad5b126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.79.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1daeb7-a9ea-4591-a0fe-18b4786f9ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.91.105.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242ec82c-6b64-4dc6-a820-4efa92f17fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cc4037-9f9f-4feb-b3c1-3e1184551718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84314046-400d-469f-832e-0317b9039392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5a333a-ace1-4ff2-8bb4-3c978a50ae67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f348de5-6294-4c0c-98b5-28e1cf87fe93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec57089-ae96-4ed4-b909-ad1c0b84a919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd50a180-ea2b-41ef-b2ef-a39b4c84fd66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5707a964-13c1-48aa-871c-2919d1580183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f33296-7f16-449c-ab29-49c8de73b4df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa2f704-9751-48bc-8dc3-99c67ae75bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--863ea5f6-6fa6-4479-815d-71de090792aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3b359c-5deb-468d-909b-871cb26ade2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f00f908-4571-4377-9090-d42a4f0af28b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb63a2eb-c12b-42e1-b4e8-25e2936a02ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cbad259-2366-4968-8389-e12520f314f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5c7c0b-2134-455c-a1ba-4098d83d8d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af5aefc-a4dc-40b7-8ace-866bfbbe01b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--145fd0a8-51c0-4e3c-b49a-163288cd122e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966e95cd-bf0b-45d0-9859-40871ece975a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76b55d1-76ab-44b2-9c97-6da7b49cd581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee01fa5-83be-4838-839e-c50e2154cac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5598d0b-22b5-47dc-8a44-b73ca9be3502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d991028-86e3-4082-947e-07fefeab3170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fadff6c-a82f-4251-ace1-50e22221b31e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d4ded4-beeb-4fba-b0d0-89309198dc14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f56255b-3e84-4773-bc3a-930f560f6024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50fe17f9-5d03-49c2-8f06-425e447b3d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd948076-cfe7-4f4f-8fb0-cff8216ccff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79614be7-0a5f-4d28-b6bd-f4b0cb99d5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3404bb3d-d139-4ad0-a87c-e87e73c747d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7260a4ce-be02-4e55-8d1e-a572103c15a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94806ab3-7fd4-4ffa-a5c9-af4beefcc8db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a716bf4-08ff-4eb0-846c-6c6aebc43e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef54607d-1e69-4905-ae92-927ff8e2337d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1752621-1217-4aa6-a5c2-18ee428447ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c32c75-ed1c-40ae-a853-7caa9f68ead9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e42388-6b68-41f2-a63d-b1c721eca8b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee2f6e22-574f-452d-9f10-1eb7f285d0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e7dc0e-a066-4810-827a-5fe433090c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7043b4e-246e-40e5-b16b-099f93f10f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9caa0977-f80f-42d2-8b90-509200c3a900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7892b5-ce42-48c9-aea3-9e0a5c682958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54915d02-d8d0-40eb-b16e-a5f9a364b206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.94.216.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec612ee-9369-40af-9643-ca4415080367", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.241.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf876ec6-9af5-43ff-bb66-f707d14791fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.42.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b8569f-9ae1-4ed5-b57f-9221bd7b90c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.45.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e537080f-5a41-453a-99ef-058ab597578a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091ae75c-0441-4f8a-86c8-cab0cbfb6c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbffb351-8778-43e0-9e8a-cffdc9bbc414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67142f24-0df1-4ffe-bb1b-6ea9d7975fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.116.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158264e8-ee5c-4d7c-80e2-621709467dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.117.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20cdf2f4-2412-496e-978d-c746721a7b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.66.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ec04e4-0a51-4a77-a26d-b078b28236ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.170.73.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82003d0f-768a-4da9-bc5e-cbee15c3273b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.198.113.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9ea422-8109-4e79-904e-c46848e318b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.212.69.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdcef3a6-c1cb-45ec-8338-c1ca51c2040a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.104.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0db8d0-bb0a-401d-865a-6d6d238e944c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.120.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae5d809-8572-41ec-9690-1e9952654966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.130.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37b1780-17f7-46ec-95ac-6f4f7457e6fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.131.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5656fe-af16-42af-a09b-12ce39a830c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.139.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a032b3e1-834b-4c6c-a757-898720512acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.142.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93847a12-173b-4c1f-800e-82d8cc8216d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.150.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1ba79d-dba1-4a79-94fe-510ccce2aef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.154.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5560bc-c345-41a9-8853-367353527dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.156.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ba2760-fd40-4c65-b1b8-7cb39c24b660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.159.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a316ca2-5987-47fa-ada8-0b8e79c1faa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2533773-c6f4-47a7-ac7b-d3fe58bb66d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.213.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48717683-e75b-4591-8114-4df1ab633e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.246.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f5df67-1f93-4af0-a477-a0a3926867a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.30.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81a0a3a-820f-48b7-aa05-52f652511f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.91.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01fc594d-681b-4fde-af16-9056f93d2a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.1.105.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2bd0856-ec56-4776-b757-086769371af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.103.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108ccba0-7b0f-47fc-9937-f7aac2aefe49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.107.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e1b64a-f5b5-4225-845d-fb03abbd195e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.111.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7331b65-aa7f-45d9-a48a-b2c31b05bf7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.115.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609ad75c-f781-4d09-a497-d1afa3b4d5df", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.117.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9be6e48-0e07-4946-a324-7316991c57c2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.117.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0351c01-416a-4db7-a608-14fe79f485d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.127.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5f83ed-ea81-4f3c-98bd-679a4483ddd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.184.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cad2a10-bbc2-4062-b364-8c23d30eb574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.64.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce46005c-c6fe-41f9-9e8f-7b1fe9ab3d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.165.242.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa32997-a528-4314-afd9-3926c4ae4529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.18.16.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee38ccfe-bdd5-48f9-9756-3e11a7a2661a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.192.157.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39effb3e-4283-450b-8aa3-f9d9827b7165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.20.129.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3428517-ac66-4aac-afe8-55db4b8991e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.22.82.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0331f61f-8e0a-4d8e-a373-4069e48e5ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.170.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf90e33-9b1d-42a5-9ad6-c1bb2b2b2f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.255.192.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e417e11-1eb9-45c3-a809-91939f4ae4d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.33.48.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bdaa3d6-c5d4-4f6a-9fe9-34fc4624bb8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.39.188.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1c3d38-6fc0-4f12-a48c-806f13518ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.47.200.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb0393c-642a-424a-8cbc-9f8ea25cdb69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.52.46.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8290fefc-17f5-46a6-ad3e-6c2bc9846794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.206.195.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba56a8f6-746f-4331-b6ab-ae797d5e0874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.213.219.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c69f7e-0af7-4cf5-8bea-a941fbdb71c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.238.153.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53403d9-e616-41d3-aeff-b3360183c5b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.82.7.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450fe5db-079f-487e-bf82-e495c70c8217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.101.98.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4bb759b-874b-484c-8a0d-5ea4e97a00ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.88.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e634c44f-b6f3-490b-9ce8-d807dcb55ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.88.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19eebee-7674-4a36-b699-b485dffda822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.88.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4d4ebc-53d5-492f-affb-3b0b1ba5ba21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.88.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e08ac8f-c0f5-45f3-ab08-0e9b497cb9ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.88.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb0807e-ae90-4ccc-a602-b556b4ecd1ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.88.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1758e7a6-680e-4f06-a6a8-f05212c44f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.88.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a3044c-3e0c-4a68-a499-97d1508eaede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.88.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289a2f81-c15e-4e97-a215-e447a919f5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.88.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc4900b-2ace-4738-ac1d-b067306f6e8e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.164.227.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43685eb0-5ed6-4730-a1f5-47e635bec792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.95.34.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e7b1eb-0c9c-48aa-b0d4-c99331c2b532", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.142.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c2f583-2a4f-4ec7-8bc4-c10a92f1ee01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.50.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e858dbe3-59bf-4c52-8bfc-4eb2304a19ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a09aa23-f9f9-4789-b48f-62de5df09cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50824b5-8b0f-4f9a-a3ff-f400173fddd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.9.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7619b0-bf9b-42eb-91f3-74e684119c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.44.247.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06855963-118c-4b0a-b6d5-def768c199ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.110.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--299829e1-232f-4a45-9a8b-b42e66c9de5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.122.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d897da-d20f-4643-950e-2b27f4c6a5f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.163.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb8c0b5-d568-4e2a-8e70-062471cfc389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.170.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05e1e3f-222a-45fc-8b65-94b5975ec9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.2.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81c7824-28cc-4862-aa2f-910943a9611b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.224.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dafbde2d-c49c-4047-bd70-2089ad3090f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.255.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1851509-09fc-4157-a98a-c9cc23e4e027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.49.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4904c4d-18a7-4a3a-8f0e-64a4001e8842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.51.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a69f543-75b9-4954-a3c8-8560d46ced03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.57.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bba262c-a0a9-4728-a8d0-2f92f3775c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.134.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a859915a-7af5-4e7e-b049-9b8f64cf5f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.182.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c041bbb4-53e7-4899-b9f6-b92227d4a644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.217.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f608d634-e6c3-433b-abbe-07a67dae3f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.220.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7c4168-db67-4aaf-8406-0991f6590b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.230.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42f0dca-291a-45c0-a250-7976c99ec189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.232.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f55419-c720-4052-ab00-dd3c1e3b2868", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.241.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a794b63-f0db-495c-9cc1-a541a61e2c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8127fcaf-c41e-4ca6-898b-6c3a3b2cd75a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81dc01e-f43d-4964-a521-4c60477fb395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062de773-563b-43ab-bedd-668dc9f52621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e55b19-3953-4a1c-b514-e7e64e28d2fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28373823-c6d5-4da1-9cf7-ff7a05620a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67985e70-ecff-4f73-9358-5492d81d032e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def855ca-fdd0-432c-8157-c609e33ef395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e6d867-1143-4fc8-8e2e-e20ec17f82ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0849d3fe-7f9f-4994-bd1d-535f3a3ffc1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327f5b4c-8b23-4d48-be38-21e77a11be16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7d4f1e-103f-4b7e-ae0c-11a82818a114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09829bd4-5ff3-44cd-b4d5-a080e0a83411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8cd8f4e-a73d-47a8-9fa3-3c7fce68c325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbdc9870-7429-40a6-b183-5078fecf2854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396e7473-c630-41b1-9ba0-529f35e17157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b8a8ad-0631-4d57-99e2-c43cd154b4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53fa20c-8775-4b3e-830d-8bb7d0375afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247e4894-160d-4bc3-8c5a-2ff8c520e5d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016b3437-d0df-4882-9b91-9451efc8abec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306cf8c3-fa92-43ce-b486-9b2d1d4a10e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bdf212-2eb2-4fe5-801f-d68f4187ff91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8bcd02f-8728-4245-bde8-3d2d472b782c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66556583-ba7f-4e54-a88e-3db75218dbaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4e7733-918b-4cfe-9025-58fe9d7711ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421946d7-8773-40d9-9336-c3cb0d5c4f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481ca315-8c30-4699-b9ad-43055f1302b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28cbcaf2-6bfb-4690-9b3c-319226d3d596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214bdab8-008e-495d-8c56-7ac967f9db2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95b2743-2750-4666-95e7-a9a975c16409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34823ed-5c92-4cb0-88eb-be99afab5065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42893328-f0af-4202-8510-4d7edfeb9117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.164.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69769228-3684-44ff-9dd3-3135fd20678d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ebb9fa-c3c1-4921-a615-70eea1a9e63a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08495301-d937-43ea-a35c-0ba358e91b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3dff02d-51c6-40b1-b743-0cfe0bf92155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e3b43f-0b41-4ee0-a6af-8e04416cd245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0b765d-e40a-462a-af09-f2e5583e3a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f515013a-c9e6-4016-b91a-0182fd651e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6b16fa-8a31-441c-84d5-e86bd81a965c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e461cc7e-5842-4e49-a00e-8fc4c4ceebbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db501a5-568e-4535-92d3-815704de2bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aaabb20-21cb-41d0-aee6-6acb70eb8acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a83661-45fd-4e6a-ba68-bb4096bc7d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0aeaefa-0ca4-4490-84f3-582f4d38d38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f13fb3-0444-43c2-a504-82f1f0458ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae464636-d676-4f41-9ff6-8deeed198983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b967698f-13b5-487f-b810-805c83290aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a190c84-23ba-45ce-a61b-79a1ec5b6d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb4ec45-a224-44fb-b235-c68a4c891e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b362a7-200a-430a-abbd-9dcc64f99419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2148f236-1872-404e-aef7-bedfe82e29d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49041585-b9fb-4690-a16e-acc67f220c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb72436a-2c09-4c4d-bb6f-aff38d98604d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32bf61c3-b7f0-47ed-bc9e-ff6ff725607c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c60e333-eccb-4053-a639-aedc944bb444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ab7f70-a146-4e4f-9817-e38c189ea564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6db099-1a38-4704-986d-c2773a67b54b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9acab6d8-0a17-40b7-b6dc-de0e2368f42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c655395-5be3-4d9a-976a-d366f527dc8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2ae955-0af3-4196-bd65-f7d3aa3fb093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d54d90-b704-4d36-a069-07fbf2fd7fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f136a9ad-51c1-4af3-9b2a-a7c4e29c84ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f826a43-ab73-4bc3-be76-0f5b4077b084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05335bf1-0c07-4a9e-8a14-7003b4e5924f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.165.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--050ba679-18ec-4f7f-a540-95c02862c543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158cb517-2956-4d59-b078-8fb7854b1409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b2a85b-6879-404d-baaf-17094ae2c9e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44fb784-d01d-4369-8721-a9ac37b77e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd12355a-dd94-4d2d-b8ab-e14f81b1358f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffba8755-6eb9-42d9-9caf-1416ac12abb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247a8ea5-4871-4803-a65a-b517d39ed9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ee258b-dfe4-484e-a6ff-391153dedf4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44db7a71-dfd9-4451-ad4f-3b9eec68f19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9113ed63-8375-45e1-a0a1-2bbb0d0d7a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3464e902-5931-425d-ba76-93cfa1fda77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06d7e88-4725-4e0e-ab97-afaf7ab6ae4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e67a776-93a6-43c7-bd26-2a1dbe129c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc5a67b-1135-4cea-8178-78d8b2992a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0101694d-b317-4d62-aa60-a44ad6e79024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d01d5c-1eda-47af-9333-f1ea42a50f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d39090-673a-47b7-ae4f-319ca7c1503e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2fa6dd-7e38-47cb-aaa2-0ffecd1a35a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a07c02-1710-45fe-9852-5409634a5bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7288c8b-7b71-47f3-b461-49b5f5b5cf00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ca3ced-5c87-4947-ad2b-e388bd470776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6edb3e00-54cb-425e-af94-d21b67614779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70861214-296a-491d-ad79-a0288320ef2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5cea99-52c8-4381-8829-6efaaed8c516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e693259-cf55-4655-8a20-add3282daf69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0eb50d4-d1b0-4071-b26f-67d8252b1333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed39fa05-d338-4e48-82ca-17678c125a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abed30d3-138f-4437-8522-e5f2525af3c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48012127-7ad0-4eb8-b42e-d11a8bd65732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805be56c-fc4c-4477-9525-d55f9a8a4a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87732ba3-11db-4981-9d45-c1d2b7a98c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb113470-30ef-450d-af10-089d967f88b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72cd47c3-ed79-4080-bd21-ea6724daf7c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea382184-9883-4a2a-9d9f-b38740b32b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd402606-de89-47bd-821f-a4445337e441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80bb6215-86e1-4073-b633-4c5517f78255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.166.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a36db8-149c-4ac6-bb61-552e8257499e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f5aa8a-d099-4ea7-978f-7d9938f49f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb166f3b-b44d-4582-8e8d-4406c587e086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4ec458-2c2c-43b8-8fd0-e59a95ca6ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78e04b0-d413-45e4-a3d4-677e64bdaa1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7ce7c2-3187-420f-a728-621c357bd0e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3215fd88-258b-4065-9f34-9bd466f5bdf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18beaf7f-2637-4261-beff-0cf353923398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed1d4e2-e5c7-4484-b623-376d785ae4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7f9608-868f-4dd3-b3b2-6168d4fb6a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be857834-3208-4332-b639-0dd3935f9f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5139ffba-653a-41fb-a754-0a89b5ce1d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a7938d-b109-43fc-b639-f69e24092cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5994545f-1a5a-4596-b2d4-c0c13b636707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e5680e-db70-4526-a4c9-894e23ffda72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed024fc-a7f0-4d9a-b750-e17c7d688f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d1595d-87a8-4ad3-ad4d-541188ffcfd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6301a15-cdaa-4f51-aa29-2a142220ffea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea52bf4-5292-46ad-943e-8644a3fb9df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b89c2f3d-32d6-4961-b1b8-3825904a7490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1222ff-f72e-40b9-b614-8b10e5900abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d3cf3f-3959-40b0-9bb1-fed58965e174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c327e18f-a853-459f-9d95-97caba66f79b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd32cc3a-b4ff-44fd-9c25-0cb542a48e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc555af8-bd13-4ae2-a03b-79dbe9c679ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f54ad3-27cc-4b56-b084-54af5c433373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f545f2aa-ee07-49ce-b360-94e39d320646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f93024-ecdf-405f-a9cb-565048061458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b26669d-071a-4bf0-963e-2bdb713e853c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9037c4e5-3631-4437-b940-0b1da1e6605c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e2bfe3-84de-46cc-8484-3686801aaccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ccb0f4-af12-4977-801f-25afd3f4f931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.167.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ee596e-6fab-4e44-a3c6-27b921cf5f34", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.90.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5238dea3-34a8-4d9b-8e94-c08c928e603a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.14.75.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806d794f-d295-4377-9849-979c46415fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.153.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd4c786-d606-4811-92c4-e4421f4c6e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.193.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de13974-7de7-4f3e-b069-d0dc6b2ff287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.210.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1655b4c7-945b-46bd-b8cb-e05005ce4c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.20.185.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecaa8601-1d02-41c1-9194-c97a72cef5ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.161.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2facf92-8743-4320-98e9-979071e515ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.163.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4952f0-5db3-4bbe-9761-042d5bf597d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.47.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a49651-90f0-40cb-89d5-de3313ccd865", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.255.102.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb1e888-fc10-4587-b7d4-dd522ff2529a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9a0fb2-0c70-4702-93b0-3340a67f91c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e2d62d-7989-4d32-a2c1-7fb002142d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452ebc2e-fd10-4579-99fd-ffc26fff9172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1383728e-7cea-4877-93f4-8ba534680c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb04dd5-5d35-4613-89bf-18b207f9a643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185d0628-c8ba-40f0-9746-caa5e525dd20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1817f072-a5c8-4455-9caa-897536d10564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c090f8-24ff-497f-a7a8-bbe9b117b8b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248835f1-aa60-406c-8ee6-3b1adad7ab2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a10a7b-15b6-4f0f-8b35-3e128bce8595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93084e6-70e2-41d8-8fb8-728af2cbb231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621a9b9f-a6fe-4a44-a2ae-5675b7beae7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a744d813-75bf-45b3-8935-411077525318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18381df5-1e77-42b5-8956-a9cd1cd6ae9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c81981-393d-43a2-b3a9-0fa14f96ec53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb01d52-1627-4fe9-a607-5f5295547f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647f7a5c-efb1-42e3-90bb-98ae91f1c92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9af1a3-a8e3-4f23-9cb2-c4f19a7861ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948ab7a7-91bc-4865-9d9a-fd8790737474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d263f315-a132-44b1-acc0-2cf488d117f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cccb4b44-6bb2-459b-ac7e-5492590ff810", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.95.209.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae4ce15-fbff-4507-8976-92eadda14aef", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.95.214.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17372608-d9f0-4207-a56c-0f0c4dea71c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08748c33-7460-472a-b6f2-d43a15f993b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.77.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7bf2144-e0c6-487c-8fa6-ced52d491628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.77.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59205ad-44e6-4708-94e1-c1e572094bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.77.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a9c06d-e7ec-4410-8e68-f7e9f01718f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.216.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ef2c9f-0a61-4d3e-a099-0bd4bf7979e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.103.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246ac5d9-1f0c-4f64-a76f-fb9dbcefc333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.104.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57d1b95-91c6-4daa-bbd6-3ee2aabf294f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.106.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8980ac-5850-4dcb-b262-decbe1db4f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de07529f-09bc-422b-a30d-e0bbdc39ef44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.217.74.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd39cf43-cf16-4a17-bacd-73d06925e1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.26.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7884d25-9a84-4ea1-8851-a32eebba0bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.93.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d42f086-d362-4094-98c4-5362623357cc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.48.243.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e752448-d931-4f25-a2a5-a6e83fa3255c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2002-1149, CVE-2021-31207. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31207", "external_id": "CVE-2021-31207"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59f59260-2b2e-498a-bea6-3afa428e11d7", "relationship_type": "indicates", "source_ref": "indicator--0e752448-d931-4f25-a2a5-a6e83fa3255c", "target_ref": "vulnerability--b3a43a8c-4055-47cd-b848-be1382d8bafb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ccbfb96-d0db-49e6-b64c-b3107848034e", "relationship_type": "indicates", "source_ref": "indicator--0e752448-d931-4f25-a2a5-a6e83fa3255c", "target_ref": "vulnerability--d07122aa-0aa0-4e18-8e4d-bd3e7e18dc58", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68121536-e032-4b0a-ac0d-337b771a4e60", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.91.108.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083c7afc-18ea-45d9-896e-d8b0708d378f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.91.72.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d5644c-a11e-45a6-bce2-213d7676eb8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.239.91.0']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8fac7ee-3723-4bdd-a500-2c3f0aead15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.225.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8b397a-e78a-4793-999a-c9301f3d158c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.148.13.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d92a7a4-71b6-45cf-9902-228b34b9b8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.119.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0558775c-dc7d-4a43-a662-5d98af23d756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.119.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0885a44e-fe6f-4085-b7c3-16680560b38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.134.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75fa6eff-afd5-4a39-b8d7-73aabe3c987e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.154.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8033e5c2-e004-4920-b10a-c066a86c7cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.166.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bdb9c9d-7ec3-4b30-91d4-835206e91e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.213.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8d4441-b5e9-4355-85e0-6090aaa983e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.41.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba34c16-7fd1-458b-bc96-4264585f4cae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.55.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d07355-f995-4f7c-8357-f7e39c93237b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.78.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe627bd3-135c-4fd2-9475-8ce75c5433d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.56.205.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13da691d-79a6-494e-bd12-58ae75242b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896aae72-6862-4a57-845a-2101a1e65335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6923769-18dc-483f-a461-5273353de766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312a2b34-469f-4cb4-8cc4-528e42a978bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb51b36-61dc-448f-965a-c0131600c8d6", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369cf743-a5c0-441f-9d17-56a434b64ffc", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe6e7a03-8575-48fa-a725-aa70feba668b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93068d3c-5017-4a2f-acad-bd8d7633a672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.136.100.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baaa1928-1ed3-4641-acfd-b48743e2e128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.139.136.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270f275e-0e5b-4c1a-8062-7368432fd0b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.144.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436c55c6-4d57-4322-8d35-64f97dbab1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.213.255']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5e3da0-f558-4ecc-8f15-26074f4e007e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.238.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92aab19f-3455-4313-a753-a961e1efa761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9458336c-45e6-4b1b-bd7a-3d613078dd8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ef650d-9441-400b-bc00-a629de85b7ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ba0c18-b635-40b4-bfaf-8dc490f0aeb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0425f3-7f49-4d02-a502-9e0024a4f3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8bccdf5-5f23-4d51-98b7-16e5d1d4543c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877a7515-9d57-46b8-9dc7-c73a84d2dac4", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: openclawglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "sensor:vultrmelbournetest", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8669b7-74fc-4682-98ff-09023a664b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c100399c-78c6-4b47-a6c2-885928a95a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7be67c4-0811-4314-b33e-d20f1420629f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaaf976e-1031-42cc-8077-443f05f39ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e5b5ae-5872-40d8-a6c8-2472fcc10496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4e58f9-b26c-46c4-95bf-b97257dc9ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4a6167-c83e-4ea3-80df-b2de23e38eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807fd24c-b236-4f64-8c14-b8e649c9fb3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32273db7-d81c-4244-8e5b-53c10f46c262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad34645-4599-47c1-a49a-4a7de06253a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e53f8b-18aa-4533-a984-4c09b4862c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81836e84-2680-4858-b752-c16571116ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12314d57-b0e0-4a7b-8814-f2067fca1dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2faa16e7-3b8a-4c73-ab7e-3a47f732b5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658527c2-0a33-47ee-a0ad-dea378ce06ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3e7a0c-2763-4be0-a5b6-1bef143f7db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d179988d-3a5d-4397-9699-11539d49da48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e93099e-511b-490e-8561-276c90e942ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592d09dd-7fbf-4e69-9bdc-2f66a559e6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869a9522-aa4a-4157-9ac6-c638106e56cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b63305a-e1ef-487c-8dde-97e9db2eb079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6cf12f7-67b5-445b-b17c-f3995e2c5106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1291ae-92d7-40d6-9e44-7d9f7949ed4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8f058c-8898-4da5-9385-b54e772389d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678be8ac-fcfa-4b41-982d-7b73f8663317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c5bfbe5-b529-4dfc-8c34-86343ec43859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471cebbb-b1a0-4389-aa8d-f603e0e1dd04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd338e6a-9aec-42e5-9639-93f9ac1b508b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548477a7-83d4-4af9-b196-6026d98b5f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b357b680-fa5a-49b0-8b16-01ac3fd76574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efa4503-e74f-4801-a3e1-5b5f4faa331a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44fd6ba-08b9-48c0-a571-e867f61bdcc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2292d235-e3f2-4fb8-9449-e7ad80c7a92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd49eed8-abe1-464d-8c0a-454b0e0b77f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0faaf30-f180-468f-a673-886fdb1d44a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e572ca38-bca3-4676-919b-dcadf2b3fe08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b4deb2-2c19-4a05-84de-cff97c1f184e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f1147d-c174-453b-af21-98221388e9a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de330676-dca2-40d8-a35d-77f28ee280f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ada66fc-a54b-448b-a1d7-9175b00631ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7743d3-6bc8-428b-8d50-98053c8efd64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab778779-5e5b-4618-a1ed-e69d6e1e1342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7f7715-7f8a-4396-a84e-3544b4314571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce48732f-590a-43f9-b3a7-036fb9a01d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c526860f-660f-4a1c-b18c-03c462757438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1420de56-f6e9-4686-823d-a502598f6aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7787f5-918a-4a1f-b30a-c03eea63c74d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6209a9e1-9089-4dda-b85e-3c85c40ed20c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e3f96e0-ec2a-4259-a2ce-067bf0a0e79c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1a6d3c-37aa-4ef2-b6da-336c0b58fa88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433423e4-e088-4a24-843e-ec1b163e6f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60a5dcb-dd2b-4752-a6b4-833b7c6d0882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc364e0f-bc13-48e8-be84-d457710cb7ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1bb778-193b-47fd-80e7-3b77364664cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3608e7-c01f-4d22-9298-6dbaad79c532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c916752-97b8-4eb5-a91b-35f1e9efc892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f3b9fb-0c54-4417-850b-afb2cd5d8c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a607e550-a2a0-4359-98f4-1a3e1a2c1927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c9246e-6b95-4392-8a69-263d95ee04f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7932f7f-53a1-4c75-a05a-baa872d122bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c848ce83-a786-4350-b12f-77484f9d43f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f1f4f0-b6f9-4649-b15f-689945d950b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6afde8-ff0e-4847-929d-6bd53ce4404b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e585575-1624-4b87-9656-b847ef595049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd5ea81-bfa6-403c-bc84-00655a964d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625269ec-3e88-4237-8393-3998425923b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716e4e50-f730-46bb-a33f-e2e763fea0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3aeb93e-3b71-4266-85ec-cdc5a9f12218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30dff70-6299-4927-9b96-9ea80e18451b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4cbf7c-e3fb-4d81-acad-0f003cc40b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e250c015-2397-4a7d-9847-c2e8f3a0ebdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd2d076-3dc8-4bf2-83a7-9f2b00e6f27c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e7a97c-0ffb-45f3-86c2-5ffeb2122e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe757dd-b291-4b3b-81d6-43c53cd46e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e6140c-c0da-4d60-9ed1-ad11524fc665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d44d0f-b867-46cb-8842-df1f26292a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea85100-5c5a-4cc0-a833-8afa0f86d7b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c86d3d9-5afa-4c95-8610-db23ee45a03f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5f48e5-92b8-4e21-b2c3-860ff0b05e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd1cc85-29d2-44e5-a1f2-451e78127b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b3f0e6-9d21-44cd-aefd-17e673ff0e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b174d7c-fdf5-4ef1-9841-dbd3ddcb9258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b266eb-728d-4707-831e-593119dca944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2bf0af6-f31d-4ece-94af-c80b82a9d706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6692775-ccff-4a93-85ea-1caf78e53053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760b2aa4-73fd-48a0-a7e0-35b580501f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11ef8c6-bdcb-4ac5-a810-34ff7b2b3428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f13eec-c4c4-4abe-85a3-49a3b6f33ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea30397-ac4b-4991-a612-dd4a62d275df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f97e9c9-bc2c-41b3-9583-9cfc198c5992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23de41c-a3f3-4385-a70b-aa97337f7a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcb4830-6bfc-433c-b0d3-5eea1443ebe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965fac85-9c5f-4f58-a6c5-5e1bea67b77d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0f50f5-a76f-4640-a74a-c292640acbc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee6d7f7-3fd6-4358-9c3f-6309a3c3c57f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321f6902-d1a2-4917-8904-37cf675d4f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6748ef5e-ca70-4de7-84b4-949e93a09a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e80ac39-28f1-415c-a5d1-9fcd5e417ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be46493-cf0f-4ce8-ba5d-aa5dc04f6aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12cb50b6-bf7f-45dc-9df4-6db0c0625b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c5a1f5-0319-4ad6-8c86-5fd6b40daf06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2e683a-622f-42ee-a3c7-6039a21e2530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecdaead-ec44-40a1-9940-66dfb92db640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efb644c-85be-4824-be6a-7b6c5103e14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb0b1ae-081c-4d44-b5d1-c991fa11412e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9f4ee9-2418-4489-91c9-755f2618898a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868e8609-3703-4c40-8f7c-608d738982d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09c1907-b3ef-47c4-81ce-02912279d465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01df2286-9c3e-411e-8c07-e9a03a40ffd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457f375a-ead6-4a78-b9f2-c65bf838ee4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88073e8-8670-4a6e-906f-071415b862df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b22548f-8caa-4c86-83a1-42cfbd0a7495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8ba4a3-cfed-4ad2-8dd0-bcfa4ffb05ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b68e236-f9d6-4f94-949a-4afee8ca4b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419d156e-ccee-4bc9-84b5-73e3dc2e0a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ebade5-b489-4f35-a68c-17dcc4fd4d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb85837-b609-4fda-9d67-18f20df54955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8329a8e-7fe5-4114-91ef-36cf2fadb029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a41363c-ff2d-4e75-8bf9-68a0dfda2c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8812d0ad-60de-4437-b88b-78c03b770f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--effc105c-a105-439e-8e14-f0e5db598394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9625977-0585-4c9b-bdd5-bfd891e28636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98a0043-14ca-4d4e-92ec-9b7adaf956a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75241ebb-f01a-4ca2-8422-0b1913dd28e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9aa4cc1-3192-45d5-974c-9a1ac3c0a5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb88b30-7d07-4ca0-8bb9-548889ef54f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f9605a-3c9b-4586-8c3a-52846b1f87f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b65b9eb-f65b-4af8-86d3-6e27f130092c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8085ac-5bcd-4004-a3eb-56cda0393c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc8db64-a160-4057-8a59-5f60aee023c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755749ef-54f4-473a-aba4-f7ecf4217221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541b12a4-c451-414c-afec-4c787bdb438a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7bc2ab-07f1-42fc-b986-743d31bab5dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b68cb62-ad29-491e-8296-8a085b320ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0432d7-dd3b-4dac-afaf-2d9e20ea2eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e78e76-47f1-4023-a14c-0f797eac698a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ba25da-d51c-416b-911a-b25651754c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eeee3be-e688-43d9-a9ff-5ad1be324f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b661ccf-54b4-4f7c-adb4-4c975221d4c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d851dc9-e07f-4d97-9e77-be61cb33429a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e680757-288c-4522-a9f2-0550bd39d6cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4379335-2de3-4ece-b56e-396aeee5a2b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abad1bef-a84b-4611-b9af-035a1d0939a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae60317-9a2c-4c5f-9388-3498605f4d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6300d64d-09d4-45c1-82f3-ae5f1f46d58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f1a152-9a9b-4e95-a1b0-bc774242124f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d0a0cf-2bf2-4dce-b246-c6d96c71888e", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569f51f6-19f2-409e-bc1f-f2c2fe0d76c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a457f3b-58bc-4afd-a093-f3697a5d7a7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9223e239-4976-4b5c-a1a3-29c9fa62dcb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6cb4fa-ed79-4186-886b-c0879ef8e878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849da8cd-9f64-45b6-9bb9-9ef74ee39e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2302d028-1675-4150-a434-d650f5b9340a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7781d4c9-bc0f-4acf-a734-43de04e87aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6744a748-672a-4b22-bcf3-aaf216718011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58eaecf-e89c-4cf8-9c56-21912cbaf4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4c65b7-f802-412d-95a9-c8efd79caecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2bd1aec-3aa4-4e2f-880f-06477f136fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93bab5de-2e94-4899-8b9b-ee3932a28065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f7bd116-4229-4a3c-afb8-478142042cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873f252d-6407-4c9f-9a33-0370fd855611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27bc82ea-5532-430c-90b1-e514375462a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75b96e1-cd42-4654-be74-06e5887b70a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93af32f-c0c2-4b9e-9c26-c5ae480ab111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c234281c-41fb-4392-9163-f6253e46f176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e13fcb-a8a3-4c65-a4b5-8b4f18045fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc847c1-3f98-42b7-b331-5765f914858b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79ba7bd-4dd5-42f1-904c-d0e6f6aab676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991d4225-9be3-4a9b-a540-0bf7d7ee953e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ab9f2b-6ed3-4d14-805a-1e315e3f8bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb13b57-09ad-483b-8fe2-1ac784ae258c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c135c5-0aa7-44e4-93d7-9e8221946f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a4d63e-7859-44c1-8644-c8b139320ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c2decd-df4e-4091-be27-6888d90be613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389b0ee8-6ca3-4d6e-a564-3943975a7b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d173e6c2-91d7-4c5f-a38a-fb68a946aa43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab80f1f6-cd16-4375-9b48-1c74a2c4f489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ad06aa-69fe-42d8-b361-889092a28a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce342624-ec94-4da5-88a9-4a3a50ed2475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93cdeeb4-655c-4993-8e33-3afdf012d76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73997dd0-e903-4823-8b4e-d5b51644f44e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6275e4-155a-4283-813e-011bcfda98bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c123ba2-1b2e-4407-bc56-4224d70d2357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbaa1c2-2479-42ac-b59a-667ddf67fbd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bd4ebf-7771-44b7-9216-a4545c95b26e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a1df3d-a78c-41a8-a2b0-4e3a3e944764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c310712-4274-4221-b029-a44e6671393e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.0']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b863d4-c9e1-49f9-9cbf-2d360eb4e6dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03d534d-b590-4f17-9e51-362e783fa3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eed75ab-74cd-4259-938e-ad6ddd4564c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a73afb1-eb22-4103-a528-4b59781f2589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9cbb84-7bc0-4448-98f7-c59267c45960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69af5dc-52ce-4d18-9f08-43ff24fd74a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bc7f30-f536-463a-b215-45fe22a20e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b971512-3aae-433b-9fca-31c478fc98c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa601ec-57c0-4b56-ae01-d8d08f48309d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0fa4d5-55b4-4003-a05a-86b2988f8f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--114449cd-1491-4a55-acef-692119be7be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ff3115-a482-43b5-8e79-6b7eea3b29a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a9147e6-659b-499a-a6aa-f3e5b370089f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c331496-8db8-481d-986d-0e27f0627e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4804acd9-99ad-4162-9ef4-a5510a783c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfff63ea-da6a-447d-a46a-1d82825daa0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6cfaef-71b7-429c-913d-aa4b872e81ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09644c07-8730-465c-b573-4f260751b8ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d088eac-fe96-43be-9895-81918be22277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ca60bd-a15d-4b70-842e-763d21541c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e636ec5d-7849-4371-abd3-3463b1d0d787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f8b562-c9fa-448c-9516-2618bb35b96e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a227caa8-dda2-45bb-a3e7-950c17838ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a639a64a-f667-4ba4-b8c8-0e7a548d198c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da775fc-0815-49a9-8554-4c34ac9cbd58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc9f241-0385-4c9f-b5e1-33f34c438671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5334c9-91e0-4b14-bd11-21d29fd79db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1c682d-80e1-4fab-b88b-6b84de77a3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d66ced-640e-4add-886d-a1f1624d92f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e3f3c9-3d4e-4fa2-8b70-dfc40fb5cc31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042636a1-bbf8-4104-b2d8-8ab8ed91c37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe929b7-6c1e-4ecb-848f-3dac7e3e7265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ffde38c-ab13-4562-a5eb-38d32982bd84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81711349-1e79-49ad-b5f9-d80ee835c55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a501424-3c70-45a8-b1c3-27dc6521ecff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30fab9b6-dd7e-439a-b330-23a7e15b6a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df7a761-228a-4696-bd43-a05108f77f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed4d03d-d2c7-446c-a670-a53fa2ce95e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ec58cf-791b-43c7-8ec8-d117ae56205d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51deeddd-a5c5-4384-b4cc-997160c08ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9610a7c5-a334-440e-9c9e-6c0b8dca069b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09480171-eddc-47c8-84ad-469dbf5ed293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802a211e-dcb3-4dcb-a528-09c8d9b5ce8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a74f0bc-ce68-458d-9ecc-f8dcbb6f199c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a303d41-f4bd-4e16-9841-caf63e46f5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cddd218e-8337-4335-af67-d5061dddae05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b509305-e41a-437d-81bf-35de70a69f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c58ec8-074c-41fe-a119-d18f00a0c40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf8a824-282b-4b9e-adb5-d9102b9168bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fe9ec4-3183-41a4-bab2-6ba97095e2b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8fd04d9-3336-4e3c-a320-df0e7b301155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad828466-d02f-41ed-8832-7647298832e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45359f4-0bf6-4ed6-badf-61b77cb6f8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b123d5ba-e41b-4349-a5f1-bb741f7a797e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ced920-d1b2-45f9-9ef7-ef59145d9fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ffbe8e-dcdd-4469-83a9-cda7e2be4bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0646e04-c754-4cda-87c3-33250898972e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645469da-0706-4abb-83e6-50501680f62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e694084-aaa5-481e-b29c-9e914f4736a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c8f5cf-0c8e-4949-8b5e-6ebf290b46a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1403f35-16b4-4344-bb95-213073e9f156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3661db79-1bb1-4977-86d0-1384a4457a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d162e7d7-d5df-4038-bdfd-008057e7641e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c29760-2c5e-4c58-b529-bae8ce04d9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c74b63-2868-49ce-98ea-5d67976b3e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03976a9f-e7d9-483e-8a22-c659556aaeb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbfaa0ed-83bf-4e2a-acc2-1b30eee90d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f276346-bd43-42e0-b418-9d19c9e11788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb741327-d449-4873-8d16-e9ab1090dcd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e3cbd9-c003-4a6c-ab45-f98341099937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b2848a-e9ad-434b-8449-79978cd29fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb02316-aed5-4ad1-bc2e-713501c89f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ef26f2-785f-4a0c-a5ed-640a47bded10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e7beca-d3ad-4ec1-a49a-e25204147d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9065e59-da1d-48a6-83f4-a2d92951ad48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc58d21-63d6-4dc2-b7a3-7d61b1f594ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc66f44d-d6f3-4506-8390-a245bdbdbb7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fecbd58-2f20-4b6e-94ff-9e44bc909910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972c1042-77ab-45d2-8138-7a3efabfbda2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa7bb3d-d29e-4ecc-ad54-4c9e00f9146f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a0e7c4-4170-4de9-8fac-09188bd90118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708fa617-035b-430f-a4db-4cd39ec04221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da4082e5-c4eb-4dc9-a0f5-95b56cdba5f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3985ff0-bd95-4b22-8b6d-cf7ade5f476e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a150f5d-32a9-4035-99f7-431c17104e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a08ba03-7e52-491d-a303-067dff05f1f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051be5a0-3dbb-4a51-a165-688f30d4be1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b1d742-7f99-4284-a9dc-1dc22b31dc4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28f1672-eed6-4bb0-b2d4-58e2dd27ef80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b00cd8-f929-4bd4-a206-4123f0dd8a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb42f481-c5b7-43b1-8055-1efd238736b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf475bfc-afe1-41fc-8ef6-f057c2bacbc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59774fb8-8cd3-4a85-806c-186f78c6d78e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3272f8a2-a59f-4df9-a86b-33f4d2188774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5b7ca7-f55d-4d7a-99c9-516bc5af560b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82185c95-ef0b-4dfc-a8f6-99c54be13039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0f8a96-74a4-4d2c-8b93-bca6182cd850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d9be1d-b461-4dcb-b15a-e0cff91d4863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91104383-b8b0-4b70-8445-7e16e14a3574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4511a18-fa56-46b9-9efa-f9ccfcad433d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e6a0eb-9110-4ec1-87e6-39ea40aa9750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191a2700-2d78-4917-b53e-e6bd61b91b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d994e8f3-a20c-4193-8d4d-638e7503dfe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4313b9-f2e2-4a35-b7ce-4aa842c93500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1dcd92-1782-4847-96e4-3d77d410c84f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f91299c-d058-40f0-a401-ad3bc38677b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435a8d21-8cea-4242-9131-517118af8b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c176f81c-5efc-4925-88e8-c71554cc7601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843a5b81-3af9-4d3e-8537-f40c9e592f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0cdaff-c9cf-4615-96ba-73d14078b27a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cc8c8c0-4c19-4b9e-a0ba-50d994b388fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97533e27-27f1-4c29-94ba-20a8fc76a748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac466b0-ae8a-4cf0-b3f3-8c2c046cce9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98d17ff-b7e0-4ce1-9234-cd9014606219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7329f733-16d8-4fc7-8913-487fe6f15ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbc2e01-b67d-4a5a-88ed-5e1a2142eb74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3bc9f78-95be-4fca-9aff-83e432e88367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55abe92f-40f7-4ae4-881d-c243631f6eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a576dc-abbf-439c-bf9e-c448c0d37cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c0dcd8-c926-45fa-9351-42aa40c8ebe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84bc798-29c7-45e7-9a7a-addf2f3f7fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb90df7-ccc3-4bc7-acef-0210b99cb861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4358f4cb-ab71-4c72-afeb-753a970cb0ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fcc5131-46aa-4f69-8429-7359b221d2dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1666b99a-5a5b-4f8f-a470-88456e05702a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8c6b9c-fdc6-4d59-a06c-fd3fa271974d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c80236d-80e4-4c34-b7ca-df9da04200d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513f90d2-4b94-47a3-90a7-11caf6ef4b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bea5a81-941f-449b-a2bd-f3a77f3c7ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809b414e-9828-488b-880c-89f369cbc2d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12be9234-4363-4a1e-ba74-8070bc47561a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--accd46be-e84c-4d00-b02e-07b2493d9568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6be877-f98a-4a6d-884c-d9b5a0a6d70b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd8b336-987e-43be-881f-13da32455009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--009a87a9-2ef4-476d-b5b8-c6f1042557c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dbf3b4d-d052-4cf5-9ae9-7835364aeaf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69151f8b-99a4-4db3-9c3f-ef23a6d22b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708a789d-1835-4d0c-a132-11b3873fbe7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b4835e-d4a6-4138-8ec6-8fda63a20aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f967ed72-65e7-441d-80aa-324ddb8b8d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401978b7-976a-4518-98a0-e9d54b2520d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d484ba56-0540-4923-b776-5c8a4292d7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e52f484-02d4-49fe-9c22-2c4f7b2c887e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e05d5b-301f-425f-bc46-e5ee3e4e4ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5087bd-4497-451a-ba6e-8e7c5937e1bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d1c95a-4ae3-4120-b1f1-81e6db3722e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.255']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5431bd-45ad-4284-b9b6-e9584fd215c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78daf34f-87d0-4b94-8296-ae56b5263696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179ee929-2ed9-4f07-bbf3-6c15b2249847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da614d4e-4497-4427-a45d-59060d7a9a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c080222b-bb3b-46ba-9b20-ec7a97e6132f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7d2dab-9fdd-4c43-a38d-2ce13e960cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0d56b4-b520-4327-adfe-a199de58ebb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4888b1dc-905b-48a3-bde7-0f8efa7d1cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf005541-7f96-4bfe-b8ec-5ecc4d6b1cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35471a22-5149-41e6-a43a-5c400c46f059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89539f3d-9c73-4a25-a0bd-0c10353ed4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954cfd35-57d8-4e34-933a-b2beefd0768e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a0593e0-5312-4d09-941e-b9eebd3023a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b32fdd5-01b6-4d7f-8286-8e64a2256307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf75566-10f8-4d19-bfe6-f1a451b1d29a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7db93c-40c9-418a-812e-1cd4f5908b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993e45bb-23c0-43f1-9ba8-5c310c837b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76998f1e-0952-48fb-8f4a-8e55593e4449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282bad07-3578-4668-8d23-63f48fb6bbd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029f69bd-765b-4090-b831-38a2cca01a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc612db6-eb11-43e9-b085-50a7cb0f5d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425f0e7b-0d98-4273-96df-bf0ef3521d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e34fda7-f71c-4bbe-8cd8-6208cde064d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088d2790-d0ae-4d34-a4fe-e97f142620eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70dab74b-2b98-49f6-af62-c0c72e7dffcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6673220-e973-4367-b7af-cf41b41ee8da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6984ead5-6ed4-44a8-9ec4-d7adda649905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd420dbf-2bb3-44b8-ac86-ee25b54adf1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e159c2c-345e-445b-8dba-4f3a04eb4e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17475683-6de0-4d61-8089-afaea9dd86db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1551b3-82c4-4b47-bb22-ebec2219dac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542fd78d-71e4-4a32-93c7-53b66e25ec33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e8d556-0425-45bd-bc4e-aa73e95e80e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a560573-db57-4730-9cf1-4e567fa49bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f849286-9c9b-4d54-9507-f9080f445c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7b29d6-d978-4925-940c-8ffa6c77b62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed8b34c-cebb-4b87-92f9-9c12359a2c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f243ca42-3e24-4cf1-9252-ed4d817ff16c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ff73aa-97fd-422e-bcfe-d85c4c81ae22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566c254d-f1d3-4449-9863-bc3ad233c4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4ca37f-3c75-41fb-b991-f5413dfbfb16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c948e5-5a08-4008-a2d6-c83ab4a3c0d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d3fa35-a3bb-4eeb-a1fa-3e62e57d9924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1b1a0b-fd47-400d-9567-4e956533783c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688e9825-1945-4a22-b456-7f9cbe2c957a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c310c6b-194f-4e98-a88c-4b058ae998d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72956d61-3073-4650-a106-e589a2d91919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56dabe9-79f1-4f31-8c2d-e49ccc326cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adcb2f5a-3c32-44ce-9285-164e2ed1afa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d0ef5c-5a81-4e8c-b9b3-df893fcc91f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b04d3c-c49e-4d15-8650-0c512257e0ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d186b7c6-bbe3-44bb-8af6-845b892565b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff509ab-4a9d-4c33-b479-e8ceb6327e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50109cbe-6246-4d3a-bc49-f3cda1572776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963e6603-81a7-43ac-8f89-0f3d93ff14b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab473946-23df-442c-8329-b869a9860052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6eb130-bd3b-4f7d-9956-01fbec916593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2fe46b-b246-4955-862f-f27f378ee86f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2f64fb-3812-4264-bef1-b60665a47836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ea35c0-43aa-4c0b-94df-c2bcb268c566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc41592a-d856-4c97-b020-372ecb2fbfcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ed8548-b4a3-4610-9e6f-188e43385f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c5e820-ba8d-493b-a1b1-9899187a43a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.199.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b36f73-34a2-4bd1-9ff1-5a2460ff76f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.211.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a2ea8f-8011-439e-91b8-99c73e7bb543", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.234.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7a0727-d75b-454a-987b-4dd9a21f9bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.2.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60693e4-00d9-48b5-8da1-316b6a82300a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.201.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cdf00f0-1ae2-47ad-98e1-fd2b7eae9b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.221.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74eb0e6-91f9-4fbb-8a29-efa0162c27f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1515bbee-1f51-4b56-86b5-35a50948a52d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee99b45-3401-480c-bd3c-2c7fc358b016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9a0ff1-28c2-413a-8dab-8bf5a9d2e225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440c5f7d-610a-4d98-a202-ab519e55611c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.216.108.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ecc192-b0cd-4018-a6ce-a0681b9f5081", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.244.178.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11746605-2d05-41b7-b57e-88b7034d052c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.13.197.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abdb8db4-5ec0-4261-89c9-d7b8966d3102", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.255.211.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ea90ff-3457-4aee-ba62-0c18675b66ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.34.253.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ba286b-65c6-4144-9b7d-32f7d73d70d1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.34.48.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e675045-0dee-44ee-b1cf-e1d1c578e650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.56.241.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79dd1d99-93c4-4262-bf11-ba10f3049bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.157.122.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6461b4e7-37b9-4278-8add-4d500b153f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.157.135.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860a24b6-8fb6-4519-86c4-bf8129257df0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.220.168.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c76150-a280-4834-bb23-9ad5bd12cba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9576e2fb-0aca-4412-8577-db4305055759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a55812-a215-470a-9948-80b84564c297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9414c2-aee2-48e8-baeb-f9b8b000db36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54d3435-2292-4be1-a623-fa08730ced3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1d0ee3-e2da-4e51-b08c-021a9f0420da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014d6cef-894c-424c-87fe-9fd8dc497cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45829d66-cb76-4385-b3c3-5dc0e8946ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641f03b3-67c6-4aaf-a2a9-276ccef20d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64efa9bc-88a3-4954-a971-5287481ef945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636a6391-010b-4dd0-a4e9-2e026bf87e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b732e9-9163-4113-87f9-5e05a2b401b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c2b97d-8e25-44a7-ae0b-da4abf81fcee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e567e8-5c26-49cd-8cf3-1ae9583f7af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de30deb5-cb5b-4d21-9c6c-e7891a7b3c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3571c91-c4fc-48d4-a49a-330f0a502f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2977111-0645-455a-9d78-a90bc7fbf3f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba483d83-9a7b-4be5-bebc-51b24ff0695e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc923afb-4b97-45b9-9cc0-57921cb84548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625f843a-dd65-43b3-b2f7-514c319492f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379ff4b2-0dd7-4543-be8b-971aba397fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9e1c64-2f90-435d-ab60-11b02af3480a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8469205b-baef-476e-bc72-96188c0d1ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c131c61-82ad-4cba-9231-33b230e11714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3d3363-4525-4b99-afa8-61aa0828b8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a643f7-b1d8-493f-92b5-955df0c693ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3648d1ad-5ebd-4c3b-a6e9-75529cee11a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61477f7d-a549-4f1c-8628-dde782bc97d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c379aba4-6e36-4bff-80a7-9439be34cdc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140ca483-1f3b-41a0-9b00-215e49f17792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54fd624-4810-48c1-87e6-4533961ab37b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556e7aaf-a66b-470d-87bb-5c51927b9e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79336bb4-43f1-457f-a8ec-fdbf64716093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36da54ca-1d80-4e14-8041-07dd0b6eebde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9cf2a73-0610-483d-bd87-cf92f9315a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1a05b5-ed6c-4e82-9f82-5d1aa7baa64b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eebee71-068e-4d49-a0ba-d8ea2eef56af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b79c443-4f45-477e-b794-0f2509ca8c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80be6d4e-cd2c-49e6-bdfe-86480a71f258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d52332-a16b-45af-882c-db20effc84ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109c50f8-4f51-49e1-9db0-876f48ab91e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e9bdec-ff87-4566-82e4-b6c0f17dea4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a099b6-c947-402e-a6c1-4d14b71a00c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5ddf5a-3e77-4862-ac0e-ab459ef44547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b12012-3e1d-46f6-82a9-b87b2cc8505f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99059c46-a0a0-4cee-9904-75f92323aa61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08e660e-0f93-4935-b589-bd5436beb8fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52986f96-b42a-4e03-b146-0701058e7745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee10e4b-2ae8-4ceb-8258-7939ffb1a630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2726a46d-e001-42bc-ba09-b4ae011c0622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007aa988-010c-47af-8edb-47bb0120a77c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d19620-3e9b-4cd8-8f31-55eaabe8a12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b496829-8801-472b-87e1-d20002392183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5662963-ebb9-439a-a8d7-cccaae34047a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0a5132-c317-4a6e-926e-f8d4fc9b22a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948475e5-5c4d-4456-8457-67e580d7d071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9fd2c2a-a266-49fb-95cf-4c6d8bf09cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b416d1-4857-4fdf-9c06-d6da4e974cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e325fd8-39c3-470d-83db-be22b2633a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f47151f-fc38-4d69-906d-5404891d3ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1154c3d2-665a-41e4-93b3-9c821ef5bc05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d16758-36fa-42c2-9bc7-14ae835e1ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cb5563-1d8b-40b8-b649-1b5e59239870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb2cd53-4deb-4c29-b229-5c52324b4a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a53ff1-3e3c-4651-8906-82b2aa61a00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c42e8aa-b7b8-4fda-9b06-586416843b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b73163-a39d-4928-81da-32c38b63ce95", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.116.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1953ef2-02f6-4f9d-9da2-f6727d299b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.230.60.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3635e5e1-1ecf-4238-a721-c38134ce6136", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.241.77.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358918bc-b43c-4690-b6d5-1f7954046a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.255.89.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a1a7912-5cfe-4e22-ae5d-14d56c1d2e38", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.128.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ae645c-73a4-4b78-be6b-dfbd37f9916f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.128.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2947971b-83a7-4c27-8f16-5de15ae54e16", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.130.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f857b7c-0de9-4eb1-a397-85db266ece63", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.130.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817b050d-b5ad-49b0-ae83-610c794d5001", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.130.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3571b5-1161-49a9-8ae9-1bf32b27335d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.131.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9322ca3d-b260-4be2-b4b4-1d880a2a3f57", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.131.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5202ea-df33-4057-b0c8-a5b3667c91d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.131.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132677bf-46ef-46ea-82a0-b670727956e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.131.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1c0649-a2eb-47c3-a10c-5d0ecb832576", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.131.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a80aedd-b83b-4bfc-aa28-659a806d0642", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.131.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef9088b-fbdc-42fd-b416-f06f21301f16", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d3834e-a0be-4d8c-9e37-6e2c2d061fbb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15585acd-6a72-4b89-932c-9b2a93496549", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b78790e-b697-400e-b265-976252077ba2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413e226f-fe4a-4f96-b128-d312deb659cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284e6b6c-ee17-4b79-af42-c07114e0b219", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5959f6fc-544c-4089-a840-613c7e099172", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb77845-3a84-40e6-b4f8-7a0a316b0c23", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1d415d-df03-4b02-915e-3f6c9381ad7a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82965395-a3d8-4cc1-b94e-81e39d761eba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ae17c0-9a7b-41c4-b1f2-2abaa4a4b720", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31364d72-9336-4ac9-aebc-31f6b026671d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.255']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e5c292-4d62-4e87-9b6f-3889971f9727", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c277ab4-f5a0-4525-b888-9f71814db761", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1fba24c-fb0e-46bc-93a3-6f2ce9d302e7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a19bb06-b3cf-4a02-b502-1a8bcf9670b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78cdddc-8ee7-4319-aed3-6c9478f98f48", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0f474c-fc1a-4390-94c9-aa3603aaee62", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037f9dda-a636-47a2-89b5-ed2fa78e7158", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7ff4e6-7ac9-48ff-9b94-16f7af5616e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c858084-bf97-4e1a-9132-4244ef37f59f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce57435-12c3-4ff4-be40-885d2d94578e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0a087c-f1dc-4b45-9d06-757ac836a516", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866aa5e3-c0fd-41a4-bd5c-48ad090ead32", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9526307f-cf86-445e-8dcc-30cc59707606", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28cbdafb-2d32-445c-be86-dc254095df58", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98bf51f1-8271-44cf-b532-90872b8b955c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23aa920-08a8-4592-97ce-579504f6a3de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d80ffbe-f237-4511-ae5a-b56b7bc7bac4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f50d13-ffb3-43d7-ba1c-98b2a9db1618", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e70c90-d6d8-4dd2-bc41-2917aaf8677c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24df19b-0c89-4700-8cf7-4e272d4839a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12beb8d7-4420-4ed3-a494-401adde197c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4884f4-9c1f-46f9-8a86-7e8b3e4dfb36", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--758ecd01-2d34-42ce-8a27-35104a83eea1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06275a04-ab9c-4e85-ba23-9161fd767055", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db7890e-8aac-4491-b9bd-d98a648c58cb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d13949c8-a619-4641-872e-a8a36449fd7f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4aef0f-21f9-4972-8c4a-6012c552ea9c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1c8752-6b1b-4153-9313-726f13f562b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f33250f-197e-4712-a4bd-75c6ca45a20f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8436ba7e-11b8-49c2-926e-ee6e4133b331", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1a48fb-c46c-4391-9004-816def3fd163", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76da523-4d59-44f2-88d8-624614388e44", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a76cf3-a235-4755-8f56-dfd324ae1767", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a479b04-9f16-4faf-b7d8-1a370cd37930", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd11183-bbff-4bad-a9a4-9d5f846b4795", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3814a445-a47f-446e-ad54-58f95c528db6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f70e1e17-f10c-4cc4-b952-1626b35c2058", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a83d6d9-fdd4-457c-9daa-413fad793279", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a07c9ed-9989-4242-bd7d-d304254fad0d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8490dfe3-1b66-47e7-8c36-e37678c3c8c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c3082f-cedf-4f06-8fbc-ea5ba9e31f1c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97f3797-f21f-4f64-9a77-18fea91f7bde", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a304dc-4a92-4e1e-8dfe-5751114b1e0c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75731a76-b520-4937-b161-4a55f6c278ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae7be58-8a3b-4feb-bff9-5bc5279c890f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.134.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b9ec9a-de08-4907-95aa-3c62daf7e878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.66.75.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34cb762-98f2-4ccb-96db-e0bfd039785c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.95.82.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c040aac9-15a1-4054-bb54-c3cc287b70c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.234.202.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736bbaa3-db32-4dc9-b0e5-074b95911f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.58.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ed8f03-1a5a-4806-97d9-49a248567b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ac7053-d7bd-4703-983a-4c7a42b83f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.252.24.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f91211b-de6a-4ab9-8ca6-187ac0d6288c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.252.30.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310459e4-48a5-486c-97dc-edd076a7d750", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.80.141.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2109507-67a8-46e8-bba6-e36816eec8c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.115.152.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216a1fc6-eec5-4811-ba20-54a868c33a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.136.188.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9b3641-844a-4902-9271-a1b2ec0ab135", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.237.5.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b9ab12c-bb69-494a-acb9-07c42a55b77c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765fb971-6cd3-4a1e-b50c-ccecf903306a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0231ba53-e6d9-4084-b18e-3aa530a043c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57c57c4-3f48-4949-82c7-856a7df3f13f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab60c93-daff-4146-8cc6-081c9b16b0d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c1b28f-da23-4f3a-af12-5518356b28b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.131.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--892ea0b0-be27-4435-a9ae-cdd6e9ed1eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd3688f-8a8d-41ef-bdb2-7c6c350a7b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918c9c70-817f-4f08-9bd4-7c6dbfd17cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66757979-f701-43e1-995a-98249ef9cf3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10bea0e-238f-47bd-8386-ce1bd531fbbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4317fea0-b013-40ab-bfbc-bba5c94dbe9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824f53e1-cd79-4356-85ac-90863da5fadb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f43f9ad-4c20-4c75-b535-d8239039bb1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb99dab-10c0-45d7-a587-79be8e98946f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837cafaf-8ca5-4a69-8d98-e082166e6b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd117fa-2b2d-41f1-9d79-2aabb6ce70fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f2f0fd-330a-448a-b190-44ba0923ffe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab272214-10df-4b8e-bae6-de0c46f1cc14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f694f816-7b74-485d-af82-99ac4561d235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be561a8-2154-4d94-90be-9c0e894f77dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2bc4a0-0048-47a5-878b-607b597b4e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a2a8b9-a0af-4f72-ae67-4b292de4e9c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40338e25-0d0e-4d16-8d60-117a184acaeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89407358-5a1c-4560-b71d-939e7f7e64b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df52018-7243-4057-ac8b-b424a6c9fef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b1efe2-1f6c-4eb2-aae5-72ce5fecd110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bab539-511a-4b34-939c-ecffa318bf63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d2a91c-2789-491a-9ad0-65231b52112d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b3ef53-a3d8-4cc4-8ee3-1975fd0cebdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d983a950-eae1-43fa-863a-97fbb30f6a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6eebe8-4854-4e1b-914e-a42f6732a0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44aeb186-04fa-4eec-8cb0-13836aa44767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65907cc-ccc0-42fa-a0db-9ebae066590e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294d7bb9-8318-4e26-a3bc-bb0825f0e8f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f1c32d-d715-46a7-8631-ae67d2772f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80d6b7f-88c9-4b94-9967-d04233d67dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc74da0-97cd-4d10-9973-de08a502f550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00278fc0-5382-4e37-b30d-e86b83cca8d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b257545-2aa8-4aea-a12b-077faba4868d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018cf780-f2f3-4d26-afc3-4127b9754baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c7123d-6fcd-4d53-840b-82d2420b4936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2298b88-2928-4ac8-a976-450a1db97e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274a4d61-7e93-47bb-ae13-f68a2780b956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb23b0f9-8dd8-4f22-9843-8616481944d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25b9400-85bc-4fcc-8537-f52833f8cef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f4acac-d687-4271-af24-76836e4b7198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e70f9f-3a4a-49b8-b514-664b8e23d255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14179c83-5de4-40eb-a4ab-38bfb0096e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05b60fb-d043-4990-93cb-6a76c954f918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ae36c8-923c-432f-96e0-6e85593f47d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.168.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528978a7-9291-4ed0-a77d-020e3b73c66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14ecbe5-a3d4-4116-a504-471375ecab70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78935a0a-fd40-4d92-b37e-37f047b2c5d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.170.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20683714-e8bf-4311-8e83-918ea52d9f35", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bcdc4d0-97e2-4620-aec5-29604ed73d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22c5a1d-6c19-43af-a558-9ecde079584b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.173.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3688704f-0391-49fa-93ad-1c12da612d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.176.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d796b2-aa46-4141-8962-8d9db760a65b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bf54bc-e394-4311-b0dd-e5b1044479e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aff282f-d360-43f8-8b00-8cf28e970308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbfe79f-cb30-4476-be91-f72f952cab7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec4364f-1930-4796-8a92-7b66af4bae60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a1b64a-e926-4617-9ef7-d760c4b1b062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e1944f-b358-4684-b3de-f11014e80425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe383491-8127-4deb-a2f2-7af2f37930fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.186.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495fcb11-2ea8-431a-88e4-c588234d43d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--758abd94-60e9-4087-87c7-c03a07760bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2a4014-10b1-47f9-bb58-fc79296cf52e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7644cd-8729-4ff9-bf70-67189eb35624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03caf950-5ed6-4ab1-8d25-1964f59e79fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09ab7fa-1e58-4a93-acf0-c427783350ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918699d7-3af7-4687-92d7-d024dab0b536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4dd0c70-2ef8-4d46-803d-8001a5512b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6116d81-2e3b-414c-9090-9ca2720825f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da0feb7-88ec-42e7-b546-8e9c0907727b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e3d215f-7c97-4ebd-ac4d-aa43fa46d9c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5849431f-865a-4f05-b5a0-9c51585d72a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c67a9af-75ee-493c-ac2f-03060ccc43dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2744b19c-3a89-49df-81d2-9884432ab3fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.204.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337fb15c-c1ae-46b0-945a-22467ae6117c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a33e66-9c47-43f4-b8b4-9a8067d13877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79c36c8-1861-4635-a96e-bf549b7a58f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2cad28-b231-4ab7-b259-0d393c506ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a9998e-1236-4102-8ceb-d63e2f5c9168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0826a3-8094-4efd-8bd9-7f7b85127142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3115a0-23d5-43b3-b2a4-1330d3de0d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c39d00-f950-4097-a782-e39a2989a92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b373196d-b8b4-414c-9554-a286ae749dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8572f66-42ba-4056-b3ea-ca1ea5d8ffe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5928263-e366-451e-964d-b96202a70e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a707284-4bc5-466f-8248-9811c7079ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc0fd4a-11b1-4e67-98ac-e71f038f339a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32348e51-4b0a-4753-851e-6b4249a90259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5cb4844-5bed-45c1-b093-38ef189728e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b9b2e3-c89e-4a19-9417-6cc3ffcf611b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b2b083-72b6-44b0-984a-35ca73ef2f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4974499-5344-453b-8be7-0aa0b03af292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9cb072-b35c-4f4e-b253-d2f26848bc8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b9b22b-374a-42c8-8102-1e31d5e0c01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa120b0-7373-4ed1-a2fc-9d879a8b0995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d7c8a9-025e-44b4-ad57-d43094b33bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56dee3e2-f968-4b04-9ca0-2672ac09ab18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3e6172-6806-4f00-bf7f-28ff4e4405c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972d527e-2b3c-49c4-b708-277c756de5a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6500a874-3615-42de-b04a-1e3aecfd6591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e0c895-2f31-4aae-8bad-e3fa73df98ef", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30ba7b4-8af4-4a13-b6cf-369f843099e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92093ff-c82a-4e88-94da-13385292e274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0681101b-3557-45d4-8932-c2d0b80830ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87490af5-e024-4086-8ba7-8b61a155a358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b094104d-299a-4954-855c-53fb224d923a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e10ba38-3bfc-49e3-afc4-e768183d41da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ac83e1-32f1-45eb-abf9-aac392685b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55134e94-caf9-4e37-9d2a-9229acb79fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.228.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afdb76a1-95ec-4788-9d2a-8173aedca9a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85deb7d-3008-4884-8dda-a12618758d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e19801-f583-42f8-8b11-8871124127c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27198cf9-f1c6-4b79-9a35-f0ff5a84bbbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824ce722-6b49-4667-91c1-fca03fd50602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40d2723-18bc-4c5b-bb59-4d111fd641ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb153cf9-fb22-4201-bc18-f756055d78ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158bfd51-2985-460d-9e4d-56871c323163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700526b8-906a-4465-8819-ab3f812cb70c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b09c5d7-ce4c-4013-b6d4-afeb5f2e284e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f691de-782c-4a8a-be95-4dfb10fc13fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f8693e-0555-485e-bbb0-3e9518549403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7084da1a-e7c1-4964-add6-18d6a85cd157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d9d3af-75dd-4a96-9e91-b1ad5c2577e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a06c71-206d-44aa-a16d-f74b07ff8746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30abbb8b-756d-4f57-bdc5-a67973820b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1695a46-91b1-4081-b6b9-191e396d9d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1db22a-c65c-4eaa-8325-6a8d6af7cde9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bcfe762-c775-4672-82f1-80ac6700f751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9447c2-8ae6-419b-856a-db2e784d090c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b080eb-f984-48e5-97dc-604824939a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe61a2e-e21a-47e6-b5db-559e50a5fa89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d3bef0-942c-4af9-a5da-f9765835a86d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcba25d7-a099-485c-a2ac-73ec5c183a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb330f1-6fbe-4268-b6c3-1d506b0fe11a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276559e1-bc78-4dc8-b4ac-cfee0eff7648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01c13fa-15a2-4a7e-a5ca-f70120bb6cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fad1ad0-a3c6-4cb7-b33c-c74da22a9859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8293bca2-3331-43c7-b8b9-fef1abafa6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb91fe98-1990-4197-b90b-6c0a11f83baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f79e22e-345e-4246-90ee-97d21b3487ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.250.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be11379-bb2f-4e71-8bd5-156937d1ba71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.255.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a85058-7192-4a3b-b975-02612951efe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d0f46d-36bd-4290-a53d-f409b07360a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.193.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646aac6c-7247-46fc-b9c0-3782109abc84", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.59.121.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838c81f7-7969-42e3-b273-0ab412e83e24", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.59.204.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779805e7-39ac-4162-8705-5aa7686668c7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.59.63.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0ac22d-7c4a-4cf0-9188-fc0938e3922a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.13.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7df1767-34cc-4c71-a860-8671f74be6f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.13.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046dcc25-38ae-4df9-be65-15d0394934ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.32.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc8883f-cd82-4b2e-912d-02e7a288e40a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.233.248.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8c8d10-6940-4f9b-a1af-cf8bf414420d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.51.238.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61f09c7-ea2e-49ec-a25b-370755a23e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.75.246.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b0542d-51e4-451a-ab73-f1fad96a5c1f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.75.89.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26e50bc-791a-457b-b052-73c73c2864eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3acc99-fd3f-4766-8127-e7f4470707e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.110.178.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2edd0e09-ca9e-4ac2-a760-08778f998930", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.116.254.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05bf311-90cf-4767-94e7-94298afeaab9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.121.24.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d7e8d8-0dc4-4463-9785-f7051d535a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.14.23.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1ed018-b645-4ffc-a56f-210302e595de", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.144.225.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256ccb62-19a9-444b-88f2-270f586efe0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.115.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d6416f-c683-4d6d-a6d4-9e936415361f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.115.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3367a0e-403e-49de-815b-91bb379a3658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.119.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec2d707-bbc1-42cd-9fdd-f9d1699546b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.178.242.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ea2624-90f0-4f1d-9738-026547288b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.194.72.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8746ef-841a-4367-aa6e-6738aa392944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.195.114.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611a7613-d514-484f-9e51-a9be1c0cc92d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.56.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca4eb0a-18ae-4884-880d-568163c6498a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd1f5b7-c4a8-4cbd-94ff-0dd411b30654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580f9350-07f4-42f5-9425-31ae0e904a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2513504-c480-49c0-9a80-357a32f2f76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc845f9-2e57-40be-aa7c-43bb43305971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ba00ef-183e-4c3a-aca0-48d7921a61cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3c6408-6ab8-4dd6-9b57-3d43b145e059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b24f82-6423-4ebc-98dd-12f1f5230db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8d79f4-4950-4f1a-8337-6aa76b108140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf299c9-9fd4-46e2-bd02-280363368f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0188c256-ea39-4b23-b293-70b66164d374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749ca2bc-1cc2-4d08-ab43-d34f709c1cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85da315a-4056-416b-bab8-245d4aa30a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e7ecd6-b242-4d36-8c8d-e5dc2a7b90c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.208.34.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2b7bc8-846b-4a3a-98e7-4cd5f7a35c00", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.208.49.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b848c75a-bc4a-4790-aaf2-02097992128e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.217.255.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd00a27-bcb8-4eae-baae-85b794b466c1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.221.25.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1400a6ce-0dac-49ed-ab0a-873ac50e808c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.243.127.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b0731f-8036-46a0-bee3-4db72ad21fd3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.253.43.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe172abf-a1f1-4f5d-965f-32429d5246a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.254.65.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d17519-90f3-4072-8e84-b671e7155128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.6.145.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88637ffd-6bbe-4d4b-8f66-5c4529b7ae18", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.64.241.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ec6d7f-786c-4c8d-8c61-d24931d85e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.68.31.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7358c0-c40b-44a4-ac17-bfdde0fcde31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e62e2a1-7d66-4622-9ac6-033d2b502cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab64c61-f9e9-4ac8-9ec2-2b1dd07c1b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1ac22b-02f4-4e93-9509-b23d50d14cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90a3638-c8d5-45e3-b96e-ea049db17911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f944af08-636b-4992-9606-21ee8eaf9563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e62cb0c-fb84-4f1e-b10e-450f8252ebed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b1a908-fca3-4aa7-bf59-30450aeb8877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4fed952-5c21-4bea-bb06-c87b72b21491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e8890d-11d9-4c0a-a0a8-3ebe408d8174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--462a02ea-a763-4ac6-9be6-64df225dff38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c615f10-8ec6-4fed-9144-6f5740983bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18cd7503-1b4c-4d94-8efd-14eb09c0160d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6197d53c-838b-4f81-a733-2597069741db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98bee3cd-a038-4c4c-ab84-36ac24873a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07edaefe-d3cf-4c9e-970b-9b7b06ff70a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c52ffa-e190-4988-91d3-68299e043722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06dbc723-821e-484d-8576-be36c064def7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8bd21a-7db4-4936-adfd-2f00fe4ff023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c49c82-a8cd-42b2-931d-ef88f3b63519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4fe40b-ecc8-4af7-9761-7fccdab231f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66cd61cd-2f56-483e-bfb0-67d4ac68946b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6647944-0f0f-4949-876a-23c86676fd9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2a3d64-5861-4b07-8753-4bed5d2287a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd00fef1-7f04-4454-91ed-41ec6984b733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901ec2e0-421c-44d7-8b10-7bdceceb048f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7914cfc-f5e3-477d-8644-16948e2b02af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe6294d9-bb56-429c-975a-8f0c2c4f8866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ca8947-fb7b-4639-87b7-9ddfcd09d1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ea75cf-3f33-415e-b10b-7bbaa941298c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76157386-f9a0-41ed-906d-b4cdf245afdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f3db5b-288c-43e7-ab17-46c14b86e65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960b3506-73f6-4616-9333-dc08b42c6729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff546a91-faba-40c1-971d-a9bb6cef3b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde83248-a434-4b57-af81-f44b4351f3e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f919f7ad-ab07-4a58-a0d5-451530d9ad3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d5d3a9-40ee-4221-9e41-515b6200c1bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5340a9c-4f45-4012-86ae-f7431915b392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7faa41-5954-4d3d-b2f0-58092fc51559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06856d1f-1743-43a3-abda-0aed75dc2045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5353b0c4-bede-4508-8da6-3a6ef49dbe26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d564a539-d952-46b5-a546-61c5ffd16d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91850e8f-1319-4f94-84f4-ebe571d09592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b482aa-ba1e-4b38-bcac-eac4b6cec2ad", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.84.242.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b2ab02-1298-46c0-8a8c-806cfedebf34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.90.70.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944aabec-9926-4918-8771-e8ca121ff63d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.92.15.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bae8a06-c69b-47b3-8543-2e3be81bd118", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.4.244.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf9482a-2b77-4986-8900-4d45e3bb5ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.94.145.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f444a53-5011-453c-9444-2425d5694152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.194.115.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f05761-44cf-43ec-82dd-8b0ded396fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.16.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba402238-9778-4e4e-bd90-1ed2ee6cdefb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.16.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2318554-66b4-4563-a45a-cb85930a3aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.21.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919c21e0-c762-435e-8331-e018e17c6e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.233.229.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c81db92-83de-4fbe-8695-f85d538c6093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.234.43.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9d6e1a-fa78-497a-9dd4-18ea8e23adb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.235.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ab8a1f-9e2f-4c20-89ed-07800656d488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.0.0.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8378eec4-7109-4021-8440-9d8b942783e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.44.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc1a978-3483-462c-9bdc-95853ae1f7dc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.40.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1031c920-aeb7-4e7c-b82b-19888fd1f71f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.40.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0aaa32a-2d27-4654-b9e7-a044fb377f03", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.40.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0076c778-c376-400b-be3a-cd2ba39c7a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.173.100.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245b587d-41c5-4d54-9b1c-ba42a0c76956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.173.104.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be350efa-f780-48dc-9933-fe67f12e1a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.163.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bc6f5d-5d0f-4165-978a-4d49a360d834", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.223.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee799ca-2853-4e06-897b-9d1210022443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.235.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf6ddcb-5af8-4f18-9117-06a9a6059e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.27.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3063b8-2d73-4975-9400-007118910efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.27.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a480c7-4b99-4751-a5ec-56f71aa1c608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.5.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43567f30-72da-4782-a108-db79e36e0209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.149.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1770cbc-7e62-44e0-b316-b60ab9559e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.164.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9137b5a3-6fbb-4ab8-b83f-ed073b4bb4df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.220.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad734d9d-58ab-4bd1-967a-9ade647794de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.241.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c7b275-f815-4aad-9acc-351df8aaabd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.255.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675be940-65fc-4831-b920-499554b1ef96", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.48.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610d9038-8609-4f39-b778-5e81b9ab8bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.69.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12559b22-ee4a-4ae9-8f35-9eed0122f171", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.174.210.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60dc096-c56f-41bd-9972-0f29a95fd36f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.224.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851d91f3-7e62-4225-8685-b7b715882118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.109.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d27d384-d4b1-4f24-8753-009871a7aec7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.49.70.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396f3d57-506c-4d9f-bea1-8f6b88947232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.58.129.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c951d1a2-466e-4b93-aa07-bd1a88ab061e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.69.227.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c486b16-db43-43a9-bc41-063bba8708f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fe91df-5202-418f-803b-1b16eea75c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0745d8-e9ab-45eb-809d-36b3b34111dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7871213d-1238-4bec-9bcf-5da139b1b17c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffaa85dd-a421-46c4-911b-e094cb3d563e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e7eb91-3108-459e-8de2-1646cdac102f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32913c11-887e-4d98-bcaf-b11374f2cec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57f2551-3b31-407d-b482-948090c24dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0555794-b034-4f2d-bfce-1dcdabe05dad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e56054-9b0b-4b96-a107-9f71b06e4f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff72e3f-6c59-4e06-884c-b5a4dd5c4cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99435f8-4b54-47d5-b2dd-d48fcd744e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef7807c-0963-45d9-ab14-d61df2d5715c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d6843f-f4ed-4727-9c98-5167a5c6bed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ecd531-68e3-49ee-a821-d91866229227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572d5bf2-8fd4-489b-b357-dbb578b8043e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1024dc-13fc-41cc-8ced-9ce401855bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee454d3b-6b8c-4d22-bc32-5016f9c6241c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081a0350-418e-4f85-8660-404751d290c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab61a32-bcf7-4eea-bd43-f635faec3b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55451c7-2965-4d07-9e25-717600270b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ce0d67-b459-4d3e-9c3b-e1570e96fc23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118028ec-206d-470f-8922-921bff735709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65cd5bb-c982-458a-92cf-ccd47f22f3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.209.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f19304b-a22a-4469-b7b0-9bb7cf67dc9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.210.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ebe0529-2a12-4887-9040-5e21526316a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1019e66c-17e8-4f3d-b5e4-cc1c788da536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.192.146.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ef70b7-a4b7-429b-9d34-4fe04296818a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.184.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df44fdbf-5d5d-4366-a937-7c478711a4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.187.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fcf6678-931e-4b4d-bb3f-92bee7866f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.21.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887ff742-2834-4c6c-8c38-44e342eec739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.44.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3098683-c6c4-41f4-988e-3319ac68d0e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.46.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bbc4c04-d6cf-47ac-9980-ee12c143e53e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.62.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c80e73c-3f2d-4e6a-9f14-9cdbc7d5f181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.101.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99303ff-01ee-4ad0-947c-76d1d6963ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.110.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6366c5-6a36-4acb-973c-a924c42b0fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.156.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739dae27-95ff-416b-a95a-0e735c27a9a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.167.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71fa23a8-6288-49ec-84ba-89f755554f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.192.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a47a8e20-100f-4cfd-b190-a89713da2372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.24.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79bd4c5c-c9d6-4bba-bd84-fd760ec399f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.115.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7db60e1-f30f-4536-8864-dce98ecd92c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.120.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3021b2c-aa30-406c-8305-71fed0d24a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.125.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ff6736-599b-4574-9f09-b3717c2ff62f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.148.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3262ebbe-688b-4a4c-bb7a-f1cd6a5944ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.168.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be0abc3-907a-4166-9636-945f67c31943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.239.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf33bc0-3a0c-4bb3-9416-caac93a5c73f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.37.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b622d5-9bbe-4682-9f9e-39c31e111cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.48.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1148ab54-37fa-46e8-b737-03f21d0fb6c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.84.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0451a328-7a0e-4b9e-bf5b-a4d93a1d7cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.0.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ecacc1c-c1a6-446c-8637-8a3f151ea0ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.100.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd34279-b164-4a9d-950a-0e444ec2a7e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.18.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e888ea57-5a3d-4700-bb30-0ee2f4c01abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.181.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a264e05-903e-4659-a6a8-c9621f2ec716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9580d078-c425-4dc2-9341-c1a943840972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.58.56.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb45c673-27cf-4d87-8cd7-e817fa193b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8948971d-799e-4d9f-bec0-d5dda7fbd5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9cee43c-8995-47bd-8fec-c6cccbcb0fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05788f0d-9391-4b46-9c91-f80ba0bbff9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.174.130.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d70321d-5252-443a-ac1b-8a423fecdb51", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.176.236.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d660a31-c530-42ea-b943-a9016de15198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.176.78.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce0ca74-b3b3-4f07-8f79-443885d084a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.187.180.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ea5a99-acdd-4e9a-842a-8c4cbfc097d9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.191.244.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e815bff-2057-4203-af2d-5cc9d350808d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.191.89.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc29365e-1f69-48d4-810f-53b0877e81e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.238.24.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32df7e6f-ed4f-4780-8d89-7baa78c89829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.250.118.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ba29a8-9fef-45c7-bbdd-00f0a4912a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1b9f9b-6b3f-4439-b995-cfa98359c46b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.118.248.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff27b58-2338-4567-923b-cae59b6bb08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.113.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f855b08b-717c-4c82-9ed2-f13a40725e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.119.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3819c205-085b-4f80-99fd-8a5d2db44960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.143.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc5b65b-404f-4a85-a98f-c55bf8b32c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.190.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233f882a-d02a-4a12-8096-61615c1f614d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.197.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb782d9-8928-441b-a834-58a4d17b0ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.205.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66ebce3-cf87-40fe-a029-c3b166d8638b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.209.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59afdc0-64f3-45e3-b274-9a376642543e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.212.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d4726b-1cd9-42df-a7cb-013c3bf33b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.216.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d608347-7378-4f4f-87a9-18d8fdf0d6ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.217.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa93262b-692f-4b94-aaaa-3511ee8bceb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.221.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639b559a-8e9b-45d6-b245-b61f3d4238ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.238.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efdf28f-f928-4d2e-bf01-0171c5f6c400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.59.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cffe35ee-8e88-4c4e-9947-c6a338ba6dd4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.65.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32fd616b-3602-4725-a472-755f6d2abe33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.74.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ca705f-859e-4a48-bd22-6464cf3912ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.97.75.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6f6d15-62c9-4181-a2d9-6db0393cd1ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.97.98.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be34fb69-3d85-4fc1-b989-44e6a4842f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.120.3.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f05d0af-46bb-41ad-89b2-991ec8c3cfea", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.105.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f153afbb-8518-42d8-8935-ae25edd5efc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.121.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a218b75a-325d-493d-b109-35b7ef3313c9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.213.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63dbd36-9e9c-4666-be0a-24975e33a5c1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.249.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317166d5-50c8-4253-90d8-0eaf82d57532", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.34.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fc98f8-0fa7-4899-9328-65b68ed85889", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.58.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea26725-bed4-40c7-825b-d6c7b0b147d8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.61.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--decaf552-8046-4750-ba4c-3d1270920ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.64.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901f6f9c-96dd-4c5d-8348-ab2c843ff58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.84.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361ca14d-b6a4-4d5c-a01b-3b9618160a94", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.88.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7762019c-f075-4721-b43e-a54b4e4b050b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.158.216.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29efab41-f79b-463d-9663-b9dbc828c4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.210.245.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8c7272-d856-42ca-964d-097e7ffb5ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.159.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2c527e-b254-407b-b186-b52085190f77", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.22.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0fa6ee3-c300-4707-90a1-24828183249e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.5.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d07298e-fa82-4311-9a23-6bc1eb862ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.215.213.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23293d91-1bfa-4975-8495-c74f880a7996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af14816-f539-4ab7-9b30-07183a1f2dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a082504f-e95e-49d1-a920-8b529e08a704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c447e7d-c8ca-4436-9532-4d2a835fbe26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9694ac8f-020f-4bca-9507-d0814b0662c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cca0497-a582-46c0-83a7-0b221178f4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6747ce-0762-4f8e-9b1e-7f3c40efc480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ddfd80-bcc4-4496-8ebf-7caf520e433e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec786ef-7bd6-4c22-bed3-3889205be7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312fd881-4929-42c7-bcad-24bfd684ba85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1e2d86-964b-4787-af7c-b73fafc0b337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f735137e-0342-43ae-87dc-a463d95ee8d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f720e872-f307-49d4-b11d-4959248ee3ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a892142c-9626-4c79-8221-f51b20b9d249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2be4f8-9d87-4ffd-9fb6-1a5ab5a007d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf52291-6fa4-4757-84fc-3fac180c240c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce835ae8-e44f-424c-b722-230e5e184134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c6e676-ac6d-4ea0-85a8-207861edb74f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd01adee-24f1-49b7-948c-a059d5e9dc6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7903b9a-c739-43d4-bfb4-da86b75723dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbaae1d0-16ac-4302-9323-1ee61dc3b413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858be4d3-4e7c-433f-805f-576e931db4c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746d733c-3476-429e-b592-dbcc15b7aca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a52815b-37d9-4de7-82d5-41480725fd03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1bd07e-a154-4433-a98c-555178e18939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550d106c-464f-4420-8fa4-3218c4f6d66a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575e3446-4d5a-4c3d-954f-5818ff196070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71f37e9-2f96-462f-8fc0-3cd9336fdd4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6adb976-9fea-4151-8298-3742a49e7adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a6d1f4-e21d-4bd7-b4ff-edc0cd8944dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea7ca9d-180e-47e9-9cde-37376e0261c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb6f4ee-cbda-4395-b827-db4b2de923ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71eb1aa7-e891-4e4c-bc95-9d4f69350763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e4660e-ef56-4a51-9aa8-ccba00fbaa7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f5161b-c49c-4194-8098-b07571fc637e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aaab5c0-2db4-4021-971c-51325ca6cd7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e1158b-daff-4fac-82ba-d00714e59bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4eb0fa5-8e3f-4637-a134-95192ee64dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bfc53b-d41f-4b43-bb89-137136e60b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf69165-4adf-495c-a271-a3f75ebea966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9365b6d9-14bd-408d-84c0-d74bba30ad2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e52519-c6b5-4ef4-ae0a-aa082f2f5e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48172a21-9d17-49b4-acc4-d069073a0966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0ff690-50bd-49ca-9260-edefd40e15c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af614fd2-747d-46db-8435-25baa17379db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ab905f-b1e4-43bd-bec3-84979af495d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af10e645-4e76-412b-a832-e9d47e37ea3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5940f12d-c2a8-44a6-90d5-7b4282c052a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f88093-789a-4b5f-b80f-550334345a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9395dd97-9744-401b-b4c4-84c201dadb69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725bfa46-55e9-4ef2-8394-4bc0cf8b429b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2714f5c-36d6-4cec-8186-19956f4959d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31620df4-c542-40c8-bc9d-7eaae4734728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800b4430-3150-461e-b07e-3c2b27189968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b17384d-b2d3-4840-bda5-3c3d52d2a437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1fdf67a-6e5c-4956-b39f-92d980cf233e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e796da-dce9-4388-b9f3-d8d73c354297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b77d96-a6b9-4d6b-98bb-0fd8db725ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9d728d-a11f-412d-a94e-690e48d29fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347cdcad-5031-4555-bdf3-ff242b9d722a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a483ce02-2bd7-4b52-b871-111c6dee8211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d341dd52-8cfd-4956-baae-09243f0ef8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be59aec5-e1e3-45c7-a0d6-cd0b0a8d3234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdf5ea8-4dbc-41db-995a-fe3127dbdc14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0a6b9b-df36-4b84-939e-8a9eb9afba68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f306a9ab-2868-4278-8283-2bee892dc042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ddff1e-4f4f-4825-a97b-6100116074c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6181887-a02e-41e3-937b-83954d41fa90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97eedb35-38e6-410e-9509-d84e2a2f12ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c157a29-cd15-4089-ac94-45cb156a2221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c363cbf1-9d27-4115-8c8b-f6de6cb8d593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa59706-2827-4322-86df-4e1c1ee778ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb19fbf7-7495-47e9-9b9a-f95772415c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e531a21-51fe-4ce9-b1d1-73fedd5e5c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4512d9f6-a860-4d4b-8f22-04d96b001161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6eb2288-e876-41a0-85d5-860481ca91e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d257b6a1-fe1b-4c22-a539-d0a8d4fa3b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8693e5-7fc2-46c7-9792-a83ac301a9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a638b6e-e8c5-46fa-ae02-6cdee2af4e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a26c6e-5266-4470-bac9-070ee4b74d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c4b53a1-2289-4fb1-8916-25079b93fc27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806661b8-9ef9-4a5d-8989-1f17824b7c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11296961-4480-48ed-8291-30f68f354eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0f1d74-536b-4885-b2ef-1944692e00c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa5e793-d948-4dbd-b0b9-3cbbde4d9c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73703a4-c9c2-4f0d-afa9-a1bfa1b4de40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ce6005-3adf-45e3-a20d-05abd8165e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0949fbe5-3237-4070-ad3a-048201d7f4d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43013205-b769-42d2-a4ec-3931fe261890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a6c5f1-a181-4d88-870c-d18ae40d6ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--271ce435-c2d2-4840-8d70-fe525ad189b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab43b590-83da-4ab9-93a2-3727db2a9605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd7f353-bbf6-4a33-a634-5de143200c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25d613e-e902-4210-ab5c-79636c89a776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f857a7a-3020-493d-9f52-bbb9a98972b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b82a8c5-e484-4ea7-9460-7dac6dee8598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da455ff-d9b0-4b8c-a8d7-03e08621b805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95cd9cae-9a3c-40d6-8b6c-93f058110e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4af2d4-a489-471b-a673-56b5a1a23f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da36e71a-cf2e-4a59-9031-0d5debb87705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c700a364-3dce-40f0-9215-a09c6fe7e7fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9e1047-8053-4411-82b2-9b085b866b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f968d2b-9ff0-4d7d-b30a-6d1bfd45fc74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0834539d-6a95-432b-be4e-58092d9ad3bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa7dd87-dbf9-4a7b-afc0-14f0723368d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1396b0-db55-4b9f-97a3-d86a5322336e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30bc1caa-2abb-4864-91f2-2dc3af08276b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29585d90-b353-4ad8-b263-6f0cd5ed2713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3d4250-8606-43ab-a9ec-39c8ae2639a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133b1c28-e5f7-4ff4-84ae-d2888d387ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ed96ea-e873-45b1-9e8e-ba921d63d561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01dafadc-f301-4ebc-81fa-fd51d61eb985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9c0109-b390-4182-9d28-3f40abe63fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73883bfa-867f-4ff2-a487-68441d036697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d4640e-8bb3-417f-b6eb-0232176c3100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ac94a9-1af8-4ecd-a412-73bff2d47669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9573ede0-7224-463c-9419-c30439f450bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d99b097-f23f-4d5c-b202-6284c0a3a00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b255448-8bf9-4c47-b903-0451527a5146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6165c35d-ade1-47b9-8a15-7e1c49a6d4d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537781c8-e710-4272-9b25-f3c455aa5ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--124f5044-5ce9-465d-83c1-3df6b6ee3252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba1f078-09f6-42ed-ae10-c5a41da652d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8b630d-bf58-4e97-9648-693640854038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68971a2e-499b-44a4-b408-249f565e1d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233ab25c-7db4-4b18-8bca-68595b242368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc91d2cd-0223-4378-adaf-981ca072f1d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b49a5e0b-0866-423e-bb71-bf7bffc3270f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba973fe7-6b24-47f2-83e5-afcc14f05366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c06a7a-c71e-4299-bd89-e2e240cbb51d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c054178-f48f-48e7-ba07-620030e9e71e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a6031f-78ae-4aeb-a960-0ab8b988aa25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d8405a-cce7-4d03-a373-9f1887d9d031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395c3f35-d938-422a-beb9-fa7d7828db6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a68a3f-bf83-4c91-928c-afec43b6599f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c901c2ce-bebf-421e-8842-e6bbbd9ca196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033520ed-9f96-440f-a584-8930c6749a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28965dff-e018-45fe-835a-65f6aece73d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de6c576-185f-489d-bbab-6a27594a6f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5f0ecc-d951-428b-80ab-7cc8b89171b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ebbc0f6-f6cc-43de-820b-53c5654c6f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8971b7-7654-491c-acfa-0e7762851b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9caec566-31f3-4c10-bef8-ad935a005fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f703cb5-b65e-4408-9bbe-7c530a700cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973ef4a4-8fa5-446d-9c6c-203668688601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad7cfb5-e2ea-4550-93a1-825c5bdaca3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb2e8ce-8a32-4438-ade1-37ad8404d3a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa357b98-0054-4a3d-bbcb-1009f0efe519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317f3ecd-da42-453d-a63a-e57e2c9d4551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17dfa955-a663-4b41-8f3e-9f2be4e62013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba1e394-5c28-4411-9a03-9dc47049e345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ec25be-9781-4065-ab4f-e2b22b2b83ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9f2542-7373-48b6-85ae-872fe9fc9351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505969d8-db2d-4a83-9b65-d1a92ddfecda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e88452c-45ac-4384-8fad-45e24d932d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f2c6cd-c681-417b-ada6-262f0f53656b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260fd277-d6b0-45ef-98db-c959ab7b841c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728edfb3-fb45-4a79-ae46-b37fee8e4431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21a978a-5973-41b6-b33d-209c8fd7e5a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a101953-b024-4344-b183-58ca93620c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8662f4c5-367c-4a52-aeac-881f44a2a6f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a671845-2f58-495d-8e18-44afab41c62b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bff93c-1535-4cae-8c8e-55771f04f3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a929cb53-14ab-4220-a4ce-b1d80e9a8759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6746fe0-a134-444f-a1e7-7e62444a7941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7c403f-de04-435a-a5df-0ee397d576ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd4dd5d-cc52-439a-aecd-610f1f50f583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e135a71a-9620-409a-a475-1c68a68d5e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77fa878e-d441-4a33-b956-55fc9ea40392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fede048-ec7f-45a8-b696-dbaa0a5ba085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e81b804-b32a-4a3a-86d7-68f29b4c7855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c272b084-f87d-4bb2-84f1-8404b899e898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb014d4-af26-452a-913b-55f55b55d0ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38d84e9-6d9d-41f0-875a-2b0940c4e709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6cc0ec-52a5-418b-bb95-afd1327df04f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85977fdf-b724-4660-a1ad-cb397ee98a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bd3c8e-3277-414d-b4ba-aeea88d130ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7173981a-ef5f-4092-8bc4-d04a02a60db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39de9b2-cc7c-46e9-add8-5c156b2734cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31443be7-467a-4f4a-b5fe-d4f26e89e963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c69417b-97d4-4d1d-85a3-2c1805895607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5723c9-ead4-4df4-9a07-ceb1c91a2842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dcdb3b8-b447-4d69-8fc2-18a397555ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c6c693-5262-4336-9b6c-76ae2f67a96c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cccd2f7c-0c1a-4186-b28f-cf922e34f03b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ebc682-bb6c-4857-9f4c-40b72d923b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f28d501-2ea7-4fe1-9fd8-a6dcd35b656a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8bbb89a-0cd0-4bd2-b021-0be580966b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb01a816-4059-40f8-b480-1d2145c9a1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd51f225-6ed7-44fb-9a2f-95f27c9dd61c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea38cf62-5203-4bf4-8f49-339fe542bc5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ca4859-4927-4c54-84a0-184e3d5c1e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd64df0-7e04-419d-82f3-bdcdf3daa126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e2bc53-e2ca-4083-a9ea-c813f73c279f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8167e95-5a60-42ad-a024-68f10d3572bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1114687d-d484-4570-aa75-97d490c78080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f95764b-d2f0-49d4-94c8-36ab44f178cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a010b1ae-cd9c-4507-ba73-0dbb29f262c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9a90bf-1cb6-436b-85d4-6563d5a75e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c429baff-b1e9-49cf-996a-b278dcc43701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8f66a2-abc0-47cb-919c-07922745f004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1f2772-3b3e-4589-8ae5-4a3aaf4292f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64026704-c3d6-4cd2-a2eb-7052244f1867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d178f78-1fbd-47ac-8ab2-6bb430c9483e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c60ba7-0414-4816-8e37-d76be945deff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261c75de-9503-4b30-a5d7-75883ba1b57a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7732be8-9253-4b57-9726-0b35d7cb86d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a56cd70-64c8-4662-b7ab-1b6c03066307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029cf950-fc93-4022-b364-eb4df08c9a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740ee86c-1402-447d-94ac-eb64ae185b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa28e5e-7d8d-466b-971d-cf7ecde2f546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ca7aff-7724-4ef4-b567-1f20ca5134fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a92b3a-cf3f-48d2-8cad-8a025df3d726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c79080b9-d3e8-4311-8898-0651afce4760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38702296-e0ed-4349-a436-3cc838376e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4076cfd7-0dbd-48ba-88ec-bfd90bb5d186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5818bf3b-a692-494c-bc42-1021e70bbae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7edcb8-80db-44d4-b140-f7cc404a2716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64320ff-c0c4-4e5c-8e0a-dc68d28492b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49653b88-0141-4143-a420-9c90ed578a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84dc9f4-116f-4247-976d-515be9f3a6c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb9c6f4-5cb2-4ef5-b220-0e058f4cd294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be192c29-0970-46af-a74e-ad2f1eac6f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb6926e-e2dc-4539-becf-a98754c2f282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fdb47aa-a7c9-4a69-ab9c-f010f8a4faa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a6468e-33d6-4e00-b507-31b56d7c4add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e23b20-a453-44d4-a352-c608622cd0e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf3f8a4-859e-4833-a303-3519378a2891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def307c4-db1c-4970-a265-0168b8834c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8e9ba1-8509-49fd-8f01-4fb2f0d35a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590e288e-30ad-4a85-b81e-417b3b574332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c709de-e3c4-41b1-98c0-fd4233d9def7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63fa8b81-d4bd-4384-bb28-77bd696c36d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--015ae8e2-1972-4848-9834-5913f9744ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c37047-cc52-4b67-b487-d41cfbea70a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6a0b84-8ea9-46c6-901f-f69dcb65863d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885f2e17-e8c3-414b-b618-4031c0c81145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64082ad1-0442-4fc3-97ce-b3edc4ae315e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75439022-4c3e-47ca-ab3e-ad61fbd871d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a7cc8a-1462-4b1d-96a3-1bc5ec5b065b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66f907c-19b6-4b3f-b7a4-a1d5584a2a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1252fd9-db73-470c-b965-ab55eec2e573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f07bb4-9ee9-462c-9596-b7e74ff9bfd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b0a0c93-d252-442e-9856-dae8044c398d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c744b9-d990-485d-9117-a3952daa5e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5677fdfb-da84-4ab4-9c96-c2e921639de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b36c0a-6caa-418d-b1c6-eed6bbe4d157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5858d2-bbe2-488c-b878-675b35d8fe13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a5a14cc-5038-4d5d-8a04-e9960b1d357e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7773d04-f0c9-41b0-aa92-6e05e6414ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aac2629-a37e-41d6-9348-c9cc53a0b761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88919133-f896-4730-8f8b-5311b6d2435f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfbfe1f-f3d2-4f53-adff-9e2d65945213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b789c55-c448-4507-a8f7-f613d53f3b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55514a64-3dc3-454a-8ec3-cd41725a487f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512d09af-bec9-4d5c-8048-083bc4b6c6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c491eb3f-86aa-440d-a716-bab5e3faa44b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192a435d-60b6-4b8e-ba2f-700d8e4082e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd762cc-4ecd-446f-a229-1b337526c2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061d5c9a-fb8a-4570-af7b-9ef3f793551b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5095163-97d9-44cb-bec8-8f04acbdba2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0ca758-2565-405f-a6c2-29a3f5b5e3ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac7024d-e8e8-4965-aa65-10c877743bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60bfe97-1820-42d3-ab35-3bdbd223afa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de919f3-8a8a-4be4-8ba3-413ec491f291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce6db9d-c57e-454d-825f-0ce5ef4d378b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d16e67e-5db0-4227-b7d9-f6a1787039c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b121e1-d0bd-47aa-991d-45f152dc3ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821ce22c-40b2-4770-82c7-da4699372a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a421eca6-9d67-4292-8775-440eb56f18af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75367b73-832f-4533-aeb7-7ced3fe79fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1daa350-c666-4f66-8bc2-7fa7e39b1ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a58f6d-68fe-45a4-b88d-9217d0ec9214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed88f777-dcf1-4e29-9861-acf9ddc90ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2976d3a2-43bb-4468-a2fa-3edf94d102a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe893ba-b33d-4361-aabe-a66013a6dbac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd73fa50-975d-48ac-9705-4e5db4d9b8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f802d880-ef13-4875-bc69-ed30cd4acfe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887595ca-d152-4098-95f6-ae1b34393910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df7ee82-0361-44e0-990a-5e640691554d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e0a2c2-5aa1-4e1e-9200-a0ba87a3b2be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1072ecd7-46f0-44e2-8b16-3dd454d34229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd84216-5712-4a8e-a81c-d609b89bcb18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647360e8-5b14-4a4f-84cf-5b3f529d1b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee3d716b-5904-444e-a495-ed25e510adab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92252c5c-bc59-4a64-993d-68af003bc071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d53d603-8e3e-42c6-a7e3-83720d1ba4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc43422-1bcb-4838-87b7-6e9fd8679db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c43b16-0f86-4efe-b530-695755ceee67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecfa93bd-fa6b-4b04-a910-94c55c605b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a59a860-e9a4-4fad-b835-a4d39957bc2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a26fa5-39ae-49a3-860a-4aafebbca6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb941689-c685-451d-bbba-ef530925a11d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d723957-0a0f-4e19-aac7-3c8f404df075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c759e10b-ffb7-464e-89bd-d2d4f72b6efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8bdeb3e-4cb9-4cf3-920b-60bdd57078d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e884ee-69a4-4482-a2cd-4764c9b6d4ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735673e1-617a-4406-a36f-c24d66141be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2e8ee3-fde3-4346-a2c1-80fe7a83da93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c1e63c-196d-4972-9ee6-461888b511cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a752d9-546d-491a-8c5a-b0bc7f6a9b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3710d1e-d79a-47d6-8bc0-9111274c42f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b767e65-f87b-4321-b212-64efbf5486fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5f844f-0c25-4ef1-a232-3980fb139759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab099d9-2a3d-4518-b1b1-54fa843a3a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed653d2-f05d-4d1f-97ef-8966e215d944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92ed6ee-f7ab-4cf7-9479-768d03d0c7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b462edb-ecbd-46d2-8838-524bdb688397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4b19ac-1eaa-4bb8-9b51-bbcd42a9a677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b7b106-57a8-46ae-ade4-3435d413e8f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8b1eaf-d0cf-4a45-b1f9-e5430b02ca38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1affb81-edf3-45a4-a830-2041e62e699a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5305f178-4ff3-42f3-aab3-b9fb1eaf5b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce27f8ac-2ef1-46c8-bec2-0518eb91b8bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452a3cf4-1ee4-4283-be14-800f89a46363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85908b1-7112-499e-b921-fe55cf23fbbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569abfba-083a-4c1d-8346-ce05e03f66c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd84336c-a283-44cc-8997-c8cfeabd1767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18dd3241-ac08-4a9b-a222-7a7867775da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff750a4-dbd7-4a6e-a0ba-ed9c39430ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b7988c-421d-4047-95da-42c34f65af40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c69cca7-d3cb-4239-a47f-5646b18830ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e231932b-2287-421c-a112-df84e492543e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db500ada-95be-4d6f-b5e7-461c2a227e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff2bf06-b9c9-4bf6-a5d6-1180a4aeed2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fba49bd-68c5-4971-8db1-935335e25435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54bb5480-133e-4ce1-81b1-c37e29bc6c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d099ed-b3c8-4b10-a06f-a8ff18d79510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef69592f-47c1-4a99-9770-4e54a2c8002f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cfc85ec-0bc0-4ad2-9035-8f1c87ff894b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e69ac83-0ac2-4fe1-b91b-871bc30789be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3875b62d-608d-45b7-9f25-e7c6016e5b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50a4a96-e531-46b0-9a23-b6e09ca45644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00a5612-75a8-47ac-a4d3-98081bedcba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886ff87b-219b-4323-9e7a-a2396be26d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b449db2-3faf-4e0d-b040-19121ebda9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab7f6e7-6ae6-4c5e-9a47-eb7385a40cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98363730-9feb-4ed6-8182-b0a2601aa916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7663913-c0ae-4ca1-ba90-5ea334f530b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae29cf0a-004b-44c1-a02b-c492889f1ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9eb607-252c-4120-aea3-1e416809cf55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098594fc-dc17-4658-8c0c-3a3f81b0d4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e57f8a-7d02-413b-9ff5-3d28e947c71e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6dde99a-ea56-4755-ae3e-16f33504d426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883d78f4-d626-4cb2-b1ad-827ac88eb49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2de164-0ff9-43ea-97b5-7816b8ef34e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d21533-7518-43dc-aa67-1a007140928e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d65e238-e64d-4150-bf92-d230e72fa445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ac587b-938b-41b4-868e-489237d3eddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6046b1f3-f76b-47b5-85b5-3fa2a3de6bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f8fd8b-8083-4149-a13e-89f730b87c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316d0106-7d7b-41c2-bc39-85e21eb5054c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd1a256-d5fd-493f-85a2-adcaf632e9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f211c7a8-a353-4034-aa2e-7f0f664189d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6917098f-eb2c-428f-89cb-95ee8c67f644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc523cf-7b58-4296-9995-b34e9b52df42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43804fb5-4062-42a7-8728-24c0360966ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10c3d82-72db-449a-9210-f7ea0b93105a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad11391d-a3c0-4881-9501-ccc01e5687da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa72fa4-c0f0-4d61-a241-8ecd3c126c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49789aaf-49b7-4562-ad97-0d921165c364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eedf982-9a0e-4b5e-83d4-bfd5f7922946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26a29bf-328e-4b38-a29a-5395c3bd796b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303298e3-c055-4f2c-82a6-0f95cc1190cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--453804f5-c9de-40b7-9a5e-819ef4ea124a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3251637-ea12-4bf2-af9e-1787adfdfba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800a1f1f-48dc-4535-8a66-a13007ce7f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c001834a-7b11-4c46-bd90-b546fbfb511d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468cf7f9-23fb-4bd3-b384-4375676487fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909d256d-4c70-49b5-a911-42c39ad4a5fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7dcf4c-799e-4da1-a040-b91b627aea5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b488133b-52db-4f4a-86a1-b89c29e177ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504910bf-8833-4821-93b4-1f67c91c9e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2077d76d-4fbf-45cd-86fa-4e15e85059dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c35cf85-e65b-4ceb-8889-e35a8850b5ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2906cca-4b0b-4734-b2e2-6e2ade94950d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83a5f28-a670-47f3-a458-9b975f3365cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1c770f-9658-4a20-91ff-fb005ee2c72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a8eba0-3904-4ccf-9785-4b6230e5b37b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fcc91d9-d624-450d-8ac0-80b2f46c8e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27522362-182a-417a-8bdd-8f63d3bf7341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe42201-ecad-4eb6-b048-a6d04003f7d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44963794-6dde-4a43-acdf-5e137270b83c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd65158-207e-4bc9-961a-0ff05821cfc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7fac78-d329-48a3-bb92-f5f1b47ae6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5c51a2-ea92-49eb-b980-df67ee0e4f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9dc51a-dc40-40a8-bbf2-865ab2b56524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c26cbb-9bc7-4ea6-8864-b410c3a90e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307e6d9b-ec7b-4653-a498-977be3fed7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c418dd8c-3b1d-4696-a8a0-1d2559f5f933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384bcebf-a47d-4e92-89ff-4a963089274e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8c4703-8ea7-4c78-b0d6-ec5c0887dcc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065cedb3-c567-499e-bd5f-7d713f91ef10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca72923-2e0f-4058-ace6-d9f55d5f160a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e97834-3658-43c5-b3e5-31096e4c1703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cda402a-7c29-451d-ae90-1f33c6f9570c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f5c7e3-b523-41a3-941d-e4efb2033ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cab4406-8aad-4d00-86f2-ae83c41f9d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cbfcb56-8a00-45de-b08a-1c3ba8bcc503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940bf3dc-401b-4e50-83f6-ce258dabd466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c21ead-7173-47ce-bb5b-5b1170955956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35eb999-2c79-4721-8df9-daa2f2ef0a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1c62bf-d991-43c0-8931-c4acfca334f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15c61e4-f2dd-48ac-9e52-b92cfae80f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08fdd849-a3b1-40e9-a53e-c819a9d9e4bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e1fe58-fcf0-43e6-9ecd-f7bb88bdc520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e29177-73fe-4a0c-8441-8108364cc135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4a622b-ec87-4e03-b1ce-8750c0f75c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6753d9a0-94eb-4e92-92d6-21011e5110f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f46a77-7e9b-4a1a-9ba6-2edcac2a6db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51368919-340c-476f-b28c-c512d7f7cab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0a09c0-8a76-454f-ac1d-473592c009f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82487948-4b2d-4d16-bba3-9e7c8c59b2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960d4d69-7218-45e3-a5eb-2aad6937d2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17871b7-9b8c-4e71-bdb2-ff51d442a106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b69cf54-8fcb-4493-8d2b-7ad0d2862022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84f04ce-f60b-4321-9668-c9e7c4394741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc2c3c4-dfe3-4cc2-b695-0872000eda44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d5d7aa-b43f-4d11-920b-9d09a9559843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71460f1-f62a-4b1a-86bd-1af9db132a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab026b12-a7cf-4364-910b-e372390324f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee49be4-0d49-476d-8573-ec40567d42af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd126311-3a1b-444b-a07a-ae29777c5fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.16.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735122d2-e3a6-4a0c-8d1d-5a70a0c10938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.16.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af3c399-8d19-4472-8316-671efd9b158d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.16.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde198b6-e6c0-4579-8f68-582f728dfff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.16.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff575ea7-bd7c-48bf-824e-bbff7c16628f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.16.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47fe2a37-0ac3-413e-9b48-e1b86bfe108d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e2d3d9-9ae1-4873-bd67-2cd1fe0bac86", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.103.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6422397-6be3-4955-9d1e-13d0fd5bb02d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.20.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ceb01d-aaf0-49c0-9700-0e64cd729940", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.218.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ee30c3-0bc1-47e5-9f69-f6fe876e46c2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.35.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76545f38-ca24-4557-850c-5cc688cb93e3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.75.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a540ea3-c34a-4639-83e6-f9a2e56c6c26", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.129.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365e50aa-d357-4ca4-b2af-c9d9c1035d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.132.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee7dee6-680e-41b2-8812-dca3bc0cda15", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.132.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe8c9aa-590c-483d-81c0-7f5861ab51a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.177.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5e5771-589a-43a1-a32c-033bfd8031d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.239.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581a1414-e252-4baf-8d44-87ae5a99872b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.239.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e915960-b59f-4493-9273-80297a49c301", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.33.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cad8346-12f2-4185-b069-ecd55581d617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.208.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ceb0e0-3502-48b3-8553-f3d521f1223c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.254.35.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bc8b1f-2278-469f-8809-273761bb53d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.35.173.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef59d21-055a-43a9-be56-0988ad50ea5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.172.4.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ab35f5-e3f6-4c11-9e30-b02947a43734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.223.54.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2cad824-205b-4c99-9f97-d9d19eff6674", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.12.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809deaae-a01b-4f79-83c8-341ee201f91c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.12.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f7c53a-512b-4f65-9211-a0b7c7dfa6ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.12.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3480698c-bd59-4f7a-bcd0-fcaf87d702b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.12.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5708ac-0431-44aa-8afd-db6e93aed58b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.13.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1403504a-2df1-436a-b3c5-a3f3cf0923c4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.13.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8382e2f7-0b21-41d1-89c0-7d587d191753", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.13.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec07b625-2e26-4158-bbc6-588165ab83de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.13.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5cfdff-3ece-499b-bcf9-c333bc8cd8c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.13.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29b5ad9-59ac-4b57-b096-bd5b25b438ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.13.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64a2cdb-2923-4e12-a88a-bf8e61f70b5a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.13.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61635572-7d1f-482a-8013-6d62a698f966", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.13.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1488e6cf-2e90-4331-b3d3-63626338dd52", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.13.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792d0dbd-09b6-4efa-a086-ff64bb088629", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11a3583-015f-4dd7-bc68-b4dabe3fbfd7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4840fcd-4391-47ee-baa0-75c568d5eb64", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c2c135-843e-4d4b-85cb-030ef78df54a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00f1c75-1f9d-486d-b549-3e717dfdd367", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad60ec77-3c91-48fc-8d5e-9cf39ec7e68e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25434a08-7039-4c6f-be40-ee108bfc4278", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922d5384-891e-4476-917d-2d0ec70c9dee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03498a67-7474-49d9-97bf-bf15c0ed8895", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ce7daf-7dfa-4719-b0e0-37f29518cab1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05eeb271-d0fb-4995-a23f-048445087439", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5683534d-20f6-4993-8f46-247874e7aed0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9254deda-8aa9-4f1f-8f15-692178f3d65a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f956be-cb58-4b02-8f33-c56cb0476989", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a846ec58-ee7f-42a7-9d22-7916429c6705", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4663374-9a56-444c-b468-3943453a9123", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c4b82e6-93e8-4ca2-94d9-b1dd17339b59", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b44e96a-df19-4d7a-9d2b-beface1bb857", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a4b99d-c72a-4e43-a017-e2f53f063bc4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd5967d-1a2b-44f5-93cc-32fd1c0832f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d75c9a-4fb7-416a-bdf8-03de050ebee4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fb7718-2e26-4047-bae3-cb911a9fd0e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b90b90b-467c-41bf-b63b-68961f31bc45", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3677b7ab-90e9-456f-a4bb-b7413d87d09e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e59de7-debd-4bff-9d7d-3deb7eda9727", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5ccdf6-bddf-49b4-b118-b87e2303f426", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ba055f-d5cc-4393-a9c4-684fb24e4c5c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18da63e-cf2a-4b96-bdbb-a064ebfeb79e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c07b72-d892-436d-911c-69d8cf8623bf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3536652f-dc62-4e3a-b0ef-97ad0fbf56d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7de5fb9-60bb-40dd-9a2b-ab940c8d9c7f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9ad92d-d70a-4581-b662-5db6213321da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4cc914-c19d-4a8a-93f9-62a0efa96b87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b55ce4-d6f3-4693-b59a-14e74928657c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30358af9-bff1-46f5-8cb7-95f052a07783", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df44c664-4f25-4e90-9cba-ccc7ac20e72c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c56ad9-4525-4124-af3d-911f015010da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd01b4e0-9619-4a35-aec1-4978b85c0bee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d3b6b2-245d-4a48-b259-ae8e397fbd9d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4909ba4-6885-409e-a3eb-6afca705dd2c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b285457-4efc-4652-a524-0bfc0470cea9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96527c2-46e3-4254-a2e2-c32e262a732e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf48dda-e4b7-4c0a-941f-dde89700fd99", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ff4ac6-5d63-4ab6-a7c1-79ddf8857814", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.16.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c59f581-29f9-4689-9152-2d369a4bf233", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.5.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489c38c2-17e0-4161-8fc1-cc966d73bf36", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.6.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23dc8cf2-ca3c-459a-b7cf-15f657b936e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.6.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63bb5b49-e230-4747-9233-d71e600e12fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.7.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1667a38c-46a0-4c9f-9083-7f2e820ed51e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.9.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614b6af0-7f42-4013-9447-55376501ff3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.152.123.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6beda05-e1d3-44af-9d07-b811bd56d499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.163.24.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac34cb64-6dd0-474d-a831-e7e7e01e1d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.168.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5bc2dd-a07e-4765-ac1f-6c49958f850b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.173.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5466864c-84bc-4ad6-ac28-fcb2651f17aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.176.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37bfbcd6-e4c9-432a-a6d7-44349d8f83e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.178.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51d8a35-f93f-4406-ab6b-502fd5a3ab87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.180.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59912fd5-64fb-45db-89f5-9bfeb39f014c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.187.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2ad5ee-fb3c-4237-a9b1-2b827be03d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.188.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2dbf14-afc1-4e25-aec2-4457ac026998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.208.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649baedf-1ae5-4a0f-b2a5-e5c6451a622d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.219.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64cd84ed-a189-4936-9026-dd6d2b7a47f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.233.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a927dc77-6f18-4dbb-921f-62d08b315954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.234.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f93d4d3-540f-4564-b978-ac20612db944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.136.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10330266-1851-4a33-b5c5-9c7b05ce3ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.138.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3790deea-3d79-431f-85c6-318306cef619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.140.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9cb9695-1ec1-4729-b982-eb43bee0fee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.160.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf269c75-00b6-48cd-8b8d-bdaf28f5ea84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.161.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176168ca-a31f-4387-9971-4f05a300e830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.172.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dca74a9-0347-489e-bcba-805f98adaca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.190.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c42544c-990f-42bf-be1e-22bf68a76860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.190.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2c2f07-3cc1-4ccb-9b7b-d12af1a3b18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.196.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba774897-1dff-4c61-a656-fc37036f256c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.222.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9048e8a9-9018-4043-98ff-e9c9c9863c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.232.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b07de9-cc86-4899-89fd-0af0882d3353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.234.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6158dd8e-145b-464e-8d9a-4267462067cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.246.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a31dcc-336a-4974-9494-6e3549c0fa10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.249.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65d258e-0b6f-4fa5-885f-9cfa1ab7dd7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.254.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8022aed9-9eff-4d39-be19-193401209c04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.140.167.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd8e924-ab69-4536-beb6-455f51e23f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff12bf8a-8aee-41e0-9ba6-207c745ec77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17b9111-b67f-4f88-9129-686025bfe717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d816df-5bbc-498b-b41a-754d762f4aab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c42074-f270-430a-b739-3dfa48c6fa0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281bc0da-4e5c-410f-b559-2ee9598fa63d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.104.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55690985-b984-48c3-9027-6dfdcda04eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0b01c9-ecb7-408d-9620-b0d33b79831e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65202163-7d83-4d2b-b0d1-4d56c0544a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57c8ce2-9780-4a61-b07f-af377abfde13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f456d5e-7e02-46c0-8982-e72583c6f5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff01595-7648-41c5-a99d-2c47eea5edf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e387c979-2271-4edd-8080-a3e14b7423fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e239402f-68ec-4102-b24b-b7d4e7edf939", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--703320d6-f4db-41f9-8a6d-b66ba8f41315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a399af-3d80-4260-a8ec-e81b570fca77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19ebcdb-8e27-4b2b-93d3-7d4ad484a4b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e266bd-e894-40f3-9281-e872d4e71e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f203341-0b95-4006-86eb-c241235cc42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4413f869-09d2-4fb6-a46f-e00331b6a959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563720cc-c59f-4b90-9d42-bea6bad8736d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a336b1e6-698d-47f7-abcf-37921d4b37b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b982556d-33d5-45fa-be1a-866ed7eeb3b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045550ec-5601-495a-bc74-507bb3e659f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a04493c-d38d-4c9d-b292-e633273dcaf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11f3145-1675-476f-83dc-72ab532b97e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--015384d1-18d4-40ae-abc9-acfae56a71a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883411e6-46d5-459d-99d1-14074760c6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f884c1f0-ddff-47b0-8400-daf4dc47f736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5e8353-c18a-40c7-baf1-1c58e095944e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c207f91a-cafa-403f-b46e-862d13b1acc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c949014-da23-46b0-8df4-caa8c9e9d3ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c409bd35-7588-4b09-a5f0-16ef4bce46bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afb6307-0942-4706-b662-590437882f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2999cd-29e9-4a0a-8235-4df4c78639e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b51f465-ba8d-4519-94ad-98c14635f987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41a8a8f-8754-4486-b978-734a6c93d262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6a35d7-69bd-49bc-b84a-9b3c4269e11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6c1cba-0e27-47aa-a462-ece41ee26442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a9aa7b-a666-4ddc-8928-81a3138227a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5bce57e-657c-4f36-8d07-1894306be0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f940f145-adf3-4f09-90d9-fbe0a75937f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96aa7459-8716-4d4f-8b81-162c22cebd8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4afae1-bf56-48a3-834c-55d4a1ebdf46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72469e57-9397-41d9-b8cb-a8920b4da9b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ccb5b0-a87d-443c-865a-75e5de5a53cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d117a03a-bc71-4b58-80d7-e626e881e97f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d11faa2-3e03-48b0-993a-6e924ee5fdf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b0a05e-0ecf-46a8-b709-bc3b22d4d8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b027a0-fbb0-4882-bb08-4e930c0ac1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b060d97-2ca0-463c-a208-e5cc850ef371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb533ab-df63-4e53-9c41-ff3f860cc7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fd53e6-829c-4e03-b683-9f2c1d46e76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e766a8-747e-42fb-b2a1-88d379e9f76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55fe5bf1-017a-4bc1-b087-64a38ef37816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83390ac4-9df8-4307-a7b2-4764966ee8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73fdf655-1ba9-483a-9773-15618a4c24ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.150.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79eb67f-4616-4de1-8635-9be214bfd8f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2773e14b-0efb-4164-969e-1b74af31de48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982ec824-ee2f-4add-bfd2-98ed5aeae90d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1945c1a9-c71f-4958-bf7a-edbafb8fb2c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414c3168-7c33-4f60-b7b5-0e0a64a8473d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae72580-6a34-4487-a68d-bbb77129d4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df42e3d3-8b90-432e-934a-801a0b3c0e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dad8a00-4d64-4c93-9af2-141811f00d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61bc583-9962-4a48-83b6-a0a80cb4682b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a131547e-b8c4-49e7-a92e-af31199bc6f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a69e096-4894-4828-9de5-9ed70d49becb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20087e2c-9524-462e-b2f1-7897941c92a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043c36b1-9a44-4748-b73f-e817fef876f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d972baa-2187-4afa-a203-1bef6f116086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05e5448-0902-4b50-932d-a831b730d741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457c2069-e3e4-4ba4-ba01-fb9ee2df64a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02c55b7-315c-4dd1-b453-d62799f1a66e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f873ea8-1890-4b4d-af2d-32d5057d56ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03d2a0f-f8f3-4d3d-9b64-7daad5fbaae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7974aea6-e576-4d06-a8ae-c07b86b54599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444aef53-461b-4052-8906-a0519410b8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360c042a-3106-402f-a2b3-bae03caf92a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b94a0ff-3781-4c40-a026-915eccac76fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71daaa38-d51d-46cb-b361-921f87a177b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617cc359-523b-44a7-9880-5e290b044d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99019d80-fcf4-4fd1-8488-89987b1e943a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca4d425-d310-41b8-8c16-51ef3661fa4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e66f18-2f7f-4d79-b9da-ea1ed37f0b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca842f88-65c1-43eb-a0ec-8819e65d20fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d499906-b09c-4c7d-9107-0abd362f6ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad825b2d-92fd-4b26-9d82-126726f481db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8013e6-8697-49a7-aa88-301c01084207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37117d7f-80f6-4fa6-a696-15366c755127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61906494-4f08-4808-8cbd-9a6645123b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71fab58-9002-4e31-bb07-7f1bac6e1ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d9a4cb-a3ec-4759-93f4-516a6cef27fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--538061d7-8a25-47d0-a68e-7a70d39c773e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91554f3d-d77c-4656-bb3f-24628afb127e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3bae49-c4d1-4533-b84c-6b87091cea13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc54d2c-d65b-4b76-8b91-625741e94674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4167048-9dfd-45ff-a01c-39565ffa9690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60fe79de-4dfe-4e6c-9f94-a210f1bc68c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5ad139-3e0b-43f3-be16-c9577020b9a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfaea674-2a48-48c3-87f9-855a70a4abbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec23f718-bcf5-4634-8037-50ed1367077d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27dd5fa-3839-461b-a5ba-499f07f853ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca905bef-6e02-4657-92e6-fd1a4efec9b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e13c02ee-3236-40b8-83c2-e4379f1d6fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ab08f1-1bce-4e1f-91ec-587dc7f5191a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf9a91a-81b5-4bbb-9f1a-610a77dd6871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65222d0e-f7c2-46ff-9fc9-116aef577380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052818cd-56f6-4a4f-81ff-35290c3fe9dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2836ea1f-9aa4-4077-84f1-c9e5f20cb03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf47be6f-00bb-4472-8404-30b44b71824b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65aa860f-417d-4769-8676-0c605b72783f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faec26a5-fd6c-45ce-8f3c-2973b71bc3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce13589-7949-430f-8eb1-f75538e0f4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd180f3-73b8-46cd-addb-7ccf054bd1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2946f5dc-8635-49e1-9565-5d340ffe6c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbd92a0-3dee-45eb-829f-98ed28bb40fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179a9a0c-0d68-45b5-9e75-6b9c54cea693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc962c52-f3d0-4881-a63c-ff3ea1ebe72f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8da9054-0702-498f-8f6f-99e90383df87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcacc047-024c-42dc-9ed5-3a41c0324d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77390568-874f-4750-88ca-8a303c537ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc49cefa-3a2d-45e7-a47b-63922adbddd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7fcb66a-39e1-43d5-ba7d-0021d8c46c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018a3c05-f5bb-498a-9b56-121e3d3a35a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2ce79f-f07c-41cc-858d-facb3693ad3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0538d704-6e25-461e-90ee-ffe2e214a94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1693da6c-e96d-4d33-9ea9-6d02513ddba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23dcc50d-c57c-43f5-ba9a-0f7f6534521b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec340cf-db49-4f20-b190-fc196bf4aa51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651c1db6-3577-4a73-bce1-f7396ac3434b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d4c4b4-d993-4971-b852-d4cb4c019bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c215aa-b9ed-462e-8ccf-2e2191ab67dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f155b3ec-b6f9-4b08-a10b-9e2384dbb4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba16a02-0764-4670-a350-3495f32a4894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8555a6-7d72-4746-b88d-a1a50da8bee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671fd6df-d634-42f7-982f-badb16beb7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fccbf41-ac14-427d-bed1-6be6dff7b1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da34b051-a6f3-4ef4-a805-3482f991f7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb47f54-1bc6-4244-8c83-c2945de776f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6a2f39-641f-48c6-af6c-c33c197788ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec0d087-9d31-41e9-8eec-c841eba4c62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81eedf38-e141-41c2-ad0a-fb3fad07dbca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9af648f-92e6-4cb7-ba9d-134f9f648404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1a2392-af07-45ce-a5ad-bb2329a4c05d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f709b652-b2d7-417e-85c1-231dcb893b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a119d93e-37ac-4ae9-a9e6-349ba2b2a249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b21cba-d6d8-4953-a260-e5e4b6c9f020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1318c90-5027-43f0-bbe6-e12562128066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49625922-fe6d-4f2a-af92-9317906f220e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0771e353-67f0-4071-8793-3dceb677c4ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bdeef3f-0e6a-458c-9057-c94b4b731c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38da3f1d-270b-4178-a5d9-c84b1f9ba89b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21bfd8fc-1db6-409a-9cee-4519df184a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c94172d-484d-4d04-92f9-26e66576699c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205213df-bd37-472b-8a01-6b445b2cc2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6821e97-73d6-4267-b6f7-4b9ac72bd844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed8447cc-d8eb-4766-aa88-2cb16dbb76b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3285a625-7f51-4c4a-b94a-3f766e4dbe7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4dbc82-232d-4ac5-91a7-b8509aae08f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79fe16a-64a9-4d26-801d-97e44737e557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d95e2b01-2ef6-430e-b9ad-b85ae1224aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6cb89ce-666c-4f15-8d43-f8622f964a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5968db-6fdc-4cd0-aa7d-e2548c6680a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2518c6e-0854-4b17-a933-bb6496da4d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691a199e-db71-4980-a189-b90aeebabb84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.203.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d2e22d-4fb9-4c9a-a565-0acc0edb4bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.205.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73696a20-5fe0-4ebe-985f-66ebc07bc2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccac6f19-50ef-4ecc-9467-6efad53f7d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37babf0-6ffe-4ab6-9ef0-2b0f066807f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a953ae-6001-49e5-badd-68c03744a13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42be1894-e9fe-4ab3-b8f9-809ba6eeb6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79832c0a-dfad-46bd-86ba-397cfb53dcec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ad1f4e-126b-481e-8260-3dd1b070df62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b0a2fc-f844-49e3-b594-94eebdc443f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f5a91b-88e8-4fb0-b42e-a46fb4d040ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ee2524-593a-435e-a2ed-afde6e5ebc2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8af4e5c-2e0f-4484-9bfe-82eea2749890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f511dee7-ad24-4d05-9338-63ee439694fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15e6d37-980a-4423-aa2b-a4e8490df026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d0f355-e4ae-4552-8cbf-805dcf02942b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b6eaf6-885e-42df-892f-22ffcbc397bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8257e402-b356-4780-80f8-4ebfab906f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e326943-72e9-47cc-a171-16769051cce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3206114-837a-40e8-bfcf-e4f34df9b10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd219ff-04dc-4501-a7f9-7cee90d27896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f01fb0b-05d2-445e-a65c-68beabc805eb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.236.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369e42a9-109a-4299-8f54-c102dbdfcdd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb48737-4659-4c56-9482-c9b140369723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa13d5a-1816-4881-882f-2ef5175a7614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.32.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00284048-7d53-432e-a946-7d2fff41d03b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.33.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abadb26-4637-49d2-afaa-4e570ca7f3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.33.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a590033a-81d9-4fe5-bd41-6f0d95b5f746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5311ed4f-8268-478f-85b1-b7272be1a5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ccca58-498a-4574-ade3-bbd23be12f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8231a42-1490-4278-92f5-7399173034c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e738c3b-b4d2-453f-97f9-68f213fbf960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802c4270-bba9-472b-aef0-7fa6e38c2166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c48b996-db63-4bda-b01c-f2dc3f30902e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c75b5bd-f9a2-413b-86d0-32ffd11d71e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03cd0b73-00ed-43b5-8f63-1b06670b0057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9060d513-e0d5-4ba9-897b-db9931e62ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5acb0746-012d-4290-871a-b8b0027f04bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7302ac24-d387-4372-98a0-dbb5b9c5f6a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1430160-973d-44a1-b8a4-b609c04cb38a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--570d5288-54cb-4cf3-ad7a-e9d542c2e26f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320d83d3-ece6-4c84-b7f6-933cc4e1c7d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275296e9-143e-49e4-a239-d2f8292cc7ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6842ec6-d7e3-4a57-9b31-015ff4266341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86dc362-acca-44c5-ad5c-df87503210e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3228c05e-1107-4ddf-a0df-897b8f69f723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5db7fcd-4cb7-470c-8bfa-1f84fac85ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f48bab4-0073-4a80-be15-894ee0165c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1435ae14-d6bd-4858-a126-c8bc1383c31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c4c923-0c9a-4093-abc9-f2246a5e92b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c2de1d-7c48-47d6-8b61-d535e1661882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef43648-2348-4f7b-9669-159da1d9d36e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c0f11c-be6e-4a67-a6cb-57784d136c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ff3de1-5e5a-495c-8f40-9cb233e0acc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.42.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659e0f5e-5cc4-4d9c-8afe-39bbc733e48b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.43.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510d5e19-b9cf-43f6-ae58-ca440ce11098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c376d6d-1e8c-4012-84e7-9404b6a4dd32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.49.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8758744f-ae5b-430c-af86-400545dbf083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c598d110-da1e-427c-ad1e-c2346127a132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3717a8f8-7e41-4996-972d-536ab28fe72d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdff78b6-68ec-4a7c-96fb-b61967284e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2410c1d8-5f4b-424c-b071-94db0f1a73ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf808ac-8ab1-475d-9c74-69952491581a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3478ea25-4970-4b07-8160-b5e462c01136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.1.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168b6ebe-952e-477e-a3f6-808daa5e7273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.101.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408674a6-b431-4228-a2d1-b36b92a9711e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.136.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab403597-01f1-4c7f-8f4c-666c6f52330b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.146.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682e22f9-c780-4049-8783-562824ec3969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.171.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8269e2e-6898-4973-9ae4-a3416851c38b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.184.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84ce2e0-6196-4723-ab79-fc1dd18d1685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.189.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e154890d-73c9-409a-b65c-8e04e1432166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.189.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46003313-42f3-43e2-8502-e1f2443f1f20", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.225.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f07976-1855-4dba-a856-4fc8c48cbff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.23.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71c89a9-c2ff-4155-94e2-b2d03a107681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.26.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e52de5-e05c-41e5-9dad-c76ad0d058f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.3.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adda91c7-0bee-4caa-9842-ed4c91f908c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.5.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1696f5eb-d840-4ccc-8210-432481049d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.112.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675d8aeb-bef0-4d36-9fb4-90601c5470fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.134.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76290a7a-6070-47c9-b25e-87a95ce54b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.147.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb7d492-658f-4e40-9804-01844d3820c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.158.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca47d51-b53b-4cb3-9ed6-6133b268be14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.193.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfc5859-4157-4a82-9059-20bff5c2f7e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.197.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee9ddd7-0208-4fe9-a5bb-dd4aad993939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.201.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e5fc63-bb4f-4f50-a5a0-cec667ce314e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.41.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148a7620-d853-48f7-b392-8ce4040eb51b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.47.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b3eb0f-e2b2-4251-9be3-2ead90b52a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.9.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b0f6e9-deca-4f17-9b16-a28352b8edde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.118.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a940c5-9d31-4b31-bba2-f523c4baf965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.135.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c680bf-e1f9-41b4-a1da-9fe5f40ccf5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.144.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa31e58-803d-4f2e-a54a-9b9492001453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.76.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd14817-c03c-4498-ac83-bc72f5e7ac0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.79.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875b9440-ee41-4bd9-a0a6-4001166e85b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.88.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7cceb0-ecd7-4f9b-8b10-99cd4eee6f0a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.178.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753650fc-a4ce-422f-90cb-044f039f00f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.209.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1aed42-7fd2-441f-a4f5-3682863387f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.209.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ab8ace-d67a-480c-8824-26dd7f26adfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.211.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d795b85-1fef-4e0a-b30d-703dc80fb6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.216.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83e2349-6af2-4db5-a29a-cfbf8cec94bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.218.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7192193-6cc2-4bb3-9438-335a4be02f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.223.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30796240-ea9d-4e9b-b62e-5a6572b74e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.241.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99086b3b-de14-4d80-9249-62b1532ba17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.245.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a09d62-965a-4640-978a-bd87fa785e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.248.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d420764-2797-4fe0-af5e-7e2b2ffd2cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.255.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ec2c6c-54f5-4004-a179-fac81e1cb225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.50.110.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a93f17-c604-4ea5-b1b5-7f504cf620ac", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.62.35.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0cbb44a-435f-4e6f-9434-d6cc50e4b8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.62.89.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e27541-ce0d-4450-9068-023d1316d6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.114.156.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86db42b8-ec0c-4dc6-8f0e-14e573bb23fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.107.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81bfdfc5-431d-4de4-9d96-2c5754e51628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.129.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ecf9a7-06a5-4bfc-ad57-ab2306efa8e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.133.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a80554b-8710-46d3-bd9e-f96a623069ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.138.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c587d882-bba6-4b2f-9c60-630bf654cfaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.138.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa591802-8191-45ca-a9eb-dba5cda8f9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.174.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913e723d-7b84-4d81-ab28-b2d06d88ed81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.177.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a6c1f0-9acc-4064-9a7e-9dd94178e15c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.184.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f37e03-0352-4017-90d6-ba89419657f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.189.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5a02e4-8b5a-4f58-84cd-aa540e54be32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.223.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f43f2cf-05a1-4256-bec3-11754dbb3171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.223.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9955e9fd-59d8-447d-8600-a948846be5de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.233.141.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ef476b-cb9f-44c0-a5e0-94066dffdbc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.233.61.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75b9c35-5990-44b9-b35e-b22e2ea0aa5d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.249.217.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afee985-9d8c-4544-a6bd-6aa1f9f62671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.250.193.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7658fced-b0bc-4b9e-8d68-627473ce0d78", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.250.75.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f04c6f8-c961-41a9-8625-0ed35251d147", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.60.199.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce39eb5e-4e03-49d8-b5df-f532c57e37fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.114.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae831980-e1e7-4fec-8b8e-5c6df31874d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.133.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc37c2a2-623c-4a9f-9057-ed36744a635d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.30.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2b10f0-b2df-458a-a668-bf6423ebd1bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.30.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8786a45c-4fe8-4c8d-8688-bdc016619948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.33.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f9b4a1-334a-4631-b4bc-389872b51cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.37.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3574cd-a3a8-4b12-9edb-e5f955ab976b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.57.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ad1d1f-7d55-439c-98fd-d24c5ce8bb74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.83.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8627a264-3d8e-444d-b37f-91c4c3c841a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.66.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c205d27-06e8-4237-8cc1-ed44fef196bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.87.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baad7e46-6c61-46a8-8675-6732a4dd4390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.165.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fdd3bbf-5368-4006-9db8-7bb4181351af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a21ee9-2e4b-4cce-8110-0ec10fd90fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0487b8eb-31c3-4a4b-9e99-935df1c5da20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0302ae-e58f-4c36-ad3f-12f2df4d40a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223ac1c1-13f3-4d3c-9fef-22cd6b8a67e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0c2944-8737-4e66-857a-5da41d55501c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9693e321-42e0-4ba8-ae16-3363e6e1bdfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931d9f03-b994-4865-b34c-4e91e9be94f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17569027-50d7-48b3-b643-e8bc591c9fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42448dc5-082b-4d22-adec-fc7169d4a001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee362607-1d74-46ed-af0e-9bd17a448fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31879967-c071-48f4-8700-dc0949f252b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d381f727-cfcd-4c8c-b2b5-ae3fbea9da27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97575b48-918b-4848-8fa5-2cfe3f514bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67541dd-2409-4487-9414-d5ccb69507ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6132555-ba5e-483c-9820-ee9154b1f251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3814a00c-4ea0-44b8-af1e-aa78a5ca6738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e150f8-aee2-41e4-8dfc-4c3fdb096bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049336e8-4976-434a-b9cf-f04f333d4be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5531bfa7-88b2-4e17-9ecb-3f7917ee57bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b287226-9b23-4750-b794-554e8a5276ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95deba9b-cd9c-4b3b-a520-29b6386be12b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52cde3e3-7de6-454f-b033-082455e8421f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34f2154-4e03-49aa-8ddd-60eccc4ceb4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4727c8fb-ac33-4a73-ae71-e74eb033bf07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6779d5b9-b69c-495c-9a87-c8f5c466b852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e9991d-78b5-4a4b-b414-ff8d028ca7f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4118224-a4ea-41b4-b4a2-5ff9d97d714a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6fcdb7-855b-4c54-9ed8-dafc572ab66a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afad4b9f-a62e-4991-b195-a522ca6a0c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81eb9f70-6c96-4022-86c0-402a43515d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4bd9c97-4125-4608-a992-6242c5dc51f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7536b825-4170-4a84-8628-f4a30c536e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c690bcd-36c7-4adf-a082-144e522e9060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5cdde58-4a03-46f8-a1eb-b1671a865a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8024d50d-157f-4455-aac5-2ebdb4748296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9dfd38b-6943-4a94-8219-95e56a3ce58b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4cf642-d78f-450c-873a-a6e52aca7a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--612479c6-9340-4dd3-a284-325b3dbb76ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcefbaae-9ac7-49ba-9f6b-8b01e6fb365a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03eda14f-9a61-4073-87d0-c9b17b0a4109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de521615-50ba-428c-a13a-d19b1c27d7d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af593f03-9972-4b83-aa16-e7127bd0b5a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a1a978b-6c86-4e82-a772-dd619f3c1c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e92b287-bdca-416f-87f3-4c6adeed81b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d40df1-0a51-4505-ba2e-70719f2cb93f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f96635d-be11-44a1-88ff-19464f0ff004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceca3bd5-9925-4479-bc64-3730fd5a6c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba6a080-81c9-407b-8806-6f6f66f2d2a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a3a190-caa4-4ba4-b90a-8da98eeab867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1bbea3-3839-45a0-86fa-c8d5502570ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5c9258-1022-47f5-8480-42e69cae56e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105f90b3-e77e-4e70-89fa-2024908a4a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21420ea8-0ee9-4127-8b7e-eb155ca3c7f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae43719-45ef-411c-8b76-f4a6e79e9144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1ebd4d-8fc1-4358-b6e2-fa830859c63c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fa4323-038a-4d4f-838c-a1b8a52b302b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0837ed43-f970-4496-832b-5dfd6fd3e343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.131.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde1c517-1275-46fa-ae49-8fc6544293cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.180.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87f97e1-cc91-426b-bc54-5d45bc883cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.191.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f2bf5b-cd89-4145-ab75-93a48137eed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.192.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303d0258-970f-4d2d-9421-dce347fab54f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.202.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a601abc4-3641-4fd6-bd06-f07738cfd3f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.247.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66f80a5-0455-44cb-b8e7-d854cbacbd67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.247.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b91995-afbb-4f46-8733-d7f8bbad0aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.4.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb109ab-81bb-413e-843d-04e250a50129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.72.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eebdfcc3-de43-4b90-baa5-d91dd32e3bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.8.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789f2de8-c802-41f7-a2e6-f62254d21d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e441ab4a-98c4-46df-afc5-da66f2c75ba1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.174.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76f96c9-0c6c-4353-b49d-a488774bfc06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.22.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d947de2-83d5-40ed-a264-bc2d96585882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.167.228.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82cf75f0-8784-4583-bd23-3f86d36b22da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.181.208.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e18902-1f8a-4e49-be4b-09b16d0256e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ebcdb0f-5c85-4fad-a989-6bf8304f8033", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.24.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a28a1add-657d-4049-92b2-e6992f07af04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.197.250.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98276da1-5199-4bdb-8e11-7948ced50c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.197.113.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7165ca-b215-468f-9568-2d8422791c28", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.224.12.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa60cea-ecd1-4d8e-a0e0-93f50db2b3ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.224.15.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89731c1e-c7cf-4540-958d-f155c60378c7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.224.81.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dade2438-2ad8-4e2d-b3a1-41e9bb909d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.228.66.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ef0eee-a6d5-4d66-a52a-f8882e8b12f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.22.253.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa18a9e-972d-4f99-b9d7-e290b8b527de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.246.19.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--195fde53-6ef7-40ca-851e-5d58739c2a4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.143.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efcff708-c566-4728-b637-4b70e4e72f1a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.146.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345da2d2-9df2-4c17-a73a-41a99dc8f0e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.147.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68618a83-15e6-4773-8cd3-027e6a8b64f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.162.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ae8f11-26a4-44d4-82fc-9b3c0750840e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.164.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f28bd3f-239e-468c-9bfb-6914f4de770c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.193.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4db0b12-d9a0-490c-b88c-64dd3f155003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.194.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e164aba-6d3d-4dd8-925d-f96ca4bbd5b5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.39.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d97141f-8838-49b2-b8cd-904a3ddbcf50", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.39.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccdd6736-f5df-4ed3-90bf-8898323581fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.72.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56775b98-e8c5-4e45-bd1e-482023cae45c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.8.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f04c60-4d62-4de1-8279-10c34412356a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.130.187.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287e7db3-0cef-4285-8685-5faad70f8fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.130.187.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2303a5-4320-40fc-999e-46fb92d3236c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.150.253.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887e0fd8-3c92-4c8f-ad85-ce606cbd48d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.155.2.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb11290-a8d4-42b4-9a7f-86d78b454c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.168.215.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3580188-b335-41a7-b899-5039309c1ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.145.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6ac6ef-4384-4bef-a9ae-ebe23ca3d161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.145.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263eaca6-436d-49fe-9663-c82f65aad2ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c343748f-e72c-4b64-8bc8-930a1fe442dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901145a2-122b-457b-9f36-ad2803f2dcaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30532cc-17bc-4ff3-90f4-0b61f58a10ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3676240-191e-4a38-aba7-fd343b1d9cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4815f8e8-bbef-4183-91a4-73b490c0f231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087baa9e-f21f-42a8-badc-28a2c2e1611d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421521c7-7980-4185-84fe-77dcfaaf70bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c42ba69-fb17-4ae7-921b-5403669c86fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.235.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e525faad-ed93-424c-9d92-0c42d7b4beac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1d46a6-ec02-4bdb-886e-b3f127e86c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91adaec2-bf82-4b64-b55e-e7b6a809a6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--818b055d-7552-459b-a17e-79ffe67b6886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eefa1e0-d41f-4956-968e-7789e97dbbf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48696b47-9ab4-4770-9a47-7996232c6945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cdac98-ef79-4dde-a704-e272f5b6eb6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff65b18-baf7-48fc-ae3a-1d61ab8cfb73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e45c48-13bd-498d-b919-556b02824e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb1b3dd-904a-4565-a0e5-ac073915729a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f4076d2-7c60-4417-9bac-c2035adf4201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27fb848-c281-4e47-b33b-027005947805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556668a6-48b9-4338-a79a-e8e7611bb93d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a83840-02c4-4470-8f8e-e6d3382596fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa09efe2-baf7-4c83-a4f7-6134bca0cb03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6b7415-8897-4022-b3fd-0540b5fe7385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fe372b-7c91-468a-bd29-7a53c404356a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7524d8-34d8-4c4a-a411-0ad187646e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb5a9b0-a0e1-4e74-bd5f-a9c8a116e6c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bed785e-4d7a-4528-8056-caf3042d469e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c3a641-a0b7-4e42-b237-f16398263b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8583e6ab-0e4f-4601-b480-1369e1c12946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fecf0395-1e55-4ca8-994a-69583a5bf566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b8b10d-3d3a-477b-a6af-ee5d5f661adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1543d43b-14f6-4919-847f-320c553a5a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03736f04-e0d6-40b1-9759-ff1965b4ea58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f85742d-7e4b-4d7b-ab17-a35bc71bf1ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b60602-6ea4-497c-8d05-151b0a4aeaa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faed994a-945c-43be-b6e2-249793032d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f00a5a-7a85-4c15-8d8c-3dd2dc8c4b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb5d6f0-382f-43e7-9d1b-8ec8163fbe91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51f705c-22a2-423b-acac-34d4b220d958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.251.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa4858a-9fad-424b-ba34-7044b6e521a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.238.136.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5bc2692-8ad0-44d2-ba9f-d9b4ef3e9b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.239.222.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c123306-3ace-4e4c-b826-6eabca168148", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.244.186.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cab1dae-e624-4521-b9ce-9c63e741bd9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3444dad8-e08d-4aad-8acf-4bd52a1ec0df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb7bae3-c3bf-4fb9-bab9-697fab0a4f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3380b9a-9d5b-4f8d-b58a-18e5049f42e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e725eb-6dc4-4ca4-b0f2-40284dd772f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cdb0f25-43e2-4f86-8bfd-a5c53faf261a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efadc7a3-58cb-419b-a236-b07c49218ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22713628-0aa7-42fe-8759-6220a2cbefde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042853cb-797a-48fa-9a3a-fbe541d3d27b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5949f87d-cbcd-43a4-9bfc-e779fd606876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce49b2b-82a2-4aaa-a952-dd6b21379a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd610c1-be55-4b1f-96d7-6e55fcc4cb13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea7ebcd-2bbd-4b15-95ec-832fdd2e51d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3248ee-864f-40a7-80cd-a631b72faddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8606db-def1-43c2-834a-0b2938517c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb2c62e-78d9-4366-83bb-cb6646e1a4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2077be-4f5d-4ce9-a913-a803060406f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1896617-d028-42c2-b9f0-fbdb877dcd4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025a6658-0c9b-4f20-97b0-740c061d9920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8f09e4-774f-4075-9aa8-bf035eb38b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b178f8f-3258-463f-8a6a-97c81c8b0b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45a4232-e1fa-430a-8bf8-7fb7376c704e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52ff872-3fb0-480f-b1e3-f77c5f5527b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a278fe3-d6ac-41a7-af2e-22ce7f0ad839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec4a338-be07-449a-851f-73257b1991fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b387126f-af57-4ded-bc6f-9cfe48d9aa06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b422a670-d094-446a-a8b3-819eb497d22a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e90fd7-f09b-4bd0-8366-d11774e68961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c30b0ae-d4fe-4238-aa7f-4903c569820f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21b719b-6aad-4f70-a4fb-ccec38b19cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73cf49f4-2da2-42b8-9727-7a2e5dbd1ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389eca7e-7aa2-46ae-95a8-5984cbaff5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31866b39-cc31-4aff-acb4-8328f27aa8b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.53.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ba99f4-0634-473b-9ce5-71a53802634e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657f29e0-175f-4128-960f-9bd55752043f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d533f212-cd78-40b9-a298-a3b308f8dc75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c74c21-71aa-49ea-bd85-e2f5a63b6af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90aef04a-1401-442f-aa82-e451d6910ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28897aee-fbe6-41a1-93c8-c5baa38c9252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc6e32a-d9a1-4eed-a012-a48c49276678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac356b1-48d2-411d-9133-e0a7088c12be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470b0a46-2697-4a2f-8755-933a4535e805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8332b211-c88a-4b9f-8f0f-350aff1ac0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b56ea88-064b-49ed-b796-e03866eca6f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6c9f9e-4a23-4c12-8113-075a6d1ed7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c1e55d-6df3-44fe-b7d7-cb5e632a0fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d92712-b31e-46e8-afac-a7b52a648c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f59e41-50ba-4696-8b2f-a9cdfc8cc985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aabdc93-350c-4d8b-afed-a17f65879b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ddb31b-84c3-4a9c-81ff-2fcd72b25cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b8b40d-1883-4437-9d36-3d1415a10786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66dc4647-7af6-498b-82b7-14f4b7e193a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2534c89-4e71-4559-abb4-1d9814b9de1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e37476-68a2-4447-b209-abb309536801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7435d251-f3be-4d34-bd58-161080c60f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81cb0144-911f-4d42-a976-37fdfb0ff7df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62b4f25-0588-4e27-82ec-59a258f0d702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24fee239-ab3f-4d54-9fcc-18d920eb4711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e200b572-1004-4e98-9b16-c7f93a01b919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01188c30-ad50-4625-9554-ca32ca733a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7235e8-c1bd-4116-a1af-9ceb0fb41e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397ad448-22bf-4512-909c-3e2d3457864c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf369c3e-3334-458e-853f-1575a791ce97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faced307-df4d-485e-a40e-62a13c0d2b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6729c8-e65b-43c8-8edb-9b340bb4850b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.54.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328702a7-6843-450d-82d7-13da7861730d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.99.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e00ff13-969c-4f69-a20d-6e905ad101f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f2695f-f89c-44d9-a214-f8caea393432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e4a57b-65fa-41c3-af54-83e077e83ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a0cec3a-8062-456a-90fe-bec974072326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3fe92c-7013-4d96-aed2-748305e723fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cdb8136-5e50-4723-a282-d4c192390356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3d9d80-e112-404b-a2e7-5481d724637b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fdb6cfd-e839-4557-a571-2e7bd16baae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7274bb-7081-4b28-83ae-04680826ebca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240a4d1b-46d9-4fd7-875b-0466fa7324a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0b1070-3184-42f8-b7f1-0b800cb5ada1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62558f43-a065-4fbe-b483-829020a6af70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425b97e8-68c1-4ed0-b0a8-e6882b062481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3aead1c-5b99-42b9-a1c6-053463805000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1283b618-7de1-402f-829a-57037d1016d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb839e8e-e68e-456e-b091-93470b1a253f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324eaa7c-e776-4968-8bcc-f5c8543c4380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ec4a4d-a2dd-43df-af59-529e9a93aac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a628574-9051-46e1-be13-a619ec0a0268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3030b00-f31c-4190-a80f-c505ed4eeb97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953d87ef-be75-4fd0-88bf-2c8f48c496c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24684b0d-86c0-4159-982c-2ff4a53d419a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c18f711-bb83-473f-ace6-6023f33e188d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d51a8bc5-f02c-4235-9099-eaf5ae730deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9be148-8f65-43f5-b95c-a5da852f1357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c123ac5-529a-4c0e-bf02-9db0f1456871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87a67cc-eef3-481a-879b-e5fc54f5c5d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6cf066-1dce-46e9-a94e-2fb35ff588f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca5e130-194f-4da0-835d-250733cdf95a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4d8532-eed4-4364-bb6b-d9c24b010de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.220.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78aa4074-d3b6-4c84-8c35-250dc129120e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a04d174-ac63-4f7a-be44-df1875348bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab90154c-212e-4fe4-a98e-b8dd29c2484e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d3c5ff-2606-4bdf-a8bc-f6581e55f070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb5d627-413c-4a64-90e2-c58ba0f23b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95825a89-90ae-46cf-8b5b-07c9c79453e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3350f1-79b8-4947-9cfa-687f5c0be229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a903a5b2-c540-4e83-99ee-641833432f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf65bbd9-727e-4de7-9ae4-56f5aeac9ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557adb0d-15a9-4c5d-af32-b2c27a73c539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40ef739-87ba-4312-8bd9-d47eee80894a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef7f498-888c-4969-8043-9d499d32569e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da4aab4-0d07-40eb-ba4a-3f2708392ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e590b0-f0c2-4ba7-bb2a-9fec615882bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf08607-e45b-4903-8160-253a2fff8a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3f3780-430d-4885-afd1-5b3d6e88a8f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e312dbd-714a-4bfc-82cd-843d1968e7ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f613e5-00a7-446c-a02d-d3757b0fab1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ceb7b8-a18f-4485-b2e6-06bc724e3fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ef5ad9-d525-4004-8251-51ee5fa52326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2cc010-cd2a-4278-9340-c95a66c28ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d843a784-5a5a-40e9-be00-fa70bd126710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7198d794-7d4f-4a86-b38e-caa2b0dddc6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2eb309f-67ce-49d9-a004-6b12d887da4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2489c093-d789-415e-9d5f-0aa6aeba272c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce766f7-ba42-4a66-b23c-3064b36a65a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e442a8-0c84-4134-a1fe-0fa2af1c8d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa79ed9-7737-4976-b802-02fe3959444e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9728801-546f-403c-ac79-e20696059d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.221.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1778e8df-168a-4c4b-8e51-44c2178c4204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaaef807-9837-490a-8ce7-f17cd69618ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69892dd-ca9a-499d-93f6-7b29ef1ee50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e13245-f42d-45e1-9a58-2df8bb8b65ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4a6444-f2c9-4f1c-a867-33113653d1fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1d43ea-1e22-49d4-8a73-6ce294d37759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61db8fc0-ca6e-4d43-a7c5-637009e42415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4aad552-95fc-4d6f-9f66-00e48dc11bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b52612b-5a20-4b2c-b9fc-7c7f94d735a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c8c76a-16d3-43e8-987d-214da6b85344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b4072c-b69a-4d38-b111-ba2f77710ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5348f2ee-50a8-4125-ade4-ed040760789a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5673ec5f-046d-49bb-b5ab-a6b93b0b9c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76f8077-fb54-41a1-842e-d457f45393f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31eb8f75-5b0a-4add-afd3-07868811d391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e18506e-7bc0-4333-8689-956909a163b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b66e81-45be-4913-937b-62fc692602cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605d4504-e4a3-4b6c-adcd-bf7d4e569f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15c417c-c90b-4a1a-8177-b0ea4d29e404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--559e9644-ffd0-47b6-911d-9cebc7d45f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8233a1d7-9fab-42b5-9b96-b6b64706515c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5610edf0-1035-470c-9bf8-a663c3b96b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8d8241-41c4-4f04-aca9-4db2b026eabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e25d65-11d6-4fb4-8ee2-50ae3aa27bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07608083-91e8-4d86-905c-4a2f28c377fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04e3f1b-5738-49c3-b833-595d4a4ae93f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d79fcde-e1d9-4de3-82bb-7a9e225b2d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098e0245-a31d-48bf-ba0d-a6fbe5b0b371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d6687e-00af-4221-ab07-03528cbfb162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d008e76c-a92d-4ea3-9fa3-63ba4696547f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907e70a1-1564-4c4c-8335-ba654fb5ef50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c075b7-7316-4391-8d99-3acf740885b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26c782d-53bb-4fde-a685-2a749b6f5f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f11e054-44a8-4862-a5e6-f6d5089febc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48df9e20-86db-4547-93e8-a45803f8e8f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7162e483-de79-4b81-bf9e-63391b950fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.222.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4a1475-e44b-4fda-9540-5d8523721014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a471f4a-af74-4db1-be4f-b96e0ca43213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f542ed9e-7227-45bf-a189-41fe3dede4dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e5712e-bdda-41a3-89be-79526decd032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6b28ed-819a-432b-b736-f1732c76122b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05add764-4f89-420e-9049-5396e7f24e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71185290-9a57-451c-9b2c-c3b9fb509c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a66e95-6d70-48cd-a9ae-9990c6ee37f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b022c91-5037-4748-98de-a7b9e6e78b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634e36fb-9a94-4c6b-aa70-7937bfeaf5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b74e54-a529-4d80-afee-1839901262f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3328d677-30f8-4e56-8704-fad100afd5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392a051a-2553-4526-a59a-d93b1fcdc214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848a13f6-f8d8-4e21-b0aa-ad98240f62e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f45dee1-38c7-442e-b0b3-34104c8ff4ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781c33f7-a109-4e3b-8257-09bd198f00d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820930d1-c87d-40d2-bc7c-533a86171b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26fb0ee4-be4b-4da4-971d-63a605d846d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3616978-39c4-492c-aae4-b212fab9a54c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5574ae83-5756-45b7-8bb5-d2eae424e6f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798ffdbe-e739-45c2-9724-8f79bd78b17b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb8b9c4-af78-4bde-bb24-a65b7b5e79a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ea8cc4-78b0-4c70-9127-bb1f62f9f077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc4e571-12b6-4112-a6e1-19aae44b8c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06444876-df46-46fa-8bdb-6148d834682b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8edbd28b-af31-430c-8911-bd2b018f1a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8173c27d-5393-49b0-ae28-71f13983d002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7beefb1d-56b3-4bdf-bac6-17b37e2819fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef112a8c-fad2-4eb6-b6ac-40edb35b8bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b44528e-cd12-4de7-9c71-cc69babcf4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.223.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a95e6d-9352-4f46-ab38-5ff59717b6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8835c260-4666-489a-ad7b-16fce5f86d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc9f53d-c7d3-44c5-b623-37aa10fea263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5558b103-2110-4cbb-94c9-2c4769efbd5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc56a2d-40e0-4c48-b1b9-95b6f76b362d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19237793-b829-42db-aefc-82f96937ef34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3192bd1-bca6-42a0-9dd8-d8b1c770d1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c146f52-e672-4c39-8f8a-89149173e0f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ccf18dc-601e-4dff-9073-553758e0e66e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667771b0-197d-472c-8500-6dc3194910c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc860b6-29f9-45fd-b41e-9a1c80eda0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b41335c-ed93-46b1-a4d7-f10c014771c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b247bee-6386-4827-b88a-d2750254face", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f820bd8e-b08e-4117-9273-afdd47637c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bacbe01-cef6-4e16-92f7-a48239ba9196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d20667-b0a6-408f-b4ab-8653a5a47990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef357b6c-e14c-4d89-bbd2-9bf1e0374e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728f75e4-2278-40f0-aa09-7609334fb7f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e8bd9d-bfa6-4ec6-b8c0-c22cbe4fa50e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635454da-8919-4622-952c-477b61aa07f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6700eba2-7b72-4e48-9141-9b339a9cd4c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2dc573-8783-4763-965e-090a5485cfd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ad0772-d467-4d55-8db9-98c24f017c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd92cb00-dad0-48bc-81ea-c6a988d600ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30f44eb-43cf-4495-b460-bdb197d7dbdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c83df9-b827-4464-91da-add9ffd3fb60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a8335a-9960-4c34-82d6-270f20d8e235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f429ce94-52e9-47d9-b2a4-883f7c9a8ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02622934-f1e1-4fbd-9957-aeddb002f376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f0d73f-6eca-40c1-837a-9af77d793b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0154a73-9b65-47ac-a9fa-783414483005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9adbdb9b-594b-424f-a4e2-b7794a250bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ba85aa-2887-4fe4-8d18-ea1dd73f82e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ebce87-0792-4cff-a810-6478fb4abf91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c939be05-b966-4d23-a210-6393951b6ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489bf7c6-4560-4cf7-954f-bf502e0873bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48fcd12d-cc6b-4154-8631-d85c7ff48a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a2ceca-9ffb-4b09-beaf-3da5a20073de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8c0567-a939-43c6-ae17-8a4040bc68da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36835a1-37e8-4423-b72a-ab79bf73eebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.178.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd825d3f-b824-418a-90a7-79edd1beea01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b39f63-de1d-4ccc-9486-525eaf05d05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3bf9a14-d8d4-4505-84f6-aadc162da8f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee034e6-7faf-4c7e-a4fa-107c4fa1b730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75b3e17-4dde-4c24-873a-4a16f683ae14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4dc70d-33ed-45e9-abb4-81851a398621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1982a43c-0fb3-4302-bcc9-56bbfecfd83f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a873a14-80dd-4528-bc11-ab93c8329de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6160afdb-5311-47bf-90ab-f49c8acaca65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c985de2-8438-4f5a-84fc-b544bbb927b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a24a70-dc7d-42ff-abef-48dd074afdcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10050f9-2be4-4d41-ab4f-378b038e92d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69c3292-d288-413d-8ef3-c8466dfd285e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06da9956-a4c6-4e49-8425-d9e5cf516a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2bdb294-0109-4ade-8869-44505c3e1026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21160aec-08cf-4785-b61c-d8f7fa728f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d701cc0e-e2b7-4481-9948-677e644dfbca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7166d8ac-1fad-4730-ba46-e548ba6cce3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f059d95a-0ca7-4ede-8411-32917f898824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a47de8-55cb-4bdf-a31b-44dcb01f052c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac42a6d6-aa3d-4a3d-8590-a279616afbfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dfd9d1e-ef00-4443-b424-aae9bd265fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2163ef-ce74-4a22-8a76-bceff058d4f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b704e7-f5ee-4b72-8ddb-21476c9fc3a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce662ea-0dee-4872-8899-9d9d517f07ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf1f704-3f23-418c-8ec9-e8e13bd2d65d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e12206-5f00-41c5-9d91-fc5f6d292a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30da6bef-d808-49f4-9a9e-a69761c96393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5aea54c-0cd9-4222-9a10-1eb1be50a6e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5fe17c-f0f1-4e37-9277-a6c17559cfb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ac8311-949e-45be-b935-d9841296c445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421198fa-10d2-407c-be0c-8327e6f940a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63a993a-833d-4b37-8dfd-c11e1b3575f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845720f5-4881-4960-9570-a5b939bc7b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3fa333-562b-41da-9dfe-150c4234957e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2754f2-2f9b-41ba-917e-7cb16e407f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d50bf9-9e15-4989-a786-01bf6272ce7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc345082-e5f3-4f8c-b57e-54e9cd8c6dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69bd15c5-34d9-4d53-aeb7-8e1aa606017c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b9ff31-7f43-4111-9dfe-0aeade08d0ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.179.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d37f872-da99-4db2-b129-8ed93de4ec82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.130.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a309f9b2-c6d5-47b9-89e5-b3c7042ec8b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.134.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e507af78-9df8-45c7-b6dd-17863680b8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.163.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c113e2-4553-42b5-bde4-868975b80bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.167.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384b8fda-7c49-4a09-93ad-64fb9ad224a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.177.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd380d5d-30ff-4e4a-83c1-d4f7d5dc006c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.79.82.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770d7b0f-8785-41c9-bb90-8a2334bb7c51", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.81.111.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5fce33-da59-4ec0-89a3-efc16ebff57c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.81.230.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb2446c-c131-4a32-9e44-313a6c5c96f6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.82.60.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35391b9f-dfcf-4897-97a1-670fbf8799fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.83.126.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a854ba3-cd59-4c71-8705-4657248c08ba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.83.95.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e74a94c-b1d4-49cf-acbc-127015a3edcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.221.207.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf2d4ab-a8fb-4fdb-97ae-3e0813530c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.183.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2a5b68-1966-415c-b22a-223f683cbc50", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.190.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2960e22-76f8-4da8-b6f7-5f6fc9fd5362", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.194.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3207f583-b3fd-4bbe-9f85-38ea5ae50d56", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.198.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb4f728-6eb5-4d66-9dd5-4a210a923dd1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.241.42.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0489b5a4-4cb4-4fe6-8d4d-1fedb292512b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.39.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a4abbb2-a7f0-4682-87e8-6a2e65bea9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.36.6.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414d4ce6-4d4e-496b-93d5-cb2973d2745d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.36.7.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a232d5e-1c05-4b32-bb0e-1ea7d5817ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.37.46.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a7d723-0e3b-4ac7-954d-17c0fb6ab545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.37.92.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bcdf163-0902-4034-9444-fcd82e2d3bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.100.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e6eb51-a637-46de-87d9-011c681d74de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e9c1d6-e6d4-4643-886e-4ba3c1023b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5516429-94c1-4a42-b3ab-93919ada8ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.13.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc8778c-436f-4bcd-960e-a35e6712ba33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.141.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4079b1-0536-4c64-92ed-dab1cbf87147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.17.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58ac243-eea6-44d3-a49d-577bdc7bac49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f69f9e4-4b8d-43a8-800b-790bd3113bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.209.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c06d87-8e20-4f4c-950d-db803b8fb94d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.209.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7131c043-8bd4-4c6d-9a2e-ebcf81d08117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b7120b-bcd6-4d94-9c82-87ef36530592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90dc587e-3505-402a-8263-323949135e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.215.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b012092-9143-4262-919d-882572dc248c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.215.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5caa4295-6b7b-4b10-83dc-4bf5b4b0d1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.24.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ad13f8-8b7a-4d7d-869e-d94854fea491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201797b6-743d-493e-9540-586564572855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8659e2f-92ec-433d-9b21-21adcc0946e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.197.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3ea2aa-7083-4d9e-b576-b71ebb890644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.218.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c27a46-1dea-4cb9-986a-4842a73a6da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.23.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--565391cf-be76-4106-8d6c-6136276b9d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.23.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f1084b-f057-4efd-83a1-8b10e6a4a716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.23.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac167db-63c2-4046-b5b0-347752034351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.219.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3e19d7-1919-4d55-81c4-b3b3cf103a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.221.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691d9560-28ab-4863-b27b-3dd4f47d41b8", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0401c5f-eb21-43d6-a732-b354460de176", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a39f721-2a83-4630-bc19-160f88d978bd", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028ade0d-27aa-42c2-88d0-a0540b42578f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e574c9eb-7ea1-4865-9a11-f59dc385acb2", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc02e2e9-8271-41c6-9944-7ec638875c79", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78cb0c20-554d-44f5-bbee-c83fee9e7b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.171.241.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e478d5a-8ffb-4d16-a823-14235dbeb567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.171.243.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abf8db8-7348-4fce-809f-ac40b0475d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.131.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61db45e2-90da-45e0-bd9a-7257d735c0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.225.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbdff913-1e93-4f59-86c9-3b3b3a45e047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.234.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ce9d3a-9778-44eb-ba2f-3d0d37d61aca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.236.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1634d410-dbdf-4992-bfa2-58e01b3a7eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.244.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91752442-70d7-40e0-aa00-4e9637ba8915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.244.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c781aa7-b31a-44eb-8273-b17a6589a5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.250.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c465b1a5-04c9-4fee-9a97-f3bd893074a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.46.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0e956a-7411-40b5-b6b8-6ba4a519b579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c9ea83-b7dd-41e6-9bee-d6f6e081f2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4c48d7-6d59-4ccb-bc68-45d49014faf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6581a3a-a3a4-4184-9321-c6269ef166d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.83.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047b3fb4-971a-4989-9596-e4731f70e1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.185.40.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752c1c57-58d5-44f5-9f47-3e0d00895cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cc67fbb-1ac5-4d3b-96f7-e3c0df4b3ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.105.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c8a549-8654-424a-a2e8-bc5833972926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.113.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5173edc8-ff9d-4401-afb2-d91e39c19e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a81461-e170-4c9a-a4cd-9f05069098e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79134dc3-4289-4365-abc4-a8c9546e69fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29dddba4-f8f1-4367-a08a-fb037b01dff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee45ef6-16d5-444c-a73d-ef1c3b5e9a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d4ceb7-c384-42b9-8ac8-5ba845d590c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1be741-85db-4a53-894d-f6ed1fef74de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae39fdd-0ff9-4cbd-89e4-6234dd35785f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c857634a-eb49-4b33-ab01-380a4650b740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2904883c-2034-4002-add5-9ee8d377b22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aaea23a-127d-4331-b4f2-83386b2f067e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f3a866-736c-4801-b349-d0e9395d3c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7826691-84b2-4ce0-bd9f-90b4ac998dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c728614-d83b-4c84-9d95-02c9da535bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27038819-921a-48c4-9dc7-a581362ee781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.122.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4794a58e-b5e3-4e8c-8e28-6cf70b18db48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.224.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26c74c6-0a1e-4dc3-8bb1-9a650f70b564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.225.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73bc5d7-a68a-4d99-97d8-86cb162c434a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.234.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bfbc6a-b930-4948-b01c-0ccfeccff443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc377976-8ed7-4eaa-89a4-01b58ae6608d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.225.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0e2235-3c16-4882-8c8b-89912ecfeec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.13.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec180639-3880-4a0a-a9b1-80ebded03b80", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.152.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5a963d-2451-40fb-aced-b96ff9951fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.24.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded6b2d2-16fd-429a-ae04-e047008504fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.53.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca4fdea-9e30-4c06-8495-4c67f72ae211", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.53.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00770860-9222-499c-8448-dd8ff250f258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.67.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c52770-fc55-4fc8-93ee-f9718a22ae13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.9.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81eb0c28-ff03-4030-a6ca-2a284ad7952b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.211.56.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4233474a-f948-4a5c-b41c-a2dae1b813c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690a203a-6f71-46bd-b965-7b995d4790cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.201.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1adbde7f-c724-4163-89ca-82aa1644c654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.145.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ffec38-ad43-4244-9504-8b968e7cc2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ccf62a-c742-49cc-bd76-976c32d1d97e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a194ee5-8620-435a-a4c8-a4641e73f7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85f9b17-d34b-4191-8553-049e9ce207e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c938b4d-1bf9-4589-b0ef-263f4b1fdc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c29b9a-464c-4f9c-b5b8-04509be60efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d385b9-ebc4-4e67-8f0e-cdb91d958aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa80d196-a7f8-4f5b-815e-10907813b7c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aefa061d-10fd-4e0f-b260-b03fb040d800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b88c35-793f-48fa-bbc6-a5ae5cf5c64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef606fa0-8012-4399-b79f-0d4d2493b2c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00913e1-64ce-437b-bf37-27c77f91e7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6db5b16-d62f-4f55-98d7-0568cb382863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce3e3014-cfec-4ef3-b0a1-91eef53a364c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261b84be-b998-4334-8162-cddb4c7e057f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.217.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc6b757-97ac-4fde-8b8e-ea41d50251fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97afb36f-58ad-49b6-806a-c07c8ea7f888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c13d1b-6650-44f9-95f6-ec4a8c0ca33d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb5b6fb-69ec-407a-9351-68562e7a8e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa79bc63-3a98-4f5b-a1af-159b01c3cd55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf91ec5-3cb5-4bfc-ab80-c37d00f6e1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4fafe1-ffd2-4d23-9e5b-403c105be67f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57d6719-b57a-4291-a049-3199367cc73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d3ecf5-b263-46a8-b1b0-4d83b464c4e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fb46aa-157b-47b7-b60e-6b524311f4f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e32f38a-8b42-4559-9a58-957ed2f4197c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.40.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8105b1ed-2fb4-40bf-833a-90bbeaa036c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.41.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4840ac46-856c-447c-8dec-5f31719ba8c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.41.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64e6ea7-8352-4ab9-927d-ebf1e33583a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b57c636-a5ca-4c7c-84dd-29684361864a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a918e1-20e1-4588-b9c0-99ca7bc60a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691b611a-7709-4bc2-9595-59aec1e4828f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbca7be-3304-4de4-8c2e-c6e98cb3fb89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78f43ad-ffc5-4188-8288-56746d65c85e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.119.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be2f165-acea-42fa-b8b9-dab06a828aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f833643-bf92-4074-9ce8-76783d3fbaa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d90eeea-201a-4410-9123-fe4c4863ea74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d18b11-caa5-4b0b-aa09-2dcb1938c835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.143.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48695076-38d6-4074-9ae4-3ca59046b6c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6f19ac-d052-4029-afbe-f033634d91c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81baea7a-d6be-4715-9dd0-355c41db50a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d745c03-2767-4f51-8501-f19e3a60fe68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd457c3-2590-4df3-9924-e0c58bf45ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8191b31-123e-4556-b467-ec61081693cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930eaf82-5a4b-4b20-8ce2-e75e7feb6a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5a93ed-df76-4e62-97fc-a43e7c669f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d831162-5a20-4c21-ae1c-af07303a7aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3b8420-a8f1-4434-a1f1-f03999a691f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cecd299-bca5-4577-a5de-4fa0b18de0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc0c102-12f3-4bef-b0cc-16e5b76e70df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c91653-8e0f-4a0c-abad-170f4a849ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e27fec5-5cb9-4d90-a661-f7d88f26fc47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee6897e-7fb4-4784-9de2-3a12c805943d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ff1837-43dc-4f95-befa-0ad7c2a1037a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d25b70b-c0af-4e63-bde2-bf37f609a624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566605be-c9cc-4a21-9b7d-da55cc0340d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfdd08a-415f-4fd7-a6a5-3b24d797e030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02f68ee-9806-465c-9b63-0ebb511f836d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.64.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b469bf4c-a7e5-4ae3-8249-cd3b5ce2c6b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.64.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7ce23a-904e-480d-8f7e-dabe4a517422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.71.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15c6f81-4a99-4595-846f-2fd6db0f5e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.71.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139c5030-a545-4d5e-9224-5964660d5322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50379fc6-c117-43bd-aca1-8ef033dd3d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.21.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1635f2fa-8fb7-4ef7-8982-25adc21fce41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.225.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2eaa8f-a822-40e0-ae7b-6c65f87af673", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.56.242.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29de02d4-1091-439f-b069-0575811f893b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.68.229.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479f25ca-15fc-4813-bc07-617ae5a292a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.68.229.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03969bc-c281-4b12-bc31-09fbf9524bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.69.43.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90726829-94b0-4f85-9eb2-e3ce5c2ac091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.71.178.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca11602-89c7-4e68-b64f-f6075103fa9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.71.241.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b687003-5e2f-4570-bcc6-48942a7f1677", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.101.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10635709-3879-445c-895e-0a696575c4b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.103.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54184b9-4208-49d2-a566-73e6aa89081b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.106.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e70ea84-3207-43bd-9125-d044a17208ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f51b9ee-5f8c-4c87-9fa9-8b513ed61a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36b61b1-3c01-4b2b-a28b-7edf07b2b075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4256553d-6887-4335-bfdc-c0a34ab4a0a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ae8718-4d0c-45ea-b301-e48160bb7117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39128491-67b2-41c0-ac22-0a82728e4728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1193e338-4300-46a7-9491-153e00f23e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.96.172.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14081ba2-04bd-4d08-8ffe-d3dfe46b0e7e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.98.33.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7329b22c-b32a-43b8-933a-b96e08a65185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44cb2987-383e-403b-b6f0-0a520d3b8d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f539a7d5-d257-418f-bb33-99b7d2eec18c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.155.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b208e26e-dc47-42a6-8223-4b2d56ff510c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.236.141.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e5fa5a-a980-418c-a3c8-79167f728aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.236.247.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fe353f-4cce-4c2d-ad58-c767ac73d5b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.21.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5430ae90-37ac-4c73-83d7-d653f3c9d30d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b92dc2e7-291e-430d-9a25-e7cddf3acb21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.212.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6f20ab-b129-4228-b421-fdab2cb609b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02de1940-f475-43b8-aaf8-98ff5cf7b5cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42d0e64-a649-44ee-947b-505973723ca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a840a8-f735-4435-a170-708f719bbbd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f68649-92f2-400c-b9d1-97eb2d74eb05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8942475d-b8e1-46ab-839b-9dd874c537db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523ce342-1930-47fe-91bb-4c9bf585b05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852454dc-d659-4c87-b689-bf329e9af708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8843027-7af4-41ed-886a-4d2347b29017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757c8855-5917-478f-ab8b-6e30157519a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79344f97-a97c-46c6-ac33-22e9727eadc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da4b8b5-583e-4098-9576-dbcd0811962f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.225.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42dfa98f-2bb6-4e7f-8309-364eae000bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.227.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5d93d4-31c4-4dd2-88fc-4f8094dab203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.227.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d78292-055e-41a8-83e4-2c51c1c3b174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.227.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25aa666e-58ae-4b78-9080-a19b8185463c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.231.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ddf3af6-0811-4fc1-9de8-b7cce37bc970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.231.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ff6ae3-6865-4031-a428-3d4872d5140e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.233.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15efc460-6cfb-4e2a-a496-5355717be0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.235.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4dccb1-8c18-4a56-8288-b7e24e584d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.235.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64e666b-d661-44d3-8abd-e3239de460c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.236.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6d4cb6-0842-4eb0-87b1-83446e974c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.236.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c291fbc2-052e-4a7b-b219-c8d70e82fff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.236.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f02c48-be2b-4849-82d8-a0d33b5cbb49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.237.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72cb921c-3961-4b48-a1b1-f145885e7dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f87e563-1f82-458d-929c-c1031c0e1600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d4c5d0-5d49-412c-acd3-1217a3538c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.77.40.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bacc3aa2-9215-40c1-9dee-37c239ce20ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.1.124.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96111a3a-c729-4a41-ab2e-692ab78bd2dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.129.58.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf5f336-14a2-493a-8544-23a5ce5d5d0c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.134.230.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463936ea-35a6-41b9-a1a5-84d9bc9676fb", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.34.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ae8bb8-0835-494a-8393-9eda0e05e2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.41.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503ce8be-c352-4248-a453-4d7e15e8d4f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.56.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30bcbf6-5c6f-4864-b7a5-0653d550ffc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06acddf9-ba97-4a4c-b9bd-8f09ac39883b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.101.15.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b72b904-300f-4ab2-8620-5daa041210b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.2.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c039c8-2ac4-4780-a344-d144f58da047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.11.188.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03e0df1-d025-4ee9-9414-eb6339fe067b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.110.112.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7355d3ed-ba44-4239-a1bc-4693ab3b55f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.141.138.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012b862a-b87e-4936-9d2e-bfd6f3c15091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.146.156.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097c7844-b6fe-4409-bab3-4eeedd6ddaf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.148.132.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c04c95-98c9-4ecf-95e0-28e47e18b0ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.19.74.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3eecd3e-7735-489e-901f-598d4d959084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.19.75.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c162bf1-2cc1-454e-b783-3de681e20265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.195.238.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243184ff-a651-44fe-bd4d-0ae297c9f49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.203.61.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f15ad90-a391-4eff-a1f5-b88029275b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.209.246.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09494e43-8a2a-4400-9d54-622efddc715a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb22bf6-e446-4960-a642-570b7ff0dc8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723c59bb-ea31-4b8e-890d-8ba7cc95ff8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.6.54.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351edeeb-fcad-49b5-be7c-88417fcd8427", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.108.63.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68976601-83f7-4749-9c57-78b34dd00a9a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.114.190.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7413e9cd-6101-44c4-9571-945acd36a989", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.115.124.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822eaf04-4d7d-403d-b838-fbba6547557d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.123.2.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6164dcff-157e-4658-95ab-7df7722f68c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.195.61.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4636304-bd8b-4a49-a663-47b1e9246d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4bbd42f-50d0-4f0f-bfde-a2a9dc708ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.39.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0106ab40-87d8-4e02-bb45-8d79232cbc1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.49.140.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1078d346-fbf4-4241-89ed-22244647cb2c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.159.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a671dcd0-c3a1-41b0-8ad2-b724ef74a6df", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.159.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec21a2c4-40e1-4122-a2a4-d3d8702cfebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.159.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa7b163-043b-40c2-aeaf-f75fdefb1d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d677d9a5-fde8-470a-9ab7-2a2d494c131d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7398f11a-ed4a-40d8-9b14-8fc808bb8d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aba218c-2155-49a2-9b4f-2554ad31a642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ca859a-ebc5-444f-b131-7f770f14fb26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78408c26-71f8-4fda-8754-65d6d0a13d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8aaf7ff-f7d3-44cd-b39a-708476daf83b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960fe3d5-8669-4a10-9e06-c4efcd822791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.136.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b16ba6-21cb-4bfc-ba4b-0e7cca404273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7526ec29-f81a-4553-bb06-a3ca6ed2b6ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e203a29-6238-4178-ba9a-2e18c5709e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14168e9e-97be-4dc6-a631-4a624f104055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275649e2-3091-4068-bed1-07896d4a377d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a877ca3b-6950-4ee3-9e52-dd29d2168ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da7cf94-5bfc-490b-ae54-ad970092279a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35276183-150d-4a2e-af9a-3ca20a268af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc7c359-0ff1-4e25-9f61-4cde9813791a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626626d7-fcfa-4736-98a9-a0ee1f61c51d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94a8b33-4e26-40fb-977d-0cbb5ff6e936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7266617-53e6-4a12-8f9f-2bdcc9ab7c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b464ba-1ad8-468f-b2a5-f50374628e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1041455-59cc-47d9-80e0-aa278c200bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d108598b-0ebc-4952-b0ae-934f76377941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f9adaf-abea-4465-8f5f-a272fe074656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc13ff62-47e1-4219-963a-19d69ebffea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac221b88-59a1-4ad5-8b08-bf8bf0195876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d793ad-ffcc-49ac-a075-74eadcc1dc02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b66fa36-eb13-4028-8c9f-4e97746f2253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.74.195.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8860fba0-8703-4789-8032-4af8f29fcc6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.77.8.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46e3c03-f7e1-4ab9-9ab2-78a08e3c3f86", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.101.140.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce4c947-b232-4098-a71c-73f8f3bd8f44", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.129.191.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c04fcb-99d4-48bb-af90-baac310e9604", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.185.122.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dabf36b8-1eae-4f57-aba2-a0e7a566ee72", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.191.116.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61374c85-42e4-4454-aded-5a7674587105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.22.44.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9418d3a-2376-4d87-b707-bae89d886e74", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.223.247.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046b9e6f-c806-40c6-9848-768bdee139ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.227.42.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f7180a-7e4e-4816-833a-a7999f9c7147", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.228.192.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc3da04-124d-474c-ad00-a985fab7c846", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.234.161.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15363d3a-2cf6-4230-85d3-d188e62c9666", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.238.21.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3edfd3-ebf8-446b-a488-74addab7bb6e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.240.15.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad9de06-cb62-43a8-9b12-1994cfa9691d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.249.8.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc904cf0-6f9a-4fbe-a865-25c8747bffd4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.32.133.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb9c002-e415-4a4a-ac55-dac2e86b6ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.36.187.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424794d7-6867-4f08-9319-1be0a852478a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.37.187.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af53a0b4-a911-4a67-95f2-27291c5044f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.52.84.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b4055e-b157-4d1b-9dc3-05a0db9a534c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.55.226.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8189fb77-8384-4dec-b76e-b8d3775f995e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.73.194.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f465f43f-5442-49de-a4e5-f8a0d16605ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.74.167.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29684821-b315-45aa-a5bf-7b7504e20307", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.74.230.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e043d80-0077-42e3-879f-b97c946395d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.74.238.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931e7c1c-cf4a-4c79-a1f2-0ddbfa538684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.8.171.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f9043f-31a4-4f11-93cc-8942d5b347f0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.121.59.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7bd3311-5103-41d5-9c61-96cb122b9538", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.121.60.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8871a59b-7885-4820-a960-3f7b1bee3e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.14.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da398643-e770-499b-ab6e-bda3b7f66364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.156.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91bdb6f8-5b41-40eb-acc9-62d07056e981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.212.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310d11c9-aaa5-48d6-bed0-8f8838da3daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.231.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--476dc535-fcfc-4d0a-a69b-12f329a75b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.237.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f79ae2-90da-447f-b8c0-118ec65cb35a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.3.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc55cdd-eef6-4f49-a684-11d38e25f0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.84.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb93e60c-c9d5-43ed-99ee-68d01e81508a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.84.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3b1a17-e24e-4a36-8185-f692c218943b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.142.203.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0c3f31-f65f-4f24-872f-3ecfcf0767ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.151.100.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca6e21e-193e-4788-85bd-2d636e2bf6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.52.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00298f4c-adc1-48ab-9d25-ce85dd02284a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bcfce1d-ba51-47cc-8d78-03ac0b263d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09f5e8c-70a7-43c1-8282-888a1ade4efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.54.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf24fb52-e39a-4c19-a1d8-12d0d6368b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a498ecbb-2114-4e84-bb23-604f1ae814e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.174.137.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b6d604a-23c4-41c1-b133-56b635f2f712", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.176.224.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8a3706-a7f8-49b6-8cde-65b089ae2e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.177.40.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecace8a0-c4ea-4836-9e15-6476d9e3272a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.18.253.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ebad0f1-a3f8-4070-b991-5318db409aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610f301a-38b3-4e42-834f-05fc4b855451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53ab321-469c-4dc3-88be-ca04678eb9ff", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf1051e-d34b-4338-a2c3-938cee19ceb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.206.183.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431f2236-8b6d-4734-afbc-953dc01d9fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.234.77.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7eea42-ca18-4663-b6c8-feeb45273dc7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.24.97.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48fb54d-32e6-45b8-abae-8b439d6b2c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.252.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d6cc38-2c1a-4296-b8dc-8f1f14d17825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.73.210.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3e9d32-3ac7-45d4-8e21-1434cf5f1951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.73.229.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b24976-f3a7-44d6-be37-755d18e08f67", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.79.144.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f544c04-d5d5-4b60-9b54-f509a98b6bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.1.181.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b833c81-2eb3-451c-a076-13d290c90b80", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.106.165.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19dbac51-9d8e-4216-bac3-ee7f8470541d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.109.201.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86021518-85fc-475d-b9a3-1cf0387b30bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.113.213.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0e2fe7-7fae-43e8-945f-be594fe4af68", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.176.210.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519309af-53b6-4f02-8002-2914a5b0465d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.191.49.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965d7335-6337-46a2-9fbc-65842dfda742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.209.46.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0d787e-4cbc-4e62-b9f7-167047998103", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.33.161.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ad4c97-6ffc-4fab-b5ac-043090e75aa7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.36.88.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848b338f-88cb-486d-a780-3877781af5b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.168.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e26619-8aaa-4de9-89df-154e38a81753", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.48.248.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce95590-e63e-43c5-8923-88e257571b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.192.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc096c0-6bf1-4205-a646-5d1228cc1285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5919675-fb36-4ec5-b4d4-9ed15d2ea668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919e470b-ea89-45a7-9197-349a7bf0e13d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.62.88.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f869d03f-d2c2-44ae-b037-3610be556639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.64.47.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd39b2c5-fa37-423e-865d-89488a317d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.98.117.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cfd02b9-e911-435a-b2ee-421dfc43bd23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.101.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74028f06-5100-4d6e-a6cf-70a947575020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad428e78-3951-4f53-b9ec-31ebdf98be92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.133.212.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444eec93-011c-49c6-9ccb-e727c6faee00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb9c053-6686-4c74-8e6d-f7cb31cb226d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39fded65-d9e3-4f89-af80-43d7e4d9c687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.206.124.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9933f7bf-69f8-44f5-a263-5899ec9495f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.206.157.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d670e4bf-e297-4db5-9256-c6040752f389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.212.20.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10582f9a-a8a4-4607-bded-27124a7d03a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.212.208.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fcf6c4b-5785-49b8-bed9-6084b7454b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.151.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c418bf-c015-434c-b6b4-5560a51e7c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.153.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9527ea8f-39ee-4973-9e37-c4aa4aaa8ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9826f40b-ca03-41ef-94cc-490936f04de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.218.118.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71cb2ef-92cd-4155-9d45-b51b23dac1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04cfab1a-7635-431b-83aa-ebe6c4c1e354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.234.139.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f24f9a-545c-4bce-b85d-a7794b6517cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.234.77.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcadaa99-ac5e-4966-ba1d-b3a86d892a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.19.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ad7104-ecf0-4d9e-be65-043499ecbfff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.26.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa049944-984e-4df6-a0e6-3c9e5f852632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.101.224.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2513d7f9-8330-4409-b2a9-b07951c3c804", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.108.64.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da65d615-b30e-4308-8d46-948710c1a694", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.119.209.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc2f132-a599-48bd-8b25-9624f1366db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.44.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afcd052c-eaa6-49a4-a426-af5761cfbe2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--888aa219-cef7-4647-99d5-f0a3dcf4aaa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a87722-8118-4ee7-a18b-6db650d66404", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.178.51.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567f36a8-462b-4145-887c-7d33919e3e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.182.229.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f729a64c-4a51-42da-875d-5410aea1decb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.190.41.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--359d13bb-64ca-4beb-94c4-97c81e968416", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.191.85.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cba9c05-a2d6-460b-a3dd-e55db98e0117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.246.235.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16143dd6-a9c7-412e-b822-82da19ece9be", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.247.179.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63817b6-d1f9-41e9-9f68-60a11bca5e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.253.142.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34858672-a870-4b68-88ea-41d03291f2fb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.134.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f7752de-e06d-4a38-a1a6-fe7dc99e25d6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.194.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2999fd-6865-46b9-a9a9-d7a119b8544f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.55.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8def3e37-333d-471a-bc93-3154dd8656a2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.43.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d8166c-435d-4da5-85cd-b8caa1c76b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.78.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d728d4-41bc-4990-b379-6735e2ffad32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.95.238.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e349746-ba78-494b-b382-0cda89ed26d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.95.238.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e1135a-2760-41d7-af54-f6680df0b861", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.110.20.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b57d67c-9eb9-47a3-a8b1-e501fe951a39", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.115.147.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bceba2e1-db40-4ddd-b2f9-acbd6e081a09", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.117.184.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd3f8f6-35c0-4f4d-9302-a37fee434216", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.117.73.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0ac1ec-dbc8-4192-87d3-8f08a4802182", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.118.231.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572b9cb0-161b-4f5e-a4c0-00554e7a457c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.119.70.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2844210e-c726-498a-8497-a1b96777bd90", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.123.136.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ae63e4-3e9b-456e-a6b7-31bac66dae74", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.129.41.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ad877c-eaca-4761-8eee-f6786dfb2319", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.160.75.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3c03f2-39c2-4a4f-b0ec-2b6a9daade4c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.164.12.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d2a43a-495e-473d-8bb2-81fcd9895019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3e4d64-1e7b-4998-acee-117d0b8f8323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b48e42f-8cca-4c7f-8b0c-aa12d2470397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef62c44-a304-4529-9c2e-d3d8a8edbed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eef0530-1eef-41f7-80ce-8e64b8b730ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6118c541-a47c-4bf1-a5d8-4d7fa5f66b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469bfd6a-6b95-4072-84d9-2c2a42975297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f84919-5b83-48c1-a36e-370c6c578af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a84824-59af-4ec2-804a-070d269180c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32009dc-52eb-4db2-8e84-82490ac487be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c782a0c-623e-412c-994f-e2d0c257b600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0982eaf9-1cf2-42eb-aa90-a47ea3727443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1d394d-7851-41f5-ae04-bc249e70b1d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0606c224-03a3-455c-9808-952fd3c67796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb987d5-ccff-41bb-98aa-63293bfdebdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7c2f71-4202-497f-a237-86511542addd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f708294-2a1b-4849-af97-3b0ea2401027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85030a35-fb84-47f5-9073-f78477dc87f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d98474-0052-4fbd-b4d9-77d78e35578b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86f8ecc-e00f-4dc8-98fd-19552d606342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9fb9de-ea4b-4241-a76d-c141cf591a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be070324-536e-4b93-a2c2-5d3c6aa6e598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be0d8d9-9817-4cfa-a864-02ca2c487073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8767f7-36b9-40a9-9491-8f924a83d43c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8bc17e1-4039-4876-8991-bde0657a577a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ce49ab-d57b-442a-850e-64d471398d07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87236ba-b5d7-47c4-8eab-4c9774c7e961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1716ea28-1429-4983-bc44-c4db33d6ae70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775298cb-d013-470e-9a5c-0029a5622e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0efac3e-827d-4bf5-be85-9ce18a751ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.177.80.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32ee0df-6ad5-4863-9cae-4a73aff9bcaa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.188.176.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c76fae7-f647-4a33-851c-8a982e88ee96", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.197.140.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb911958-4d1a-4d83-86c3-cb5764267a21", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.206.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18faaa3d-b295-454e-a3c7-bd4b17df344d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.28.27.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc2aaa1-6c2e-4bf1-b2e8-db7820eb05f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.43.201.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e599c5f-42b8-4e94-b6f5-41b64070b5aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.44.184.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a80d2a-23ac-47fe-ac2b-833d3d4aa0de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.46.164.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5497f8c9-b188-4758-b545-452f7475275a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.79.88.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44714506-9224-4ffa-bde0-fe7615cfe4a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.87.115.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0988ece7-921a-4c9d-b4bf-286a95fa2499", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.10.229.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605a63bc-3f48-4642-968b-e40d0a092691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.226.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399a9768-75df-4c05-a85e-b96bb1d41c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.226.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47626fb8-9df9-4ada-8313-fffe41de580f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.228.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c694cf0-35f3-4369-976f-491154ebce99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a32545c-eb97-48bc-bae3-cced71e460b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad733fb-9438-4092-8e77-0621cd48f597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d8ad93-6418-46ab-b7fb-65f513c17777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a38c298-368a-49d4-b48f-b641b22cbce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f8b4df-15db-44e8-b3ac-103d573fbf33", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.177.30.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f49c73c9-52a0-4134-a026-b0dd69681ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed5e9b5-3920-4cd0-9e10-35061cb68b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473b4946-7cac-4a0a-8ddc-fbe0e069844e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.253.38.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852a24c1-e7f9-479f-a11a-496964f61925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.43.104.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd000319-712c-465d-adee-ba47fd2e6487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.44.73.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08e051b-35aa-427d-a0e2-3f2d64e9d77c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.48.68.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a8357e3-0173-4622-8ddb-c5fa53507dd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.54.23.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb8e193-8fac-42cc-b9c6-fdd7fdfc754a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.62.156.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cbb9607-334a-43ed-98ca-e7dc468e0f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.73.127.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce36277-9c96-4af2-869a-69f61a131b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.88.191.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4ee25a-5306-46ec-941c-de683c8c4a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.95.153.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa801c39-f0e7-4d91-a1c5-940662e379b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.102.140.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a484155-47eb-496f-bd23-dc92c87afbfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.150.194.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e3cff0-d12d-4f4a-934d-84b32208549e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.184.53.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33bbd36c-2752-42fb-87f9-c578962a0faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.195.227.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4632e99-8a17-4a91-bbab-ea48f2926c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.221.20.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c52c03-473e-4f88-ac3d-cd51b4af1639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.222.14.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f857b9-2063-4822-84db-4168d83009e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.232.212.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a59263-29e4-4267-863f-61cbeab3b250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.236.7.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0297b4-c2fb-4e6b-9dbf-42871f95eaea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.241.55.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106a3a2f-0b78-4e43-97ed-86577ada2e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.249.167.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db9c3dc-f640-46a2-bd8a-20a9b6667416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.35.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894aee50-e40e-4d67-9154-5ffbd935315c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.62.172.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f477240b-5498-4842-a3e8-be16e6be1350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.66.138.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bddf756-ca9d-4eb3-9ce2-b2853465fd6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.169.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdacfa2f-5d56-425b-b509-d4afe27693e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.92.114.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a46dd95-2600-49b5-97a0-9de7cd763c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.94.33.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8ffdcb-64c2-4468-9562-f5dfc15b3b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b99e318-4200-4ea8-8934-531080d2f610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f628d7b-9a6d-4bc4-a282-ac853a4ae9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0443b6-dd62-4fe9-bc45-b790fbe629bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc482d0-fdc0-4f67-9931-265c2615e0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850218d6-626e-41dc-b9cb-391fe74750e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9029096d-668f-48c3-a68e-5ee7797293ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56cc2ed4-58d4-4013-9c23-10e698d48590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9782ff5-b792-4934-98fa-c9d01543b42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9647aa7e-4644-4376-aad6-621f0cfd0835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b467a95-3e7c-4ead-87f0-60f5f7a9182b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52448e93-7b02-496c-9719-c98c13ec8b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29a86fd-59b0-4674-994f-a6457474fb1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4b64ad-3850-4eb0-b5c1-447236febb74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e19434-03eb-4924-8a2d-939983a6c3f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac89856-ccb8-4124-909f-b0fd31533ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7991b85e-8331-4770-98c9-962fb7c9c89e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6a9a8d-971b-42b8-b18a-0c2b9383e21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c497313e-bf8c-46f6-b36e-2fbe1f1800fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f34144-84eb-4386-a799-fa1a8bf19aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e35759a9-ab15-4434-9c7f-27e378822d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b69cf2b-eb60-4c2e-b953-33868b20222a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139f380c-c918-4ad7-936d-d1eeb70cec85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f003f4-9c1b-4696-b7f5-62414a52b065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9543bc36-95ba-4f03-8772-1a7ba0d8b607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d61f80-5af4-44d5-b28d-b6079bc92d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1736ec-cf15-4955-b71c-7fe23914f164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b5be98-f915-4c9b-9618-aed65a352310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a746530a-a8ea-44a1-83f7-5280bd173054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9c068c-36d4-4c0b-a112-cf4e0aea2af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--665a1059-21c7-49e9-8012-afb2b6fe8acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313ba55b-91f4-4ad9-b88d-52bd25808f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3eb3a8-403c-4511-844a-259fc77a93f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ab1493-a8cc-4a12-806c-f940b6daa750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ca6064-37b5-459f-8fe1-a0b595962633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac106da-5feb-455e-bb2c-e44aba9caef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d76b26f-2c68-4ff8-a784-5cdeb2fbd2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24b4100-b5dc-4664-872b-50ae36a05b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38aeebb9-5735-4f46-936d-3d020c462892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d83e6a3-64f9-4d44-a84b-6f242fcf2b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270d6716-bcd9-42ef-9ad9-afdedfceca76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc8a58a8-c5e1-4709-88c9-2f451055f832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5b7f9d-ec04-4169-9422-a2920ab531f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9118d2c9-1b46-4200-bc44-3f4c47c03865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04824fa-e636-4b7e-ab80-980177f3d8c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14a328f-33f1-45e2-83ec-9bfac365fbb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4653617-a58b-40e6-9054-e1562f2faa72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c546dce3-40b7-4849-bb33-3025784b23c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea29f9f3-93e9-434b-a601-024e2433633c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d657fc9-4e4e-485e-9676-e295d6ccdd6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d543a6-1b39-487c-b858-838782c280ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3dc9e7-0376-4fae-a8e8-3872f6348379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ca249d-716f-4ad2-8b1a-189410a7c877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c420f56-ca6c-4657-b4dc-6ce6d78d30a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d473de39-a16e-47b4-8875-a03d6e722e0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222c2fa9-551e-4fc8-9ac2-e7d6cb4bd833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3362351e-9b64-4c05-8274-a6ae2835d26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028db128-2bf7-4230-af29-f25ff4d6a9da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc8c4d4-d9ab-44a0-aaf0-f303622a5ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd48615-09eb-4f50-9882-7b1d53edda2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3981989-fdd7-4315-a0b5-b1ce7941816c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c7ebf2-7105-4eb7-8308-49a6be47f2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d46726de-f31c-475f-bf25-5d8f206b886e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4676b003-9a6c-46c8-96c6-73ec7bcdb8b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7b82d8-5765-42aa-a50f-ec1a7352f587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fdab5db-d880-439d-bad6-0e103803e15e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.4.52.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0da6d0d-90b3-4965-83e6-b2c4ba6cbf77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.55.37.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1274ecbc-57ba-4f48-bb28-23657c7eac2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.100.87.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a59601-99fc-4b7d-a696-8085df3f32aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39797c0f-6194-4cdb-bef7-5d2649129b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ec75ca-d189-440a-acb4-aab10b636ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dbe53f4-8b44-4cc7-a5e5-ff31d579d0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.13.228.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf34848f-49d4-4247-b500-21e3e284e16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.13.97.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1006f75d-88e2-42e9-ae01-e7ee3d8b2fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b67518-9761-4f73-bf3a-2cb9d4b10868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34852680-6766-4976-899f-a7cc3971b58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ee2a27-63ec-47e0-88d9-14cf3e308460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc8b4c9-3d69-4ffc-a1bb-43a9ff97cf71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.141.107.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--488a1b02-4005-4820-8030-7139c12bcb48", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.147.157.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26c355b-a0d1-490b-b0ee-3bfd622eb296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.156.73.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00698efa-e7d5-4ea3-b37f-fdd75c40176c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.157.90.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e41e098-5656-4bae-97b4-23b1bfcbd5e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.242.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e10ec34-2ca8-4dc9-b1e4-2401d6c8e4ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.103.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae1ef4e-6945-4779-98d1-90090268836e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a607f6c-0161-485d-9cc8-53d845d5aa9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55cae410-6dc5-4899-b552-6776d3a6945d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2002-1149. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ca03d64-2a8e-441a-8d7d-be86d8042fb4", "relationship_type": "indicates", "source_ref": "indicator--55cae410-6dc5-4899-b552-6776d3a6945d", "target_ref": "vulnerability--b3a43a8c-4055-47cd-b848-be1382d8bafb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31929a5b-3d83-4953-953b-2f8136eb3af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c103559-fe9d-4d8d-ba1d-8fa67932ef8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b4a8d5-b1cf-4913-a8fc-24b005af00a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9925d3f-9bac-4bd4-a615-d61432dfcb6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c82def9-7979-4577-93a7-4f47afb3f3a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922d330e-e6c0-4083-a8ac-a8fe3ae9bfef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8fd11e7-6514-4740-b20a-2edb44930b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84fcfcb6-dd90-4dd5-8b42-b854930d9340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795925b5-e6b2-495f-a1f8-530da90d1b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c427ed8c-d84f-4f93-9599-a47ac210e0a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e1afd8-2328-433b-b9d9-d660c1d27e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.165.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe8c6be-8c75-42ad-ae35-5f38de94bbd7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65be12a6-e8b9-448a-b449-17e66fca41c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0370a8-678e-4da5-b829-3396ada150cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c78b055-b9d1-4f59-bbf4-90a04a4def37", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa20d5bc-d9d9-4880-84ff-6eda6dfc37e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2e524e-c700-47fa-8e1b-ca97daa500c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8134c9c9-be32-41c6-85ee-17eb8cec66e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94a6439-9922-4e44-9a7f-ec8812f798e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1a1e91-630e-46e6-85a1-7ee993a47194", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c40c889-c4d5-4807-a3b0-6ff57377de45", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34cc094-a8c4-46c9-8be0-5280b63c90b3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746fa124-d81b-4e9b-9ec5-9f707ab8fc61", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f4a5bf-dbb2-472e-bb68-54becf4149d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb42b04-a181-4a00-815a-ef5202126b0c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d9c0fb-0521-49fe-bc83-317f39c18440", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81b8f86-4cb6-463c-95c7-e929fb140026", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0cf122-9a95-4da7-988d-45a6555265fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fc9af6-8b68-4a96-b0c3-6d70e431b1dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42e7314-f8b4-4a6a-abfb-a3ed0990d530", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659b8daa-c94b-41f3-a230-7ebfb2efd243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c7b056-835a-455f-a7a5-707edc0fba17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eebf7a9a-710d-4da9-86e2-1c6b57d21180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3705de12-44dc-460e-8f97-ca78f874aed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa69413e-6b4b-4c30-ab63-24d0c553e302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfffac06-931c-46d8-a0d3-8ca470cb2629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b0a795c-77b6-439e-babe-d97ca4e706b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fba0d18-ef59-4079-84a5-08b20a39c600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.204.1.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23aa6c8f-a3a3-4827-86f6-97e2de4f1907", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.204.35.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01fdd3f-6ee5-4d5e-93d1-b5e3880bca99", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.207.107.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45629d3a-c67d-47c5-8e5b-d52f93ab9273", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.215.164.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e74536-35a5-4e97-a22b-8e06d5170268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d2b083-4bdb-4986-a370-e1f3dcad25dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77d6514-259b-48c7-acd7-112bdb614d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72737e6d-afb6-422c-8336-5e093350f771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd26942a-1506-4a24-b69d-8c85de4cfe3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ff166c-9657-4931-b26a-c7e232cd1fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed332c1f-700b-47cf-a341-194a53b39814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d812993-f50e-4d69-85dc-f1b2f28a614f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9300ab-0e66-4136-98cd-782b61657d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c14e0e-4282-490c-b387-2dd6fd304b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.219.133.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332b30e2-76a9-464e-b8b5-acbd7c95030b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55fb0774-d78f-4abc-b6cc-8992230120bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81d7e44-9810-433a-9d37-5bc4aa610ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78c7890-4f4a-4a6c-8b9e-520bf23cf03a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25790f47-ed58-4b7a-9250-4c5cd9019ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20cc5ad-3d2a-4315-94d9-113263e62cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c7e033-8a5b-4a31-938c-23383633cf91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029d0590-7c86-4352-9712-e99056aacf8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19889743-3b32-461a-81bc-63f815b1abda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6c8b81-f235-4966-b427-166904c2c864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b66dcd1-e527-4951-b13a-c4147b7073f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8939bb71-f17c-4ed3-8a78-2c54f6adaa70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5de4332-32f6-45e8-990c-6b75cdc064f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4784a203-f196-4bee-b2e1-7d16cf4963e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1918695-89dd-43e6-bdb2-aebd746d3453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a707c3a-453f-4287-9831-8e852ef7a1ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a852be07-969c-4363-b388-4579a5eec403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1e363a-c2cf-4c22-a1fd-4238a41588b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ccc79e-a435-4548-870b-3d47d9c8f51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd6951a-a29a-42e5-abce-43a1af9d68c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a350a6-95ba-406e-a57c-22063b2d6188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.93.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109434aa-b706-4334-8690-aef4de0eae6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.228.72.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260d7eb0-906a-499e-83f2-825f137b2af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.241.208.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045d1fe7-f53c-4067-8740-471c514c2c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65e3eff-cd41-4774-9288-f0308735852c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e70d879-24ad-469f-9be1-a5891b937d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59f131d-2a32-4ed1-9545-6a016de27173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f94bb5-6540-4283-a359-5c07235d3a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a11c19a-cda3-4e1e-838d-93b1dbdf4bd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932c81c2-7e89-4f2d-984b-140ae6a5ac13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ede8c5-9006-478b-84bf-8fffaea07189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb58ddf8-e2ba-4f1a-84b7-850b32d8a38d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc69210-8524-4bee-8860-35a3af02058d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d720fe-91ea-4cb8-8ffd-2923efd72841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6432c25d-1ec8-4f54-819b-a7fbdb87e665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a85329-dfd8-49e7-a7b6-d7adf8dcf7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48be0f4b-1038-4659-a30f-c96d23201413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c66e77-d95a-4d37-a874-bbdef222f75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70dc4ff8-82e6-4dae-9200-d597931d990e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1ef76d-0eed-49b1-b133-c2aec0e9b7fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29a557e-a911-4cd9-a3f3-d31168a53e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f167b66-4e9b-4b9e-bb5b-8f960c81c8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fe5dc9-ee43-4ea4-bd01-11724547f8b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a057dadd-3670-43df-adf8-3a112ddcbb1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fad37ec-73d3-45b4-8087-20c65d395651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0dc1ee3-2e11-4bcc-a5df-dd6fc0e32ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e091f0-3093-4878-95fe-b4ec81c32ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36571563-e34c-4115-b997-fabecd5b9ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a91a895-fb1b-49f1-872e-0837ce869702", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6978c67-0e0f-4371-8c1f-8868b8243805", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25381a48-21d5-40e7-b542-57a8e2f589da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d676f4-583d-4c45-b4be-89fd64030a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0873c8f-8772-48bd-95f1-0eb6978b7f25", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.11.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a40bde5-4219-4f9d-8a8d-8260559caf30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.242.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83717c9f-1c8f-4b73-b023-f78488c9e1bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05cfa586-362b-48b1-b959-2b8977985f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.245.182.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b2fc06-833d-430a-832e-d783bf2b5248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885dc8be-4fc4-43ce-a3b1-51db246db4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95e1377-9f2c-4b2e-9d2c-0438ab1023ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3cd08d1-7163-4b4f-a4b2-a765b4b24d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec9d2ee-2d56-4beb-ad56-8f946a55a996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.28.37.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efd3d7f-f387-4d64-98f7-e3bc9c2ea85f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.30.144.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf234ae-c8d5-4d66-b8fe-50c66226b1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.44.62.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5257a9fe-084e-4a56-9ede-11d8a767a7a5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.5.252.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11db26a-df90-463e-b9a5-ec7239d2eb1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.65.107.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c867f1-4895-4812-a0b2-80a526f1c6c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.41.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790a9133-7346-4039-a627-a673ead64bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.70.41.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27329047-258c-4ce9-94c1-009620806a56", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.81.145.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78bb031d-2dd9-478a-8743-02fc2607d3eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.89.157.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6d01da-a378-4b90-b0d4-3912d8814d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.91.69.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577a09aa-4c5f-4d5d-bb9c-fdee37ff74ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae509b5-482b-4151-9701-faac8e3b4ee2", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. CVEs: CVE-2002-1149. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd39bb98-087a-4a26-8f77-385df46cc7f1", "relationship_type": "indicates", "source_ref": "indicator--9ae509b5-482b-4151-9701-faac8e3b4ee2", "target_ref": "vulnerability--b3a43a8c-4055-47cd-b848-be1382d8bafb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c99d2f-1877-4abb-91f0-110a6c53f45b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f31a8af-0851-4b08-8705-2d4b0041529e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe0bdc2-db52-4b1c-a048-f852cf3bda15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc10abea-3e58-4346-a8fd-ac85845c6983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.94.111.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ace237-5e16-41c3-bf30-1cce7eb265ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.1.175.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8802208-77a4-439c-8e6e-e6dc9ca4b1c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.108.171.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace722e2-8071-431e-b80b-248d50c4228b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.115.53.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fdaf78b-756d-40bb-8212-9389332501d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.116.1.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813470dc-7d9e-4832-ae88-657c499c5b98", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.116.169.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ba1fdd-b0c9-4db9-9ad4-98bf5d8e382e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.121.246.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf65dfa-a888-4fde-bc62-49db55e46ceb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.132.86.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9519187e-80d9-4c71-adc2-ca749d869ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.147.162.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d67663-5f8e-4aaf-9e64-9fdf742e4f82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.17.217.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d4adec-679d-4b6f-8999-86fef02be052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44f7dc5-9b82-4786-8dc0-035537664e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eba108a-2004-4ab8-93d2-1674d8e74ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a07b64ae-4e7c-4272-9fc6-2f70b9bfe181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61dcb61b-1cff-47fe-a19a-607b14f1db26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22cf6309-559c-4903-8a9a-e9a189075916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18971d9a-5c88-4e7f-a99b-aaba67d06dfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030357ac-590f-4ac5-ba02-d11e183bd3ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf82054c-b314-4ff9-a862-e05f78cb5e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea9679c0-b7ea-4d43-a0f1-48180db49ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5501d2-f1e1-4d3f-8823-1788925d029c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0794061-e9bd-4dbd-8c43-474c37703bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf1dfb8-9f73-4b2a-99b1-810d634b0f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf4a96f-81e0-499a-9237-a706f647d543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7465dc10-be41-494d-b450-e2d41c48e6bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b815a7-28b4-4af0-a79c-c954214203c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a01dc4-be78-46f6-bcd4-dd911829325d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed937e8-f8a9-4761-98ed-e61be8dbf27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1edb956-f7bc-4fa6-942e-a2558d677db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e56eb7-0559-4dbc-8cc1-f8af22f959d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51408a29-e315-4088-a687-dac28b46e032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091fdeb2-46af-48c8-907e-c556d16867f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c279b668-bc66-41ae-9b1a-9ad94f4ac310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9915f651-f1bc-4e50-8245-1a9672c47665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0a7a2b-1305-48d4-b65b-d499448c98ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8661feb7-ffee-4dec-a916-7fa1b43d1d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8eda109-7e6c-48e9-8743-d7d3a6a5562d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a53aa8-963a-46e8-8c35-cbe55ca77160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77522347-d3a9-4008-8a68-81e1dc4b96da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2433a9-d81d-4aef-b960-cce7a04d6014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c73b3c-c97b-4aac-afc9-3592c910ce66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d83d1a7-87ef-4ae9-9e86-06e5182ee419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6023a21c-3d90-4ec8-919e-029016ca790c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd651a8c-95eb-4310-9502-ef8f280e7c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d774b11-cd11-44dc-b5da-cde4408f4b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9ebf42-afe8-42f1-8d14-35416e011f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.14.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b4ac44-9011-4959-aab8-e25e829b7a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f259c4e6-2c4c-41d7-8df9-c9fb0d39c0f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817f08c3-1390-4d28-97bb-6751cc6cdcc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a77441-9e4f-4b18-9508-34e1d72ed453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df21331-e7f2-49aa-b55a-e18618960d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a3e6f0-cf46-481e-bb18-8af5c2d4e768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1097a91-2093-4d8b-a4a5-f0d179d10fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f97c45c-08e2-4c43-b83e-5cfaeac46273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6d3756-5847-4df2-904d-2e02cee5cbc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796aab86-1ba6-4a22-8f71-e9ca4a927bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acae0f3-7319-4eea-8f4f-83288e61126b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ba6bd5-9261-4e93-a9d6-8f56036ac06c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3516e66-47f0-418b-94de-757fabd25685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45c0e4c-d99f-4140-ae53-8d650818610c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e357b7c-fa2a-4a8a-870c-f57212734592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c94317-faf2-46fd-bc8d-3b0e437053f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa86605e-8f4c-42a4-95d7-499e30b43ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f65b580-1049-476a-8864-a5bd167ff071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b70a9e6-ac5d-4503-983a-0091f5c703e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691284cf-ab0e-4717-8bf8-6790933bf51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67164a53-aadb-40d4-ae47-09fdef160198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5cb5df0-0274-4cb4-b90f-fe346429b830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa04314f-02f5-48da-b137-0f40124197b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d971489-78de-450a-b62e-249681b0f6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995ca612-1d3e-4a5e-86b1-62b5faa1a0c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35517104-ac65-43a6-beca-68d02ac3c3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0c0d9c-24b7-4036-9758-6ac64ef58398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cabf244-23e6-461d-a2f5-08a8c8cf02fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fa135e-3a83-4d98-9b82-1fbd70133499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f43300-2573-4615-98ea-b5732e53495a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6b75c5-a44a-41f5-9973-d4bf460e10f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6d3f17-948d-47d4-9249-c24cc5208f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c029ed-f14d-403c-aacb-806ba671eb56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f88f51f-8fac-4d6f-85e0-8fbe43a5a54c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde708dc-6b1c-46a7-98d7-afd02451d5c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dfa69d6-528f-4287-801b-ca4dcf42be0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.39.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d652def-32d0-47f0-9ac1-3edd371e4da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c830506f-1f7f-4ef4-8a2a-764c0295bbd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23817d8-ebf5-4985-bc02-b2f37e068cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--387d938f-d64e-4099-b5f5-327966dc9796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d290566-9988-410e-9c91-dc64aced96e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e30fe02-eb97-41b2-82b1-0e07fc8b976a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109118b9-3bb6-45b0-8330-5b3204c11aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed82d502-f480-401e-b404-2fd0b823e004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43082bc7-e6f4-430d-8f31-f2c69bdb3a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d92866-9e5a-44e6-8acf-5ef718cc5e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5e853e-c27b-4adb-b469-cf138f44c60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b372f1fd-153b-4bb4-b2e6-25b67f090029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ddc219c-9cc1-4bc0-9851-6ba204598cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9b7026-7046-4a10-aad8-e5d6317b19b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33607715-6007-46ad-a0ab-5a7be22ed125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f2f9d6-71a4-4548-b670-ea0f216bbab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28a38c1-7a69-4a49-8bdc-a660d3c3cae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4d4af9-8a46-4ae8-94ed-d0e1b72fd032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42248e1e-bf12-45b2-9976-fc520f0354b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e4ca0a-1c67-4983-a0be-8b3f24bf97c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f82a2c9-5d3c-4b60-bda5-02dc022dffe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad8c36b-3e21-4939-8303-223ea2f7217a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a895f37f-dd33-44ac-95df-112f4f5b6b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69968580-1855-4ec5-a984-8b222ce74f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061047f2-697f-410f-8d34-82344ebdb872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36c4750-c21c-4b3d-9adf-48ac8e6dbe88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e26652d-ffa9-4cfc-a906-858794cec246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.47.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f31e3bd-cf5e-43c0-a01f-89525b3dab91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae22f2a-3354-4833-b377-3f766f624d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e11142-825f-44f1-90ed-e11213ad90d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03add598-d3f4-432e-9a68-0f6abef0482e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e3978e-ce8d-4911-b0be-505bee78733c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f8cd83-5b23-4b21-9f39-9a4311374bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8196dfc7-bebb-447d-b262-99129a8a82c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf97d60-2974-4e77-afff-8412a03f049a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a01e62-11db-45d2-baf1-d5810d4b2541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798030cf-6bc5-43cd-ac7f-a4284d876aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3262abb-81c7-4920-8762-20409b9a03a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61fc11a8-8f10-4c5e-a436-9ce299584980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57255c00-c14d-4b3e-ad8a-e6f011af5786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813dba59-eec7-4859-a0cc-109c0c0776a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3cb76f-d0c6-405d-8830-08298e3803de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc712ee-3621-415b-89d0-e7d4d6619623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865a5f72-1d89-40a7-8d21-bb5c716b5221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c739f0-d97a-49b9-ab76-e3e9b76d850e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d122aaa7-ee9b-44a2-8451-fc1e07a91d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75e27fc-a582-4a9a-b32b-d2c9ae3ed51b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc7c65c-6d6a-46e5-874d-07aa21c0f76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747e44f5-c49a-4fd5-99a0-4b0c7a478a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d9529a7-29fd-4da7-9004-c96f694ecc18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a762d245-38ed-4afe-aa02-9fd9a7dbac95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86bc12a5-31c4-45ec-9cc8-78ffd1da62f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a096e80b-4bb9-4870-a754-5238fe5bd9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1450cece-accb-4e69-a4b0-071a46fb0db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5307019d-15f6-40ce-ae39-0b6cb21ca945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e57db1e-5a43-4f48-88e6-219b45be18bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f572e1-39f8-4990-84fe-23dcec2a3252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150f65f1-9e6c-49c5-aea3-74133daa3349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b38693b-76f7-4f8e-b1f8-6fb2198a81c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.179.59.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee41667d-adb4-4221-b0e1-72f0887f52b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.194.83.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8d9809-398e-49d3-89f7-31c66dd63b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.204.20.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca321942-fd8c-4c4b-971e-c91d45c8cd3c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.208.222.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756b9938-267b-44b7-a072-7606bda293ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.213.207.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a059ba63-103d-47ac-9326-c1309829a583", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.22.17.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a21f99f-77ec-4773-99ea-2cb7acc1ca79", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.22.19.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829547c9-1bd4-45db-9e63-fc64c8465915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.233.184.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463f2790-7b73-4ac7-915d-4136ef387a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.236.241.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5977eff2-fad2-4f68-823a-438899b9b3f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.244.227.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92d014f-3b44-4785-bcba-a09c9e6eec9a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.46.16.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21e09f4-52c4-43a4-bf4f-8db20273c049", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.56.11.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b9ce40-249d-495f-b048-2fe50cd17a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.56.59.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ffddd5-c2e6-4950-90dc-99006012bc6a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.57.50.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe954bd8-108a-4240-9853-e30f608740d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6d9774-f582-43ee-b1ed-ec9696ca4f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f32fdd-1b3a-41f1-b069-b91f858f1656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee15bc0-2285-4488-967c-7bbbafa7c083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff905356-9ac4-4413-bceb-290df1e3f1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bff1722-dedc-4b9a-8a9d-6f325690540a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32c8728-6c1b-481c-861b-91231e3b0c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5a9eb1-5215-4f9f-952c-79f1fd2f0c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2876dc3-a697-4541-a63d-078f7b3c8244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da37ed49-b1ef-49bc-a523-3fc7a2b1e09c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2e8c22-c06e-4eeb-937f-99e8688a68b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b8dcba-f9bc-482b-b696-b1bd1b08b166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c839d84-0801-4775-bfea-80aa6f757927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5516302-2a7a-463a-a59e-019c36c97e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e612833-158d-4589-90fc-17e4d8b782e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79723b8c-7182-4eb1-a9cc-23b52164223e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785a4492-8986-43f7-bc08-43ae90f1013f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25448c3-4efa-4d82-a6a7-3d00ff368a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78266c67-6e84-475b-a654-682eef186ca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb69505c-0557-4b6d-84ce-60bd319e4b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582b30f4-768a-4fda-ab8a-573d931b7646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef975db8-637b-4af3-acc5-11e2f88a4f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0363c632-7deb-4f88-b530-fff08f1da497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290b70a3-b1e6-45a7-b164-4f3c72415ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe93799d-1a6c-4465-8c5f-c37907898568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8004aeab-34e3-4604-a4b9-12edff8d00fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0122e4-3e05-4e54-b166-73727a2dd0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93862034-7219-44cc-8732-b6234f045746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef61aa2-2551-4db2-aee2-ab7548a0abfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b7ff72-2465-4af1-9205-6c116b2d70a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f56f8a-2fa4-4ade-8246-768a433edd09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed833562-2346-46f9-b76b-0820480eb080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3667dc0-594c-4faf-ac24-6649287b3e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.120.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86782012-1d1f-4962-8f4d-04f76f9bd374", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.72.139.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6081e279-dfd8-4c1e-bf50-301a4a79cd11", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.90.6.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9226511-0416-4763-9394-f8485c34acc5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.96.151.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eefae943-91d2-4f2e-9dec-d9a17ba66334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.109.163.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9cde042-db18-4c26-9b59-813255263878", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.110.238.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fdde670-504d-4496-bbcc-83f5587af889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.111.157.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93566a67-f409-403a-a958-5df179731c06", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1b0340-4005-459f-a322-2e9858b955cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.136.132.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa55aacf-f5cb-431d-ac8f-e05456c014aa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.140.176.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5904dc9-3dc7-4767-a662-09f449f311e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.157.156.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585d4500-760c-497f-96b1-4d33f701265a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.17.224.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0592e5-56d4-46be-a65e-a18febe8aa23", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.190.78.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce8f240-6c66-448e-9562-0c3884bdfb06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.2.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb451cfb-4dec-45fb-9f8a-7ed427e9f416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.2.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85fb46cd-73e4-4798-afb1-e1b350be70dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.228.251.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e5d8db-2b40-4e91-951e-ff5205fc569e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.233.151.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd780b2e-6df6-4c8a-a48b-5bf2e3779571", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.244.109.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6b3b69-b4d8-4f4f-8f42-f68a30dbd3ba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.249.108.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1056e9-c70b-4dca-8538-49cb1735653f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.197.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38644faf-7168-4022-97e4-9aab4cc14dea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.36.66.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe43eb5-8eb1-4d18-8b4a-0c622de89446", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.4.5.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1d22d0-f6b1-474b-92d2-ed347685a944", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.61.113.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e517379b-2c8e-4b7f-9f0a-f718d2741343", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.0.178.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f87e58b-e834-40d0-9f28-1a99be39dd2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.125.46.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5024e1-d575-430f-b9e3-abfe5b9af147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.126.89.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa12921b-676b-4f93-a456-af4b37963377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.164.221.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fbe02d-82e2-4f53-add2-e158276380a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.40.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fefc022b-f11c-43cb-aafc-0463b6b7faa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.170.77.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3f4c41-dbfc-4090-8674-0e916467901b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.190.73.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd800ca6-0399-48bb-aba4-e1bdfd312312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.211.71.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31bd3a5-35c0-4cc0-a2f1-147e6e26360f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.213.202.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29ccd9a-c46b-4b73-bc63-3c419b4f2ef7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.213.202.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1bc182-bf33-4149-8a7d-007a71be85da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.230.188.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb1878f-9500-42f1-8465-da243816cd81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf8be68-33df-4050-b9d1-f0eb47361992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75f6023-d5f4-48e4-92ce-be1301a4efc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5c5733-b42b-4cad-ae2c-16499c77fe91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37140848-6699-4753-b16d-e7b6d9caa66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40e3324-4370-41a1-91b0-d361ad67d357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f22c32f-3618-40ab-bdf0-9055effca1f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e63647c-f9eb-4d92-97e1-003b2b98249e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.253.221.255']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57d32da-e5e3-4bef-b927-7f5cfd945f38", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.26.197.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d16d382-73a8-46a3-a21c-e45cb604aa03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.37.8.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bfd30d-abd8-493c-b6bb-93a912241164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282c8ecc-b446-4b9c-b88e-856056ab8b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.56.226.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13918cdc-506c-4bc6-bd59-d66ee39312ba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.70.61.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6ab51a-42bf-4e8e-9a97-b6c8dd113b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.75.80.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf73c3a-c723-482e-beb9-ae60cbfb521d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.130.101.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc9999f-0a5f-4392-8848-7002a6219b16", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.146.224.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae241c2-122a-4822-a738-e323e6786d3f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.158.51.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839f540d-d358-4871-83e1-979d39cda26f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.179.3.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f1efea-e859-404b-832b-5cf008239ae4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.189.229.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85f3931-8378-4f99-ab7b-87afd55d5ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.204.230.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69a4dae-a1f3-4765-a5e2-d20c092c41ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.217.206.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--effa69cf-dcd3-4d49-88a8-480a0b129b72", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.219.52.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d9fb95-0b77-4c89-ac78-197a8a976738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.224.11.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e74c64-235b-4584-b433-62e4995bdfa7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.33.65.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab81e13-a14a-419e-acba-90894ede0b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.50.195.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8e131a-b910-4b4d-a26e-51b25bf3f59d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.51.168.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e1e481-bc2f-441e-af24-a2e089e21149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.62.148.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127851a2-ddfd-4041-9c75-4bc4aa468f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.84.238.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5eecc96-2853-4e93-b68c-9ea6f09c7eac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.105.33.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88aa9196-4515-4b47-ac9a-32e0b27c1675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50e2ef2-bec2-4e23-957b-07e758627ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e38a2b3-7cb9-4b57-b9cf-bdf407528d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9aeadd-1ac0-4409-8871-66e7afd8f10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3782dec7-4162-4667-bffe-326cbf0baf69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d337cd1f-f53a-4e96-8e8a-c7512a9efd60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693747a0-362f-4c33-bfeb-a514c00dd510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2950bf0a-379e-4c38-ae88-5ada8e505af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27bce278-8ca0-4694-bd25-a34ec25eb905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05bed82-0fcc-4078-91d7-4a0a836d76e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca75eb55-7d19-481b-a32c-0d3d0c658d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa9da3e-1cf3-4b35-ae26-5378270aeacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a10d85eb-8f7a-4d0c-8e56-02814da1bae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ee4c1a-1bcd-45a1-872c-89f585d25d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d71d48e-a613-43bb-aa8b-f05dd8d90f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81911a9-4457-4c68-9121-c033c93c5c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f67f7515-1d55-4fa5-8fd3-e3830999cc8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e123b61-45f9-4312-a9f2-5c52b2fe55a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7882f85-27b3-41a1-9a89-935ece6ea2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e84b28b-ca9e-47d1-adf0-9074c6c76de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be80ce9-9e1d-43a5-866c-25c570c8336d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338ff113-5e7d-4d66-8026-6e33685a1233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723a653b-0aa4-4277-b206-014c8503a6f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8156654-03c0-45e7-b1d5-96553e42d2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5de30bd-cf51-489b-a3ca-07977df6b8b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198d0687-af73-465c-bb04-b2a5481ab837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724c6636-d0c7-4fab-8615-098dec71ec08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4909ca99-ce0f-464f-ac0f-33df4432acbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6f862b-a94e-41f6-a0e4-8790a1c1db7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23237ed5-5f38-4774-b8f6-c15f10745ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c24383-2b26-43be-a301-d85923e3cceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659049ed-5ee9-444b-a90f-c9c0ad1f3d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e978e97b-978c-4a9d-a2fa-d4d8161a512a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d442568-5cbe-4e3e-806e-a9e0217cf723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4bc622-e276-4226-8ab4-c8550dcc4aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912c2c6b-4b69-4331-baed-46a0d80d1c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.160.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6871aafa-8d4a-4e29-8a55-7189b663a860", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.112.222.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f013c7f5-0c1b-4aa2-b909-396fa2308f8c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.112.92.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74a341e-d521-4773-a6d9-71299bb6446c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.115.15.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125ffa8c-74e7-4048-b819-a7597452e303", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.120.250.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e16947-5750-48e8-9492-92db69ac0212", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.122.173.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798c8160-822c-47b9-9043-eed8c8a5d628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.13.162.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb648c1c-e613-437b-a32e-d096e4402195", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.14.141.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2f06f3-41c8-4131-ac90-2c243e5c1d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.143.117.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8bf1fd-3d7f-4d0c-ba38-db06d4ca5f59", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.143.191.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ec2fc3-8e89-44b1-9cb9-acf56e3fd500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.153.105.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e54d83f-3875-4fda-bc92-f7b041a2136a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.153.18.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b184ef6-ea76-4856-958f-16c135471fd9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.167.166.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261991e3-ca7b-4668-8950-26e9b45080fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.171.112.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ac77d6-13bf-40ae-be45-74eb6f46bcee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.180.164.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a88f53-62df-4c87-88b8-9a0bd5c0131a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.181.27.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438022ed-66ea-4815-b98f-9e4c9331d0a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.183.203.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e4e298-d59e-45d6-bd30-acd200b50dbf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.191.62.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76deaaec-dea2-4e6f-8b5f-1668396f8527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.211.249.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2831d3-6b81-4b66-9a51-754aabdd5da4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.221.50.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467b99d9-10d2-4a1f-b727-d5b0b8f352df", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.221.80.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ed735a-310f-4494-a21a-81611754ebd3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.227.183.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00aae0d-8641-4bd4-9a42-22da07030629", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.232.219.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b6d497-bf42-4aa1-8c99-efa8f8cecfee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.5.141.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a1a3d7-a6bc-46ef-8fe9-f8ddedfb8ea9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.5.41.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb67382e-8918-46cd-a734-2243a9f0e229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.52.72.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad59d23-795f-4b3b-938e-6ccd56eebc85", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.56.143.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3633d57a-dc8c-4af2-b62b-8e8f951e7005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.64.151.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac5d342-b679-4bff-a0c5-32c548c37018", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.94.213.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad3f74f-bca6-4f7c-ae3a-e1085a8b98f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cefca30-9ea5-43b5-8d9b-def0bf3a9f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357b1a72-6c74-4213-b19e-25158e5c4c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae7813b-f658-4bea-a914-63bed68905be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c058e2-9de8-437e-8842-3390f972c05c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f9d955-2f7c-4fb7-9365-6bd14666b79d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa09935e-d8b3-40f7-863c-aab92e1fc202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2fc21d-e033-426a-8f43-e2f474b9eff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4979b49b-805e-42eb-8be0-df89d022dd1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64791be-1b77-4c10-b73b-6916d89bfb41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd374c97-71ad-4a47-9d81-2780c6a74d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61971c44-0189-4947-a006-fb656821fe83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170dc00f-93e0-46fa-9115-aaa2b44ffb70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf57985-7b66-40b5-873e-5db4c4b6c83e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2adda6-de53-4b93-9a4f-3c1379af9076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d145470a-a5f2-45e4-8e10-a045635974e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c073f6f3-a69a-4a99-898a-37507c4fddaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae993de-1d16-43e9-b174-b1a46d67058b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2ed324-fd89-45b0-bccc-3b22a0fd931b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da79d12c-766c-4f5b-9bba-04aab42a17d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba17bd3-ae76-466c-ab1f-83c3dc9051e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8fd263a-2689-4b0b-8d06-119992167524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f23758-0665-4c18-97f6-0748662f3159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c4f5a8-bca5-422a-813f-d31ab11fa357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c179595-17f0-4058-a66c-a27f284e8a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23951d3-6ef6-493f-ab65-2532e7cd9db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004b8784-a69d-49d8-872c-9b65c8a2794c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6589cda-9ea8-4a83-859a-de03665aabc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a5d296-1f18-4b9b-bb15-f3b5cdc24f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d15cef-2663-4e84-ae2d-d0b6a43ad82d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95fdce6a-1fdd-4517-93ba-ebcd8d700bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c8b4ea-46a6-4a75-9f39-8226e9e0811a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13720424-90aa-454c-a80a-16a9f849c622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.149.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a47f23-0d30-4493-9416-7916ec75b085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f71e4d1-b20a-45a1-8785-463035e32c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8187f3c2-1816-4106-8a62-f850a24b73a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997ab689-bdea-43df-956f-13bdbc975b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afe6113-0d61-4c49-a0b5-3a1c0a1a0b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32ceb4c-0484-4da7-9ca3-35498f3514a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74dee308-4d8a-4c70-9fa7-6ddc61b0b1be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3995b5e8-07b2-4df5-9e54-eac98d7e8a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a95d15-3b31-439c-9e4a-a3caa1629cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860d5320-aad5-444a-a82c-0e69a1c4b1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37bbe36-9a68-4a7f-8551-88c6df0326f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53130bdc-afbb-412d-8c97-055c8e0d197f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e828802-ddd8-4141-b65b-e2873162aa65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--415b367b-ae7e-4651-8c9a-225668f207af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a099e6e7-419a-440f-9eeb-abdf5af21b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8428510-3847-42f0-9740-39070c6b45ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a906060-6f7b-4b6f-8fed-72a02aff0400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e736598-7b4e-4ddc-8856-099e9e8afc55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23df29e5-b182-4acd-a987-2bc758973e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4add5573-186b-4f15-a2dd-9b67f7773eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9461d66a-514a-4605-95f5-b9f8319afacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018f27c8-8fcb-449c-96e9-bec5c1bb66db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb880c90-acaa-4b37-8be1-d96f00e48570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8b23c7-65be-46fc-bced-2262678a0708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aeb11ac-3df8-430c-a62a-a4db4b4e096a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dcd1555-dafa-4788-b03c-0c3f029c9295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d501bc-d80e-42f6-bd49-5fccb8db4294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9381f7-f847-4444-b3c8-9407fae0daa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d77c67-5740-40ca-a6b2-f4dc03b4b555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b7ba65-55be-430a-af59-b53f17dbac3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa30b58-6db3-4af9-90ad-3d2a74baf347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408d5e35-2d1d-4b0a-bfc9-e2082ffd9eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01facca4-930a-4d80-a316-d65c8d81e0a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f55c18-6914-4443-aee4-63bf8760e739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d81077c-b9b4-45de-a082-0cfa95e1a5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561f958a-6862-47ad-9abf-66e17ed5c8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f192ddf-36b2-4c85-b0c4-91128264d836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6956985-5039-42d9-a42a-813521dc591e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25c06f5-1051-4513-aef0-ef8b506218ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2a3d60-dc27-41ef-aaa7-e097d94ec9a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75835cc6-372f-4320-bfc6-bb0c2ebf96fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.155.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f3ddc2-f288-4397-a58d-3bc1c9c9fd8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--111553c3-c165-40c0-b4c3-db698f35cc99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7313f38-ee94-4b67-a5c5-f8431060491f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbe4986-d4ff-4aba-a093-2e4aa686bfa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056cc718-2bba-4b6b-96d6-565136b8ac97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a88c16-cd24-4b92-831f-334c7924b291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2f29a5-4a7c-4a08-a15d-b6387e814759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d99352a-b7d0-4623-a9ac-26849984f6fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b2ca3c-b35d-4ec6-a2b2-8374f99d13fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539f71da-e530-40d0-b269-15c02bafd14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41d0103-5ac6-47e0-bfa4-3be367105e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278e864d-b9ee-4da3-9a11-e82638c3263c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a3c5d4-7ca4-4ed2-8af8-0295b7f0ef0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc5bf5a-d441-4efa-99c6-05298a3a2a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21bd1abc-1960-4b31-89b7-84424de8e84f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205af7ce-9ec4-416c-af33-37b6332b1f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845c36fb-8acf-4bad-88d8-21b8a88accaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6db264-2ba5-4f6d-8c5c-15ac949dc89b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c88733-1c7b-4e2e-b0ce-999240a55f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d265fa11-c7ef-4048-b77b-7d0141f7b56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e3efbd-c518-47c1-bb5f-b088f15c0abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39749ac4-68fd-4a5c-ae8c-1fac18ba7886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1188e478-a03e-49ed-8ae2-d4a278732832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b35e71-79be-4d97-a0cd-b500b922afd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f220f011-f1f8-438f-82de-73ea2d41df1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67f6a38-cc25-4d23-87d0-be76af180049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7667e96-5642-4ea9-878e-bf3121b1085f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c75411-8bf8-4354-ad8c-cecc0b9d0e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55335b29-b974-4224-a3f4-d2ad8fd5ac1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1431a40c-a5b4-4431-bdd0-ded0b1432a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0054bb-ff2d-4f89-a0fd-0bfe46615384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a483b7b2-32a1-41e0-9655-594a1358e940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--271ed4b3-b706-44f0-9e37-7715e3387338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba6e279-5cf1-4ea5-b743-7ffd89e83db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2b12d6-e519-4e4e-916b-b217abb6eee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7807ea6-c03a-45bd-a0d6-65b3248168d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.157.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5017469-9f8d-4f5b-9e4c-4813e06ed0e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5205fb9c-1fd4-4ab4-940e-0e29b4129c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9447535d-75a6-432b-9ca7-0a439d71fd49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc9003f-3033-4d79-89b6-99e2e9e18041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e037b30b-97ba-4b28-9426-df408b40fb96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396d4fb8-6596-43ff-b1e7-2335de4fb7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850ec679-9af2-42ff-abce-59abe6aefba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3557906b-a0ae-4487-b476-55e55e2e1b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051da828-5263-45f9-a1f0-0607f60d496c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f306fb6f-4b42-4a4e-a2d5-9158bc0b8b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc05a28a-805e-452d-9ef1-c708429523a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90451f06-1f25-4f45-a040-6f0a39e60655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d5dffe-c707-4d4f-baf6-7dd397037c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10716edd-7026-465e-be04-dfa1d1b9cb9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad86f33-65aa-43d0-927a-7a92e7662211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ac2bc2-eb28-452e-8113-4493e4cd250c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12dc9261-a04b-4c70-9a42-5a45c558861d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98d023e-c1bd-4d42-9249-108a863cdfd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7b304d-cb56-468f-a9a4-e13458208851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee45bb79-271c-42cf-a0ef-abaa5d90b5bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5311caf9-1069-4e78-b8f5-4a9e2dcf1a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995f6632-940e-44c7-b10c-23b872b27730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bd084f-bc37-4b0c-bdde-23581be6ed68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52b58a9-db90-43d3-bf43-daf102615da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18dd03fc-c09d-4621-ac03-6c668e43d663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e55f20-8fd0-4587-9551-7797b5d8b356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5464d03-e8b7-4538-bdfc-9b07c3d4fa5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f935d4a-c53f-4627-b1d3-496b4d779f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf9c213-7769-4fb1-9998-62a4640306db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f7d326-e81b-4a55-99d4-31e4353ce86e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d8dad7a-301c-4191-a8fd-39b8e57d50d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1807130d-153e-4b8d-ac85-0b3f3cf15b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5598fdd-72c6-42de-afc0-2abf5824bfea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d876e22-de43-4824-9b45-0ba4c9ab795a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89d1611-25d2-411d-8aaf-e04a50ced129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0148565c-932f-45de-9bee-4b0badf86d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd2a58c-dd4e-49f9-8718-b127deea5637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.159.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73f8c7e-8e1e-40f4-b2ce-795424a69a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298b2565-8156-46d1-9206-f1165366dd62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a535ce1d-84fa-4a00-9166-c99373222824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c869682-a227-45ec-b406-92d66c803684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc30e40f-ab79-405e-a9ba-5ce2d4dbfa83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1dcf89-dee8-460a-826c-2e5f0eb6a1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ce234f-bae2-49d3-bd75-3ec0ceab6dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bb3f80-2c22-4de7-887e-1bf5be90e0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b522f55-29ff-4be6-9694-965d9dc9270a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f77262-87a5-49c0-b97d-91f30ddd90a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec29626-5745-4932-bb6c-38510abc7df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f206bcf7-68af-4475-b37d-e0a4616f8dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba41f22-c270-4b50-9c82-4ca868a791bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4de6486-253e-4c73-898d-6f4d5f6e0f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38e869a-3c45-449c-adcf-19803ac7fabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89a3687-03da-43b4-a135-c69e9b822877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2515e5a7-e712-45c7-986f-bcc6c33c85f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61b4967-be82-46cb-86b0-6832a93f090d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf93cace-cfed-40b2-8f66-6a92c2e7638d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127202d6-4b6e-4bf2-8a2b-db3a94495bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8586e75-1aa6-4994-a2ec-12780f21606a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855cabdd-4806-4579-b243-a22669027083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455e517b-25b1-4ba2-a40e-c0e89917b9a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a25ede-f786-4610-93b9-49432d82fc4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cade21b-d729-473f-b66e-32e201be6d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6afda620-de3c-4f94-9417-71f63bce6ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8efaf41-1ee9-42ea-a866-785027840896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7fca20-0126-45d8-9771-e224715d66f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d90473-adf7-400c-b307-f5c863363fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0093b2-a9a9-4320-940b-7529bcf6062b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22b938a-9608-40e2-8793-c5dd46f8b476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fd769f-a27a-4e40-8e1e-cd4d4c7caf7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d62a6f8-cbe1-4f17-83d8-a8213b148bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.162.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7679f3a3-b404-4e0a-b475-99010454997c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3e519a-8413-40f3-88a1-88a86b822cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb02cf5-d7ff-4265-a8cf-9f323bb845f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d69b17b-526e-4387-80db-c3b869b17280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ba7b97-cefe-4774-95f8-c50b6c8cb09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a7812f-f3a7-4018-9bf6-06b41b357afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397a000b-10f1-44bb-9b80-6fbd6ecf9905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5eff047-e8b0-4797-a424-c93f0b95a8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec6cc35-8a9f-43d1-87b4-cfe5b056fa9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f3d61d-fb77-4c17-a2a5-a69e54f2af0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c1cb7e-238e-48be-839b-7ebb290dc11d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bbd59f-c321-4395-b385-67a2c6ba0bd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b01ba82-ec23-41b1-9a1c-ddbb9436b2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344b5a4a-face-4c22-bbbb-05fc2d3c12e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea7c5723-3cd8-4057-8dd1-60659fc57dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9e3203-37cb-4c21-bb20-9eaef3d6727a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7d34f9-c2e9-46e9-8355-b5a8da8a1c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3eae99-eccc-454e-a0d7-3cfb925f1691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a4ca89-add8-4492-8841-1f16d16bc283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972d000a-b55e-42b3-86d7-f2340676b657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc42617-e704-4d6b-bcfc-357e5b25ef3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc7daab-c362-4136-bbba-a1f736325129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d88a940-a8bf-4e98-97e4-4cc76f4bc40c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca52e65a-f936-457b-aa13-a9cd9c5dc91e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3fb823-ac72-49fe-9405-4d09f2d795bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee10383-72ca-4576-94b9-0de8ebd4d34a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde05a75-7232-4733-bffd-5ea5651511d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc00148-463a-4701-bf9d-f6c17179a81f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900c4ed8-cc5d-43d7-8749-b684edef07bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9659368c-0894-4673-b3db-dbccc06c64d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ca2bcc-3217-4f24-aad2-e8935960dec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3032e18f-2e62-4cfd-8cab-7b67fc7389ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dedef178-efe3-4e34-bf36-0e2ba1198b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4045e589-b84e-4a4e-a44b-ca3d42c8bef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e994d4c2-ce01-4958-a7b4-685b95a818e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.163.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2705ab73-815e-48f6-ab63-f9b19b398212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff984958-8cfd-43fb-8b5c-e38a1f345d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33b2776-fc65-4dce-8a1d-6902b7bf9ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec3be34-cfeb-4b05-aa9f-5c55c63cd93f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7520c7f0-f04a-4598-a3d8-f951ed0c9ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a941b3-3e81-472e-90d9-d79399720900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53fd56f1-5df3-4339-bdcc-33dd2e5a468f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0add9531-ec0d-4e85-9448-571f25e4aee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89541f6c-36a2-49a3-9e49-c44b7ed867a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3413bd0-e749-4571-b82e-16a397539894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ed6d09-48a0-4f3e-9369-947487e6bcdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c653ec9-3f1e-4afb-8279-91b5cb15f254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e996970c-2d5e-43f7-b32c-de5f33f7f4e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa7dd01-3487-440c-ace9-66c6189114ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371cdb3c-2fcb-4538-8446-1f2929b8f9e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98cdd84-cff3-4878-b19f-3967fed2cf9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e3fca76-3ec3-463e-a355-cf17bbd5112d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa3b280-4229-47ce-8494-acd270871b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29b3496-1f81-4100-9d81-02747552036b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b0f416-f152-4117-9862-9d6f5ade2651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c46fef7-9695-42f5-8b41-5c8aa89812d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab931a5-0155-4b07-9f83-81474b591816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340fb372-2e94-430e-9051-417e53dbe7b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e768223-09d6-4464-a108-3af05951a7e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04388393-e4d0-4f86-baee-3defdacaef7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c539cb-a8c4-4800-abfe-8c5c3e0b9b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeee4733-9688-47b1-9687-7cb1d0a0bebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8adb506-e0d4-4375-a879-e1642f615c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb178e2-aabb-443a-9b8a-653ebebd6857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fe9f82-73f9-46d3-9b0e-f71f08749830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43551eb3-bb4b-4e76-9861-3c5fc1a17a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6491342a-d99f-47fd-8f06-cf0c9f239569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebae3862-5767-4c8f-be66-aeb39adbf762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a074d8ee-802f-46d6-803e-4e711955865d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f829d185-07ea-4287-82a2-bafcaaf748a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c7c1d5-f5c6-4d39-818e-7b9356b0d835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b842a845-00ec-4b3c-b2ce-53611a3025ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de71b6f-e9d9-408b-9898-a69c1d882103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ed64cb-aede-45a9-8e01-208e8a632da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.170.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e28f11-f975-4d38-84a7-10a402061dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15461d8-71f8-4320-80d5-4c9c570719fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e846e458-3f91-4ced-b28b-3e761577b902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05590c5f-6393-465f-83b2-f7845373165c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4f57e1-3c96-41be-b81c-2b1278da70cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28259927-09e7-4347-aad3-c8cb3b41f74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac0d191-3667-4fd1-b50a-58e92fcef4c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11f9261-2a05-4d88-9e70-e46167d02c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9319623-4c1d-4a21-b0c0-996407c02e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692071ae-ab3c-4a9f-9eee-4d591b7aab56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8a71b0-285d-42b1-a721-05257002f0d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20581193-1943-4ee1-82c6-6e1a61d60e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b502b74-90b8-479e-ab06-9aa5884c76d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c797187-0fc7-4b20-9944-b55bf22953d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34deb946-732c-49ac-8815-7a1d7d5b8c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9fcf31-a003-491b-a1d7-13ff64c5163a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8318739-8d67-4989-93ab-59dc7e5792d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454a2865-9aac-4491-bdf8-510af604898b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01aaa019-776b-4051-9c0d-7481cbcad863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57656ef-6d19-431d-8930-1627e713c870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c82e01b-00fb-4106-a581-16e782ed0c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d5681a-5eb3-4e0d-a887-ca5f413e26ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f95893-a0de-4703-9097-090cce333780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e333a106-3efd-4aaf-aa33-61d1a1594387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd779130-da98-4001-9d10-0938b804730d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109f861d-280b-4f02-b0bb-5ab68b8b8bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cfac5ea-0a20-4246-b361-128de366628e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63423e77-dbf6-48f2-a4d6-1d846b211de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1068d5f4-a05d-4176-9fe0-1b83ea527765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82fc724a-6012-4602-a2b1-034f759e43a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275a1fc3-858b-4f88-bb1e-0d03939d3fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5d0d7d-4aa2-485e-9b73-451989fda326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe05607c-c35a-48f8-9d36-a6a97016cf84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba28b0a6-5563-424f-997e-13674942af60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f8e612-c5aa-4160-9a1f-199af4bf15be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.174.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2b5efd-c653-420c-b6b3-b362023268a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a04dc2f1-4750-4253-b1a6-5d786a8d553e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a45ab1-faa6-461e-8c6c-a38cecaa3738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b456f235-9dbb-4d86-aa21-8f4aca8aa2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f139f02b-c85f-443f-aef0-0dd02344249b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06b9de9-6b5c-416a-9241-76ec99b1aad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f26f7202-14ec-4815-9539-07bd4d3ec92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156e4783-0dc9-4e24-bdbd-53466d846e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f38499-1d03-4b08-afe8-81ec39cbc6c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97579d77-2305-413d-9551-7ae0188ff63d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ed889a-4334-4d98-bb28-ffa064df7f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41857de6-a19a-4cf5-b084-04e1abd15557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e42ba8-e7c5-40e6-a331-c927abd791ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--758001f2-e9ba-4714-becb-aa8a49fc2620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672360e6-ab43-4fc2-9d78-f63ffd707f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e310ca6-e44d-4557-aa28-dcffe57be826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c86ec1-2de4-4507-91f8-695d2c72a266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64993d7-59d4-4e2b-ad03-0d71d704fa73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ca2d12-82b5-4a1b-acaa-568f80088284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261e7add-57c5-4423-aa43-d7e4bbd92b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c351fb-9eab-4745-a4c7-661b593eade2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ef4cdf-5008-4a7e-b3e9-5c1d8801c6ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0677e50a-156a-485d-8f69-be9dc6c46880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a0487f-c5e7-49e2-81eb-ac3a026a055a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25be5c02-1b10-474e-9fd1-2415f97f10fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69248e2b-f0a9-4018-9aab-1e4e284fb918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8bbc8a-a85a-4e1d-945c-a01fd7a565c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b60779-1b7c-4205-93a2-de1b70731500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.179.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0697c26b-ea2c-4cf6-ae8f-663f4eaf7124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ceb4a2b-6695-45be-aa27-cd0b8f6e8dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a017e6-71af-48d1-ba20-912d59ac35de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e94680-a31e-4d2f-86b2-c74006700e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded41125-ac7b-4b03-acc2-3b22f139b0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787920c9-899d-473f-8d18-57d0ecb8bb77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99dc861b-f19e-4ce4-ac50-460e4a30fe4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a06fdcd-d30d-4745-bded-155fa83fd285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c6c881-e1e9-4639-ad4a-4e9c3241ba66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62fb5082-2cf6-4d92-934e-2b23a2dc17cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49819e41-da2e-4f9b-80d7-f531f371cdcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1392e6d4-d4f1-43a4-a3c1-218a4cb611d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8d7715-e8cc-4467-8879-86dc00041126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a2a4ff-c53f-4ae0-a7d4-d48240aa53d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5814aa6d-52fb-4012-ad9f-95b522b9d829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6789c6ae-6f97-4773-aa2e-8323da9298d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9443d8a-e170-4d40-9145-fd4fa26c4c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534f79ad-5226-4739-b46f-a2ee83fdeebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07173078-35d9-467f-9b29-010927775c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34cd2fce-a7cd-4683-b9a4-1b79fde800a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9004bd6b-2c81-48ae-8414-f3779998d43d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53078ab-9c48-4c5e-a985-c1faca0d56a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ee36e3-ce20-415a-adb2-3467ff905dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27cef85b-9eb5-46be-894e-5058ba448281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112fa203-dbb0-4187-b327-de7c4b8b1e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c8a1f3-0ebc-447e-a831-4afe0c09e549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f9ae61-14f9-48dd-b4c9-c39d5ffbdf19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f523d96-8af0-4090-9272-ea94c521b6a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad15444-43c9-4ee6-b411-c157d0889900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.102.187.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a041d3-e3cc-4941-884f-84eb67d59c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2002-1149. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.237.255.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02f81aaa-0559-4ba1-8a25-54c4104c7de5", "relationship_type": "indicates", "source_ref": "indicator--f1a041d3-e3cc-4941-884f-84eb67d59c11", "target_ref": "vulnerability--b3a43a8c-4055-47cd-b848-be1382d8bafb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19374f4e-5f52-465e-a87e-63331efdaad0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.37.155.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d296d69d-b1e7-4a07-9276-68916d6a2b82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.54.248.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0350d368-901f-47fa-b9b2-4276dbc70157", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.54.5.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dbc9244-b60e-4ab4-a032-09b6a0bbad96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.96.110.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d76ab1b-4f0e-4c41-8e37-de7e3f5c2bd8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.219.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9cd17e-aaad-4786-b662-b6ea48e3e232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.121.122.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec07242-d429-4b1a-8d2e-04e4d6264518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.129.133.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068be53c-277b-4b46-8e76-4f4ac6d00bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.129.234.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d668f3-64d5-4af4-bbcf-915dbd01bb5d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.140.185.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4149cbc3-f1f0-4cff-85dd-8648ec2ededc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.28.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353c1ed4-df7b-4c01-a0f2-f11228a7af3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb3031d-14ad-4e64-aee1-3d1a641d506a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aee8fcd-0a3f-4e26-858f-afe2a6f42b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.88.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85ca7a3-cead-4ef8-b54a-4ecde7f895f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.88.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541dffb4-f4c0-48e5-b9a8-fce3cca74aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.88.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f3d2ac-bd70-4b94-9ef5-2f18f6ba16f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.88.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e61d32a-dd51-4db4-9d9b-f1e149557d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da4f3a6-d555-4fe3-b1a3-f54d2804cd00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c835e4-5c66-42fa-a1e6-16096b6d1a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba97597-8449-4bee-b2bc-690abd256146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e02aec6-92ef-4462-adcc-373fc94c562e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86876ea8-24ff-4f5b-a2cb-0eefcd77cf43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c9478a-837e-4e60-846e-99ed939d0f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.159.99.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e7a48a-676d-4a17-b56d-17a802154d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.160.0.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd32c343-a4fb-42d3-bd98-32284987261c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.162.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9b7616-590e-4236-816b-897407960dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.162.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c641d2f-6bda-4f2f-9d9a-9f1e4857b767", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.244.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c84abf-b633-4839-8ffd-b0492faccb6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.165.113.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040087b3-3368-4c84-96a9-d192bae266db", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.180.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c30a653-4fea-481f-b08b-8d90256870d6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.197.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b630d17a-8bea-4659-8f89-d268bda34779", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.202.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18dfa33-2ba3-4b71-b88d-56eb2d247d42", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.244.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce52056-0531-4fe2-9604-ec0b85d3fcb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.249.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46a0abd-0218-43e7-bb6a-b611b33c6b8c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a97e0b-8d67-4e74-a14a-431b457b0f6a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f50ad7f1-7b64-4261-ba68-0f6de3737644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.194.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333f9368-c1c5-47e4-9dad-8590cfebfeae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.179.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f085b36-14fa-484e-9992-3add553b6202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db67a760-df7a-42a8-bcb3-385b985f06d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f893fc91-c77d-4b81-b4f4-2aadd289635c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2195329-ab52-4794-9d21-60d05f279cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c51cc3-01cb-4e1b-a130-27cc8d0c7dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022780c5-d4a7-4486-8590-311ec71d7ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9542fc2e-c63e-4f1d-8304-a4476687e854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f146617e-102b-44db-bc4a-6787893df9f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.16.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3076630b-8379-4127-a178-f95002c43192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.36.136.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc2dd24-ac24-40f4-9b56-8f36a03c130d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.36.137.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688fa6d1-8e7e-456e-8f0f-686fa65ee74d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.36.53.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8032379-a5be-46e6-8054-bd4caa819836", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b1b9cf-4530-4f46-ae08-d9ce6f3bf309", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.46.221.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61669914-a216-42fc-ad45-3a2cdddd0b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.71.70.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6c8089-4a24-468d-bcef-48a84ce2679d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.131.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dbf9581-716c-4575-b0d2-4f6a16290d07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.95.10.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c363247d-adbe-44c5-a643-d83d7fd5b5a5", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.95.20.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c190bf73-1542-4ddc-929b-e3ba00efde5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ed9e96-bc9c-455d-84f0-164e4fa62c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9a6dcf-66bd-4451-aca0-ef65bdd42e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6605f1a-4aea-4731-b2eb-eb25067b471a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e99245-e01b-4be1-ae9e-df109ae8d4b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db10650f-1150-442b-b723-d52bdc716267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4b2e11-d5b7-404b-a65f-5819d74f171c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2360898-fc79-4349-9e51-1794b62be0c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a582c067-11bc-49b4-a116-3bd9bd355b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb96c033-aec3-4d88-9f5b-09cd19a14c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2996be8-b9b0-45bb-9938-43aecf33d39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ada615-688c-4c83-bfbc-147e3f5af844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0daf9387-13a4-40d4-81d0-58310c7d672e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79fc291-2349-4ed4-9cde-350f854fc1fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d44b95-52e1-43f8-9ec0-ee7d20b9dfc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c8281c-14b8-402f-a59f-5f67e3b2961b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27da79d6-83d5-4b50-b062-715aef0b16e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcbac19-b74a-4fb3-8a6b-3dd36c2ac24f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91b6a58-bfec-4f1a-88dd-3e94c147355b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ad1a4d-1e67-48ee-bf22-e1443deffb55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.43.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec56bf3-2858-43a4-a468-8551dd2681f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.143.1.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55cf923d-37ae-4319-81c1-dbdb2eb680f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--254f70a1-36d3-4a7c-bee9-147a4e786a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2462ef63-73b7-4514-9d20-2f11bf9e8f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d4daa8-b4b1-48fd-9f48-cfcef9bbd8dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73fdeb8-90b3-472f-9ea2-bc481d0644e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b3c735-6a02-49c0-b22f-ac46308de448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61da36f-9e97-4907-b093-1627742d482d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f73caaa-9e76-4b78-acf7-907ba9987950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2375c7b0-d6ad-4712-8f90-59959f7085ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28dac6d6-24fd-4cfc-8174-c2106a2890f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273fcd9d-7ff0-4a9e-915f-ee205f8235e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f8a6c8-7ce5-4f6f-9011-3f549f323488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906de05a-6d16-4a5b-a62c-afbf9bcc153c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf25baae-b7ee-4ddc-bcd4-0c69eec665d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908ecaad-a149-4e1c-ac84-16901ba2ff3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604b8880-3ec2-444f-bd81-79eff908a84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516c2394-c99b-402f-b8f1-0feca4b9f8fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5dbec2-f041-45aa-9037-9284e89074c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f903d7-a2fc-4c70-b0eb-b441607535d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816211ff-5518-45e4-b507-1ce69eb66c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b5447b-16ef-4e6d-867e-29dcb341ae1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d46da6-ab58-4dd3-82ce-0f3ef1d0cc25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c334a2e5-7605-420c-a8ab-dfbefadc7e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8fc571-f1e5-430f-90f2-181b8bce380f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d7628c-633b-4155-8601-99792b861546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b18973-42c3-4fc6-8aab-6b6f853131b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e7af6a-2e53-48cd-8ff8-6c0f3ad9bb04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd00430-d8c3-414f-be64-7befe1188b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64282a5f-b451-4f59-a7de-454a64bf9759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e519849e-50c6-4dd5-b490-918c5257f619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b656201-7e65-4c4d-b952-a2aeea50381a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25440780-d01d-45e0-a5e1-ff925a6ddf50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34b3d37-7338-4ffb-a5a4-40ae22870411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35fae7e-64ac-4d94-aee1-4c3c357259ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147b9df8-61e2-4f19-8458-ddfdb7a4a696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc41e9c-33cf-4139-8f40-e7f9848387e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87630f7-7861-4a28-a07a-956cb9981e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f770658-662c-4edc-8737-1d30e49ae635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf038aa2-86dc-494e-b701-ffda6995b23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd4c9e7-b098-4063-96a1-7f0311092b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7872162-af6c-42a2-9ee6-927b5f67695a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71cb2a80-8f4e-4e9d-9e89-5b2f516739b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a2a72b-c7ad-4080-a25b-dc3dcc8c778c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aebf9ab-3b6c-49bf-a3dc-fdb4c2bf0873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a37076-7291-4f47-8212-3b7f5ba7edab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e077c68d-64e3-4328-bd86-2b02cb5efd18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4c7b85-bce8-4940-8037-75926eb41aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d02d7e-05f0-4ce4-b2c9-4db793c60f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5851a0-a319-47d2-8926-09e66fae110d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab56f5d-5ec1-468d-a7a8-d4b559843c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02eab1aa-5a28-44fb-857a-2bf2966e538c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcff7d79-d4af-4736-96f5-7228b555c6a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d975907-8885-4720-b6b0-61916a009b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b398bf6-7deb-4c08-8d8f-71bc87439aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53e0016-b7fd-4303-9efd-adf78a46cfb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff80f7b6-b381-4622-9be2-147f7c7929db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1f7105-493d-4640-922d-1ac787e5fac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c914c7a-97ba-4e71-9e25-ab7cc33a7417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92339650-286b-4c08-8cb1-d5c966c8a4b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a737e9b0-fd1f-4346-beed-c15e0a74ac60", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d491f42c-55d3-4953-8e26-5eae8ec2f77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656720c1-9ddb-4999-9526-5689a3d815d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4514b9-cb97-4683-88bf-5330b14ef9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795c6936-a9f3-46db-bcb6-624a10f2f844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d7635a-9ed9-438e-9059-3e7c0269154e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07229302-ff29-4b75-be3e-2be15ba8624e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d297e58-eff7-4cf5-8cf0-a2b1f894857c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3cdec0c-cbc7-44de-851e-f3c89283ce48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3a5dc6-58bf-445f-a2d6-5f9515256925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e269ad1-7867-4627-837a-631f9cfd3e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c5f990-4f47-4260-a0ce-a5be2a80177a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b306fd1-f8ab-4e02-b8a2-5e751166fe00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837d9283-44b2-43a8-a17d-19d5560bed7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97161ca7-1c72-401d-81d5-334f14e71970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a16cc1-3241-4f59-bd64-e9a87709d622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e89a39-f2ef-418f-9f5b-8e51d4dda332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6814d60-e3b6-4ca8-bf09-665f109245f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0bd5271-966a-4035-9163-5bbf42fdf7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139e1fa4-1981-4d81-b0d0-e010d98577d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc308c1-1d76-4737-9011-90b8fdf8a0e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467e0f6f-b51a-4b58-925d-defa99f079c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ade2f55-6160-4293-8168-3475077f7800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--959292d3-ef53-45ae-ba2e-822a9c5ef39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.183.108.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39319c1-fc7e-4ca8-8521-546932d8b96e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.183.125.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0738e64e-749b-45fc-86b1-c437eafb89df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.202.11.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d6ca75-6b3e-454b-937f-e288f806ffee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.22.147.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a2e4be-b4f6-4de8-8235-55a1ceb911a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.233.48.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579d8a6e-9931-4dbb-8d2a-5188d1a2acaf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39cf4eef-be51-4483-86b0-958c128947fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.217.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98612d6-39b9-4131-bb45-73917b26c27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.217.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c35afd-e5c8-4df5-a777-b256ec00ea00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.26.115.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51929ee2-e19b-4cd7-a366-675fa2e87af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5304a2a-3310-43c9-bd54-a95074634be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fdc033-bc87-4164-b03d-cf49b1f7537a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6365975-ebb9-4b46-92d1-d3410fb3d064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fdab75-f21b-402e-89cb-923be0d182af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8aa53f3-b65c-4ac5-8ac0-52c40528367e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00424159-716b-4504-b6c8-269b822ade53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba82d826-faf4-4710-92d1-e88461a7bc63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff974cf-5650-4ee3-bb19-b1b9fb6da826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d1ba40-a7b4-489f-8479-2ed3934cfbac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1e847d-51ce-447f-a562-6a45f7af443c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a05097-e236-47fd-8c18-b690a1b7703a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898ea1c1-9b0a-4a0d-8f09-a93f1826649b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de34636-2f50-49e5-96bc-386e919ed4dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f0890f-fe3e-4e00-aaf6-7c41cc528cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ebd07ba-7679-4c96-a248-b77669432b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b08242-86c0-4327-b68f-fdd2408b9ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f164ab4-90fa-45b7-93f4-24fd9f8a0918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda6ba1e-6220-494a-8a97-1bccf4e72e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ade11f-d3d7-4fe9-8d8d-d5b321f6e043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8657f7-6f2a-46cf-b65b-4ace3c714117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf351f2-bc9d-4b3b-b7b7-4f07e75f8e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8575bb7-59e0-4d1d-a419-14ba058b7c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5884b9a4-f355-4983-9f63-8f8e7a7ee0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c417dde6-2b96-4d70-b6ee-c5758b0131a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4718cb-bca2-45ff-83b1-7b471ec6adca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ddd80b-2d19-4d59-84fc-7bf8109ca57e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc760457-5548-4d85-a303-6a12dfe7151d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0d8732-000d-4d6f-a836-093ee6099e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a41d5a6-3901-42dc-8b39-7f07d80ba125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00640a16-5f25-4fa3-864f-ec042041f193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36df56cd-ace6-485e-beab-ba6465b889f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98b2041-1356-4793-ac26-af29372452d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198d77e3-1ce6-4798-b0d8-35fa97c098f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167298b5-f269-469d-91c7-1442261e5b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1caa55fa-3f81-42fc-9b1a-59f9e0d8cb8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e20140-446a-43ee-a74e-f95331727844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d07dc3-02c8-490e-b404-19457c58d93e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d1a48a-62ef-4c17-b770-3d9e99a5a372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9883b2-8b4c-4ca7-aeb4-c572830dc591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be51589-b32b-4222-8ed7-b22490bf16da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe1b93f-b9bd-4807-85c2-6efdf5a32b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.236.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717307d7-e67d-430c-ae0b-e6ae6ba646ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3edc232e-a7b4-4759-a71a-e8edea76f728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a715f8-7783-4945-a211-3782364bc8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d9d988-684b-4c78-b7f4-6a0969aa3862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afdc89a9-320d-4d10-b259-a186da977ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f579218-3e6b-4e40-8f37-acd756be4638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a8a494-6a22-4c8a-b205-415112586981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688747d8-3ff7-4c4a-9f5f-fae5ef331807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a858a5a-96b8-4686-9e74-8091bc55036c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3af4f1c-71f3-4731-a312-8d0213aa51b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924977c1-e293-4739-8574-46849f8ae39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b08958b-f8cf-4a85-a114-0c1fcefc9ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52447a9b-daf5-438a-8e99-7a7c8a4c1185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17da7b89-3c94-4fe8-ad3d-a372027f7b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7fa53f-a880-466d-81a8-95d1082c2a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2fa3dd3-58c8-4676-81e1-5070badfef71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8ddec3-bb8b-4664-8ae4-55be021e88b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a4e1ab-6393-4404-ad24-3a9cd469017e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa70f06f-689b-4677-99ab-a7f485e46fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6974bc6d-15d8-49e4-962b-452bfd15fae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31bc316f-3e6c-49a6-b882-dbd2fa5f5193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c56e7137-c206-4423-bcfd-90c9c3e91ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6dcbfc-7dff-4b0f-b1b2-6bbd72b13cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f29435-0400-46ec-8d9e-e660e6bcce6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d46050a4-3bd5-49b5-8f13-431e6cdae70b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73d43e9-7454-4e5a-b102-7a356d55b82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c70ecd4-ccf6-44eb-b30d-2faf5ebf5c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010d446d-0cdb-49d5-b0cf-4a0d4d8adb8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c32dfa0-3733-4b68-82b3-6e1428998cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a5a085-91c3-4527-907c-0c2e78a676b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1132a0a1-ad10-4981-8177-b6ba9222c7af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24551275-e2f5-41e9-8527-d714b06ae908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb5fa403-964e-4bb8-aea6-856955646463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bceb4365-8d25-4b0a-ab65-d6a20afd1e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc123dbc-9ab3-4229-89b0-a10e868a54f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac244d5-d02c-43c8-aea5-02ebe520cd68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.237.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95aeb33-ef1f-4808-8c65-236ec6f07bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.225.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9328e74e-9b0c-413e-b881-8c50ea7219c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee0cd81-c371-4fe6-8f21-b2319caaefda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bee292e-4a1c-41e3-a97e-ab8aacbc6c8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9019c29b-b46f-4911-aff1-d1399443195a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d6fc17-2e9e-4e42-8b22-bf9574ec1380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0a4465-d526-4f4d-9b8f-0de8e66a3bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71016d4c-1c78-471b-b257-765965090156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3eca14-5941-42ac-b5f5-6fcd3e26391b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee15e545-93c1-4d85-96ca-91a8e1f12761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556f70dc-3f05-4689-9dab-3ee9591fa51f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c645e749-fccc-474f-8cdb-a435c4b7dd9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5ce0bf-92d2-44e3-8042-e1d67c69de25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b609b362-b8cf-44f2-810e-2ebc4251be2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108141f1-d765-4173-a446-a01246cbd335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1be8553-f261-4d7c-9d89-60305d7d2229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f58c21-fa8b-4d50-8dc2-defb5df54850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f157e90-ad21-4474-901d-323b26f765a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc4374a-c4f3-4593-b9c2-5113cd764d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cdd834-2a1f-4263-98f2-7c26daef595d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0763161d-360c-4c74-84e2-8ac57bb9b9a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150d4edc-fe15-4b27-8970-0608a2cc93d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab98901b-35bb-4afc-ae6e-e9410712b453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3755a3f-17b9-4db5-b531-3482bdb86f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68acd535-a19b-4c00-8027-6718368dd916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d64886-5e49-4f62-99c2-466eee463732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0548ae-6684-4456-a3d4-6ad050a185de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2511dae-a376-4455-afb5-488b0b648652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86172b9a-4af7-485b-9080-869d498b63a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.72.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c277f8cc-d287-47e1-b908-0c7a161554a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9809dc6e-6383-416e-a116-fb73e3824972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b42b04c-1dd2-49c3-8e24-23dfcf5866c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93c0e83-dd5e-4d8d-ba7e-ee6596bd6823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aafcc5f-c05d-4137-94e8-c80f21e22020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47319c19-884c-4f66-af78-e683acd2ea7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6399f1f-d1a6-451a-a883-fe5a6d4735f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6193252-2065-4084-927e-e2350aea2f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1933a2-bd35-48d2-9ae6-956082a996c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674808b2-ef5c-4ce9-94ed-a194298f8be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0678fccb-b557-4eb6-8fe9-1d83a0dbb2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1d8d88-a01f-4244-bc73-1c422f117e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6f555b-19b1-4e11-8c4e-8da09ce83a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c14ada-2be1-4814-a23b-1934a4b8b5b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de182c5-ccf4-4be1-ac01-c71edb0912d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02775879-5a4c-4912-90db-61c5224af158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293d38aa-3391-44f9-9c08-8489f42b7a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97676d7-7265-4ff1-86cf-a1ea50467b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a70500-c7bb-459c-9321-fcbba9d6c5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec58cb7-f2be-4dac-bbc1-9bc6acef5e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556b2f98-cf0c-45ca-93bd-2d4ef0d3bee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f23c5df-c64d-44e9-b69b-153351f780f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ff3219-b621-4919-b7f1-1d572d98edc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc353bd1-23f9-45b2-b3bc-5164cb18ed53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d228ea2-6229-45cc-8c49-13bf75ad15d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4706289e-24be-4f26-ab83-7c9591f698c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096c554f-ca63-40ee-8f15-938f225ee8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0188ff66-b7b1-4a07-90bd-67fc16b3a6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf94679-3360-491f-8142-25e1bbb01ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48fb8406-3a21-4087-9ec8-1ae251a91bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae74843-ce66-423a-9f54-4cd1e5602670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608cc898-b83e-4c46-a9d9-9f6b9aecdd49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc8d49e-5f08-49c0-9247-e1d78d0b5771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12fbf0ff-32c3-46aa-9cf4-e42e85fa04c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.73.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1946bbe-d8be-4ce6-958e-f540f1c26c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe73720-6e41-48f5-9df5-ce76fcc49f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c61d96b-bad8-4a51-a858-dca1d85aef32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0693c8b-9bc8-4136-b4e4-230278abb67c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4c671e-b016-43cd-9ec2-c30a4b68482a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e49ad318-755e-4c45-adc5-9116e4c5cfb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7018ff3f-dc61-4682-8ef1-3644071745f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc87d8e-1cdb-4f5b-9483-df276a96fd6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5cfc9f1-8c95-47cf-8477-adb124e6a388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ab6836-af2a-4112-8ce0-f45548a08eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5fc717a-be16-4088-8080-05812152e8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07262ee3-f5e4-4745-9768-953f4de5f43f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c4929f-2ee1-4eee-adb1-8d1545aa9462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa6ef59-5fb2-4695-9c13-c3da1d35c30d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5c1773-e5fa-457b-b4f2-ac6774ffa2d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaea9bb5-c00a-45d4-a556-a196bb28f770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3dbd5a-8e61-4d51-bf6a-eb00cfedf642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff7560a-e84d-40f5-b1a5-4fe48d15e92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e6aa95b-80fe-4570-b84e-f3caab676a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0217b007-749f-4226-820c-199b6f2cf285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6766c4eb-e675-4c5f-a13e-2356c24cecf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4324db73-9925-47e7-947f-e27160d7e972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b77f70-fba1-40aa-8014-cad1a7121855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc271cf-d827-49aa-95c4-e0e23b68488d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc6202b-a5ca-45d5-801d-8fc7279072b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d5b7899-b477-417d-a666-4beee25bdae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4da25d-9b56-452d-a8e5-b93c69e4d9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6cda26e-1721-4a0b-8b07-4a5cf291a04c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6a5c1e-4111-493b-8b96-871ddb75c427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7808db-7181-4f7d-a28f-15507b5d41b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3650ac61-fb50-4a95-ac4b-293c6197883a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8e2b5d-dcfe-4c73-bf3c-bb7def48aa44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b404dc08-186d-4501-93ff-48b2ef7a305d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b221ba7-a8d1-4f30-a7fd-2148572dee99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbb6a9e-373e-4f9e-bace-a3ed88b92171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e7252d-f514-4f64-b2e4-42989fc64a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4b0079-7f91-43d4-bada-640bc91ed2fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c86e38-fa6e-4116-bf46-c8db317171ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc90fa1-6f40-4c0f-ae3c-7925ecd5a0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.74.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c782c4bc-efc5-4bd2-9cc9-c15412c90d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba26a63-cc21-4995-86f6-448201aa3c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04765cd-24bd-4dcd-a322-7cc39f8b0a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8584c9f9-78dd-42b9-b9a9-f7d60d97a9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae48227-595c-455b-b210-c0b3d643a5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083db267-a7a8-47db-a8ab-54399caef5db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715b6075-8c62-4099-bc98-a0106685976f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e1cb39-86c9-44e8-b28c-46e5d9be4bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f846ae02-ce07-4ea6-9550-f076e1ad1620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c506eb9-e17b-46b7-ad52-7bcdfb53df08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40330068-8529-45c6-97d9-df0f5250b02e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e168d4d9-4c98-4ffc-97ef-1d536f487632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de449b75-f2e4-495e-a966-c66e8487c13b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0bca96-cb03-4bf3-82b5-7fd5a2c97d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1ac128-6021-49c8-9999-240317fe0bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be14f20-cec5-4202-8c53-603495004381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5cb220-6f42-4aa7-a776-b954b9135142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8f3281-c02d-4002-a07e-1249273994b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c0cb94-8d6e-4716-941b-0fac57081b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0351a557-73a3-45d0-9ecb-34e360303a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b725fc-6288-4485-b4b7-c180f121bb24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24219b1-0bee-4977-bc9f-8350dc941736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b059e85e-0a7a-4c77-85fa-d8c355e7b43f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29fec213-71ed-4e54-b853-0087d123c21b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85bbe7f-7cec-49d1-aa17-02d09018f6b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03734610-e21a-4746-8e9d-4aea4d6b19a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.75.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc0ebe5-61e4-4730-99c5-8f1fc97886c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.70.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503ad570-8742-4593-abea-e4789a8926e3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f931f306-a8b1-432d-85ed-40946f8eee1e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.56.116.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd868455-0cd3-4960-be2a-0edd012b8421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.70.122.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d3e0c6-6a1c-4acc-ab24-4954959fb28b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.233.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d94c97-a59a-4bd2-80b7-c2f96d729444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.126.31.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c242d4e-04de-4d35-a0c4-3383788d228b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021c4ef5-6390-49b7-b6bd-11d510a088db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe8f657-e00c-4b8d-81fb-05a2fc0bf8e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14881d05-2693-41f8-bea1-658a9c26baad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e276c99-f1a5-4374-823f-e6a9ea082375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b49dea-46c9-4218-a9a8-e0015c045899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38fb4720-752d-484a-9b31-3ee51d1b4000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04be1c91-dcae-41d3-a583-d8e19331f3a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6078155-939e-4d52-99e0-14cbba5265de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27bc8b03-ad4f-4ddc-91bc-b5b703f4a04f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34413b80-bdf2-42ad-bd61-ef60d99751a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084be486-4bea-4082-a0fc-f5a40e0e0f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbdfa8c-44e0-4a92-bb75-ee51f8753ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc63a358-4e7f-41aa-a7b5-ef8ccaa03a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a068d93-2b44-493e-b9db-179d5b61b3ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3220331e-c204-41c5-8705-a48ef40b9f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daae0e1d-2393-4668-a0a8-e8e52fca7600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31791f8-db33-4c7d-a84d-75b7813abd90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677719ec-f21f-4aa9-ba43-fd7cd1250549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269210a5-428e-4a2f-9053-23e5e28c95dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37b205c-7d7e-4966-96fd-fabff4953873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b7aec4-8204-4184-9812-575b3e6ded98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc49cacb-3ddf-4397-b848-581027dcdfb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019a9787-c921-4e95-903f-0853d6f28505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed7b5c3-11b5-407a-9d44-6ee9ded219f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb686ebf-de4d-409f-8d59-ced83b008664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125303f1-ef13-4820-a332-2f9224e41c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e66d390-648a-4131-aa1e-8b6a3ceabf57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b36a17-4f78-4c79-a6e2-57af98147fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7569929f-e37a-410b-8269-7df028401c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0774f6c4-4cb7-47cd-a5a9-f299ce8d6f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3c457e-ee99-4346-b814-d7e4fa21c06d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6e0045-2eab-4987-bea9-fe1b89448162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c86d4b-2df4-4f49-9b4d-98ef9d694b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93fd103-31d9-416b-a423-18ed214faf17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd530ed-2a6b-45b7-abd4-9f5259b5b3a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5de3e26-858f-480e-90b0-091fc78c4c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.146.134.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bba8859-b4db-4cf2-97b1-d91a3c50200d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8dc1bab-c81a-4622-88e2-0d5fcb8bd1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e132fc64-88b0-49fc-9273-fc8769f9b386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062e0b8d-8860-4e63-93dd-4a3d62e061df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c25835-ca12-4fa5-b3e9-fbc02e7d800f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9ab6d9-6f40-44de-808d-ae0e063c4450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7886e45-ec95-4639-b59a-5a7cca38c62f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b930ff11-5f4c-41a5-882d-47ced3e4f1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8f4870-2a34-437a-8c68-f5fd2fa30434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd6e8296-be7c-4731-aa23-1a191b17a4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea86467-2cc5-4d9d-8417-69d90e9eaeb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.49.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51396f0b-3590-4a84-9445-efbbedd16f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.49.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61af188d-7d51-40b7-824e-836d25d76c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4000d8c9-51b7-4e5d-b0d9-ddce3c9c6b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9ada51-b2c6-4c3c-8904-9fd022f9dc49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6af547-578b-4d01-9bae-a32e1a3da939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352bcc90-0463-4c0d-9b8d-ca89e33569ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df754b90-488b-4fd9-ba46-a2c5af4a1105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1de191-79dc-475e-9985-f804f1a3dfca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93be0fd1-e850-466c-a7a5-34f0cf77fcc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de505e6-4150-4880-81e7-d8247471f76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61342a31-307a-44a5-863e-056c166ff2f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1676c9-6f81-46ad-bd48-31a84cb2e8df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125958af-a016-4ebc-9386-360062c52a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8712d66f-e982-40ff-a868-0245f673186c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787e46c4-a253-42b4-af71-9f8ef4412c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef675bd-4ee5-431c-ba80-f0943c3e00e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62afc60-7210-4f33-b036-4f1e92db065a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0a22e4-b7c1-4655-9312-0fb028f673a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692a7308-85d4-4920-a272-1e50c2ac2295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a5f78b-0a35-47a5-bec0-5d32e2a72cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37fdb0b7-ae7e-4bb8-a8cc-45db6aae21c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b71e91-d4f7-4ce3-a4ac-50e44dd805c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71fb4e74-6a98-4a41-9a26-cc2b03c219d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf46a22-71aa-4435-9d4f-850e058c5ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b73e3f-7cac-4fe9-9161-4dd2083d1581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e54db9a-94c3-48a7-849f-52cf518e3518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93698e4f-cf0a-4660-bf29-ff3d93a67a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acdc11a1-6a62-4c07-bf27-0f4d15d66e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404139ac-c323-4079-a1ce-9ffc8dc1366d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ef3b92-4c11-45f0-a655-6d50f326ad91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f09bca-e50a-4e41-ab04-1a673301cf9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.16.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88c5371-e1df-4953-a15d-084f6f143b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c90343-cf66-4dae-87ad-37c449035542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec80c04-820d-4e6d-81f5-b2f3176865a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a362371-6878-4f5f-b229-1f9d392cfb6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4535d72d-6803-421e-aaa7-d4b1ad273827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887a0c19-ba79-4156-8568-83cd539209e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51aa3f46-f458-40d3-a2b2-681a31cfdbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4446ea82-8900-4e0e-8317-9f0a72d993c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec8e021-228e-4540-8ecb-9029f96e0e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.59.206.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd0f3d1-e250-4866-9b6b-f6dee0866565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.61.28.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c84bca6-da82-4499-8573-642829a25ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.71.101.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff49f4f-0901-455e-879b-d8d1ad1daafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125eabd4-e2e1-479a-bc2e-5fc443a7e25d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff012f8-9190-4de3-9611-457bfc5662de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a977848-5dc0-46b5-bfb5-7ce984e3204e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c76a345-0c6e-405e-a97d-11fe8cb1a66c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc25d22a-11fc-42af-be35-44a8cc72f4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7084a2e-c3d1-4d5c-b4fa-08873e3c817c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d361ad81-15cf-4e49-8c9d-450d0e72e697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--559a2d27-e83f-4a21-80de-d529bf9b19e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb760d6-778e-472b-ab33-34e2efe02e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae775e1-c661-4a8e-86d5-279435a045eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1f0ce1-cfb5-4e64-abfd-3cc8e7905fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e3dcf9-68c1-4922-b175-51c0ac5eed51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1b0808-a6cd-466e-b18c-37e8fee69436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d655a87-5d43-43f9-8c60-28e0af5f49dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d601356-3f9e-42a7-a12e-fc0ea82dc6dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.160.220.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281d8dfe-78a1-45dc-97b4-44b94992f218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb8437f-4da9-48ef-a866-f11833613ec4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01695e1b-03b4-4a7e-a5ea-a8e66c268050", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d548bd-9169-4473-adb7-0dd5002452df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88781e13-2696-456d-99cd-119d3b0f1f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b017a5c3-079b-409c-afd7-75520744d3ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68fa3cb-b2b1-485a-8a52-453f333d0ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a47578-2e95-4ddb-9e25-144b5809c4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71412b24-b915-470b-8b57-c78e63f328e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9af1138-c848-45bb-be69-aca3bf9e7832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af3caf9-c6a5-4415-9f68-2049a964c610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540915f2-e688-48ad-aa9a-14a3b4628306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3807e86e-12f0-42c4-adda-4b3b02720739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79bd2826-08df-42bd-9518-6b2e3b8148a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc8997e8-c07c-49e8-a243-b453ac7ba7cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047fc916-1d9b-4946-b68d-197a2a15c585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb8af87-431d-445e-a78e-4f4172f34d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891c685b-9c80-4d4e-8bac-f960211517cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ed31f5-9c8c-4305-a759-2ce298c37a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ec33ea-1f3c-48d3-86b2-7a3585c82ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a123c17b-3291-446c-8084-391a74cbbf9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61414f2-8666-407c-aed9-82b96aa5d552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3b2ba1-978f-4b59-b8ce-02f9d82d835c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d120ec98-10f0-4c20-9c34-33806f5eb9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e09713a-72d0-4394-8a7d-92d26598f067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9cd1613-f2b7-4a96-9349-3c586f2be77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0b7d31-cfc5-451c-820e-2fcdaec266e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a4603b-0b78-4d0f-a8e4-1bfe8fe1bb18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f428852a-8858-4ace-a14f-462ec286bedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70684221-b35a-4cf4-87ee-443593c6a3e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07442f6-2d99-4b20-b1d4-bf21934d5c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3510f94c-cb2a-46ff-b2d8-c4a0c910a76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aaeb115-b88a-4ac0-9b73-4120b235128c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b210f9-58b1-42b7-b2d1-4cffa57b45fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bdc4faa-9020-4fd5-a0f3-67b4a62942f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b81cf4-6407-4632-9284-7ea4d2b6c8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb77cff-dd9b-4d35-bbdc-83bedb8e37ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28024657-2450-4286-acba-a7e12b31b044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e4d35a-f4a2-4626-b51b-f29c93fd69d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a4bfaa-4fdb-46e4-ab0d-ca5132e09ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7f5428-dde2-41a7-8ce8-114059181076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4907457-898d-424d-a615-ef70c193b739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad9991b-745c-4ca3-818d-5e2fd5b0fa75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9525eeb3-e2b7-44b7-b631-753a85e5ed11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e1c5b1-3738-4cc3-aafd-e6221c4afad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e2ae19-8fa6-4071-96a5-e8ef3dc8b966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0020ce50-7de2-4339-8ee3-8b3ccab811c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b899d730-8a7a-44d8-b617-15cf4c7a7f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8972320a-4289-4002-8d40-ebb73035038a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951ab96a-94c9-4aac-a525-5e21bb01b434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c6458b-0314-43cc-aa60-c582f74402ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4ae42e-47a8-4cd9-916d-840955e7f195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549a9742-3f3d-4c4b-81a9-09a7fd814114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55540f54-345b-4c05-8aa0-216b31ce59b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568f189d-939f-419e-9ce3-fc6629c506a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702da781-80a4-4b53-8422-1500eb91409f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d1964c-6d7b-4efd-ba99-30bb1c4e485a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c4b3d1-3c27-4723-9cc3-7dfc0de85bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7d873a-4c5a-46c3-a9f8-0ebe12779d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4a8fef-6d66-4be4-b515-f065b7ab4ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d499d970-396e-42c7-b71a-f0f4be32919e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14d50f3-8b63-4cf6-b264-ddde8e7f8f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555c90e0-68e0-46fc-b7a6-03e85e0bfc9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41391dc8-6e1a-4fdf-8ab3-6433a08a7a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e942b4b7-d4f6-4b13-8409-435cdaaaaed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6bef97-0d37-4899-96ec-131613c304d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5faa10-0573-4e1c-91b0-26dc08c1a2ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573946fb-3acd-40b3-b569-41f2c2837786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e6c074-1bba-4f33-b631-59cc3eaaef43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6503e8f0-93c4-4cf7-990a-1b9090c2abba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30df1d26-5dd3-4af7-b53e-bf2c75d5c681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e582e073-ea3e-4873-afd1-0d6c2fdaba59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5581875c-91c7-4db1-8bd3-9d975ffde335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e58e3f7-00d4-4c5c-aae2-91624e676235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eefbddab-0e02-4e8f-8da1-63dd89c4124c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb175e9a-c314-47b4-b70e-6214a2f54be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7258c53e-5295-4e58-8c23-1752cfe6394a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81b4014-30b3-4d8c-89f4-1bdaaf6f7362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3062e8-1366-4128-8abf-15ca95bfb9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca9fd59-030d-42a4-ab9d-b5cda265e179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab00f3ed-9d4d-4b7f-a40f-b0f5fec915fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7bc4f4-191a-4c83-a5c0-1d9afd760c5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d46124-1445-498b-bf2b-12ff852b7d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1280657-0c76-450d-9070-e679d246d2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23663f93-e27a-4405-a121-a88efa2cfd41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c74f320-8ba8-4d34-9189-850cf5147b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd81f3ed-64f2-494f-ad34-4886a1e73957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d9bb2d-a428-4040-9239-d25b88cf99b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5dbaff1-497b-40d0-b3cc-23c2057f0285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ddc254-551e-4330-8a4a-0187b9a2bbeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b002c5cf-47b4-40ae-811b-dbb6299d191d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738cf66b-9763-4bd2-b1cb-082d75dfca86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b68ac5-bc65-444b-8d84-62be91af5426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04052560-9bff-4034-a405-4948c0db1335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d21094-61ac-4e38-b33d-c2a93a28d905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59b9394-d124-4fbb-90c2-218fcd01a7fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbab814-7621-410b-9c23-b4fd84dfb0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f36f01c-3a94-4370-81ef-b8f61b082031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f90446f-ab41-4cc5-863e-6fe65ebdd2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3816345-7532-4123-98c7-dc5a430c2a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0e29e6-443f-4a64-9f55-5da9803ea5d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083c8bb2-2cc0-4f1d-b897-ff5503e191d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b378a08d-ff7b-46ec-9d9c-c4ce30f2aee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1b82a2-5670-4e06-8aee-34e62e13bf1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2451b13d-3835-4e24-a06d-6612e99dbc51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16911613-b5b0-4c5c-828a-2085e1576111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5251cb7-f0f9-4343-8597-ce68731e5b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b8e4c2-f3e4-4aaf-b336-2e5adca526f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2cf2151-32f4-4a32-bc4a-3614cf3ecdb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f99affc1-a038-4f53-a667-137a003f90b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef8e1fb-5b79-406c-9468-4208479a1802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c38f36-d20f-4f42-b7e0-cdbafc334e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.37.190.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7bef5b9-1ea5-4ba3-94aa-09b420812ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.86.192.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991d9f20-4a2d-480b-90ed-36615c892974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.138.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a49a05-7a8c-49c9-a1bb-eeacb13207dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb77e094-91b0-4f9d-a837-f1bef09c31dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c22c22-70f1-4e78-998a-d14ac4e99f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a940790-88dc-4e01-990f-85bea6f50704", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.190.32.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93271b2-0988-4103-8b16-eb79c180ef8b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.190.55.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db0d4d6-999f-4f14-8474-3bba58002858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.191.151.0']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c603e7a-dcf2-47e1-80aa-ce6fe20d514a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.217.21.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafcbcbf-d5e4-4265-aa49-a1099e0e27c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.251.121.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f924e468-eccb-4d37-a98f-1f60648a6f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.64.215.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6ccf2e-84a6-42ad-9670-8d399b536cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.64.36.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23be63ff-75b1-4785-a4ba-2b3a6e415c28", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.65.55.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06564fa-c0aa-4383-aa61-43edfa01d19c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.92.17.255']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3bac733-5490-43b7-bf95-8470e3c03619", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.92.7.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d251dc-0d95-419d-96f9-0b5bd7565554", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.92.7.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee51755-64bf-499b-a723-a7b7b75dbd05", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.92.7.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1c6a9d-e420-4969-9dad-4ad36ec5c646", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.96.90.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ecc8b56-de02-4c28-887f-593d9b85dd36", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.101.78.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c615ce-bcdf-43b9-80c9-5260f899bb11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.155.134.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779c3ed3-1ff0-4fa5-8394-53706435545a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.221.232.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f8066d-542d-4e26-80ca-f61dbdd2963d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.225.146.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643850cf-133e-4ab1-883d-d7a66632f63b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.232.26.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a24df4-2795-4b3c-a861-6aac10d030dc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.241.123.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bde4e0d-dff0-4a05-96ef-3b3a20f29427", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.245.39.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e739f423-0c10-4df6-840f-920f6711444e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.3.231.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1ecf6e-964f-4b1d-be8d-3c49e14edf8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.31.52.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08812c8c-60f1-40f2-bb8a-6b5292d0b115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.39.64.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405b911f-c9b0-44a8-9455-5e90b258572f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.48.142.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc30204b-4c05-4be1-bfa5-5f50074d3c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.5.145.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771daf84-d5f8-4a1d-9223-4198aabcf005", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.75.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610b6821-e1ac-46a3-ad54-4f4c9d99eae5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.93.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed33ca5-3ecd-4428-a698-d1d30e82e57f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.177.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfd5557-4a36-43ee-b4bc-d3f4070aa314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.179.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--416e44fc-556b-4ae1-8523-a4ba36582bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.12.251.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9f5b5a-0e8b-4ee3-8afb-63ec512f3818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.74.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0628b07-cb42-4669-a59d-97c2c9320fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.77.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce35a02-0cc4-4f5e-bfdb-a5a89056c1a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.249.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287b4556-a28e-4a79-b8bc-b3ec00be35da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc99e9e-2447-42d8-b4d3-38973e52ce5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed239b4-328a-4768-869d-5c3d6ff8c984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e9b950-bc97-4752-9b00-96409264c7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1b4f09-be5e-491a-b23e-8c2f6ce956a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8aca8db-d9a5-413e-8ba0-e8aa11a2371c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74699804-d5b2-4c39-8bb0-99d3de147840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ca5e56-097a-4674-9f44-26d964e41052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad115976-fbae-45c0-9eb5-2c2a5277ea8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc8ba22-1989-47c4-8865-881292ec147b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30baa8a0-c593-4747-bfb6-951982a1b489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cfbd210-2576-4235-aa7f-a261f3f711fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a09466c-32c0-4894-a618-b2c9c10aa690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba18bec-b200-42b7-8f8e-6696d8353daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f15ad6c-6714-41ff-868d-ba9b3c68cef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb14b0d-7882-4546-b4da-eae7eaaf55ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d2a2dd-4d6f-41de-9176-b8435ee2471f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573150a2-4b7b-47dd-abce-b5871401df83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09ea946-c7e3-4a7e-88cd-67d51a805d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd55055-4280-47e4-9d3b-7900975191d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc8c35b-bce7-47f7-9e2d-c3b3211da137", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409f93ef-2ae0-4f1c-8981-17c7713689e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460ff503-01a0-486e-8f18-207b9c6b5cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb80e45-8d81-4bc0-bb6b-0aa12f6f188c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a268b899-6eb1-4ec0-9953-c0afd4576cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c058ebd3-0908-405d-8d07-ef364f158d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8dbd04-16ef-4279-835f-ef19fc0d4ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff63125a-aada-4bed-ab78-5262239f6ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c987b608-9e59-44a5-93c8-151e9484dedd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784a7a70-1e49-4591-9f49-658335316f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3f5b0b-b521-43fd-af9a-2b5efff14169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc655676-e4de-4cc6-9d23-704176310a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbb01bc-c0fa-4fe6-9237-335f26d3d228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5259a25-79e4-4e75-bbce-97040ef10e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9311a59-5591-4f28-b0b9-07dd97706674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f7b776-6788-45b2-a5ad-4d3a2cdccae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b836b4-6756-45b3-a8be-5e8727f93be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e512b2-6e2e-422d-aad5-9662a637d623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840e1ec2-35ec-45ee-91a6-99b6ca4db0dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8982663b-8632-43c4-87cd-3dcec573cba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26f6914-af70-41f3-8f3d-07dadd05e579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2415b9fa-e7de-4da3-8733-d4ed8aa79e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1cdbc3-7b3b-47b4-93a0-591dd8afdb9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450af27a-97ab-4181-9abb-0de40aba018b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66703c73-ac2e-48ba-87ec-52cacf30fb2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b334c37-b47b-49bf-8253-054f98863898", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, openclawglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:openclawglobal", "sensor:vultrmelbournetest", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d735b3-42a2-4322-b5f7-7075c8458151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d18fe3-b9b4-4bb6-87c1-1c5e3074ab5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767fd463-7b68-41d0-ab50-5676d21c9c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c69b4257-d4df-4c24-875a-d86777bcf45f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b937093-78df-4521-b4d9-61596b77a202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017c9877-560e-4252-9559-3dba1d1fe292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b040439d-0800-4856-ac13-b31c6695aba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27e3ba2-ed86-412f-91b4-31c050472773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96aa854e-abd4-4fc4-ba99-9e30e8446690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1faefdf8-ea87-49fa-af4d-42ef17c1e570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4648c958-10ae-43e9-8f7b-cb46a83d7e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ab5257-d4cc-4fbc-8658-2423c04d40ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ba4f92-63f8-477f-935f-ff341afbee04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e791dfe3-fedd-4671-ab0e-a6a28008b67a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb96b7b-f839-4cc7-a9b6-184a1533d023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c136b8b-60fb-4f3b-a06b-27bb4310af97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd05522-47c0-45e0-9bba-f8078af2d1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1e6e0e-7a6b-4aa0-97db-45675bf8c2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07000d7-edc7-49dd-b40b-81b95df86588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a75f88-2bf1-4408-b0b8-d7dc8e4540e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5883a37-c25c-4030-b297-96382c871d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e87df30-116a-46f4-b385-99bbae1e2cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3043b38f-f591-4b3c-b2cc-1f01596f9de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e057e0-fc45-4302-90a6-43abd71cf155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6582035b-9f76-4941-b0e2-ea827f753b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edbf65af-7a03-4d19-9ba7-88efb26d80f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d73a92-12af-4605-a656-fcbb534223d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459d7fa4-7ea8-4b4e-b8c7-c7285151278a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f40f5ae-3eb0-4d58-8695-68335ad13bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ccbd46a-4ddf-495d-af5a-37387df23e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c952dd4f-0151-4ed5-afb9-a8e4074ba853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026beba1-8a64-48f3-a522-d7e643cb2a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5549a0c-979a-4c56-97cc-d90214d582cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cecb3936-2866-44a9-b418-a9c9f86f26dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0654ec10-4024-4708-a8e5-52a540f5913c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1cd30b7-b011-45f2-84af-789b49ef120e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f87115-f4ee-4154-8515-51071c42e544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27ee589-5905-4e06-86c6-9a4f1d3c7302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5bcb55-7e4b-4349-99f9-043361f3e477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2d9f55-6674-45b0-961e-c171c73e4e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c177fc-c013-4f65-b321-8eb42bfb2cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602ce9a0-8520-4399-bd57-2b00ef680766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6789f021-ffbd-46c1-b710-06affc7eee88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee3361d7-1e58-4363-a212-ad4495ead15c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a6e08a-489c-45b4-ad35-2c075032c9fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd8dd03-50cb-44b6-8637-904538fd512c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15bf6f07-dd4c-411f-ad14-135f9ab481ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53632be8-8703-48e9-9a47-f2799bea2b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0e692a-54be-42cf-b4a0-042370d02570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d9c1330-4d84-4cec-9b4f-1daf1a413149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d72476-bc21-4feb-aaea-18a80f51034d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7ede2d-b299-4db9-bfb8-64568ca47193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f7b5d1-efa6-495f-94f2-74e9b6aabdac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e25759b-ba9b-47ac-80d3-bfd128f78346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d272cdac-59aa-4ed6-8ddd-732018084c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb08da4-3f23-4b64-9198-ce37f3466b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b15224-a007-4ba1-b2a8-5c322aae0dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1960aa4-02d1-47e3-903f-1e4a1502818d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb0cf66-8f5a-43f1-9b68-0529ccd87a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.255']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e4e8f9-e1a1-47c0-9f1c-7294e64e064a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32aa5bf6-d049-4313-818e-ddaaf2840163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1485f458-b88b-4fb4-bab2-b5312ebaf64a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4009336-2a49-4a61-95e6-01aca3496e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b23e5af-b63c-403d-8ef2-4e2c8b2349f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ff8b08-e5f6-41f4-8fee-9a42733509f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ee7b66-1ff1-4ff8-9899-9d5321f8b52c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f8a9ec-ddeb-4c1b-b262-770c6dd57346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e12ff4-0845-4837-8dab-d918cffc19b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de9d8ff-4655-418b-98df-94c38f563c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be02795b-737b-4ec1-abc0-80a9d053b1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95ccda1-dd7c-4f04-8b7b-6e16c3d7d4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6aace3a-8f74-4ee8-b44c-2cd6e2942356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea9484b-5b49-4d01-8952-0f45388283bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7fe41a-0623-4708-bce5-4cfbbf861408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c47d9cf-47ab-4f5c-a8f8-24b12829c090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0029200-d61c-4bf7-b63d-ad0645f78b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b683706-f10d-453c-9a9e-235769c13074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd49c0a3-b7eb-4578-a57f-029efe0f821d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19947581-efa6-4f50-9ae4-57bd0955044a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90879c7f-1045-4594-9b03-a83429f81d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946f28fc-2b72-4b0b-b101-02fe9f532680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7929fe8a-7c13-4c38-92ff-96677728e8ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b648b75-45a7-4415-a61f-b30548acdbaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa13694-2b66-472e-a7a1-a8dcadb79e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77aecd1c-88d7-46cb-956d-75b5c6b54bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4631f215-98d2-4aa9-8aca-cea7d3ee22b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af7a420-6b39-4d11-848b-1c22a52242f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781119f0-a319-440d-bc17-cddbc9c97ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c0736b-050a-4165-bc9d-5c5470ddebad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2efd01c2-f661-48b6-838d-918451d2e87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03bb6bc9-cd93-47f4-ad1e-1892f9a3e03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ade721-cbd6-4b6b-bc21-75b332b3f49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa1338e-abe1-4d2d-a055-19c8738ec37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be01314a-3d0e-4cb9-86d6-47c14a134cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4939ff6-11ba-4ab9-b51f-232e82c21f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b18cf5-a8cb-4a07-95db-8dceab9c6773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176351cf-cec8-4bb6-965c-32af599e7a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301347bc-2369-44f4-abd3-d585ec797054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f502b8f0-e9ac-46e3-b8f4-b323cd0bbd3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc0bfae-a27c-4cb4-946b-444bddb85d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd45b38-3817-4dc5-9ef5-43eb7045231e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ea387d-b9fa-41bd-b26b-af2e6cb6bc85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e70757-cd6f-43b8-be59-dd94fe3d633a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb032004-0a4e-4584-bf25-086fc6e1bbf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--295b2464-7740-4008-b1d3-871b855fc0fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7192f76-11d5-48c0-8ca5-42951b17f658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311dec46-a591-45d8-a26d-b7a270b6de34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95505713-2d61-4b40-bb05-b9493aa22a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c941bab5-64a3-4222-be71-c371add47d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ee0c2b-1184-498a-8d52-74b290296530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e376aa-ccfe-4407-8521-0f9d9662861d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15c6313-6901-4b8c-9078-f5f924291829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12fe50b7-cbb5-4b90-a497-3b232a1df250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.85.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c371ef7-8bef-4a49-aeb1-554b8f2ae79c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.91.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44cbfdab-cfb9-4bbe-838f-4dccb0c2ee34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.134.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c7fa42-2bc9-4749-a035-c01e077c6d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.50.197.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122af1f9-72fe-4bb0-9123-9c1e54e6dfbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.179.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808d501c-a9da-410c-b98a-3208dc53bdca", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.219.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca9fd65-9d98-4896-bd9f-433dfd240aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.73.57.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4cbb714-6c33-4518-beca-c87198f71e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d6220a-226f-42b9-b5ab-66b41e1ae316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.53.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a43dcb-0586-473f-88f5-048a89ed2bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf066418-d827-438e-a8f6-cbeacaa6fcb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4529055d-dc48-4264-a84d-fd01696b8b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f1c059-f414-420f-8cd0-dfed467c66fa", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.54.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc0003b0-1c8f-4f87-ad5e-a7169ea53c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.60.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd370e2-d85a-4b7b-aa15-66890900ee5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.62.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b992aa-e7e0-49e2-a0d9-f6989b891915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.63.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8f4507-ab7a-4db5-a0e4-c4acdf51c752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.189.245.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec10d62-15d2-4b8f-91d3-2e36a61bd3c2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.192.25.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e71f60e-b2f4-458c-a91a-3225f30b0ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.231.186.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2637f6fb-f752-4b2c-843c-1b26abd91afe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.244.88.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe175bd4-db50-4851-b720-993bb823e805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0094bf-0389-4885-ab18-37b039b95627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdaa41f9-275c-448e-922c-a945103428fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d8a295-118e-4636-9c06-ca931bf70659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233ba7c5-9b64-4d58-8613-f0b8bb31f05c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f567939a-4d49-4ae8-b0dd-173eff28e2e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eacf598-7644-4634-8a36-ab0093857356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2104b94-5fcc-413c-8437-30f2663407d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3bdc56-8354-45cf-957d-26dfcc57f8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f4f9a3-8934-41f3-97f2-a8903aacfd08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1589f8ca-0bee-43da-a2c9-5a9833caaaae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf378e31-549d-494e-b41a-6071730274c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796edc15-f38b-4ecf-93a0-caffbdf71309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6365abbb-e117-4629-983b-b8424a3b73c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0321b78-c885-4052-a9f7-4b6c8f683d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b9e417-a728-424b-ad95-e7cb3cbe5456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60b9c7d-1365-4ba3-bc46-f1a0d8a8bd6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128b2088-0cbc-44c0-8632-7edcfd32f293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede2618d-bde6-4d49-b225-01b3554f0e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c16e18-2432-4d7a-9955-92543d25e45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775ddda3-c2a1-49b1-b329-35ac2cab48b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5bb490-8a8f-4ad0-a2d7-7b54127a1845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d69f1e36-f008-4e27-8439-af031e03f69e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1cb7dd-bd30-4d0e-82b7-d1105ee31dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5351269-f78f-4d3f-87c1-c19ceaa706bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a835621e-0038-48ad-90b1-33c93a309eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f671094-7730-4668-9ca2-fdd6c3b0ee76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02e6a7a-080a-47c9-8d2f-4be8859c107b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbab4f8-e833-4c8f-baa6-e1c74320eda2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c18644-7890-4d6e-9453-d1ae90069bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70253518-7815-4301-b452-e388b6043a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--731d79a7-871b-432b-b7e3-d30f453c44ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e25fe1-bcf0-4f01-a62a-6cabed5ec60f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f3820d-a87c-4386-8572-3f35613f054b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e8c8b1-8e23-4b11-93a2-ee0f06e6d35c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a55d4a-1e5f-48f4-a93b-4b1cd3285ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7f49d1-f85a-4e19-a40c-52dfb8ec5de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641b4085-ff34-48d4-8dd7-3705c53da55c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a28d53fd-822c-48d4-845c-6eb24317a5d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad920731-11b6-4798-8fba-9c4fd1259076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2353219-e113-4a1b-ab04-3d7ae9673f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3da112-976f-4acd-8e59-703f91ed19cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52408cf6-6525-4a35-8ce0-c73304db900d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ca6c7e-c64e-4296-9c68-ae8141311065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d79d3d-36f2-455f-971e-743216e1bd59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348fb667-bae9-4ddf-ba1c-77ad464c7118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2810a56-2efd-4481-a015-04857985b54f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a933739b-23d0-4b44-8ca9-ec33c862ea75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29ff6ab-f2a7-4a63-85ee-7e294a88eca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2febf460-f7b6-4e01-894e-3c0fcd4534b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8898e527-9258-4af4-b260-17bc26afd202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba617eb-5812-4728-8c77-6353332afe05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6017f6-2f7a-42f9-85d1-04ddc2498729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474453eb-5c8d-4d6d-8987-89c7a0aa143c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5d3752-bb52-4823-bc7e-0a52c09774c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1674943c-535b-4075-b653-d8c2d29c744e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbf65da-b3ba-48ad-8cad-241c400e901c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c84ee7-6a4f-46a7-8628-bf314c2497cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.91.221.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7fd804-0e28-4cce-aec2-a0c9f96b2433", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.11.112.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--703af44c-b8ce-49a2-a695-6d16c0d04fb1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.133.244.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6acb5c81-5f88-44a9-b776-fd6948d8de6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.144.22.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad36b5e3-9695-4708-bbec-21a2ea99ee16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.176.248.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0bea3dc-f481-4b33-8677-28e447b1fdaf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.26.51.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50096945-0724-4d18-9e37-5c7184b878a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.26.8.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b568d9ad-0385-4851-be80-fb3fe176214d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.49.242.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba0a60e-e132-4b0e-aaba-0ce717a44a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.56.30.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661fd09d-bbe9-4328-a73c-94155d058bee", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7456461d-2a65-403d-ad9f-0a44c10f2246", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69710ffa-7e4f-4e84-a61d-c20b8c94527c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae6f65e-ee7f-4bc8-aa15-b9b41e43e765", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d23151f-6e69-4fa0-a995-c7091a2c0eb6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc841144-85d2-4782-afde-98f0779687ed", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdfdb5a4-9977-4e0f-a5bd-f73175a6017f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.211.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d9688b-26f1-4ea8-aa0d-639a5c9641b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.70.125.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f0d175-5c4a-49f7-a667-039f9106f130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.115.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e9ecdb-33df-4935-927f-7dd579d0fa2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.116.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763434c0-4f70-4867-8ca0-6be8a3a4071d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.43.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698036b2-15cc-4970-ba7b-9fa0bedbb015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.88.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbff6902-febe-4eab-8333-9ac706dd1452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.89.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c5cfed-b65b-49f7-9607-4bdbf7c83a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.91.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355f1e82-7afe-4d4b-92c5-1ecefe3ef5f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.92.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3922edaf-4229-4858-ac48-a1de4718343c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.92.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f18702-84d1-41d2-8b6f-e3e72f6f1221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.168.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9325eca-128b-4d6f-aeb6-2f9f5b8cef16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.196.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61cf4034-653d-4eea-abc0-b08c8605e846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.196.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2217fa7-3ce1-4b40-8e4c-5b62afe173da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6af6ee5-d4f0-4474-983a-d78b416e48dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.213.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d05246c-8ca3-4e54-b5c1-df6ef47cc0c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.32.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45617822-fea5-495a-9aae-b474e102c6cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.33.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9df36ee-23c3-42e9-86ff-f308ffe50548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1cfd068-85f9-410e-9f1c-62add59b1eeb", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.49.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--304c1656-4601-4886-b959-780ff2d8093b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.56.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772b101a-11a6-4139-8b28-968f4392f8b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a72396-f814-4811-bff7-5b9c12a09ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c862939-dc97-417b-8887-c3fdd7d9763c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.200.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba679f4-af85-480a-bf8b-c8695c68f355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.208.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616d691f-0a8c-4472-8452-2b6277464cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e2a975-24e9-40b8-a3a7-5baf725c0dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e5fa08-a64e-417c-9ee0-01859f5dbadb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8dbd155-3211-4a41-accc-620b5159df95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e020f4-b92d-4a9c-ab78-bf99d7319043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cff79ad-a40f-4a95-a5ed-ce3471e825d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.224.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b68de1-5f0d-472d-a7cb-f408f148f38f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.225.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8da7b1e-de56-49e1-8c81-5e6c21065526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.227.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c12cabf-76fb-4c86-bc57-f0b40cd8c7b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.227.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581b82d3-8401-449b-b970-821287782eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.233.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a2847b-4b07-4706-8a74-c60ff94cea07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.241.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e672f1e5-7b14-4d26-b5b0-d96952183ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244eab86-71f4-441a-b368-4625c2c2c881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0eced80-92e1-49b3-9dfc-a040608ef7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8201f48e-e856-496f-be42-7284b2285f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.75.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d255f0a4-581f-456d-87c6-e13c10db062f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.86.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c656dc14-2ce7-43d6-917b-10ad09edfcc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.86.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df0392d-9419-4f7b-8375-84356460377c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163c0730-13a0-4e95-9aaf-635018133d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4decd6-d5a6-440c-8c46-fc15baa8ae95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3cad005-e1a8-4451-be81-2f30dab08a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.139.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ddab70-ceab-45c4-a8b0-6f0804c0720a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.67.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d43360d-5ddb-4e8e-a2cd-e8db6ac1ea93", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.84.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e463cd7e-e67f-461b-9dcf-670ebefcec6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.87.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee2f125b-aa30-4a27-ad1f-513d33182200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.155.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c297ce-b997-4bad-b9b1-4b87b8051943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.185.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6047508-7223-41ff-84aa-2d35daba02fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.195.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ef832d-a32c-44c9-8cac-c12e0f6f91a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.204.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b03339a-264f-40e6-862c-6358f6072cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.224.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fa4fbb-e796-4da8-b7cf-39eef1aa5849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.244.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e244ed38-02d5-4135-8fb0-b25d7348aebd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.13.164.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33a47dc-24d8-4d16-82e4-9b656cd76214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82dc44c5-b58c-4237-8198-9ba77b047b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f9369b-01ba-4eee-ab97-9101526c7867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2816d6e5-11c0-4176-9120-4c3ad54d2b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee1d6fa-396d-4db2-94b0-8abb4fb87484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf1dcf7-cb1c-4754-9a18-abd759c08ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd026a7e-7e75-4650-87b7-dfe7dabef839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967d6cf5-a412-4d58-8dab-5e36bae26174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.78.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6a5ffa-ab60-48b7-8359-517e2a1e02a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.79.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df218ad2-dac5-49a2-8340-1154b1609326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.89.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad07dbc-0001-48c7-aadc-920fd68b7ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.89.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42523800-fee4-4622-867a-e7544a7f6307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.90.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b38e08-67e5-4e4f-aa32-58a6b3ed7f89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aca74ce-fa35-4703-bdca-56bdca5373cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.95.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8481fa6-be99-41df-9fb9-f3b4388db525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d6ea04-213f-4b4d-9caa-01ac5f9ebb20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749672f9-34ee-422a-bfa2-e70d84b52273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f827f75d-be8f-41b3-b4d5-e00ecc7f6e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed293bd-f8b0-4343-89bb-b6cb39a0a361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.201.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85543a5-c69d-4b58-a158-5d36e1951547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.224.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4126927-99c8-439f-b816-4fbc6435a033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.225.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a545dca3-85fe-4395-b50b-592d5c68685a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.225.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a35eb8e-4b8f-4abc-9759-579286e40b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd7a26a-b69f-4b5a-a0d2-eb3afb847f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9acbca-6bdf-408d-8168-674a4a4ee352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.195.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f9592d-7dc1-42cb-9320-458fa78550d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.160.86.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b377cb-7cb1-489d-8717-8e23caaf439b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.10.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df1b46c-3c3a-4405-85bb-c2a0ca0480d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24125de1-2fbd-4943-99b3-1446d8f7448d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fb61c7-fea7-4446-8b49-aa87fffeff39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604b781d-2d41-4fc4-a8ac-16b74ddbf24f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489eb853-c933-4bd2-b649-7e1f2f3c7532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720c9998-4a61-40e7-ad83-dc645c2dafb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d8e705-a108-4c68-ba7c-85892f78d359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e290a9e7-f0dc-4f38-81fd-1a227d0a8e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169018aa-5ca9-4645-abfb-a87e2adeba01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb16f12-432a-4cbe-aa44-8e380ad4cfe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d428560f-88cc-441e-b7ce-e857a9c78fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68d4cfe-0158-4318-9fb0-413cc7ff8de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fceed736-a947-4ea1-8b11-e96f3161d845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef206dea-0891-4266-abb3-61d31cc803a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1689a6d5-db04-4e43-baf8-7ffe716aff5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1adc46-f48b-4739-afb0-4a04080962a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3479e48-6aee-4211-ad28-43a3ef1ace39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5752067-076d-48cb-b2c3-8fc23789ae71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9b36cd-7bf5-410f-a936-3a8502d7744a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc0b453-c6db-4b16-a075-0f6d5e15e541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52392f56-75e0-4296-ace0-bae835fa1ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22eab69e-5595-496f-b5f2-b08c297ac4a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe65c98b-0c05-47c6-901f-6a605c520f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--485efb2c-6c19-492e-a062-cae1a8933975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec67518-be23-4c82-8311-80ed76d9cfac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e32efb7-b452-4f5e-bd07-c405442b3835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2267f3ea-9d73-4627-a013-1c1741e27d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.27.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d261609-b61a-41bd-a5a5-e1e37d112feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.3.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3dbed5d-17a2-45b7-852a-57afee81dd87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a73554-1811-4a19-a2e0-6bd554608b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faeacc59-1bb0-4c74-84f7-f2baa23a6d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade28ac2-3ea9-49de-90da-433c2e130b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5846d141-fc17-4cc9-a58d-b3666a6e453d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04b426b-9a10-462a-8af1-4b1b0064b3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.38.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4f12e8-8cba-4b27-9b25-e180888d38fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.58.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ff9244-58ff-4cad-843a-7db780ac7f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.59.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6910022-ea10-460b-aa46-246bb0b2cb84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.6.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273410eb-209d-4211-9d68-0091723615c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199317e2-7553-4891-bcfd-64c26f38ebe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb6fd1a-e6cf-4264-935d-907e81751813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba48934a-6bf6-4d83-b4c4-9bc1c9e38e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6892b09d-acd4-4cac-b805-7cd6fdbf8b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822a303d-20a1-424a-aa6f-80214166b435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59500fd5-a7c6-47df-883b-087420702195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02fe5c4-f576-4248-8398-0bcd5f2ca1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.109.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13cf8e48-1ba1-4940-974f-da13939fdf11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.116.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885ca75a-0d06-4e18-9b52-4827b87e3e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ddcb392-aa8e-4307-b510-ab94fbc08e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999d0383-2ae8-49f5-b371-d3da498257ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bcfb214-4c4b-4502-858c-aa0d8bb79df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c435f00c-294c-4bd1-95ea-1327535387f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6069b661-a693-42e6-ab7b-ce0f3d9d5b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732b167b-f99b-48fd-a840-4209b87619af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3cb5f2-6ef7-4f48-b558-b4f9414b0481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b7da8f-6dd0-4580-a30e-823cb9646baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509da66b-fe63-49a7-9edc-d2715fe3e91e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fee2f69-7fb0-4344-8ed1-666c7c4490e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac97babe-90ae-4da8-a0c0-40a66b2b0812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c229b829-73d0-44bc-8a56-359109a146dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12397275-ea10-4168-b6af-40733e0345ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9aafb7-781b-4e0c-8e46-db163ca95e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8257be29-bbff-4624-9e2f-8f59f552b796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279c1f0d-dee3-4ad5-9153-045551d7466e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.0']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132794bd-cecc-4e49-a9a4-16e0e2b081c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a1a2f8-3b9c-41e6-8eb2-56ccae568554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a97a9f6-e883-4b00-9973-18a42d10a260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0fd868-1d26-4500-b8ca-9b832250bd2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10fa27fb-909c-46fe-b11f-152371375464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053591c5-6440-4410-9483-0c3cae414fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.15.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd64b3d-d004-4b70-96b3-1b656b4fe937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f50442-7ecc-4779-8ba3-4ca88913d5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d8b77f-ab15-4cf5-877a-37573564be32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9afcff74-ee53-416d-b8a3-bf4a848d18d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38c0261-faad-4234-aaf0-f40ae5986583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a8da6a-9597-487b-a644-369a488383df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5efa97ed-e617-4d48-9515-7f08666856be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c090c314-9bf0-4d34-a4fc-fb991950ba44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf865e20-4cde-444e-ba47-96d0f1001f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d97a59-aa99-4117-b92a-ebd792afc101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78dcdf2-abf7-40d1-b502-f3d008a94b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864fe953-6f16-47c4-8996-c133cf274555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04b6de4-0bee-4f9b-a1ae-387d8a69c430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3733e932-8654-4070-8688-2259a49b449e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.99.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847bc4c0-7bef-4e61-9400-4da0bf8d25b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51aeefb-b4d2-4a1d-b867-93b62463985f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970fb2bf-b928-49c5-aab0-09a15459bb98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcaeda1b-7072-4776-a191-cd4aef803f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0491d95b-8efa-40b9-8393-367b87cf4933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ca95f5-835f-4f7c-8cbc-01d6a79caea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06860312-e3b5-4fb8-891b-0ae20d2d180c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3bb7714-a500-4384-849e-977c666c08e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e49323-54b2-49f5-b494-bcae50409bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33e595c-c232-425f-80c3-5f60a58dd8f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed74f688-d475-411a-8c71-b2a3d4464728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f796288-89b7-4acc-913b-a3f7a119a32f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a87a81a-dfd7-477b-8268-ba985c7e9538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df55d6bf-1aa6-45ce-9f7b-6326258ee790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd580645-7b0d-48dc-a7e8-e5262996ee28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d82832-135c-4119-8e8e-5dcb2a3ce5c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5aeb6f-4abb-4a36-bb45-dfb7c6746bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa93da9-1652-4116-8671-dac28cd4063e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa26e64-81ac-4e70-9b78-99ed61664b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99647c0b-997a-4603-829e-6d08a1b06eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a66fb5-761b-4ccb-9ebd-b18c0778702c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79914878-02bd-4a19-863e-25c4257574db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd34231-a05a-4944-b908-e925a6119d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60f9a58-8f90-4709-af40-a9e1b5e6a940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe479b5-d10f-44cf-bd9d-ffdb23395eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72ff583-b750-420e-87de-6d0e9d41a753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.108.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7b2235-0c42-4aaa-809d-cf71a0ecd872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc0edcf-9cce-4e87-aadb-e45cad32d0d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac8a406-f7ca-4437-a614-1e7fc4055667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6ca370-2121-4f58-8f33-a0d6b9d25142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d7d7a6-96db-44e7-9d75-1f39b477042a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474a46ab-e05a-4f22-9811-797bcc625958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6694997e-4ccf-47bb-b8af-2ef1d4db7b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701a7534-57c8-4ac7-a4f3-caa8f57b14c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac5173e-70f8-487e-84ed-b588dcf54446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e013ee-ff5d-4562-877d-145c6b2ba533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364e2a0d-f3ac-471c-aec6-22d2706ede3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657f49b7-f7c6-41ef-8353-987478e10d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5308993-5742-4928-97d2-af1cb0017ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14c02c1-2a86-405b-8b00-96922c2f2df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6257dec7-2a7f-4d97-bcf4-31d624662b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55ba0c2-01e4-476b-a567-3bdac50b19b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11145df1-5b29-472c-b28c-9e82b5a1f93d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd499a2-9230-49da-9198-3a9cb31c0cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6edec1c-ef34-4c2e-88cd-624ba062491e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ea7b73-655e-4aa8-81ae-723d9db7b754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.26.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76824b45-e678-41c8-b8cc-c4517390394d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb80d3f-4f05-4434-a399-c2f0beaf40c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f73365f1-c992-4c9c-a979-8fadba6b3008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38bc780-201a-40af-9cce-b9209099ee54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912ff545-906d-473f-a3b9-adbd9c8ca26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c59f65c-fcd1-4d37-995f-35f0b8fc2180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c7c428-ced1-4cd5-a671-e80bb2d199ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.9.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5ab919-e571-4870-9819-61b54ad8b3a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.71.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b35b4f-da19-4b4c-bd69-71deae8f86a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.186.232.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e542bf02-c917-4ded-a453-d489f773e2f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.192.21.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1207f9-3404-4be4-bf1b-0e0ae8614c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.141.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9500ce-2d0b-4230-855b-0177a47a8ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.146.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0907a18-3d92-4a16-ba2b-d6613f5a4d11", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.195.177.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969cca5c-2137-4f39-84ad-8304a3e366b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.201.77.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252c2cb2-ec56-4b16-b95f-4c3560cabbfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.56.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ff1974-a580-45f5-8703-2467be6a0209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.57.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--741951ee-b7af-483c-8feb-1c0e01687959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.58.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc660b96-554d-490a-bcdd-bb30de3c6929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.60.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f4d751-adf9-4dc9-bd0c-011ef3a6b4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.68.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e102712-5efb-4cc3-8c00-2194188f6845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07446e97-5159-46a8-89fb-286be81a6312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29fe309a-c22e-4af9-ba9b-90a63cff8c08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.226.82.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922758c6-1544-4e54-af4c-3df1d8a251d5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.228.179.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04575db-88bb-4175-b2df-ad4ead337b65", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.228.193.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498ca5a5-142f-407c-8adc-1393412ec768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.243.208.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061c7a1b-20ad-498d-bd60-4582e60b7b52", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.245.71.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b9a1fe-17f4-4d71-8c42-bf936206cb2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.22.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6ad8e4-56a8-45ca-b13b-f8d55e0e7bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.22.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f63048f-572d-4986-8f8e-40c28f947ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1040ad-610b-4e26-a16f-4f47b7175cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c5d378-799b-4cd6-8878-081caa9e5072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.49.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fae15b7-d318-4a41-b2b4-50ef2fac2734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.57.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819d6fa8-c819-406b-83c9-074ee979b794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.57.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4afcbc-1d1e-4f70-ab02-7d8a3b990e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.3.129.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302039ec-109b-4e63-b3a0-0cbf86ec14fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.33.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bbde7b-4f05-43ef-b30a-8e5b3a9edb15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.42.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6673c9be-e4cf-41c7-b4ea-b1ba9f677cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.208.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c33935d-c109-4e18-9908-a353b1212af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac832ea-3c8a-4020-aec0-5c8e594e18f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b821e6-fbec-475b-9dc5-584fba091756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.250.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--524b3e17-ee17-47f8-81a3-3ad32d617a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.250.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfba443-03a5-4616-a530-ebc2d99c6c57", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.164.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7dc73a7-ce2d-4ba2-ac1c-2da3c8cfa094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.231.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514dd89a-f2a4-4869-8579-e0a46b60456b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.232.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4528ff-2d9b-4c64-99f7-903f32deb2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d2e201-9b59-4ec0-87e5-9f68afe72d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.246.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ddee840-6900-4d7a-bc14-cdd01ea41549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.251.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48d3de7-c301-4762-9c69-11a46599275d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.48.255.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0768fd03-9997-479e-a0dc-09ab71864afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.245.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3976484-6d85-43e8-96a2-6656543dd557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.3.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd601aa7-79ff-4559-b5ea-78f6bc0d3f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.35.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb065179-03e9-4bd9-b6a4-bef210b0f087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.42.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec4d065-56c4-4246-b3d2-d8761ffe9973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.50.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73fa674-2255-497a-bba0-309df4a4e2dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.72.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9630a66b-805f-40a4-8193-bf0ae59b5333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.73.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6157d5da-d840-4575-a401-5d9034f03b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.84.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c85b25-d4a3-4b1e-b7ec-940ef161ae48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.88.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e771ca-cd18-4d90-8fa2-b054ddeab930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.90.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1013d819-c1c5-417b-8f9f-3b49c4d9dd7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.62.193.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36f2c55-f5bb-4392-8599-02c07a2ddf78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68907170-cf17-4528-a0f5-33c817762314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9288bd-ff81-4d61-98ed-1f8f754e836c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e21e05e-871d-4a36-b21d-501ebb67d447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6179ad31-f8bc-4a5e-8060-77caf13c6210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7661f701-2fef-4d6c-bd29-b3ca60d77510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eca5be3-47a6-466a-9599-916dbf28584c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47e6044-7a90-46cc-8402-c0de2e4e505b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ac4ca8-46e5-4c71-a2fd-b888bf2945b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb4a16a-c8aa-4d2d-afd0-b409efbd398e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25beab99-e3d1-485b-b1e0-5b47a6696ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43324b02-a62f-4f8a-958c-9a8e32a349f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a997ac2e-c4a3-4397-b28b-78a6968cc303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72cea7f2-1230-42fa-9950-d5b149813f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a14558-1b70-44f5-9be3-93fb747a13b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b37d33-42f1-45f9-8fc4-6bba80fb7fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6e604a-44b5-4f77-99f8-bf9c880a9a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e5ee8ca-966e-4f69-825a-1b7e89d12a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c09ad8-8a34-4e77-b10c-0f26b296c5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513798c4-9436-4291-8824-133684e554a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdcf2549-10de-4e21-8ba5-2382e3a231e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6e1a45-ff78-42db-9669-146ee5d52915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ccdf2b5-cd9f-44be-bf63-149cafb9f202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf8f4f3-27d0-4186-83d5-9504f10504dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0433e3-c6ff-44f7-88cb-822cac932a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72cdc55a-86ec-4ebf-b17e-2336223280b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b89b31-ce87-4650-b4a8-dc924121e08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c1251a-99f7-4eaf-94ec-c56588637b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e66d83c-56ed-495f-8a07-567c35dd9c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3cc5ac2-55d6-4bc9-bb33-b68ab35fc5e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb491220-86a4-4946-8b5e-7951190ea8c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.145.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a307489-5b41-4f4b-b69b-55e44408ca99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.152.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6724dc-3455-4012-9aac-df93b4e78e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c2885e4-36c5-48b7-8190-d1a4ea0c7537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313572ae-4567-44dd-bfad-f2145b7774ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8ad9bd-5103-4a57-b707-4ecae0dfb810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.168.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7768875f-9da1-4313-b39b-f49e6dd27e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e50c2d6-1e51-4314-a2b1-3897d19b1b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.185.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2f675c-1520-49be-b2d3-1166ce69e55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b06de5-5d91-4835-ad92-7aa2dcffbbd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85a0d41-5ef5-43de-9b5e-12a628cda946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0287d9ed-ef4d-41f2-9ddf-63d87e395cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a976be9-cc78-4faa-a9dd-19a4622c6a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed4d4a3-63ac-44c3-9e18-598defb0418b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea866de1-5826-4a16-854f-230a78c0fd00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0145c2f1-80f9-4e2a-a7be-f8c1e9b54f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7cb3536-560f-4b5e-94dd-84f6eae6cfa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3900d6-499c-4c4f-90fc-7d9eef069069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3402612e-4580-4766-8732-3f756fcb757a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14b137c-ee97-4335-986b-a04d0274f1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a56fce4-af1d-45a7-bc73-cc5850eb71e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c06c08fc-613a-4692-87d5-72f672ec1c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea9898c-d691-494b-8943-75659a4129ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226d0992-5837-4fb4-bad4-d225939650be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7c5e77-b703-466d-8109-9a58e8844d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a2da5e-9f51-4f63-b760-38727dbd6a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a012eb90-9f35-4e88-a934-9c72dacd0fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced3058a-85e5-4a51-a9ac-9498b45a9bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ccb2cab-9752-43d3-90dd-e8a175ad19bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde2fc0c-8152-4262-abba-646d44d29523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632d5c52-e25b-43b4-b89f-e7691afdcc85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797d8ebf-b7c9-4df8-b5da-93d802491d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b4c6f7-8634-4262-a960-d84d03babba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd93235-a362-408d-9d76-33e251934efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dbf77ce-87d8-4ff7-8cbd-c38995311fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0eea7d-68d4-4184-a2d3-9021af1f85cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0ac750-813b-4ce2-8d43-e59c207feac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648067e8-6917-435b-beeb-3735afc264a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c38f2ae-0e50-46b4-9805-8c909c32ffaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df40100-d0b6-4fd6-8ec7-fadb7cb52645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1c9b5e-31fc-4c8a-a782-a4ca85f445ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a7c5bf-da80-4aae-b689-1de4dcf466ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb19031e-a9ae-4936-8fcc-76b68fad9133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18abe81c-4141-479f-a8f2-fc4b1d357d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1a6dc8-718b-46d7-a0c5-fd7efac0f496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e80480-63ae-4629-bd0b-ecc704c3ef2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0926c13-f5c6-4a31-beda-0eb1fb051b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1e0e3f-14e1-4c58-88c6-01720c8ed182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0902bec-7744-4e35-9ab2-217c715dea6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006b24b1-817e-4d53-b4ee-9cc18941be60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7844d8ba-e81d-4184-9c95-b49f3e3bc833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a288db3c-d729-4704-b0ff-da66af191e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f5df92-fd0c-4242-9a03-e606827547fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deef4c52-be28-4b78-94af-c92b04fbf8df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cedf5b4-f588-44f0-ac8e-bf9bf5b4a90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdffdfa3-54d0-4ca6-87d5-39e03924874f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ca17fe-ac59-4adb-9982-985b70c4281a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb36c26-8301-40a4-9d29-c0f56416875b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61063112-6634-4736-b783-90dcd87fce67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9acf633e-800d-4c48-9fc6-c9b44aae9789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb5dfee6-5953-4a60-bc0b-7db006ed95d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe8d179-9c52-4fcc-b278-90a36bc52dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1401b3-b653-434d-83a3-369cc3fdca3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577d7a7d-97f8-4633-82cb-2ac214ad5705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6cd88a-a30f-4e99-b43e-8eb20e30d566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfbfe9e-362e-44ec-831c-c4e8c18f05c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303dfb9c-a7b3-4fb7-b1e5-341e8278498e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198699a3-960c-4858-bf33-0a49191399cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.216.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391b5cb6-3fd2-4ebe-9301-67f2703a1c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b59ed49-8b06-4c8e-a6ee-23608871a47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62951726-8101-49e2-b545-fb56c14d64e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd24cafe-bc07-4762-afa2-11efb0290938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77ad5dc-472f-447c-a81e-484a56f38c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f1e31c-c6f2-4381-872b-9ba9d86b68b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab8fe3b-c027-4cfe-b59c-8027ea3010d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.224.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5599b9-0ec9-4dd1-b6af-3a52b864035e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.226.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8fdcd19-3510-406d-9941-a69d553f6fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d29b6e0-bdfd-4c7c-a075-af420c4d88a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.80.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52dbeff-5353-4897-ac08-94aa5ab1e891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.83.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2adaaecb-8bbf-4420-94da-ba440a2ffdbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6cdbf1-56ee-4c58-94fc-343ac428c17b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef5ef77-e404-47b0-8a13-7e5f80bc1e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9f015b-923d-44b4-a044-8c0bd8a3891a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.47.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6bda9b-e575-4c30-b850-750fd97bb6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.47.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915430b5-1aea-4f06-a7d5-7505f53c3524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.165.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05de312-5fe1-4843-bb47-0822ed52f578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d260993-9f96-4540-8b1f-d6c7bfef4495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.185.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa8029f-3ff4-447e-ad88-fdcbd800a33f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72af7377-3976-47cd-bbad-c06bcb2f28c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a64a719-6c6c-4f5a-839d-feeff5a36a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab6ae1e-f1f3-4b08-b1ec-9bb4f4b8e7c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.32.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364a87c2-1a5f-41bb-be6d-0701bb85fc59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.32.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5449f3d3-ce87-4d8d-a7c5-3ec07e46d114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.48.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f11c641-72a6-4bf0-b36c-7c149841a84e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.49.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633ca12e-b0f4-43da-922e-7cf280d32449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.49.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0519899-0b2c-4d0d-bbc7-58183bf2cbb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.117.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5faf6738-14c8-4888-bf4d-405a2ff06e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.144.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c13bcc7-1437-4af4-a0f6-c7d96383e4e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.144.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93a1f10-33ab-4880-8b84-92e1c70c3a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed7df7ba-943b-460d-a9f5-1614d47932c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--002e0c94-653d-4709-969b-d1930b045461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.162.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1d9702-70e5-42d7-8ac3-e9744fab658e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.167.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320c1f18-7d00-45ab-8901-fcccf7d26593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.41.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32d378b-df82-4451-8a32-386fdfb1817e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.85.246.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d9f7580-d19c-4d01-a264-5635d3424d21", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.128.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4dbbf7d-1eeb-4d99-a9f1-22d28600a948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.128.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfcf637-179f-40d1-8847-7391690255ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.153.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c704cc92-a2b1-4725-adbd-6dfc04db8289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.165.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca08903-bf67-4d03-9761-4088bb5014f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15720a06-8d3a-4df0-9e82-101d8bfd1fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67aeab8-7e97-4761-9411-a93c6706bb80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68122561-6cba-4b19-9f87-7214c3c3dd9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9f52aa-f4a1-4e88-835c-8b67946cbb55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abf0551-0eeb-4aef-b0b7-40520429c64c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7cb02a4-09b4-43b2-bd13-774cb344d72b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d0ddb5-914a-403c-bf61-8df6b642a775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819d680e-4f69-4db8-9165-2e827298b0cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947bb494-9d2a-4117-8159-36233b32f9ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765ebd17-db19-4b8a-a26d-39633627cec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5167cc2e-cd05-44f8-993f-7c1352874418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7991d5c3-c7ba-401e-9bd2-ed03ecbfd120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea9d9c3-7bab-4daa-8534-866398f29124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85150144-4381-43a4-8ae7-60b0f4256cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d063eea2-210a-41fb-9981-226eb5e26eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--271d1fd3-4998-416e-9f36-d5d2acc6b9c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e32602e-c32d-4d0a-b170-b405e9f32a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f068f029-3983-4be9-a71e-4267d631f857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--719d796e-27e9-4b62-9f8c-a09bb3413e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4478041-55fb-41b3-8770-e43f17c5fd95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c063d2ca-20d5-47e1-b440-f4487126c21a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52ea8db-6ba1-47f3-82b2-26a47f7444cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8563324d-6116-4d01-8efb-84f63d3c4b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a77a9cc-664b-4ccf-8c88-2d0ed3ab8c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded23d3a-71fb-4f1d-bd60-a844bae82eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149428df-7bf6-493b-8bd5-212e6dea25a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3133ff2c-a883-4a19-9dac-25ac0faa968a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4cba85f-1fe6-4c4e-a704-830f4d732ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91cb0ee5-5611-4bb9-803b-aa8ac60ebd47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf589c3-f1b6-494f-9ac6-2e70f2ed85d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0adec20-3f46-47c6-adda-336c8f00a47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c81532-3f80-469a-b3ea-40a11348b500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.10.46.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424b5c6c-a006-4c27-8a7d-4830ec53b1a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.108.251.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d62e21-825d-41e9-a46a-952511181d4e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.113.42.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d6af4b-b233-4350-a1ff-995667432b77", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.115.234.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84977e33-620a-47d5-9d7b-4fbe2d949bbd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.118.80.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b635855-8332-44f7-9a2d-d38a7814f198", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.123.53.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1501bb48-3422-4b3f-9634-e4983b638b7b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.125.169.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea7228f-6fbc-47f5-8a1a-4d79e8f39962", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.126.198.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90d0f1c-70e6-4117-a2cf-1405a2ed36ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.150.67.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255f5811-3717-468d-92b5-947f1d6ca4dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.189.14.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7ce9e4-f2ee-439b-9ae3-0919307d0218", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.76.138.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25627ab3-619f-4ad1-94d8-13fe4f1465d6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.8.92.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3fff01-8885-410a-8b21-8c4ab2e9b29c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.92.174.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7f11d3-07af-4fd1-8e90-9a1bbb714bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.110.137.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4343caa3-017f-42ce-9faf-e110d906d5db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.14.32.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5c81fc-4a15-4380-82cc-fc7cea13e721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.140.123.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b66c267-9856-44a9-ab20-d2fae325a51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.150.84.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1ae11a-e1e4-479d-8a18-e6a04c932df8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.178.213.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff88165-56b9-4b59-95b2-d9596cb7808d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.183.99.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16cfa1d1-6760-4043-9a11-d02a3717ea24", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.184.50.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255bdf6b-bc78-4dfe-ab54-3df5e2135460", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.189.241.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2626cd8d-4f7b-4412-bbda-cee7420b66d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.190.175.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978d9706-3ed0-461e-a09a-39e83ee89460", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.205.241.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6dda89-d504-4f29-88e3-68be1e7be80d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.217.12.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66eee73b-9fd9-41d6-a124-2523dcd4daf9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.217.227.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c57d447-7390-4de5-9ddc-d0fdf89ceaa9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.249.87.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa3656f-8e5a-4824-a8a9-b0d2fabfa7a5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.254.7.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8a15d4-fc87-41de-9c56-13920152013c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.34.175.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84597d36-b47b-4aac-b0ca-dbfd8ef554ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.81.234.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f782c314-0d3b-4963-8d36-3ac1ddadd4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.82.85.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed874402-c9c2-4775-8692-228fd4cb2370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4235088c-8e5d-4942-ad99-f5ac2c25af2e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.165.15.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2d0d7d-4ee7-43a6-a9ca-f515729502d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.183.141.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74478e4-84f9-4a08-babc-398f4abed88d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.47.43.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41aa63f3-b035-4241-916b-2c7be19ae19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.57.1.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30110c0-9212-4be9-8aa6-b2a0383676c3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.61.232.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6a0d4f-1312-4d0c-b1e8-8efbf998271c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.61.233.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba92406c-60fc-4676-8b14-3686874aea5c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.69.169.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0356335a-6721-4b3a-99a1-e78918145a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.71.141.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c47eee-c929-4dbf-9d50-0539d59c6063", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.185.198.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11913e5-175e-4b39-aa6a-a22517092fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.188.171.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9999e6d-cbf4-4ed6-ad34-92e915649cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.189.221.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4203c49-7444-455a-841e-c120facb8da1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.21.120.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3959d075-e2b5-4114-8144-5befabee62e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.215.167.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecfdfef3-3d22-4656-a538-b8388fde1f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.25.223.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f2052a-f139-4e24-a0ed-79669577432c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6cfa7e6-701c-4cc0-b1d2-28fff882795e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d8aa9f-3133-43de-ad6d-046e8bcdad1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51209b4b-d608-47bd-af74-4a8a6c5566ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.9.210.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a1fbb3-705f-4cda-a985-9999c05ee0ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.99.144.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e311b7-45d3-4725-80ae-09ebddf4aeca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.99.187.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4c7b57-9139-4462-bb73-4d8a1e462563", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.152.193.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2478834-dbc0-4cf9-bc72-ab2ece9f30a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.244.215.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816cf1ab-9c9b-4b60-a6cd-aae5f059a751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7623818a-582f-469c-aed2-27ad24e48e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee39310e-6e47-4734-97fb-4f1337c4e36e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42af2fed-55fb-4269-adbf-7d596b2ef3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2c2352-824d-4563-9f92-dcd832cdc0d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.164.142.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db81082-4eb5-429e-bf99-c1c23fce021c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.185.118.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb36428-6345-4b57-951e-18fead2bb60b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.186.136.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24e8ea3-1283-4c23-b6a3-573163abd06e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf86fe1-bfea-4ea7-9d0f-924327278d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c9b39f-69f6-4075-b494-5a60ad247901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502655c8-52c9-44f8-82a9-bfe12fb49ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7172fc-0eed-4e75-97a4-f0c8368d242b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f904d6aa-1357-49b4-984d-97984198f159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c074373-b58f-412d-943d-a6f236534594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f92133-84db-4eb0-9911-eed586922919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3794c54b-5138-4cc4-a9ee-d04c4c723a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a63f85-e503-427c-ad9b-44141f17ab19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76a4dde-227b-4431-888d-269f379d41c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--812dd3eb-88d8-4837-a0d0-25837de64f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d5e617-286a-4b82-b5d2-7ecac663eab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78bc3531-ee05-432c-9e79-e57b36ba8af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9558195-b0ef-4ca3-af39-8af85d35a702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb46890f-e80c-4653-92a2-3d9254a51433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c291763b-b692-483a-b336-f70001f06ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6265c3-bcdf-4a7f-ba29-01eb953dc810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70cfefba-9808-46c6-9bbf-9bdee88d41f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--285a1d31-0105-4b06-b2d7-6c513e4fb080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72446ed4-f860-4e1a-8870-28a26252ccab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc11c7c-5339-4b21-93f2-09fa04d390f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd960499-fe3f-4087-99d9-faf22d6fa371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc73c7fb-8cf6-4aec-9a01-17c64326c00a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--050d4f24-f92e-4337-aa00-dc4d92988b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a585750-624f-46c6-86f5-37bd8e40776c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5cedf21-107a-4a55-9aa9-b8bc7a975674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4604af9a-345b-4a6f-ba9d-5315c7a67c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8440c349-31ed-469a-ac0a-bd0dba0d3d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f04a98-5f94-4264-8180-2a367adcdc80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2c1e90-d698-46eb-98cd-1d7a9e35e829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f3f3ed-0962-42e9-8d99-c153f8c089de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386b8491-853a-49df-b8d3-f9ba4b0133d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55d42fc-06f1-4ec8-ad79-a7f46e89a285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6466718c-99a5-4c83-a2f9-3e5fe42ed0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dbb814c-584c-4d8a-b851-516bdecdb184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f910429d-c8ed-4182-b771-76907c340007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380263c4-1841-4931-af21-3fd82e203e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c2aec0-7613-48b6-9e2f-cbed9aeba4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dcb27b8-432c-469c-812d-9e4699f8c3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a201556-61a3-45f0-abfa-9eaf699cbc07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb7428b-8502-449d-8ea5-5bd1107162b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21f67ba-6f9e-4686-a88a-ac1f4788c8c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6401a481-aef3-4d76-bd7e-219614651eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6715b9d2-54bf-4e3a-a5eb-64c4a21e9743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb10f62-08f1-461a-8a0c-28bdcc96f120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37fb9117-de83-45b1-b93e-1d8e6176288b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa65719-5572-4e57-a746-baa529cff6e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7a2a29-760b-4403-af26-fa72e3784943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa862fcf-d5f2-4e4e-ba41-40222c4b052f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297322d6-81bc-4599-967b-caf01c85212b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0810c102-54d3-48a3-80b5-093d63a657f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0990979b-d166-4f86-a4b6-9a306a1faf4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ebc1ccf-c44c-4c4d-84f2-b68747ae82df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1503b6-96a4-4fb3-a62c-bbbb2a34f431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d051daf9-e123-4ae4-9aa4-9f3e02cb2ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575328d9-17ec-4280-b190-c2486683d17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce58870c-a44f-433c-9faf-6a6818d72193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efca2d4-75bc-4fdd-85ce-5752e009e655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f056a877-63be-4a76-ad14-d744aaab1f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f418f70-9914-4742-8fb4-67de8286b6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49de6a06-b76f-4c73-b91c-911b19646787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a8f0a1-5943-4bf3-899d-36f4eb3bcaf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8895690-efae-4446-ae3a-a4912224a0b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2ac814-4361-424f-b971-6132537c8c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c27b07-3e08-4f27-8078-8cda3bdbfc4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a6be3b-31b4-458b-b98f-8203665d5d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f49cfc-c6dc-4d57-a981-793434b6d1d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4ab617-3832-4b11-b395-82d1b06a416f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d100713d-e830-49d4-8a34-84a477fa0ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31fc7291-62db-4626-82fb-cf0eaea390f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b288d49d-fde2-440f-849c-49ffde52c7e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b76fa9f-3f04-4f17-9c08-2bf4ee9b57f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d11d78-8a4b-406d-bfb5-d820c35c2b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd92ad8c-1b02-4d85-a6e2-73b599492585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca3d228-1803-44bd-b953-5e89f301e503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab83643-c81f-4db5-bda8-c1c0d93da11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96100fa2-4195-4cca-bb30-9c540342fa25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6bd065-35dd-4efe-a84c-697b10f84787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c40805-606b-4ca9-b534-a0d3096da85e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09a7043-c99a-43f4-ad08-12148a76d773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57093ab-0b96-4848-99e0-5cbcf2c54b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce57e7c4-4f1c-42ac-bc49-61d198a31b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3418d4c-8c8b-4fe3-b937-86ea5e4377c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e747cda-ab86-4659-8ef2-bbb8fec56a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceec25b9-0252-4b14-879f-ff9bd9466755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f12136d-344d-4be1-af02-6f714332d878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63589573-9906-45cf-b35f-9724aca585c3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70022bc-9ec6-42dc-9797-3a090dbff48d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481500da-dda0-4c73-a775-7ae270dd2320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9aba9c8-f84a-4e96-8e63-295587152749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f19ac2-c361-47e0-a66e-040eaabee05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e05836c-4f65-4ed2-a234-6458acb57329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6443cc98-0ea6-4b78-b001-550410338c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90f57f2-3978-474d-b2c0-848b58068654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb21f23-ef4b-4bed-999a-dc977cd21e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e17320a-f82c-4e76-a43c-d51cd59bb039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ed7b7b-fc68-48e8-875a-6f1716e13b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d501f9db-11bb-4b07-8342-6c02ced30c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b647ce-9f27-414d-919a-17ae07e3758f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5790962f-7451-4413-b7ab-137f61f38cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4230cef7-167d-4c4f-90e2-0f767291ee6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6c9e07-92c9-4ab4-9f0e-180543096d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61763d91-1982-45b1-9ef5-8d9c31e3c4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc879e3-1b95-4680-b276-2d46ac6f7b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18507f0c-d356-4558-9a0c-60820aebe43f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34806e5-a4a2-4062-8f47-5fe5c4f0c656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c5a6ec-b356-4ac7-911b-00294dc21b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c50d691-7060-40eb-bddb-ab274939ffb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32b36ab-d793-4dd8-b74a-f2789234ac91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d190a6-53d1-4dbb-96eb-fc27b048ab81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f078f86f-cf32-48f3-8841-5514d865d45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae06799-14e4-47da-b307-de9a1f52d888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98607146-b8d6-4642-8800-679f92fd1fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c132a05-225b-48da-9143-17bf1348117e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585a21f4-3f5d-4e95-ac51-77f267b288d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72a31b9-977f-44d5-9457-64fc23d4c7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3912a301-900e-49d0-a518-6ca4effe3ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f117f7-b7b7-4a09-a1e6-228c21789732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95fbadf-5ced-4a01-ad49-57caac71132b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b33b8c2-2417-466d-af33-93658441b499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87793b2-f284-4492-adec-817072df3007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58aab18-25be-48ac-84a8-c8697b8849f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1390d9a7-c846-4de5-b5e6-ced8493fc607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9fed77-895d-4b13-8325-ad80e4ba170b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd769a3-20ef-4c6b-ac0e-34b6a249d51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2270fd90-73a3-4a1c-af23-8fed67af5d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01902ebf-82a3-48ad-82af-8dbf82bf6940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e87462-b915-412a-8c18-bfef0430b04f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b187b58a-a78f-4789-8598-b3abb813045b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc2289f-2089-46a4-8984-dba73dac315e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a43fda1-b08e-4b12-bd75-79cfbde17b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71502160-fbcb-4de5-a107-8197e9484678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966805b9-bc96-4c91-8a8c-587a6d12f0fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7849e050-8705-4c7f-a31b-8345e4c9b910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ba346a-7abd-461d-85de-afc6dd2bf4c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e7ff95-8880-46a3-bca4-250cfc41185b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fbb553-6751-4283-8618-b0d5489c68a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b08858-d9af-44f6-b2c4-eaf630153e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1166bf7-d1f2-4fa6-82fb-4029af026f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908087b8-cfb7-47b1-8181-9a6026d76719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a843f13f-f53a-42b7-8fc5-419d2309a95c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e242bb2a-c6fa-4231-8713-039d6ae16bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0696d37-decf-4ab7-a19e-ca1cf1ebf9f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12501879-8624-419f-ad26-9aa2aa547737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973f7143-ab6f-4a9a-bf32-b8df878aeb58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df89edcd-b5f4-4c9d-b3be-7f512dc6b421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857648b7-9b97-491e-92db-cb4706717d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f09be99-6b41-4889-812c-04793a4ab10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d31f11-c1b6-43ff-83c6-5cc0c422f78f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec572263-6eec-476b-8192-6e540b9014e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15a5704-f541-4847-b2a6-1e1885d454bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2103cb7b-6a99-43c7-93ec-01300935f4b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672b6d61-5631-4bb9-86a8-d73b50bed0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcdd722e-139e-4c0b-b18a-8bcb6c707beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a8fef2-a433-4f81-b7f9-f087551a7f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7af0b5f-0bf4-4c3a-b3a9-83e713e1f7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414f90a8-f698-4416-b4ee-7fcf7a49b203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5806fbd-799f-484d-a030-7542f87313a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59539d09-f23a-4b10-aecb-b593634caa33", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.237.105.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095941f3-d937-4fc7-80a3-1fe9b9e5868d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.111.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0e0e7a-839b-46f2-b89b-a33b19fe796f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.120.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53cbc558-4548-4e60-980d-1fe405db5a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.133.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e39901-0cdb-40e5-bc3f-339f3ee9c3bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.159.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97dc6bc9-95e3-4ea1-a9a3-edecf8c21ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.18.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10da9044-ee40-4c5e-bdf8-130f6286e1ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.196.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917e38f4-25de-44be-bfe3-ede73f4aca12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.202.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c573df-79e3-4ea7-b0b7-b802c7c8179d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.206.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b053755-67cc-4b5d-bc3e-87c4ddeb8487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.224.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11715d94-bb53-42f8-80d7-08cf05651ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.55.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7a332a-ae75-4b10-a082-63d3d86378bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.57.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe384ee-d726-4692-856d-ca7d822c7f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.61.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a00713e-f66f-4585-9ece-6f8e1c0b78c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.66.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--620a6b08-f6d0-4164-a8f7-a87d4ff24d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.70.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4d7712-55a1-45ef-8980-d904656a12f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.72.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613c324a-fa66-4d45-ab2f-8a2ac56ea755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e5bf00-056b-45c4-9649-b2a178d94189", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.62.143.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb080ef9-4929-4680-99cb-ee71a57dbc25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.11.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1057a541-4dbd-4358-a189-293a3bc7062c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.3.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69bd8df7-97f9-46a3-b868-b2f679dacd5d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.84.206.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d348dde2-0eb8-4cd5-97b0-b59507c4fe1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.198.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--665c8778-68ca-4ec4-9e2e-926fb1846e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.209.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9ba845-8dd3-4037-a00a-fcbf58af2f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.222.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ab9c62-62c7-4479-a6b9-696925fd0ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.230.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2649523e-1607-4a03-a4ff-a36086b8a412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.231.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78124e8f-06b4-4a75-8e56-af11bbd30df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.242.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3588a1a3-dec8-46d5-9dbe-3865bea7f8e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.246.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6684ac2-1790-4545-8df9-5301690c4df3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.12.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0bd956-d613-48fe-ad16-9b06815019bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.33.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31030ab-ad82-4741-9b47-708edf08e06c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.47.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0e1fbd-ab83-4437-be14-940d7d5d731b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.79.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--664d5645-e1c8-4e23-b375-ff8ab966dfbe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.8.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a870c6b-cf74-413d-836f-349e72d7375f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2019-5418, CVE-2021-41773, CVE-2021-42013. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.197.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74a05c51-0a05-4cee-a0af-2802d963b881", "relationship_type": "indicates", "source_ref": "indicator--9a870c6b-cf74-413d-836f-349e72d7375f", "target_ref": "vulnerability--33c5aaa2-79bb-4d86-bd4d-10d895084dad", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--203200aa-2333-4613-9103-7f7467105266", "relationship_type": "indicates", "source_ref": "indicator--9a870c6b-cf74-413d-836f-349e72d7375f", "target_ref": "vulnerability--ab3c0f78-a5f5-4522-b5e0-6c6c486bb35d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27b8498a-1125-4f53-9846-a88124d80094", "relationship_type": "indicates", "source_ref": "indicator--9a870c6b-cf74-413d-836f-349e72d7375f", "target_ref": "vulnerability--e7c3766a-5e2d-41dd-a466-61c956def038", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448b1124-7f3e-42b1-a342-cc82bc424972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.226.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1009e6b2-0eed-41f4-ab0a-1bd8bb373b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.191.158.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aedfe6e-5be3-4cb5-81fe-e17869e12790", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.204.64.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--599b0962-6ca8-4f42-9067-387e5a1d1e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0338e4c-7a74-4bbc-808b-86965566afe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2efc8432-cdfd-4ecd-9a34-48a04ec5b573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319e90e8-99d1-4218-9e70-5df8cff53310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb6bf60-3e6b-4b03-a2db-1386704ace44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.109.10.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51463fb0-e878-44b3-a09d-c08129092cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.109.189.255']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d81d2b-e4b7-48a4-80b1-8cf0017a5689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.112.107.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd260765-176b-4de1-a459-4ebd884aa34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.115.214.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8181b0-c20a-4eb6-8ce6-234c2b42fa46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.115.228.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1833e2b1-6459-42ac-9a72-23dde3749f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.3.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a8eed7-d290-4c05-a0ed-20009d9890dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.126.4.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7997ed-d5a5-41da-91bf-36ee979b2b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.126.81.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0511974-86d3-4564-8f5f-3e99fb895e04", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.14.89.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a3d829-27af-4af2-bbf1-cc8661ade8a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.33.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51abcee-4419-4cde-846b-7e70c1ab85c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.34.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2baf79c0-1174-43d9-8225-c96f7cf2533d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771bc866-2cfc-4085-b71a-52e1f1452e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.145.54.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8cea6e2-281d-4a37-a423-aeceedb523fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.217.225.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf46a27e-8644-41f0-8cc2-34884e2d548f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.101.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bafa5dd-2649-47f3-848a-045e7ad0d8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.98.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5adc7c-7a31-45bb-a6f9-d5c4209a560f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.250.233.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e04a496-dc97-4ad9-858c-bd3d8bff4e57", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.120.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6584a1ad-3060-4190-abbd-e23837397a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.123.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20b702d-8b3f-4949-a3fe-5ea6464063e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.200.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b070d13b-05a6-4014-80c9-317c668754b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.214.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce0df60-c4af-42d3-b04e-2f003de3e921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.215.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2506d8-e0b2-4ed1-be59-7c26c1956d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.224.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbba399-3b6c-4fbd-97fd-926964644e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.225.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eaf07cf-81ad-42e3-b8e4-5691978bc880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.243.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb3c05c-48d1-4a14-9f1a-42eae73316cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.246.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfa000e-cb36-49d3-884e-0216976d7a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.247.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc2dc1a-b8d6-47b4-aa47-84a4e1629d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.90.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5aca21-9b5f-44e5-aedb-f3637e722637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.92.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d214bc-de19-4dfb-a7f0-329a137da42f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.50.172.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34540d71-55ad-4c66-afbd-8b2d1722f8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5764ed-8e2f-4582-9cd2-a5c16db19c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec62ccd-2e71-47f6-bfd6-729c7be47288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.132.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55bc0c92-ccec-43ec-8704-bf0e8b3a2ec7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.180.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc99b74-bdad-455a-b9e3-f9f1326c289a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.185.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332934ea-a796-43c4-b27d-bafdc1add710", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.184.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c21876-fb64-46b0-ad43-9eff1986b091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.185.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abffe604-e677-40a8-807d-6f1828d92a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.187.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1626e3b7-ae7c-41d0-96bc-02721c9c641d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e273ddaf-8296-44c8-a793-2f2c35c068ce", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.189.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296b360d-fb74-48a9-b646-fd5d664a8a63", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.190.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9711bc-b402-4ba1-9db5-8f86371c2bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.105.67.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f941ba-d0ab-4630-98a2-25d548635fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.114.19.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8f943d-1317-4605-b2d3-3b9f59ec7ea3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.186.239.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96dfc251-3360-4dd3-803f-224c1eb27b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.210.155.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052ae3a1-1adf-40c6-8811-e9c7853ab40b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.212.136.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d541101b-d12e-49b4-84aa-d6881a36ae61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.112.82.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedb66be-5b76-401e-acb4-f93074fd11fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.180.105.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277a414d-0ab9-4656-af2e-6d5494048184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.195.43.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20411edf-5fbc-4291-a5ed-7f747f2140dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.225.139.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e21796-5451-438a-84fd-91cc713d888e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.23.246.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedaaa4f-7a46-448e-bf10-66445cc6c3c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.232.210.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95f0085-7b19-4ea6-a9a5-761d6e45b891", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.253.37.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53a0b70-63dc-46b2-a3d2-9ae38c8cae10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fad1afc-b1bc-46f9-bc6f-0dfcc03083ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.46.177.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08827aca-e1af-4222-b317-e8b1b0c3fe44", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.51.132.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e65d1d68-ae18-4c8b-9fba-078d01288777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.90.188.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb8200d-cf0f-42dc-9f25-59b18efd8d69", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.100.54.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9b685c-1253-4960-b987-4300bb637de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.102.40.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123505f6-8d4e-4ddf-9430-b6e77e169d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.108.130.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a1c208-faa6-41f6-b29a-12fdca4d4030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.112.19.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1845bf-edce-48b2-ab6d-8186c3f88ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.127.90.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02243780-0f3a-43f4-8ae9-07fc69b28ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.105.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628cdf89-8ac3-4629-a096-70b154c81767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.14.247.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa3933c-bf01-4ff9-9862-0e66337ae081", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.154.234.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d6e895-9259-4a77-8817-1302dd72c88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.216.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da78ea70-5c1d-41ce-b4b1-6a701771aea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084aa53c-c448-464d-a7d6-5442afc31150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c44ff25-561a-4992-aecf-9aae9431f7e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.227.209.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045915d7-b53c-44eb-92d2-4f663fbcc012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.227.244.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5caafc-cad4-4568-88a7-23643f6951db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.34.14.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9f32b4-2e5a-4f97-911a-a2d993bb237b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef0fd4e-a4be-403d-84b2-054489615aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93491693-2bfe-4fae-8c3d-509dba412f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7b929b-c4f5-459c-822f-f13453e37d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b283ca45-7696-428d-b1a3-01b504026f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d873f0ec-fad4-450f-ad77-ba8af52d1111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b1a4f5-433b-4553-9f79-8ceaa9f94f04", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.195.81.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2d6d51-5cbc-4cbd-8b04-d0bc3217645d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.199.46.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6e6dde-5f71-4d89-888a-74b9a98fe26e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.199.51.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18eeb7bd-9e33-437d-a7d9-74f5bede1adf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.202.230.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96546ea6-ef65-4985-a395-abacccc6cc31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde1a190-6b58-4133-b0c7-3d99d9ddfa68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3188ab-e415-4800-82f2-cace64145d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083da6a2-8fc4-4e09-bc33-a6f718a235af", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.111.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e381a7-6ad2-4b0b-8423-37d869038910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.66.85.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144d5c9f-dd21-4dad-9e63-19aaf36f0d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.105.171.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f6e0cb8-2d65-483d-8499-22f5865f767d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.106.179.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a28ad2a-01b2-4697-8546-3a0be083d4ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.128.152.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228f02ca-e558-4f49-b082-1e59f89ddc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.151.165.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6aeb31-c46f-491c-9b9e-1106f714a33f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.155.93.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8891257-a965-4ffe-8911-4676814923d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.172.177.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd39ede-300b-4ca5-b935-daf41c1259d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a159acd1-f170-4e05-9c54-3c40815ee5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec6cbf1-4b89-4de2-a36d-7ff4f41b16be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3cf98f-c2d5-4da3-a2c0-6d32ef850527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6071d2a-8691-4dce-9a27-91d4fd4e5241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d1f0c0-4461-4531-9172-49e6de78413b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c437065-aecf-47aa-a037-5db0573d801e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a9d405-4cdf-47eb-9839-9abe5429aa6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93f3224-6503-41a3-a83a-6ff32176f182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3e7c81-bb1a-42d9-8c1a-59f8931fbce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be648e8b-20d1-4162-b1b9-7aa931750141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b49dfc2-677c-4059-92c3-4fd2fcc4599b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13502f5-4a13-497c-a5ec-4a67baa09e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02474a3-2001-441d-b1b5-49b30e2598b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd03cdd1-fc24-4f30-b7c0-20ca2403aed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5911d455-d0b1-47d6-9b0e-f289366ffa2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a379a6de-e5b4-4c08-ad61-b94f6c632359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51b5857-0b84-4151-b8ec-8e6ed012ee18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d56ce49-9a2a-43f9-9cc1-5e3147d42981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f3cda8-6a69-4920-8823-61d7ea911ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ea0518-33d4-456f-bbe6-0535d3cd0ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--578e5b6d-30cc-4eec-bff5-572b1af35821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929ea7fc-e65c-46a9-8e6a-b364564f5216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7da2bf-bc38-4bc9-85f4-d5a97cc47f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22298b60-3c51-4c36-99a1-2f497fd39c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ae3256-007a-4efe-9eea-5281d27dc761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2e3000-fe94-444e-b616-e68171eb291e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e22a8e4-ffc9-4f62-bd40-fd6b11361564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec16411-ecd9-4918-bcfd-82f43be11e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb69c92-2d8e-4e19-a1ba-6c3747c7912f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ee262d-514d-485e-b446-ae1ec00e9fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7687cb34-0dbe-4b5d-ae7f-9fbb19ec98f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.225.152.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bff521-6dcb-45d3-a781-3f78655faa8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73cafe6c-5805-49db-940c-fcaa6ab2019a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efb59ad-1e12-4234-a371-29012a985951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02e7b71-7143-4f51-a317-ff0df207a1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a109ac76-4f99-4a82-b5fb-238f283816c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6ea216-152b-46ce-a276-57fae3fb69eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be05a9ad-e528-441d-942a-e1be502a49c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.66.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b0e002-2e0e-4ae4-8cfd-8432cf0a31f7", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.76.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716c0ee4-40e2-40fd-9ccd-7eaadb05175f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09fcadbd-f069-4b32-ab2f-a39f5ab77e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1e0d5f-9429-4272-aaf6-14a14ece343e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3569229-eb89-484b-a068-96eb970b89e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607e6da4-0e10-44b1-9769-7d5d683f3ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a89ff5-c5ea-44a6-a15c-df272148fc6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0160cc52-bbbe-496c-b740-55ef025680db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507a3c7b-5a2e-4b8b-a573-a2ef12bb2763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e83a98c-0bdf-4488-94ad-0e79303a532e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1877a1-1171-400b-a0de-d779edd54bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f7d285-3e72-4744-b4af-6e157bd26b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99d03ce-050c-4837-9ed3-f0ed7a162b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d4727f-be13-4e27-ade4-852af79b8bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cdbe4ba-a377-41e6-b04d-44d46e29867f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52688796-0740-4d30-9a39-c7d650056435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c73fdcf-3a52-4dc6-b074-b774021fad02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86a4b6d-81eb-4da9-940e-e4df74ed9f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0859a9-28f6-4769-904e-88833b55150d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76362a67-52a4-49df-a848-5b90df427e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492122b7-1461-4896-9b05-3aa412e0c783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba110675-a7af-49f0-89da-04874b275de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4b2ea0-ecc1-4053-8ac7-1ba6913ce025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02867f5-d831-49d7-b0a6-f6bdc9be2455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3998e21-eefc-4953-9b2f-177f6bea4845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516167cf-df67-460c-92b7-309bdb356be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2bfd37-3c8a-4b2f-9512-cd8d4742959d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d701e5b1-815f-4dbf-942b-3dac12b966b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ce1942-b972-4d04-ada4-7086b0b37f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1792988-6482-4aee-a80b-42be9f50b57a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5eb4af2-ebc8-48c0-8103-ff25cc7dd655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13fd4851-1169-4ee9-9c52-30175e11a01c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e830151-20ae-467a-b412-dccd39208b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f5b253-fb69-499c-bc07-adf8d2b26003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d611d2-966f-4f94-a97e-848ed744a152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e2796e-5baa-4b7f-aa5b-9e8610448b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b83993-17be-4c28-8e65-94f24a955401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c83ebb-627d-4265-8f48-ea10fa9d01ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1398e658-0579-408f-9c37-5e967c284e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d85de4-ba5f-4526-b06a-81be1b6b24ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f845e1b-f1e7-4b6e-9a0d-a29311ebdd0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee68f622-8eb9-4dd5-9380-22db8aab5344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3ddcf2-a278-424d-ba7d-35a59bd16fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81cc3d1-c637-49ff-8612-f0185c0ea53e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7979d362-cc81-4cab-b564-ceece1181d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150f1868-767c-4c2e-afd5-d686f9c08a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5316da02-62a2-4f05-8cfc-18651f4d72ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732dff85-b5cb-40de-8b35-500371206712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d0d640-7a0d-447a-8b86-7fbb0ab0965c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e9574f-e55e-457d-8313-9d7cdac57ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a8ea68-5953-49a9-931e-310f604da876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b963cd-5f85-4e19-a86e-10e729f272c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5df6af-9d23-4003-85c7-10a90fc32797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2610e1-45a2-4309-93cb-2a8901772646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3121072b-525c-4607-97fa-8e67c14b0522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404fda82-b503-43d5-b1d0-4be3a2bedab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3738f7e6-7b0a-4fad-a5b1-45de6ffefea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122fa5c8-440a-4a4a-beab-80b0bc42289c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0779afcf-bf23-4961-ba6d-880cb5b05569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9dc150-d6d5-4462-afd4-3496ab2dbc01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988504b8-9c7a-4865-bc9a-b451f48ff913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b692e3f4-6604-4016-b2c3-5df5a6f806db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3a389b-4b98-45ba-b0b1-dafdefee4487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ddbcd5-9d91-4400-9b56-e62597fb940c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee5baa3-ed77-4eff-8332-5c5b24eca92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a0592f-8b54-460f-9c2d-b5ab50583932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f288ab-c2a0-47aa-bcbe-de72d7775d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8280c63-57e1-41a1-ae03-9cbd4b18d945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57997b45-ed14-4e17-a5a1-e6c091a852e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22862abe-b330-4f69-bf43-12df38dbb787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae75d59-5b4a-4fa7-bacf-0d0d32665f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ddd8071-7a9b-4f92-94ba-26386c64b62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91bcf6d-f659-4135-be0b-826276f0da06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c435c58-75a7-414d-b223-74ef74d4bc20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59983d56-34bc-48f3-8390-7a52304ddef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c1c150-aaad-43f1-b479-e9a475b3b4f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a5c655-269c-4dd3-8292-b5adc0b4a470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822e2720-4ed6-4ea4-8ade-32f5f7a55501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877729c6-6d84-453b-911e-347a57dad488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb7135e-8c1f-4c9f-be02-b6802e2a6482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2ab7a5-faf3-4453-b9f1-9c1a20a1b97f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b68934b8-3bba-4fef-8c9e-09d707bd952f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb71ceb-6b7e-4562-b47e-c6edb50b8269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d1f90f-0ff0-4d67-8ca5-55f2075ef0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50d8665-73f2-426b-b0de-5eb5aecde54b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f550e545-734c-4c57-bd9d-d68349a35f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278ded78-d2c7-4391-9744-e3d3793661c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad50f827-3061-4e8f-a14b-179da379e615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff660440-4279-4910-9465-2b152611c841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e609de-fa4d-461c-9716-031c5ee7162a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7141f469-b314-4305-b724-d828d58b9491", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.45.50.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbecc82-d4e4-4df8-9a23-d06e654618a5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21a77ba-1396-42f0-a5d7-db41447588ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.8.156.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64830d9c-6739-4c6e-b0a6-702ad7c32f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af3d2f5-1914-4832-a39a-01192bd5890a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38948c5d-a1d0-449b-bc9c-a456540e1bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97279b2b-5ac6-45f6-ba58-f27988c93b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb37bbe-e0c3-4401-9929-c4c9ec3d4296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebc1fe9-1841-4d92-a4a9-2ae3c88da8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.148.142.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc68db4-4d77-4c85-bd0a-aeddf2b4cdb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.15.207.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a200725b-7d54-4b78-93b5-095ba57ad24b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.174.225.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8bf645-3e97-4a88-85fd-7f9572220ca1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.196.163.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8148f2e8-8fb7-4139-80a5-a5c4de349eb5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.202.29.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d3c602-4c62-4e2c-8dd2-6f1cdd1158b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.33.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27749653-58aa-4613-b463-63de08c16a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.218.249.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccfd583c-9445-4c15-93c9-343e03b85701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9903446-044f-490d-99aa-e43143cb2910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.64.102.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936fbefb-b6c8-470d-8dbc-6a57dd149f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.1.220.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96aef7d9-5e5a-4af8-8eb0-c5961c9b2f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.158.114.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41cea369-8554-40dc-a7ba-6bc8e708e27a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.17.184.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14835cd-f63f-46f3-8b85-0da213bbd438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.203.76.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0291d52c-587e-4e3d-a463-14a3f928aa6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.205.95.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--530cb0c9-e9df-4b1e-adf5-c2022f93cbf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.205.95.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd90af8b-2baa-45e1-89b1-fb6a6641c6e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.206.187.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c5107f-bc75-4a78-af70-a4e25f7d2f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.219.229.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65fa1f9a-819b-4441-b68a-f4d7a952c02d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.78.131.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da0d298-de33-4d7e-a450-c34946893e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.9.233.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd59985f-e594-4a9c-8ba4-08f6b64e884a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.93.190.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58dc9ba6-254d-4b18-bca0-d55975cdc1f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.151.176.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ce8a5c-99b7-499c-97c0-27962aae65e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.74.166.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a325de6c-7ed5-40b1-b751-571b3fa25d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.121.206.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0c19aa-7702-4916-a67a-7840f8dd7884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.133.58.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b9f06d-4648-4d62-8b1d-4151108cace0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.154.133.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446b726c-02df-434a-98ee-96b5ef603bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.232.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7bdaef-8563-4c60-814f-3b6dce53868b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.232.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3943aa17-b8b2-43e5-b48b-16575a3ad300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.233.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a43507-8ef7-420b-ab10-204cc6fe6495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.179.255.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5779c505-f87c-45b5-a6e9-ce551c07dc96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.1.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fdbc106-3d97-45f2-89fb-f230677d899a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ade8ec1-b929-4163-a1f6-67f00e78407b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70fdce42-d0c4-4c50-bf7c-86a273f2ac7f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1562e5bc-74f9-4d28-8983-515c7fa9ebda", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd56db90-8ccc-4951-a798-c0ad70a3e8ff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd35bc87-3637-4273-aac8-3ff3028200ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b147f9dc-a13f-4e58-b2ce-73707bb9dc00", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8567e0cb-133c-459c-9093-97fd8b7e1846", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5443e9-6764-4226-8e0f-d94ef70b4ade", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af323c6-53c7-4cb6-bb15-ea5cf7f9e729", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e425c388-0a6c-49cf-b76d-13d36f5bfc98", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b789a2-4587-4640-81d4-2e4f66636e13", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a2be58-d612-4ab0-a8ca-6c705d3dc1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b63fad0-d121-437c-bc0e-55a7dbe0d0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3b7659-15df-48c5-8704-963787481f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9633584-235c-4fef-b216-b4856be97ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd333269-1a2d-4f37-b5ed-141e38fdaf5f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.205.122.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5389f42b-b3c8-4aa9-b809-5069e800fcd3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.247.224.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56fc32e-42db-40fa-b1cf-9aa58f0c0f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.247.247.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c31d0a-c082-490d-aeb6-df14ee0574e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.11.4.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d39d2f7-9f7e-46f5-9d41-de6800af251b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.11.51.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baad7858-6339-42eb-9bca-8afd36794f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.130.29.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4702ed-e0f5-46bb-a5be-0df285fbc925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.131.139.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7603d5-49d1-4be0-953c-a80d17809e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.149.178.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8adfce-b6f3-41de-b66d-4d90805e2769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.159.119.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c31a38f-cabd-493f-a8d2-15dbda9d8f62", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.194.148.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc24e6a4-9951-4aeb-b3e5-d6120c40e745", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.107.156.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30e87cb-a937-4170-bea0-ad7fc41caf5c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.110.147.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd700b46-8d29-4312-bcb1-715ce8b58441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.119.20.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc60d1ed-9b74-43f7-a673-3e7a6c22c725", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.121.250.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2bf0ff-cbca-45d6-ba00-dee6eee448cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.200.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f03199-308c-4467-9fc2-35b428ebbf29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.200.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b39447-0111-4475-945b-dfe8b7e1dc10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.13.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a535a87-dc41-4331-b437-f3b3d9306c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.219.131.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd466aa8-7305-4e5f-a3db-dee4f7b39b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.242.206.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d05b8c7-c739-4a4f-900d-13bd05c3087f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.255.174.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962fcf38-0622-431f-a863-14cd761fef5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.74.198.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd4da819-5032-43b5-a6d1-4f4d888c548c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.97.112.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3b4c2a-8fb3-4a43-9aff-fc0c8d00c8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.98.122.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ca8501-16a6-4445-a933-17933b13ca5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.99.31.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6713cdf8-dec1-4f1f-b31d-9706f9b99f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.109.49.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5442c3-7892-4d66-8de5-5c307231ed05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.42.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09162f33-16c3-4027-8707-3b36dd8b3025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.44.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3b5b90-3912-4bc2-8b52-3e0989440d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.77.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6046ad3-722a-4d41-b5da-b1d8e1bbeef5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.85.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845d7f5b-0dbd-4594-9015-47afb113b565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.13.122.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6843749e-1405-475b-b748-a42730929936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.85.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5538444f-9418-4f0b-8176-d6f14110434a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.167.168.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfccb96-ba71-4009-8142-cfdc588d6cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.17.6.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0c5232-58c4-4f98-9f6d-f95c4e02baee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.181.17.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5d7a7d-261c-428e-96dd-05c19f6a0aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.161.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2e302f-bd63-40f9-b3f7-ebbb38cff0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.166.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b2cdcd-0200-4658-b920-5690bc93db9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.174.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e7539ad-d864-48d1-be4e-b5fd17abf1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.183.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4084617-23d5-4c3b-b952-c04ac5702d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.190.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6442dd42-4519-448a-9860-3e86e42ef162", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.228.161.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7346e7d1-8d9a-4463-a1e0-e7116da421da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.68.7.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d994f9-5808-4d35-98cd-63664398c9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.83.114.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec33bcf7-ae4a-48b8-9506-9e17305b3dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.102.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54b8901-aa46-4ddf-a3be-6258cc4265ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.102.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8084d6c-20f2-4922-8938-b1372d3e0ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.109.45.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35cee13d-9f9d-474b-aa9e-73d2df7d0065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.155.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c059575f-9fb8-4801-a164-b027c69fccba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.146.236.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b516ae06-069d-46d7-9ac3-d7e573481e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.153.216.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34bb6488-ea93-42ed-b05d-b51ec319349b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ecfd861-7011-403f-9946-a3a127bdcbc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--578d454b-e637-4f5d-a0fa-1380c5e11962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.225.160.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682ac017-9bd0-4463-b5ad-75c3762a0db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.234.101.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef6b3fc-34f9-4444-b0e0-6c9db0cc626c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.234.95.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f425fbfb-708a-4b28-a500-0b8511f61691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541ddfff-0257-4a25-900b-7336614edb9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.13.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d40a82-bf05-4890-b1d9-02ad3b1c0710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cffe236-e783-4625-bab3-8fe7e76e31df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.8.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b721988-73e7-40af-82ef-a6f0d8c0fdb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.241.145.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dca071e-5fa4-491b-be47-fd3d1d57f49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.251.141.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b186910-e291-4985-809f-25eb183d92ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.254.204.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3c72a0-2b93-449f-9c06-7393ddf9316f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.27.13.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df3f938-504b-4513-bf8a-e5283ade00da", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.91.97.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d66036c-09c8-4aea-b937-8d5a515631a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1fabcdd-de3e-49b5-a7a8-40c16d201044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5984e9-6bc9-4627-994e-aeb2618e5f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.104.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d49bc4-fbcc-4011-b4bd-408539caf4f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.200.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb77013-8cd5-4907-b70b-861581424d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.23.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41112f32-4da1-47c3-aa29-6602dd59aea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.252.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76629cc6-d614-481a-bdbe-9b26e83b5efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.37.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5ab2e4-a9ee-461c-9b4d-9a15e2f376d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.92.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6defa6bd-442a-4271-85bb-1e51ba22f2b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.25.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676713a6-8d1c-4ad9-8e4d-a31212892468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.97.62.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb241e8a-8350-4975-a1ec-ba0b1c861fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.84.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5400c8e0-2e41-48fa-8943-47cfa4e382e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.152.122.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd5f2a5-af2a-4e31-93a3-47bac9a473d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.152.55.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad538c8-a438-4ba8-9cbe-ad20e445b097", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.152.55.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c167b4a-b759-445e-ba2a-20a7cb03e1a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.152.55.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--121dcd09-368d-4736-8cad-394265485a34", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.93.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f8808d-72be-4f20-9f39-dac173835e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.95.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4834a12b-be5c-46bd-ad8b-c91bcf4bec4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.97.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1583fd6-61d0-492f-86d5-72763aa34e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.98.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f08ab7-2a1e-4874-8a64-06fa440f2bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.102.51.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4ac8eb-b502-458f-80d8-18ff0c1146d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.110.164.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d44a7a5-aa30-4216-980e-4aa96e995e9c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.147.224.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5377157-2535-4b6b-ae6c-4e37b358eb60", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.147.237.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f1ad632-99b0-47c6-9e3d-2b13d6f9e6c3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.150.188.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d909e048-bc04-4021-bc9e-25e57890e5dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.157.241.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c280b23-9fe1-4a09-90e8-557cfcdbbcbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.16.236.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf76ed6-6540-46d3-8ac0-2ccb26934431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.17.204.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4028a8-1e90-42f5-bec6-bd4b77e43f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.18.79.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4e8ec3-dc6e-402b-94d3-56900d97a832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.71.230.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8d5fa4-8718-48ab-b3ab-65400efce7af", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.3.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd882af-4041-410d-a42a-e57f7eb116c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.97.105.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669d54e5-a083-46d3-b500-835bddcfea10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.125.168.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7f4a03-296d-404e-83e1-344e76c57eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d48543-0498-48e4-af3f-e51891add9b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5b7729-89d9-47bb-a4bb-8979e34b2f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.213.226.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ebee04e-03d4-425d-b6c9-15b156f94bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.70.231.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33ea1e2-8a14-4607-a63a-ec1794b4d06e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070c01d1-58c9-4578-9cbb-28d47260fbcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.16.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c29989-6b45-4881-a86c-54eff960124c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2447c5-16dd-4929-8294-6659f7b99a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.85.30.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52164281-f6de-400d-bbb7-051ed4a04ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.86.101.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1bbf0b-02a5-44e7-be1a-8770f111f0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.86.250.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5831f2a1-1b50-4294-99d1-2911798772b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.88.155.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbec615-52ad-44e6-848b-cee1a011c1d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.88.203.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d4a418-65da-4383-8b33-1da06b0a7571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.89.113.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48075ffb-7833-43cb-a508-75d2259701bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.89.209.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd43ac2-1feb-4aff-a789-5d5c7117dab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.89.231.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c5a2c1-d2d0-4047-b3ff-bbd1fa5ce9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.91.175.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a97cfc-d7fa-46e3-879c-1442e8530c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.93.81.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd174ba-ac00-4892-ab08-fa83f4a15165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.94.186.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf89ad4f-1101-4ca7-a767-10e8a1c5bb69", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.111.178.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e5f81c-7983-4e33-83bf-636bc4e2759a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.132.90.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9d6c7e-13d7-49f0-a8cb-33ad0d7773a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c3f9b5-9d81-4252-a1bd-04f657eabaf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca6f8ef-0d71-44c5-94f2-9b674a5ecd7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88604dc2-ab8e-4fa3-9d22-2c37c754bf1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07dad04-475a-48bc-8270-0ca1ddb9a42f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a3842b-3a90-4db5-a5e8-af1c104df856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45bc8a9-dfac-4f84-b688-0bf472682bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e598f9-514b-40b8-b798-3099029f5a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84fe2798-e24a-4550-81ad-cf4333ea84e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c01ab75-ac30-42de-9b6a-d6e7a1d22e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471d9415-eb4f-4616-9376-c719ab005887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a669f9a-ff02-4b9e-b427-0d959f8901ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9f7ce1-33fd-49b2-a187-9ac70467dc4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b62e1f3-a5e6-4fa6-9127-ec61ca9e0c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c97fb7d-06c3-4e29-bfab-aaf91a6a967a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00feead0-6a42-422d-8f43-a6f6fccee0e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e046c0d-f259-48c2-968c-8c6b3152f473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659c0b1e-58ce-477b-b2f6-f238a2887dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e040af7-12f9-462d-b9fb-58ff1efc7fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857b1528-c904-4815-b857-b079a6b6edb6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.148.161.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cb5b58-df3a-4d58-92e8-eff15f4c9608", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.148.28.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd61bb8-e625-4acc-8a8c-e9dc9132a73e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.164.142.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c95093-c841-4c6a-9479-6242dbe69d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.220.3.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1680352-8ee1-447d-bcae-7c3dca5ef6e5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.223.143.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d4cdde-9c34-4962-9718-d896b23ebfe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.204.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1aed70-44e2-425e-b9c5-24a3fc40e59b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.184.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22555ef-f381-45e1-b421-4737840dc838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.184.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c3d2a8-e02c-4b4f-8811-fa527c71e39d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.184.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd374f0-2a1e-4347-810a-12507d1a718c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.216.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a3d531-423e-4a07-a0c9-5027eb3afc99", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.58.87.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389b03a2-fe9a-4d09-926c-a29bd1ccd840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.118.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f71ecee-5d38-4ca5-b9d7-acbcf2cacca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.160.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b73c63f-24e2-410f-b167-c9fdcf8ed2bc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.94.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8001011-1c57-4d11-9443-7fc4fd8a359b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.7.66.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5335d5e2-9fb9-4d7b-aece-e091caa67ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.70.105.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e5d878-a421-4fd6-bc24-a7228d303a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.70.113.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c69f45-9c42-4c7b-b543-a553e09f9883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.70.91.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787d00fa-129d-4ed7-84cb-ca899a2afd6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.76.49.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0688f7-cb39-419c-939a-012198c04e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.199.191.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22efe91-0f92-4878-b5e7-b2eb5c55d1fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.236.165.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b088b0-928a-4592-adda-3358d98c01ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.1.189.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500cbdfc-9342-4a72-9b2a-d3b25650e822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.105.254.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f6c06d-ed72-4e84-9d94-00f0ec568d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.116.216.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5206c717-b096-4f5a-b7df-974864a591e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.118.77.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eddae4b2-3015-44f5-b9e6-0ec80bd570e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.128.106.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6edc7b79-7f0c-4722-8ea4-b1856041d243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.119.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a432652d-86d6-4313-8372-2e0060951bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.122.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f9b80b-6c26-4a62-8f09-6b126d2a3d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.13.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf4a338-0e5c-4214-93a0-0fce49e025d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.66.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ae1aa8-58f4-4890-b905-d1f245e13537", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.96.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c59c33-9791-47f6-86fe-a0a3c6b3aeaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.99.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d87a6f2-b059-42c9-b874-bd5adb91352e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.157.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0859b30-8d2a-4ee3-b1bc-2be8f509c77c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.163.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2628bb0d-61d1-479c-a0b9-327c8ed912e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.24.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c5bda23-8f32-49fa-b59c-b005c4f28afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.240.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a1c495-825c-41be-8ccd-852905e9d942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.246.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48f24f3-eae8-46d0-b469-8923dc6b2ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.40.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63df1519-ba3c-4a38-8bb2-1b65edf3c225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.84.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ae64d6-c2ab-4b7f-a122-a29c486e62cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.92.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c261ec62-2330-403e-9b24-6496153316f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.93.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af08fce6-0b1a-4795-9de7-769c0b5e4c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.137.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ac0129-dc1c-4e41-9b08-097bfec659ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.142.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d36b60e-06e8-48fe-a1c7-b19b5590e648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.148.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaeb531b-7cd0-4712-924f-aa9d7e1cb2ad", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.163.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9c308d-0c6c-433e-889a-daff86098ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.177.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e589f22f-23f7-45d8-a200-db5bd2b625a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.185.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea96661e-bea7-4ddf-bbf6-39ac6511246d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.209.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be498a6f-a580-45a7-b785-8641f314ed02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.212.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9657ec-7181-457c-8d0a-40bf0f8bc6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.230.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9ff773-c163-43e6-bb0d-ec6f66b05ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.58.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091ef02d-a44b-444b-88ca-67a9de2eec6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.66.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce4fac7-8b76-41f5-a097-e5a302d0a2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.7.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954d0cd0-d2cb-4425-8829-f04d71dc9dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.75.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d938ab-dd4f-4553-866c-c3f6f949260a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.9.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348c268d-336f-405f-ad47-66cdcc122527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.90.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9d9a10-7510-420e-9904-7a2562a1cc99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.93.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760fa9ca-1da5-459a-84d3-c72d713e83b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.99.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afd8277-413e-4086-9350-468b1a980b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.173.47.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebc5fb1-914d-4d78-8cfc-eb4d7e68ecfb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.174.49.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709557f4-0d6e-46d3-8c42-6bec2cce0052", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.175.118.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6931e102-7789-4bd8-8887-7b7f0a89e525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.177.101.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09a2d0c-5143-46c8-a741-495b32078bca", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.18.62.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0c33f5-c31c-44ca-bfdb-0bd5b222ed77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.187.242.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa48a654-6821-465e-95a5-1c548395f003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.193.119.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8005da45-8283-4166-9755-5a1a69f026f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23894086-4e15-4c3d-ba9d-edd786242ab6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.204.28.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1e8361-c65d-4501-b84c-358498665d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.205.139.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa6303a-aa2c-4bc3-8ab2-453f5586e675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.205.154.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdcdb27b-a10f-4526-9f2c-3f4d207c7011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.205.73.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39a3197-59c4-492d-b11c-43304610b648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.207.109.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da63ec99-d3f6-4e7c-a81b-fdc1b0147a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.212.124.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c158641-cb52-4f8b-baef-f999cf07260e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.124.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4261bdd4-a20e-4190-9735-62a678ef0766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.186.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90f6faa-5125-4637-afc6-d23257955e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.202.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ec8ee7-bbc9-494d-8580-f96b782e0908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a27bfe-8077-4a27-b1c2-e9c721105c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.60.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287ac833-596f-4cea-abcc-5f973aa96899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.229.166.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2894e338-9110-4da0-ad2a-ceaf74b23c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.233.122.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6f5381-7a6d-4aec-9164-fbddedbf3b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.234.82.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04751154-99d1-4ff6-9657-71b6bfb32e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.239.247.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9273e0-08b2-474c-ac42-8c5f95a4cc61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.27.160.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab46fb02-5d0e-4233-bab7-cff21ed3eed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.28.46.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1c46be-c96f-43fb-8868-07b6bb74ffa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2002-1149. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.103.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67b81c38-40bc-4682-aff0-0959737a6416", "relationship_type": "indicates", "source_ref": "indicator--3c1c46be-c96f-43fb-8868-07b6bb74ffa0", "target_ref": "vulnerability--b3a43a8c-4055-47cd-b848-be1382d8bafb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e534f6-3b84-413a-86f8-0d520ce7e987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.131.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193a7be2-69d7-4a54-9595-988c57e0aa46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.136.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4625a267-e97a-4cf1-8a85-bece37e5cb6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.150.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d963cf5d-af2d-46f3-a16d-9a3e61c14a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.155.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0b1172-2357-4839-be10-34b8557c6214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.186.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104a3f1d-6594-4708-91be-346c475fa90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.190.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbaca125-a093-44ed-8a15-139a96d169a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.199.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef20a906-dc1c-4a0b-8c18-803b9541e409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.201.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03728f99-dfae-4639-8f29-2ebd151d962e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.243.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c41661b8-4c41-4cba-9351-2d30a8439f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.31.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c27b6851-a661-4835-a70a-1b79b5682be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.58.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00c6adc-e228-45db-8092-f01f466012b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.40.97.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfeb8db4-cdab-41e1-904b-634a11e5bf3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.50.10.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7844f9dc-1424-49de-b421-ff100ab0c616", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.50.176.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6341971d-6a36-4f25-b96f-7c5156754437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.148.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38fad28-28b2-4a52-b747-9e8e9403adbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.166.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f90a26-6506-4931-bde3-c0bb905f80eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.171.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1902cea7-c691-4bd0-a163-8eb0fa5bde52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.186.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e800bdb-e625-4004-8d7c-c5b62720b947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.213.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7ce845-299c-497f-a3d7-96058dd3224f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.236.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54bfb34-07b3-4cba-b3dc-2e2164630fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.139.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520e1e4e-e2dc-4507-beb8-c3e8ba8c30c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.192.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e07842-6f8c-41ca-997d-f73bca23e359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.192.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81b0a8e-766e-4ba0-95eb-7d2f72679212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.206.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b95e6e8-70cb-4e60-9a4c-45ec5622207d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.235.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d88593-03f9-47d6-a7a0-3a81825b3bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.245.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a5cbce-e7da-43e4-a399-500ef20162b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.0.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82daccd9-0c8d-47da-adbf-919330489e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.104.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16dc3ddf-6d3e-45c5-9452-cfa2a8b3be71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.119.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c159c962-61da-4187-9205-7cff4af04551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.162.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0063d842-adf6-4bf9-9e53-3f12c3a7c82e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.173.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92b271d-fd7d-40c8-9d20-5f6a1a9bd46c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.222.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a564030-38ca-47a3-8b27-8667c1d30e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.225.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d29df3-97f8-4b51-8afd-dbc45a4a91b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.227.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afb2684-f02a-4827-bb40-b64d4ea457a6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.26.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7716c011-6a8a-4c0c-a89d-15a2241b1eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.37.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a654fc-03f7-4a24-a4ad-de02a5a3a9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.64.234.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10569888-3fa4-4ec3-be83-81e057060e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.59.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03540422-a0e5-41c7-a8fa-ae5e6debaa98", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.71.30.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c4b52b-2ff8-4585-bc20-d74b391d195f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.183.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8846cbc-2ccd-4baf-baa9-c525e962342b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.23.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab41794-aa6a-4bf8-ac9d-aa35eea9a070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.24.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750c7ce6-519b-45f5-97a6-c75cba662c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.253.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb989e4-02f3-4b57-bdc0-93e48733c7ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.29.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59108bcf-f1f4-44f3-8286-01041cfb3b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.3.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708dad8d-b4c5-4385-95e9-de565a4674c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.75.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd32ee03-440d-40e8-9fe5-450643fda3ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.116.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77da802e-1753-4f2d-8f4b-4a77715994a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.118.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1e9946-8c49-401c-80d4-f58952a22b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.132.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d91dee79-f869-4080-9d75-462bf0430336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.149.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f0fd57-b4fc-447e-977c-798c224cab98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.165.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b01af7-57f6-42a7-b839-bd3c134aac3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.71.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e71e79-d484-49c2-b223-5c12fae7224f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.110.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e1d021-3c27-4d9c-ac83-0fe512c3bdb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.120.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7485790d-fb6f-4ff3-9f09-a57032dd6e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.245.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b0e448-7904-4190-8787-d9c406002d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.252.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546d80f4-0322-4de8-a3b0-7139082b22d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.36.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c135f2fb-e2cd-4518-8796-0b4ad05d131c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.55.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58cfa979-2f27-4cbd-be91-ed8b897c728d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.76.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fa948c-952e-44e5-8919-3bb930e23453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.100.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2892d0-2c23-4ce3-984d-738457aea123", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.112.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348cec58-d331-4425-94bc-96f6596129d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.124.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147da42c-8bdd-4736-8d87-b4c4c6ba4e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.183.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0faa3560-9eee-41e0-b558-37634fd3b69e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.209.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c0cd07-2103-4d98-8051-d1c2b47ee585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.248.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01dfb482-63ad-4d8a-b260-2de408efcf16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.41.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b9f5e0-8fcd-4e15-986d-efc559c36a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.81.72.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7594577b-802e-4903-b745-c8d3acb9188f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.84.211.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5046fbaa-9062-4aeb-87a2-267c726a5329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.87.64.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf71839-7aa3-429a-93f8-ff6ce3635827", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.93.128.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875c8152-860e-4875-bfef-f80ef48ec252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.93.54.0']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa6b456-4e1d-4065-9703-7d5f7c4d6fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.199.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc122f8-651d-43d8-bfd7-a9ef6c0183f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.241.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964420ce-d015-4d8a-9ce3-b3096f063aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.153.53.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f32f95-4188-4e94-b851-3f58cecfd1b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b1c791-9e5d-4741-a66b-3419e1ce1eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.175.190.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a52af5-8673-4f30-9d71-7fc2afec4288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.185.62.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd79797-a156-46f9-b198-e5df7a418cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.122.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e39ea10-2e63-4989-b71d-6222a4c0fd4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.23.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca9b34b-70df-45a2-a8d1-894a479287bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.34.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52cce5fe-38a3-465d-9c43-ecea8ec67281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.46.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac4fb0e-9329-45fe-9f12-ff2c863428d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.49.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8bf4b7-6b69-4ae7-b069-343e9f6c5ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.6.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77af6ce-994f-485c-a444-5be3d533aa2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.73.0']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5b889f-e91a-4b09-9be4-38df87842869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.90.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473cede5-826b-4cc5-ad82-056846738045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.194.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b597f1e-cef9-469f-8fde-0d01452f035b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.190.158.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36866f9d-8ff7-4b23-a788-1e5765c7fc78", "name": "Malicious Host", "description": "Observed: OPENCLAW, WEB activity. Sensors: cfglobal, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.192.232.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:openclawglobal", "protocol:openclaw", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbec021-1a35-45cb-b534-b14c377245aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.109.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409e324b-c7b0-4846-b9bd-e50713d7fad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.149.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1ce4b7-8bed-4627-962e-e4e116e4877b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.163.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958d3fdf-d3c1-49fa-9529-c73150e08328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.243.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31f8c76-0632-4fc1-84d7-13726dbbf109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.32.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cdc8e37-a5a8-46f6-8e3d-206a9e2f44a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.38.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f94e9a4-bb51-450e-a665-779f2a08a369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.55.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e1f5c9-73cf-419a-960d-d8b1c240789b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.70.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1739129-b083-4a3d-8349-20206b2b8d55", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.92.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f84bc1-4c07-4406-8266-218298e88034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.199.67.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d5a347-6f9c-4548-9fb0-bdc42f5304d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.199.74.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3a9723-a8dc-4360-a465-d5c9363981f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4ca924-f2ff-4444-a2fc-ef6bae359ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824aeb42-1306-4092-a5df-ff808e12341e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c18227f-fb5a-46d7-a04f-d44ebc864d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8019434-85ae-4532-b36a-5bf727fb30b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e42b3b-6b3a-4304-a198-67a7cec9807f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e7f715-43c9-4c43-a817-5d37b2b72774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cebb70ab-b66c-46db-ac1c-6c4c521ece81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fcfec8e-68b5-4823-865c-8fc5bcd70aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d864bf-4a6a-4810-bbf8-d48e19f032cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f52b19b-c485-48c8-9521-dbc3cd053f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a79bf65-409c-466a-934d-eea16a02c494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8894dd9-b9d6-4081-929c-3184913aa91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41b4f42-0224-4fb0-b129-eb5ae8213180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dedd4f7d-bc7d-4842-bea8-e8c7791a1256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a05d954-c71c-418e-8bad-230fda4011e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f517f021-35d8-4213-adc1-54c81a7c01d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d50487d-ebe5-4476-8599-29908642f737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45226b18-7d47-4c91-a92f-24e8647b9df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451728ed-2d75-47db-82f0-d1d48928ed4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee83f056-bcc1-48fe-bead-a2e5a1110e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4446847-c0c9-44a2-82bd-dfc3a0440f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74bc09e-1ab4-485e-bcc1-8ea3c5b28f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4027f838-6997-44be-aaa8-75ddd21a91a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33a5b05-3ebf-4dab-98ff-89ec2f282ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814ffde6-5301-4fa5-9d3f-67e8f41c7676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb7a303-77db-412c-812c-4e0ce7a551cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0624faf-c6fa-40d2-adf1-7c2ff6966edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12171e4f-0e7a-46be-b2f5-204290205d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3eb4d4c-1cbd-43e4-9c5b-bb81322e1a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84030ed4-a25b-4694-bdfa-b6bc1931eb3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e165d9a-7ed0-4d0a-8bd6-8c5f9e61f369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2898a60-3e4d-493e-8705-bac0f43cb09e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8107069-deb7-4a28-a935-9f21fbb57c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37eea0be-2b55-413a-8b43-52a6a1171668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850ea200-2869-4af3-b21c-835379beb577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69207973-5d5e-48e7-9d21-ae92407e517c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281e0582-485e-4ebc-8e06-d582b3b4b41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ff7810-8b58-47f7-b18e-d272a184f15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcaa5380-26a1-479f-abef-a658b7a89b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ec59c6-77d4-46df-bc00-b2d0b7637769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5dbaf18-4b17-4d5d-a3d9-a8f92cbbad3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483090eb-5326-441a-aa1a-b4449233f79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4f39bc-4291-4afd-942c-b56e3bc7666f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397c3bc2-7e32-4880-9edd-dc7ff9db17ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b056956-86e3-4de2-a75d-4354f0dcade3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3969688-7ae2-4a8b-a9c5-697b7e06dbc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b6d7ca-d16d-4073-81c9-7199ee60064b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6acc29e4-2a5c-4c26-98b7-dff92e395798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4fc8a0-a1cf-4f19-8a7e-b3ecd156370f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fb9eca-108d-43cd-8004-242318ff50d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8edd49-e21b-4fdc-be62-39b49e6198b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6d95b5-c70b-4672-979b-c94e1c0299f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e48e354-decd-4dd1-8de8-171504314c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32a29e2-ee38-45ac-9eff-39c90a72828f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d058d0-cdf4-4531-9e18-4f48e4eaad10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0cc926a-39fc-438e-8d0d-589f92a5400e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e7b4f4-fbd4-4847-80aa-318351686df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d543da-0f24-4f9c-af01-86cc5003f09c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf3a010-c504-486e-b6fd-cc85f8683c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89aa05dd-db94-4334-a9af-30d6c2790389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79bbb7ca-94ca-480b-be3a-e00931113589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a00a10d-98f0-4e99-8e20-de8609c9a569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4369389c-1abf-4f80-a81f-a9dde084d321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bcad3d0-508f-4084-8602-b7c3b57554a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523f4dcb-1517-42e0-9b3d-cab508383f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a339ccf4-1d36-4a7f-be29-6106fb86e0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f1ad47-bd6a-4084-ab0d-8c8e69c35862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2209c9df-f8ab-401d-9a68-a730273f85a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1a781f-7e64-4b8c-8945-436694593c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94b453d-0a22-4366-9bb2-33620bd14170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7318584-d414-48be-a0fd-d5b128e80c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052e7a3b-4c26-439d-ac68-e8ba74caf0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20618cc5-e53c-4b23-8602-592bb19ec66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf2e73a-1e44-4f87-8a3c-a6eb7d5d587b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0e8b01-1ff0-40b7-b0e1-146060dba8c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5beb2452-b12a-4b27-9c63-fc74843bfec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a07fed-0064-446e-9f00-ee413c44d253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe317b18-59be-4fc5-a9bb-cc97a983ad85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f075cd6f-0b5c-4f37-a908-c8a45b9e8c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907efbcc-d9c4-4512-9304-3575332c9622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28eed2a6-7ad8-4efc-949b-68a18021d2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8fa19d9-075d-4cd2-be3c-479ab07154c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0b09ef-4795-411f-abea-b09e8df022f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6a61a8-ab61-40e6-bca5-b7abed163904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4760877a-acb5-4e54-ba1d-6b298cc426c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2845ecac-825d-45c1-81f3-2301d99dcf90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c346e5f-3cce-46f8-9a53-ee73eea21d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c974505d-6f46-4941-8cc8-c357b4e13a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f3a36f-047e-40cd-8c7b-2c64b666b2a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d084256-847f-42d3-9a66-cf65a05ee4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5db485f-a6d0-4775-82e5-d7323030933e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18401edc-7b86-419f-9dad-469b41ea9aab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8fa392-c918-4e61-b5fc-cd416245e5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21222601-6fe5-4f83-bd8e-969305c74272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42533508-08db-41c4-8db3-4533ac283f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a314939-0c09-4247-8af5-52c424b99a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b8a2e5-b767-469e-a645-5cfa28191256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e178e0a-4870-4d3e-93f4-2caa1053b91d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ed9989-b808-4922-864c-86bbb000f1f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90f5a43-c209-479d-a918-96e00854e21a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa9a7d4-e4e6-41c8-98b7-d042f39f1e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce62c1b-3532-4a37-9e9b-b3731e19ecc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1da02dc-edf3-41c4-8c15-10dee69eb3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--145b94d6-a883-4473-9ba5-13a642a858fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f46a5c8-8fe9-4e5f-b132-3e7064daa88a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d405e310-ae93-4144-85dd-91bff00cd423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c49c1f-3c5e-4a13-8a94-10295442d207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0c7c04-691a-4e18-8f9d-5291b7adfeaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c221dd8b-a4a5-418a-bd19-307bb7488732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3615fe-49d7-498c-a399-267cfb0590cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261e2701-f4ff-4711-8dc8-4c520530d181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7315d00d-c1a4-415c-b089-4e775e2dfe65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884466c8-e0f4-40fc-8717-84e1c13efc2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9bef60f-f06c-4889-a2af-6713e0d77b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76668746-b252-41f7-ba88-9847a44b6bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcdf51b9-0662-402e-afb0-a902052fc69a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbdebf56-7f16-4ff9-bf70-42461af5aae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f0dfd4-7ad4-4c37-8ada-4dea6bcc7b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b0f550-433a-4bf4-827f-a927b1c65185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e79183-537f-417c-8587-02b8b74c6e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b92733-c2a7-4197-8fb0-60d26350f6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d9556a-368c-4859-abde-ce117f5c857e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa3a95d-de65-408d-a1ea-ebd9c6798ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9738c99-b340-4f89-a750-b090fcb9212f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210ea0ee-f927-4b4d-a124-92258f8271f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1c8d67-b9a5-4213-ad43-c270a42e84a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e1d36a-27c4-4695-8459-261053333b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7debdc-477e-4ca4-8b30-d540f37b8f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e80057-4cc8-45b9-80e5-e5202a1e6cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ead6657-b536-41b8-bc63-580588a42c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9243489-cddf-479a-af4b-1b58aec80ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66bc1372-01b5-4dc3-9518-0f244d3271e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f0c74f-e17f-4dfd-a7eb-d67253bdea93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773a5e90-17e3-4714-8165-cf00e868153e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326da7a2-eea2-47d7-8609-a0571baea744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4ff379-16a0-4a60-a513-a9ef3c722d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--812babc4-42b2-4c18-987e-10d20578d4e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f4955c-8df7-484f-9525-938fb2261f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a87c8cb-083c-4bef-a5b9-756f8a5b87b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95fe5888-0411-4a50-a9c6-3b55dacd9cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da0185e-5b0f-4e4b-b577-af4934e31e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbd3497-3771-40e1-a7cd-6ce916330c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1c931b-018c-4c88-a237-f71f61831f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac706e9-ee43-47f9-a2cb-0b6ce6016c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003010be-6499-413b-9b71-57b9e8d41862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a637b4bf-26f0-4f51-addf-a2405d6cee3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5df659-bcf6-4739-a5b8-0dde1ad63fb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec01457-1eff-4f86-8521-6fe669171e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4f3f5d-4d5d-41a0-a088-472b3d3ff482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6426ff-96af-4592-99b9-1933818e636f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c491ed85-262a-4bdd-b136-1d041463edeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838309e5-4dad-407e-a382-642093f24766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f00965-dbae-467b-b9fa-e21ce64a01f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7988ff76-49c3-4284-a316-9b6eebd7ebce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf3f529-6539-4fc0-ba85-263f95935f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbf4eb8-d5d9-4e6c-b550-1f0375e53c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b2fc92-48ca-452a-9f4b-a2b309479579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e9393e-f1d0-45a9-be7d-e2ba995cb118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d176bd5-0285-4498-8e59-dde4308c9640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4bdcac4-f4ab-4596-98b3-fc0d6b8eff36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd17fa6-2f32-4a5f-b503-292adc4ee402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb7eef0-69f1-48aa-b05a-5513bf45ab12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0622511-f544-406b-ae9f-53d8b4fde6b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5475a657-8aed-43d3-8a75-432cb6d80020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf67d2a-7b66-492f-8e5b-5db8dee5eaa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bcddf4a-5df0-4760-81ef-0b8ecf87611c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338f8e02-ccd0-44d5-9576-6696c8ecb748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcd0838-5591-4286-8a59-7dfd0e492a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5668a2fe-d2e7-4245-a09e-16c90dd1fd4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03848ab6-109a-4a0f-aca0-8a5a95856e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee7c0b2-72fa-4f6f-87f4-1114a80aa26b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9c5cdb-3a76-4c59-bc41-d0670edb4551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2754ea8d-21d4-49d4-a4a9-9e1dfc0c827c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67af980d-623a-4ff1-b66a-bb35682dae39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b817d263-1558-4a31-b551-c2deea36eecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d452a175-5a77-4271-8b0f-c4db966e461e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc2a43e-e4c5-49c1-8236-db0406e1beb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29258dc-bb9a-441e-8519-bce2649b6a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb73933-442d-4cb8-b0c5-58b0b94b5073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8445737-2740-46f3-8903-6f4a2e308b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d679b365-76be-4f40-8e16-853c6d5bb682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a5aee8-6419-45a0-913f-f5b57658de5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b929a52-030d-4b8b-87bb-c594d01fd609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b1b9ea-b2d0-4d19-a6dc-45937df27f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d4dbf4-d955-4ad2-aa3f-3b7087c06b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43094739-aa66-491f-917f-e0cebc686ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e5d843-542d-4cda-8d0a-5275d6b2eab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0b3845-87b5-42b7-809b-0f3a94b74c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed34ed4-9707-416a-b11a-469b5459e11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590ed080-7c12-4fdf-b2d4-5f9116a2fc82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763844db-7a3f-408a-96ee-3379e40bde2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06883354-edf6-43d0-a02e-869aed023914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f02c064-220c-419b-9981-371e20f84c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b784cb9-fe72-407e-8ba3-ca64d19927a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d463d5-5821-400c-a1dd-7ab757a1e3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0891f7-9d37-4390-b505-fea2997de3a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9abc48f2-0451-41ac-b067-99e474fa2618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faed46b7-d754-43ae-b920-8c15f4505615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5ef4ac-3288-4753-a8dd-776dde1fd96b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d364a6-2318-4eda-9b26-e0cedfd3447a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc00ca68-f304-4283-8a26-18bf7460a0b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88cbc49-601c-4362-b640-4c07bee09185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec804a93-7621-43fe-a731-2ab0a44a1435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2624e2-6b8c-4c46-b2cc-b08c87e69e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60310052-6394-4d43-8a58-adae362744d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7eff689-d55f-499e-a790-eaff74f3ea51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a121325-4672-4712-8daf-7d6db308535e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa21cd3-084d-4a3d-9cd6-d86c0dea21a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d17af847-ccf9-4ab8-a7b6-c7c0a026a6e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe223a0-6716-4530-8c8e-7fb6cfe527b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad971628-767b-4666-a659-94cb29a3538b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c83d09-b626-4389-8df2-626af5ef0666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883da01f-6f02-4e98-a710-f063d8f74453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4adf6b6-72dd-4e50-b3f5-727f1633f390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0273089c-028e-401a-b230-ea6a5b194e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fc1a8a-a9a7-4097-b97e-1c0c73fb62a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5a5af0-0b6a-486f-945a-0819943c9213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b2af93-dff6-4fe7-9ad7-aada30bb597b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17904935-7ccd-4b91-b26d-a31350e28125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efbfd188-f31b-480a-a922-055d11cb2f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7a8f4d-6d97-4d49-bd7c-5bcacb662edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0d946a-d738-4313-8698-08ba6052298c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04a3250-4cac-4002-83d6-fab2fdaebc84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7039fb0d-85c6-414b-ae72-8b61c92169c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0bfa08c-18a2-4d40-b92b-809af278694b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f956b4a-1451-4fe3-b737-ec6e52a38e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--accba0ea-6089-44b2-a67b-44595301ef27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aba6d3e-e03a-4bdb-bef5-c881a553fd53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedfe58a-a1bd-4cb4-a58e-6b25abe1aba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3921859-1c3c-4194-a4af-70c6210e0b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47beb4f9-4755-4098-97ee-960d92fdd79c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d025bbaa-54c9-4fdb-b8ff-2cac7a2b4930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32456bb-3271-4e50-af6d-9a5cbb4c11fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d263bf58-3e02-4269-aa36-eb920e085f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b082fb-7bac-485c-841c-e480806fa69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f98e21-969e-4d15-b5f9-9670ecdb76c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d25b969-04e3-4fdd-9b39-2e09827c7c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ed7a38-4c2c-43e6-aa8b-cf801d541256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76b46f8-6940-414d-94bb-cc0771107104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7ce6ce-1dc8-4aaf-867c-d7c3809cd8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9be9cf2-8ba0-417e-8d9e-2e42e1ed4886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8c1aa7-045d-4c8f-9094-8ab1e852fbce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c6eb2e-a563-4008-b3f3-fce2010a4d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884d955b-b051-41a4-8ed5-33d973d6c0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c10820-9dcf-4a71-b9cf-79c8ec6565ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b69b3a1a-8379-40c3-902c-b1337ef1a432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e9410a-5b25-4f3f-beed-ef00ee089b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010d1c3c-5155-4891-ab73-d41f2e2a31be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b71c86-733d-416e-9c02-afdc652653ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d3ab6a-bee4-443c-8d72-b767593f1e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48fceca6-12ae-4aa1-accc-579098b35945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89e24a4-b369-425e-bc5f-01aeceae759e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5255603-e5d4-49f3-954f-e5d23ab1525a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446ee71e-a3a1-4847-801d-d46e6693b369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e8559a-47b1-4be9-9923-0917b38efab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdeeb7c0-f662-4607-bab5-a5c9c4fa5672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad451fbd-e464-4980-ba47-099646d01bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e9bdde-90ac-4abf-8013-44621d54056b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9950947-1e64-4dc7-b490-af24a774d207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3427b3c6-6f21-4be6-87f0-cfb536f75d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddec6102-f881-4181-b4a1-01e87f0323a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e402db57-9a2d-4b1c-992e-1cf562048434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10bc408f-a812-4f02-a807-5a8ef58ce3e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c79aba9a-861c-4798-b6e4-7cb3d71f5a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c9ec08-8c4b-4d09-a974-9c7086f9cd45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7a4e5f-ab85-447f-a5af-7061ebb21e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66eda70-79fd-47e8-a48a-2bb350509905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc13145-16b5-42e1-9c5c-e3440a5d6790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--239ffe38-b065-443a-8f5a-84e2a91602e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ac6a80-e839-462d-b3e3-c5fafda112f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95ecf3a-ff4a-4f54-b632-edcf3d732ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19eeab1-8716-4d10-ab35-2b6cbff914b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e84884-96b1-45fe-8c40-39b505444652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85227189-d5e2-49df-84fb-8803653f602e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee2c912e-88b2-4e1b-9079-9527ca232b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e719ba-7160-43c9-84f4-5234917caf28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835c6e0c-6fe8-499e-86d6-896b03a6260b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2330de53-2e81-4337-8d1e-e66fb5638fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f6d29c-34b9-40b8-9c08-afb333cc0e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2a9255-3ca1-4f47-94f2-2bbcf7744d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4946c05f-8124-4fd4-b687-fa6d93b37aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba0f6198-536c-42bd-8896-a237d89d6a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2fd28d2-b374-4cd6-bb34-55b313912d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f395fed-3cde-429b-a0d4-a811b3415296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a05e739-374c-4664-89db-b14afc8739d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5851b8-0eae-4a78-bdf4-78b746c26ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2094d3-341b-4a58-8c5c-37042df0303b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c8d7eb-4086-4523-9f3d-d008d57e1b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d761736-dce7-4893-a20d-1832caee7101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6229b6c-04e0-4016-9f31-5560261b4fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ee30ce-26af-4e3c-aec7-3a3415e3016d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374b2fcf-9800-4ae6-82f3-a010d93ec0f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce63d52f-ea57-4cdc-8a7c-d8d9666f61ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d709b9b7-8334-404d-b778-900c4c125cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25531140-7eff-4b20-96d5-89b7e0914a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e40c605-a6b7-4bf8-b7b9-fdc16745bbc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3183be9f-31da-4494-abcc-c9dbeb31e815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a69287-7629-495b-9d6a-fff87328d84d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699c6c86-1982-4aa4-bad1-1af66ffeb5af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1bb3ba-6d21-4893-88bb-d11ea74519a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759c6869-81c3-4113-ae69-bc83c8df28d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74267652-7431-43b5-b945-97cd4d8c8a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8968539-3d96-4ecf-b518-3ed02d2e70dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125948a1-f5c5-47f8-820b-9231787ae421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6480a27-176e-4325-bf4b-09d139af86ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9807b73f-0ad6-4b6e-ac2d-d6f6fe4daa46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25b4c37-b750-43c9-8c68-7aa04d34ccc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327b1fb1-6ee0-47a0-9b04-c5ddeb4dc7fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc2ae45-e6fe-4651-bb85-7bc7ca357315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbafa1d0-7a89-4533-bfec-0bb0b30cd370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72e4282-7b6a-47eb-8a8b-26f7ae563cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f923a0-45af-405b-bda8-2c0da7ea6aca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4618b693-4788-4668-9f36-83e904d04ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92bd9f4f-77c7-4ebb-aa21-4ad01881cb26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84fcc857-320f-4166-9813-5fc577953a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9539aa15-c597-489d-b505-f8572d90d269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77336ef9-c5fe-4a6a-971c-1850221145cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e24acb1b-676c-45d3-9e3e-1d9c79ec1e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de75e311-3fed-4771-97ca-d9582e682677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff2c4e7-8008-4021-8ec1-6ec06d62924b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0887c0-05f7-4fe3-a9ac-f4e2c2ea15de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79816fb9-1721-4882-8779-f01e40c98ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb0d790-79f1-4a4a-942e-8a6b3fb736ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9f42f5-4ad0-4025-8319-3522f253e124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71cba46c-8b40-4f26-bc81-e2c3a9f22a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94ea23d-2109-43f9-aec2-a0ad37c4f400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062f3267-8ac4-47dc-b00b-cfce6ac76d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c5f81d-83ad-4453-b677-676e7dfc36f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63572c17-887f-489c-ae28-6b3a930097d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db70fc08-a9be-4235-8412-199b728c2a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e2bee5-c3ba-414c-b49b-37dc128459c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98596cc9-c3e4-4abe-b31d-9a5a96e8ae2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b4b5d6-5d4b-4869-aa65-caa28e75055d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76fee752-f694-4c3a-bb23-1075d31b5f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3456f856-bdda-4951-b714-d4c30675be17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b915758-f98a-4579-a1fb-4cab5500bd3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ff4c60-a2bb-44d5-a944-07bc62f73afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0dfb6ff-e512-41bb-8a54-dc00cc94647c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209cef79-877b-4288-9928-9380377441e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6371457-8185-4dde-8449-3eae13063f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18af9dbc-56b7-4286-9132-b33b846aae5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6b7836-2ff2-415a-8ab8-d27254366129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2de44a-e623-4dc8-b201-91603b116779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7b8ef2-013f-4240-bbde-9739b05f7bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--484397eb-a7a9-455c-b8f1-5fa30ef524a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2ba974-a98c-487b-82ec-ae20b1281a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--748585cb-dc39-4307-8ed7-75992ab7a37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e2840a-1b81-4e3b-92d3-25842d83cf3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69c4116-4b32-408d-936c-e244dc3f90bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54838aaa-dd1c-4c97-90e6-cbb3e116c2f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e2d93d-1515-4cf6-9064-90cace885ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5db80cc-0a92-42e3-9077-f2e62ca2e3cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5becafe0-6a14-4249-8776-e7bde3bf7b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4543e214-9094-4a6e-9497-6f1f0196c4b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8066783-68dc-43c3-b32a-9af16fa8837b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c768bf6a-4c4a-4eab-9fc2-0337df5af794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5712ccb8-36d4-40a7-82ae-98ddfc8af245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014c4d77-96e5-46b2-b6c0-05d1cfa92f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d7851e-75a5-4426-830a-56d94a3f9384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d500653e-48d3-4c59-b7c2-ef979b4bb5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff06489f-58f0-4224-9042-64b1864476c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1742fcb5-6035-42c8-8eb7-d39e48e95514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f506aa94-8a10-4ec2-9901-be88bc13699e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d77d853-d037-4c80-bc80-3c22889ec30c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1de9315-f04d-418d-ad44-2a3ff8bf962f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22f410b-e772-4477-93d5-91b69cda45ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c254257a-1080-47c7-b71e-8d3b870c1b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1159d7-516f-440f-8866-1b57ec17e748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31907180-4d72-4945-9e0b-f1efae54f121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a06db81-96ed-4509-a81e-c2439ae777df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659ad974-baa5-4670-9397-545209978e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f08cca-0891-456c-b8e8-507251ca3aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa41e30f-3cd8-42b1-aa30-f1ebd417df46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8f8d94-b206-4885-bc08-20b024f3469d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf78136-3a5a-4806-9d57-6d631420546f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ec8756-5b04-4c44-a3f0-c33bff8e63e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e3a7f5-d993-4dcc-b368-03fd41488a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc7de49-74e2-40c5-af5f-6b6579be6943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75bc0715-ae19-4ed4-920d-ceb5f02df4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b979edfe-f517-424e-ae09-79c2352313dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced28a9b-406e-4168-91f9-51cb401c30e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74abe4ea-cbb1-41fd-9a6a-23819562bf5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3a1e4e-f9d8-4b76-9a33-0478263d2ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48453ffd-3193-46f7-bc2c-175a6f24aec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd591c1-14ba-4bc3-af07-18d4af33282a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f3de77-c0dd-4a33-9338-a153d5316667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623c010a-9e45-4a1c-8686-1ce41f701c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60773fbc-87ed-4294-8f8e-ff4ca1b432ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65318ce5-4fd8-48e9-819f-1b9cc6f26fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf343046-9662-47f6-a140-e6c6716624d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c53d74c-36d4-41cd-ab74-b249ac6e34bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f4638a-02d3-4fae-8213-7c0ea9d75c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c251faf-fc7c-452b-94dd-78fe9f4edd7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b45351b-b6f8-41fa-965f-cceef07ad9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c740b42-73bc-4b6e-b196-c1eb5c18e2e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f5d091-4f16-4376-9788-80fa61a6af8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff308f9f-05a7-4409-8a0c-ff95a80da6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c45b40-a32c-4de3-9a68-6cd27af3ffb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d88c6ef-8304-4a41-9731-dee123ec7164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4695e6-db95-417c-be93-ac14cd66227f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2558ea2d-1476-4dcd-a1b9-9c87e5322be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814b603e-9f34-4387-8178-8eeb0a957e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a828d8-da54-4088-9f6f-4382b0fd41e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a164bd0c-5e0f-407b-b1b6-6ea8e1567656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19517e5-aefd-4a58-83c0-b30de46e2df0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9bb7d9-d12b-40c3-ab9c-faa4b3b7ec31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb5f33b-2800-47a1-a656-ca3bf2e73d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fbb591-5554-48e6-9286-c862aa41888f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1857b404-0489-468d-a153-934847713138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935cc626-f528-4207-ab14-81e443142d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee69be46-16ff-4596-804d-64ca145edc42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2c5368-5690-4aa6-a4fe-3479ec292434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--957d5014-634b-4db0-9630-52044ffd1e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.126.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30c8eea-b9a4-4db7-bed5-fda30ffd0a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.155.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa5af2a-805b-45f8-ad69-b196f383a910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.17.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bad58fe-8858-4e42-8390-5dff8265b7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.76.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a525ff-30a6-4b53-821d-6f16dcd3acdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.172.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03991148-f9b8-4ba8-981c-5028ee40bdff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.234.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0475bd7f-6617-4419-ae57-2b523f056f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.254.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f72199-e3fb-43c7-9f1b-0e275652f017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.227.86.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db7b4e5-4e88-43cd-8727-3661aabea560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.230.146.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69320c99-2bae-4930-a53e-6058eccf3cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.150.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc416f39-892d-4617-8996-94f64616c353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.254.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734e7e87-5195-4fcf-84c5-e0e3c44d51ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.29.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4147bb5d-0354-45ed-a064-5d0abd61c7a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.65.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d455d16-42e1-4ba6-83de-fbc750b0a52f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.76.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c906a05-b60d-4fd1-83c4-bcff23aaf5a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.136.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bef19e0-2c3e-461e-99ed-a63407b75068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.246.98.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360c7855-acb2-4a50-8d28-ecb72a9d9f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.247.203.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d6b61a-181d-45c2-b451-5c72ba001f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.253.132.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d641eac-9539-4626-b20e-6ecf194bcd05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.103.229.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1896aa69-ff0c-497b-b8af-8cb09c82318b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.167.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6b643c-d084-4088-8cf5-4d5170acae72", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.111.191.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751bfc77-7147-41ae-95c6-486ff2df9a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.138.78.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902b0ccc-c1b6-4b18-8a7c-2b1a85595134", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.140.123.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe8cc80-240d-457d-9155-aea240cc5b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.155.147.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4084415-1e7b-47c1-9699-4c559d096f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.231.108.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39b83c5-ba1c-4ec8-b2bf-ca70c3fde175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.250.221.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9274ab28-70e2-4d1a-acf8-2eae170377de", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.253.9.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2279892-f94c-4350-9e90-9a0b12d96f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.40.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfa5243-51e2-40bd-b230-4d548ee1da82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.44.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d00a42-d879-47d5-9d35-db4e8adeba03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.50.134.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25441971-06f1-448e-9171-052c9e482670", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.64.131.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edda9f4c-55fe-4225-b122-e312b9ea8b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.64.7.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3ae017-0e15-4dbc-9671-d3421b49b740", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.65.188.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c35ef2-d2df-4e46-a0bf-3d4c5339f924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.68.127.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc032f3-4f2b-454f-9643-5e4828c073a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.77.234.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545ab5db-44ca-487d-b96b-ed9f639448aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.81.63.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36dcbde2-c9f0-46cb-af4a-5f613545641b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.88.16.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de3937a4-6e9b-47b3-91b2-37843ec770b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.92.154.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75118d24-406a-44fd-8243-8680f2b3a3b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1cf27cb-1495-4bc3-9789-4ffd325e541f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb4dba8-5eb0-47cf-adac-da8d99825361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee1ad08-126d-4fb9-adcd-1bae70e2a332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8d9252-0942-4d8e-85bb-5441528183aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ddba79-7591-4652-b2cf-ace52ba17ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958cd815-f6c9-4e3b-84f7-b3ba9eb1529f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a874044-500c-4b47-a37e-a73466b72256", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.111.218.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8117ce4-ad7f-4f1d-b698-ac63ac31e2dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.113.32.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25763a2-fdad-47b6-8b08-ed814e3d674a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.139.176.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b47bbd-a7d3-4438-bf55-3e86d3db9c21", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.18.98.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e3a7219-fdf4-410e-b093-19accce3ef80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.211.71.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84840c7d-bd32-4615-a13d-88fe9894a906", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.214.19.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6693bfd2-1b3b-4402-a555-57e4a5a726bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.215.0.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f38c35-ca4e-4ddb-950a-66d4172c77d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.215.36.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0f127b-5165-4bd5-aa39-9c37e40e1607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.221.195.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee5a664-a85c-4e04-b66b-20b30b010859", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.237.80.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b945464a-5a7a-43a4-ba5e-760fe5f502d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.237.80.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4afb26d8-e021-4d7e-b869-6379f2d4a1b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.238.125.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d936bf3a-ce0b-421c-b646-3637c062db18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.255.220.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d48fe6-9904-4405-a7e1-5b79ea9aca2f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.41.187.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c41d68-0c30-4c46-93e8-470fa9f1150c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.45.219.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfc12f0-df33-4bee-80e9-18f1c22c8060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.49.224.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346c81f1-0f54-45b1-b7c1-b455e4a5083c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.76.214.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7313466e-c43a-4148-b4c4-c395d82ec038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.79.255.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0433bc7d-3528-4d08-8a90-a00a32814a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.12.22.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eac8591-0d41-40b8-a6bc-f6ed6b26f255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.132.109.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e766b24-a8e8-42d4-b0ee-8639180ecc7b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.15.96.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cdc542a-b8f1-432d-83ea-78c70dcf34e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.159.230.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2828a1d0-eea6-4b62-9bd5-0e3e83846f3f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.210.239.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866919de-ea30-4d42-9992-82192e1a3134", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.242.203.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88745e0a-c63f-46eb-8525-53748e91bcde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.253.163.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9a6bba-17be-4fee-8ca6-e343730a8a90", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.52.222.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4069e3-55a8-48df-b512-556f6378da89", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.59.26.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680b5c23-e37a-4056-a343-87196c92115e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.65.139.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c19687-cf0a-4cb3-807c-245f7189cbac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.182.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b70d224-92cd-4187-8ff1-87eafe2bfd2b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.78.202.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d558c41e-52a3-4be8-8e15-1bd2ba0354f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.93.206.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf550d8-c580-4ce8-b6ad-cbd0a04b448d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.96.178.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e60825-0fc6-4522-a25f-230ef3e7755f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.96.178.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c33c4ff-f4a0-44fc-b6fb-fb550967afd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.105.205.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefcd620-ca02-4716-ba01-7cca3d418800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.105.85.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248a88c6-5707-4d5e-8227-7e9b38b8f14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.107.112.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf18d1d-f49b-4518-b9f6-631071250efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.170.108.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9ff5eb-657e-4788-8394-388d731dbe2c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.32.139.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9bb1ffb-819c-4e6c-b71e-72dc6ec481f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.44.82.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f9c647-acf9-44d1-afc9-157a992e7dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.61.48.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de1f835-094b-4061-b680-113c03b1ba75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.64.109.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973eaa86-2212-4258-baa2-168ccf65fbae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.193.139.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e347fd8b-7352-4cc5-9849-544da465d019", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.194.11.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6d01f6-3242-4750-83db-58e22e591401", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.194.144.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec8a4d5-8460-4152-9e95-c4ed5682953e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.224.40.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1072b8-31eb-4150-91ed-10b9764b4a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.178.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57b7100-bc96-44a8-a27d-b4806706c969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.180.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47891171-f2af-42cc-9558-c02512671066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.240.39.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc804396-f8eb-4334-afd1-e0bef69ebcbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.246.231.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32d8c32-369a-4ca9-b9ce-5ca1dbd5a472", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.117.97.0']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f5dd34-1a13-41ee-a2e7-1604268efb13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.40.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8506f17f-4645-4d0e-bb43-c77c8206a5fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.40.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c942190-4a3d-4570-8b8f-caa8ddd2664e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.41.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ca6e0b-42b0-49f1-86d9-e15c7d98b3c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.41.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f377582-10ae-4f42-b444-5a8bc02c0013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.43.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1cd944-c8c4-48aa-af51-65f6ea26e6d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.43.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ace3c6-a17b-4f5c-a742-29026fd2185d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.121.200.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1d7f6c-09b1-499f-a834-03555cacc6bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f690ee9-dc7d-4627-b356-69651d1f23e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.117.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a226ed-4e81-42de-bbd0-029a49f4ce2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.170.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3246aa-e4b1-47a5-9929-db669e82a4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.171.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6afd0a9-18e6-430a-b321-7317e55d7e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e971276b-3b4d-4792-b438-c05d4735f9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be6833c-bd23-4e5c-bcd7-ca6e3590338e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f6f4e6-68b3-4479-a3b7-052cb424f454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63447e6a-8726-4653-ba5e-803ff80bf658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde0432f-cad7-4978-8e49-1abeb041d832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14679b22-02ee-4e99-ac0c-79cdf89077a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef1a21f-14a3-4dd2-a5c6-da5b52ef4b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bededbee-8adb-44f8-9181-696587741c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4008ad7f-0efd-49fb-85df-ad5a4b321db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45b42f8-e109-4568-a969-105c850484ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0614aaa3-dc41-48bd-b655-9ba22a8969be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e9a87f5-13a0-4399-88a3-d4fe3aba1c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166da3cc-0b4b-4baf-a13a-0020d5621568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a652ff2e-bb33-4d15-bdec-48614a17f863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a5acf9-dda9-43fb-8800-7ca2b9166ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd9742d-b1a2-4582-97f0-cb513870c2e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa38f70-3ce7-4832-8191-61bfc3c498ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0611291f-d28f-421c-8df5-2c6832c52123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72079db-6ee2-4e1a-908a-d845f3cde612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008e1672-c39a-49e5-969d-89ca3e7b45a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.183.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ba7dcc-5cec-4fbc-8508-d84b21569736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.184.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8055d3-378c-41fa-bc32-39092b15663a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac78507-4cad-48cf-9c26-fab47094c5d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9825a16-bb68-4994-9319-9fa50ada8ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f345c1-fe33-4718-8cf8-84c58d9090a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.81.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666f6f4a-54b2-45c1-9073-9688c8d316df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.86.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d6862e-6d81-4516-b40e-574a084cd5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.208.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced0b29d-ac2f-4d60-b035-009360af0b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.75.112.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e242d1-92b0-4da0-81c6-5580c3a361af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.107.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bdc6d0e-69e8-4b5e-a575-949ae4aa69e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea7a60b-a329-4436-bc86-aff59fad993b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92518217-2418-4fea-a0c9-eb41200349a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.248.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316b9c77-3086-4ef7-8a51-207b910aef02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.250.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419aa38d-9746-4713-86e9-28d27220b0f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6feaa9d7-0233-49f7-b29d-e7cf7b47047e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f500af47-9cde-407e-9a6c-74cdad731cc7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a152cca7-2f55-42a9-ad18-c7536c2f6dbe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b75c56-0f35-4798-9bfe-933cb9236311", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed46633-b630-439d-8439-b34d9bb72113", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef599fa-7e55-490d-beaf-d69386749ff9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b271579c-ed56-4343-bbac-42d791bc95a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36afb8cf-125b-4715-945d-de83e6e94566", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b81027-4928-426d-9c67-e5fce9b2298b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4cb797-9c9f-4b77-9090-9f7469c38fd6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2385a682-9a68-4ee1-bfba-644e206496a1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.83.182.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7cb87fb-3ba4-47d9-862b-abc22f547b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.249.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755e0a1c-8529-45f2-b08e-ae3578312b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.249.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1ce025-3a61-4e9b-8a53-b138f239376d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.13.154.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d4c0fa-3b1d-4e75-81b2-077254b459e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.135.208.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78809d16-5e9b-4247-8bcc-49a336ca3931", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.209.57.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da11e11-5bb2-4d7c-802f-30eb03691052", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.212.124.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b9dcfe-2054-4bea-8d0b-1081c07a2880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.65.74.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a151a16b-0e19-412f-aa59-b223c89b1bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.76.171.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df71cab6-daf1-4016-a9c6-1ed15ce1a7ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.78.139.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf40f7c5-72ff-43c6-817b-a9abb9f8c9b4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.82.50.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31620303-ebd6-42ed-a180-e14d70ced96f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.82.72.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8013f188-d4fe-4ae8-8525-63f0dad01d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.1.65.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c4ffe9-8a14-4bbb-8862-623f066337f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.193.201.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0f6c94-4aab-4dbb-9277-740d592d6ed4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.200.78.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87371b8c-fb5c-4eb0-ae27-177837a2d0b0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.240.130.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54db7a9e-f39e-469e-b666-7ab1cf174203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.83.147.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88df9962-8ff0-4910-8b07-67fd0ee7b22a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.96.19.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f04a9d-c7b0-4b7e-87f0-e9c69bd3a361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.106.119.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b73082-0978-464d-9cba-735a045993b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.103.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238030fd-fc28-4299-8a20-76151c698b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.122.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b04be0-c16a-4e3d-8b10-99f9fce59f3b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.22.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72fbef29-3eff-476b-98fe-95dd40b0b183", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.250.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc16e006-5cd9-4c40-8ebd-92468efd1c64", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.129.243.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ef4914-ef53-4d0d-bbea-b6d0be8c7a43", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.129.246.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c1700b4-4926-4654-9ecc-1c4387265f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.102.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d957bfa0-c963-4a1a-9380-95e8ba37b93e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.107.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab53b2c9-8973-4c1e-a683-da47f6df774d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.241.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e060e7b6-7a16-4281-b7d7-83fed68861d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.31.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f43b79-19f9-4201-b9c3-c6df8b458b4b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.59.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64c57e2-dd0a-44ed-bef6-7cb647ae20d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.66.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2072b7d4-e721-417d-b860-0d48779defe1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.73.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f0294a-5cc9-4b2d-beb0-9bc0e6edaf1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.74.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f335909-af5b-49f0-98ba-a0b329456675", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.39.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da893870-0fbe-41d6-847c-127b428a311c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.48.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd1e80c-fa34-4ecb-81ac-d0da2d26f62a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.54.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e2b37f-01e0-4e48-9f8a-110d546c4c41", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.6.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3679537-d1fa-4d3d-984d-e2a26fd928ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.132.148.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b78810-1298-4401-9b4d-0a13b47da28f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.139.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ac50d7-f299-4376-950d-86d657ef6c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.14.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9d482c-fe15-4aad-9fa5-9432800cb17c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.189.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb569262-56cb-4aa9-98ca-a80fc2447297", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.253.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310dd68f-16bd-486f-9d8b-3c27d786382c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.0.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed69723-30ff-47f1-b1ae-abdec652b810", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.119.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede8e0d7-7214-4a65-9ec3-9b0ad7bd1526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.23.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8f365f-809d-4f46-924a-b703265bc335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.231.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0628158-2d90-41c3-af06-16aa22e9c0db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.31.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d76fc27-8942-4c2d-a225-dc12916cf9a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.36.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd7fc1b-b104-4e3a-bbee-fe83f8fb946d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.7.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b1b985-a69f-4065-a2cb-842526e7fc77", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.86.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27db239a-1630-49bf-91b3-effced5ec221", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.91.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e38e368-1b05-4816-80b7-d11aad09ca52", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.14.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db86febd-29fa-4400-bf53-a5a3d3ec60b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.141.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75addcb-befc-4166-a1d2-932328318182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.142.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c4d74b-e6d5-40e7-b175-2726e9c4780d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.163.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953fe88e-a3c8-4aa8-a5ba-72829cf646b5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.186.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e927c2e1-c0e0-4d95-8ea4-1e2c0d98c3c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.211.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7485015d-5e84-45fc-b1a5-d9a49313da25", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.138.68.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15c7fe7-7508-49c9-8431-0bffe3ff8ff9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.140.247.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2da826-4d1a-4128-abe4-2dcd13258c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.142.122.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122d40fc-ab0b-40c1-b7d5-8a3aebb01684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.142.23.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961bb070-1c56-48aa-98c3-b613bf0fd740", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.10.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf684240-4f32-43ca-b0e1-d7825a8276b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.122.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25432dac-9d2e-40d4-983b-7a75a20c255b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.122.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44151539-a65f-41d2-8a36-47038cc6c805", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.153.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4ae49f-3d9c-4276-989f-ae3dc99948bc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.153.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44889f26-d9dd-492d-8bbd-bdc4d9e9b89d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.154.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34365e9-902f-4994-a054-d44f3d863bde", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.171.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0558fe3f-2382-424f-b07b-da321bce0a7d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.23.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee690ed2-49c7-4e39-8dc8-2648f99c54d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.25.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9cdcb2-b9aa-45e3-9a12-dfa16ae2640b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.45.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aecd8e6-eb3b-4b30-ad1d-53d8fc933ece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.48.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f060106e-dc59-4639-8139-c7b7714cf6c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.49.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80c426a-6dae-4eb6-8f81-11a4494b03ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.50.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef5e5f0-e4b1-4dfe-963e-09cd6711480c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.119.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5871910c-5e19-46b8-8c25-507527873197", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.128.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3febf9a3-5797-490f-8ecd-a55c24b3d508", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.153.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7256c3-f4d5-493a-b592-7a0e50be4197", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.194.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805d07a7-5824-4459-ad29-964e3fc2e153", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.44.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd43614-4df5-42ac-8956-498cf5c7e0a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.172.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8c4929-354b-4871-abfe-08480c37cebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.195.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b553ec9c-7661-4a9e-8435-1a773583ac4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.39.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda30015-8b8a-40d2-9929-779dbce029ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.93.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bb10f7-9c68-45a7-aa28-075c895a6ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.97.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc782b3-1327-4db5-9602-54a69000eff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.36.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d880a489-91cf-4e56-95bc-67362050d00c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.37.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923ad396-616d-4e69-b3de-d9845c579e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.37.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75b8c48-26f9-4640-9418-a7cffebc1103", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.41.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b730352e-a9c0-44e2-8d87-847da8334f43", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.52.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d601d9-f67f-483f-b848-f9e4bcf6c352", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.68.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71fa33b-1a69-43b9-88a8-b6c3ce66a079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.79.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c156c24-f1e3-49d2-b435-48452e7e1d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.83.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937f2eab-9c83-4625-ad9f-e7fe0aa29e54", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.11.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa47a35a-cb6c-4ed2-95be-8e8868238589", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.11.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0731053d-4be8-492a-b347-9a1c7b7e8a97", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.121.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d8ca78-c17b-463a-92d5-401b2d005d56", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.122.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3498a0-5a33-435c-ad7b-19dceb0794a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.153.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138d1234-9937-4935-af1b-0b3ac418f79b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.156.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b914c8fd-f497-4cea-925d-56643ea679df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.158.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7550d5-fd2c-4182-9818-9813c37841b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.168.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd9e9e1-2559-4c0a-a5d4-469870a04723", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.22.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--729a9798-d302-4b8f-a59c-8123dcf116d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.29.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f292338-8f1a-427d-9380-9e77011b75cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.33.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b470c649-0489-4311-b224-7bd4808abd1d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.46.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575594af-bacf-4228-8218-09b5cd5dfe82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.6.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb06778d-ab5e-4719-ae2b-50daac0d32d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.64.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c811b5-0862-450c-89c5-7b608805bef4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.81.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d707ee-c745-4633-9543-59bfd3eff36a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.81.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be96d97-829e-42c2-a279-35384d6cf959", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.90.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fdccb4-21cb-4644-8d23-ad270c0562ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.92.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb1528b-7456-43be-aff3-797884a70dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.95.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e609687-506b-4fa4-a452-685393d9af83", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.98.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d1062d-cac3-473b-9339-ec4debbbcf53", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.158.90.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b2cc71-2d95-40f7-909f-ce0a69f0ce44", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.158.91.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7bf58f3-29a2-412d-90cb-b92c1b43a90a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.130.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849f9b49-c678-4c7f-b5b4-0b6f42c6e445", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.132.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5d8f7a-4017-47c0-bd08-e713f674afac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.139.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98505f4-56f4-4e33-be6d-7dbe26414547", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.44.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1825de84-9bf5-4b08-8430-5115498c04a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.50.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c64b155-64eb-4ca5-88c8-dfd5f4018390", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.50.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0908b2-8016-449a-b555-145b3b185ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.208.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bdb07e-4ad1-4951-a3c2-d59c470791a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.225.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c3474e-f9c3-496d-be9f-89e44c469772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.161.234.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3487aa02-f897-4674-b102-385adce56f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.161.251.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea2084e-22d6-4586-b3fc-ca3925ec3b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.95.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f255d5c-a719-4188-add2-c39c745a695e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.220.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0897a58d-5976-4772-8589-05c843327172", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.133.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946c17d5-73b2-40fa-85e2-1e910d6fae8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.3.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556fa01f-ff6c-4920-b174-9377783bb36a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.167.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f27518-8aee-4c69-b36f-010c168d6590", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.170.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf242d9-5d46-47b5-90ac-38ccce1c15fb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.185.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecaa6a96-8437-45da-af33-8dc9c0d407b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.198.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ab1a63-d855-416e-93ce-1b4991858bbe", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.3.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e50f738-0a6f-4155-afcb-b9ab0491e82c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.4.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb56982-0f7c-4d0d-b52b-16c4c80d082a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.128.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d9dc28-b534-4826-8079-90d427d45df8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.164.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07014264-3468-43ae-a1ca-215b28c55ab6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.168.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e428acdc-2704-40bf-ba7a-5092c370c79f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.174.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a004bdd8-7475-4bdc-91a4-e45df5b7dcf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.237.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84579621-70a1-495f-8f39-a9c130a3ccad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.238.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9c24b8-d0ca-485f-aa1a-c1ede61ded09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.239.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ba9bac-ad40-4d08-b384-b7f4e037417a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.243.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b28108-3f24-496d-a363-ec1dc2539158", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.251.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff561d2-3e1d-42d9-ab88-e0e0cdc2bf08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.157.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa047420-59af-4c14-ac3e-08645cddef4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.170.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b76155-e96d-4405-8bc0-513f84b0cdd6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.187.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80172f23-5ebc-4be0-99df-c8463e098fcf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.193.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c07c2d-be27-4830-baf8-5b47a16599a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.194.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff6e3d6-f171-4468-a197-0dc3b2dbc746", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.204.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805a4d11-a678-40bb-9106-880f40803056", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.208.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867729e8-f7ac-41a8-b53d-df3e22c38af3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.209.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f381e9-765b-48e6-a16f-a9f64c2fb2bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7c5591-9c20-4bf5-8070-9894943cc8d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1933d12-9b37-4ac5-827a-772da617f675", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31bf0da-1d6b-46f6-9bcb-ef9c69847513", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507cb97b-3635-40c8-af8c-001b99793bc9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7346d1-ca0e-427b-9c3c-b45f94302b09", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2cd460-4281-4f86-b6fd-7620adf521b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87651d8b-d882-4cd9-a267-1147223faec1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2057bde-3bd8-4dbd-accd-b6175ddd0150", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae785fe2-d198-47a8-8ddc-b59b7060777b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0af2cf-dd1d-4b91-a58a-992237fc6ba7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d0f8e1-e482-4fdb-bc39-c8157e21945e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de88c84-c12d-4c50-8553-81bb8d566eef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c052fa-a38b-4a60-bc38-4e3c3df533b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c222442-404d-46a9-81e4-96253279ead8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f66458-97af-43a0-91b8-259e4b4e8519", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc040b2a-a0e0-4a71-8e41-4381bcfb4b91", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf0c7ce-afe0-4ecb-b7b6-8dc2ae84e9a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1aebcb-5dc3-49c3-8355-9f531edf7cab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89fcfe02-f026-407e-ab47-3f325a63be1e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815c6bbc-ef24-49c2-8b9d-cf6f642c1e45", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf32b534-d717-498a-ab2e-b4577c592539", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42633a75-1642-491b-96be-1de711a66fe7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee5f11e-3d87-4a18-85a1-ebd624d063c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09bf4d31-e3df-4d69-890f-6e52c95b6e68", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8b79f8-8cdb-4017-8564-0b719c0220a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b035df-2e47-4e44-a950-ec9f9c8fb7e5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314e911e-5ad6-48f3-8967-c2f856c34e32", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855721cc-f1c3-451a-bdc4-ea3d73331320", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93c0f1b-3691-4a01-b58c-a2a7552b8715", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5fada3f-b1f6-4cda-a60a-fccfe15d3f2d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0274a504-6d53-467a-85db-249dfbf9b735", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edeb712a-7e37-4026-9202-062fcfeaa081", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98a97f4-80d6-47b9-8423-59e4ef58fd83", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf868f2e-744d-4ab0-8749-304769a5f202", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3825187a-4cdb-473d-b2d3-65c1a7a04b38", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5bee4c9-7afa-41b4-b2fc-f28a2df253d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45e75c8-0d9a-446e-ace3-07bc14466bdf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ff5d27-b587-47f0-b1f8-e84f9d9f53b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5cfbfce-91be-4dcf-9ce1-8674b63d9f04", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ecd9f9d-f494-40d0-9ed2-946ef68a2023", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31b5b93-a354-4c85-8139-275feb42515f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab76b1b0-592e-4e24-8219-40a37cdc41a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5fff8e-e6ad-47b1-8d42-c3998d540d46", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0b3846-ae1d-483b-910f-65b451d8d427", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd5f39b-6ad7-4a86-9e02-7088611acb93", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cabe2b17-7ccf-47fd-accb-7b44334df51e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d68d8a2-89a3-4e0c-a1b0-52989525fe67", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8175213-5f80-46d3-b4be-713c40e7a665", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b00872-57ed-4259-a69a-0a8d375b3e49", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc8e255-d2ef-484a-8fd4-0492145f406c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b4e2ed-304b-428f-861b-82b89d3db592", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f317dfca-19b0-41e1-b539-af73c5850807", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d31b7d-d58c-484b-b2bc-9eb1eda2e122", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2477bb61-fae2-4366-941e-912d250eb87f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d37d54e-6b14-487b-9e03-4828761b056c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6496bd9e-f140-485f-9b1d-4ea746337b87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680e58ed-a4ba-4a63-ae89-2a3af98865ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2513639-5f8e-4e73-a8dd-27ed14bee029", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3b779d-b8ce-4ead-bca2-d077f572d314", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b5f966-36cf-4805-b82d-ef5dc040a445", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca17241-1244-4460-a6b0-a45d09025a74", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10118243-4093-4175-94ff-d41089849d53", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5188dbee-cef0-4d0a-ba7b-010394c5f198", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3816578-b93c-4308-aa77-21fa838fed4d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9423ae4e-5dc6-4911-a488-f864d83aeaf9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bccf40d8-1cdc-4a65-b092-6c1a843d1998", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9cc7bf-7698-4647-8285-82ab4e3787ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c9143f-6727-4cd7-9eca-f63857556ddb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a0a5be-a7d0-4959-b65f-196aa4fb7757", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e63472-34c5-45fe-b268-f4f60c762906", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205a40fb-c113-4064-a6f8-7ef2003ef01e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9db71f5-9740-4ce1-b24f-130caa423b19", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6254572a-b609-4b71-9491-352b80917304", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5378cf00-5d9c-4305-85ec-9b2baab2f510", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1852bc-14d0-44fa-8ae4-15bb4a120722", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fd2d74-78bb-48bc-999b-85ba584e1a1c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a32e59-a67e-4106-aa34-1a80f3f528d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e79c1a2-edce-43a4-8340-255d481a45aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8a5dcf-9866-4a71-9fcd-99b89d323b24", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601ac7a8-5bd7-410c-8c69-8ecc7d4c192c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165caf33-6af5-4504-aaa0-3dfd7a69efd9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef27084f-06b4-4730-831e-2f37ed798a56", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac51fefa-5ed6-402c-89e5-f79afc000417", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d31dee-9e89-4642-af71-f5b260caf09e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15ecfbd-2b14-4b01-9823-5a290f4c651f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b5e740-b01d-4e1e-8ba1-4ef55da1ab4c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd475e7b-ef4b-4888-9758-f41873b20ac4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08eb3906-2463-4084-81bd-fc2b01c4b322", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef9bbff-74ab-4e00-a4ae-5b837f91bd82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad024a2-2eb0-4b38-84e8-1ac89042e3e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebdb3cd4-6887-443b-abfe-9ae90ee6e2c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbbbca8-18c6-49c1-819a-e35eb9e966ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af81dea1-828d-4dd0-8c84-1764a4aa116e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64184dfd-0d7f-4b72-a81f-cc164e8d86b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9b3310-c973-4a00-86b4-c3a6c2c328bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced40692-4866-4886-af5a-df29d306a58b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b43997e-9ef4-4e50-bfbd-4a439b7127d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ab2d24-7b90-4368-9c97-a8e9244ae3ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d297dce5-4195-4a9e-b7c1-7ed2bb69d8f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6f5044-ee0f-4dd7-97c0-bf4d13252479", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bd34ec-b95f-4835-a3f2-20d2086072cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3294ff-547e-4646-acad-24f70dc7eaff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.124.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47165850-a8b5-4e27-b8fb-4df3e6b088ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.127.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96ec133-efe2-49da-8487-8e0f0e516012", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.167.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727b963e-1ee9-4b7e-89f5-536590ddf403", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5861b0-787a-4cb1-99d9-f5095df418c4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a1a39d-2d45-4c87-9090-6b9a76da0e1d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904ac9c9-4b82-4989-95d8-5a83dfb30e08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd273dbe-0aa8-4f46-9157-1f7bf5bfb29a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cffbd42-c3a7-471e-8477-fbf3f402760b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f49fa2-5a30-4608-9a56-206aa563cf66", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098e12ea-650d-432f-87aa-c4a74b5560f5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08348802-bfd1-47e1-bb1c-80522fbfa229", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c623af-f826-4cbf-aa04-45de45796544", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd9b8ff-2cb8-4780-bba5-360bdd8e8b5e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f99def63-2c97-4b0e-b906-c2c061596a8b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85731c13-c83d-4e5a-80ce-cd7e1b4cadd1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bef902-2e8c-42be-9a97-4a69690992c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d28a2d6-c7f0-4874-b7a1-8e549753943d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9d90bd-44be-4f2c-b4f3-a2f750e0a074", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082b0e4a-57df-405c-bc2b-1928446d90ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a963f4c-9912-4737-acc6-406f189abe8e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c481328-daf2-4630-b854-1168172e81ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b8173a-5e69-4963-8d77-6d0ad25d2e0d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe6164c-4954-4e73-a249-ad7451f55195", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9f0887-c088-441f-8978-8ad3664747ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc606ae7-afdf-441e-9797-7ac8f1fddd34", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a76fc69-dd56-4163-b685-80b31fc37bd3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4d255d-596c-49b5-9110-8ff6d2d556c7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b221a0a-6f3d-4e9c-ae82-6b2eafcfc81b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313eb5a7-4c6f-4a2d-863e-4247f87ffdfd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6760ff6f-2658-443b-ba06-a8eff6036af7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bedf6a0d-6d62-4b0a-acb4-1409d13acfda", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229b8769-cb1d-4349-aef8-884c7caadcc9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a2594f2-013a-4fd9-88b5-27daaa3abeb2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a745b9da-ac36-4480-8e5e-17d6a0dd1782", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24246575-1a4d-46bd-82e0-d76131266dc1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037f4e9e-0a5d-4bdc-bfca-bffd119aac5e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ef5ac0-452e-4377-bc6c-1d95429f9023", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990a0711-ccb2-402b-b087-e466e25e485e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c93d410-7567-4649-8f1a-3f91cb5657df", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a59c6d-1e47-47b1-8fa6-c1a1840bd94b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec39042-5095-433e-b580-440bd96ab428", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253e12ca-886f-4b2b-bd46-52a865d280a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c0900a-e2ba-4000-b3d9-21f33da1b179", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec16e627-81f5-4f5e-9a07-55f448559e00", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2418f2-2333-4343-bb01-79a1cea7d517", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf63e9c-1a90-4d27-b6bd-f0913686c48f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9bcdb3-49b0-4057-9639-37016dd59bdd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28fe301e-6a2d-4d8d-b34a-8793cfdda589", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4bf99a-b32f-4957-9734-c99345f62b7b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3851da-7c9d-4767-b772-4c9bddfa4eec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3517d01-ece9-4266-9503-034ecfd1e8b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30549d8-7d0b-4512-8ec6-9d90a8f5cf88", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a517e5c-db7c-4bd6-9f49-20629cc14424", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779eb370-70e2-422b-a5b9-7e14f9557c6d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26881c5-23e4-4607-af37-15f6c6636538", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c4d4fe-c1ad-45d1-bca9-42b92fb31018", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353f34e7-e13e-4951-97b8-f12a8975550b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b658d9f5-eb1b-4b0d-b79e-545089cb1491", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc6ce30-499b-4f54-9b44-6d81c3065cfe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72129269-2a37-40d8-8859-44f8230894f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a448c63-8fa4-42de-9c0b-847992bb0962", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed23ccfd-4503-404d-b5cf-ef4ea79e825c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7865453-f974-4fb3-83d6-c0b29e96e5d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86787d01-8f9a-4e2a-ab8c-c6e536bacbc7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3ae87d-f152-4081-8a56-2427588e4521", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dacfee8-3bad-4feb-9129-94804249f584", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecabe129-8860-44a9-b7ab-2311d6a65a76", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aac942c-a210-4fd1-ba46-bce31554514e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f18ec98b-4222-47f5-b003-6e89c3f1d377", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8f5355-76b3-4328-87e2-3b1446e2a4e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5198f7c0-8fc9-4719-ad20-73fa7f832aa0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd89098-b493-4178-90a8-5259f45ffbbe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8f1ac6-4290-4a47-998f-1950073a4934", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0974147b-62dc-4d2f-bd0c-b56c35127582", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f077f3dc-6dbc-4eb4-8f95-7e40542fdb6a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d64e8c-32dc-4e2a-9523-69da7becc26d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398b651e-1beb-4268-a58d-7d4e263269fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c216a5-edaf-4857-a97b-4ed8e77043af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c70b28-09a7-4683-8baf-e71bd4b6fb3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392f583e-6724-4bd3-b4a6-e4fc0ffff8b3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8917b49a-4180-4004-8261-e9ba807b7807", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9dc3522-ff84-4823-9a06-fb39d986d410", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b0eb47-090a-4a06-a42c-d574db17de9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6b5efb-d732-41c1-a231-19e237223484", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ae02f5-d56f-463d-9654-78eca357271d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ea383c-a0bb-4895-80bf-b529601b344d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02bd8752-c75a-43ce-8c16-b026b456da7b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa39b4e7-2276-468f-a652-e363bd904959", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad61450-47b7-4643-87ea-3e5b93c912ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939704a5-27f2-4d64-b51b-8b41e50ea6e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae57b460-ca16-49cb-b188-9b2a5df74c05", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c60bb4f-ec33-4e28-b5d4-1570df3ffc08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3353956-3907-49d2-bf5c-3849fcf5e2e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16425c8e-b024-4bc8-ae8c-fd0926c9926c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a11b389-57d4-454e-924c-803cea2ea58c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721d27ca-b721-4833-a55f-3947d325f05a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757a3c0c-2766-42f4-a76e-d699064d3b52", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62373d9-2b3a-4ffd-ad89-3743db2e5063", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c95464-3b42-4d60-b483-7d3c4e92eecc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77a0246-b0f4-4197-abe2-dd92fc312bde", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17294975-9208-4234-a6cc-74ed67e47b67", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f813506f-aabc-41a8-8e02-dcf6ba6f670d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a18a797-689e-4316-9697-e51e1baf1927", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2c7a86-4cd6-4f81-b18b-101e454024ba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55df8953-de21-48b3-8234-662b085e4997", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d4b501-f956-4409-9617-e87ddaeb1b44", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e315c2-5dd0-4f78-90a0-fc0144d2ab5e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2b8bf9-aef6-48f8-97e4-e40f473436ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1238ca-fe25-4d5b-9845-3db37eb195d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb1ec88-2457-4868-9760-59638372ab24", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64f77d8-7926-4ffa-a455-01af3d20fe6a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aaf891e-6c18-4be3-b4e5-3852f0705f50", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d66e986-4b6e-40c6-b0de-83a227522040", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9099e51c-1631-4c6f-a0fb-b40a7a97b97c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dcfd9ab-6025-4753-b155-e6a409b3eef4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2aa4bb3-7a8c-4eb4-8e1a-f34e1933deb4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1292ab8d-e112-4ecc-adb1-583df4aaac58", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aed645d-ff81-4fee-93b3-a859c8d67e18", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f204e048-542c-404e-97e7-d3ab0cba470d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7736dc8a-f8df-420c-99ef-5e4e6efc698b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cbbbd0-c0a3-4694-96b9-cbed112b8ff7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd3ba8b-ff76-4c20-8c75-8255fa5013b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d17b8c3-1383-4338-b830-4408bd1392e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec11789-a6bb-4941-bab2-c763d61b7802", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3610551-d7f9-49af-b16d-488f4389131f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2703fddb-906f-4a66-8e8f-9a2f4d12b0c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa8cd75-7912-4728-8e4e-e0948f544dc8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9afa080e-9a6d-445c-a7f3-00a2b92a8879", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2443753-1d34-45cb-aec1-4fc34c7803ff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b070aa67-1502-4eca-b6b1-36e401f5c442", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ab97a3-cee7-4256-bd0c-3b4730d70838", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c34a8724-b6d1-4627-8ec4-b6067f5f77b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc9002d-17dd-4906-bbe2-ba9b8f2b2bb2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8aa3f92-5f72-4edb-9788-993a9228d1e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4b3bfe-9c91-4d94-aff9-5687537911ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25fae42-f786-41b3-9e8c-4a7a21c08f2d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316ebda7-713c-4321-80fe-84b8f4bc2308", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a0e805-c814-4ff8-aa35-c2cd2abdc9fc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac61df8-d253-493a-980f-6bb62a72c966", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470e58c0-dab2-49ba-a8a3-cf8075ffb272", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f49482-9b0b-4457-a8d6-bb4d9fd37775", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9a5cfb-2c7f-4fef-ae1a-e2900ae606b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d62f430-eb16-4a1a-86c0-784ff45de508", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4146ccf-7177-4923-a5a7-200694396e00", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc932a8f-2bc2-4061-9931-333121937b51", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d265deb5-0d40-4cd1-8645-1f0f577862a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e4f092-d5a1-49c6-9173-f12d39480383", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010661a5-7249-449c-bbc7-01ea3ecc5cfb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda98169-0a14-4401-86fb-44935baf2a22", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58178032-6d95-40c0-998f-cf0a032255bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880f6ae7-42e5-46ec-9399-aa829e69e2ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b4e08b-2f0b-41b7-9cf1-8f6ee72173eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f697aa19-e002-4c19-bda7-4798cd42641b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9901aa3-42e5-47a4-a53e-6fd3c58805a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694fab60-08b1-4fc4-b174-d1b93a944ad5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08fef350-2a40-499f-b8c1-104ec2bb9396", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28dd96f8-a488-4441-9ab1-74d39c3a2a20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6063ef-3a52-4a9f-9111-7aa8b62ce8bf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f96f7c-d054-465b-b11a-2615f442ace2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29115d31-0244-46f7-9bdc-03f5da1e1587", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87f04a9-5178-4f2c-bda2-4bc4b34b1a5b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b39a0c-77d8-4957-927f-2fb275cf3f63", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20bb2a57-d0b9-4266-b8d9-7ab30973d067", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251745f7-b594-40aa-a3d8-d2dab9291c57", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee3426b-5872-4828-920e-53a1370586c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--280ee275-2902-4ca4-9c09-89cad1feec71", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c4ba52-4567-4501-9fa2-f740ae524a1d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59388c8-7aff-400b-9e30-80fb9bd7d21f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e78daf-7bb1-4cd3-849b-228fc8c480b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60c47ff-cfd8-40ca-894a-76844bc470b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3c46ce-cdf9-45e6-aed9-b476238931fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3e609e-1f4f-4a89-a6a6-6c4cfd2d0fce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662866b5-24d2-4db6-95a6-43890a702b7e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0258a9-2d47-42de-9b70-87cfd398be63", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d91b36-f276-42ff-b04d-14b87094c314", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a83a6f-e27c-43bf-8e7d-c65495461f6f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44114cb-b698-4ae3-9e13-47a795edbbb2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3eab580-4d68-4fe9-886e-a08fbc577e08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad8ed84-72fb-4020-85a5-f0f07f87a897", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666d4dc9-08c8-4555-b861-bd54010fc4d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54cc12ae-9d25-4da9-8bb8-b933817cd207", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7d0c30-4e8b-4a69-b73c-fce5fe9c4d32", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bfab701-dac0-4c3a-b128-d2c82ba33c1a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ab415d-582d-47df-ad3d-d1040b5319b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95f4f77-4299-43ad-98e3-11be4a14db4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25b67c6-445a-45e1-96f0-9bb79ca714e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--080fb160-0026-45fa-bb09-e4f914b79017", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c231f7-2e11-48ec-aa6c-786dfa2cfbc6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2bbbe2-df34-4615-9dbc-d9970b526286", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3391db-2df8-4723-9e77-7f7c7adab80f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f17c27-bd41-4b13-a8e1-5df32eaeeb6c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d238e8f-0fa6-43de-9001-cfadc1e5f64c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f4c464-e338-4d37-8523-a3710bd6c98e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3710bb96-9721-4325-b02d-d2da7014372b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d6d22a-e66e-4c3c-9604-b848fb99cc2c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1415d03-2777-40aa-be86-966141a6340f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14721b44-c299-4c02-ab6b-15630144bd49", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b6d63e-273d-40cc-96de-5855783d216b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0c9c3c-a7b2-48d4-b40d-7f95bf7ea743", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83563404-0d7d-4c4e-9032-64e2e9ecb941", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af8a3aad-d22f-4839-85e3-2b9ab1c48267", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c485a265-8954-4472-a767-262b34d1e86c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78eaa56e-8a7c-4734-8940-96d448cb079c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b40d3a-a3d8-463b-aaf4-c1a4367c8538", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a467e87-bbad-4526-b189-f9c22e3f6d78", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e97bd89f-ec84-49f5-8b90-b2299830bf46", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ffdeba-83f4-44f2-8b2e-76c81021690a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ddbdd6-9fd3-44bc-9667-93e0289be1c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba091890-6407-4167-bcd7-483d70c6d6ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1930cf3d-d8f6-47b7-94ef-0599806e7214", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0850c37-7048-4a2d-8e96-2086e7c4478a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1dd6bc-64ef-47cd-98d8-9aea4bf9770f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a772a100-a194-4a54-8433-3c9a060bb499", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f4c067-7b1e-448f-ba5a-d9d9713c225c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0acb550c-2736-48da-ab10-37e3db9e3d1a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0215cca4-fc9d-4a84-b131-667475cc0a85", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d46f749e-939d-4f63-b8e5-287acd20d232", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b00d2be-414c-4a92-b0c1-2126c32fda45", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc77c1fb-93b4-4064-9fd7-01bb33329fde", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4334a55-1cb4-42b3-9950-e5186be7394c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a219022-54d6-4260-b2fd-d4179cf08b0f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9cb10f-37ea-4dbe-916f-e82605770592", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.187.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a11774f-3f57-4573-ae01-ac7c3a9ec5e2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.226.36.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d00f6a-87e9-4b64-a60c-e9a52d01b18b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afda2fe-82bc-4ed1-84e7-e5f931196499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20969077-339a-472b-b709-2ab0361ec300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90173437-a288-42e9-88fb-0d6975eaccf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7656ffed-fa85-493e-935e-f30c393bf68b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c16f30-83ff-4e1f-8f13-36b952c2c5d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c717356-4c46-428c-aea6-5f1e4b5315e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421383a3-1a1b-4342-889f-54535122e4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.254.106.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28847166-33bb-4ba7-894e-d65b46089c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.163.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806dd37a-1bab-42c6-b299-c44e918ea5ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.252.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0818937c-536c-4f76-8cf4-ed60dc44129e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.202.7.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347e0162-6b4a-4fb4-9386-a929f2386f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.212.74.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab04ba5-f21e-4e13-9d34-1577a9033530", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.213.190.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0af283d-3ba4-4441-9cb1-6c82683264c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.145.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da4b1b20-1394-43f4-b401-ffa0a3d27cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.251.138.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661e983f-ac43-478b-9844-3c3a15f0675f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.10.175.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23845a3d-3d40-4b19-a5d0-d0c8195bb8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.11.57.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6900f5fc-f32a-4e8b-8d44-23f7de464f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.112.149.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc3f085-ecdf-4650-81c6-b5bdd832a7ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.115.43.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c81b8c3-4588-44b6-8049-c75439eb47f5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.119.81.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77042f2b-06c7-4973-997f-88abbc79aa58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.119.87.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7988bb6-534a-4589-85b7-4322e34939b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.129.242.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad063ad9-92b6-46d0-8211-2c301b9e549f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.115.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b645c12f-150e-48e1-825f-119c7457e5d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.115.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d9abc1-17d6-45f1-a588-d896d7077788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.18.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a59acc2-5787-4e80-98eb-956f1b6b1a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6de49b3-b25f-435e-953f-2d1ccd40f7dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1483fd-bc25-4f7d-9d3c-a43d85d8d05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343a620a-afb0-4941-accb-2622a78da301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f98a4a-6a88-4fde-92b8-84117206aa14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.138.16.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca138a9-8343-428d-b7a2-53dcb1057f8d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.14.209.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc8511c-c87e-4653-9d7d-08c5af0534e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.140.192.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf52395e-25f0-450e-86b1-656b6f005b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c92879-6e2d-4551-ab03-3143f8b09223", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50abf3e4-7076-410b-8cf1-d4d70299db38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6071c26-003b-47cd-ac61-cf64dc916645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0798b49-6152-4862-9fad-fdfd841ce906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d372ec67-13fe-4b74-8faf-048908832850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768018c0-e956-42c1-9627-1e887f0041a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c16d91c-b738-4b02-a321-b7bb4f7c75d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a27ff2d-75de-4e99-9715-039aee39bcfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607d30fd-1bc1-417f-9265-7f307e1ef869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8ba4c9-e008-454e-944b-aaf689395a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84713680-a1ec-4327-ba1c-07c006b0b31b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4805cca-7361-4a56-8cd6-a5f58b2fe99b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04bed743-8ee5-4c6d-8637-f1d213049e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c71ff4c-7966-44a3-b01e-8e5893e15784", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de425306-201d-45a9-8e43-c4e10cfe6877", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293e370a-df13-4d9e-88d8-1278df625f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b6e377-801f-474f-aeb1-5c0dd4be95d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84485cf4-7f2b-4341-9307-951b70e393c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f9dab8-ab67-4e9e-950c-30efd4448bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b88c5d-5a12-4071-ac1c-b207861d7f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed40c934-724a-4df8-827a-72129bfef6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2b6a32-ddbc-4386-b2eb-4864192415b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5b5f7e-f126-4be0-bd9b-8005f527eb46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ae4544-816b-44c0-bcd7-9bb2a005cdf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.146.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf99b49-5fb8-4760-af85-d84019b5152d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.146.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e82451-2546-47e7-a031-0a538301407e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.151.123.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a23625-dc20-4fc4-a947-98c09d5d6543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b999dd-3097-4882-913f-fe46eefd7895", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e319fb-9a9e-436b-bbfa-838ae42ec051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8c54e6-daa9-40be-9f0e-bd8c0a2471f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c5ac7e-64b7-4edd-8f28-dea0da5a1112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eba771f-d589-4cb1-9fc9-991c72c2fe7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f3ecbb-1603-41c0-999f-98275113d0f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beeacc2d-a8a0-4f1e-8a65-6b96c3643c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ceea255-e71d-4e89-b4dd-089171188807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc166a82-54ff-4659-9482-fca8677c8ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e27f61-38fd-401e-8a31-d1bd303555a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3615dab0-fdb5-4444-8014-7bd6328faf3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa627cd-837e-4297-86bd-f5669ccdd664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea15ea43-ee13-4ffb-b254-bb762cf81a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da809ca1-300e-4710-a0a3-54240171a759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd6c454-38c5-4f8d-a2cd-2fe6e781cb26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2330bf43-daa0-4082-872f-0e8f993a9e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce11960-39b3-4433-9d51-603152c2457d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6f3e88-6435-43f4-b591-ba3b7c2c5eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036fb372-0ecc-41d8-b394-4d00ba56dc4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81231a67-1d67-4fe9-b509-b538a5586968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d04c48-dd09-482f-8010-e74dd16c5e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f311395-0988-4b22-913b-1884ebafd298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8c121d-d1c2-447a-b34c-0aa6255a2df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814ba05b-c460-4c66-9bf2-4fbe437a330a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d2575f-fb75-4fb5-a64c-ab4eab4a5722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af26d49c-6a22-40a6-aefc-cfb0e0ac8387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2673314-45f4-4441-895d-a3c1159ffc36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2da26b-c097-49ed-aff7-4ee42399d86d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38e1d4b-236d-47f3-a020-7e5c2d2c116a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8283357-9882-4043-a444-9f69ed413d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8462cc9-95c3-42eb-adae-aa515266aafa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfcd5e94-b718-46d6-b296-50fa6a3168e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0207e4-dd89-4cda-825a-167f71ecbb5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16881ee6-581b-474f-8ba6-f264f5316eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ad060e-3a97-4b56-bf29-6bba45f73887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee7de7f-5d19-4cd5-b236-e04696f98e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04ec321-4176-48b9-bb61-c546d7783bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21cfbd2-795e-4dff-b11f-71bd174b9529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1082908-fb5e-4be1-8a12-771f93f2a413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8995899f-0718-4a7d-9560-a548486b34bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd47949-5a27-40ce-abe1-42f611b3a3e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ce89c2-3259-4def-a120-8a24c28f6f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e929c1a3-68c9-4299-a1e8-8a586291e397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5062fa21-6f1c-491d-a8c2-c80cd0e02165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4be0724-7f52-4eaa-bb91-d4ba5a4d9872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1932b6db-debf-46fb-a6b3-161de716efc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e305f0-5aeb-4c72-b6d5-b9fd145e915f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8219dad1-38d3-48b1-a3df-612980080f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2469143d-c543-4ffe-98b9-6b264b46bc77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970ae834-6fe7-46d0-b065-ba438666f449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65778357-dea6-4d54-a994-e256c15e1207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020cd1d2-53c7-4c6b-a2dd-838ffe66bf2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2adecd16-3079-4a5a-ba91-be3005ed67b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3863960-c047-4a2f-b41a-3ca594e07361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3aafeeb-3322-455e-947b-a5a63849ccfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7269b8c-52aa-4e29-917d-af624d83cc2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be78e6ac-f76d-4fee-8070-50dc783d48c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4355ced-ea5b-4ac5-9907-6ce9f37f35c9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f73ccf-d300-4138-9df2-ebf3ea21097f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e2bf59-e692-44ae-9039-cd2f0b73ff2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b59d25-e9e1-4de3-a5be-b9aedb4d128b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb47f07-75b3-43fd-8e7c-c7059bb87363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ff1665-bb8e-42dd-b5f3-b4c33d732a21", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30eb439c-6926-450e-9e15-992f00ff4996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d369c6-bddf-4c6f-b83a-95c4f4c72bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b88c9298-01f1-4d0d-a45d-b8059159f9a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba05daf-5b87-49fb-8de2-3f29124057f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6044d7-4324-4393-ba53-eb8d284a1ca9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.161.238.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5daf08-1a96-4aae-8fed-3161b2625e51", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.165.238.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b83a4ee-0153-478c-9c36-60e1bbbd4c0a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.167.213.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147421cb-fe5d-4b00-af25-de688bbb4863", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.172.110.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39f909b-685f-4c87-ab64-13c54e42def2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.175.123.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173a2966-0bef-4f8e-aca0-22d877b6067a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.175.90.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e0f057-f8f8-4a1e-b6a5-acfbd2da7b73", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.177.146.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4efbba-1ed1-4c79-8161-fd4ad7fe13d6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.178.70.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5059b0e4-bf66-4409-8d39-e4701b4ab207", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.179.0.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b474b16a-f7ed-4989-ba46-b5f22b6384c4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.180.44.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2749783-13ef-4fa2-b060-72146ac77106", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.181.85.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18555f3-5c5e-4b1a-a701-0539c79b2342", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.186.208.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a54fad2-df6e-4ed9-99a2-0622a717f132", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.188.69.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de111b2-bef3-4b27-af3d-62f2309c8278", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.189.212.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cdea345-8a8d-4f08-ab34-df021a958360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.190.95.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb2d75f-9e94-4c24-abbc-d936b4edbffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323382f6-66f5-4e5f-ae37-05b8e95af8bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7da97f-fa11-449b-909e-e10f1fbb1bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5129638-f065-4ba4-ae28-591dd4ec4e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac55358-627e-473a-8d68-c3e412fe7e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ee9690-d801-4415-990d-846e26942a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e1c76a-91a6-4dcc-897d-5a44bef14a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b8b8dd-7179-450d-bb29-caaaa7fccf24", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.195.210.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e003333-722a-429d-a926-be5b34b12802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f04a2ce-748e-488c-b933-2fd61b2272f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6982bdd8-36f2-4740-9c7d-81aa2b89b04b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd5fb65-2fe7-4d54-a84a-a8f5edb4376d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc8372e-1036-4a48-979d-6afcc77979d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028df97c-22cd-4b8c-b6b5-456b7ede2860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9cb82fb-1f28-455a-885d-8440d335ba6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263ee880-307e-4f89-b389-a6a3921224ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e696e7-8e87-43ce-95b8-dddcb70be8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d5a91c-e09c-44cb-9976-c469ad23617e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7874b053-9741-470c-bcd4-79a71af905d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88dd5e8-8619-4359-82ec-887865316297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb45dedd-3731-4214-ae78-ebb8bfd94ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e50075c-8617-45c6-afd4-6f4a523694e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.220.15.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209834bd-60f8-4349-9f70-3fb1bdde1703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--171ce74c-a94a-4612-8b40-f62d5842aa62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e827ef-763b-4ac8-90b9-ee6008ed5a8b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.193.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76942c43-0e9b-442d-b688-06d1623c87c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.226.104.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a94668f-130f-4a83-aa2a-7ea61be269d6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.226.18.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84139952-dc64-492b-9862-03eb89732af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbaff81-546b-4db2-868a-a74963e111f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3615c213-0960-40d9-a081-80f0447ef651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b16e31-f534-49a4-85f9-9b107c0ecf46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052df2d7-17d8-4703-b876-fdd61e0decad", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf10aea-9d0c-45ac-bf40-0920c12fa6bc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.229.85.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56634d9-464b-49a5-8522-d38848b5b642", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.230.171.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af68b80-d759-4093-bac6-e1cebd7e6340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.232.32.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf77e87-ce47-47c2-b76e-5d57b4fc69be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.234.207.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f400c0-0046-4bb9-acd5-3efab57495d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.235.122.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aaf3713-76c7-4abb-85d7-8fd24d9ac920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2cb0597-4786-4400-a2a3-bef4d2b2df00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4206da68-011e-4340-82db-b74a2159cb25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1933f61-77dc-4bc9-a606-84ff0207a2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.251.239.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8686d71-2f5e-4dde-93ad-f52544b05241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.3.62.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23351e6d-a808-4e5f-855d-de03847da417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2429a865-f1d8-41d8-a0dc-6f14120eca05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab2fbc6-ac50-40fa-99e6-6640d19996f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c37297a-35f8-4796-a29b-71ccfe78d5b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce2bbc3-99f1-4f9e-a8b0-19fa0a206857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.113.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7084cb87-4868-446b-bb2f-432be234bc7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cba1f7e-c181-46c9-82a3-f92537dedbac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2112d8-2152-43f2-b73f-cfc06509819e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.13.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e31b3d-cd47-4af7-b343-5f66ee529236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1229970-2083-4bc0-8fa4-e04567385261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd97b53d-61c5-45f3-9cbe-d1ab9cb1e79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f09240-dcce-49ca-9721-1ab9fc80deea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.46.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f525d1da-86c5-40d3-8d14-6b6b8fe19011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aad4fbf-8252-4133-9551-10882b48e25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.68.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350e3708-2b3b-4074-a71e-d6032ca350da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbafb9a9-5b38-4b5a-8762-fa48a5fa7f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63bcb9df-e55a-48d0-9bb7-eb696dc8c569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.80.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca0c78c-0c2d-4082-b74e-3b70526fac3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2c4566-5452-495f-8783-50b541f5e566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8b90ea-066d-4971-a623-05d4ab391e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b794c3-0f62-402b-8b5c-1d2fc7389750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bd70c9-3c4b-41c5-9776-0d28d79c09fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.85.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ab577f-2892-4475-bf87-cae2cf52ee63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.88.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9493a34c-ecc7-49ec-8151-38ffc5724788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cab0076-d6b8-4016-bb05-7b138fc2df24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.90.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823cafa3-1d9c-4086-b8d9-55fb387db4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.90.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23787c43-14b3-44c5-a586-4e8e4f74423c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.90.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb63f08-641b-4617-8c5e-d2dad06238da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.91.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0695aef3-0b52-4b44-b0a6-d6b0ec19bee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5930df90-7edc-4940-9fc9-528761f4b252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce390f30-5eea-4e3c-815d-47fc536e38c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca90d5b0-22a5-4413-97cc-b23219fdaa25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64571acf-daba-4cb8-9351-5957715d91c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d427365f-dd60-4310-bf0a-e6e78957ddda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8f1e4f-dfae-4908-a0c6-f68467544eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5e8513-f232-4150-b05b-9630be60ccc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--599001c0-bffa-4020-899f-f412cbb94e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.41.105.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76429bd8-b52c-4bfb-af5f-7c9f10455d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29e6807-79ba-4afa-86a9-675eeb1bff08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8dd5da2-44b3-4180-b934-396b0da30af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434a8307-4e1d-4133-8632-b7a8929bf366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de4d40a-13df-43f3-90ed-f1918d38d21f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da81bac2-694f-4b37-b311-95d1d814fd39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e31e54-381a-4b49-8ffe-a31c46ff1fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2938df1-63a8-49e7-a852-4156dc429ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13e290e-b75d-4559-accf-beb1a1f72bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24c7e52-9afc-479f-b3e5-1ba2fc38cfd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63b1073-2d41-4fdf-bf78-f1d941098d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b331c753-de6d-4159-9281-a35edd44fa5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.5.102.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9271ece5-06e1-49cc-be15-bbdd9e70a090", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.5.117.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9948b2b3-1f4d-4f0d-8704-7aab432b5bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.151.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad2cc2f-7d73-49ed-8d58-572bb587f928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.153.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40a0e0c-a24c-46dd-afab-3c513982a7fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.103.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4369ac93-9aac-455e-9517-0bb7b101a074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.103.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e73295-2499-4501-a071-8ae7e1a74c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.103.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff2d9f75-685c-4dc6-83b0-9d48e250bedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.103.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad5521c-5c3d-4cfc-9040-f003ab854fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.109.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf5c7db-df9e-4eb2-8a70-8d40b70d9c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.109.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b60b31-0bf4-4f55-9a53-7e1441f7096a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e91447-500d-484c-a884-f68126e15c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.124.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b79c4a-8132-4d2c-b58e-5584fb2e7040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.66.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5f2756-82e3-4159-8886-2f775db6976b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.68.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f948c29-309f-4fec-b6d4-8c7f8159c55c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.68.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a18c648-1856-4ec5-9608-50208bd0ec4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.72.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe960cbd-824c-451b-b0f3-b7b03aa61ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fcef7ad-40af-44ef-9cfe-ab2b09d51a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb1cc98-de9b-40a7-b22b-75c0a850a58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8561e317-f30a-491e-b5e2-2f19e7d79080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a375c1-1f2b-4497-aed5-19af663ce798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a67a14-649e-4cf9-9c4b-f9a8dac941a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.94.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c5c430-dd7b-423e-b34d-696bf5733ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.63.4.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6eb819-0488-4fba-9b7b-c97a920cad66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.64.107.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289b8e6e-9023-49ef-a408-be244f74ba2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.71.85.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abe9a42-fa4e-4b91-808f-1003f63bd590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04377c2-1bdb-474b-8cef-80c7c730bc3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe463fd-32d4-4ab1-929d-6ea063e460af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f57667-1e54-4044-a03c-24d9093160cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ea5b05-6b04-4365-b82a-fdc5b29a9fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4acbdce8-ec65-415f-a663-b00556532c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71295a1e-ac97-4ea2-80af-e9f1e7b6a764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7f566e-9741-4a98-8f84-be0f25097be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c61c55-5e14-4ed5-a11f-a398af32ecf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.143.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f47d4d-6a17-463c-934e-fe77bc048def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.143.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c609aec6-3d30-4a74-a50e-e42dfc6f5a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.150.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99804968-b30a-41a1-88b5-dd857a804cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.150.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93edac06-31d8-4ddf-ba61-c9e02afb7f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.150.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df9ae88-b98b-4d53-a36d-dd34d7e946ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9184d722-7cb9-47ab-a0ab-114a3fdfb66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c29313-c6ec-44ad-adf9-050792275dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3dc188c-bac4-4c2f-af75-837e0c075e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.167.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026d3f69-a5ec-475c-901b-0ef85fb38ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.168.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cadcb96-077b-422e-8858-0ff75a46db74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.175.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cfb6810-9833-4244-b3c7-c133f65396e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50107b9e-b316-40dd-85e0-751b04b52926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fb7d0b-aec8-4e1a-babc-76f0efceeae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73acea3-ef1b-4f92-a63f-2d09f36a102e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27827f94-3dea-49df-921f-a628c493b41c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a4374e-097a-4107-8c41-d19095f859c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60cabf39-f1e1-4b3d-92a4-eb07eefb3c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898ab323-a842-4d99-a23c-e1ed5adb5ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c486557c-1484-4e34-acd7-0cb5275cfc13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e7ad04-f46f-4e56-bfe6-eaaff0a27257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.206.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5145d5-5e5b-4079-be77-08fb4afeb473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3941ff-52a8-457f-a7f2-a9d0d26c1578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf9f973-8a0a-41f2-9f79-c1670f03a7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228c9014-f61a-464e-8575-0615cffdf3f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe132de-2032-4356-a1d1-c1e6e8461f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a8f5dc-0067-408c-b82e-67521d28f0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41bbef76-d764-48f4-a2c8-c40fdf131ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.214.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e453ac2-e07f-450c-9c7a-8865e4b88345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d44ef0b2-e71f-4497-813f-9e67b36fb360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.5.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12974b3d-9714-4e6c-9c87-5d58941abbfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.67.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695decc1-c9ab-4a52-8cbe-361a4a5f7111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.67.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf07cfa-3a72-4277-9e67-9f568f8679d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.8.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f112b5d-8fba-42ec-873b-88470986ae26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff7e632-4642-4217-88f9-8197e5de352b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa23508-746e-4c5d-9085-0cd43e6cd7de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f17951-ad7e-4fda-a7de-9fcf5c68aa5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303e29fa-258b-480b-a671-80a122b400b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7a46e3-0700-48fd-ac1a-2964705a0b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053f67b7-4e4b-42e9-907d-61a478795d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f22703b-4c9a-4b92-b6dc-30b89f20e60b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a28c8f4b-6092-43da-a2e9-b6f5ea95a9de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e028562-965a-4858-9a28-4f205f757ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a7ec07-835e-4292-9059-971888641fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e44d4d-96d2-47ef-a836-0af13ac40d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d8422b0-dd65-4d02-af0d-9587247cdb70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d6e8b4-beb6-4f78-8d66-cd5719b19d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edda75cd-b872-4fd9-94bd-d7b2759d949f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6d1d80-9f44-48f8-a340-ccf32cf24386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecec6042-f9c9-4fa0-8d34-64320e605384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972afb35-7749-44cd-ab85-9ba6d2d30149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd77add-ee3c-4daa-a71a-535a1384acd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ba5022-0ad0-4174-94ac-62ba009c8ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccabde46-b04c-48ca-ba1e-990b7aeff5b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c53933-d8e9-441d-beac-6f480890f663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81bc9ccb-d636-448b-bc43-00394edf6fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb89f0c-fd2c-4e54-ac35-d143773ff478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d9010a-6883-4bd2-8fb7-38a3ce5ec792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57208f59-0433-454e-b24d-ceff6e41488f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c102dccf-c132-43cc-828b-59aa1bb38618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beefcd42-dd15-4471-909d-f4279c03ab29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007784c1-1254-40c4-a8be-ba5134e293e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7dfc4d-6108-47d6-97f4-471b34b3b972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af2183c-06c0-40dc-9b8d-450e57820516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--234bf012-1b4b-4add-882a-89649991fcad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7fbddeb-afdb-430a-9e08-f762d9c56e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314ce383-b127-461e-adf2-04cbb0d4eff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f1860c-9faa-459a-a893-e02ecf0516ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f32902-5c61-452e-9427-3eeab7cabb27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7120dfcc-0aaf-4ea2-92fd-4ad57398bc72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be5b6d1-f9bb-46fc-9d68-e99a17b54261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c27991f3-f6a4-4f38-8ac4-cf0d992d5f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e2deb7-76eb-4b2e-a1c4-d35846e5dcb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e59cc5-e941-4746-b166-e944100b868e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7580d68-365d-4a23-a81e-45a900a1883b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440aecdc-a3a5-4713-a687-a3272c65566a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a7bde7-92fd-42b2-910e-3fb2c63cedaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb91f3c2-da43-415c-8279-f9f486b14669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a65e363-2e9b-4a37-a298-aa7d70b42f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa83746-dbae-4f30-8d22-455128ed08f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d091ff-ebbd-481d-8107-4756f88bece9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d31f94-f3fb-4537-b1b2-41bde300d3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd82679d-21bc-4851-95b2-ea8369f62e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd17505-5f49-4070-8f1f-ed5ca4d9f306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90bcc446-7131-4e70-be4f-298bb72b6af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94dc89f5-6f6c-432b-8071-52f230a77a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20117569-4992-49de-9c07-e0ddeb443c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8986f4-24d1-4b30-a949-f184686b468c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0b9060-4157-4306-b737-59e81e6d767c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d0f08a-6515-4168-98f9-cff19b1fdc81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069cc2a9-ac4c-4e4f-bf7e-3a48f93c0f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d945ab1-971a-4815-aeaf-91f3f562398e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a00b4e-d09e-44ef-b2aa-6cfe342c29e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a1996b-8a97-48b4-99a0-359efba021f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab4fc32-9578-4336-a9b3-e83d2eef0b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b75c9d5-cc3a-4c74-9001-9dd8d89def82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51757bf-f9a5-487e-9250-f412e9cd5ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cbb2a0e-7e7a-410e-9425-4b23921ffcfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380eb8eb-a35f-41dd-8b37-d8b4f1617b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e66f171-b013-46d5-b8fa-7d0b31cbd355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4e89de-4c85-424a-a84b-2dc7c5866436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9531b0d-fb3d-4d37-adc4-f3fd2ceb1441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b82afbb-380e-42b6-9a0f-c6bd1475b588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.16.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58732fe6-78ea-48e7-ad35-da2d068f6626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf8149d-ed50-42f5-95a8-35206b5687b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ea4fa7-68e6-42ff-8f1e-d4b4f28f0837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318ebd97-6728-4551-9353-6b5c07c91307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36744b47-7a5a-4395-b75a-0ec37b1f1b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5784b8ba-4821-49fa-95be-d36d9fee083b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2bedf6-579d-4d40-b07a-727cd2c4b378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6eeba3-55d0-49c9-a860-4726aa8234be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef94fe1-75f6-41e5-a870-52ec392a6f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdca70e-9100-48ad-8760-fc292431f2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d51e9ee0-b1de-4758-a30f-8f7b2b08f56d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de179bb1-9165-4fad-9037-40f5a7926807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a61d24-ab8e-48df-8693-ce35df7d3786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3fc7c7-111e-48a5-b6de-3425fc12b725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e3ae16-10cc-4e45-acb9-e3711a1e040c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c3b21a-5f64-42a9-a4e0-f447054252e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d94da2-10e4-4db2-8897-00c92f324674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a169c3-8401-4b2b-9f52-df53d312d5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602a4d31-6b2f-4814-b73b-9b74fa34cdf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517e52a0-47eb-4ed0-8257-9b5b378e003c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dcac68a-219b-4c6b-ad46-a2f55f170f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29298456-74b2-4980-98db-c09b57d31d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6406d083-5b9a-44ba-b82a-693679e03572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803c5585-a4f7-41d7-8313-fc55b694bb48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae94fc17-1cbf-4da6-a8b8-03d4c4dc4f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374adc34-016d-4c9f-998a-6f34401958aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c66ff2a-0bf2-4337-b8aa-71676f0428e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f004a65-a0e3-4c60-a874-9df54208d816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b7d258-4c85-414c-9fbe-0ece1e2740b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b064ee39-b09e-49ea-ac86-30832bea3b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a398f9e1-9f9e-404d-a4c5-e6ba3661d88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a748f5-ed87-4198-9f92-bc47bce189c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717f1fa9-0d7c-44f2-90d5-00201ce09eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66702827-fd28-4916-853c-91c3ebb22034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da5ce69-72a6-4c81-a5b0-10ca25249973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4528aeae-64f7-4284-a185-40c6c1802313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa223d99-3e83-4d88-9bcf-ab60a64f913c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98e6a5f-9f7e-4f44-8069-874ab5fad537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c18c71-4556-4316-87b8-eff7fd6004ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.17.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671af8d6-f0aa-41a0-a6b0-23d2e4aca766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5feb5d22-ee69-42ef-8be3-3f09c703fc07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16627aaa-1341-4d80-93fc-32da27f796aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc813b8d-3c3b-4ae2-b3ac-034630c20057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282c87ed-f3af-46f7-b376-9be4580bf831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6be580-5b22-461d-88e9-f4fde1053536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760ba4bf-b98a-491f-96a6-0a526110f735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924ff8a2-3166-44c6-95b3-44ea9bfd3e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a0d293-b19c-4dc5-920c-c7ac62d3e00b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9d1553-c667-48b3-9f04-2e5621dba37c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36131a0f-0a6a-42f3-bce5-ec649ffbeadc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c36095-4c9c-430e-a5b3-0da17e7ba1b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c672e1-a9fb-4cfa-9471-17abf74d925a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab07dc5e-98ce-4a2c-9fd0-20456ae8a77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd52161-836a-4f19-871b-09b16332e58e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ceb8a3b-0663-408a-9c6f-d199d60ed00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc5740b-4151-419e-865c-57e5dc0542b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c7b931-96de-4f39-b12c-da084cc71321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0291d0fa-0696-4f23-b788-81f49293e6f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2481eea6-11ac-441b-8903-4bb02ef07dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9d5f3a-7c22-46f1-925d-22ebc739fc2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f51f66-961b-47f4-8138-a116e723e16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f59508d-28d0-4b87-a98d-dad76f96b223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94337ddb-a489-4c5d-8196-3fd295a9cef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a58bdf9-2b23-4c53-bb2f-3e990b198963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32beca00-0305-4cf5-bf62-c32f52832362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55851dc9-46c5-43ac-9060-355ed9d4dd2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.18.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0784f3c7-05e3-436b-bcf3-86ea806c2209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54e9a45-7415-4318-a8f5-42de2bcc254f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad0d138-a77c-4d02-9b4e-c3499f1c793e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d770081-f3a2-4e60-b0a7-ecf6c7a2a7c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c0510f-f0dc-4905-841e-6af4496269e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5dcaa14-7a0b-4b61-a5a3-adbd840c8575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3214b613-3fae-453b-bffc-c237cd34a82f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbec5abe-9bff-4d7c-9e7f-534d6d635220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31cf78b-70e0-467c-bb57-e0e36117665d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe51c723-4556-4bc7-acac-20f7fb1cf07f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23393d5-e4e6-430e-b59e-281e7556c827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72cde115-3126-4b39-bf15-cf83cc40f6e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7866a56-0c4d-4602-83cb-21de956c487d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916391a2-78a4-4627-8bd2-485504e25374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca52f7b-63ea-42f8-bd4b-bbf6417747d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4380d9-a69b-4f29-88b1-406b9b2a9853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c22024f-37a9-40f9-a6d1-a00c859d0112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510ff8d6-17d8-4524-b12d-d23322aab38a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54265dba-017f-4290-99f9-039a1cca161a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c21353c-366c-4b59-a734-6e89d5b5f742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ece907-6e0e-40dc-87d5-2ce52a77afd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9bf758-6689-42e5-801a-d257bd674375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a15b28d-fb22-4d62-a6d8-d59efb32043e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8558b70-a422-4cac-a6ca-cc57f7762922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808f32e6-aeee-45bf-b53c-9f326fac4091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40a91fb-a92b-443a-912b-1d8f19d390c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e72aa4-ad59-42d2-b720-35a7025e980c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a7e308-24ef-4faf-a40d-e7dca1004b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.19.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a30104-564f-4dc9-bc01-fb7adf8c6bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a932421-0c8c-4670-8626-f727cda25c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.229.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d201fe-f685-4cb8-9707-a666623a4f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.117.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95742da9-61f7-4a2f-8c2b-1d676de43065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.129.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06162299-90b2-4053-b28f-52187e2b36c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.148.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6921ce4b-924d-491a-9117-995fbe547139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.173.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85c3113-3d8b-433e-b59a-80f1a32a0908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.180.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccaa8063-3f35-4812-85ea-8c9fa5f5f22e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.186.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbfa843-8522-4c31-9017-628dedf20221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.193.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c428eb9e-dcf5-4129-8c8d-60672e54deeb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.201.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9f8096-f60d-43fc-b900-00b57e57c9ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.254.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28728fef-90d8-4d67-b8d8-71aa8c4f9bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.255.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b09f82e-8f94-4e7d-989d-a3b545b8e6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.88.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda6a6c6-3da3-4183-b946-6f3261f9a96b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.94.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78fa487b-d564-40ba-95c0-2cc8bc6f24ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d2c0f4-3514-4cb6-8962-2faedef7c348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b717a2c6-e314-496a-a58f-7025b4795970", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.160.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46bd851d-3be8-49f2-a6ed-b6d9c8572ed9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.135.109.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2b326d-8837-4c7d-b79f-d94320e71d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651efa44-0e0b-4de7-96b6-4e4a3277facb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.61.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2cee81-f8ef-474d-8412-c1b96d9fad11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b4c0f7e-85c9-4658-b4f9-b7ca050520ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.165.56.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99778f30-5efd-44e2-b254-4cef60324ead", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.177.77.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33f465e-c845-4b9c-8742-62a2a5619b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.188.34.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d0d58e-9dce-41be-a1fd-4dd21f6eb5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.67.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3df726-4f15-477a-93d6-30058a644ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.224.203.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e960ecff-6aa5-4e02-bab1-287ff79ea624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.225.18.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbcd659-b02a-4d0f-b9bc-3efe33365f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9248f9cf-4129-4096-81f9-8c855def1919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18053e1-cc53-449a-b6a0-d5da4df551f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e44fee-31d9-4e54-99a4-45227a4c074a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9462002-61ba-474c-9a75-508b082d7a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08eb209-a966-42bc-bf3f-e2a8b4a8d647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e1687d-886d-404a-aecc-c4a8b5142e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28cbc23c-804f-44bf-9171-ca72679a3bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f05ab2-7f2c-45bb-9f1e-93ac5e5f0de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b6afdf-bfa3-4303-bbe8-2e9be5a8da37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9615bf46-e011-4210-8662-28ae134c481e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e015610-ac95-4d56-b177-b93c8553dde8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f92b64-1417-40c0-838e-7ca374c1d630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9008ae-c298-4e42-99a5-499323e122dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b61418c-d4b1-4936-a90d-3ad704b3719f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefc86a4-2d91-439c-805f-aa1e366dc372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ca4554-d114-45a9-85c9-ace90d5d848a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d857c61c-9fd3-4bf1-ab11-f2bf866678df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.250.254.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0636a2b-be2a-4a8e-8d65-3980f45c795f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.38.146.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceabbd6f-70dc-4a0f-a8ee-ef5f72053bf8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.99.181.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22560fba-bd86-431e-a19b-12fb0ae97ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.103.36.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3c6d3a-a2dc-4e1f-87b9-d957cc3a50a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.111.161.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e882a21e-1b62-400f-8da4-6fd48c7773e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.118.84.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645b8922-12e5-4279-bdcf-a6a7d3174728", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965eabeb-204d-48fd-b0f4-23bcbecf3ec0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc89fe7-b429-40e6-823e-ffbb7f40b4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.130.108.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65e14f6-22ef-4f79-a27c-e42fe42b06d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.15.219.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbbb700-8f06-4476-a315-ece74d7d71a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.158.3.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a0b81fe-1bf7-4382-998a-d76994f3c04d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.162.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5667520e-c1ee-45c7-b355-16881947cbbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.189.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43207cb-ed62-427b-97b6-acb08865fe7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.63.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deaf8312-7654-4f74-a457-f179c54a54de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.112.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e50f51-0708-43ed-8cd3-66cc84afbed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.118.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a144403c-bbc2-4958-8ef9-0e26cd5e9610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.187.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d2d9fc-3506-43e6-8e03-cd9405e29476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.20.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ee51d0-51ed-40db-8578-f3e0c3b8a3e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.239.109.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a596d524-9a3d-4c28-b6f9-21145d5ee64a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.242.3.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02b4523-30b2-4e65-a69b-e8ebc0e4af8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.242.37.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116ae1e6-92e8-4f23-9cf4-4ae5e495c55a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.117.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c6788a-cc5d-4ce0-bf22-eda6726f8148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.127.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ea176c-522a-4b88-bb7e-b741ba2a5c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76654b50-18e9-47a9-9bb4-8be694363db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35971ad-d0c2-47dc-a548-d1bc78e93846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff49a463-c587-4983-9af6-4012b1a4461e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d95e3b-60cf-419d-b91e-d21b08589922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab91855-8caa-4991-92e3-1d4533468e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.13.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883a1500-8416-49f2-a53e-97e56323a64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.131.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31894472-e5c4-4cf8-856f-2621de01ce96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.131.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0c2b3b-c17e-4543-98d6-324e93fa435a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.131.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95c12b8-d1e3-4232-8ec6-9ed96b4e41b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.133.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289aa12c-d665-41b3-8963-e452ec63d413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b950b4-d827-4170-a139-45cfe5d53bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6fea710-625e-4724-948e-f37dcafca9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7fde12a-5b7c-4a12-8ce8-e1a1b67c6cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cfad533-560f-4f65-837a-a64f9b8d9e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e5c4aa-83b5-4b56-b153-7ed8df7a08f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1d7e58-d6fe-4ebf-9dd8-740e105fe297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08ecdf6-f579-4028-83e8-33ac163c7e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860795af-22e9-4f23-bf14-b7d7b7ee92f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500f9141-7ba5-4300-9086-8b18dceb0882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1216405c-af6a-4afb-b050-6a7a96eb3798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5489396-d5eb-46ae-b466-8dc1363cb66a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65a2a18-5fc5-44d6-bc57-aff8ccb6b2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e4f096-a73f-484f-a14c-59748a080040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f998673-90ec-4b7c-ac5c-4097b6614d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071f16ee-4008-4bad-baf8-4529ae91b6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9719fd-9ce9-4773-b8c9-6ad40a317229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d661cece-3e18-4abf-b91a-dbabd4a71bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fad7027-0c80-448b-9298-5916aa0ff337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633478b6-ecfe-4961-b4cb-6c45116ddce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eedc0bab-aac5-451a-9243-c116a2d4979d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc9598a-0a76-4b4d-84fa-c886a1472f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.54.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c562def-736c-48d7-a8d2-b40312fbe97e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.63.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1416370-36f9-422a-a539-8b4082966ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.96.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f4fe56-72fd-4262-b6d1-218dac83789f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.112.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560b3fd0-206b-4f3c-95a3-37a335fb852d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.113.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e8250c-6632-47ac-b89b-747911f999e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.114.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc565490-4e44-4f76-af6f-bf89b7469eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.116.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d229ffe4-0263-4267-ac4d-d367444e5ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.117.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed59e21a-43d2-497d-a6ca-41584f751fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.119.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c53091-8c9c-4519-8cb2-3e2c093dfb90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c69d86-db22-47ed-aede-7d71214f071c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.127.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e29ec1-ff31-424a-a19d-8a719ced1688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.127.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f387908-e122-4e70-9dd5-009d3fd75ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.128.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45c5de1-a190-4b8a-b6cf-ee738048aec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.130.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6cd5e0-31f0-4a7f-8521-c9e5c36b23e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.132.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc70c192-a900-451c-a75c-889002264dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.134.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78de6128-063d-4d22-828c-90b1e52d8a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.134.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b210a0-71ba-4761-9ec1-f93e70fde1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.135.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d86b9cd-1f0d-47b7-a966-416c740ede70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.137.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3965ec14-1937-44f5-9b25-3c2a654ef631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.138.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b792f3a-824e-4fc1-9f66-77b03ad6783a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.143.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342e77aa-d9ae-498c-b649-4d388ac2b38a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.145.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e28a39f-0fc1-4c53-b43a-380f2af80a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.147.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59577ca7-766b-46ea-ac4f-8d6311b2ce5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.150.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3181ec47-6cea-4d9b-88f2-235411d5da2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.153.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1869226-bc43-4320-a511-d5f5807ebf09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.155.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df90ff46-0839-4239-8952-40c5945b355b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.162.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c060c1-453d-4765-a416-023f07e34d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.162.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6256cc-282f-459f-9601-7164bc7fe604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.171.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aac9325-8b3f-4ccc-a533-137cbb886947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.174.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ac8c0b-b2ca-46a8-ad28-9e37b04cbd76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.178.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7462ebd1-e1a4-46fa-b61a-789500cb650e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.178.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320451e5-5460-447e-a674-75b10c24a628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.180.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c29f8f0-45f5-4ab2-ad05-15a14e1b8c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.186.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f476f3-721c-4a14-bafb-2a81d5f3841d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.189.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f72b7c-0cdf-47af-b9d4-bc32a5667a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.193.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1fb96df-bbdd-48ef-9b84-8155b159a5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.195.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2240438a-d6fa-4225-a6ba-68be302a9d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.195.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deca9300-d386-48b2-ae71-0cb19ad2479f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.37.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63930653-5289-4449-9fa5-4449bf871bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.38.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94e2a43-e2dd-4799-9066-dc5d38dd9107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.38.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9fd96f-6174-438f-a0d3-7de1c8229b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.42.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a95be1-cd0c-4906-9c6a-fac306d8cba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.45.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6692fe43-e153-4e3e-a2d9-33a7785e3e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.49.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed71bf98-5b4a-4372-b01e-ee4f4a11f4ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.51.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c3748f-9df3-4410-8e89-5aee6d3a4ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.53.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e217c910-d7d8-439e-8fb8-491d230b5032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.53.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e64700-a50b-4cb9-b89a-c014f457e2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.54.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3755f7b9-1452-44e5-b3eb-7be8d393ac9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.57.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ac48a1-2d50-4e52-b56a-22ae41edb938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.57.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79400052-b470-4722-9a1f-f6f927066a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.80.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea95600-10f2-48c4-9eff-49d6c7af05a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.82.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a95e6b-d2c8-4ae5-8cfe-a0bf11038171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893b3c01-a057-4fc4-ab7e-284c2ceee8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ce2ba4-a453-41f7-96d3-b8487f5fad2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9cbf8e8-0cc7-46a5-822d-3875bfd01e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de2a6dd-6cc3-43f2-a869-2e1bde8e054e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.90.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ccf86ee-9488-40ab-9345-b0bf254ab6e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.91.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f9bb2d-4d44-468b-8406-c2c4a6d0a925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.92.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c171de8e-db22-40af-b0c9-9b7b9777ceca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.92.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7533c0ed-22f8-4c08-ae42-3ef8db93fd71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.93.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca11d23-648c-4369-8b91-cadd2ff65bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca9c6ec-e84f-445d-acec-e2379655989e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926eb348-9181-486d-b7f1-a8ec945c82c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.104.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d49a79f-b395-4eee-a834-752f172851e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.105.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06cd4874-05c4-46ab-9087-aa2a665c5926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.107.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8ed264-3282-43da-b603-ab3492768d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.115.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91eb0f8a-819c-4951-b729-38c6b383c41b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.116.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4b6b5e-9c3c-4cd3-be92-d8a795bcf1a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04fedbb7-af31-483f-9d6d-e298ed239177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.119.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dab0d0c-befa-4fda-8c23-9fd9c3f20509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.119.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237cdb98-5b85-4f9c-b671-493c3dcdab71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.121.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4916addb-0d30-4113-9a73-f29c25411419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.121.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d19e3cb-3778-488b-8021-0293892a5bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c9c0110-fad4-403b-b220-1571e8929726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4181db-da12-48a0-967a-d3df843971f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02474d9b-5e37-4558-b717-659f54d409c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e54f47-e547-42b0-be91-b08f61b88c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.123.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37855b9-8361-4f1a-98cb-77f510bd81ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c4f687-8386-4068-8bc1-94cfd5209ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0c3eb4-710e-412c-986d-77f6d776c233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c202ddc-1a79-4cd5-a4b5-9ec7c74b90d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a16432-9a8b-4399-9f1f-8ed76e41675c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a415da7-5ff6-4d41-9d76-ed51bc3965a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9a5a47-de97-4a25-9e65-1d78259f9a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.13.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eddb7102-8bd5-4e84-aa1a-07cc5ce9a4ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.13.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d25a39-e9cc-4f06-a491-303108e36c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.142.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9f5f85-19c4-4219-a8ea-48cdbcd705c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.142.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895926eb-2ece-479c-a8d3-41b191ff8b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.160.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a893093-425b-4b15-abc4-13876d19e61e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.161.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a1e63e-f5e5-49c1-b004-a034025115e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.162.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4da1d78-a4a5-4d4c-93fb-2c4b4185d422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.164.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b409d2ed-9d37-495e-9335-3099244f4fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.165.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a368048-102f-4df2-8802-a29304d2dfca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.168.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1207aa33-900f-44c1-94c3-9e5dbd7dc2a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.168.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d356f95d-2a50-42bb-a9dc-d62efbe4d849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.170.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5094649-499b-4e66-aaa7-56343f8e3001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.177.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f06ae9f-6a03-4c92-aa44-5b8e645d6f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.179.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0b2bda-8d11-4027-9a1d-9412320545e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.180.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d97db5-5e72-4110-8abf-b0290cac7458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.182.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529ed9e2-0ad5-4902-8cc5-cb55c00d0cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.182.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25baf87-d552-4f53-8140-89ec020b2ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.185.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14da53b0-94a8-48d3-9bef-a6e6f1df05a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3038c3c-adcb-4988-a8c4-942c478560aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eac5ff9-9a02-46b6-8d5d-e577102f5c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feaa3b2b-50d1-4851-8e20-1c8c416b132b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a410b66-1c9c-4d25-a663-6b649aa80748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.241.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8086ef11-ff7a-43c9-b45f-57693eabbe1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.242.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d7c1e2-725f-4c2f-928b-cf80ab8e2cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.247.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6793e9da-f2ce-446a-a3be-148fd8d20989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.248.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db984cb9-a39b-4613-8e70-a6b4506c7643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8bfbd7-d041-4a87-83d5-569c2e0bc109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77ff3ee-73fc-48f2-9531-562ff3a15a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.255.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6548b1a-8f1d-4922-8ccb-6310df8a979c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.26.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b360549-ce41-4674-8b44-52931282adc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.26.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f24fa0d-5646-4c8d-a84f-f5137eed7870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.27.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46bb239-bd45-43fa-aade-1300973f2079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.28.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b83cbd-f971-4b2c-89d9-cbab9af00b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.28.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a91e6f3-c09f-449c-b11e-1b2b9cdedab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.29.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b68c00ed-fd7a-4085-8738-e257968dbc22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.30.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255e3203-3a01-4049-a312-1a40463777ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.37.0']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9da647c-8388-4035-8a7f-e141da43dca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.40.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--213e4569-c67f-42d7-a345-d7b1bc875859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.42.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0340b7-fc89-45c5-a43e-cf6e17771ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.49.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f3feeb-3923-464c-a757-96aa32e662ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.5.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116f5c7a-4d4f-4f11-8742-2a7b8bbf4bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.50.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3587d91b-535a-4ae9-8cf8-fad851ecf627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.50.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d490436c-d5dd-4ee9-a347-b47a20675c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.51.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893a41cd-d389-49ae-a154-ecccde499ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.51.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43f5d82-c635-49db-b2f7-e75ae8f1d66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.52.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4bed46b-26d2-4edd-a3c9-bd2c35322598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.55.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd81a93-d423-4218-ba4c-1ac4b8575e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.59.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3021c006-0fe3-49e5-b739-1b0b4d9a3a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.59.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ccab27-bb3b-471e-9271-859e37dde863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.6.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d38e30-2edb-4371-a555-f892398cff5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.61.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86050548-cf68-457d-b486-6d192eb327b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.65.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45eda53a-6815-4a8e-8efa-bba15bbbb1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.68.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--facf7325-957f-412c-83cd-7a3663f050ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.70.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f03d38-0020-4c00-aed9-336bb8de7d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.70.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364892c1-ba04-4aa9-a2a5-ec42188b9426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.71.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96792b38-cd7d-4da0-947d-87d3ebc7691a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910177ad-4a51-40ad-98e1-27e4737f2eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d58674a-5407-4497-bd7c-021f806c0e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2d2fee-c99d-4a6a-b178-63ec724b65d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.79.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8e468a-d5dc-47be-bfe9-fb0a2947b813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.80.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d01a96-40f9-43f5-8a2e-b9bda8ed9113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.81.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717ea2e7-8373-4210-84c2-54a4a765db3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.0']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75a4a3a-24c5-4097-9617-622cdd98c0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0017dbd-7022-4a8d-8baa-bf1a6cb6b5de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.83.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2c7e55-e706-4c28-901e-d4ad4ccc9d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf263e6-ae31-4c45-b949-1facba0dfdeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.92.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1585857d-645f-47cc-96e1-5c395fb1e3df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995a2c55-b3c2-473c-b5b9-01b195288be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.94.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d198e504-f62a-43a0-9339-cfed08fa1094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.96.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693df1d5-21d7-4f0f-9c79-619a76e37dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.5.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35343034-e0fa-4ad5-af94-296e837f8ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.122.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ece2be5-1139-4c43-87ba-c1e2fdc66ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.128.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e1094b-622a-4879-9137-de6c1b9a52dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.130.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d239e4a-c306-4ee5-afe0-de2fb54eb688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dee85b2-e881-41f2-8266-fbe418708e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.135.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c518394-c1cc-4bfd-bcfd-3a6a4ffabc1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.142.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bef8b6d-ec03-444b-bc03-722293125fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.142.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15ffe13-1c5e-4a00-ba7b-ee729cc50593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.143.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c9719b-de78-4fd8-b938-d2b7f01064cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.147.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f7c608-a46a-4c4b-9ac1-8f46ed53388c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.150.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291cbc5d-c95a-4ae0-b38c-0cccfc2be419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.153.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff542e4f-a6e3-426e-b08e-63c0c9d1bc0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85a84b1-f7bf-4e2b-85c9-6636d4a00905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0f3f60-c81e-4336-952a-9cad86473310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.169.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1faa61bb-c107-4998-af2c-363e1d3ebf32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.172.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c223fada-3a78-42a4-9647-98ecaec58492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.181.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4612c771-14b9-4cf9-b693-ae07bafa7a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.182.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29bec14-e43d-4174-957d-cec01a4e13cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.184.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a916899-7873-4a85-ba94-c44d5b23284f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.193.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae6d954-7a63-4536-a26d-c9424e0bc05d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.198.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb375d7-02d1-445c-aadc-36cab39e3dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.2.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692aca68-801a-4d38-9cf8-a6e5d6c4527b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.201.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9944b22-56f7-4753-af9f-41c1d46dee41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.214.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9975de-06ad-41fe-95d3-242fde44bc4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.215.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caac1a29-42cb-4ba3-8775-63fa3a2e403e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.230.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ef2f4c-d708-468c-8706-46b444e22d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.231.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5d0052-31a7-4299-898e-2e8c2f1fadb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.231.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0abd1160-a124-4563-ac35-ffb74f019fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.235.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738cf6ae-e9b5-457c-9f96-7b85571706ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.235.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbcf2f28-2c55-450a-a2e8-17e5097f8d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.241.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d4e6fd-8c84-4a30-bb16-130e56b7a9d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.245.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe080e5b-9ca9-4c82-86bf-839e071bbeaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.248.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a008c19e-07b9-4326-9a7b-2f8a8cd3c6aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.253.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5526fdb5-2744-4845-bce2-4b9636be043e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.254.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b01ba9-5872-4b80-a909-203be98d7804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.28.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab214bb-7c18-467c-878d-bb2167e0a21d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.38.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf31ce8-69d8-4516-9d53-30f84d6d25bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.43.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acdd760b-5333-47e3-9d6d-a088926bbe89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.46.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d89a50f-b2bd-4a0c-92c3-e52a2b4ffb65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.70.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b283d2f-5692-4020-8341-0a5a7d061517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.76.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa1a8dd-4250-4c17-8e4a-aaafe37b1619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.79.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d4c4f8-eced-4277-be02-a5cf1c1a9a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.84.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0cb370f-d1df-4797-8880-43590bd520b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.84.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c1120d-dd16-4d67-9929-04fb60f95722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.13.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0b90b1-ecfe-4f8d-a1d0-ec46c15fd715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.20.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470879c8-a58c-4954-94d3-8cb742f2cb7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.26.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2de09a-7947-4308-bb50-a0d4a78b2d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.47.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e23dc3d-e593-4a0d-a058-529e17194b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.52.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd57ef8b-de1e-479c-a23b-5aef42588928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.56.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8d146b-6f27-4b5f-ab3b-1b631446fec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.176.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b714c22-a2ee-454c-a298-eb7c8f43ed86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.193.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f1818a-5aac-44b8-b50c-3cf513ddcd38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.214.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a58de3-6e58-48e5-a6d9-27d391202139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d9ee15-021e-437f-a67a-6f766e9ee472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.218.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b2180c-9283-4b28-9aa2-47d2503dc18c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.219.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8930021-8d6e-4157-aa86-2a5a369bfa00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.219.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a8c915-24ad-4e0e-b213-d9f897d7d8c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.222.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a92609e-abc2-4faa-a844-32464c54e8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.223.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ba1b04-8263-4419-b2f0-49d00e49c5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.224.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31f6dd2-3748-446a-b73b-c893d4dd4b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.226.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ada6ec-8d1d-46cb-9c33-a940f41332bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.227.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53c59d9-a50f-41c9-ae8d-ccab043b1441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.227.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faeae08f-7e92-44f2-9b2f-d63839664e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.229.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7937e7-d097-4088-8d81-f2320efea04c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.230.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a11bd4a-65a3-4636-a613-e96683043f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.230.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef949a78-4bea-4548-ad00-32df3710ae95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d94cde7-23b0-4144-9426-a204d7505fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d588728-8cfd-469b-b336-0c1f098fda48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da4c4e15-3cd5-4804-99ab-213495114bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.234.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229e6431-cef5-474a-a432-d79fdd3fba62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.235.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce524d6-4332-4856-8823-5bc0a94a4556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.236.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf69ae2-eb43-4523-bd82-2329a62aa54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.238.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e47a65c-f711-47f3-9450-12accd10a1bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0133260f-eed9-4615-9d71-8cf083295af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccec49da-fdf3-438b-93cf-f46809df1080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1563dc59-996a-4a7d-83c1-b33727054f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba6f373-dc9d-437c-aef0-6d6ccf865872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a49f8a-cd90-400c-bdd0-90e3d12813a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2939aa-3436-4fa5-ab40-6d2ce2b8f748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f359b76-02e2-4d98-9e63-feaef2ef5081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee11034-0ff6-48bb-b223-47c96fa08d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a3ac25-be45-4f27-a2d7-bf15130e28b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.108.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f32535-8d44-4195-a22a-38fbe5ed7759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28c6821-88ae-425f-ab4b-719e359840ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef14fe6e-b418-40ac-a38b-041033f307eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c1f7e0-3d50-46f5-9b70-6d446965381d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172ceec4-9b93-43cc-9c93-c88a319c873a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3d26d5-72ac-473f-a48c-b60dbe8bedbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b40c2b-5738-42a4-9f66-66e00055a8bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.112.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c75785-f843-4cb9-bbcf-843b9e5f6259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.112.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43d48c3-2bbf-4448-8895-8ea73749c306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.114.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c37837d-a1a1-4b8e-9939-c3cc018e12dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.115.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51cbbbc-03b2-4f7f-ab5a-131ba6525ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995d5508-49a9-49b8-8e9d-7b3094163a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.118.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5103b73-2f77-4382-bb1f-2c37678a4557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.128.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63916b78-cd62-49a0-94c7-1bb7849f9923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce8517b-5e5a-40b7-8d46-a72d004ffa1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22ff011-7bb0-49ba-8843-515a81096bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9614c8a6-839c-44d6-8f96-333dd64af43d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679c6420-a01e-417a-a41d-044f7f4780fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996357e7-bfde-41b9-a2a7-5dfe159db81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1b0243-c9c9-4d41-86cf-4d7dbbc4057a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0ef6fa-c176-4672-8beb-9f6edd2cfec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--035ff2b2-bbb9-4d2b-9805-43ae78ff62fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11674496-e992-405f-bbbb-5bdf115c1a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd432e0-5e48-423d-8a54-f2476bbf7733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2c747c-df1b-45f8-9dd5-5247b520de7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd2c2ee-b8d6-4ff2-83a0-d688eb31df46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28aa92d3-f7f4-473a-b26a-ca3645e8d74d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e496701f-9591-4096-a0da-10bd606b2db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d563d3-cc7d-4d52-910b-6fe2fd589638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4687c72f-c9d3-46c1-9671-3d3a1b104896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d97fbd-e3b1-489f-9836-bf5822b11033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc771653-d7c2-4e3d-ba77-65c8a7428768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b763942a-9fe2-4a78-9b9e-13e97cb26935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53219ebc-2352-4607-ac04-e5f37311d4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ca036b-2883-4f37-a9eb-2ff6a7143ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f8b5d5-bb0d-4531-875b-88bd40b15475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd0fac6-f382-46bf-a3ad-07c5aec0bf13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be09c22d-5955-4a24-b9e8-8424dee9e301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.176.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c61c1e7-9046-4c91-91b1-e847a4996131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.188.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165a6d0f-fd87-4f27-b0f5-8a339dd0352c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.194.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d699a0b9-628e-4b38-8caf-6413e6e30bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.198.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c4d024-dd75-40b5-84f6-db0155a53d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6fe82d9-b034-4f6f-9dcb-f9fc7a4a1cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24ca0a8-747f-4a0f-b1a3-ed303a0c5aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92791125-cfd2-4402-93de-cc0f02a0c42f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fda5bed-9aa7-4ed3-a9da-ed7f530e4e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10156370-921d-4e22-ad1d-18bd118cede2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a6c4a7-be05-4c0f-bcc5-d3c20eefec36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f529b9-7f8c-46ed-a744-5df960fbd284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a442f1-aa4b-4793-83ac-bc0e2e2564ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.85.43.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d4c29e-1568-4e83-9592-ce675c497c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.85.8.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8572310-1027-453d-8559-4fce2e13777a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.12.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cce37f0-bdc8-4fe1-ac7d-54e2930bc8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.18.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea44008f-fa70-450d-b8eb-408032115d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.31.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bad7991-4ad7-4f01-81ec-a48e70efcd80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.35.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c384a16-d6c7-48e5-ad0d-06b6a31c93a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.5.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b99728d-36de-40cf-9c93-eef345a12ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.53.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f72531-1a9b-43e4-ad49-59903ca12ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.54.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22956db1-1544-4020-b133-2c260afd4cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.55.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba4e876-1789-46a4-980b-440d858ef977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.57.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83eaa8e4-3be3-4d77-a480-822186457dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.59.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a7a017-2c3c-4260-8b21-c3bdaa15d3d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.6.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cdbc448-a87b-43a1-b6ff-cd114b51c38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.77.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904c6726-a3d0-41f4-b2b4-357ca265bff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.244.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bff57c-88cd-469b-a8d4-87a400bd8a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.74.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7051b1-ec8c-4c26-83ab-220481ddc812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.74.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c3ffc3-303f-488f-8361-67d8e937b77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.77.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772e911e-b787-4ed1-b6fb-457df8b4a7a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.87.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad39cb7-8851-48d9-b386-6e1605b7836b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.92.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df08a95-8b2d-4786-bc9d-84d80e8cbf52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade8f91b-b4d6-4d33-b90f-8e28a57007bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.92.154.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60553804-f606-4fa6-a7c1-e71a89602c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.234.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a776cdd9-32db-44c1-a63d-a70142a32f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e9df28-211f-498e-bded-ddef90b501e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7230f82-1357-4ce2-a49a-528152af2329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5f8b21-598a-430d-8ec3-bd7e10219d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.244.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508fb936-3cee-49ad-952b-62f25e90ef20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.187.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39756a02-e5fa-4cf9-bcac-a3a24ca8e0c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.64.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf076703-4107-42d7-bf93-4b4c8c2c2fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.84.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0ff625-958f-48f0-89db-594c36e1fff8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.144.123.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb5cfc8-1ee4-48fa-aafc-a07363684f8b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.144.224.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1175a78-7947-4d11-8549-e7e029c9a191", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.151.166.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0e85e7-d9d9-4c00-9e8f-357a3b4cbefd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.207.151.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed58296-2cba-496a-92b6-424ca05fb1a1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.234.207.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4017b095-f87e-470f-863b-866d3fb0f3ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.249.72.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9d70f2-37e0-4625-891a-2b9988695bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.132.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ab2a81-6ec8-4195-95a5-065e2ad7a91e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.137.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb8f0d5-f624-41f1-9ad4-b9527ac6f55c", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.141.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c960a45a-c081-4927-ac8b-c287fec55c44", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.199.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d7e805-de3a-4ea3-b57e-c6d70913443a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.244.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c98e2a-aa20-40ce-904e-a4f9709864c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.34.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16d12cc-e429-4b53-93b7-823f98ce0cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.7.204.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f453b62-1e63-487b-ba31-0c160ecc314f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.101.64.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19a5675-e2e1-4e26-9fa2-f1c51cca9ad3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.133.192.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--836f7f8e-2513-4eac-8c6a-413802e9e80b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.133.206.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c96fb21-4c4d-4606-a93c-76b96ec0e767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.160.135.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05488931-191c-47ff-8fb5-79bc526b99a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.165.19.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee28c465-ea87-42d8-9fca-74a8e953a4d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.152.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5b7015-42c3-495c-8a0f-aad03cd98445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.208.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ec3407-63ed-4a33-a23b-eabbe113f168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f622d7e8-8772-43e9-96f2-14af151285aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4453c7-a3cd-490b-a883-2eed08b4ed28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491ede56-0ce2-4931-9af8-9aac41e3086a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c0f97a-242e-4d8e-81d0-2b13c1efa2d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd34f5f7-1c14-40c7-8221-0b9f04be7579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a49b6e24-7012-4cdf-acab-1be0f08c98e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.87.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1f1906-e811-478b-bca3-df3fd20eb4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.87.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8d1b2a-cf3e-4d53-a415-f21cd355b1e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.145.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea92f8f-3a04-45ca-942e-163ba2989323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3053e88c-7d84-4811-b4ec-28d203431e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a7892d-37cd-42fd-9192-a93b39a88768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0e3f66-14c9-431c-b72d-cfe70a8c508d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af0470d-ef96-4794-bde8-ad5f6bfe50d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a563aee-e717-4945-9f18-5c9f6626e65e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a72770-1ad2-439c-ad85-a353f86c8e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130007f8-65b2-496c-8143-56e36b245cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e974221-a214-4ccc-a95d-d6547bb5c456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3964d1c-9d56-4435-8165-59178713d236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.231.123.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf852106-7122-4593-8be6-0a73e8e53cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28cd6976-5b98-4381-879b-de089c2860c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2023-1389. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a739f77d-167d-4984-bd94-6a64333cb9ea", "relationship_type": "indicates", "source_ref": "indicator--28cd6976-5b98-4381-879b-de089c2860c0", "target_ref": "vulnerability--53f84b33-ae55-4ff3-9a40-daf03764627d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69dc7a49-77e3-4fcc-8385-71f51345c605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3df973-8cda-4193-891c-2c8d9cd2f01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.89.112.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b517b6-507b-458a-897e-ce68e462c391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.113.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b3983f-7bff-42b8-8973-2159ed8b987b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.17.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c625d5f-7e73-46b8-ab7e-e58b4dab7218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.2.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab78365-3c4b-4c53-8873-98d3505cd76e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.23.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d404df4a-c0d7-4575-baa3-f0187d582b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.26.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796015b0-e7a8-48db-89bf-eed789ca1b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.30.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34facc9-5892-48af-b37f-e216caf6285a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.44.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb644ac-0693-4758-814d-80d821f185eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.48.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9dda7e6-a746-4f97-9257-4fd4c5efba90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.49.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb0bb5c-47e0-485d-8eca-29f860ad9c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.49.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c642d04f-9e6c-405e-9090-c929880e5445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.52.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3fbe70-2b97-496d-a0ff-641be697111f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.54.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba98381-eebb-4070-a276-88a829afadb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.57.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c41db4c6-4a01-4ff1-9f7c-25293885041f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.57.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38fca5c5-4f14-4fb3-b640-973758276ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.72.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b011a236-8729-4fe9-b4ca-d7f79549207a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.17.101.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9ebc1b-19e8-4512-94ec-f601b7ad9a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.188.96.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e719017-8c9d-40e6-9d07-b9e6799941e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.19.171.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1454f62-cadf-4913-8221-181c86c4ad0a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.235.140.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157490cd-603c-49af-abf8-1a7b055ad9d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.26.110.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9a95f5-cd7e-422a-b841-7e8fbb86826b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.173.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea7ac8c9-5330-4c8d-a405-4833251aac3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.197.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9921e7-be94-4a34-8ecb-01c0ec9594ac", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.228.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b720f2-2155-4f0b-984b-c2f87ef28643", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.250.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8b04c6-576a-4979-a663-93be337cdf4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.233.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79065f83-4648-4486-a879-3d946762ba36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.41.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db64a88-4a36-447e-9fe9-e82579340c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.146.240.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03098a7-0307-46e4-8d37-ebb1fadc2857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a04e9ea3-ebb4-4393-878c-8c96abf27843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a253f274-4680-478a-bd19-4265bcd1ee9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.37.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d369c6ba-0534-425d-aafc-aaad620a3b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.104.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d33d97-e4f0-426a-92cc-edfc73fc84f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.110.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02148a35-0ecd-4743-9c77-2b605545a880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.111.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122bcace-681c-480f-9cc2-5f98bacc9d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.125.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93a2547-57de-41d4-8cc1-d3b126ee9b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.128.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55fd0b7a-a79e-4f49-a6dd-ae2078cd95b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.178.114.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0a32e8-5c19-4218-9e6c-a3811179e955", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.178.198.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736ce406-ea62-4bf6-86e7-2c54cba8983c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.194.215.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0bd3a2c-21bd-4c0b-a18b-1bb2e58162da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.194.215.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab77ab0-872d-4de5-bfbb-ffe79c9b55f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.250.105.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa43790-d110-432b-8b85-de17f0698f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.254.59.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6e220a-c2e5-4cd6-9755-92cd7433423f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.12.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc97f174-b9e0-460a-a4fe-0def7c4ef4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.12.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939c14dd-7797-467d-a2c0-3873b6784e4c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e072d301-cfec-4f01-b138-58b469364e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.233.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4751fe9-b33c-4727-b820-2b995c446292", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.236.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d681e964-b9ff-487c-90d3-2e0126e42076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.149.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffda228c-0731-40a8-954b-783cac204a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.180.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76444846-3510-4387-88fe-9949ab656594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.67.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e37005-8cc0-4375-b70f-455647f2627f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.7.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2701474-2484-4c4b-85a4-9e926af5a0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.99.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349e2261-f33c-4cb5-974a-65c791f0de64", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.22.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd995e4-9f72-4406-a63d-d62e63c1556d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.83.10.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d891f46c-cefa-415b-b840-422a05ce6997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.83.10.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541df568-fcf0-480b-aab5-2545fd079e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.83.10.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662cc71e-2a2c-4a0c-a9ff-93a0b21c40c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.83.10.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfeb234d-2c6c-4f59-bb54-bf2799f2e935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.83.10.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecebbd36-7471-4c10-987e-2afe68af0da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.83.10.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b320ff64-cdd6-4cb1-a27b-cadd7d080efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.83.10.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82de4f29-258a-4f70-93ad-fb206730a49b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.138.1.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af3f32c-c2e0-41c5-aa35-af09206a5401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.16.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1499912c-a8e2-4ee4-97d3-6756efe4e7d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.20.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ce6601-d86f-424a-b189-7903bba13e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.89.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db640a2a-4b87-4a7d-904c-a51bb8ee20ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.151.196.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303ba7cd-001a-49a4-bc67-24c151d24f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0baba7d-ba5f-4003-81d1-5dd483aeb5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1db3b15-9743-462e-826d-f12c4646fd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.82.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ac6a5f-3910-4b74-a242-3022662da3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.82.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d908a30-0347-4d7a-84eb-52ebac8c96eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.88.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64ac5b1-3631-4509-beed-966a2cae3a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.89.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6edd6b1d-70fe-4839-b8fc-bd8710d42895", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01efd909-ca3b-4489-a5e5-547811515908", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19995dd5-604e-4aa7-ab10-627220878968", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca184332-27cd-499e-9bdb-e7ba843c9e25", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd88817e-000b-4576-95b1-1c2c53d9e8f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb79f45-ee25-42f5-a1e0-b1ecc238596a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be120db6-77fb-44e3-a876-ac35502f9fbb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064376d3-dd02-455a-b2a2-e222434b25f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26117ae-242a-483e-8cfb-0311dae382a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9418996-aff3-4ce5-84fa-e33c4fe8e538", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ed346d-b603-4c87-aafa-18bc00d5a9b0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b81aa0b-2cbc-42e0-acf9-a6d34ebfb5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.144.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a88a458-933d-4a7f-9521-5addf28e68f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.144.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a58bb578-2316-430c-a3a5-1632f0deaf1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.146.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6dde8f-5908-4fdf-93ba-19a8a9d1a4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.156.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d50fb66-790e-4d33-a1ac-643416a13ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.158.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff73bcf-2432-41c6-b1e6-e5209b8314c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.183.216.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041eb405-849a-464b-913f-bd4cfad5b8c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.184.100.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0431d5a-dd03-4858-be2d-e185215e633e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.170.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02965562-9265-4a89-8609-d97140af4fb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.182.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4f69c3-fdcf-4c6f-af9e-d47d93166efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.185.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf41ea8-758c-491f-ba63-6af407a779ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.224.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb918c9-3a3e-438f-b2f6-b8e7d3cefc7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.81.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e411b266-3931-4bd2-8ab5-3287a6558607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.200.116.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58443ee2-f2f6-4d37-98be-68a25d7bd273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.204.132.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9edbc1-a823-4d3f-891f-8f3b3af009f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.207.196.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fede4c96-d407-46e0-a961-2c3a42adc22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.207.215.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be4c27b-f494-40e2-b2fe-23f410843e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.21.227.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b51a90-43bb-42e0-8997-b3a6b81d75d3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.237.80.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947a0738-f488-40ff-9f16-73c0d417c512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.40.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cc6a246-6d32-4c77-a06e-65040e6622cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.43.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbfbedf-040e-4ba1-9cc6-ef4aa35788f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.210.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb89cdb-c485-4896-af47-01f58245b8aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.252.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c513a9f8-a6c8-4028-acfa-dff478e0c2a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.27.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d59cb44-9af7-419f-a371-cea483bc77f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.97.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a453e7d7-1383-4b6f-8369-b4d33a4a0964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.146.134.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262222d4-85bb-4e00-b46a-53ec8f54c954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.146.156.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8e99ac-910a-4c01-84a5-c5f24a1764fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.146.178.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33eb389-f8db-4644-8d6c-09af6b698440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.147.51.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0bb444c-0f7d-44d9-9def-4df3281df322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.157.229.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc44335-2545-4120-865c-0297a9e997fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.40.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab9f3d1-9874-4813-b399-92a4738915d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.172.145.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9d28d0-6f72-46c8-b778-7eb8bcd3529b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.172.52.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df39bf28-4271-4010-b861-d6068a932a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.173.150.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad06a34c-cbcc-4da6-9f08-fd6edc10ae88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.175.31.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c847002-f494-4328-8a54-e88d170a1739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.204.116.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996a10b3-5a61-4e3c-936c-b7213be7e7a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.204.71.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf88379-86ac-41d7-b5b6-723797e6d840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.226.135.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed7ccfb-5d7c-4bc6-b682-3074556e2a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.234.183.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619dc1df-82ae-41a8-8baa-9c9cfe83e2b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.237.223.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f71bb9-8f36-485b-8235-811e8ca3b4cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.242.193.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60bd04a4-736e-42f1-ad11-07813dde1753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.242.53.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7b2f9d-245c-49d2-bd26-172cb47c5a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.243.13.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32127122-d3e8-4a73-93ec-36b3dc5090ed", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.37.74.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e605b299-d3cc-4274-9422-c8fc958a207b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.81.128.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44567b1-3cec-4bfa-b58f-284360b87409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.82.246.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af59998-a218-4619-8443-13e5bd963bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.82.58.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90300f5-a0e3-45f0-948b-64bab7eee372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.89.226.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42ba1c8-073f-4a29-acb4-5f949a1b9c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.90.159.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9679032f-f3da-4b07-815d-48d6811e8ca8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800c57f2-de8c-43e8-9473-d94139b16d89", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697617cf-a70a-48da-bbca-e6bc4f56d679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.105.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871428ec-68fe-41f4-b9e7-a9580d1911e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.106.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f3598f-26e3-4281-930e-a89c240384e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.97.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e6d7ece-3796-4fe6-9943-e8f2b62bc001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.98.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3125aac-63c6-49c4-88a4-cdb49d1dc087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.98.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0dd259d-6a34-4b01-be48-1569722b02ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.159.30.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d350ab3-2ec6-471b-9588-645b99afa114", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.177.69.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a2e65e-14f8-4b69-9a29-54c6903ad355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.20.133.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e39ec81-be5c-453d-80ff-6be4a39fdd15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.237.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e16019c-f3f9-49a3-8a2a-2c8b5b13edf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.237.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760c7274-b2e0-4545-b980-88551bf0bbfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.49.59.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c92e2fe-58af-4668-a3ca-73e8f090b744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.56.65.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dcee3d5-17bd-46b6-a90b-df6796948666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.103.216.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92f8d87-5146-46e1-a924-5718846067ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.127.68.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5dc737d-73f7-4265-95a4-9859e439611f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.15.58.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe77856-9d62-4592-8707-681e071200ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.18.222.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91759d5c-1ec9-425f-a30a-c422df8d2c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.23.87.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43727d0d-94ab-4bd8-8eea-781674c8fb81", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.24.28.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e948361-1248-458e-8f55-518493613a4f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.92.132.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686a1068-5630-4416-a125-64ccd58cecd8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.97.253.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a204fdbe-393e-4cb1-9236-03ff68be77e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.13.6.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80969f63-392e-4c82-bf79-6c920986b2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.13.7.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb7daf0-8e61-47d8-a172-d2414b4099fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.13.7.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819bb42e-e9cc-4d6a-9cc3-87031214fa02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.192.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09de0462-c54c-4408-a6cb-c7f49221887a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.194.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d905b3cc-f213-4f88-b7bd-6ebb2ec92687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.209.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73393382-3309-4906-a8b2-f5b7fdf2286b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.181.32.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44bc173-23aa-4929-bb33-a58bbec1d588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.190.243.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3b817f-1ad8-4d37-aa91-5f383ab298d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb79716-e0d3-466a-aca0-394c51cabad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.137.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a71ed5a-7e3d-4c31-b53a-e87a0d65d427", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.208.125.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537822e2-f943-4609-b3b7-51e59af52840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.25.69.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76cc1fcc-aa42-4df8-8865-9861236c2a40", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.28.38.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da4982ed-182b-4741-8680-9fa131f61d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.54.105.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d969ef6c-1064-4e2a-a250-99f6be5f572b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.133.211.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6966d742-cf8f-47c8-9e5d-10dc7db1fe7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.145.177.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd97734e-4471-4aaf-af6a-e12b7ab3be0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.146.235.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ff7dd0-48b8-4b34-b9ab-47ab46e6d9c1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.166.141.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5848c484-17b5-4774-a7e0-eab91f6cc9d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.177.204.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14355402-143e-4b79-9801-cd6d8f7eb954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.184.126.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7846d610-59f0-4eec-b02a-6c44a5f36047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.216.77.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7672eaee-66e1-4055-a81e-3a667b6e0bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.223.116.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8adb680a-5a99-44e8-b939-998a09ea3788", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.76.112.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66ec364-e5d3-430b-a6b9-efa6d5a434d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.62.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1111a7-2de4-4c0e-9f0c-223e38a113e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.141.63.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6afac2a-aa2c-46f3-9b18-63212dee8069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.85.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1273cd3-5a1a-4936-b6ce-dcb0642ca6e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.204.34.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341ee233-0334-4f31-886f-4f58d0d2c91d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.142.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f013200d-56d5-4d13-9602-36f8f0179a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.189.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e69ed0a-7c0a-4ea8-9697-1bbcbe517e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.199.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544ddb68-0366-4be0-9434-e12ba81c8ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.207.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a099f256-6b8e-4759-80cc-66cd36e81a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.209.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a74bf30-2090-41cb-9199-515344a0e38a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.246.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657db52e-340d-493f-bb6d-48d5e61d38c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.38.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2622b90f-4edb-40a8-a0f9-d04936dfff2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.238.41.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eceac04-8b59-4b06-9e41-66997b8b5776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2272eb0-3e8e-41f3-800f-6c40e1d789b5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa3d245-7499-4c82-b7b5-d7c6f19f00a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e77fcef-f70f-47e2-a482-0f6915ce2a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.113.5.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b208902-526d-4e34-94dd-4f1d11490015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.127.163.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5787e674-748e-4a2e-a9e1-854d425b3e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.176.83.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777aab77-c0c6-4d50-8bed-ba98bbe84c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.188.117.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869940f8-c780-4085-97fb-c020e022b630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.20.48.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da42ed05-086a-4e53-a07b-46ad25ed3e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.224.17.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80a9f49-101f-4d7d-aaef-ba94e8443665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.103.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4026edb5-1338-4db1-9750-ed1b12d6a16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.36.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08d982a-aca5-402d-8c02-705e19cae574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.72.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ac0e21-b183-4fb3-a23f-1287a8489e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.108.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e6c79b-3a8c-43e9-9e64-0da6385939ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.112.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea7fc62-9f7e-4914-8f86-0f6bfff5679a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.120.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dfb78c3-0496-4642-aaf9-ba586723deb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.123.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805e3f08-c1dc-4bb0-b064-66adac0ecbc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.74.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c66501-49bd-4ca3-a745-ae5aa9ca3278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.93.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0bcd0a-8bc6-4bf3-9681-ea120814e1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.0.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41656a21-37b9-4a0b-9910-401a47e5c7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.109.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298583dc-849b-497b-92e9-6fc4e13851ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.117.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f04e40-505b-43a3-94fa-d0a81fcc3eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.120.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2a7b0d-909a-40ed-a291-b4bb40dbcecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.146.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1e72d2-b9d0-4ec4-9d8f-d2a53f364d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.158.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ba7bde-7041-4877-a188-7342409c725a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.41.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a92eb4d-54fb-4744-b36e-c01888bca708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.59.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43139506-2ed1-4ce9-936f-865b1335bd2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.90.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def34abb-5d94-4a68-8b48-99364e2b28e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.142.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a27742c-92e3-4599-b06c-098eec09750d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.181.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8047d591-003a-4b55-a945-a3903ad7ea35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.183.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb29719-6ff7-43bd-90ef-0cb4c140393a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.203.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bc4f30-7d69-40f8-b7f3-ba1b5b4b9938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.233.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57bbb6c-97cf-49b2-94df-b108a0b99534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.245.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d62279-d4c6-473c-a194-42d13ae26a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.31.53.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8b13a5-98ca-418a-a90a-b901698df740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.49.11.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc813d78-485e-4325-8f90-f9e5eb4d816b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714076b7-6b94-4488-86e0-689bff86c49a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7fa5022-4bec-455d-a469-1ffbf74f57a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81059e0a-e119-40dd-a6e5-9c46742dbc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260802c1-d06d-4ec3-a846-ee9ba6d47cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04522416-c4eb-4a40-b273-dba4f353c4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea1f93c-68e6-4d04-bb75-b2d4766c6405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4eede79-fada-4502-a663-3ad3985749d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12fc2c7-d8de-405d-a0f9-8801769efa61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a4842a-f6e5-4fbb-ad73-5ad44ded92ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba45da9-6e2e-471f-92ad-23d0987f8a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24df81e-decd-430d-8b8f-94545a9e2312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d99b85-1ca1-411a-8207-df1000a49a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c21895-0dd4-4b33-9440-7c2e847dfaec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082bea6d-42bb-4fd6-8058-bb62dafe425e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560ba8aa-85d5-46b8-874f-1042ab065cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63d9dcd-ec91-4793-ad5a-9fe1d0642498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562e3c23-ad22-46b6-873a-874bbefefc60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad16e97-b34b-4a6a-91ad-5e26198cf91f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebebdbcd-ae9b-4cdf-9b4e-6ff9b5c31ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a84ee85-0ef2-4fd8-a67e-cd38216813fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b12092b-bab0-46d0-b870-d4d1b81999f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039095aa-3771-486c-a5df-adf8c15cb0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9556009b-dbe7-4216-9663-486526497151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--957835de-eaa6-4961-89d9-10a8a3151647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298e2dfc-b1ff-4cf2-bc86-e918ce492955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c03216d-9a43-4dfe-8f2d-9fbaf9fee8d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7e7047-5c75-4c50-b71f-c93688f6e0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a08f63-758e-4210-adf3-e51835ae304e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d19c6a-9c1f-4e7e-bc38-3271db0b6063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6cd1c4-792f-4e71-835d-a00930eb85b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad806f2-2bf2-40a7-a266-f6211f2c7b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6f16b8-2d99-4de0-9613-aad09cb43fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713a10b5-497a-4c1e-ae9d-76ec867b7cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cde9a9c-2e4c-42af-8a02-d2e794fa00e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64723e32-49fe-4097-b84c-abe32d365583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d268335e-cc4c-4534-8d89-1203894e0e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798835f8-04c6-491e-894e-f80abb6d1905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d642038a-bf2d-4fa1-8256-eb2e4da0f4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3cc330-107d-4572-a1b3-bdc14b6dd043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed173f4-00a9-4237-9536-b93548f28cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a515a57c-f8dd-4b36-b842-d088a978d862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89572e40-fe66-4d1a-9f6c-872b17ac08d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136b8492-d589-4bca-96ce-eaf4b02d836f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66967b17-5264-4cd2-ba7a-63bf3906364a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d6fff8-b730-4360-a19e-d7bac06631c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cee4559-4d6e-4097-a02e-82c29f8b9962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f478725f-39fd-4288-af2a-8ce6af941a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33563c75-56f6-4bb3-ad93-245dc2e1a01c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9dcf4e-9717-483b-998c-54b653d8f644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d741fa-5e2c-4ee8-9c11-2e185fef0158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e49dbf6c-01b3-475c-82b6-a760e98f3940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7f18a8-4f44-4838-92d0-812dee0376b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf68616-eca5-43c6-96c5-813924763562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7311329-a6cf-45c9-938d-aecd9f8924e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b9bf17-193c-48aa-82e8-2abad71cd6cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e921da-6a7a-4ff0-930c-932cc36ea5c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc70f20-6746-431f-aab4-4783e9a825f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498dade3-c379-4b3e-8d4b-55c9d0995692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1420e8b-02ae-4f6b-a4ce-d4602c93cbab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e198f4-ebd8-43bd-a663-af5e1c598985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d19a27-f100-464a-b27b-92c6051576e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bdc16f1-23e6-4345-8ef7-cbcc6d413766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72a0247-488e-402e-8695-a86a81e1ff6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7ffe1d-45a0-44fc-aed0-a6257825ba52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57150d1e-463e-46f6-8c3f-f148efd28e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7e38a1-d7f0-4b37-8f98-efdfad5978dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a419f025-b607-45a3-b7df-07452d7c203d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75551223-b554-4f33-be86-5a11b252e37e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3859e25e-7c6b-4d10-8e0d-bb58c8693ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be85d126-6ca3-4bdf-a56e-f02f998261b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--892162f2-36d0-463f-8823-d9160fc9f265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6424d834-98bd-46e7-aa7e-fd9c76a4fb2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa954f2-4d44-4917-8686-ad5ec441b9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5b9c5e-01ba-46ea-ba7a-c86054200598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dcbacbe-72e7-4db5-946a-7827b31e7dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a1e4ffb-7b41-47fe-b3f4-c6d6f48622bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4f6222-a965-4385-abce-09771974d64a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02326e36-b060-44b6-8c15-6609ba09cbad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e768f12-d87f-4aa4-8b92-b0befbc0d483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25aa96dc-cbcd-4f8c-a48c-abe0f98d9561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e2cf30-54c2-4ad2-90d9-bdc8e10e7067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345b23e9-ff9a-473e-ac67-0884f95bd5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b684a6fa-76cd-4581-8ed3-ac542258bb53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101ec222-ffc8-41da-922c-3659e88406eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762143ba-4fb3-47dd-8654-9b47ea3f84cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e323247e-8d78-4824-9053-08eeac2b4ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4019068b-43c7-438d-905f-d8e562c1876e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725dce4f-a0a1-45d5-8f4d-aeccef73c8d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--359d1d17-1948-4ada-b445-b765ad449493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50fc1a98-5b50-497f-9b87-41d29dd1c154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810cfcbd-dd0e-48fb-aaa3-45792bd26cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319928a8-a602-4e66-af80-351dc7f86ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7942921c-321b-420e-9d4f-fe7ec69a0390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8934c63-fded-4625-80bd-ed1c09bd2905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad76fd9-164f-4f09-814d-a2912ce9beb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de71bf0c-1cd0-4c6e-ba57-ff21bbeffb32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2f14cf-cf95-410f-b80b-f367db7a2c4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993b307b-b539-41bf-a766-c7d6a879a729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7ec86c-4d49-4a21-861c-61846aaca5b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a349f5c-7bd6-45ff-86fd-c80bdc69e2a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6547454f-4b28-4061-a8e8-5f803f191b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d70105-d8ba-4be7-be29-c90bea719450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192871cc-d695-41bb-b397-6923d1383c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a29dec-b062-4bcf-b5fb-02c3387729ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de846495-3586-402e-a436-9d2b5bd20b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdcbb9b0-1731-44b6-8b50-10c325f85614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db94a79-c6d5-45c1-b5f3-51dcf9ae3ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb69ac54-e861-4f23-b292-ad18f3c32169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f26aca-b7cf-437a-9b72-9797c76ba9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b870ada4-538f-44cf-8df6-be6862684290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44be287-bf13-4677-8b6c-bd33b0004d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da3f65f-9b31-45aa-862c-46716555e1ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc68929d-00fc-4363-91d0-62927eefde82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6299903-43f0-4741-92b0-6512b6e42739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832f9df5-82b5-4e73-8bef-0aaca0dcb940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8f56a7-61d7-4c4a-a0f4-9979409a512c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f871f9c-0485-4b16-b6c8-3ba2b46c148f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6a8614-50f0-42af-8901-507a18bdf0d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7969214f-2bb0-4563-a206-2291cf2ecc38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946859f8-a59f-4a37-b6cb-2f6c886c7d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cadf8d2-b153-4789-b3f4-ba0ed1e41243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3fd1fe-cd30-4e0d-8623-da162fff1e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e14fe8-2152-4e05-96de-af1ae42fc8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d89c58-d3ae-4b31-a94c-903ddaf9fbc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5fca948-3070-4b1c-83c1-6724864823a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d17f5bf-f791-41fb-b5bd-62b77560bbf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09765383-7646-47c2-ac88-2f4877a0f38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908b2df0-10c2-4039-a186-a272d18a18f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2dc76ec-8a7a-4cc3-856f-70507bbda006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01056aa3-7c2c-4f94-acfb-e9f6bb4d7a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775b2359-1294-4f77-a79a-45554f68e7f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6f4402-1e80-4e71-8c27-32d4cb24dd5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aeeaef6-a681-485f-9c13-74974a20deb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e8e33b-e6c0-4597-9f14-b43fd35f7a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed7be94-9b54-4ebb-a312-1d95f7422570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25aa3186-1456-48a9-9dad-7e0b91832875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32fda343-f76c-480e-8f29-d580ed714ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7072e2-6486-4d38-afc5-624a6dc16c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89620bd6-b9cd-40a5-a1cf-17936c0ab537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa668ee-aa52-4a73-8b1b-0e4c4d171e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9454ca-59e2-4f00-8bdf-2181516cfbc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c3aa151-7d6e-4ecd-b7b4-3c057a3184e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26666096-6888-43ac-b05b-8003b94bf2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e233ba71-409f-48ea-9ebb-a0af1b466c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc5ef8f-60bf-48db-91d7-41e737cad913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b2d268-624f-46c4-a0ea-bc4dc329351e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8da8659-943f-446a-88d9-f9379f151b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2fccf0-0075-4a32-8ff3-f1d19b811fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c74ade5-c1d0-4fd1-92ae-4c04c1a21a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc2207d-99ec-4a36-8394-3a9959e958d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da11206-3a70-4447-bcb0-522d85626108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d380eb-666f-41fa-8c14-5163e85797a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b4f20c-8683-42c0-a140-ba732a4ff134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80069d53-8a1a-4d54-aeaa-b1859fc685f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38cb31fa-c236-45c2-8082-f02f320a896c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b909b8af-6de5-4de7-a6f6-99cdc0ddae7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac403879-f26b-4bdc-960a-5089cd6aea86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0951ea83-0c72-4f20-81cd-5473b5ea659a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57f4150-a11d-4212-a657-17903f33f444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6229f0f4-320a-459e-865c-4ef3aa400f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce37b555-abef-4b80-b17a-3c106a2e19d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396d3eb7-5ae4-4253-8921-eb5ef374d082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4dcbe0a-10f8-4b2e-ba22-7c6c13319b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678e781e-3630-412b-8b9c-6433a86a395c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850660f9-5059-4211-bacd-19aa837bfaf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6ecaa4-bc55-4017-b063-5515632db2eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbfe004-070a-4b7a-a8cf-9b172f3d27eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58dc62d9-46cd-42b9-9c36-47d340028c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea17227a-1dae-4cff-8956-e06d7693b5b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22be071b-ccec-4957-bfbf-beebdf24a14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb39063-5c2a-4e80-b2f0-bdc8045d08f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0fa7adf-1d17-40d2-ba3c-21b0d4609fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994bf824-96cd-4b03-9fc2-8affccc3ae61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a111e63-5820-483e-a676-b5d0896fde05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810d711f-2c67-4abd-9d32-08c6c17b92ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e696ea-eb2f-498d-a898-a2423f5ccc41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ac1c1f-42f4-4e48-b8df-88905ed20714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05302b7-df5c-4df6-9514-913edd8e8e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de64ab4-5907-4c2b-9b38-f66ef41b4e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05dcb437-d3cc-43ef-9a77-a05ddc3e9a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9a6e2d-0dd2-4fdd-9e9f-3418a987f468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e491af0-8c5d-41d3-affa-04591f87a3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed227c7-db45-451c-a637-703495dd381a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aeea17d-cc9f-4cb1-a910-8aefb3e0ae92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c849e917-bce5-4c56-b2ad-aa1363b6dd6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58c50e9-7363-42e8-ac39-b3e8297638bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f260510-0689-4de3-b885-ef7af390e6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6589b3a-d1c1-4ce9-85ed-b0965950307f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f48b22-b478-4930-96a7-9e182b729982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9663222-47d5-48e7-8ea6-8948a6bb4cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9347c06e-4005-4aac-b849-a17c731dcda7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d9ce77-0653-4f1b-83b1-2f8f31e556b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d9280e-254d-4a61-8f8f-fe360286790d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--080c422c-23ad-4119-afc0-c64a4df3b3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e09e823-4491-44b5-a24a-e3d5ff3e70ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f438288-505f-4414-8777-1eb9d9c6446a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ced25f3-5747-4432-826f-cf9508953448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134e8c43-100b-40f3-ba6a-52b10386c9ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d93681-a534-44ba-8d68-344678c034e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d89638-e183-4f06-a864-030212674aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa98190-35ba-4a3e-9948-3492ad1dbe21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9445f0-8edb-4d1f-b68b-83cf9a860928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a7c252-19ef-4146-b289-f68de66de431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e713b42-172c-4f9c-b5ae-a0d91768d8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501e46e6-4276-492d-8a41-b7840849d59d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de26543-5f07-44ed-905b-ddac3c399257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32dfd28b-ab25-4ab5-8ce5-0cfa77c60d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b437a8c1-1859-4350-8caa-af8f1a5fec3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363a5ee8-10f3-41c0-b884-9747d060f45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da063eb-df58-4aa9-bceb-4fba9d9c6b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3177427-2c10-4e19-a9c7-4b6e6b80ab77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9114191d-80c7-4b3c-966f-6d096ec6e433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda3e992-c8b3-4af1-8e4b-f4811824ac1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f47bafb-a4af-43a6-960b-f6547513d31a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030b513a-4763-4914-b234-44db2a050fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa518bd-0675-4ad4-be29-555da21bf137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f1d9cc0-d12d-42ab-9668-0d9f79d1532e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f48b52-8209-4446-8e2f-3235d281c969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653637e6-246f-415b-a37a-6009e4a787c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074d6034-e598-4991-832c-ed535e4a93fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290f8e2d-23bd-4c53-8ed1-e99c4fb99db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a369d2b1-7e71-4d74-b8ca-ca9a035481bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf1eca9-461f-46e0-a921-eef16d1ec1d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3868af04-c954-492d-96f2-e5c28ef18664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed21075f-2447-4869-93bf-42bc99ff03bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b492ef-98c5-47bb-a419-98f8545677c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55dce4cc-2721-45d6-9212-7b6d9e38b35b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa059b74-6a49-41ab-9be7-f33a67935a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68833c7-f5e2-492e-9bad-8665f0caa5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c062e7a-73a5-48bd-bc30-7013ca5e6fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dcb59ae-c7a4-42c2-8a8f-20d97e5498d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b86809-c3e6-4eca-88f6-ada459bb842c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a9dfd95-3a04-4dc0-b4dc-ae666848debd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de585f3-6128-40a9-8085-01f2c9edc407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.181.112.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06018f83-94ac-432d-966b-cef21aaaf83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.182.74.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a21dea0-b556-4ab4-bf61-6423bf2b63f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b92a6363-7241-47a8-9035-ed6c9d55b8dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1bd121-cdc3-4086-bced-0675e2eec228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.103']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecffb3e0-3827-4db1-939b-17c679be48f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd5de49-473b-40fe-8fbf-137b80f37c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a931dee4-1e09-47fb-855f-255919d68416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c425e7b0-791c-4012-881b-89e2d647004c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae0d802-0188-443a-b122-94beac547905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e3db02-8be8-469f-8fb3-5ba2b579759d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a0c222-65ea-4b94-994f-1741314ebd08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df5241f-1a49-45fe-acdb-757499c92fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6862db71-2c07-4107-8cb6-1061d4661b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7459ef-9f5d-4cff-b78d-9f07bb947dd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594f1108-f550-4771-8ac0-ae2a218014d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d4454e-28aa-4e51-845e-e8010c8f33ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3580e600-6e92-4d6d-b8c1-e421422ba65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed880ad-c041-4eef-a939-23be1a3dd45f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d49df9-f908-4022-a7a4-3caf1dc0dbef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a802438d-9a36-449d-a736-4d4cf6637d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ca9c33-b269-4f00-8d8e-3fcff0ebb2d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1ff91d-5414-4117-b2dc-e654af0d140d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1192e490-32f5-4c6e-814d-7462b35b9596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a61c80-8e2d-4a40-9a63-6f688f13eb77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c616b45-4a52-4112-a4a1-c8075fe68dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7530dbba-5a60-44b3-a444-3acb284300d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f484cdb3-c0c0-4b6c-9bd7-889b35cb6682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977e7f39-b349-4539-8fd2-f05d145a2aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa935ca-ba99-485f-8ba7-185795565b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf0c66e-d420-46a6-9d63-124b9781b410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378c2763-2a93-45fb-a06c-ea1fa5b3fdfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14450d97-d63f-40c5-a732-91d60d508b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b449dc67-9683-4611-be11-c071ff1df7c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a827b15-d364-4685-981e-18c079f70964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b182698-2c8d-487f-8638-b37e6fb53972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3065472d-d427-435d-8896-7461839b9f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318bd6eb-5730-4ef6-94ab-21127a027c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc13cf8-07b4-480c-a26b-fb71262def63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d647965-952e-4c52-8485-006849cd75e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee810883-4b5f-4dba-a879-703d73368a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b53c65-aee5-4c55-ba69-9a2eb9fed70a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa4a6d2c-8e76-41f4-a006-4c5036202faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba67a20-688e-4e7e-8c10-f00c6c5753ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98100194-03da-424a-a882-74c026bb1b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d016b9-8ebf-42c6-82f4-436ae009d339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.168']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a10814d-c0e5-4603-8936-31fedd477cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a43c703-5706-4c0c-a0c2-436bfd30960f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4548fb52-05db-46d8-8d30-0efaeac72a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2e2902-875a-4271-8ada-497ff653ba15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770def4b-69bc-4536-bd19-bc4be7cbc1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99366cf-a1f4-4a1d-b0fb-e5c1e199d766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42578f59-dc7f-400a-84a4-1775a23b3d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5cf388-3a1a-4309-97b6-2120cf36c04d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bef4c20-e302-46ab-bbba-133ad1ea934b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21baa6d5-6ad9-443b-99f4-b28c00bd8c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2fd14e1-8ef1-493e-b2f3-6e25daab7b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912fcb7e-7426-4efa-a439-54f0011bd20a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a753d4-89d7-4fb0-92a1-5aee293abcfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e292c1d0-de7f-4aa1-adef-1f232bae8c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10dde05b-862f-4797-8c12-b211c6c33baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd5bc7d-7a90-4390-a1f8-67be35306d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163eddd6-69e5-4c19-8dc0-d7ea8209ac2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab739042-4bef-49f8-a237-55a8cfec1c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2808063e-5150-46fa-8a12-cc473fcb15bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615dcece-0268-4ed5-9cfb-190ff75fe725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4362915-f8c2-4101-84e4-a87557f403c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac226e31-b33b-42e8-bcb1-ecb9dacda5ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225f3ea6-591f-47b9-8f5a-48cbfb85ecab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce7eecc-1b7f-480b-a288-c641ac9c74e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f21aa9-a23e-4226-8536-e589d0cc8436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4079ed47-c98c-4818-b8f1-292a3d460214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8495a47a-6dd5-4e6a-a5b5-647b04c2460a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f547ff-7b90-4816-8d91-3f660dd8763c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b786a680-7e5b-49e6-b0fc-def4e96e934c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ff4dc7-b566-4561-aad2-7b90568a3214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acfa320a-43d9-4a3f-90f1-e8e9769137d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8920cf4e-02f3-4056-995c-f1ba429813d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3638159-452a-4b1a-99ac-8fe684efa19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85112176-4edb-4686-a338-67865a3ad68a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ef38c2-3fad-4649-940b-f9404de7909c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1feeccba-3380-43f0-811a-e9bc8ca64028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f80934-c951-4329-a2bb-cb4db0a5e1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ad533e-60fd-40c6-a1f1-5b7c6d6c8f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd8c2d3-c5fb-4c69-90aa-e0e37ffcb0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dfbc029-0870-4816-9e6f-b17139d2c56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9c440b-5505-4ab3-b61c-9188f3c013b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea770ee-ed2b-43cf-8de9-3436d100fd75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadd450d-ba69-43ef-a7de-7333ddce315f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8892b4ce-15af-4040-b5da-863e6e1a8e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb99913-3d7f-4a72-ac66-766d18b9d295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a575b76-e8d8-4345-b584-f8eab08b2831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d719e29-a331-4109-9c35-02c2eab9f56b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa107194-e5c2-4da6-8280-655f8b32255a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80ce961-3416-43b3-8748-240c8c481e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f247ed3a-ff90-434f-a91b-6b4594e40915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--217e51c1-bc23-494e-a239-a9f96ac7be8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b8d90f-d931-4f39-8c58-6d4c212b69c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8720ff8-b023-4889-9b95-321ad7679485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518498d5-d199-40c1-a9b1-ee1519fe8fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34feb69-003a-4bac-95bd-c7dc4462b6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca836d34-ca9b-49c3-8473-985a771da2c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643e0cda-7cc9-41c3-a3d2-faf366a033d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69d9197-4983-4f5d-9542-aaa852a0171d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc27ef49-c7fe-4779-be83-4e19c283f3d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0262db32-6c4a-4497-9b1f-7f3112b08670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1512212-077f-4257-87ea-7e843ea5c7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf89f80-4692-401a-a5f0-f84e33432321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3202a287-c08f-475f-9adb-01376fcabcbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af0d0f9-8edf-4ea4-9308-84134ff272ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5bd21a-8ced-487d-a6ae-25f5b69e0a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9036ca00-9c40-435b-b29b-06453cc6beb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a251502-0f02-4f81-9251-dec7f53c9f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452a58ec-8f54-42dc-89d4-7078f005d1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6a4be9-913d-4dbb-9eea-799a586574d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f00c515-ac98-420f-aefe-1794ecb6da39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2fd7ec4-4800-4766-b343-c1ae2b5b4b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9bb581-6276-4edc-997b-40c2dd4d55d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13186bbb-9ecf-4298-8d75-9eda4f803754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c713bcc5-6640-44c2-a645-c4e6f88cb213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f47549e-3d83-46fd-a129-c7e95301d215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e925d2ef-cfb4-4864-ac76-ecae05578ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d6b14b-07eb-4699-b515-5e8f4dc759b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa897fb-2697-49a7-947f-62f5790d2114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2e1dc0-a282-4154-9a17-b3e90921a689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d4da93-2157-4bac-a287-b5f01d72f748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451fcc91-aebf-47fe-b306-a8ec184b7bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c1531c-696a-4a7d-a0e9-22f79438ea31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e1cd9e-77cd-4e43-bc03-b357cd880834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b02683-6094-4804-8cc3-f481140dffaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a49212-9ad0-4439-8393-c57aea6feab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225e33db-c7e3-4059-bbe6-07997393d842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96133cdf-6ca3-4fc5-8036-0f06dcca3a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a105ad58-68a7-4bf8-bfd4-2f00e2a2ee6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a016c71-b9fb-4ed2-ba6e-af07b1f4bf1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a87c232-a137-4959-bccc-8df47b10a3c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ee236b-c0c6-4eef-a8a5-28d3bf5611fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de081ec-9702-4d15-a767-107649119a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1a4ddc-bbe1-4c13-92f8-22f5c7137066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507cdb68-c1c2-4e11-bb25-32db7aeb066c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaae8781-7e99-4283-a88b-e39084a5b5b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5281d6-efab-4cba-a622-4d9de7e63aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2e66f7-0656-4542-b34c-c6b552cd26e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6aece8-558b-43f8-a8ce-4054db759ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b371ac92-9d66-4a03-8ab6-c103771f7559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619775c4-5163-494c-950c-a1fc6fbbc309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dce2799-4a85-4ea1-972c-272987c070e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df85fed5-269c-4d84-a8d8-6b5100c7dd93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6351fe5-9695-4ed1-be89-26019f93feb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef73b4c-c3cb-4c86-8a58-e8fecc9d9283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0bbf51-0967-480b-914f-01cb2a825304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901561e5-9d73-4d2b-ac85-b24d03cc9cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab39ab9d-b29e-4f9f-8222-54d526e4030b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec55a29-2913-4369-978d-70e76dbb1ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a44862-18ea-4c1f-b92e-2fad303e105c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6ffddb-5d97-4661-8c73-451f3bc5043f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a333353-6248-4a28-bde1-c7db180f26bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e196b60-9ede-43de-ae9c-a45f2de73f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2dbb052-90b6-4ff5-9b86-fafeef82707a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e960a20-5cef-43ff-9b0c-c5cfc53cce64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6b068e-8fbf-42bb-95ed-cf81a113b257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46d5ce6-f980-4a7d-9e7c-07edee9216ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fffe8bb-838b-4270-8928-5e67f9334c8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.7.2.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fed886c-87dc-4911-9f39-efea77aa7e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5713ea25-d083-417a-9713-98205ff044f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44831339-362d-4156-81bd-84f38d356dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa85a8ac-a5c2-4ee7-bbb2-4ef3a65fdf22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c29ebc8-9ab9-4529-9457-392cfa39b14e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9590c0fc-b561-4e76-863d-d878f7f63b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f1925f-8fe9-4271-ab76-10f7d50538af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b0c97b-c49b-4976-8ee8-5c52424969c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7949b56-9c12-4f92-992e-c139f8a4bc03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca18f0a-00bb-47fb-83ca-3a4dabad807c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3da45f-323c-432a-8998-b8bdb7486787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723ba3ae-fda3-44a4-89cc-2c230952d665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c5df78-61ec-4066-997a-1bf20b4c8219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35f6fc7-f403-42af-bb85-dc3d4b831141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158c04fe-fcd3-4983-9198-3748237e5f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554dfac7-b517-4360-9195-72cc5fb20162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8685d4-bac7-4ab1-80b7-17217d161749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552fc105-5da9-4370-8961-09122f815699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3afb206-147a-4b3a-9a33-4c7ceceff25b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327e3bff-6f23-4651-ab81-70e515c9554a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25bb7783-2a66-49e8-8cf9-4cf1754eba52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e71600-716a-4faf-8f79-8ada4bd0577d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dec4e71-ee15-44dc-8921-28a86e9070da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ea141a-090e-4d98-a125-69787bf342c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357784da-235c-46fb-80fc-fd004fec0725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418af6fc-a8c5-442d-9c83-9fec34cd9f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831b51a4-3465-46ca-a973-1b4ffe262107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cc6e3a3-eca6-422f-9e2b-34e253398506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f9febb-63d6-4e75-b6b7-f2166884df45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fccafb0-b0ef-4e7d-8a4a-1ce33b15ce63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdabfb7b-4097-4241-80cd-277cbb890b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc682a38-554d-41e9-8ae5-0b8abf1b5406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52df1f8a-2088-4773-bbd0-88ed2ba6ac85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d1aea3-4f9a-4087-a97d-0a8d72c7ebd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e554ffa-6740-442d-aeea-ebddf6a1dbc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5609b5-d575-4a03-b6b1-58a5fd09ec75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1784816e-97b9-40da-94cc-2ec187764876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd23092-b871-4c93-b2d1-042eb3e77f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834f7272-6423-465e-85ac-64fc17c13c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cccc5b9-3007-439a-992a-e664cbeb43df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f3bf9d-8353-4ac8-b531-cf18c88ec722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae50dbf-7a8a-4ade-8465-d8c83d558a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac207c19-dfec-4298-919f-bd0c7f73a8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e08ed96-70aa-4525-b02e-094510e859f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19afc4c-1f42-4c13-bd44-44872e1de94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d66c4e-b802-4cc4-bc94-dfaf5c6cee8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141a4131-5861-4ff8-8709-c30844b04334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439afabe-8f10-4990-aeff-3b85746ec2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636579cf-8c05-423a-8a3d-19df447b422e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a701989-229d-4f42-9176-324d85d4a4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc18104-0b46-49f0-b080-0ae7a100e1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401be65e-9de7-4d14-983e-282ab9b88ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af1b9d0-9c83-48b8-a55c-509085d29474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639acf5f-3ce3-4268-a89b-9a63685c544f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4dda4c-5913-415e-82e9-0e2b54b0fe57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7847cf-95d7-456c-ae32-60ccecc70c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60817ec3-8325-4a25-9532-c043caae42c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08acce8-2cc8-46a9-8535-9707482fbd50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b588ca2-18a9-4dea-b9ce-cc3801165a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d062810-bd63-4dcd-bab7-7219b115f29b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0bd4f2-d82c-4097-b696-38d4db92c704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562a06c1-ea29-4fbe-b8e8-95ce35e49f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28b11bb-d0da-4092-a13f-8db0107683d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8324391-5936-4b4d-bbd7-783931a56f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35486b0-2da8-4170-b361-311b85a69f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1150c5-d2a1-4797-9b3c-8c4c123d5455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e9c408-434d-4822-a99b-7db98f3dbac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbb2e1b-f773-482a-9fc0-7afa12ceff01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffeed17-7235-4c40-800f-a7993c911c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a53e92e-f8ad-412c-9347-f36e20cfc85f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7c5d83-68ce-4a2e-8a2f-dfd97c82326b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc76a95d-aa24-4910-9ad4-e61308e4e0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21ff258-4fe3-4dd8-9405-282844197d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae3422b-e929-4782-9563-ea298d9b7ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f58a8e6-7b21-4925-95b4-e8b85f2f23df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1590996-879d-4927-a23d-8c1ed7b931d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e06466d-46bc-40cb-83ef-84c2f71f6e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d422754b-6999-44b1-ab29-16581c37187f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab955978-73b9-47d8-866f-0ddf48ef8d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae64442-d847-4b0d-933b-67779e1032c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea80d944-bdde-49e8-ab74-7f6b955a79ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb00e32-79c1-441e-a2da-5f71cb39f613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d865491-a8b6-4e59-8245-5880b62cc93e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795df341-e311-47de-a02c-8799dc573aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3bc314-e406-43a5-80cd-435fc8763d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77ed0c6-b349-4887-8d25-83a540650b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b11ff6-0d52-4cd2-894e-c6eff5e4fcb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2698bb-7a65-48b9-a475-e7365579253b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abffa1ec-2673-487d-930b-1d3891eb381e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2ab847-4e56-4342-b6c3-1aab92bf6de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d11bcd8-5c48-48b5-9fe7-4afc535266aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21f70a6-0779-4bfc-b574-59fdfed03528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4363e4-a4ef-4e1b-9498-60c2ab7fafe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44137b49-6a08-45fa-a8b2-07b4f8854f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd53bdf2-d278-42f3-a422-f3f2a5133ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a11b472-ebbe-4045-95f4-1ede98893ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3319a34c-c577-4665-ada0-bc4d099c15bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307c2b84-0511-4f16-9f3a-3df00d91e850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b201915c-a17d-4c6c-b3c7-96d766025a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9edf7e9b-bad8-4aba-a87d-ee98f11fedfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1303a5c-7779-460b-961a-a0bc0e14954b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d26555-b51d-4575-afbe-816a4f3a93af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf07c610-1813-4a84-8a48-4993545f5876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1343ca-c2c2-493e-8095-2bbf4dc228ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b61206-f0ba-45b2-9020-820803e74a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876fd807-7602-4171-b848-26539f7184f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aed1e45-a96b-46eb-aee0-d56ed9772e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f4fc1d-8554-4978-98ba-9d3bd829be30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77cf2756-e955-46f7-9b21-9e36a98d3f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea73f2c7-e645-4419-af6f-c09f42d9e37c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59ce0b4-6bc0-4150-b82a-6d2ab10c9d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fda8d8-064a-4646-8788-564253556763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36fda804-4f5e-4b6e-946f-2984c87961ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5eab432-a936-446d-9ac8-51998ebad86b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a12460-ca9d-4378-897b-fe5da782a9a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa07815-af07-4f4f-b3d6-4251e2e26d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00490f0f-9ecf-4106-8cf0-7791e8b80dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2470027-e897-4dac-bff2-8dd79f35a9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc8622f-59d8-4000-af51-7aca1b4cbe97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332d3fd0-b791-4fa3-a5b2-71fa90e13355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8e8ccd-bc54-4e1f-9624-cf48e180cd12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308453fc-7824-4170-9ef9-a24e6967734b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7e4881-c39b-4d19-9dcb-cd70b07519d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961145cf-c43a-4337-99c8-1280a7f7eddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8550996a-51b0-4caf-81bf-29fc501c47df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f74e91d-199e-4ba8-8a16-a09d96a1ccc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5dd8617-7dc9-43af-a696-31d59411a1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ddec77-c3fc-4176-8835-22c2f0330512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e401b2-568d-495e-a0c5-262a4610da4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6bcfc2-c914-4b5a-bfda-d922f64ca3a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722e85a1-317a-4504-8ab1-9f0d8ed483fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6cb72bc-bafb-403f-9cf4-029d85ed9a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555100cd-4214-4027-8bc9-596d6ce09506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9d2ed8-c100-4938-8fe5-acf136e89eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46011484-eaf5-4626-804d-6a22d6a99d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51bf08ba-d65a-4474-98f5-0b6ca06c3b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb22eb8-db47-42c3-9e68-7c901507b987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc0673f-01a6-45e2-b529-7980bdc5acd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7766fa-b94c-4f80-851b-ed961709a446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c79084-5e64-4f65-82b3-c5cdfc09b9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf76d75-9f66-4aa0-9c69-d1b8b5a6f85a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27706906-a793-4aa2-ac42-b722862642f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463ece90-66c8-4a53-88eb-3c4c0b72ce3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b174e756-3c64-47d0-a651-8ec9ba464efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c19438-000a-4afd-8d7d-9245f1029f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e657953f-4c54-4763-8a7f-d3158ef512d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82289259-0974-46ce-ae04-ab8d44bb1fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0605802-39f2-45a6-b1aa-53e21f664720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730d9855-b275-46df-866c-40d847c3a263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e44cbe-c8b1-4a93-946f-c84e984a4f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab007fb3-fb9f-4cd7-a224-d361e3a588fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2594b8-30bc-4dc9-b947-bb5e759f83f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c1c295-b076-4685-ba21-f61d39f615ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16d849e-244c-4c40-8400-b66b040929ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a012a1-6508-4f68-b837-1a2f8874569a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70240720-ec1e-4bcd-aaba-b01f2a7b58d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff3036e-3605-4753-9091-1e16b1719147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb95079-c795-4d27-829f-b29a241f4364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1be646-7d0e-43f6-bcaf-49ffa8a34b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d17e10-956e-4b9d-aa16-886b9a67df91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a04c38-48e4-43b9-887f-de63ec4d438e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa2a958-c556-4af6-95ac-9b8d43de29ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76408d80-24ab-48df-b938-1f65dd325096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19222be0-f81a-445e-8adb-2063729517cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a405784-8e38-4cc1-bca2-8d266e2e95a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df7bdf7-75b2-44e1-bbc8-0464b396b5cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2403f39f-15fd-4248-bc30-05627c1606fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855b75bd-d88d-4127-83b8-a8dc203b2660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228f39f9-b926-4a35-b3be-3aaf29ed37ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847b0fe9-11d6-42f7-8d2d-3edf0da4aee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48b50fa-5f92-4377-874e-4f411ec724d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1204b5c-62d2-42a6-a544-481f4b77f5ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd475ac-9053-4df7-872a-e5d0d87430dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada9916c-00e4-443c-8adf-a67e5d00dee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1d665f-74f7-4408-9481-15245de01ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f24000-f036-49a2-ac6b-19dccd065bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46caf15-52e8-4e33-becd-804af07f27ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1a2bfe-8b02-4a53-b76a-b2f2e06e71e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127713d5-78f7-4b4d-a42c-f0610fd21b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74fd7ece-d556-42d1-88a1-adde0b433bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1634f657-9172-4339-88e9-c1fccf31207f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7716db2f-3d26-4c1f-ab83-37c49f5cf37e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228de839-b1a2-473c-a44d-761516059788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb4e33c-8678-4623-aaec-89446e049245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260e9f3d-14c1-4733-b9d8-b79b92ef4e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf81e9e3-6976-46d5-945e-529ca9800349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72206261-406c-4197-825f-d38e77cec9ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db19a9f-5110-443d-b9da-9eff1a6ffd54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b70baf-f68f-4bce-8489-f3926d701092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd02f5cc-0795-421c-a86e-72a743fe20b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0215e52c-d9c3-4174-a62f-f3f6b26fbb88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d485bac-f13b-4e04-b5ad-fa5a1c9b1ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0681236a-4aa8-4777-aacd-fd1ecb035b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a0432d-8691-4237-bf05-3c1d8cc3b51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe957d87-6a8b-4651-ba49-1936bdcdb56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdd7266-f60b-4a7a-acab-0196aaab5681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c2cd52-612b-49dd-a790-d39e394eaa10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27388e24-02a3-453c-a31a-f18f7be7f7f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f391a810-ee03-405d-9a86-168f1f1ceced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97af9eb3-3b6f-4555-b5f6-94fdf1bbf768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9970ea-9b80-4799-b9b3-9db1da3a00b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcd2334-9391-4dda-b7d1-3e5b40893083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b6362b-fa75-4a10-a351-da76e275cc54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b480e4c-a456-4718-85f1-b9f86a528c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2745f158-e19e-4ae2-a3ca-309ebb5a1c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3704da1a-f9c4-4ff3-917c-54afcbe93af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadce5f7-d1d8-4d92-b938-f75b1583c436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103727e2-a6e4-4c6d-b072-69d36f9715da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86244009-b787-4d66-b04c-de11b7806cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed117e8-1de7-4998-9df0-934126f7a6ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35af8cc2-5a2f-4215-8c52-2d5d554cc229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22837f7f-4745-4877-8244-4b30561a1e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06a87d9-133d-4491-8804-65cde98ecefe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dba1770-453b-47db-ac90-d7fe45c910e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7489c8c5-eccf-4c58-a067-7a7dc2eb90e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9a0632-eb29-4a3a-a39e-fe425d92155a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f86e8c-bfcb-4f9e-a019-5cfb89bcdc0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ce34c8-c12f-4510-acbf-a4e48a67a1e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.209.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee9b333-e91a-41f6-a273-363188354336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.211.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8543e982-299e-4935-b999-0b25495b5dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.211.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03bf6f6-620f-4372-9f1d-bb5233209d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608d4a06-bc74-4d29-ac8b-78648259f2e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84cf5a96-30a6-44ca-a99c-29fb2138482e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ead7ea-307c-4f51-aa32-9c5061e6b07a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac00d1b-c3b0-418a-9f86-dd6168cd8a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.215.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4c36e7-6d69-411a-bb62-de678fdc392c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ba712d-f237-4e89-9d2e-c9e1c37fee04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.32.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67bb2ca0-b76b-4ea6-8989-d3e2af99fd0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.32.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d59ab65-127b-471f-a433-f30573f6e886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.35.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ad5611-df52-47ba-a722-63ef5b9f25a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.35.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246198b2-f60e-46e2-b68b-52ead9caf459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.35.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad33860-f3d9-435f-9bc5-59ccbbda5085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.35.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7bd415-3d59-4333-baa3-633cb2e6a26a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.39.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1d78ee-98ff-427e-8403-5b02fa6cde62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c20b43-2ae7-4f65-aa71-86417d027ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885d4419-20c4-4ed4-981a-e674cc558304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4723c2-496d-4936-9a35-7c85783ced43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99022465-326c-47b1-bd30-3d14050aef33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7c034a-652c-4308-9627-e6817977300e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a6a791-7086-47d3-962c-7f3a8bcef4f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.45.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fafa23b7-4bd6-4ef3-9f6e-15c120bc6630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.45.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c93094-63ef-4c93-b85e-0730868b0c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.46.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15b8084-ba9a-4278-af74-199c46b1e3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19319173-c9bb-4037-bcdc-5d9f24a43f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06198bb0-fa93-42a6-89ea-48f02dd1b025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0687c59-1e45-4795-8e89-2d602d3bf769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.62.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73aa0cbb-dc9a-4965-b2a8-d6ec8e4052bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d59636-963e-4f26-a3d0-f1cbb8ec030f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d9a331-b89a-4364-9ec6-2cb74bcc2450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.219.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2cac1ef-2ed6-480c-a3ea-2aa485f52938", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.29.142.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3068a0c1-14f7-4f97-b9d8-2c6744641ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.29.155.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed22a7c3-00c3-4a52-a319-d2892fd1306c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.42.101.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926a0b08-5365-4dad-aa47-7bcd85fdd8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.8.6.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3bb42d7-70dd-4bc4-a47b-53dc8dea8028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.94.100.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a186b5a-cee8-463a-abb0-4c77ba15be3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.84.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6f4494-95da-4c08-8f3a-90a79a18709f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.88.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca19bfb-c687-4261-93c3-cfe0e7b5d747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.213.127.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d04faa-066f-40d5-b400-998144d4c97f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.220.180.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb914c24-3e30-4b37-abe2-d67318defb3f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.231.24.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1604443f-b5cd-444d-9cf7-535143798816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.125.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea99c4f-d119-48da-9ef7-d303b6c04da0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.180.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5fdec47-7b90-479e-a751-6e60e2f06776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.212.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9054c6fc-58d9-47d3-b3f0-56365adb21bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.218.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab759a6-db59-4479-8809-6f89008ee3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.219.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a40c09-46b7-420c-8795-b0c78c8df49f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.210.120.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ed3359-a281-46ff-af7c-0ca706e5d6a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.61.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c459afb-fa60-4952-8a28-ae25cde6ac80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.62.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2628cb0b-ee3f-49ae-a961-b123a7fe17fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.43.167.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ca10c7-8c33-4601-ad45-971e7f7be76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.69.177.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e59dd4-2ef5-43ca-bc93-9b0325f136c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.8.104.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3db6d52-afa6-4e06-a60c-034f1f8ffdfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.10.63.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e105fb72-3800-4fb2-b665-f1f4c6ee956b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.163.176.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07531fd4-fdce-44f7-9ceb-f9c24f5cafb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.205.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60682d7-d9f2-4696-8af2-c697ef9e7026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.210.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69bc3f5e-959c-46e9-862c-fec72848aa35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.210.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05b2b37-2a86-45f4-bc38-a63759b3396a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.213.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0cdb0c-4fd1-434c-950d-15e7b0ea9dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca9edd9-005a-4d45-82bb-174312090c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0005de-d0f6-4e30-8684-a0ed4d65a7eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.215.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6acee178-7d51-4726-b47d-3f65374083ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.215.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62b2ade-80e0-428e-aced-46307b55b47d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.215.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93c5ac9-e82f-4576-9b7e-0cac06ed0010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.215.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da522843-cc23-4539-9d08-c615c0e7bd59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ab7276-7f29-48c7-b72d-f57a12bbe740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928d87cd-5e3b-42c8-8ca6-f955b865887d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.219.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aebc06d0-9dd5-4c39-9ce2-8f1f14146f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b28efb-c2a3-4689-82cd-ec42ac376a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1cd5e70-b6c7-468d-8fa9-78c0638b70ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ddfafe-414c-48e3-8b7e-d74648443362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb18062-06eb-4f82-8560-fff61374404b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2ee07f-a34f-4510-b0d3-7fb6e60eb258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c975adb-3b0e-4508-8931-b5687e4067d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0172fe-6171-4326-9731-632a29ec47f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692688f4-bf9e-4e10-bb09-d7c3795dd024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92aa750-78ef-4d99-837d-dd92f8ff36ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ac89bf-918c-4382-abff-42b7fa9ed717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06dda514-582d-4fad-90fb-80010c42ed72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cef59f1-0f9c-4c7a-939d-4c14e26e8f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c1653d-5902-4d3e-bf80-09be55515277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c896948f-683c-4e36-b135-2807e9d0c1bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4910e2-850b-47e6-adff-4fbabb706f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82303111-162d-40b1-8918-91707ee71012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c261759a-ed10-4c89-84e6-cf15769d6edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c422735d-45e0-4078-9198-e5d9c98b1f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--664b1bd3-4cb7-4688-8829-c3cfef6483ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.152']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30732b8d-6935-4ca7-a8bb-7fd10ed6d46a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5f645e-e137-4f3d-8b59-d34f2a636452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42280f7-99ee-47db-b7ac-33cb2d875c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08d6454-42d8-40a2-9e00-42ddedbefdc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c83f5d-0506-4dff-b493-e3d5ef1ae107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f45d96-877b-4709-9f99-f74fa51aca89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2489855a-7f9d-47bd-9e11-809529fa2deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043ea4bc-dc00-4072-93fe-4cd846f22ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874d1d76-1219-48c3-8176-d8b468a73f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d02aa7-ee79-400d-955b-f31fb4568320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd5c9e86-1e52-4155-b207-835efafcd311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f856fac3-8658-482a-8962-dbab5aeabd29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ffb16a-0cd9-439b-9066-9d23cf4ee440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.167']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b32a1e-5c5c-478f-a09e-93e4f5cfc2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de144c68-a9c5-4328-a726-645f0be01aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62aa5773-8b1b-487d-a222-e4692accf198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1fdfb7-1c39-4aff-a5f7-e109d74d76a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657511d0-7149-48ce-91db-bcf759d11897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05017576-9f5d-471c-a613-de19296cbe7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041192ba-df29-4ea2-b2f4-87afed3dfa6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d905a50-c1ac-44a5-be9e-4e5fbb6f5148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d23e142-94b1-4dbd-bfa2-4f75f12f96c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904a2565-d747-48d1-a284-3e980f881057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d766f45-5df3-4b14-b374-ddd98318c394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b020ddf-75db-4208-8b6f-a6bb853d3197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0ebdb4-1e2b-4183-b213-109c6f1b83eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1656d2f-6769-4650-a22a-cc6337e9eb6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c30bd3f-a93d-40b3-bcdf-028fc217cba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--812f9abb-4601-4656-bf25-7cc72677c5d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d321949a-ba11-4855-a97e-66ffc696dabe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8342fd6-8e59-47b0-8773-7005e2ebae4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d150942a-6002-4112-aebc-ff8e1bf7716e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f844a41-578e-4016-b261-9372ba01301d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4c3a3d-829d-4683-b08b-ba10861bb481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d820bff2-d098-4453-ae18-523476734f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02149983-6d2c-4970-8e04-3c877a6ba87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf0c548-7f26-4afb-94f4-4947244959ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1c0f1c-dffe-412c-9acb-af3435935fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949f653a-52a7-471b-a07d-0bde8204d0d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adeca37c-28ab-4beb-af81-212a5d053f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ea877c-ec7c-428c-9c96-cd8d4bba860d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb906bb-218b-42e3-9b76-03ed7a8c6ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709bcc89-5fd2-4ccb-a290-1250a2ff4ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d8df62-1e5b-41eb-b5ed-492b1dffbcf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d875de3-59ff-4e73-baee-5b8caf614efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b104603d-a257-4957-972a-ec8e4ddfb6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97501000-e7fc-4d24-b625-e46dc560f783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4580e115-da70-467a-9454-9173ee2a90eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.216']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1dc350-8ec3-423f-ba3c-3f1990dbe2bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30336e5-d5c4-474e-b663-fc1067e4f3f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec45bed-66e4-429e-ab25-f30d636bba79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1458d75e-6930-409b-9f5a-0575e47bea8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a149b5a-4f56-48d2-822d-a3fe9dcdda16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a23fc8-be4d-405d-864b-c4b0f0831c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85467ea9-2465-40b0-b3d5-935ef535963e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f222fe91-328d-4bab-8ea7-229c37081ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbe9ac6-141e-49c8-aee0-c515dc862d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb233ab-5aa3-4263-a68f-2fdc07af7ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91344a6e-70a7-4019-9e76-067c4704a778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e965998b-2790-465c-b2d7-c120feeb2799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d9c3668-13c4-4f11-b900-a369e3dd926d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd55b23-0fd8-4c79-8b6e-9cbb276bbcdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c94d180-e14f-4c4d-bec7-a8b9566b2ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766da9df-7310-4c86-a8ab-59513b677c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5b2fde-294d-464a-8daf-9e35d00dbaab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167a7047-51a4-47ed-b5ae-8f822e64a1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daeb2530-4ffb-4e07-a094-a1c3fa4c2a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e5824b-ee9b-400a-9d1a-2d725c3429a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2a342b-23ec-4951-87bc-eb832f664d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f52f57b2-03f7-4bfc-8686-c258999c9171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bab35e5-ea3f-48a6-83e3-268b7ac1ec30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed5c241-4269-4a7e-998d-e8cbfccad9d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d892c3-a6b4-41e5-861e-7381bff37510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a989433-7963-48bd-83f1-89e1562faff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca06632-fbb4-4715-b579-a6d984121b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9183797b-697f-4619-9b50-a56a015eddad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1437159f-5fe5-4581-9140-8407830adae3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.20.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6edb6c-b7bc-45ad-bd16-078a603724d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.21.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846fb292-c05e-4199-b44b-01a55760f756", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.21.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be2dff5-039c-4944-8188-42dc8c599465", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.21.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc96b139-c4d5-4251-8c96-dbd1b2894a32", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.21.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19f0aab-2f8d-4a30-b69f-142d9fca2974", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.183.230.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017e18e7-a338-4996-8e5f-0a57d78ff7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.32.86.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6f9ce7-8d5a-4d9a-8478-b5c402d92bc8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.51.49.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a4bfc2-21bb-47e9-85e5-66f0652bc118", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.174.59.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c064f730-4475-4c7d-a97d-381f1979b91d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf1a82b-8cff-4f16-930a-2909456b241e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972ab3b3-bff3-4ff2-b3e2-e2772fa9f957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ce025f-6953-4cc0-926e-0f6400330072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14794b35-749d-4a04-8cb5-e287ae279f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6489a051-4f8e-40bd-a23c-7d58df1666d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf051e7-e7ba-42fd-8318-78229d5da434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbdce9d5-0389-4c10-93ed-75f738efb148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801fddd0-14ff-47fd-bffe-5b5151a52dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c112bfd-b004-4374-95c0-2db99bb1f081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fe7c9f-03a4-4713-9a87-c7489012ca0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aab7b8e-9439-4e63-b0cf-6288581d322d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b24fda-4a52-4b78-929b-196522ff5b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.146.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f673265-d4ae-408d-a512-75c36f5f0360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.146.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f74e3a-7676-421b-87f7-f98693c622e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba65878-cd48-4b3f-973a-04892825e533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1095cc7-2864-422f-8c15-9e65a3497612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.165.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad360d9-73c0-4b08-8427-77242b1b8a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.167.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--484121ef-eea3-4277-9596-922bd5d41fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e9d768-39d9-4633-b74d-f0c4615d8fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a71e57-c965-4396-b356-9ae1d247ba5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e923fb8-ee31-4de8-8280-f97815f9c702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e05787e-8726-4c65-b133-739ad66d7545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a8e971e-e290-415f-abc0-43bfbe11b915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c6fc96-bbbc-41ee-b508-aefa71cd9c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbed2b2-2fc7-4b49-8d4c-43eaecd14d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.176.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5bc987-0a42-4796-924d-14e63e9ec61f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.37.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b139d8-4d96-41bf-9cc6-22fd7ef43c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.179.72.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b023f42-895d-410c-bb40-254c5b34210e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.249.203.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2252e51-4857-4687-9557-996d6f07f16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.19.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b864c3c2-fbb4-4e38-8ca0-6f5d42b36d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.32.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4f7ec3-21f1-4012-9a88-11ca52254004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.222.233.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eea0d1b-ad28-4014-baad-af4fc020e710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.240.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14b4d02-def7-4455-a98c-6d0dd6eb85d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.252.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2cd7f87-e158-4e38-a66a-be0343935310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e81882-a18d-49f0-bb60-faf62ba0161c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.254.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fcf9bda-1b23-46f7-bc23-3718103ec2bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ebc716-0867-466d-80e6-cd799450e649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0450b1a4-d3a9-4a8c-a654-6e8a95f23003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.120.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992ada70-4055-49d7-98cc-e2fce28e1967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.122.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ade68ce-6dc2-4845-939b-fbb661f67757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.139.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0696940f-7710-4cbc-93f4-4f4279f01750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.184.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7bffb1-4443-4c70-a2cb-da9f6fe27fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.188.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3bb0bde-2c19-4cf6-a9d7-62c8f14a43e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.203.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcea71ca-e790-40d0-a9ba-e9552aa55b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842a97e0-aec7-4213-9387-0c934c9244fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f19c035-4a0c-40a0-bb21-36250bd0f941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a169862-47ff-4c7c-9e9d-7260024e8d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.129.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52dd3b35-e242-4744-959b-04b1690ba77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd49378-a950-4bb7-b50f-5e5fd6a90c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.192.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314e801f-bf8d-47f9-a28d-eaa980361c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.192.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bad51e8-c9cf-4b86-94fe-8cdfd053d43e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.227.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05209c8e-4ed0-4dc4-90f0-eda002d38050", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.244.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e878e3a7-5872-462d-8d3e-49b7da31a1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1c0dd3-bd38-413b-a1a1-46d09f395a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a31d57-407f-4f6b-854e-8681ad9c2c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a45ceef-41fd-4653-a828-1d5764fdf3ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39cace49-1a55-4112-a7fc-699b15c5a44b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb385640-63f8-426c-aafd-8ccc97d7918f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c811ab-046b-4117-8de7-eb95d1dd6531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44861e7b-808b-4073-9daf-a1f69822a1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc89de8-80d9-49bf-9c07-196927b0548e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048685dd-14d1-4cc8-9142-7a3a618573f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b86dcb1-d107-43f5-bd04-c7a9704cced9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acaa7ce9-ef34-4273-982f-a7bdebaf35d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd2a57d-6fbf-4d1a-98ab-1e12362f6ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b627fe47-a9d8-4b1a-a3bc-823dd09527b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdd0375-1391-4d42-94c4-a4b3bbfd24b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1287e087-91df-4818-832f-57d7f9513966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8c3e64-7a9c-40a7-9aaa-6d2150b15e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce933d9-98e7-4112-9b91-c7ef6be1ca93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139f45d7-7b34-4763-ae2c-a63b171a511a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7729549b-42ef-4992-9da8-00a2903511bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae10c99-b6ef-481d-937a-72a4652766f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b44d78-14b5-4e07-9d0f-04230eb02b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460e135b-1579-4e13-aa07-d4b462327939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8caa4c5c-8740-49f4-a87e-a57fb4102d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04acbb4c-4a54-445b-9730-29862879d000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee3402bd-8dab-4391-aab9-da1ef117413a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1fd7bb-7d2b-4d30-9865-36ac3aad0152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8d575e-42c4-4dcd-8dca-2f41aeb87bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f06cc9-1795-4c53-9d5a-41c987be535c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80260760-7f40-4bfe-ad93-1ea5392eebeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788d1a48-3485-4352-9052-fe4cf226d98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--142358e1-5eda-4b0c-a41a-f46fade32d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e812f91-e762-4541-88af-e60328f4e994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0611a16-d660-49d7-a740-7a6750aadf7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de4c3f6-ed1a-4d66-ac94-88117771c6a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289286c9-5c7e-4a62-a8fe-20993b736f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35add15b-d399-446f-adb5-65a131d3842b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.183.36.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f83d47-1d1b-4dac-90be-45792f6e3350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.160.9.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec951f3a-e45d-45bd-9aeb-18018a2d455c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.222.100.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f1699a-1840-471f-9f34-efd334a39575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.235.20.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca29fdb3-4790-4024-aa28-d0db99c9843c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.237.244.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeebf5e2-7a63-4772-a938-dc32c8cd7cc7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.52.210.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9830f9-8699-4286-b069-b863f67a0035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.60.231.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cbb9f1d-dce2-41fd-b910-7376bb606447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93646f2a-773c-4a90-9172-64f45290f4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e91c37b-7069-497d-aa90-ad16cc3e1a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d151eb0e-8c22-4646-91c5-508de04b873c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173d1ecd-5903-4c84-b3c5-68bef98f4309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e469b74-f167-430e-a2fd-ca67aee81d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bccc9a16-b831-49d2-8c4d-68f672bfa32d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f68856-eab5-413b-b11c-03cfb401bf11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6675b8d2-b03b-4807-8d3f-e2e0292fc2d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c410c5-a1e8-404e-aab1-dc113f1897e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e64875-3d9d-4b9d-9185-40635cd69664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3f76ea-d527-4547-8aba-6dc61a9d0a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b77b7a-9f28-4d4d-87ac-1c14410efedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26085b0-cf1e-4e90-8ab7-199feaeddbcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e523ec3-902a-41ab-99c8-51f23cc03158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7f90b6-6e15-4771-88e3-5218debc4133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5688d7c-5c66-4790-9519-e061dd2696a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.60.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1fff60b-6e26-4beb-8225-2650cc9f2508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73246251-5fc3-4031-b801-9de97d37b197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8e9834-9ca1-4578-bc63-43da637e6a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbca1acc-1eae-41a0-bf8c-1afa1e51577e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.94.47.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7bee47-f46e-40b4-ae39-717e825e1197", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.110.185.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b695d7-6212-40fa-9f00-16e64aca32dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a229d1c-7dfc-4a42-8903-162f08c76112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0178ca6f-6b6d-4413-b5f8-51955e9d920e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7786692-b126-4bce-9253-9ca00740ca8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ddf609c-1c3d-4608-a12f-504f39481b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81bd203-80a9-4215-84a0-2aefa5916b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3539816-e941-4e53-9ef7-566f603adc61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53161093-94e8-4824-a583-4a3551f3f125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc44b822-7cec-43e6-9e37-3d58d3d516fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca1124b-051e-45b6-9781-eb19295694a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6e07af-f3b7-4892-be45-0bc077cb926b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56d99fb-8bb7-4de9-96fc-fc6227a89794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d7dac4-2ac3-4dd1-a017-f28b38da9e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8b1a68-8bbe-4215-aab3-7b7e41f34bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55dab615-d356-465e-85dd-ee36122dbc30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.138.168.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d4d19f-ec30-48c8-917c-db04812465aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344cb8fe-3510-403d-b91d-9ed6837ef5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288e3d98-339b-41ad-be5c-9c2a2037575a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a1aef2-117b-4227-981d-a381206b3717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0006750-52a0-42ec-8427-32fd9316a301", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.162.213.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b07168a-7f60-4d2e-af2b-e32cddbbdfd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.17.146.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c56180-90b0-4f91-a281-76730db465b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.187.28.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62461467-25a6-4330-81f8-91fd6966a5b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.187.32.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007814ea-5c9f-4715-9967-496d284f0fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.44.192.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce93baa-1313-4f70-8933-2d2d1d81115f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3825bfe8-49c4-4520-89d3-3fb7d4802699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d1012f-7230-41f4-a1af-1f9103548e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76241a81-91ee-4460-b1b5-6bcc22b07254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20fc0f97-2757-4b87-8229-fe9ab71299d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f85f88-3f89-43d8-b1df-823bb7832cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac7df8e-34ab-4557-9c79-6fdac80259f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ce12e5-ae28-4e3a-bc54-f992a2d52ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93274eb-3b72-4c3d-94a2-c25678dc6d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e70041-b620-41d4-aa74-bce9f1f0642f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643a61e2-203e-498a-88ef-25bb1a59fbc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d68d686-72e8-4963-a9c9-ecb01728e875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b2fd3e-ac09-47cf-bb88-581ca5791dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6262d5e7-c7ae-4f58-bbc1-0ad13b83e714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210f62b5-e6f6-488e-8dc2-343a43e537ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f71b9d-3340-42c7-866c-80e50b26d3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e66a7c-6899-444e-a464-05e996301fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9224403c-e31f-4bda-877d-84e3a52466af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01866ddd-7d8d-490a-8162-f9a8366dc0eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c48bb6fd-e9ce-4fd5-b650-adf06bfe9c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.164.79.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ace199-a2df-4f75-9a0d-bdf44f81a1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.3.96.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbfbce2-e6fd-4762-93aa-dd41dca7a119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.134.157.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225449eb-593f-4c5a-87f1-c4accc33beb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.134.239.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95917fc3-b746-4a81-a65b-afc7c4020679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.197.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f53f10-6106-44d8-a650-a0375cabd099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.140.225.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b6a17f-ecb4-4a86-a1c5-c11c17925790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.142.178.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55a9a80-2145-4a70-84ed-05dd39ba6d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.148.150.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972dec78-3e73-4154-931c-c59556624cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.208.10.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8310f16c-e417-4e79-a792-603f299c8a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.101.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6caf1fec-333e-435b-b1b3-036024b242d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.109.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4fb020f-2f26-4d78-8a9f-7b04b14c29d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.110.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c584f518-bc9f-4492-a0ed-d54183ca5e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.110.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ad871a-254c-40fb-b508-679a4c678ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.114.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca32d37-a5bc-4a71-9f22-1b3728172cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.115.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c36acd-95a1-4559-96cb-043288eaa2a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.127.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233214d7-bb10-4f06-9833-800da3ae27ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.233.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd7696c-8855-43c0-b06e-6686dd9ca341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.237.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e60838f-3c8d-46d3-8602-3476b0f5f075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.65.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27dfdf8b-8df4-4195-a432-1e45cdfd9732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.77.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15149fec-bed6-4135-9907-7ee43ddec779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.85.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef3b321-b165-40da-9088-5a222b195ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.91.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb81e307-e5d4-434a-9978-bfbd50877250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.96.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a0b72d-da91-4694-9364-d5e42621e15e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.123.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a98ddb1-3629-41f5-8acb-443f6366a749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efef88b-7c7d-4a40-b3b5-20e20e08dbea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd8846a-37ac-45d6-b50e-77a2e7972aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.141.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfee1665-a156-4f5a-bc1f-45e6e302dacd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.148.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1964c08-865d-4e9c-baec-fa037035b8d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.149.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58d8e77-05af-4feb-b9e8-e635d9c934f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.153.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76987927-bb32-40c8-9618-5a1148c197fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.2.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbbc726d-4278-4eaf-bc9d-7e9ceb0860e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.33.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106fb952-bf40-455d-9869-145a9ad0c005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.43.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9cee8e7-59ea-4143-a02a-3e1cafbafa69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.44.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440f910e-3bb4-4554-92a1-251c86a093c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a018d1c1-c4d2-40b7-a557-827a67283928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e711115f-4b49-454f-9577-c42330127c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.7.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92520ba-113a-4775-b8e9-f59b4895f167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.8.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f21aa4-c60a-4eb9-a525-75bc0d69d992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2719de-6eb1-46f8-aaf2-70b3cfb77f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700657dd-bed1-4c8c-8993-94ac940570b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31648aa7-3c5c-4605-aeb8-0625f6e44d8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d99ddd-d5be-4bbd-8e32-f5cba24bb4a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5b7b68-c6b4-4337-b2d4-6c25e27b75fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a747a1d-b67d-4d1a-ba3c-dfb2aad851ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0c3cc1-7e6b-4053-be15-7327a755e903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7638838b-c72e-4c85-9d7e-011c1213f9f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.15.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbec1c63-b4cd-4018-94bb-c784acc8b0a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e98ac75-5f3a-4fa7-b75a-d5dcfa96e715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c64874d-ba06-4860-b181-96e27356c8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0898f98-9b95-4efe-82f8-071d9d6cc5f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c78d18b-7aab-4222-9ddf-b5e14b50fd13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94964b7b-f1ba-40c7-a7d0-46082888d2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13bfd202-83cf-4514-9ccb-0ce2686d186f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166ebac5-0588-4f73-a945-d6047fe562a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb98aa24-62ed-4d0c-a455-cffc534128c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718a60ac-3174-4ca6-a5fe-fa42d297d14f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f0c85c-c546-4c59-bda8-5e172da0ff81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3be2ae-bd12-4eee-a531-10bacc87a51b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663c721e-320f-49f5-b100-e509efe4a53b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20a4579-06c4-4ba9-8937-9c7368242d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b0d41f-cd26-4946-b2a1-4a8cb59cb3b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.96']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a1fe70-554c-485b-92c8-ec517de46e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11fa91d6-fb5d-4e1e-adfe-399aa01eb55a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de42024b-e948-449a-8ec9-5a5f97f87224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fbcec3-f46e-4a15-aafc-606134111af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--002c3683-5d89-4b33-a7cb-35bfd3f319b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d26910-0b11-416b-8fca-b18ea61c54e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae427fb-99d7-47fd-8a25-27c20daa62b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff0da1d-3423-4a7d-bc35-f97eb67fc60c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb1a509-675d-4d4a-bf83-e5935b465e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa7d0dc-5252-4ae1-8551-efdef212b1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6cceb4b-7d60-497d-bda4-345c85fa27af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033e2fde-98b5-4913-82f0-08f689315e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3121497f-6c60-4ad7-a000-5a3e3533dffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d1cc96-bea6-4fd0-8d8b-7e7f1c67afc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d749cd-109d-4191-bea4-90cf4c740bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42601df0-d165-474a-abaa-997a21cd9edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d881629b-a126-4c2d-8b82-16133fd71e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e6c020-ace2-4d12-888a-16daccbb2d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee524bf-59c9-4445-9bff-282125c8a21a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f9e70b-877e-40b2-ac2b-bec34b28b1ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbe0f8c-1f20-4e58-93ad-fcba9f5ab617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d101927f-e9d3-4fd3-942f-5fa6da51f621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa26157-b090-4e3a-bb10-7d97916aca7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22324b86-2e44-462f-a9f6-e8455197ebf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8120db13-8a00-4000-8243-bbc8705fbe79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be15e2d-6a96-4407-ab00-0caa8b8e99cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b14540-2799-4682-8e89-3468be390342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.182']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--411270ae-54f0-4d43-a770-7d4a46426668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1987ef-33cc-4dec-becd-9ff2e319adb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d65e3f7-def0-4840-af2c-d4c1847e469f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9d4c42-51de-46aa-8cf7-3de18218cb7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d5ddb2-ef5a-4884-8ced-78f4266a0c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f9926a-c299-46f7-a089-b0a3d4bbbdee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc05909-c3d0-4710-b8d5-782c360d4313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a2bc2f-c569-4455-aa34-3bd5ed2a62ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.90.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8664328e-390a-4f83-bf3f-a5a0eb5f5fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.90.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c4ffc6-f9e8-452b-878a-2e7a24713717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.106.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e764048-052e-4ac2-8421-eda53dc9ed21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.128.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73120d8d-6188-46e1-8f6c-7d78ec11b1d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.182.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56b87d9-a6f3-4246-807e-e7c76bd8e77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.139.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2bd6469-6968-46bc-80ce-f0929559c68c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.128.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8736d6-c958-453e-97e0-6820edfe331a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.177.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1304ce37-13cc-4d9d-b7c8-00e53232a01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.181.172']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950a29e2-0280-4103-b406-3e14825e4ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.188.255']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d980735-8d7f-48d1-b744-06952e6e2192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.242.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce5fcb8-f701-4b6a-8b9c-ff8185a020d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.103.63.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6706eb78-ae15-48c5-924e-7f3e7131133c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.210.57.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55569e68-7918-4621-b4e3-673fbc497d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.210.63.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c3b88b9-d651-47d7-956c-cfbe036bf0a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.228.158.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef48f71-b158-44f8-8c3b-6f593e343241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.234.77.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba65b1e-7e8c-428e-b1bd-b2cd418d34f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.241.220.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5012bf-47a5-4b64-8496-580b6e946efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.247.73.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cf3e99-49a4-427b-9f54-97a1fcada3ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.248.226.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b330c3d-9f0c-4995-8c45-433fe1081a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.249.180.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c916e0b7-9d1d-4d96-b806-1358a4de7b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.53.123.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1068e5bb-5383-493c-8de2-1f1c63fd2fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.72.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b8d8e6-5bde-4f16-8b35-4cb77d33e922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1d4430-74ea-48f7-825f-550586e44509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2b1c86-0413-449e-8ac6-a1196d20d7c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.85.226']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbaff6d8-fcd5-411b-bce7-1d237b943415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.69.58.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477c53be-634f-4a0d-becd-a2b42f36925a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.7.206.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0049d153-6064-4f41-84a9-006af2d96654", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.78.76.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2c3c2b-a732-4fe6-83d5-2313d1816051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613b9407-b4a6-47c9-9e84-e334b84adb05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2976a329-56ba-4508-8dde-cb0484560521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319a425c-3047-4581-934c-7c7b4200df32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad9dd40-a59b-45c6-a393-9604074fab36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.85.84.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef06072b-796d-4316-8a85-3ef472e83935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.85.84.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541e7067-6d4e-4ec0-96b5-764ca15b2e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.93.253.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc2eeb9-8ece-48a9-86f1-c977f8a9c027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634f83e2-f8a4-44e4-93a9-4986cb53391c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b99b921-208f-41f6-96da-3a051a127c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d127de1a-2395-4dac-90a4-7a14ea1f3a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89089634-9f23-4fe3-9109-adb53edb5e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd69f13b-3591-4784-91d3-ec28313aebac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f532216-2e7e-43a4-bd29-688e4b779a01", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.95.42.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b448991-5170-479d-b3c3-4794d9480982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.10.22.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34befc8-54b7-44d4-b761-885bbe5309b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.143.223.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76aefa0f-e1a2-4488-b2ef-627d4810bfd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.16.240.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72199e12-f59e-4232-b4a7-98ded4144253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.17.28.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89140d9b-ef79-4cac-879a-f28ac9d0f999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f418e7-d2f5-4aa3-baa4-8521e0d7f7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01fedae-67a6-4f7e-b414-eb9c5e4af4f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c9b23a-837f-40c6-9a9f-c7b7ffa86d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f2cdd6-9ccc-4b83-8867-a478645cd8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2baad2b-3397-4629-96d5-45dae328b93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5c2817-7efa-46cc-93c5-1b493c9f0019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348f8a81-1004-4716-90a2-8dbc549e2c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c13cf8-a1b0-4a6d-abe2-00f225ae56cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38623935-5adf-4fc1-9c61-0e915a81f44e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc36b43-e305-471b-ac3b-433ae45d1b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60546d55-295c-49d5-99b2-03fad5b38ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b69d2c-da5a-47b0-8f99-2d3e352eff84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dbbb060-1ee9-40db-9e29-1568013da35d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82abad8b-ead1-431f-bdb0-cc782443b29d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.192.138.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34601511-dfe4-4a8f-912d-f82c452df051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.192.46.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d5bc351-a4a6-4554-a3f5-47826e0691e7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.192.46.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbaf507c-fc4d-495a-a2a5-bc6223008bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.192.53.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eec628a-7e1b-4464-b72f-40a14cb10b35", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.198.232.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd83209e-157d-4cd9-9c64-113fefb886b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.30.98.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6b55f7-9122-4371-bbc8-2e2736a09cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.68.179.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f1c1c2-1ec3-4eac-af5e-7d8086da55e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.151.82.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79344661-84bd-414c-9029-4aa56fdc59c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.156.116.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ad7dfa-e4df-4f05-a028-6c112729b263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.192.69.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e64528-cef7-40b2-9f95-4af1db1133e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.20.20.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939859a7-e9d1-4901-a9da-fd165d2a20eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.140.240.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17892dfd-234e-4725-90f9-323af9ef98d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.106.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3557b03e-7091-4a9f-8a9f-ddf9a68953c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.3.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85087cfa-5329-44ea-bf21-005603b8a96e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.71.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b439e3a-999e-426d-9335-ad042c0e60ff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.72.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0e8257-6999-4f31-a0e5-60409f40a0c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366544b8-05cf-4703-84f5-4cc16743adf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8b8138-6b1b-4e7c-80bc-34b4ef292ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.154']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4bdbc5-572c-40ba-866b-80dcab0f22d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b51b17-4081-499a-a88b-ca06b7432a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3363f2-067d-4974-b94b-81c27ff7e00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5bde63-e064-4542-b3d6-269b46823f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425c9c69-1e55-44db-a21e-4f5b1b83aa9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.121.120.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0fe458-aedd-4395-a4d4-6744ca00ed47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.133.180.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc489c9-81a6-4047-bd2d-52091b55b501", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.137.16.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af0934e-ded7-4bc3-8c9f-55f6b43881cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.137.91.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fafbb5d5-aed7-4006-9749-3deb841df63b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.15.88.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de573502-06ab-4322-8abd-76a35c5dd8d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d7b9df-37ce-454a-a0db-dabd125d571f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba0d5f57-56dd-4eec-bc61-09c6e3598ed9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f23c15-9bd3-4d20-904b-5d778c0231f5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507598bd-953f-4362-8255-dfd2c85834a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15648b8e-fbce-4dcf-9719-926074969775", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b74681-d868-45bd-ae33-475911f55015", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e727da2-3fc2-4563-b0f0-9204557648cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac19e4a7-420e-4add-82b8-c65f3f197380", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d4b87c-ab45-4525-95a4-1e620e535017", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163db870-b3cf-4357-abbf-28c7d68e7615", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcfb2e17-e9b2-4e79-bd55-6634db389eaa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9409f73a-0970-4a2f-a2f6-bfa362b2822d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc2c32d-e423-4966-b5c5-6077d315bf9f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d20437-0713-4bf0-b44f-29b695c30c1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0c46f2-5dbc-42f5-8fca-d27ed1b580cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45bd9fde-05a3-4f1e-988c-2fd0ffc5a81d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54cf5bb-892d-42c3-be5d-739c22f75789", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4d0790-ed62-44ee-9845-c2f13f33003d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3956aa-e656-4482-9c2f-4398e82563e7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e22be1-2c8f-47bc-b399-afeeb4b52f91", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.214.154.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c6f01d-f1c0-4e98-942e-73533466300b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.121.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a776d3-cb31-4278-87d1-47ddbf6a2902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.250.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344d4ff7-da52-4abe-b5d2-416707b1e645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28032c4-edbc-4bd5-ad31-0f5c4786ecc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23449a3-f121-42bb-9b92-85ee1f834d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e37faf-9a3f-4934-ba4c-0da01e7729ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e616a277-cec5-4f2d-a202-4b1a347e9586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6e5cb0-3263-46b0-bc79-48ff03522280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb2dee8-9fef-4606-b504-021d181764e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6082eee3-32e6-4803-b78a-d1521332efc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0538d51-3609-4c77-a8d3-b4d8827b51f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8075bc9b-4adc-482a-abdd-bd17828c6f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d613380d-5989-42b3-8553-e565ad5bbfdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98880880-25f0-46a4-a7a5-87cee8e853e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f3428c-f938-444a-b726-efaa63cfe9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2413cd2a-750f-4ec9-856f-ee78a177f2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1573dffb-e20c-4dff-984c-64ba208c46cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87091d84-0b29-467f-910c-ccbed715d23f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c9febe-9223-4059-bc4b-62a8397cfbaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7b3a84-3c8e-42c8-a0a7-ae1a2019e205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c5d52a-11f5-4cc1-b8b7-9a7ff4924160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b19a94-04f4-404c-8b5d-5d48f137f433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa00043-31d6-4238-9527-239feebec6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1d7acb-9f88-455d-86a8-4899d5080453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75839ddb-5395-4d33-bb0a-1dda64d7cade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4021eed-07a9-4c8d-b892-7b9a6ef21c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112353f5-460a-4204-bd5b-a3f21a80b945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd0e7819-f1a7-4672-9189-ad1224c6b9ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a5b39e-f980-4438-93a5-7bf1e10812ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec3bffb-c9c6-41eb-97f2-047e4cf1f0f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57046dc-5611-419e-a330-b103404c30a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770b52fb-f62f-47f2-b793-18ff3aecfcac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37e3d9b-c3b5-4d25-994f-eb062d12f5f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec83c45-8c70-4a5e-94b8-27f525691eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28449b51-065c-46f7-89f2-e4a5d1949b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a208b9-7065-4294-8c92-0a4c43d23e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2e6b80-5980-4263-b5a7-bb5defc536ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab4e74f-5654-43a8-a89e-593c2db0e756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae9f25c-b9a8-46d1-bd94-c57d2b91bf6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b32573e-38a7-4526-93d4-b045fe03b77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998c9d50-b3d6-4bf6-a9b9-4eb8c5c073f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180a4a94-9471-43b9-8ff8-805e82783051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb85a79-785a-480e-b231-8f2694606625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd38d74-01da-41fa-90ee-7bd2dcb7e17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc2ad5c-f641-4801-8fd7-c92a86611b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--415bdf6d-a5a3-4cee-a553-22d7c8b68c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e45cb3c-76ef-4665-aa1d-6dc7e19f5d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eea274b-82fe-4d64-a578-1c0674b6dc99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4f680e-d60f-4606-9aea-fd43fdd6a80b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--486a0dd1-c152-446f-87cb-8c52fedf811c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be624f9-fb65-4d6b-b4e3-92c28e421881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7e208f-7d10-498c-a1a8-f6c74176e72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93d0d0e-a1a5-4388-9392-828274a718c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.0']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ca5f88-8103-487c-a434-f21e8a8673a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6958411f-16c0-4423-90f3-4a35dfd46962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70976701-28eb-4939-89fc-e56c7054094d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b175161a-dffa-4c24-af06-bf434d808744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8c5ec4-343b-4ecf-9358-3814dd67678d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d26f14-0184-467c-9051-38e50c99f7c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a378bc-609b-4db2-9e7a-5ca1174d43c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39373d1-819d-4251-92a9-0fbf196a9248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1807ba06-9624-4f5d-acf0-f2e333967c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdc11e0-b9ef-4954-96ae-3865a0af5ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.18']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab90237-3e81-4124-b5cd-265e3114e749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96946cb8-03dc-431b-9b6e-3edbc0e2d5c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f53983-e633-498c-a369-3fa8fe8006a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ae62ef-0a43-4cc5-8283-16af9d7f2d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0986e259-5fd9-4fc4-b0c1-defac81b26aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac43b0b7-1c9d-4a8b-8ab0-bed5d1ef165b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f0efbd-3f10-46c6-badd-a19f168bb9f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ba1fbc-e6a9-4aaa-a2c5-d30deb4b4b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a22595f-ffcb-4ac3-b59d-e128d921e896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257e0c93-cd30-4668-872a-8946395a9950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebad0a02-f8bf-42c9-881e-e7bec3fb1546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1aef77c-bc9e-45c7-b886-482cf1f405c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650f36c8-8a9a-406d-827a-98d28c0afef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3005b74-31da-4ca0-bd2c-219384ab3583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f749885d-70a2-4422-bb0a-da28e22528d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6c7464-7628-40ad-8499-03a240166cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1221c6c4-84c0-4fe8-8b9a-8072f5d92a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe6bb3cc-f149-4f9e-a917-c251590cdd48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87889f4-1b8a-4a66-a529-6c6340dea327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8629c8-36df-486c-9a5f-1bc06fbc83ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2d61fb-bd37-4b84-854e-2f8689ef71bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c3fc0c-56dc-48ee-ac81-cad218665702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa36376-e256-41e2-9a76-a64c61e403d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201555d4-7368-4a48-a0fb-eb61d42902c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b877d96e-72d2-4028-9447-f951552dfa9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff71983-0420-41cd-93ec-5b0b1e83cdd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b7965d-7467-4bb8-8e09-947f2f2470c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934d9c57-d61f-4708-a90c-235b476cdd06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--368658b4-eac4-419a-bb50-d8c4b6bf4694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc50c27-a98e-4ce1-b54c-027796f6746e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a954439b-2868-4f9b-af4a-075b1c7e3d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858ac9a5-a9e1-4930-ba45-b7e0d0d09e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd57ff1b-8b26-4c40-8218-d859c7d5e713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287f0d16-6d08-4f4d-a3a3-d9a1ba625a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d24ac9-9d67-47f7-8ddb-fbce12485c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065efb86-6645-42f0-a3bb-919645afbf0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e937c8-46a9-4320-9627-0fe5092815a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29fd02a1-3d61-4489-abb4-53698272dd3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed80dd31-46f5-4ad4-8beb-f953eb268414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d303240f-47ae-4fa3-a652-ee2021026f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df79ebdd-c384-4a4a-a84f-6630414e387e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a2ed65-a98b-4579-985b-e0bb611f4ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956534e8-b6f1-41c8-be6d-9cf923edcf99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae648f5-0f17-4222-bafb-36c895e09f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa508efe-d8c5-48d4-b2b0-4d6b810afcbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f57bfd-fe38-45bc-aa70-a13d4906c4f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.60']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087fa56e-5687-4258-a63e-86efde6a5e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757c0619-5be0-4c96-bad4-06c7d5511e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4614a6cf-b265-40dc-825f-87a38c264194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.63']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f767198-d13b-489b-afcf-6ce27e0e0d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad2d2ec-3fdc-432a-956d-093621d1ad98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10273835-bcfa-432e-80be-92651d7c359d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd5ff0f-2812-4c54-bcb1-e0adaff9b195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec96f128-fd45-48aa-92d5-f491e37b5e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cbd2189-e5f4-4ca5-b79a-5bbb7f01d0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa20a8ff-9e28-4e76-8c80-df3c719acfef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958f9e5c-7d45-4ea0-8b5a-9dfa8d5414ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.70']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bca3955-4601-49be-8138-8d3e2bed7ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd6f234-a02b-4486-b5e6-099e03e655f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28e2e34-f86d-4ac3-a8c4-1da4ac0193e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b21898-be3d-4b21-9cd9-0b4708049039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f77682-2f49-425a-ab0f-1900ec30baeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06c0789-9be3-427d-8878-20fb2c72a997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48220a34-c3f9-4dc5-9f62-ee0703661226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a5f603-2a17-4795-9882-b593b50c3ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.90.246.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819f5713-beed-4b69-9817-7dab048fcf6d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.92.252.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16efc134-4d15-444b-b765-8d6e7a64d0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.176.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94928935-072a-447b-bef0-e8b7b1830da4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae36c537-42bd-47d8-899e-16d08b3aa395", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.183.162.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bb6eb7-2dc8-4ad7-81d6-79de2a37cbac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.30.38.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da341f32-2850-47ad-8aa6-1079e910fc88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.25.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cacf3853-bcef-4aea-855c-7491a1356598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c88c9ab-061e-4ecb-a334-743f8396cdfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c80d2d-7fbe-4117-b9b7-2bbb653ca0c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48114c7f-3bcd-47b0-986c-133f31696e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f4aeef-bfc4-4c70-8d8e-ae951cc900c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbe6b06-db9f-4cd7-8fd1-089c3d192009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c278267f-e1d7-4d05-84d0-87838e7b8393", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.65.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf0b9fd-2d0b-4832-b9e7-bb8dcda6f9ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.104.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f2daf8-32e4-4a65-b92b-496ffb71979d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.178.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201dddc4-68b9-4035-98d4-be98035d54ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.69.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2838da9-689c-4360-8535-019634c0029e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.124.185.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed7a52a-c424-4594-945d-aab2fed2f96f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954862c6-db5e-45ca-acd1-30bec1af851b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.246.54.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c660b6-4e01-48da-aab7-b9ca6ae0c32f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e3f8c3-7a1c-4216-a306-ac6e873c0158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.79.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4246763e-65af-4907-8769-62bc8e63b0ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.56.218.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b522c5-8d4f-4907-9bbc-60460cbfbaa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.129.165.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140a09c4-07d1-4925-9d4d-8d67387a2d65", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.156.85.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1798a4e-a7e0-454a-a0d5-78853ac1e634", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.157.47.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d6967f-7682-4545-b673-cccc595bf804", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.18.101.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b28852-264a-4cd6-ac92-4ecfdf074807", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.189.164.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8974ff56-9cde-4ef8-beaa-8bb1fd951bd6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.201.10.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f27ec8-2420-4229-90bc-b696f98adcf2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.203.114.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9117d8-8bc8-4e38-b697-4976edb04ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceae94b4-1473-4d14-89f0-817d7ff29360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.211.228.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9909bd3a-753b-4a8c-8a64-8507f257c5bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1404777-2a50-4540-bf39-131e0916995a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70377d98-88f6-44c3-aa5a-e3f566291066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.26.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b772789-6a8d-44c7-91af-bf24ddafaf8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.47.170.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af62741-7580-4e8f-8f1f-730377279090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.189.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c04ce93-b4cc-4176-a726-2ea62aedba19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.20.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbc4daf-da0a-48bc-8167-e30b802e5e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.116.28.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1a7ffa-7732-4d66-944e-9911efe685d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.126.211.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba78982e-aa2b-4d09-b69c-205b86bf7779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.127.220.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf3ea44-10eb-4708-9799-58e3b67d5b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.185.83.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f85b58-10e9-4966-a488-ec7101b35ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.188.117.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--152a93c2-c4cc-49d7-a1d2-c9ba85f5dca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21428e64-655c-49f3-9deb-30b27d36c1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c56fcb-da7e-4dcd-9f13-b45f668689ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f5dac8-3014-47ed-8546-2ddc46a4b54e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55cf4dd8-24f7-4488-9ad4-ff3e529360a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.223.69.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04cffa82-c089-4093-964f-e48b7f207596", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.23.113.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c37d04-0028-4560-b3f3-8e3ac59ecd34", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.23.119.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eada2470-9864-4ae8-9bc0-e31528ad270c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.242.99.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59379613-95e6-4b22-9cf9-02e19ef514e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73323ebf-9cf0-41e2-aaf5-ba3f97816174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc9b929-b7c9-4485-a574-991ff133af7d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.25.25.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ecb5660-8acd-43d2-aa0d-f92469abc426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8476dcdd-a3fd-45fc-a91a-357c943b63a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b38c121-1984-4d5d-a61b-864420977c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a9cb01-cda4-41fe-b83f-6642147fb3df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afc18c8-a32d-48d5-9d2d-016986ae033a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb704990-7ac0-4d78-9275-83edb3b9abe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6b5b87-f327-4e4d-a7a4-799090376bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd028f97-c13a-49cb-ba73-cb2d59d14727", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.7.188.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c9de6f-4f7a-4e4f-acac-b12548b9875c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.154.224.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8b96e3-c870-49db-bd6e-0d721e4b755f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2a0229-5903-40bd-9e96-6078cb251dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc56972-8e90-4993-a470-0f40a4773954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.151.171.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c85bb66-55b0-4745-b18c-9cbfe7092d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.151.171.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02ec9cb-6078-42a1-b6d1-5b1effb81c67", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.103.104.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9660e58-596e-4b5a-89cf-bc0e3a00600f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.126.186.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7583b74-3975-4c73-9b1f-b24403140e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.95.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc55a8e7-76a6-41ca-a3cd-39ae1dac814f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.146.82.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab9bdcc-7607-4ccf-bed9-7655df80a15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f08c29-e404-4140-b558-c1e2ca91d6c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.190.189.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b974db76-45d5-4f01-8049-e5d57f3d21d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf66fa7-7ed2-4923-904b-0af06ec1145f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b37b76-cc4b-4b91-87eb-b6a45f524abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aae72c6-1891-4fc4-b386-848edd32da40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052c010d-9f7e-4246-ab99-39b56d1a79da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91096c10-bbef-4e6b-887d-6c37d7500846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cfddefc-24af-4f53-8960-17da53041be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae5015a-908b-4309-83a4-2794cf6dbe0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ef470c-0a0f-4b93-ba6c-d7a6385b3604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6a4bf0-f772-4027-89d7-741a1c278d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa04896c-5ea3-47b5-b63c-b2471105983d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ee5745-7c94-4fd0-9516-b71d651ddc0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7c6b92-c89a-4569-af4d-be6991a6a6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c792f1-f119-403e-81ab-3fa417e7dee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc18d672-32d0-453b-9091-388d21c1be5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2bd2dc-171d-40c1-8176-4c29a8f22ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f9acbe-b720-4ac1-a467-f477ae4cac72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62e1863-7abb-43b1-a31e-3fe4202e77b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d7fddf-293b-49cc-b402-c7f4d6472e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90057e6-7488-4bc0-ad01-fcc34244932d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77eba82-9364-4280-8dfb-966727612b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a546a7-80c6-4878-88d9-fe732aaa2f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ccf8630-3795-48ec-a411-9d449d83c466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c6b824-991a-432d-b048-0dd8cb07ed38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be717b3-0575-421d-874d-76a4c5e0c5df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a208da32-2f07-4a0a-b1dc-1e95fe180142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e1fe15-60ed-4d22-95ca-1ae7f0105dfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f004edba-ffa3-485b-a4e0-a14d46ffedfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf8602f-7505-4f71-908d-8fd44ed1321d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71229c2c-d818-4242-9599-e34620d2b134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea4fe97-1ad1-4d84-aec2-cf9201aded51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448b6e3d-648a-43ae-a832-b9038fd3a3b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bef88e88-5698-4f8c-aa30-2bb135c06070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0919b4c3-d89a-408d-96be-2723cc41f274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df882e7e-6b1d-4de7-be86-b436cf695362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123ac192-220b-441f-905f-746a0ceb58a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b21088-79db-41e4-93ec-727ae5221aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f291a0f2-b4f1-42d7-a3ef-db23f6f654ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f1214b2-cd9d-4d84-b97d-daabf3156919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de3fb76-2442-4693-b8a0-bc91c07a2131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16df2cbb-734c-4419-8b05-977a31fbf898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c25233-a682-49d6-b9dc-710a1c88fb19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a513172-968d-4a0d-917f-91bc8169cb2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94dcc259-ab74-41e4-8250-e525e6e8502e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab93297-6a10-43d5-908f-0daf92c4cb77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eafbcb7-0667-41e9-81d4-2070d83e0ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec2c7e1-77ac-4dae-b604-779bb26214d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917a6fe0-7d5e-4e84-805d-625df52c4625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf08b8e-32a8-459b-beba-da8eb96ea97f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d4d947-7d06-45ca-975e-eb9bdbcded48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07fc6d5e-b0a2-4d48-813a-f0243f4fbf87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd8e495-54ae-4448-95de-056101335769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e287669d-3c40-4867-9580-01ced1bc10b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573c7c93-1ef4-4073-9d82-f66f85f2821e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418b522f-beaa-49c9-9c53-98199951afbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db09459e-af13-45c8-b435-b3fcc5014f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76077d2a-4c08-4b3c-8f0d-8d398c2cd022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d383489-8ca6-42cc-99b9-05f8b694fa82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.205.220.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15834575-098f-4cbd-a379-01cf6dd3fce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.207.244.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eba8bdd-0522-4605-a424-a62983114d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.184.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d5e9c1-7169-4a1f-bc80-51d218e37ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.197.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aba56ff-d53d-4fcf-84fc-605c0115188b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.215.85.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76de3254-022a-4b8c-b257-727cde2e3b5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a4dde7-160c-4228-a8c3-9893b227001d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.225.162.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1be025a-6fe5-411c-91a5-579a2a764855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eece7575-00ec-4359-a159-5a9ed02be87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad4035a-c94a-492e-b6c9-1368b655c1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff752069-d3c0-4a82-82be-d9b0e56a80b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ad775c-be2e-4ef7-8fad-b2c79417bfb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced939c2-942b-49f9-ae2e-6af66bb3ca40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e57a75-2776-43cf-8193-eed1c58f1c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b438a298-902b-408a-825b-30b78a6efc64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e376c1d8-5f57-42ce-9468-48e23de3cb25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563e05b6-6eb5-443d-b267-b2825018490a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84eb0efb-5888-4255-ba06-a17944a07974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f651f6a-ee20-45de-bf8a-2a696ccf0d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0eb6c02-df5e-4e4c-82dd-cc3d724c18c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f042a10a-244d-4a10-a7a1-2a3b6a3565a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176fe9bd-b264-4ce0-9462-bc980baf20a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f6094b-6d36-4797-8414-ae5303fef02c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d8ee04-2c0d-4952-a984-974890553421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d14276-b985-487d-98f0-7e7244f6fbcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7289f5-2062-4958-8418-eadf76146b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76f0aa8-7c65-4491-b25f-9fc69a67dc92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee1d704-6103-4867-af29-da7006dafada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390f516c-14c6-445d-a789-475a03a7825b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc1a8ac-d04d-4e8e-80af-6c2da1d42f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18a8797-86a6-43aa-8a28-9ae38800585b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b086ca-0c37-42f4-8758-bdbe5638b605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5841fcb-9b1e-433a-be6c-62a3f0463c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb696b11-f477-4657-8689-25e1713c9fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ebe6a7-7b7d-4db2-bc82-20138c073654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceaf7b24-4e14-48b5-b163-19308f76e683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0330bdf-4bbb-447f-b769-50ea0aaa4b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c4547f-7313-479e-88e0-297b3688e1b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9f6f7f-32c9-44d3-b705-b3ba76ee2467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9344ba-e21c-43ff-8377-393290249a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2643a3-a747-4965-a0f4-7a63dd75b9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c6724a-9c79-46ad-bce5-b387266351bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74254c73-cfa3-4336-b585-b9d018be4e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1ef35d-f9cd-475e-9a36-3226b529534e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8304e1-ec97-4562-a1d3-34a1ef4174bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f060f66b-0a91-4ecf-80e7-3bdf8dae3480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce61ea1-dccb-4516-acbc-1a62af96a950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94405fa8-0236-4650-8a5b-4da19d76a6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14edeb1f-6ee4-4898-b824-2f111ea001b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f4c77d-3644-4f1b-8c00-ab0eeb137c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe6b841-aee6-48dd-afe4-3a355ebc8621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98810e07-99c4-46e6-b728-9a9bfddedc84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73f4f20-44cd-43ac-a4cd-e38f304842f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512dff1b-7d0a-47c0-b1e7-017990111482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4747a294-c716-42e2-a045-c7e65e3f35cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242b6ee7-f004-42c6-82e8-6182022131c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19687d0-c0c9-4f15-afeb-d3300f6bee6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8b7cf3-438b-4c70-94c6-2d8698243d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af631762-36c2-4bb2-963a-95eeb0a17f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4309e648-14ce-4c03-9c36-ddd9016eca2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce876ca-02d7-475d-9f5e-589f4572b793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b867021-7ecc-47a5-bf64-becb8fe86fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7de8482-6a83-4c6a-9201-d70495b155f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366c96b4-6b87-42fd-96f2-8475184395f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e19412-f927-4a0d-bd1d-2f58fed70338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b452db4b-2bce-4381-8bef-c60733e90b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0c37cd-7537-41f4-a07e-b5f21d9add98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0a9bd3-93b5-4f64-9490-08b837fe4dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0123bf88-82d3-463e-bcd8-456c1165f0ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd635c3c-cd89-49a8-a611-7bbcf03fd4bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7f326e-7523-4c3c-9725-bc8ad9f4034e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c065451e-d18a-41a6-bf09-d4eeb9b6852c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3caa5b-9e3f-43c3-8eef-b8dee56a5013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3044c09-bcc2-4f9c-a5ad-d12f88ca67be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6e415a-eacb-4100-bb97-c235966ca54b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b630a70d-a8d7-4db1-90ca-76b418f96530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8582a1-401a-4076-91c2-4c14ab5c5c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a521af-7f0f-4ee9-b6aa-be9baf3feb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c7457f-898a-4691-ae20-84c2f407ade7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3752c8b2-3e50-46cd-905e-46c6ea6e0718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.129']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb8c44b-6d0d-4fdd-a155-d76d742e192d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54989dd4-3962-4b4d-961f-4e9022280697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff28492-980a-4ec0-a7b7-a474dd0a0c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ee4de6-88f6-48b5-bd4f-7728985c71e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d284b8-7609-41cf-a754-c8fe90c61391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6338a4-5504-4223-8abb-e6b682ab0be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.139']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5c07b5-9f4e-4ea7-831b-59c20cc59412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2468234a-9bca-46e0-b981-ab47b2af9fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac72b9c-a9e1-43cd-88b2-c611d31a877d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f284f524-c509-42bf-9974-b2e2c7fa1b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59d40a6-e825-4175-a1bb-33b6158a1160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbd54f1-e0f7-46de-8002-00d3ba9d2922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728a0192-a739-40c4-94c2-0bf1b54397c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7f2502-2d8d-4e63-bcf6-c241d5dcae50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594f7c5c-4c88-47d9-9c5d-7abf3de3beea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c137e26e-32a5-4107-8e66-5a54f942329b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd68ec92-7c33-40d5-bb11-3a1dca3c3570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903bbc2a-c28a-45c3-bd09-77895c615e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5cb624d-876a-4a8d-9f58-06a4a68b47fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90fe5a7-7591-4f4b-86dc-758803c31b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfa0adb-4300-4008-b544-274d31b16dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d8f379c-23e5-4995-a07a-4a5c9979ec20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5be6ca-bef1-4a8a-b779-3b99815fda30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a62b9c3-bb16-41d5-84c1-80bf476996d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69feadf-b467-4ce7-a67f-e1aaecef90ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2730e0-491c-4d0b-a64d-6b38c118a0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d153d08-a1ca-4a70-8474-2911abb6c5aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358856e3-acf2-4527-be51-7ec483e90957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaeb4a1c-ec61-49f5-ae2e-a387e6e3d898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9cae74-447c-4656-9e56-47963005fc57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d754a501-fc90-4127-b3f9-de8e61cc8901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7e80e7-4548-4243-85d0-5171c9f4ace2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5bb765-3e38-4eea-a3d9-d8f69f7f3fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79025059-2c7d-4da7-a2d2-2b56b8a7fd7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1266eef3-8a66-4031-88ff-73f70e2afd7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb632fe4-66aa-4460-98f9-d528d7d6412c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a321d0-9580-45e1-8a62-3ec01830cec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a800af5d-c8b7-4d36-bf8b-35ef60f6c9b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919a3d00-e6cb-457c-a3f3-61e62cec5607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a4b68b-c04e-4388-88ed-bbfc2a2646aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24cae173-5d38-460f-8d18-3c7811e8e571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe17d13-c49b-496b-bcf6-61ac7f171f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975dc580-d03d-413a-9984-e4b34a5cceb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a879ae9-4e85-4145-80a1-6f6ce4bdfb32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3a4e41-a702-41f0-ab86-b3b11e548b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac599845-bb6e-4e14-b8b1-f2623750ee3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d93128-1066-4988-8910-89055737394b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6700c3-628a-4038-b3fa-a8c3eb4051c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae686f0f-dc76-467e-9a54-eed4b6b7a957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9272a83f-cc3b-43bb-81c5-18e856729abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee992c3-86b9-4ce7-b4f8-452dad2686be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371233da-4e93-4fc6-94cf-01fce6bddf10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0557517-1ec8-41b5-8d17-c359ec94f1e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808ab5fe-f83f-42ad-a3dc-d94a6f84dab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b70e960-0fd4-4ddd-b7ac-e8449f80e080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c5605e-cfc0-402a-927d-c7dcc6f0c161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552b41fa-10c3-4574-9c93-5b1a6df7acc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855ecb05-d6e4-4019-9f34-c03d28b777c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689fca09-0497-439b-b326-160a0a5d6176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b151554a-066b-413a-805c-f035380b170d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb542f99-8931-4bff-a60e-9e9a2006064d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bb43e1-8f93-4775-af1d-7b10accc8d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed35f291-1771-40a0-af02-7a46d1def352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95457b99-db4d-4ab9-a88e-8ef11a1ea222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d853830-b06e-46da-b77c-eb391bc505e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d0fe77-f6ad-4941-9320-cc8d5a97f21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baeaa8a2-677b-4862-b1f8-b121e37842f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00eaff0a-91ea-419c-9abe-b8d5db5e0e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cdc10ba-63ee-4803-998f-58c0085e6939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d0bbda-0057-4398-af8f-263d7adadde4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e88f6d-4eae-404d-a3d0-f38812d15c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae864f77-06d8-4c0f-a644-ca6690e6cbe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1e9481-96fa-4ae1-8fd3-43d80b1dae9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be30f811-9a40-4d20-84ee-66ce6508fb02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.232.29.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06a16e9-14a0-4a1d-bb16-8098156d72e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.6.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e51392-1a27-4492-b87d-468e3767ca77", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.235.225.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5982df-7e73-4121-93b3-07d74ca0ef9a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.237.243.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64b7193-d026-48a4-8c1e-6930fac1ecca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.181.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dcba799-cb16-4a2d-abd5-905878ea6b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.181.92']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878f583f-6441-4d53-ba39-87ab6cf470fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.181.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e58298-9601-404e-9b1d-8d7bd6e50c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1950bf37-5807-4674-ae74-118e0ef67880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.110']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b90fd04-e56c-40eb-8886-26d1736ba791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa453b9-541f-4aab-9b4c-8e2a67722be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2530d7-75f6-4eaa-b08a-d3eef0b8a229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad1ad26-adad-42ed-b2e1-d656136bc69e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879950c9-c53d-4ae4-8552-4f5d28672818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2e750c-4ae8-4b69-8d8d-bc6ee9cf2a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d98798f-2a7c-4fe4-b6bd-7b0006444fb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa51dff6-3b07-4ce5-a2fb-47d68480bc26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2acb6518-dd6a-46b9-bdf9-78cae6cb53d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49acf4ee-429a-482b-836b-7be0feced7c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ef513f-6b38-4364-895b-f04f9f03ac94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7cd660-993b-4484-b3e4-db255c7ecb5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ad3e17-be56-410e-abc9-d741ce3e27c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770c2bbb-9a3e-4ac1-85a0-67f5d28e0f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae8d697-13f2-4a93-939e-655ba73e11f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abcb0fce-c2fb-4da0-8924-d6cc269c5381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adef3714-c7dd-4cdf-ae19-0396b7a2f41d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd3879d-4e89-4524-a68e-99a8080f57c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4016f52f-c53c-457c-9d93-be1f8397a379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c6cabb-ad64-4d69-9bc3-d87bc9fb9219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7eb2f3a-9a02-4932-8785-bd7ff2cd7444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39dfc88d-cc38-4b68-b80d-77bbf089cd55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c47a7ee-7e41-4152-a2b0-334f2b04a342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92997e1-a22a-401d-a36c-4927556ac897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f70bb1f-2a97-4393-95a2-d55f481abc2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96439eb3-8c3a-4a06-b57e-903cefeafcac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7790f03f-0b01-40fd-bc59-20fd947bcf1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.46']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c62760-f5e6-4d73-bb87-1a9b5d1a1046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87a730a-c5d3-4de9-b86a-f2e941b02c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a29be1-b4c6-4f4d-84ae-430630d8ed63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2afe4af-8854-436b-bed5-fe7b490c8a6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76669a8-4298-4c22-a2cd-02e8a1be29d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5fb32e-1fd6-4cc0-bbc3-dfb43de2153d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.125.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63527ef6-1f7c-4c13-a20f-8eda60c5b372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5c07a1-4db9-4ad2-93c9-bedc525f3ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b3e6e5-439d-42f9-a9f8-add4dea84b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630b1082-d416-4146-aae9-adf99c4dd3d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af9618d-f8e7-4c02-812d-2a65391f6f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.121']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b150951-c4c2-486c-87dc-37ad016ccf07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b3255f-946c-421c-95c8-ed9abd4cd8de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d4e84a-1033-4751-b608-dad4c1e8d4c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c163afa0-5953-45f0-855e-8a76c35fd0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04fd4c74-b6f5-4e09-a95e-956db3d3187e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd73b584-33f0-47a7-85b3-c9614178a60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def46aee-ceed-4ab0-aff1-068bf0d8d687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.173']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d35b239-41f7-4a51-a504-9683ff4e0f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a822ec7a-d11c-4af5-8f97-7f4deec77c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dab5eea-6fe0-454e-b4a7-b1b55840323e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1debe169-1f38-4e75-b9c6-bc058a278bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.217']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff458f80-3f6c-498c-9974-17de7d182445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126fb433-d385-4e9e-8674-d56b9a97cf96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030dea62-5e75-4cc0-85c7-0c298ba02630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae79fd82-2117-4583-8e1b-790feb0d2334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772235b7-3cbf-465c-85b1-82ef2a71a70b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a65c6c3-90b5-4bf1-a561-ce5a74f613df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.35']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce158e45-6aa6-437e-9a0c-4a3c3c86f858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74245cd-e00d-4d05-a84c-b930d2023f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae0a625b-64bf-4f50-9636-135a065acd8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b83574-7a67-48af-b6de-5c7162122780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882690d0-015a-4b81-a4b2-c2ca3abebb53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.88']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71563545-0b00-46c2-86c8-8c28fcc5189c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.127.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2971c35b-a5e7-4e0f-895d-1044e4372ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34bca331-a114-4941-991c-9a2cb8702051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670661d3-5486-4f13-a1e5-e999fefc47ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac9d1b5-dd4c-4b6e-899d-bf32360cc4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb22e53b-628a-41d0-be34-2339ea624144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2426ab-2a9c-421e-8d86-35ffee5780a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d18bb5-fee7-4cbe-87e6-33a1d8ed8331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29523fb-67d0-4449-b895-590073382a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db4fe88-a1a9-4bcc-bf57-6d328bf5d549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ae2b1e-1231-4179-9edf-08414c66ab49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98a4872-865a-42e1-8ce9-7da5f32132bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d1bdd7-ec99-45a8-bead-fbf14abe95af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eec90d3-b409-44a0-b113-3e9269c36c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.218']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5139d380-10e0-4770-b166-3108a5aab7b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2c0dd4-9720-40fc-8f19-e7a903d912bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012406af-5779-4444-8c68-0b0992bbb733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c038b06c-fa34-4077-9b95-e6c100c18b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d853a5d0-374c-4b2a-bd7d-457086b48c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.241']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45fa41d-d133-4194-9d64-6a37905417e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c22483-a027-489d-adfe-b87a0207d34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d6ef3a-6c99-4cc0-b07f-9a1e4b6b60bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.44']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e9a51a-be00-4ba4-9631-f87b964a1cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867662b8-f28d-4b8b-9eb2-c682c3f9235b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857b2108-2415-47b9-9c25-c3843de0a649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940a6cb0-d577-4c81-a5c0-28a126679a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.72.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e24f39d-2aaa-4d37-a890-fb685fe07e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691258f9-fb2c-417f-bca0-7a51f4212225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6133da0d-3729-4c9c-a98a-1ee9530fe7f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bdcafc-df2c-470c-8d65-c108ff99c443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9fae45-2e31-465f-8f14-5e5ae79a1866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0646725b-5b24-482b-93e9-78352fd73fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c0a46e-bd33-4fd8-9cab-c3e0a6523f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.141']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95d9f29-76d7-4957-b0b3-8cb409300c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a630e3f2-9b99-4d0e-8b5c-11a341402f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd0be92f-a30d-455b-bdb3-c9d1deda84f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d867ea-8f8b-45cc-9be8-238d09cf659b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520a0ed3-8f33-435e-b136-e06946f5f032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c1a9d5-d3d8-4343-9769-6ef346070807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ebe7b0-6e36-4643-8a0a-ea7d8178f1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3cea3f1-bfa5-4046-83f3-c1b222de12c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd00d17-e3a0-488c-9c6a-be2d2c7e8125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6d96aa-ce58-4bfc-8154-24de25e2c82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78548e7-4688-43a1-a39f-a1df2fccb54e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0eb55a-3f50-4d0c-96fa-31c008ae41ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7f149f-3d73-4f25-8955-c7690669f8c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e0a102-2918-499d-ad12-6bfeae836c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2e0076-4649-41da-ae50-c39ea403ab55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd42024-539e-410f-982d-f9642a7ad0c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee3a8ed-7a45-4634-85ab-ff14b9fe1897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dfb9a55-45d7-4c42-8925-5d23934f34f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1302dbdf-ec86-4a21-86d6-556cd307ff88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93c617b-6dfb-4138-8a82-d1c29265cfaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d79d22f-f97b-4359-b0d2-2738a2a9b7dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9403e2e-7012-4156-8420-0614b3d51df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e01fa5-008d-4afb-b4a4-b88f76ba4eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d7a4e9-5478-4436-a22d-6adcdbd46cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea90e79-4216-4b45-862c-9dab898912ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37df5f68-e6c9-4668-bf45-11eff38bcfeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ca3342-5687-435e-af4f-cbec3f839926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c9d657-e627-4769-910e-eadce37682af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5f1684-7c00-47c2-9ce6-af54a6a9343d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.73.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25dab792-8957-484e-b268-2fa38f923fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1c5c11-8a47-4a9b-b687-365b3c740462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.109']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e941aaeb-4688-4440-9fdb-eeb44e9b3b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4166377f-3899-4f40-a606-2e3750e15607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6914891e-9448-4a8d-a9b8-1b09ffedce09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8cedf8-9113-4858-8f31-726a00803e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e534f9-56fb-404b-ac84-e2afcf3321df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.138']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2176867c-e109-49a9-8041-87dcc9eb5751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c81864-5a5f-4b46-a2ea-dabb4b043509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.148']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253e55d3-9ef9-493d-b06d-08691d0e6f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50fe01a-0a9f-4894-932d-f33a70413e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7d7ce9-6738-44a5-8cce-bb0a7a4c6b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7354c32d-1614-4513-8761-be0d02c2890d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.188']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02ce4d8-8a4a-4273-9214-6b0af7d34b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.191']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60123486-2256-4d1c-9ec3-dfdca79829ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6af68e-5220-4e4c-a0a0-e9c8cfc54510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.202']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c9e00d-5a3b-4d3b-8693-19b0b59e5894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b96b751c-e50c-4b98-95c8-18c8d7ddb029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d3e9ec-33b6-419d-8eb5-6a08489a9d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2bef47-f3f8-4b48-a63c-88e69fa77840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.228']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436a5641-a72b-4056-a585-0849cc4a257c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbaff8ad-41ab-4cd1-8c77-fd2d60a0ad29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c67fb53-0780-40cb-b4ac-13cc390e48af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921fb099-599e-46cf-89c8-8893dc5d684e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07740b96-04b9-428a-8292-bbaefb0cdd5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7532e08d-3aaa-4875-8f4a-71334a51a09d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3bc9e8f-6610-47b6-9f0e-99b6d6d4caa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fedb58f8-08ce-4b81-b7d4-bcf110b31086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8219a1-ca31-49fe-a4ae-2fb9256b5f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.59']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fabc7fef-23d3-4848-a45c-6f8b277264c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d479fe-bc86-42dc-a87a-db78a9fc57be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936c8066-9914-4002-9b14-b05c36e367c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.83']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b846ac09-4841-4543-beb4-c17aa4b77987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e89772-4ca8-4238-a897-274db42ca80f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3907632d-dcb6-478d-952c-562fbd5a3b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c820cadd-e3ef-4a11-8a0d-26849d5952b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.95.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e939e8bf-7782-41f9-9901-deb8311ccd09", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.73.84.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add463b6-686a-4bd0-b009-8d7a48d08ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.200.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667fcf57-a1f8-4e06-b140-c28f712a5eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.241.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80918dfb-0d17-44da-b2ad-b1b2991a872c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f3bc95-97d5-42bd-8f5f-34b4e94672d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5908621a-aebe-40e3-bdd8-b9abd079072d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6daeb9-6854-405e-bb5d-8e3cab307b55", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b24a7c9-eb07-48c9-b835-77c9b58b865c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6549813-bdc3-4299-b7a5-70b66238ddac", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a9e358-9026-4a4e-80b0-48165b28f042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.43.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8136734-ac99-41de-bb02-cfed63d0b644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3ff529-e343-480f-9cd9-c66ab5557326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896d1164-5a8e-4817-8691-b2e218fbbb4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652d47c9-d10a-402c-a4dc-ffb5e568e431", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19aa64e-75d2-498a-8b9c-cd3098119336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc50ee0-9e49-442a-bec1-1255f35113c4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3304e42a-90e8-459d-bfc1-107cf6488d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d14a56-8508-4c54-867d-825c4c27c7dd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7e5458-dc9a-408d-ac8b-04b83653dc24", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.142.20.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ec9db7-6e51-475a-adb0-afc52bf6ec0e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.185.218.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2eb3a8-3e1b-4c45-8018-5d47326ac8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.204.128.149']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8453142-157e-4ee0-ae28-2562a760dbeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.34.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ba637a-023e-4a0b-b8bd-2ef67689a50b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.246.83.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02dc281e-b5f4-44db-bd18-9e88a712cade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.39.60.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522ec542-1301-42e5-8bcc-5c8445b75b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.39.62.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52456923-77f5-4134-af19-f8848c4e13da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.61.204.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6076618e-0390-4bb5-a707-7cc277fb99f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7373d570-4628-4cb3-9de4-5be9802ebebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.96.27.1']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d8a1a4-920e-4429-aedf-56460961d25a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.214']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acb0954-8821-45f7-a8dd-a6efc395079b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.72.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644647fc-57be-4e3f-81ac-5200b8d3b823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.126.17.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccfedc1c-3ba0-4c28-a4f6-dca4a0a2b95d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.127.197.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d4720d-e963-4322-8dba-751306f106c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.138.96.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c5b8ef-316f-429f-9e5a-7f9bc08e41a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.150.243.233']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d04e8cc-f480-42a5-821b-8de095dc797a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.208.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7624b2f7-a0d4-4420-8fb4-fd7d4b0dc082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.50']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc982ba-c659-48c9-a953-20ef8e2574c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.158.108.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b4447e4-472f-40da-ba4e-8e4927dbf45d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.158.91.25']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8680dbb5-adb2-4957-9866-b2a6c83a722a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.171.178.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01633188-d734-4ee3-9125-2cc6c1cfcf97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81844d5-bfd9-43b8-80cf-fafa4b999357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7144211a-e043-4a12-8a85-9eb3eee6a83e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.185.46.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4da778-a365-48d4-8ef9-399e43f18290", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.36.176.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcaf5aa9-5fb2-481f-baa1-26a0d53d0711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.56.81.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735049bf-8b81-4eb3-91d1-3f8e884efd87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.88.156.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519ea0e5-0fdc-42da-8be9-df53860af0aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.88.156.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4adbbf6c-5c70-4943-aae3-30cc8df5b4b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.10.205.206']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb827d2-3d8d-4805-9f04-c0465bc9fd2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bdea704-825d-4631-83f4-78d7e2481328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e88b9c3-510f-42fc-a30d-a993bac71992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f40922-dee8-4f9b-a4f4-7715ff2f6148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a263ae-8d8b-4d81-b912-01890540952d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ad8c0c-6b44-4440-8ee1-3cb97bc56b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c7bf41-52c8-4ada-bd09-bdce344c212c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.126']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bea200-94cd-41bc-980c-6737411edb5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd65e62-80ad-4877-ad25-271d30bf9541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878855ae-69f5-49c7-b991-b4cb009a2ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--372ea18c-ea46-41c8-af4b-7fda28ab1ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8995e800-a340-4bd5-9040-c40cb70c5b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55192231-63e9-476a-9a76-219f2cf582a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afecf7c9-5f29-4df0-97bf-3f0d1107081f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb42b28c-e0cb-4759-b70b-d32f61c2caef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af980053-16a8-47d3-b1c2-bb1dc3eb7ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.181']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4d4e3b-d6d4-4c1b-98bb-562fee50c7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.185']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3d0de3-7f95-4270-8310-fc8d5ce187fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca14360-4b24-4fef-b13e-616413c2ceff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3767b862-ac95-4a3d-8a30-9ea4433e983f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.200']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696f65ff-eeff-4d31-a7fc-c4d1eb5f1081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613296c1-7ec3-483b-bca7-d345ae23be21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9bcee5-f509-49f6-8986-bcdce924c418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.236']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf6921f-aa14-48a9-aa30-3919a6f4baa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.248']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0d4ca2-a452-4b17-a2f4-000e3ac3052e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9036c1b-6c39-4e4f-9611-dbd61f0a38aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a810f882-463b-4617-9d60-425cec8b2055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9aebab5-47b1-482f-944f-b9f89899399f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd3bbac-fba6-4a65-beb9-c87365cc0be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.37']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d6a5b2-ffde-4d2a-ab46-3f23049395e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6794a33-5a66-4988-9edb-59b55cf3aab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4924f3f-2905-472a-85ab-45ef4f34ee66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9696f5c5-e858-4255-b197-b3b6078f8d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98883233-b981-4e58-8dff-2e59b137355e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1447133-1f99-49c9-833c-a22bae0459a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f265d876-79eb-454f-ac49-06981ed15ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184927f7-6c8d-4da4-a610-80f4425502ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654650da-8149-4490-820d-48de19c85893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1c2a2a-f65b-432e-859e-5d69bfbcbfff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ec156e-a365-4546-bf85-fe828c074532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1652f185-2549-4140-91f1-6f27b430578e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.131.64.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3459ec9f-f3a0-4243-924c-710fd9ff55a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b43a31-95ba-47da-9cf4-f74c21016621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7222ce8-8837-4779-b687-6de8c390de15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd894a8-a124-4740-ae25-8fb110e8db69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.158']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f31abea-0e50-4a6e-b336-43bb4505af8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b295399-b293-4c24-8efb-72488e7f4f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2616cc1c-9dce-4581-8b8f-0b2817bb0efc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c556e5-a9ac-4174-8c74-441e8e91ef55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e320eb-6e26-4ee7-9f0d-7f3c8e58ada0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.31']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce58487-2ed4-4930-97f6-4781ba51079c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c262a8-ebd0-4717-9b94-a44740fb6579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc0c17ff-c32d-4487-917a-210fee41c274", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221201ff-d991-42df-8e76-9b08dd9af47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.57']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03485e5-8782-4043-990e-0f574648244b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.66']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72f1e36-7919-4b8c-a7d5-dff16687595e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f6cdca-3177-4185-9908-bdcee1bdc0ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.77']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440ccf9f-573a-4bd3-b5bd-8962caeccd31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f84e0c-9fed-4a66-b2ac-fa405740af98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adbf5a13-ce6e-40fe-b13f-71d6469b01d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.156.152.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73318b9-95e2-40f5-83f5-c1cb134586f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.110.201']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591d0adf-c807-4186-a614-b76b42736427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.183.166.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7295fc1a-a964-4e03-b731-d97d4af60411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.190.231.106']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b42d72-983d-46b6-b7a8-ebea4b65f9b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.20.211.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca2b56e-3dce-4208-b390-635517fa36ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.229.64.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3fe1c20-6dd5-4dc7-8095-f499129e8e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4883671-c565-491e-8212-b21a97a08885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.128']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07198b9c-6266-41c4-bbd7-fd8ea926a9a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ea8146-6e80-48da-9c15-b8d0f8a6da03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf3889b-220e-46f8-8abc-480126a4bc45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.249']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8023050-cb4e-4dde-a305-2097b591c937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba4f460-7d1a-4bc5-99c0-20162e3fa448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651775f4-1718-40b6-afaf-1122b1d53247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.3']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eee53c0-044a-410d-8a25-cfa3ec9d50ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.232.42.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67a3784-8b5c-405f-b18a-26c7a2f9118b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.249.59.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ef9bb2-c7ea-41af-a1bb-e856a4014613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.250.61.10']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f375c930-fccd-4641-9e16-754131be2089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53fc6020-3fc9-45b9-9281-7f6c9407a4d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3416eb-45c9-4de5-91da-33a88fd89171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf7248e-16da-472e-8841-d9e51844cfb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ccaffab-b229-4138-a10c-69e00838725d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.68.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c348dc56-19e3-4f9c-8144-21392a78c3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.68.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab5e437-4bda-47b1-bea3-f096976b5212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.88.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a40d656-2c18-49fd-9aca-2b99dd3eeeaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.27.50.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26825e2b-6d49-4e44-83a8-7cd83b8b07af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.64.215.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7b66d3-3037-4ed1-9ee7-fb82ba1545c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.74.71.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a73979-bd72-4f3a-a606-28e3d696805e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.128.190.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce003bb-4faf-4503-ac41-8c9d92bdf098", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.158.38.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e04307-e9f8-4468-8db6-b525b6bb1706", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.16.109.27']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f66245-696d-4420-9e4a-4d19b9d027ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43bc5f3a-7d03-42be-a45e-80cf28d2ee23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.116']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c389b5d-8b1e-4b1a-a791-bdf449b4a648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8461e11d-a68b-4283-9812-dcb0c0eace7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0384df-f11e-46af-85a6-f88903b68669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.14']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea4ee5b-730b-413f-8b6a-5a3643d11241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.145']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f3f568-a43e-4ec2-858b-52eff3ec441f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c55a40-5622-4db9-bfcd-a6c17e895e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9522135-c956-45fd-bcfc-8a784679de9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5b2047-b017-42c1-902b-46ff6edef256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf8ea6bb-91d9-4a91-be5b-9c5e41d25c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.205']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85763c6d-f785-4945-bc9e-cb88149464d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b8c37e-5ca2-4add-bad5-81eae287ba5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72acaeb7-c0ea-4051-8cb6-da8b13cbd690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.227']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87fd41b7-f2a6-4975-922f-13a3bd4807e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a36c7a6-e9f5-439c-8c36-5c735381b647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80570f00-ec97-4de2-b387-6020f078192f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.244']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a39c2f-aedd-43ad-ba06-673ea02bf349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.34']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53071d41-a4ba-4449-a413-da629940ff19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65159364-16b0-4e2f-8922-1ffadacc0e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c6aa91-c519-496f-9f73-1e8d51da1024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40844112-0493-42fa-b385-8e56f4581e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8bb802b-875f-4be7-b05b-b5cf517d7b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6331fe87-44d9-45f4-a754-79a45d617930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.58']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e776d66-2e4c-4bce-8579-f2d4423c2915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.156.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e9be3f-98fb-4a39-89fa-6a6b77f07b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c51edd-9033-4201-87ed-ff9b76de2650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.12']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ebead46-c175-40ba-a0ed-5b23202b63b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e145fbaa-71a2-4930-a63f-128d71612622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10db8f21-d3ad-4f20-8aa1-a82ca6d50174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.130']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d70b0b-2132-4de0-8da7-7ef53da18f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.135']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88db61a8-6e0b-44e3-b730-ff03bd8cdd7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ddebe0f-de21-465e-ac98-f8a595a27f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc338fa-df55-4463-9d7b-adeaa4b46ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52df4f66-c815-4754-be39-8a93fdb562d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d57f58b-8bb9-4281-be61-cc66c195fe48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.183']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8bb264c-57a9-4e3a-974c-f51050ef2973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8cd1228-d2f4-4ef2-86f6-1446b2be3472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897198d1-48c1-463d-a219-396cb4ec1f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64e7753-8458-4b67-8ce1-eef733cdc21e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cfc4e09-2c77-4730-bde1-0ca8283a350d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.212']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b2efcf-60e2-4bb3-82a8-be0256476013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95c8a77-cd27-47d4-b498-f562e0dd3866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1387e3bb-2fbe-4756-bd65-a48f389c8f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.40']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eef6a2f-4dce-438b-adfe-5cb214cab334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd82768-bb7d-437b-bb15-a346a271c733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7dd6e0b-8113-409b-97a5-9952bf9538e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7feee615-9f05-443a-a92d-0f0f78efbc95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.82']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67802416-ede5-4845-a542-05e333ad857e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5feb0cf0-2560-405b-8f8d-560dbb74e5f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf862e5-c9b0-4320-986e-bdfca7321ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.157.98']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f031d1-9b42-49e5-9e1e-1e67f8540f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea327c5-36e9-47f3-873a-273dfb0f1de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.105']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ae0cc5-d02c-431b-9db4-5e79a605a035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.108']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e627050-20ab-46ab-ac29-0bb798eae157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.118']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ee7f1b-0fef-434a-bbab-8ea18b9f31cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.13']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85108768-6301-4269-8252-5084d91709d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2673f343-3b7c-4c28-af92-de9a6bb47352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9c5bbd-1175-408b-aec6-776a48b9ce95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.147']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9397a716-80b2-4546-98a7-e82f971ba1e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0e48ee-bbc0-4ac3-a1a7-597948db96c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52ff216-b86b-472a-a975-48d2b2af1796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.17']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46840ad0-8067-419c-a408-7a4c4118e80b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6200e7-b9f9-466e-a6ee-f10d81b2f0d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.189']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbcae21-60b1-4c38-a04b-e843aced8b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.19']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab1c8e4-5138-4a13-8e4e-6942539ed0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37e649e-5dd9-4964-8571-f58202b4a3f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.194']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bcad2c2-ba60-4288-a11a-810de6ef1189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdeeec96-0821-4755-babf-507669549463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eaf5511-7ef9-4f85-9e74-8fab2462875f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012db054-7415-4f5b-ba1d-ee911b4e748a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6e6ca6-10be-4448-86cb-b239cb0b4854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.221']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddff1693-33b0-4f45-a76d-3a973c66e87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b77c1e7-91f6-48c9-8444-82e10b4e50b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.224']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd936c6-fe22-45f1-a546-d608bced0e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2443ce05-f28e-41ac-87b0-4d898ee99fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c990d3b6-a8fd-454c-9d67-9e09e1d4807a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d39e3a-88fb-4cfc-83f8-46b05e230db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.251']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9fa1df-4c15-45c6-80e1-e1aec301ac55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7511500e-c954-4f88-8dfa-a805ef59e0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680a64db-e666-4bae-94c5-a3343abbeebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f386ef-b650-4465-b55c-ff1cb6f42558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fc74f7-3ab7-4f4c-b190-c25b4b6ee9b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d20303-c27f-4532-949f-e02719d26500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.39']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fabca0-bcbe-4675-94b8-8e9a063999a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78462464-faa2-4015-bcdd-0e1c1fa92a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1123cd8-b01e-4138-b8c3-a8aa76050900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caebc2f0-556c-4be4-a956-4d16d2585017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.79']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540059c2-7e97-4664-bc3f-42825c1f01ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0c432f-b303-44f3-bff3-3a25bb136f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.158.97']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3102c0e-94e4-4927-b597-63e4f3857f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96743d7-90fc-4611-a90d-12111b4f4e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.104']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0433782c-fedf-4120-b316-3f349afbf9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04768288-8965-4bb6-bd2a-fe2462bcecf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80edc2e3-2c52-42ac-b580-7f05a72d4e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.112']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14dc0da-92f8-4123-8b5d-f207ab4836b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72704275-f9bd-4f28-9d68-a9137232ecda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa324c2-5bd7-4e58-b1bf-afd3416f9736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9879258-4184-486c-bc07-b668629407ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.156']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83165e7-c959-4392-8b01-de9c6289d9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f522361-9a03-4f5d-8bea-d71354f8ace3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.166']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b856d9f3-6bf6-4aef-b778-1d98b650b049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ffa8f2-3219-4042-8b99-3e49e916f360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.177']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ef7063-9873-4c50-9ffa-1c0c8446ab42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c5db46-0d84-40d7-a48c-b316db9088b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12c9857-c6c4-4d20-a614-a23b3fbcd7b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c90131-edb3-4e58-8b3c-c58b869b35e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02833e7-586d-417e-b75b-8849b9a384c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.209']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1889f461-4959-40f0-b245-68d75b4053e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ae0e9b-ea06-4600-a83a-15a55dfbec3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54815fa3-443f-4c24-b67a-f9139dd20267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.230']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a9d5db-64c0-4d3d-babf-37e58dad2cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d046980-27c1-49a4-afb3-0f1b03e2e8b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.234']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b00c27-7eb0-4d32-a7e9-b8bccc465c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.250']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93c96e7-1f04-4907-85b5-5c2eae930f56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.252']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0153cc-b5b4-4ec9-a634-b62359dbddac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.26']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562bc654-6808-4751-91e2-6b394d93de22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.29']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a52d1d-b5e4-419b-a6eb-25a933239d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ed2bd6-310a-4a6d-838b-d829c857144f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.159.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda43789-fd85-4319-ac30-940ef1fefd17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.113']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5623213c-56f8-4d37-b4ca-882ab5858c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07357922-3748-4d91-a1d3-6db539764f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.122']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d99bb2-ecbc-4d9d-9269-c3bbd924d8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.146']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f99e62-8e6f-4943-8994-1445348ead53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8351df7d-c43f-49bd-a4e6-ed7a2ab9bf4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4b05c6-a660-4b91-a829-22f3f6889db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.164']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43cfb28c-5038-4f42-85e6-8ecec2a7fc2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67b6a35-ba80-4b7f-bd21-678b0d6472ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.179']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfdbb1a-91fd-4651-aa54-548e551c2036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2f0c07-6b59-48b2-8ea3-62d86582f05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045eb694-b72a-4724-8f3c-48aa96fd583d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.207']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a05dc1a-0269-4a95-8637-a7ecce60543d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313718f9-703f-4687-8b65-0ca197f1e6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.211']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e721513-97c3-4d95-85a6-b1c833cf282d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.220']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d50fb5-1f49-41c2-a333-ad9ef232eb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a244fb-a21e-42b0-b1db-0f04851f1a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7801db3-62b5-4756-a0f7-5daaf579b29f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a60da1-6a60-442a-a90d-57ec1eae6b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1688cd-181e-42da-8208-f4568db1cb75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714c200f-b295-4be8-81dc-8f8e4660ce63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.43']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6efdba80-94a5-4785-88cc-fb9ca7a54ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8621b780-ce1b-436c-b906-367547639286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.49']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--259a5bd5-373b-485c-9a7a-40e72dcd09a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.51']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4c5c31-a56c-481f-8c37-27b4a2b33166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e589779-089b-4d9c-a771-f0114b2e8f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.56']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86593112-35b1-4752-a8d6-24cb908142ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.6']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ee4e8d-504e-42fb-9a96-e2d68ce952a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.62']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629d4384-9862-4814-bedd-16b9abfd8778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.65']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c63a5da-f938-49ee-b36c-471feb5ee04a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a8b4c8-a54f-4df3-877d-4b3dcfdafd46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.81']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2740dd63-ffb7-4d8e-9c46-92579c207056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af7b959-3ac8-4c79-8850-f104409bc2fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963009ee-a39e-44fe-9f6e-cdce1ac1537e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.194.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b0b385-b989-45c7-a37e-3a7887ddf2f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.100']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfefcf82-2499-4df6-91e2-5ab5a3a65602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1847895-7368-4a05-b14e-8054fbf486ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c51000f-403e-4dab-b3a5-556927cf40a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.11']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fadf265d-e154-493e-8077-d9d431f44933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f806c7b6-1353-46ca-9fef-a6e0ba6c7730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff42ae32-0e29-406f-bfd3-7b8f4711d577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f3db1b-e9a0-420f-89d9-b355be022c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.132']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb0d958-9dff-479f-b755-2a5c465bf33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.137']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c7d4e3-9565-485a-8557-b81a586eb5bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a515f7c-386e-4971-bfc5-eae1bbfde9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.153']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30910ad6-916f-4cb9-b92e-c6c8ca78ce42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.170']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee0ccad-ffcb-458b-b82e-c24c1cdbb6e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.176']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a5dff9-9b2c-4cd5-99ee-e43cda8f11e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.187']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4d94d8-3c40-4e7c-98aa-8e71fc80a811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00198e92-0300-4e20-9c98-178a47a891f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.240']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee21aa7-d21f-4fb5-824a-adc9e3efc24f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.254']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4adca465-5d15-488e-b2cb-9b36191035ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.28']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f04eec-5603-4a12-98ea-ddc6d4dc77c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb629168-db3a-4f77-b20e-a3a13dc3ad39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.4']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93fdf88-a3e4-4f4e-b9fd-e8cdee410a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.41']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbddc23b-e816-4cfc-9b1a-e237648706f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.42']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d231c9f-85c6-4ef8-8d20-50b2bff5b29d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.55']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee0b752-ebfe-4695-b35f-2da047bab03b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d893a165-81c0-4de2-b2ed-d9619bf2eb9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.74']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075779e4-b582-4209-ae7a-ded3fdcd805b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a27ecc1-771e-45ae-93ec-a9b148d2799b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.8']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18016298-ef8a-49bd-9bc8-4deb55fa1635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.232.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e569d20-4097-47a4-a111-bc9089a1e4db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.111']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26750928-a278-44fc-9902-9cec75cd1995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e99465d-0de8-480c-86c9-910cae86f6c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.119']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--743bf8ca-b357-45f0-b3be-977ef6a7439a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.123']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c60ecf1-2a62-4a36-803b-3f1b4417cb76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.131']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a52fb8d-3d2d-4e6d-a405-4df84067ff68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.151']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba30e38-caa5-46ad-aa2c-17b8e7044127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.160']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15608f3d-34c1-48fb-9503-e498704872fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.161']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c62bd0-afe4-4b76-98ef-4631eb98df08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.162']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80127e44-4023-45f5-be8a-734db55921b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f945f6-97f8-4ee0-aac7-d53000f004a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.208']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77286e7-9648-4ca8-9b34-081ff17c9a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa10a838-03bc-449c-a2c0-d9a245d21ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.222']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd73be6-9b4d-4d33-86a6-20a22fb3f8fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.242']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c41695-1cf4-4562-b2a5-fa5dc417ead6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e715d8c7-f969-4863-a37a-c6b2adc01bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c58a1d-434e-4b36-9b24-6777d828b804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd03e0ea-6463-4e14-b9b5-0ea30e384cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.47']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e97ba69-ef85-4d01-92e9-b1f1a57b6d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.5']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf68e01-4625-43b9-b3e0-9257a32db6be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7c2b3f-d37e-4f63-a936-9cb9625dc004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acd5b41-574a-4b8d-b03b-edf09e1f761d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d752b0f-7bf2-4910-8bcb-fe7502a2c957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.75']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a601729d-ee2b-4b1b-a2d5-214c317f824c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.80']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350fba03-b577-4822-9ff7-5ff399cc7ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.85']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a6020c-2d22-4d9c-bdd7-5df0c883bbdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.87']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a608695b-87ec-40a2-8b05-5b0a43777116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82607863-dcca-4d60-a58e-4159d6abfe65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.91']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c07055-f569-4d46-b6e4-74560b57132f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.233.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73632cf-fe18-4762-bcb5-44942f1ba8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.107']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d392b0-d5de-47bc-9664-c2e10f69e308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.114']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56502ffe-b050-4524-981b-e261863ed479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.120']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a766e8-abfe-4dda-80be-51ccb8656d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.124']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a5de82-1833-4c37-a2ae-541fde0ff1a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.125']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ba4fd9-7664-4adc-a910-5cc72e5898c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.136']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138e1e2c-0dcc-4103-9022-5859e60aeba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.15']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda00209-16b9-4519-8d74-9f2fef62feec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.163']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2b770b-9317-495e-922a-963dabbc75c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.165']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f086dc-56f8-4fc3-b6a7-b4833f2e0e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.169']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b790e36b-6352-4f85-9fb0-cd2cc11e2a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.175']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a931248-0c0e-482c-897c-cf121954a7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.180']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590f0937-8df2-4645-b880-9bc0e4abf4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.190']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481c8b22-6add-41f8-88d7-2ae88515b6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.193']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd032cd-4e8c-4fbf-87bd-33331ae7a8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.198']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243161b5-ab0f-4ef9-a9a2-9404d9cbbe02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.20']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323be17c-ce9d-4fbb-994b-f4386c9d3e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.203']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee8488d-6034-42b0-8e33-67f63e7bcff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.22']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7fca8f-c40f-49c2-a985-a0412158c498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f84a7fd-ce6f-4eec-a55e-3b4423bdeca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0554c4fb-5c24-4cc4-bbae-bfeda2e3461a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.246']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c8e827-c050-421a-b68a-e278061b4e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.253']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19bbfebd-d668-495c-a8de-c72e4d51d895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.33']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1f28af-88d7-401c-8eec-3268c4d987ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d67bd0-5313-4764-9037-176be660dc75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.45']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838f4a3e-82f1-4e18-abc0-ea7b44fc4a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.48']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6017ca8c-0a58-40b6-80dc-ece9cf9e6351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70cc17f-4109-4342-bfd1-f98f9374760b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.72']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8a0e9b-3146-466d-9a51-f1f07f49b6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93aa7b9-de0e-439f-8b20-d455e84488aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.84']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f27dcba-f018-4b97-b725-bd33a68d24fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.234.95']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7172a3-3fdc-435f-85b9-d51a38c5adb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.101']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b70df7e-f34f-4a4e-a892-63479881ce61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.102']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15795748-d5c7-4bb2-804d-d303acd0009a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.117']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4169dc9a-bd0c-40df-b510-cedaff953128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.133']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2153bc0-5be0-4062-a751-c0f25e95a12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.140']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5028bb06-36c0-4065-8956-f6029f1c5eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.142']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b444efd-20dd-48db-acea-417248db830d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.143']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4e2487-a448-4a7d-a782-3d3fb6076599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad036470-eee4-413e-9a8e-7f05ef0d7b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.16']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27f949a-5777-4c37-8be6-658b9a68cfca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.171']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3789d72a-fdac-4b0f-becd-034a7fcda9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629d9e04-bca2-478b-9151-256758c22e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.184']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6310013d-d5f6-45d7-9a6d-22d3b68385ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.186']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be0bbef-0d94-4e84-a8bb-db88e5a53268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.192']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661fbd44-fd64-4ca5-a837-12a7c6441f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.195']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902d25b9-adb0-4e3f-b864-b3633058608e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.196']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360c885d-aaba-4289-abef-4f1955a4e30e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.199']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc51103-4a13-484e-aa1f-60eddebfe018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.21']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252a33b7-0acf-46a2-bbe0-1e7ecca7c92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.210']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3261e65d-f44d-4fa6-b0a6-b9daf4edb612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9c17f2-b05d-446b-9860-3a0882502e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.215']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832c0e61-b6e8-4428-8b04-cfbb5dbef648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.219']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063a1a66-13d3-49e2-9b22-dacf2aa9cda2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.23']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2223d86-f8c9-4aa3-95be-2c9dc7b55e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.231']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987c89e0-9e1e-460b-8564-2d7016408fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.232']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab240da6-5505-4577-8fa6-ce74f914da42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.237']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baab9d86-79fa-4c14-b56c-f84aa534d748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.238']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19bcb859-2f8c-470c-b7a0-316b92839f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.239']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d60f227-07a4-484a-95f3-e47609ee73c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.243']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3f2628-1911-4c6e-88bc-3629ad93516f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.30']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79b018a-f145-4f4d-b2b0-7399bbeed371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.32']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b784fbc-0b7e-4224-8095-8b8f4b83c70a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2f7bf1-5cc9-4f06-b2d5-401d349a887f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.52']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167f17ff-ff19-4187-aa6c-73ff91c4ccdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1f32a0-c542-4cda-a1c9-7cabc82b72bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.64']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be9ea9c-bc5c-4261-ae2e-df34d7030263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.68']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8142ed-2d56-4d82-bbe3-f235eeb65406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.69']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--034b4a94-1d38-462a-9783-c65ef14f7b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.71']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc6224a-22c0-4a2f-b1dd-57ca0d9b5383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.73']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d0cd10-048b-4b54-a9b4-67c5ce08abb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.86']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4aa312b-b81e-4c35-8c44-2ed73a2d0e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d3e262-1473-4f23-8c38-99e0ff4811d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.90']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065bb0d2-c286-4928-a140-46792b641a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.164.235.94']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7469926b-0f91-433a-a043-1312d533c090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.179.253.76']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9a4466-55e1-4201-8af0-eb50c8322ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.53.157']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6094dcb0-a2a7-4d01-9cf6-0178bcecd3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.54.53']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e895bae6-645b-413a-9696-c66f19fc997c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.54.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11aa05a0-def5-43f6-81ef-5648498d81a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.0.144']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7c2faa-c22b-4c1d-9d02-189d4b930a04", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.24.34.245']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2176cd-a73a-4510-b56a-62368d721fdd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.42.73.7']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34cbede-03e8-4a01-8340-cf8ebbe6890e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.54']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0460d73-d4eb-4856-9705-4e0b014eada6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.117.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1c0bf7-80ea-43cd-8c27-efb9e86359d7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.78.175.36']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c450e145-f027-49b9-9ef0-54a77187d681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.128.78']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2f1095-b2c6-4ea7-8b3b-68cc93a3919b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.130.235']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b23b848-4ba8-49fb-8eb4-1dec1462b7df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f1ab66-abea-49ac-9d30-9ded89cd312c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.136.24']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec29116-dd61-48da-96a3-a61a6aa0bf81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.137.61']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b030028-5e74-41e9-bb4f-a26590306d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74b98ef-f270-4a10-b32f-4456af7fe3af", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.74.6.204']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1053f6-9b81-4834-bd8c-cf8e71217bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.109.39.9']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac35430-1205-43fc-ba8a-d2ea4e981437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.144.137.89']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78bdde5e-0505-45d6-8faa-8f2ac1a17e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.80.119.99']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--304e2d5a-f5a0-4da6-a098-3be740dff04d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.81.160.178']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebc5592-2a0e-48b1-bbb0-32b57fb6ae30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.88.249.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43fe77e-7e1e-4b68-ad2a-8cd9d816f443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.90.43.197']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe57e8d9-567e-4012-afaf-a35cff63fbd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.93.16.247']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1826c881-9f26-4fbb-a9d9-e16c1637cbe7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.97.79.38']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9e9525-79ff-4e9e-9284-4dd7c071c9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.230.124.2']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ff2d3f-fc00-4bb9-94f2-bd185a863911", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.252.20.159']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b25620-446e-4035-ba3f-39b58f0d2fa0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.92.196.223']", "pattern_type": "stix", "valid_from": "2026-07-03T00:00:00.000Z", "valid_until": "2026-08-02T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-03-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5687aab3-304b-477a-9132-b789a5f5385a", "sighting_of_ref": "indicator--9e034770-b5dd-4777-96af-6d69cfef634e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645d5234-b597-4e55-858c-7eac2443cacb", "sighting_of_ref": "indicator--c72f82de-8571-4b0e-b53c-5effc9e628c2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42056fd-8544-4319-9bad-c77f23f66e04", "sighting_of_ref": "indicator--278f26b6-53be-43ac-95b1-ec3d605757a4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c91107c-3c68-4f1b-825d-fe59b694dd2f", "sighting_of_ref": "indicator--7c481bdc-b21a-4e2a-97a9-c57b6cf59c8a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd772db-cd0c-419e-9880-422dbf3cc7a3", "sighting_of_ref": "indicator--0fd6c84e-078a-4c37-b23e-3a4b88f65144", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e804c1-8ca4-4e86-82ab-2b9f9bb22656", "sighting_of_ref": "indicator--08ef9017-825d-45b7-a4d9-230c70c8044c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd944e0-a2c5-40d8-a640-e5e8c254035d", "sighting_of_ref": "indicator--57eb6891-dd3b-448f-b03c-d8b9aedb8021", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0edd63-2c3e-4b19-81d6-3dbdcb814bce", "sighting_of_ref": "indicator--bede7490-ab2b-4fb5-a5fa-21ac81ed57fc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfd8bde-a9d3-41c6-9d9d-52023e69485a", "sighting_of_ref": "indicator--b06a11a2-5835-4dfb-86fd-1b567a79d399", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06b0843-c71b-456d-a129-972afa2ffd1e", "sighting_of_ref": "indicator--b06a11a2-5835-4dfb-86fd-1b567a79d399", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48908449-a3f0-4633-a12d-e9e67862672b", "sighting_of_ref": "indicator--b06a11a2-5835-4dfb-86fd-1b567a79d399", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b6bdf1-f0eb-4649-a1d5-58271cba6eb6", "sighting_of_ref": "indicator--444e5a9f-88bf-4a07-8876-1aa75362c8d9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bdd63d7-e2a4-423f-8cad-8e20a8becfe4", "sighting_of_ref": "indicator--6aaee3b9-dcfe-44df-942f-bf83e372a4fb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d6122e-edf6-4b09-88da-516b2d421612", "sighting_of_ref": "indicator--f3de16fd-1aab-424c-9756-7c234e3a34ef", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3805ab5-fd84-4e08-b128-2e04e885ba9e", "sighting_of_ref": "indicator--3595a860-d98a-4258-a7a9-fb9a93e79136", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a810e2c-550e-4e74-b0af-ab4cae9eb880", "sighting_of_ref": "indicator--9b2e4f1a-6707-41ca-b60a-a1852b15f2a6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f11a09-cdf6-4766-9824-3ef8ecb2882b", "sighting_of_ref": "indicator--4d64c2fe-d073-4a5c-8cd8-565da4a40061", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09436a6c-d916-4281-96cd-b6e37cd3631d", "sighting_of_ref": "indicator--189a3f9d-1ef0-458b-8654-b85600fe49c2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d78e01-a257-43b5-afa2-f8f3576b7622", "sighting_of_ref": "indicator--41ced3ac-4762-48dd-84a0-176919008ea5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab3d3ef-e4cc-46dc-9cd2-68222fefde9b", "sighting_of_ref": "indicator--dbfb5069-9ef9-413b-9e67-0ea28402ddbe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94af578d-188d-4076-92b8-ac400baa41be", "sighting_of_ref": "indicator--a32177b5-caad-4b4e-aee1-3f78f67ad82b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f61d8c-83f8-4c91-a463-4323373d33ad", "sighting_of_ref": "indicator--60baa053-07d2-44f3-a65e-8eee780d9e68", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbcc66f-52f0-4435-a7a6-34ffa8c3ea54", "sighting_of_ref": "indicator--60baa053-07d2-44f3-a65e-8eee780d9e68", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67798f37-4291-4ed6-bafb-51dce9737364", "sighting_of_ref": "indicator--3291f657-37f0-46b2-a54e-13eb974ab9b0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a1b319-b7c7-4452-b1d0-27f434f95875", "sighting_of_ref": "indicator--fbc3c8f7-afa2-4167-8b84-d45b6272c870", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e131a039-4bb3-405b-bd92-ae016f00286f", "sighting_of_ref": "indicator--6c0ad70c-ef04-43d3-a4a2-fecae50af60e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc43a41-a4d3-48de-bf82-ea719c10c780", "sighting_of_ref": "indicator--ea0eb241-793c-43e9-ad47-0604b84db892", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f13b85e-3034-4ae1-b771-80d3470d90bb", "sighting_of_ref": "indicator--7d4ceca2-a308-4f46-8834-ba3b80fc7c87", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db061f48-8485-46d5-bbd6-3b617c4ca941", "sighting_of_ref": "indicator--077d835c-1d49-47a9-98d8-cc9a7b855d6f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d87412-8f55-4e1a-9515-55ec526d430b", "sighting_of_ref": "indicator--dcf94763-d209-4fc4-8a8d-5bc3b3827ba3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c69098-4aba-49bf-8174-d33ab27f8e92", "sighting_of_ref": "indicator--7b8d4f85-f175-4e67-8985-53d93fdc98ee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c54f988-4bb2-42d2-a169-00a5fb05a2ef", "sighting_of_ref": "indicator--57376f4c-b14f-47e5-8ad8-77bf1a930c75", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11cbcaba-86eb-4dd0-bee6-17f9a3e2220f", "sighting_of_ref": "indicator--1ea6728c-8b99-4369-a7d7-25173f6995b0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d92c35a-456e-4806-b6bc-aeb24a1d7be8", "sighting_of_ref": "indicator--1007861e-dc4c-4110-bdf8-9774cdf465bd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88854ec2-d3fa-4a8d-a3bc-898b18bef204", "sighting_of_ref": "indicator--76824f1c-ffb2-455e-8ef2-7853e5f2edb7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0849603-982b-46c9-999a-731f1d0cd1a8", "sighting_of_ref": "indicator--72fe18ae-ebe7-4af0-b8f8-b0d00e6e730c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8866fc2d-6f13-47e0-acbb-559837ebdcee", "sighting_of_ref": "indicator--54cfdc5d-bef4-4947-8914-bab146d0b1e5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca580284-54f4-4417-97f2-0fabd21219b3", "sighting_of_ref": "indicator--8f76d8d6-d8d6-4362-8f5b-93558c7e8e65", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b25b473-5362-4158-9f9e-086680b38a20", "sighting_of_ref": "indicator--b28ebe85-6daa-46d0-8968-9b848c8090e1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef148aaa-e34a-4310-afe2-b54953581f99", "sighting_of_ref": "indicator--5ab9927a-7721-457c-aa04-8b13453b5765", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c9c8b8-b5e7-4ca7-bbc8-5225c8750702", "sighting_of_ref": "indicator--7208f96e-d1ac-4bd7-8d68-af5b8147af83", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694b797d-c560-4672-99ed-91a245c8a5d5", "sighting_of_ref": "indicator--8cdffa14-7140-4c33-a1fc-cd05b14aa327", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86e086e-dd27-43fb-8f24-1842980fe5b2", "sighting_of_ref": "indicator--6134ba1e-5efc-4339-9e01-f2d73682294e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90542ac-be2e-4536-bc79-66d3145a518f", "sighting_of_ref": "indicator--637750b3-89a5-43c1-a944-522b735049cb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84f3d04-f058-42b9-bb6d-d542c5736086", "sighting_of_ref": "indicator--637750b3-89a5-43c1-a944-522b735049cb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6659abf-9574-4d04-9144-46a96b409c6a", "sighting_of_ref": "indicator--637750b3-89a5-43c1-a944-522b735049cb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79696de8-13d7-4aae-a80f-a39955a89b57", "sighting_of_ref": "indicator--d8c8a09e-1d82-468a-a661-d0141a229a46", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2726618f-f714-4e87-afc3-c24e6a4fadf4", "sighting_of_ref": "indicator--37789cc6-08b1-47fc-a99e-8303b0ad79b0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019c96c8-6bc6-4192-958b-fe05b4914118", "sighting_of_ref": "indicator--68f38559-8ca6-4f06-85c6-1ef3d1b9e149", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a897b1-0355-49eb-9750-b90518e8693f", "sighting_of_ref": "indicator--e760842e-94af-4780-86ff-3cd93bc1dd2e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0358cdfb-c63b-4936-be0f-0d38e2c8701c", "sighting_of_ref": "indicator--cd0edfec-33f3-40c1-9ea4-54514285de60", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e355bef0-77a2-4aae-a2db-e2b50ada2a61", "sighting_of_ref": "indicator--9265a8cb-aee4-4708-b79e-a67689ca4e1c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47079505-d69c-45c1-936e-0c22b35f12d5", "sighting_of_ref": "indicator--763d7741-36a0-4895-b434-298a6543e2b8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffabace9-2888-4e0b-a98a-d9c19d80b9c0", "sighting_of_ref": "indicator--8fe5df65-e42c-4837-8bea-6b14a86a6a07", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a3b0b3-c71c-47e9-a8ff-bd1cf19cb52b", "sighting_of_ref": "indicator--8e3d1679-15e1-4d51-a446-49878b0f747a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c4d05c-4e30-4c70-b21a-3694749bf349", "sighting_of_ref": "indicator--d3f46b2e-1697-4ee9-aef9-1e7066c6335f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636b4ffc-bb19-4271-b488-b217b3592252", "sighting_of_ref": "indicator--d3f46b2e-1697-4ee9-aef9-1e7066c6335f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9da99f-a3d5-48c0-8ef0-46f3cfb2cf18", "sighting_of_ref": "indicator--d3f46b2e-1697-4ee9-aef9-1e7066c6335f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b92e57-ef8c-40d0-8ee3-81ecc662e930", "sighting_of_ref": "indicator--00974e6e-1d3f-4a64-98df-93b4d4234f77", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed25fc4d-629a-4c36-a1de-49c1565134e5", "sighting_of_ref": "indicator--00974e6e-1d3f-4a64-98df-93b4d4234f77", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a26f638-0541-44e8-ace4-83323faedda6", "sighting_of_ref": "indicator--00974e6e-1d3f-4a64-98df-93b4d4234f77", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6612a5b-0252-4784-a023-5dae81d512d5", "sighting_of_ref": "indicator--e22bc30b-ca39-4ed1-9c76-f7e641f626b5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5a0e14-2a48-46cd-b386-d8a3a5f11fb4", "sighting_of_ref": "indicator--ccac4477-3618-4705-910c-5161c4c7af7e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fef2481-5af0-42f2-ad2f-ae63ecb292f8", "sighting_of_ref": "indicator--61c021c9-e943-4276-b11a-0d8a01222a75", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c375164-ed19-4d33-8c77-fcf2566073eb", "sighting_of_ref": "indicator--ab9b4147-340b-4229-b0e2-3fb40fc39a77", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539a9299-2db7-4d3e-8ad9-086f40cf58ea", "sighting_of_ref": "indicator--6fd75599-b764-4bd9-89e2-11093a1d4920", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074ab4ee-d315-4fcb-a44b-850eefa409a6", "sighting_of_ref": "indicator--534c8a06-ecba-43c2-b534-28a01c964987", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1652ee74-ce28-4e9b-9f86-2d662f512485", "sighting_of_ref": "indicator--db703b8b-30f8-45cc-85ce-11100ca3e9e5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3bb35ef-acfd-43c9-b3c6-210dc4e36e58", "sighting_of_ref": "indicator--45bb6633-f4ca-4902-8866-74f416044d33", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82077089-9aea-4f8a-bebb-9ba5f7f8d59b", "sighting_of_ref": "indicator--0c0ca3d4-c8bc-4a5c-8b6b-50a94574f012", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640a21c2-dd08-40cb-ba76-768a954e774c", "sighting_of_ref": "indicator--766da8fb-91da-45f0-9b43-77eb014f06bc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7716b40f-0442-4e3f-8ed7-ae99f7c9fb16", "sighting_of_ref": "indicator--1a489560-84bc-4616-b847-17cf0ec7ec95", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f022289c-4a0a-499e-a522-45e8f43edbe5", "sighting_of_ref": "indicator--841cb358-1b15-49e8-96b8-4ac53934ff6b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67acecc-d0a4-416f-b6bd-3f1d4edfbe0b", "sighting_of_ref": "indicator--9648df40-ab35-434e-a0cf-2bbba8ca7098", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1e7350-5511-46be-bc93-7c2113cda35c", "sighting_of_ref": "indicator--3028ee87-5d06-4299-85b4-8c7e3cce212f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d28d6b-3a52-413d-9ed9-e34415c1e55b", "sighting_of_ref": "indicator--f253be54-c86d-45fa-88e3-43890752902f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76de857d-9c62-491f-9316-3853bfaa9a57", "sighting_of_ref": "indicator--7c8cc925-532c-4428-b8c7-a5c76878c34f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef706c1-9243-4ed6-b035-2680e9dfb84b", "sighting_of_ref": "indicator--1690d41c-a25e-4ee1-abd4-a5bee971f461", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21c0ea9-4459-4b6e-8a96-b7a42df81b36", "sighting_of_ref": "indicator--1690d41c-a25e-4ee1-abd4-a5bee971f461", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0640cd3a-11f6-4209-9a81-5f6d058759d7", "sighting_of_ref": "indicator--65827828-64fe-4e3c-ad93-0c09d5542911", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8bba9ec-a519-4269-805a-e3a4a1e4950e", "sighting_of_ref": "indicator--65827828-64fe-4e3c-ad93-0c09d5542911", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c79f535-b966-46aa-8fae-333422db24d2", "sighting_of_ref": "indicator--4f5f9340-13b7-46a9-ad96-2f9f6942f366", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a449cea-6948-42d6-9f62-d7e2c51c9d70", "sighting_of_ref": "indicator--4f5f9340-13b7-46a9-ad96-2f9f6942f366", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd6e1ef-1792-4c94-a91e-dd4cb6504969", "sighting_of_ref": "indicator--32ad8ef4-8e82-437a-8119-ebcf232b08bd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dfe6aad-1b69-47dc-a529-7b7e9f7e0a23", "sighting_of_ref": "indicator--1078582c-4197-468c-9fbf-14b706a5bbb5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3adf07-b7ab-4d16-af0f-ebbde4922867", "sighting_of_ref": "indicator--c17b32e9-1b51-415d-a0ee-c6f55f6087f4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bf827c-ca2c-42cb-8acd-17f61426bcd1", "sighting_of_ref": "indicator--1269ed07-a543-4d1f-aef9-5e53bae96a4c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7136b2fc-829e-4de7-ae35-d4f5763e8996", "sighting_of_ref": "indicator--d7577a8b-6974-4267-a7a7-2e024e8d157a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d650fced-a6e4-4144-a2b5-52af3ae639e6", "sighting_of_ref": "indicator--d6d05add-5c82-4c50-a260-7d7400ac20ae", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5495f84-1e27-4623-95cb-4b18c6d9936e", "sighting_of_ref": "indicator--a38cee80-d043-4914-9196-d581f3996653", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfa004f-e2ed-44d5-9fc9-47cedd0d961c", "sighting_of_ref": "indicator--36c01779-ce6a-4358-9c83-88007027e2a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6755697-e03e-484d-8b64-4dfccd2bfbcd", "sighting_of_ref": "indicator--bebceb98-f754-4a32-b301-25edd0c10e9c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a2d92c-252d-459c-93bb-4e6d8c66d444", "sighting_of_ref": "indicator--bebceb98-f754-4a32-b301-25edd0c10e9c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b192dcd4-7b7a-41b8-a894-2465acc63b7c", "sighting_of_ref": "indicator--c64b622d-acad-4336-ad48-2b848287c5c0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704295db-f18b-4ca2-bf81-9a251cfa55b6", "sighting_of_ref": "indicator--a2a294ec-0d84-4dbb-abb4-4a39556a397d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f91a95-41f7-4857-8386-2bba99f4cb15", "sighting_of_ref": "indicator--e334c24b-8a0f-4b40-b31c-3dacdc458a44", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2e6361-c725-4b78-9c99-32a0296d01ce", "sighting_of_ref": "indicator--e334c24b-8a0f-4b40-b31c-3dacdc458a44", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce55361-11a9-4140-abdf-1bc479a49102", "sighting_of_ref": "indicator--e334c24b-8a0f-4b40-b31c-3dacdc458a44", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab832184-b012-49a8-9d3c-6a3a64b59db6", "sighting_of_ref": "indicator--4b2a662f-aae8-4a2a-b2b0-4f860851e071", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1782092-3091-4bd6-a67d-8e988ebe921c", "sighting_of_ref": "indicator--9c660d17-1c27-4141-a388-64554054d39a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c818877c-080d-4e7a-8dfd-4b5d8d2f9cea", "sighting_of_ref": "indicator--9c660d17-1c27-4141-a388-64554054d39a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755cadd4-0efb-412b-b882-4a9adda67551", "sighting_of_ref": "indicator--704c0367-9232-4691-963d-49f66b222464", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1fd1da-35c7-408f-ae50-4a2dc59cdd0b", "sighting_of_ref": "indicator--704c0367-9232-4691-963d-49f66b222464", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e1bf90-c726-48c3-8abe-1bd3f6b5fd47", "sighting_of_ref": "indicator--d8457c82-8fd6-4706-8edf-ebf2c104d047", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4aa7fe7-fd4c-4e8a-bd8a-9c11d8f5ce33", "sighting_of_ref": "indicator--d8457c82-8fd6-4706-8edf-ebf2c104d047", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673b7bac-54b7-4d8d-81bd-a00ea9b67a44", "sighting_of_ref": "indicator--94ef76f5-da46-4e05-a20a-a03a3abe3b87", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf7947a-3982-485b-8015-89315ed935a5", "sighting_of_ref": "indicator--c9f8a82e-db32-4fe1-9343-acb24a369154", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41557fd-2910-4237-83f8-ddc2dc9cbb85", "sighting_of_ref": "indicator--e136d8f9-f1df-44bf-8bc2-7fc0a8400891", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b693ed2-e254-47ea-81ee-953832c4c478", "sighting_of_ref": "indicator--d8cba8a3-8808-4a48-890c-b4db966cb781", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230959e4-42d3-42ab-a700-b5d255aa2f91", "sighting_of_ref": "indicator--8e675c90-e3f6-4bd2-9507-37f6ff4bf48d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed39177b-4f31-466a-987c-de5bbfbd8a7f", "sighting_of_ref": "indicator--68251a5c-edab-4518-8ae6-a4b89a4ceb23", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d431cfa0-1da4-4286-ae12-522e001839c4", "sighting_of_ref": "indicator--0baf3e8e-411b-4d43-bcd9-a06c297d60f6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5660dd27-0e2c-41c9-8975-bd620f5021af", "sighting_of_ref": "indicator--09261153-dff0-45a0-9a21-7c4e4c75a852", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d06b358-0bda-4ba3-816e-46fdba4a03e8", "sighting_of_ref": "indicator--2b77d8f7-9e18-4f74-b889-1a284c6dbe94", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5139a343-6d2f-4547-bea8-b1a00d566e76", "sighting_of_ref": "indicator--3c3ce05b-b11b-47a0-a795-bbece611873a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4014b102-eaa0-4e3b-8ea6-f01f84d1fc18", "sighting_of_ref": "indicator--ef407be7-fbf7-4c64-a22c-da28cdae71ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d596428-c85b-45dc-b719-da4a4564fc00", "sighting_of_ref": "indicator--277f9fac-6cd7-418d-ae09-f0cd5ebc3490", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775689b3-afc4-43b5-bbb2-00c6ab0bc1c8", "sighting_of_ref": "indicator--5fadb3f4-1ed4-4dd0-b87c-29309ce8401f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd5edf2-d668-452f-b5c6-3d9b02919be3", "sighting_of_ref": "indicator--6874eee0-4c8a-468a-aeb8-dae79f4f0b5a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787510e5-8525-47a1-a985-8761a6bb2cf4", "sighting_of_ref": "indicator--ee778b9c-257a-4d11-b21a-c0fd6eb59a08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b72579e-0339-4c4e-9465-af80f6b66994", "sighting_of_ref": "indicator--00f620c1-5d4a-4a54-b51c-aff92ce4fc91", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e397be-8b8e-45c1-9267-5ab7b2d3c1ab", "sighting_of_ref": "indicator--0cd160da-a493-480d-add0-bf8aeb0d50ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5765b68-085e-4f4d-b33c-8142e5d79e52", "sighting_of_ref": "indicator--84a92d85-a85b-431f-8678-da01ccdb3e5c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773a09a7-467a-43fe-a9bb-665eeb8e653b", "sighting_of_ref": "indicator--d362513b-e3cf-408e-ab91-7761bef6e44d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70fbcbf-40d4-4618-8b3f-6399ede7ca9b", "sighting_of_ref": "indicator--12e3f8fa-8979-4245-8a77-d538fc1075da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8da496d-e92d-4ec3-bffe-364d20f9825d", "sighting_of_ref": "indicator--2b920d1f-4624-4b40-af60-2a3786fba342", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f642694c-9835-4331-817c-61b5379b9879", "sighting_of_ref": "indicator--312df948-0946-4c1a-b6e6-861984332231", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d035b858-b53b-4255-89b4-557f5e8b2fd9", "sighting_of_ref": "indicator--e0a71bd4-cef7-4c29-9a7e-48804f5eb452", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d93845-bcfe-4e4c-8e4d-15be063a45e0", "sighting_of_ref": "indicator--a681f784-0aac-4e8c-8037-44f6e3dd1074", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6a758f-9278-43ba-a3d0-3a3b41f54e61", "sighting_of_ref": "indicator--5452dceb-a692-409d-9577-0227a22e63b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def726eb-9ff9-4b3b-9468-0e0d7bd66e6f", "sighting_of_ref": "indicator--0ee1e239-e587-4182-adaa-a0ed3cf2377a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b46a12-6d85-4ce3-b741-c65a3c7a68fd", "sighting_of_ref": "indicator--baf8277d-0ee9-4781-af72-4e9ded6e5de2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203e5bef-b28a-4b6b-a0b8-0682ce6aca08", "sighting_of_ref": "indicator--f2e3df92-3d15-4247-b14c-34d3b7556795", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c9877b-00df-4c8d-b998-74b49e417948", "sighting_of_ref": "indicator--04f365de-9c12-4882-8951-ec4619818ea0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b254e0-7405-47e7-a1c1-26dd794b0751", "sighting_of_ref": "indicator--7b748b21-2cb1-4764-bde2-be6c39ee0cbb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe99d15-1d9b-4e83-8d9e-c1a10056316d", "sighting_of_ref": "indicator--c9c0ce3a-55ec-461b-b5e0-c255a88dc13e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edc9417-544b-459a-a8d3-42c416a12531", "sighting_of_ref": "indicator--86e62b16-c597-460c-b65b-d4454acaf0f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8d892d-47ed-4f0c-912e-960e102d0165", "sighting_of_ref": "indicator--0b7d6527-154b-4bd8-82a5-a7e394916b46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c00e840-c960-4431-9fe4-3ce22334e851", "sighting_of_ref": "indicator--e51ba40b-a073-4169-a6ba-9a9966b19fa0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9ab45e-230b-4a0a-9828-d0f6fab4fed6", "sighting_of_ref": "indicator--f3f0e933-0e08-4722-a01e-2ff1f24e71ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2d2593-df7e-4365-a866-b8aa1d085137", "sighting_of_ref": "indicator--e21c04f0-2d7f-4dd7-9886-ebcce8a20c90", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b725372e-a91b-4a2b-80db-873c3e3fda2d", "sighting_of_ref": "indicator--ceaaf066-af0e-4caf-b0ec-efb6f3ab169a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57b2ee0-0491-49ca-b975-f20ddb1c090e", "sighting_of_ref": "indicator--31b4f03f-7621-4ac3-aaaf-a1b9b56130a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d34243-2fd0-4f52-a730-e522b797cdaa", "sighting_of_ref": "indicator--7e213a38-32ca-4fe8-9950-9e50abefd04b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8346003f-ed8b-4f2b-b687-2baa17e34144", "sighting_of_ref": "indicator--3d26d4f6-facd-4184-9358-ae76a435224b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ce63dd-025b-4593-8b5e-aa42f24b0694", "sighting_of_ref": "indicator--0f938279-f87c-4b37-b483-fa6091b59179", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c94181-9d25-4cb9-b508-793cc3f4f17e", "sighting_of_ref": "indicator--eca39f9b-9bb9-4388-bd99-c5f5f20c32f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d0965f-d221-4c84-b894-765ec6485a2a", "sighting_of_ref": "indicator--1791ec00-9a14-463c-837a-890a2c7e5706", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4aafea3-6394-47b8-bf79-f059b8e80b95", "sighting_of_ref": "indicator--4d6d174e-294e-413a-8be9-e6f84ed15661", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dfc8fb9-20b2-4a0e-a500-8030353d188c", "sighting_of_ref": "indicator--5338476f-11d8-44c6-8a5e-8f40cb2380a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4120f5f7-88eb-440f-9572-ee11f33ec234", "sighting_of_ref": "indicator--70ac1b40-8587-433f-9357-04f19d3fb19d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9332c458-ea11-49f0-bb2b-a65ef1df01dd", "sighting_of_ref": "indicator--06c47f90-b80b-4a9b-b834-01af9cc21e11", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acfc600-61fa-446c-9d2e-a52d81f8f148", "sighting_of_ref": "indicator--f9285d78-7cb6-42de-8e79-c0fff0394635", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101ccfa9-957f-4998-b883-cc107355cbfd", "sighting_of_ref": "indicator--69d1bd56-6db9-4a50-835d-f2058df0eff6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909799dd-af8f-4615-8b93-83810204fc9f", "sighting_of_ref": "indicator--910ff5c1-8d82-4adc-b3ce-e6efb27e81ff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26df8499-3d95-40e6-a78c-feb2482fe907", "sighting_of_ref": "indicator--cf7139d4-393f-4ee7-bf55-f9a23a638b66", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05eaf18c-c202-4794-9328-3655cbad6f9b", "sighting_of_ref": "indicator--400397d1-28fa-4675-a7c9-81f1f466074d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0983d3-4d5b-4798-bb49-cfd0888c916b", "sighting_of_ref": "indicator--4a445fdc-5c13-47cc-83fb-85b2c238cbf2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce221de-5373-4da9-bc20-be8e72b52947", "sighting_of_ref": "indicator--0d186543-6087-4105-94f2-0e5354d644b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a250fcf-b234-4496-9f0f-d5e55a64a96b", "sighting_of_ref": "indicator--891e10b2-1540-49c7-ac71-f55a2eb35b21", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29dcf96f-cadb-4e8e-ac31-93e3b03bb136", "sighting_of_ref": "indicator--70506a15-edfa-4a13-87ef-10f385541143", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f35e3a5-e700-4eaa-839f-0bcc325c65ed", "sighting_of_ref": "indicator--eb97bf1c-e63d-440d-a1d0-68814c8ba0b3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe515c3-089f-4627-aa1c-b353d51bcaa8", "sighting_of_ref": "indicator--6bb34ded-d30a-4aa2-9220-4a47a7e4e8cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d51af4-0840-40ad-8ffd-f615dff9777a", "sighting_of_ref": "indicator--731e1a1d-918c-4439-83bb-9dbb77688cfb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8617f65d-242b-4d20-b539-48f9ec8f8ecb", "sighting_of_ref": "indicator--7ae92b81-b4dd-4d1f-9cb0-dcc6d1db27d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6082bcd-3348-4c7a-94e9-21a1e4572aed", "sighting_of_ref": "indicator--53ee7fbf-2cb1-4380-ada7-15eaece17d0d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae169ce2-96ef-4570-956c-259f173c22b1", "sighting_of_ref": "indicator--8cc4a730-596f-4d5e-8e61-6ea1a0c68138", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394ce108-57a1-453b-8942-2a79741c1695", "sighting_of_ref": "indicator--415a40be-fe04-4efd-9587-de3c495247b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee695a30-7687-4eac-97f6-93b4868de819", "sighting_of_ref": "indicator--83e9dcee-0dab-45b3-9895-c71a83e18470", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819bcc6a-d6a6-4b34-9551-a050f2088d5d", "sighting_of_ref": "indicator--1d6a2888-0c76-4752-ba7e-36d0d4b59274", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5049aeb-e0c9-435e-816f-6ae67ade509a", "sighting_of_ref": "indicator--61c83e51-e473-47f5-97a2-ff0be5f28292", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54592b8-a537-42a0-bacd-788ab73451f2", "sighting_of_ref": "indicator--97e2cdd3-ca67-4d5f-b548-39ce94d86dec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e361c314-803e-4d88-aef3-906b87d95563", "sighting_of_ref": "indicator--e90d95a0-b8a9-4a45-9f04-836cd803829d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c59668-0d98-4b76-871b-b20f88559ecc", "sighting_of_ref": "indicator--d679ffbc-0115-4b10-ab6f-3e3243ba5da0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256eed8c-f55e-40ee-a2fc-b8c40c80c80d", "sighting_of_ref": "indicator--434ce068-444d-4f8b-993f-48464e11d624", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05904f30-25ac-4937-bc78-184a53e448c4", "sighting_of_ref": "indicator--f7bda419-7792-4407-8aec-151df93e930a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b47c1f-6d1c-4fc0-964c-623da1e2dd2f", "sighting_of_ref": "indicator--3aa1680d-ae0f-47f8-8e4c-70b36250e41d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4c8308-3f40-4888-8930-ae466477abd2", "sighting_of_ref": "indicator--a842d862-fa74-4515-8593-4228705d093f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a2895a-da6e-4eec-8fce-4776f20d0b18", "sighting_of_ref": "indicator--2b0ca666-2f2b-483a-ba9b-feea33757e6d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90710cd8-6f87-4e88-a1fe-355fd0b53e02", "sighting_of_ref": "indicator--e95c4a76-3387-44eb-be15-175a945e8d63", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff642bc-c875-4c55-8c57-03b911dedd46", "sighting_of_ref": "indicator--d12e2608-502f-4e2d-8d54-df07a15ecc12", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba238c3-6f71-4400-8c8c-52633e488f80", "sighting_of_ref": "indicator--38ad46bb-79fb-4be5-ad59-d3910ee823e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98bafcf-0ce7-44e0-8d5b-4615abbcc16c", "sighting_of_ref": "indicator--bd70daf2-c9c9-4c98-9f4c-9ef3ad38e616", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8c1701-4fe2-442e-ba0d-372199a62b4e", "sighting_of_ref": "indicator--fb7a073d-350c-438b-a42c-f17c65ebf243", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4579a212-5d3a-4751-874a-d21572756cb7", "sighting_of_ref": "indicator--c4c51648-4db7-4144-a94e-ab99d81cf304", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e5a1f1-2c59-49db-bda4-cb83e81f5b88", "sighting_of_ref": "indicator--359523a5-2610-4115-9724-3fb71509d246", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdff3429-ee41-4925-92bd-438030293f16", "sighting_of_ref": "indicator--7e786653-0fd7-4e0d-8cb6-73d780ceb1b5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43a5917-90e8-4880-97d8-ed2753fbe8f7", "sighting_of_ref": "indicator--b23ea0b7-a56a-42d0-9e8a-ab42bca00cfe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c74a43-212f-4e9e-a1e0-5f9a3b0fac07", "sighting_of_ref": "indicator--98d03c9c-6246-47d9-9155-266d8eec3866", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fbedd8-8014-430c-8965-e357933668ef", "sighting_of_ref": "indicator--af7d4f7e-59d8-4984-a343-a2096aedb521", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b00a3b-d468-43b0-9bb2-2b5851cb2de3", "sighting_of_ref": "indicator--e74e3d02-1388-41c6-8504-78abd0d70c1d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7733caa0-4f5b-4b24-b086-97604c16ad6e", "sighting_of_ref": "indicator--1b3b4e76-155d-4b31-b9b1-4872b1192788", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf7b93f-ca81-41c8-aa96-f2df50fcdd7f", "sighting_of_ref": "indicator--adba163d-4ad2-486f-a561-a7323237f286", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ad2a18-914b-42dd-9357-4d0901829998", "sighting_of_ref": "indicator--2d857422-9d88-49e8-bd41-c6c59d9cc2b1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdffa44a-e683-4217-86e6-900a7aad0bbc", "sighting_of_ref": "indicator--84c92371-73ce-45dc-8993-e736cd373fc4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffdfa9a0-63a7-401b-bf28-833a733a27ad", "sighting_of_ref": "indicator--6bdcab2a-7ede-4353-90e8-4a855462553a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a250b7-e9ca-4376-994a-73ac380f17a7", "sighting_of_ref": "indicator--d0ba19f8-e386-4f0c-a95a-3ddd4f311ce6", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2abeaf-1f83-4d00-84c9-b9960e71ad2a", "sighting_of_ref": "indicator--8414f348-f0c5-4649-9484-326fcd5b9e53", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72bd961-7a06-4a08-8760-ddfe248e0e41", "sighting_of_ref": "indicator--8414f348-f0c5-4649-9484-326fcd5b9e53", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8ea9a9-b74a-43cc-8e71-6e371f615e0f", "sighting_of_ref": "indicator--63c30561-b465-4dae-b036-34182e877fa1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d179397-ee1b-4a6d-a670-3cfffee427fd", "sighting_of_ref": "indicator--d9a6bbdd-6b74-4fc5-bbf3-709d5d1ffeab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb537b5-a041-458b-93cd-186eb0bc5985", "sighting_of_ref": "indicator--92bc1829-6bd1-487d-8408-054e5ce31df9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a477344-13ec-473a-8ba6-1ac8e3abbf31", "sighting_of_ref": "indicator--4bd28ceb-2870-46af-a558-9eef34dfa81b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21771b7-f29d-406d-a482-d8ac1b9cfa6d", "sighting_of_ref": "indicator--c343d411-7ee0-41fc-a772-b963e0a28808", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7a1b56-0ce2-4bb2-a991-b788d95cca37", "sighting_of_ref": "indicator--69f8afd5-072f-45a6-a80b-abd3288facd1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945dc8d7-5ba4-4eb7-8712-13894818bc99", "sighting_of_ref": "indicator--a23e676c-2bc4-4417-b214-7942bc030fbd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17cfaa5c-8333-40bb-aad4-50f19e5b2ad2", "sighting_of_ref": "indicator--e758e2ec-36a6-4ce6-a107-51ebf54ab54e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89fe9be-a00f-4016-933e-d4074cf84d07", "sighting_of_ref": "indicator--f5aa2662-43e7-488d-8dfa-6607c2f2c173", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42e3be0-5e45-46a9-bf8e-de912d0d899c", "sighting_of_ref": "indicator--3c2927a2-28ca-466b-b818-b5f826c94881", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddf53f7-c0b5-4a16-a3e6-9b301aefcd9d", "sighting_of_ref": "indicator--7764174c-6efe-469c-a7e1-589547b5f5c1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a87316d-b2c0-43f1-875b-c9cb7a744aca", "sighting_of_ref": "indicator--7764174c-6efe-469c-a7e1-589547b5f5c1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a7ab84-069a-4852-a4d4-4d8ac448093e", "sighting_of_ref": "indicator--7764174c-6efe-469c-a7e1-589547b5f5c1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf18447c-1a59-49a4-be24-2ab9c24eda48", "sighting_of_ref": "indicator--586f5534-1906-4876-ad96-020d8e532fdd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77955a14-f4a4-44f6-96fe-0852b5e9d8cb", "sighting_of_ref": "indicator--b8610cb8-6e04-41fa-946a-8fe3f20aad28", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b14b963-8fce-4133-b4f4-6c5334ab0337", "sighting_of_ref": "indicator--2bcc194d-d870-4c56-b1fe-4434639d3e81", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aed734a-53c0-4eae-a0a9-89a12473f212", "sighting_of_ref": "indicator--2bcc194d-d870-4c56-b1fe-4434639d3e81", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9df086-111c-417f-a62b-e527d20e46f1", "sighting_of_ref": "indicator--5a3be02c-2cf6-490b-9ebd-36078ffded22", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f455c0-b1cf-4b3a-a337-48db9a2750ac", "sighting_of_ref": "indicator--24d57d3e-02eb-42f0-aa6f-810e5bd32203", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9a876a-729e-4f53-93b5-b38f4832e1e2", "sighting_of_ref": "indicator--4e6e54eb-e3d8-4cf4-b11c-34528cce1802", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9bfb85-d380-4a36-b409-e2be532289c7", "sighting_of_ref": "indicator--ec2c6b20-efc5-4ec3-9da1-eeae09beb9a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a79fb74-fe85-476a-bb69-f51667168fd5", "sighting_of_ref": "indicator--2b65f100-e8f0-48e9-8887-c349a2481614", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc58ecf-4363-4b59-852d-41f4f578df68", "sighting_of_ref": "indicator--4d56331b-f3e4-4f25-bcfd-a5feec9a72cd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42248c8-8b3c-4a46-b7bf-96d959f159c1", "sighting_of_ref": "indicator--04aafc11-404d-4a36-9403-d04450cc9afb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28d9dc9-9910-4db3-9575-0bfe7e0047a4", "sighting_of_ref": "indicator--0081b297-ce20-4639-a5ef-92c32cccc4ee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d899f98f-3ce4-48a1-bf28-a2d7a626abd7", "sighting_of_ref": "indicator--0081b297-ce20-4639-a5ef-92c32cccc4ee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8611c220-03f0-4a2f-8530-18a497128b1d", "sighting_of_ref": "indicator--0081b297-ce20-4639-a5ef-92c32cccc4ee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b6d1dd-8b36-4d60-afdb-b8205984afb9", "sighting_of_ref": "indicator--2fe26e36-7cd4-4d7b-b958-26bcc0bac27c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073a002b-5a7a-4572-84c0-c483343b1f63", "sighting_of_ref": "indicator--03975857-aeae-42c5-ba9d-7852a9c2bced", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db1f440-b455-44f7-acff-bb3f7bdebd15", "sighting_of_ref": "indicator--9a5e1b01-83dc-4dbe-9ee5-89636ce4f0bb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6772fec-91be-41d5-bfa8-50623d17ed83", "sighting_of_ref": "indicator--5671c3d2-c5e7-43fa-80cb-68570d4cae91", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e5d215-7b3b-40db-b17f-ccc2adc7f8f5", "sighting_of_ref": "indicator--8a7b0e1d-4796-47f0-aa39-a467601e046f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268a4dfa-a4c2-459c-82f3-7a0a35901000", "sighting_of_ref": "indicator--5f4e075c-5da9-45d7-9390-92c9af4d411a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd05d9d-45fd-4226-8c33-c6d2b989533b", "sighting_of_ref": "indicator--788fabd9-f642-4985-ac9d-6e10d2e8a02f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45428bb-c4f6-454e-8e76-08e7e4f75ae6", "sighting_of_ref": "indicator--788fabd9-f642-4985-ac9d-6e10d2e8a02f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a37edad-4e4f-473a-a9d4-588a13ef955b", "sighting_of_ref": "indicator--640d159a-52c3-4b37-a991-edf96e45d5c3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f781f52-39c4-4d85-9fe4-58fc501cb7dc", "sighting_of_ref": "indicator--2662aeec-d6f4-487b-b5b9-e5270943899b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4664b27-188d-4363-9638-dad843833bc6", "sighting_of_ref": "indicator--2662aeec-d6f4-487b-b5b9-e5270943899b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62bc4c0d-557f-4126-8782-0b7e26dbe8ea", "sighting_of_ref": "indicator--2662aeec-d6f4-487b-b5b9-e5270943899b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68dfcaad-60aa-416c-9a2f-e0a9a1716ec8", "sighting_of_ref": "indicator--b1731deb-a5ab-44ce-9f79-3eac7813d765", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b690e8b-9ac9-4ff4-b849-8fb8b269cd29", "sighting_of_ref": "indicator--784579fb-a564-46f6-8d69-27a7e42b6b72", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37968445-2ddc-43b3-8e34-c0b9a042b4e7", "sighting_of_ref": "indicator--80c20a92-1b3f-4e61-9493-82af7a54d6ce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff30bb87-c2de-4ca4-993a-7c704d567532", "sighting_of_ref": "indicator--4217adfa-b12a-4c89-b8ef-62b1f75a1da6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7bbdfd-ee83-4ad0-80e6-3a96c206e693", "sighting_of_ref": "indicator--4217adfa-b12a-4c89-b8ef-62b1f75a1da6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2a2ebf-0bb7-445f-9140-18fe822f041c", "sighting_of_ref": "indicator--d00a9350-6d0f-45c5-9688-191066e20625", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ad415b-8d8d-4225-9b05-ff2fb6e310c5", "sighting_of_ref": "indicator--a5b262a3-bd10-4979-9256-e611c7383cc2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa6af49-b43a-4402-9e81-5a6af7d15219", "sighting_of_ref": "indicator--18115932-01b2-4bca-84c5-206289d8c7a5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e25be2-0101-4429-b49e-a1c3268c1084", "sighting_of_ref": "indicator--18115932-01b2-4bca-84c5-206289d8c7a5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a881432-32e5-490d-b9a1-ae87ddcb1a7c", "sighting_of_ref": "indicator--c659481b-6c7d-4757-9149-dc56511e6159", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e4e9f8-b4fd-48b5-b7e0-3e20e563b46a", "sighting_of_ref": "indicator--20947368-77fd-418c-969c-5f821406c4aa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03b84c4-1eca-4caa-9d30-ee414e262e96", "sighting_of_ref": "indicator--620861ba-db80-43c1-b65d-a1398df8decd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ddcb8d6-3da4-4865-85ff-b470cbbffb37", "sighting_of_ref": "indicator--77c3537c-c0da-4a91-92fa-e78cf8adc9d1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfc3b73-58a9-410a-aff4-5481bb2a3d1f", "sighting_of_ref": "indicator--77c3537c-c0da-4a91-92fa-e78cf8adc9d1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3170e81d-2271-4495-acb6-787994b6b041", "sighting_of_ref": "indicator--ae63aede-dc50-4598-b745-a9d8b9448de1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdc4f82-7042-44a6-b7c4-fbd5c6ff0995", "sighting_of_ref": "indicator--64effec6-8cb3-4899-9151-318cff3e16cb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62463035-60a0-4308-8800-5f7675644a03", "sighting_of_ref": "indicator--64effec6-8cb3-4899-9151-318cff3e16cb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668f0f37-f9d3-4f7a-a5d9-25b230320e67", "sighting_of_ref": "indicator--050df8e8-b55f-499c-8262-440300a1d15d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe52541b-a9de-4961-b88e-a9918bd72227", "sighting_of_ref": "indicator--050df8e8-b55f-499c-8262-440300a1d15d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49cf47d4-e76b-4d06-a03b-f5350f35f03d", "sighting_of_ref": "indicator--b9cee763-9d0b-4475-ae5d-60efd25c34ca", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7daa780-d9ff-472d-ab8c-24d550b8a8d6", "sighting_of_ref": "indicator--c95c0a04-7ecb-4ba3-9187-4b90574db090", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45377a1-ed72-44e4-908c-0738e87d2095", "sighting_of_ref": "indicator--c95c0a04-7ecb-4ba3-9187-4b90574db090", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66c98b5-64d1-4d7c-b47e-db6eedff37da", "sighting_of_ref": "indicator--7bdc043d-7921-4874-a27c-b8e005305921", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9acb885-7795-4224-8168-7403cde377cf", "sighting_of_ref": "indicator--e7982879-26de-4cca-9e29-8c39a01fc5ec", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470aa39a-3bf2-4ddb-b93f-37f50a71b651", "sighting_of_ref": "indicator--e7982879-26de-4cca-9e29-8c39a01fc5ec", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f10b8bf-6967-4a45-9107-9ad23c24ab66", "sighting_of_ref": "indicator--c6e10692-cf68-4a4b-8854-07b725acfc8b", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077d5a32-eab2-47bf-a39e-f42896169659", "sighting_of_ref": "indicator--ca51b1e2-1204-4879-8aee-c2d57ac8676d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26ac0bd-fba2-46b8-874d-6d819dabc84a", "sighting_of_ref": "indicator--10fedbda-9f1b-489b-9a08-03386ddb4306", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdde5faa-3806-4041-a8e8-aa0aff56e1f3", "sighting_of_ref": "indicator--57664e86-eb9f-4d66-a10f-fdbad01825a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b889680-5fc5-4cc0-9cfa-b0ac32a4d610", "sighting_of_ref": "indicator--57664e86-eb9f-4d66-a10f-fdbad01825a7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d47f48-7fa2-47e5-8c01-012a421bb5ed", "sighting_of_ref": "indicator--57664e86-eb9f-4d66-a10f-fdbad01825a7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187d5fcd-2227-4e23-9ccf-f40e2cdfd1b0", "sighting_of_ref": "indicator--6f15e6c1-cabe-411d-9d66-1264f6354963", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558418b1-faf4-43f6-8a42-8bd234021f19", "sighting_of_ref": "indicator--285e0b9c-9320-4c83-82c5-06a2e612e06d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6821a6-904c-4e57-a36f-99271bd98168", "sighting_of_ref": "indicator--6525a4f8-9716-4c2e-871d-a014a9e017ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae92154b-e54c-4da6-a734-72ec40e1df32", "sighting_of_ref": "indicator--885b166f-ee3f-4cc6-a693-3a6b66abbf30", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0301be5-b8cb-4728-b9f3-4729449d30ac", "sighting_of_ref": "indicator--416b8d00-b019-434c-b07a-803eb6b1e767", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f560d8b2-3bf3-48c1-a85e-1c818014a5a0", "sighting_of_ref": "indicator--b8b52bbc-8109-4060-8d5e-9d3621e4c3da", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a96ad3e-ba9a-453a-a320-479db44d5599", "sighting_of_ref": "indicator--739e209e-4727-4747-ae31-f7c91340b3ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09c23a1-7647-472a-8df8-7c8b42eec5ab", "sighting_of_ref": "indicator--75468548-484d-4079-be9a-341c18326148", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabb0ff8-b9ef-4650-8b43-2ce21091d644", "sighting_of_ref": "indicator--75468548-484d-4079-be9a-341c18326148", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815db06a-cd8f-4e3c-a3b3-2bcec4c1380e", "sighting_of_ref": "indicator--5c31b366-7264-4b05-853d-8c4a8de32687", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc95436-91cb-49de-a7e3-593609f40813", "sighting_of_ref": "indicator--ddd294fb-3cef-4c4d-ae5f-c2dcc74656a4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d083aa13-3495-415d-bd09-ce8ce5405ccd", "sighting_of_ref": "indicator--ddd294fb-3cef-4c4d-ae5f-c2dcc74656a4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165e6aff-f7b6-45f7-942a-97ad8f9c1397", "sighting_of_ref": "indicator--b4c69b16-3fa8-4526-9f5d-d14b3167ac71", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5157f3-7488-4b9f-841d-f05b1cb9ac89", "sighting_of_ref": "indicator--b4c69b16-3fa8-4526-9f5d-d14b3167ac71", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4010df33-4de5-433c-9cc5-c0f68a2a7a1c", "sighting_of_ref": "indicator--b4c69b16-3fa8-4526-9f5d-d14b3167ac71", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3537ac43-7567-4552-b827-813e8edb30c2", "sighting_of_ref": "indicator--289c9a09-308c-4bf0-b53b-6c12bbca1224", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75e510d-5576-47b8-9df3-feeb5e6ff49f", "sighting_of_ref": "indicator--85acb6fc-1041-425f-b1b3-d49301ae04d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0beea9-9242-4ccd-9f32-392f1cfaf988", "sighting_of_ref": "indicator--0c09f97d-1252-4a35-be07-d4bcc7eef2cf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aeb2f08-79f7-4fa7-a1b3-8163b6ec1021", "sighting_of_ref": "indicator--484656f1-411d-4491-a7cb-397f01100b90", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02dedda-3bc3-43a8-ac49-6854c22b2a5c", "sighting_of_ref": "indicator--ed3b88d1-7c96-41b8-ad8b-8ff3f8b33741", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22c6201-6103-4c2d-9730-2182e65a6039", "sighting_of_ref": "indicator--f092d630-c03b-4972-8af5-13c1576ad986", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379feeee-be95-49c8-9ca1-6a38b5e40287", "sighting_of_ref": "indicator--d886fd6f-5475-4e48-888e-8c56f72434f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b70edf-7ece-45ff-b925-2b8e059f8823", "sighting_of_ref": "indicator--b29fa92f-2c09-4078-ba78-fd982302f491", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4404e592-3554-42ac-a5da-9ba25a6c4dde", "sighting_of_ref": "indicator--43835990-8e1f-4a83-97e7-1c6d23cbf67c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcd34c7-8eb5-41f8-89d8-432a3146ff9d", "sighting_of_ref": "indicator--a0ff8880-41bf-452d-994b-c6855f8b3f21", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e21b82-e871-4e24-9b8d-c40726113e85", "sighting_of_ref": "indicator--cb9598a2-6b91-442d-8f58-c16841bd9af8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35121ca6-3131-4a78-9a8f-78808fdca922", "sighting_of_ref": "indicator--79690ba8-16d5-47a9-8ccf-fa40007275bf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34690ff0-03a3-4694-92eb-935242ca4a90", "sighting_of_ref": "indicator--ea3269d3-b877-4492-82e9-6fd889f06967", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed60f5c-460c-47a9-81d2-aaa9117dc527", "sighting_of_ref": "indicator--bdf983b4-df7a-4304-a255-81ae27206a70", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df24d1a1-49f4-42a1-8d25-4226f14668a9", "sighting_of_ref": "indicator--cb9da5af-dc53-486e-80e3-ed0c06b12ce6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf74708-8246-40bf-9164-35be0ccc27e5", "sighting_of_ref": "indicator--f69f9386-c906-441e-bbc2-a5381f66fe31", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae899352-dc3d-413a-9390-88e32bcde33a", "sighting_of_ref": "indicator--188040ac-fe54-4d37-9af3-3b6fdaaddcc8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3cd158d-48b7-4e92-93dc-94386d11d806", "sighting_of_ref": "indicator--5e71bcda-049a-44e9-9ee1-4994b32a4717", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99bc8a57-3bfe-4653-9d33-2eddcb826857", "sighting_of_ref": "indicator--5e71bcda-049a-44e9-9ee1-4994b32a4717", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8174b35-2e2e-4cfc-baf3-3bc970b38c95", "sighting_of_ref": "indicator--285a05b5-7727-4edf-95e5-00c92c709635", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d315ce-0d27-42db-8195-3b6bcc3791c2", "sighting_of_ref": "indicator--26162e32-d8a2-4622-a47e-dbf69ae7fe4d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea4e1ca-6b19-4ad5-91e5-8fa356a0ea1b", "sighting_of_ref": "indicator--95cf9853-1954-4251-b731-249b48453cf7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cfa0ccf-af45-4770-b095-fa153a24e8e8", "sighting_of_ref": "indicator--95cf9853-1954-4251-b731-249b48453cf7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99429975-64df-401d-808c-4082dbe4b522", "sighting_of_ref": "indicator--9cc68d79-60c7-4f80-af55-b7623ea8c6dc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2604f4-82cd-41ea-9efc-b755430df357", "sighting_of_ref": "indicator--9cc68d79-60c7-4f80-af55-b7623ea8c6dc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b174671-71bb-42e4-bfa0-740b99a9176b", "sighting_of_ref": "indicator--9cc68d79-60c7-4f80-af55-b7623ea8c6dc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d3644f-d033-43f3-8517-f372d3de311c", "sighting_of_ref": "indicator--d1d1ed49-965f-4003-ae58-e3d5908a7610", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7c0213-5590-4d19-8bbf-6278b7d60082", "sighting_of_ref": "indicator--eeb68ee3-c97c-44f8-adcd-a97f47789b4d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e74292-502e-495d-8c7d-604fc672ed5f", "sighting_of_ref": "indicator--0ee68201-8bfe-46d3-ad61-03b70847aa2e", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28566ad-0d99-4143-920e-bbb90a5b068d", "sighting_of_ref": "indicator--1121db87-f77c-44ba-af56-704ea3cb9ae5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fdfc3a1-2ef2-4371-a25a-ed8a9fc4c85f", "sighting_of_ref": "indicator--1e7a07c8-dda1-4fdd-92c1-1589c768b7df", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c165cfb-0136-4ebf-91d7-f9c4aa36b05b", "sighting_of_ref": "indicator--1e7a07c8-dda1-4fdd-92c1-1589c768b7df", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13be1861-3735-4782-b4c9-73a10e318112", "sighting_of_ref": "indicator--1ca9a8b9-76dd-43ef-a781-be2347cc5146", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567e3cb6-6cbb-4876-a9f3-e0bcaff56ae1", "sighting_of_ref": "indicator--58c81f48-962b-4b12-b450-bdac981e8a71", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320e70b6-4dfd-4c26-aa7a-9ebba4f0d63f", "sighting_of_ref": "indicator--a2865733-345c-487f-8d5f-e12620d07ee3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25fcc67-891b-4325-97f4-be6efbd3f217", "sighting_of_ref": "indicator--c4e11784-b1d1-45c0-8d2f-17d0d64d8280", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4335990-e771-4859-a50d-170230083c27", "sighting_of_ref": "indicator--c4e11784-b1d1-45c0-8d2f-17d0d64d8280", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b66444-103a-4d63-a5a1-06874f9521d0", "sighting_of_ref": "indicator--dd1b9cf8-8fb3-4942-811b-e5b9e6a89c3e", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dffb8cc-babf-41f4-8807-8f49632afef0", "sighting_of_ref": "indicator--7b0e4c08-7413-4217-86ba-a90bb6407633", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c297ea-d5e4-4355-a881-b7f878faf008", "sighting_of_ref": "indicator--70c9f7be-5e97-479e-bc57-87330493fb60", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f9df6f-73cb-4488-a022-98ab6907d133", "sighting_of_ref": "indicator--26a19f2c-9a7f-4781-afc9-b4820a51db8e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d8ecd1-3d0b-4534-ad68-7d28baf06a6f", "sighting_of_ref": "indicator--554ab1e5-09c9-4db7-a838-98a985f89221", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88446a90-2404-4745-a0aa-fa2fc8d16b4d", "sighting_of_ref": "indicator--06a0d8a7-0e06-41e1-a3dc-01fdbc5d6925", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa805fa-9313-4042-be9d-1a4e9f9c3877", "sighting_of_ref": "indicator--b10a25e8-bdaf-4103-b593-bae33b08ac3c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f720c0-dd7f-4904-a747-9947489f9221", "sighting_of_ref": "indicator--2bb6cf94-137d-4e3d-8604-cf585d03d6d2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1540ab7a-851a-4bdd-866c-701093ee8e5f", "sighting_of_ref": "indicator--92117665-097e-4f1c-96ef-abbcd1b599b2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1028ca4-c48f-4891-8900-3632710cab63", "sighting_of_ref": "indicator--92117665-097e-4f1c-96ef-abbcd1b599b2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f039cb5f-ef80-4477-9a1f-679ca59fc0e2", "sighting_of_ref": "indicator--1efe3551-be8e-4b5a-8d50-40c347eaf8a7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc642be-fe0f-439a-b4f2-b4b06823102a", "sighting_of_ref": "indicator--1efe3551-be8e-4b5a-8d50-40c347eaf8a7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fea853c-df88-4a68-a91e-d5fb8d8b33d0", "sighting_of_ref": "indicator--2dfec033-4e04-4270-a980-1859e9999b44", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db3a07c-5217-407d-9a14-26273f8c9c21", "sighting_of_ref": "indicator--2dfec033-4e04-4270-a980-1859e9999b44", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035af232-a1e1-4f02-a2db-a7b2ad1e2f5a", "sighting_of_ref": "indicator--ce90b853-8c3c-4a4d-974a-2d877ed85b28", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15500c6-ac52-4f80-8abc-82c644b606f9", "sighting_of_ref": "indicator--de98abd7-54a6-493b-9383-1bd6bf1a29d6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7871b6bb-2974-44ac-85eb-e854c70c7383", "sighting_of_ref": "indicator--de98abd7-54a6-493b-9383-1bd6bf1a29d6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71acbf91-82f2-4877-ab20-1eb24eaaea40", "sighting_of_ref": "indicator--de98abd7-54a6-493b-9383-1bd6bf1a29d6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c68bcf-a903-4db7-a1fe-c254fcdba8d4", "sighting_of_ref": "indicator--589a4e78-654c-42ac-ac5e-8d7585897520", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4896bf59-106b-41c9-879c-6aefb06f1533", "sighting_of_ref": "indicator--f3bcd222-a9d7-42cb-998e-a4f17e50fd57", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8f64fe-b08c-49c6-b564-4d610d3d7316", "sighting_of_ref": "indicator--1b172f6c-fe6f-4163-920a-7f9aeb30e0da", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e3ec67-88e1-4adc-95ce-237a95ded9a0", "sighting_of_ref": "indicator--6f474ba1-da23-4f0b-922e-83a92976edbd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032b6d11-1c71-43f3-8c2e-c69c1481a8f2", "sighting_of_ref": "indicator--bf6c08a8-9d49-4d20-a3d7-da256a92cddf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b220c1-53a2-4750-92c2-7842c23f2459", "sighting_of_ref": "indicator--c208d79c-c5ed-4678-967c-8f629d315250", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed0a31b-2ce4-4fe3-920c-4df75993fc32", "sighting_of_ref": "indicator--6864b15e-703d-4911-9505-51990f4733ba", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfbc9c7-19dd-4ed7-93c0-5a48b5144f84", "sighting_of_ref": "indicator--6864b15e-703d-4911-9505-51990f4733ba", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b9dcf3-3327-46c3-9c5a-e1c6a265f262", "sighting_of_ref": "indicator--40beb97f-ed37-4f3c-bdd6-7b83c1f70279", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7419e3-e1ba-475a-b5be-daaadfa9b3fe", "sighting_of_ref": "indicator--a9817b46-caa0-4513-8685-2bcc4ca58b3a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9212019-e155-4c09-8b75-85eab56c6521", "sighting_of_ref": "indicator--a9817b46-caa0-4513-8685-2bcc4ca58b3a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462de26e-1d81-457b-9e05-02f6e13d81c7", "sighting_of_ref": "indicator--a9d557fe-7fcc-4338-8ab2-f2a4d24abff9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef033761-2da3-4415-ba6f-0f4a777ed615", "sighting_of_ref": "indicator--57b10ea8-f55c-48af-b479-c0800bf453cd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8802994d-eb4b-439a-990e-97772fcce2e2", "sighting_of_ref": "indicator--50c9d296-f0c5-47d7-8501-821656a56976", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00597ffb-ccef-4c56-9e91-c9f9c598790e", "sighting_of_ref": "indicator--50c9d296-f0c5-47d7-8501-821656a56976", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af309ac-e655-4c03-be0c-3276237e622c", "sighting_of_ref": "indicator--1cbd51d8-ffed-4aaa-9495-f0ad7a129521", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9815c747-f039-44cc-83d1-36795fdb3317", "sighting_of_ref": "indicator--b0ba8f91-386d-46a1-8a9a-7edf4acd3527", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694bf3df-3f62-463b-b1cb-555d5a75e3ff", "sighting_of_ref": "indicator--133e203c-002d-4c39-aa01-34a274238175", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b22e96-0f59-42eb-8e9b-b92f5855f237", "sighting_of_ref": "indicator--0ad27ad1-f9ff-4dab-93a4-eaeddba96939", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd967d45-9b98-4100-8eb8-f16f75395ac7", "sighting_of_ref": "indicator--8c86abb6-8c20-4862-8b5b-b48fef3595ea", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166d4e8c-eecc-4808-af30-50885c0731d9", "sighting_of_ref": "indicator--7d36db2d-b74c-44af-8048-d084700629cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c7bf29-cdc2-406b-9c5a-657d399ee03d", "sighting_of_ref": "indicator--27243250-8bea-43da-84f3-acf1e6c7a059", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44250752-736e-4de5-9ed1-c528a7cbea2d", "sighting_of_ref": "indicator--fd72882c-c397-4416-8500-70ddf6d4a087", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb88d4fd-d8a6-45c4-b59c-de871e53dd0d", "sighting_of_ref": "indicator--fd72882c-c397-4416-8500-70ddf6d4a087", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ace14a3-0657-4690-9e21-49869a45f88a", "sighting_of_ref": "indicator--c2a12544-c73d-4071-b3c9-7e450efa7f07", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df008c7-35f7-4500-9fc6-cd03c50a2b0c", "sighting_of_ref": "indicator--c2a12544-c73d-4071-b3c9-7e450efa7f07", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7caa6528-d1de-4ee3-928c-87444b516bbc", "sighting_of_ref": "indicator--1241a5cf-1d9f-4ddc-be59-1399074ee33e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b83945-6508-4dca-a0bd-93d90a08a645", "sighting_of_ref": "indicator--1241a5cf-1d9f-4ddc-be59-1399074ee33e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86931ab6-1345-429f-9c8e-2e6c6d8adb95", "sighting_of_ref": "indicator--11c0eb80-2c95-4282-b2c7-e1939f349985", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9615bcc5-dad7-4e8a-a34d-69542b249df6", "sighting_of_ref": "indicator--4f3eaedd-15f7-43ae-9a03-179a4bb844ee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4560ded3-92dd-4c60-b7b9-23d03deff2d0", "sighting_of_ref": "indicator--4f3eaedd-15f7-43ae-9a03-179a4bb844ee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc067dcd-8351-4696-8444-bdb9ac91feb1", "sighting_of_ref": "indicator--4f3eaedd-15f7-43ae-9a03-179a4bb844ee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ec103e-e08a-416b-93cb-329b38767a76", "sighting_of_ref": "indicator--24ff63e6-cc03-40e7-b8a6-16748e8f67d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49cea182-12cd-4372-9662-2b63231f8c41", "sighting_of_ref": "indicator--0112bc7b-fe63-4c50-9d57-a2995f709299", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da47cc13-891a-42c2-9d94-1d34852b0c9c", "sighting_of_ref": "indicator--6d32716e-f12f-43f7-8850-1be215ad6378", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50bd6fb9-5ddc-4c75-a861-9d3c853cb7a7", "sighting_of_ref": "indicator--10163a79-aa55-44b6-8732-72775f695832", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46587d7c-1d6c-4062-a731-74ad1110eeac", "sighting_of_ref": "indicator--b1cce7d5-a3e5-4d5a-9de9-03f2c832830f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b38b231-19e6-4750-a6e6-9665dda1f04e", "sighting_of_ref": "indicator--b1cce7d5-a3e5-4d5a-9de9-03f2c832830f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad60b72-9ee7-474a-8152-bc16c1ab4b67", "sighting_of_ref": "indicator--e19c806e-518a-4f91-99b7-275cd71e3aad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9216e4f3-c0e4-44f4-a54d-be456cd837c2", "sighting_of_ref": "indicator--208acecd-2745-48f7-a9c2-615e92cf8c0b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf8a322-466b-4dff-ac08-f185e31bcee9", "sighting_of_ref": "indicator--00bb3428-d2f1-4bb5-9d30-130f442f7323", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738b3438-7276-40e3-b50d-ec0cd083b0da", "sighting_of_ref": "indicator--1c98fda5-025d-496a-8ec3-14fff6c7a28b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b6f165-a607-48a8-9a81-3d005f5b8d6c", "sighting_of_ref": "indicator--8ccca694-1994-4a6a-8452-8be4b53602ae", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0c0c98-3014-42e0-8840-39286f146f9a", "sighting_of_ref": "indicator--8ccca694-1994-4a6a-8452-8be4b53602ae", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4db49a1-4a5f-4c22-81d8-a33bd0f4b038", "sighting_of_ref": "indicator--a0b58784-ba04-4627-bb47-786ea73212e1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bce7cb0-e781-42b5-8ffa-816b8172aeec", "sighting_of_ref": "indicator--a0b58784-ba04-4627-bb47-786ea73212e1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7d73ed-5fe6-4efd-a52d-61ae9e8f93dc", "sighting_of_ref": "indicator--a0b58784-ba04-4627-bb47-786ea73212e1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47755370-68ce-40dd-9d28-a65c17d8bc3d", "sighting_of_ref": "indicator--f386eb97-efae-4cee-80d3-91bf181415e1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5050bd0-e764-4d0a-81b7-371330daa742", "sighting_of_ref": "indicator--f386eb97-efae-4cee-80d3-91bf181415e1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788805f9-9e9b-4c0e-b3de-6d753a3dbc98", "sighting_of_ref": "indicator--b1504516-32e8-4f89-b25c-b7f6f8c31625", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70951df2-b4e7-4a10-b8ad-40e22e9b35ba", "sighting_of_ref": "indicator--b1504516-32e8-4f89-b25c-b7f6f8c31625", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e18b9d-1d5e-4fb2-898b-1adaac48ad88", "sighting_of_ref": "indicator--930d5fe7-2fc8-4964-87ea-9e24c7981810", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33373527-4417-4b62-a762-aa68b5a653c4", "sighting_of_ref": "indicator--9a38a60c-eee8-4037-900b-d496d9477d9e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e80a82d-2b4c-41f9-809a-f623cef2e523", "sighting_of_ref": "indicator--ffb9ea43-d6b4-4292-9ce0-18d856d6479a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d5b2a9-112a-447e-8ac8-4dd36e1ebd17", "sighting_of_ref": "indicator--ffb9ea43-d6b4-4292-9ce0-18d856d6479a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c10e23-ed7d-4456-ad02-7dbc5c53ac4b", "sighting_of_ref": "indicator--0fc2c294-571f-43d0-9370-0e999e7a5c65", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72aff2f3-f015-4c0f-b635-15e4cd943fd2", "sighting_of_ref": "indicator--0fc2c294-571f-43d0-9370-0e999e7a5c65", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3ca170-c049-4bb7-89be-08ae2fc858cb", "sighting_of_ref": "indicator--7174bbab-a9bb-4cd6-8434-57151f5691b8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc4ebc1-736e-483d-8159-68421daeb084", "sighting_of_ref": "indicator--aa956e9d-f1a7-447c-a740-5ecb7e52f4bd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363fe1e1-1b62-4f8b-8d94-59507eda2d8e", "sighting_of_ref": "indicator--0ec61e75-78ff-40ca-a932-3014700af422", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0b3280-ba47-4908-bf79-810d152d9a02", "sighting_of_ref": "indicator--f7d2afa1-0bcf-4fe7-96d4-c1433b8bcde7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5fee9f-07e2-4ba6-83e0-88db5b2ca0ce", "sighting_of_ref": "indicator--f7d2afa1-0bcf-4fe7-96d4-c1433b8bcde7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0af08e6-52cf-4452-930d-3c14e48a0974", "sighting_of_ref": "indicator--52006bcf-ed1c-40e9-98aa-3d735e0b2617", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c879d29b-9190-4050-bafe-ab49bf1bfda2", "sighting_of_ref": "indicator--98ec37e5-7448-4c1e-9748-739a82d69403", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad2b6c6-75ac-4908-8bad-3fc4573b9d9f", "sighting_of_ref": "indicator--abe3e5d1-9817-4f96-932c-f515fb682e33", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc22cb29-4d38-435d-8a9b-f78d87efe63b", "sighting_of_ref": "indicator--d37648ae-5ba5-4cec-8759-a85cae752b34", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31ecc2b-6f8a-40a3-945c-daa2fe6441dd", "sighting_of_ref": "indicator--fd5705a0-568a-4c52-83ef-454d82beca30", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd93c90-0649-4aca-a498-d1b71751bcb6", "sighting_of_ref": "indicator--13b12a61-c83d-4f77-9afd-9a9cf92c26bc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b498935a-ae0b-4380-aedf-68a10d745b2d", "sighting_of_ref": "indicator--00b20505-e998-47cc-95db-7fc59bd2ea36", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5c8a41-91cb-4b2d-b0bc-040b50f12f80", "sighting_of_ref": "indicator--49f1dd32-25e6-4611-b917-01818dfe2696", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e03621-55ca-4639-84f1-b54b7aedb31b", "sighting_of_ref": "indicator--e0513cb6-f763-4198-9bd9-0b2db26dd869", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09d6bd6-5c4d-46c1-8841-9df387dbc4dd", "sighting_of_ref": "indicator--cbe52c4e-3981-4b44-9564-f52a2d316f25", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28eda0e5-875a-448c-a7cf-9ea745aab1c3", "sighting_of_ref": "indicator--435a60a2-b4a4-4364-a046-db40c673454a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fdd8fa-6ec4-4fd1-b6d6-11d476c77499", "sighting_of_ref": "indicator--03dbae90-020b-48b5-85b0-cfe38b5e5a57", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec831b9-9f80-4723-a5bb-df7ea0d9c32c", "sighting_of_ref": "indicator--6f8cbfad-7314-40ea-a8f5-fc8c1f6448a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c89268-5c3f-4f23-87a4-6008a8f7968c", "sighting_of_ref": "indicator--f2176c3c-8384-49ce-8fe1-41f54a1cd9bf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35826b48-3d7c-4242-9de1-6d30482bf277", "sighting_of_ref": "indicator--0d044740-7b3f-4182-9d35-38fd403a5676", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f90086e-b975-441f-a379-2d178e1b09da", "sighting_of_ref": "indicator--df1f25c2-90bc-4cbd-bb06-0db824ea08e2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c13e7bb-5826-4e6f-a660-f503982ee82e", "sighting_of_ref": "indicator--7d61ad47-c3ef-495e-9d8a-ec0404760211", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6cfe81c-a7c3-410c-a504-7d3e48817033", "sighting_of_ref": "indicator--7e2af878-be51-4c3e-88c1-8c2b037e5adc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f575f2df-07eb-42a4-87a7-3c0e2add192c", "sighting_of_ref": "indicator--709b142c-2a2e-414f-bf30-9dd6ac595f7e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1fe721-27b4-4866-b607-9cd2d7ce1044", "sighting_of_ref": "indicator--795dfe72-ae03-4010-a574-f5c533de2805", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fece3fd-a2ff-43f6-a856-3070d056f0b9", "sighting_of_ref": "indicator--34acc3d0-961c-4a23-aa80-738f1c44329a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc27e794-289d-4802-be49-595564eef533", "sighting_of_ref": "indicator--427ce06f-fb67-48e3-b086-a99fcdf4a628", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ac7b15-0a98-4cbe-85ed-01bad1de0f40", "sighting_of_ref": "indicator--92c219e0-5796-4749-9b34-b82417c8ed87", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1fc8a7-278e-48e4-bf79-01ad9911d6a4", "sighting_of_ref": "indicator--04bab4f5-df90-4ab0-b2c3-261ff94597d7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48d24fd-de78-40d1-bcc3-b2208aa6dbee", "sighting_of_ref": "indicator--a04ed4d9-7df2-4ad4-bca0-50cc29476da7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80ab9e9-cc9d-4fbe-b5d6-170eb2a3a3d8", "sighting_of_ref": "indicator--a53cb136-be63-4b75-b253-4a3fa0375f16", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960b1f59-57c8-401c-99c9-2c96133eaedb", "sighting_of_ref": "indicator--a07aa8c9-75c8-4c63-b583-bc7258c515ec", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26202b99-f6bf-4e9e-817d-8e88485b24ec", "sighting_of_ref": "indicator--d297cf2a-76ba-4edb-bcf2-a6dfe40ce4ff", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0b5221-1cee-4129-b8e2-390e190134d6", "sighting_of_ref": "indicator--23725faa-a510-4c2f-9498-f3ef2734394c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d75be20-c69e-4e2c-b8d8-f6c4d860d114", "sighting_of_ref": "indicator--e3947a7b-b969-48c7-a2bb-d7a718e8c550", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674da0cb-d86a-46d7-8495-126104dde23d", "sighting_of_ref": "indicator--95004164-f494-461b-991a-decb0502110c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf16f795-9d5d-45a8-a170-2f24bcc004ce", "sighting_of_ref": "indicator--475df440-62f5-43e3-9363-3fa6f05d0315", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ee8caf-036b-450b-8558-130d3275aae3", "sighting_of_ref": "indicator--dc98c3c8-f273-4331-be07-95745b74d0d9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b830d7b7-8746-4b29-8dbd-283663631508", "sighting_of_ref": "indicator--ac1be0ad-4c0f-4002-aeb4-8ba6b53441fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1179ed3-bd2e-4574-9157-5c16af27042f", "sighting_of_ref": "indicator--d43e8b71-36e8-4743-a16a-48df19bc3e1d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71165d26-a4e5-4da5-8d92-4d70c25c4622", "sighting_of_ref": "indicator--d43e8b71-36e8-4743-a16a-48df19bc3e1d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d8e677-4aa9-485f-9ea8-f83f8a298219", "sighting_of_ref": "indicator--d43e8b71-36e8-4743-a16a-48df19bc3e1d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b248600-c75b-49e8-8d0f-03c7fa2f95fb", "sighting_of_ref": "indicator--8f3e3e65-7eea-4062-b73e-e50cd4daeacd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da30a572-0ac4-4aed-9f63-322b43e9fab8", "sighting_of_ref": "indicator--8f3e3e65-7eea-4062-b73e-e50cd4daeacd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47d8467-75f4-4174-b96c-e430c85796dc", "sighting_of_ref": "indicator--c054345a-cc14-4bf4-bfb9-24831e48838d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--892c1789-9af6-42f7-930f-c9d59bd93f8f", "sighting_of_ref": "indicator--2125ea78-7d0d-428b-990e-809eaed63195", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ebd3afe-45cc-46be-b091-3e2737036fbd", "sighting_of_ref": "indicator--b3aaa576-cf6d-4cd1-ad05-0dc1deda8133", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de0d34c-0271-4028-aeed-70a0ad5f0329", "sighting_of_ref": "indicator--19767a7f-3d7e-426c-94c8-28fe57571891", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed630ba-cfa0-478d-b823-240453ce3cd7", "sighting_of_ref": "indicator--d84b314d-ea20-47e9-bb3f-fff5fdd54567", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf57838-d653-443c-9c48-b2c6db7cbd71", "sighting_of_ref": "indicator--96eedb09-0d2b-4509-93ea-c53e6ca0d1b5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9cfb5f-a867-488d-a6b9-24ee43955b7a", "sighting_of_ref": "indicator--42ad2e1f-dad6-4a0b-bc16-31f0e30c4aa8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30fa4a3a-fe8d-4afd-a815-faff505f8c44", "sighting_of_ref": "indicator--6766d7b1-bf0f-4ea2-85fa-8b3a56defaf2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d771b1c3-26f1-4e80-aaa7-773f941521cf", "sighting_of_ref": "indicator--7a7b8489-93fe-4ea7-bccf-bb557fbf6c86", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958b10dc-a343-4c5e-9eab-ae0108ba391b", "sighting_of_ref": "indicator--c6cc9bbf-48aa-430d-b745-2579306695eb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355dd9af-e578-47d9-9115-4d9aba656a5e", "sighting_of_ref": "indicator--c6cc9bbf-48aa-430d-b745-2579306695eb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b9ecaf-1ec5-4ae3-9127-52a30643a230", "sighting_of_ref": "indicator--c6cc9bbf-48aa-430d-b745-2579306695eb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd601f5-2d4a-4e73-82e9-b023588d9225", "sighting_of_ref": "indicator--a35896dd-7c75-48ea-b791-054949eda3ee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41cee537-7aed-4452-8e2b-62ae2a8a57fa", "sighting_of_ref": "indicator--3871d0a8-675a-4d96-8da3-aeffdf5cd208", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01209b6-bb5b-450d-b26e-d27de701aff5", "sighting_of_ref": "indicator--86ab9070-cddc-42c2-8c9e-47764de25599", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba4b141-ccd4-4a36-885a-64dd30373efa", "sighting_of_ref": "indicator--c893cc58-632d-451a-90d1-08df9f383834", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e32ebf-1ec5-4fe6-b1d8-9d4ec1b6e895", "sighting_of_ref": "indicator--ce33ad52-fdc9-4dee-a580-dba928e3c4c7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0788dbfc-d22d-43e3-b0e8-405616368d53", "sighting_of_ref": "indicator--ce33ad52-fdc9-4dee-a580-dba928e3c4c7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720d103d-a77b-40de-a73b-2062475ea99e", "sighting_of_ref": "indicator--ce33ad52-fdc9-4dee-a580-dba928e3c4c7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ca8a56-1aea-4aaa-8837-190a9b7d91ab", "sighting_of_ref": "indicator--b068be19-9a09-4e2e-8dd6-1257de9ba50d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949a7671-9c2b-4347-b8ef-706a9c863566", "sighting_of_ref": "indicator--b068be19-9a09-4e2e-8dd6-1257de9ba50d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2825c6e-f61e-495b-b02b-4237317ed581", "sighting_of_ref": "indicator--b068be19-9a09-4e2e-8dd6-1257de9ba50d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d03c4d6-7aaa-4688-aa31-26fcf8ef827c", "sighting_of_ref": "indicator--890a0738-cba4-457a-95a9-c85d2f74492a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0427c5b9-7e79-4e85-88e1-8d05c5cae673", "sighting_of_ref": "indicator--890a0738-cba4-457a-95a9-c85d2f74492a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3073434a-317c-49bb-b782-c22d2bdb0c64", "sighting_of_ref": "indicator--890a0738-cba4-457a-95a9-c85d2f74492a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134a8606-5b3e-4f88-8e1d-4fe30f9d7bcb", "sighting_of_ref": "indicator--d632f8e4-5ec7-47fc-8f1e-e6953612efa2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd1dd81-23d5-41eb-ac93-db8896ff345a", "sighting_of_ref": "indicator--d632f8e4-5ec7-47fc-8f1e-e6953612efa2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aca45c3-328c-4dfc-aea8-30f2bda9e6a4", "sighting_of_ref": "indicator--d632f8e4-5ec7-47fc-8f1e-e6953612efa2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0640a429-2224-4bc7-b31d-88e49e01c53f", "sighting_of_ref": "indicator--6270e08b-9359-4534-840c-e2188ea638e2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2699d3a0-00bd-482a-bfd7-1309714027ae", "sighting_of_ref": "indicator--6270e08b-9359-4534-840c-e2188ea638e2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b677bc-ba8a-48b2-b5a4-e56ae36461ed", "sighting_of_ref": "indicator--6270e08b-9359-4534-840c-e2188ea638e2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd57902-0655-4a65-9c84-d869262299f4", "sighting_of_ref": "indicator--bdf8bd8b-432a-471f-86b3-7b26f4562830", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdbb7cdc-d983-4771-8136-af34526ecd7d", "sighting_of_ref": "indicator--83ec267a-07a9-4359-97a9-dbf3dd5587de", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4fd181b-d670-4803-9d41-254bf44c6ee4", "sighting_of_ref": "indicator--b1f1d141-cd0f-4444-8b11-ff8627d45e30", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2662db-fd06-4a93-b79d-c86093a8d7ee", "sighting_of_ref": "indicator--a7d8873c-881c-40f3-a988-9bdabca9fa75", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76661c84-d6af-4541-9ba9-d07d63890ded", "sighting_of_ref": "indicator--90c71c99-02f9-484e-b10c-1ed45684020c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6f494e-1d5d-4867-806b-8faf11f6b6a9", "sighting_of_ref": "indicator--90c71c99-02f9-484e-b10c-1ed45684020c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ff8027-e53e-4e3a-acbe-30a07ec093bc", "sighting_of_ref": "indicator--96564bfd-9de1-43e1-9746-8390c761e815", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf60f22a-099c-43cd-b3cb-e1ab98d025a5", "sighting_of_ref": "indicator--c8ddff88-2a34-4618-adae-d8b756113a62", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16060c9-aa05-4e2d-8f91-fa903d209ada", "sighting_of_ref": "indicator--c8ddff88-2a34-4618-adae-d8b756113a62", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678ffb48-8a27-43ba-a631-0faa6a0bc9c3", "sighting_of_ref": "indicator--c8ddff88-2a34-4618-adae-d8b756113a62", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865fa692-141e-4171-add8-2a260a2298e5", "sighting_of_ref": "indicator--97610536-c5c0-4580-acd6-29d610f9f969", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66053e5-33db-4b0c-881f-4a388ab9554c", "sighting_of_ref": "indicator--705a1583-58c8-44ca-956c-dc02239180eb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5afde86-3d13-4513-83ec-5454edb1ae7f", "sighting_of_ref": "indicator--019e3639-a51d-4fad-b9c2-e3b57cb7c69c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a478dc0b-9835-4050-93f4-0f5be002a02a", "sighting_of_ref": "indicator--019e3639-a51d-4fad-b9c2-e3b57cb7c69c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bb0028-9169-4f37-b644-62f6a5e4d2b4", "sighting_of_ref": "indicator--019e3639-a51d-4fad-b9c2-e3b57cb7c69c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2d48d5-399a-4b4a-9c88-48a4a0363a03", "sighting_of_ref": "indicator--01077c2b-61d9-4689-b7ff-b7e75dca6138", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ace954a-c8a5-434a-9c9e-d9e41504ec8d", "sighting_of_ref": "indicator--6b91f7d3-2abd-454b-a59a-8c6a491dbd0c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c16437-f886-4202-84b5-9e14bd23e9e6", "sighting_of_ref": "indicator--2728086e-4cee-41c3-b54e-f3891b7457de", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0c494e-89e3-4ee3-b71d-9c965368f941", "sighting_of_ref": "indicator--bbeb79de-1c23-4bd4-a335-4d0c632da015", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ae9301-5d32-4d18-995a-9887f3aa3ae9", "sighting_of_ref": "indicator--bb377f46-f44e-4f5b-91a6-91f2b7b1f716", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343c6d01-826e-457c-9697-cdeaeee6ec82", "sighting_of_ref": "indicator--df422033-ced9-4440-96dc-791b63fb0f45", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf8f62f-6f33-4af9-8fee-079e855f5790", "sighting_of_ref": "indicator--26227ebb-4a04-48f0-ba8f-ae11beb13e70", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708ffab9-06da-47c4-9cff-aab4063565d4", "sighting_of_ref": "indicator--e0866c70-ffcd-450b-8c73-c264f45a4716", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f9aef1-1eb0-473d-9a91-b92a71b6af9d", "sighting_of_ref": "indicator--cdaa26d8-3c2c-4cca-a059-11a30b3eb820", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb465161-a761-407c-a7a5-29072bb39ffb", "sighting_of_ref": "indicator--4c68923c-856e-47f3-89ec-958775a6b81a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80eca68c-0de7-4548-81cc-903ec641e5bb", "sighting_of_ref": "indicator--aff9abf2-74c8-4976-8308-a3069822e156", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1183f6d-dd79-402a-a449-a92ede870ca3", "sighting_of_ref": "indicator--1238ff2e-95ab-4471-aa38-fa1c5bf1ba57", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9d0050-a376-4dda-be4a-793839d99f7e", "sighting_of_ref": "indicator--b691eecd-f6aa-4ad1-82bc-f17abc284c26", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eba8290-1055-46bd-8e41-c2edb6790d55", "sighting_of_ref": "indicator--b691eecd-f6aa-4ad1-82bc-f17abc284c26", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bef5f9a-152f-4c31-903d-f708cda56c99", "sighting_of_ref": "indicator--b691eecd-f6aa-4ad1-82bc-f17abc284c26", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06616b9-9bbd-4136-ba45-cc215765d938", "sighting_of_ref": "indicator--ab560192-9afa-4482-a10d-42dcdc0525ad", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002ad868-9bad-492b-a618-a83bfa5ce9f3", "sighting_of_ref": "indicator--e4c7fa58-8ed9-40f7-9a52-47de7927c222", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b8a53d-c284-4459-9ba8-666ec687af0e", "sighting_of_ref": "indicator--6b211a07-dc46-411a-9f57-5a40b40a510b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356424dc-8c30-4e68-99e2-0cb67a3c1665", "sighting_of_ref": "indicator--15610f3e-4ff1-4751-ab81-00a242ef8515", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b66dbee-145f-416f-9387-a1bcc801d0b2", "sighting_of_ref": "indicator--f34324e6-19c2-4097-8b4e-1fe3a9ee12ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152e3305-e29b-453d-ad9f-29794214a8b1", "sighting_of_ref": "indicator--42fa509c-4c4b-4a7e-ab6c-167fbaa0df28", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4c4af9-96c1-4c97-b0cb-9aee33833f8d", "sighting_of_ref": "indicator--7f0899e9-61ac-4d11-8b23-7e962822b787", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4e0688-1b9a-4070-88d7-0f7a2866125a", "sighting_of_ref": "indicator--ce7df5a3-e4a5-4f60-9543-e681dea264c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74bcd24e-0228-4956-9c36-9e5069b28895", "sighting_of_ref": "indicator--e48a9a97-e01c-409f-9e40-5f60517ef668", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c27dbe-6157-4953-9edc-437f1a57e7dc", "sighting_of_ref": "indicator--7a0b9f5a-22b6-465b-ae71-356f9d96eabb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7028e4-7791-47d3-a292-719bc975ad28", "sighting_of_ref": "indicator--f10926b2-5ec2-45e9-a68b-bf1cf07afdf0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b334c40-4305-4f7c-855a-6cc964e51065", "sighting_of_ref": "indicator--726acf02-b75f-4300-b271-66ea1d613153", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb67272-f1ee-49b1-8060-79b382329edf", "sighting_of_ref": "indicator--89d13b1f-8fa6-4589-9a68-5a739560a26a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e716a5cc-f704-425d-a49a-13173ea981a9", "sighting_of_ref": "indicator--04a9a494-7420-47e8-8cd2-70b9bcd1a2ef", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e98517-60c3-4755-8622-4d0d8ab2b2b1", "sighting_of_ref": "indicator--93552d84-4b52-4d2b-a520-a3345ab2c139", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463f596a-8707-4fb1-af81-847e16cce9af", "sighting_of_ref": "indicator--b601a6c3-c475-46d8-88f5-bfd2969b33d3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1193e71-c183-48ba-b9e4-2515030dc8be", "sighting_of_ref": "indicator--7c30bd98-3656-472d-ba97-c53640951524", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8411bb-06fb-4eb5-9731-0486863d5986", "sighting_of_ref": "indicator--781b29a0-d5aa-4b52-972b-1d14003fd9ee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0571f427-5e6f-4052-aa9d-25cfc3b82ca5", "sighting_of_ref": "indicator--2e987046-0d58-4223-ab46-b39c9208b9d4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a724e9ab-376f-40dd-8987-81c94f03572f", "sighting_of_ref": "indicator--a137b0b5-ec34-4d4c-a5b8-8e3acd339618", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63a40cc-692e-4d7e-ae7c-3fefecd9d222", "sighting_of_ref": "indicator--5bf69c4e-8c09-438a-aad2-1256db268e23", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e321b3-ee32-442d-9801-0b8fc818f5c0", "sighting_of_ref": "indicator--e893a656-c106-4b65-a05c-4a9bcecb672b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1047ec-8d48-40fc-bbcd-a552183b0822", "sighting_of_ref": "indicator--64edb837-8fec-4ce0-a65f-a4dfea509adb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09316de-1ac5-4f2a-ba91-118346a47ad7", "sighting_of_ref": "indicator--c2dbfaea-d073-450a-9f40-8df13f149da7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9c7369-1f80-47dd-8944-931a59b3452a", "sighting_of_ref": "indicator--5c1bd9a5-66bc-4f7c-af58-089250f6bb37", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c887f2a6-25cc-4c3c-8c6d-90e40954bd5c", "sighting_of_ref": "indicator--60bd2f39-172e-456d-ae67-15b53c96f4b5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ffbd3d-b448-47ea-b62c-b312e7e96b1d", "sighting_of_ref": "indicator--692a7130-7181-4424-bc07-e05cf1ea1b57", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1326b6-b916-4e61-91f9-e78b227cf0b1", "sighting_of_ref": "indicator--a1d8e589-ff76-450b-8ac6-c3b7215b7c30", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b9fad6-72be-4b5f-b9a9-cc3dee4a02f2", "sighting_of_ref": "indicator--1b43abb0-c05c-4fc6-aa29-0b1102ed5af9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b71e0e-d181-4c60-b9f8-f8034b50a3d0", "sighting_of_ref": "indicator--b7c860f0-cd5f-4dbe-8137-f2c133815a09", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e947baac-020f-48e7-a991-1e5d883a2f9d", "sighting_of_ref": "indicator--bc1c019b-3f3f-402b-82e7-461fa91bc5af", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af99d758-c722-4631-b5d4-0e8f8355c604", "sighting_of_ref": "indicator--18399ef1-27a3-4edb-8cff-bce7b935eaab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac33e1c7-8868-43ce-8f16-46647e26fa0e", "sighting_of_ref": "indicator--f9c6b133-02e4-43f6-af81-fd0e5dace6e3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2500c8f7-b242-485c-a14c-a6accdfc567c", "sighting_of_ref": "indicator--d2235a7a-3c72-47a0-98bb-89f91bf8d2df", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cf0996-8431-48f9-aa30-d143dbff063a", "sighting_of_ref": "indicator--a3e9bf35-ef2f-4e90-aac7-507c328fb6a8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e8bbb2-92e1-47b4-9a14-6dadc57069cd", "sighting_of_ref": "indicator--1306fcdc-2391-4334-b04a-cfeebda1696c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6c419f-a1c2-4d04-91df-abd29fe3317f", "sighting_of_ref": "indicator--c74174e6-685a-4d7a-97c9-27f751556aa7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a233da53-9b5e-4930-9aff-fcf4d720fc5a", "sighting_of_ref": "indicator--633481ee-cc15-4353-9088-4bd56af73b70", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006bbdb2-31b0-4d2b-a6bd-b7480aa11883", "sighting_of_ref": "indicator--f05f63b9-a64f-4bd1-ad49-c2b55d1025a5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c690b7-cf18-4c3d-9f8a-dc21882f36c8", "sighting_of_ref": "indicator--003fa2c0-29bc-48a9-8108-b91c7c57eaa3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25897d5-e8fe-4282-afe0-83773b7d7add", "sighting_of_ref": "indicator--6d5eb088-c6ff-493e-9d71-365ca4ab9c1f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8e6597-5f40-4d78-b90a-067dc66b1e45", "sighting_of_ref": "indicator--63a00934-d864-46e3-9b31-da051818b2b3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a557d5-567d-4e22-ba5b-af822305920d", "sighting_of_ref": "indicator--4aad4ad6-5be9-4749-b81c-65e88693126c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f87c49-73c5-45db-8201-06a76a5484b5", "sighting_of_ref": "indicator--c57c1939-aa34-4aac-97b7-b312d11dd72e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772d7b88-f3ea-4617-a618-74a0c6a50f37", "sighting_of_ref": "indicator--27d4a201-6d76-4fa6-b946-0af21e58d142", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d08f8ef-69d1-4a31-85cf-ab2a650cc748", "sighting_of_ref": "indicator--27d4a201-6d76-4fa6-b946-0af21e58d142", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb6efe4-df76-474b-a495-e9612daaaf8f", "sighting_of_ref": "indicator--bde80cc5-73ad-493d-a43d-e0ea001b23b7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b53a65-4e02-4550-95d3-40d4bad2cc4c", "sighting_of_ref": "indicator--bde80cc5-73ad-493d-a43d-e0ea001b23b7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4472b3a4-be12-4e4f-bc96-234377a7e79d", "sighting_of_ref": "indicator--127f89c7-ee02-4e36-97f5-c3f0ca237f3f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83bf963e-2e36-442e-908a-959e470de363", "sighting_of_ref": "indicator--a9ef91f3-9167-4ed6-b031-edd5dec146a3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69607a91-6c1c-4247-acb0-8ccdbac0afc1", "sighting_of_ref": "indicator--a9ef91f3-9167-4ed6-b031-edd5dec146a3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f525a9-c6e6-427e-b42c-d2b2d8c658cd", "sighting_of_ref": "indicator--7f58d8fc-57f9-436b-9340-7733bcea8aa3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1d425c-442d-4005-926c-bc640bf1d809", "sighting_of_ref": "indicator--74275488-7c8e-4887-bb9a-8c1663f8cd7a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d745656-2a75-45c3-94f4-d7e4c058a739", "sighting_of_ref": "indicator--e77ad06b-a211-4ada-92a8-2f7f87d408a8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9a00b4-d578-4fb5-84bf-8b7d5d57bab8", "sighting_of_ref": "indicator--9ee63b4c-d980-4057-b105-3ff408b60506", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98f7bc6-add6-472d-9cac-fea00a41f450", "sighting_of_ref": "indicator--e1e87a9f-0805-40f6-b4ce-61a2391dd17e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3d39f8-2294-4e06-b2c5-0c1bc7458266", "sighting_of_ref": "indicator--e1e87a9f-0805-40f6-b4ce-61a2391dd17e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478ab4bc-8e05-4e5c-ab9e-eecc9535d0a1", "sighting_of_ref": "indicator--879e5aba-d1fd-4cfc-b542-99bdbe5cae61", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7939c7a8-5a63-4cb3-994e-77d623f83420", "sighting_of_ref": "indicator--e010ecb4-2962-4e32-9ada-d398bb64803a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6cf12f-16ab-49f0-bb91-fca5a7eeb30b", "sighting_of_ref": "indicator--6675ef04-c51f-411c-b095-3d6bf5fe5589", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43eb38e5-024f-4b51-80e2-a229372b022a", "sighting_of_ref": "indicator--eebb1100-ac6d-458b-b7c8-58c8db0802bd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75d6541-12d6-4040-838c-bad224eb68bb", "sighting_of_ref": "indicator--6414c83d-e135-4da7-a7fb-1e5bed4425e5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81efde7d-beca-4767-9054-cb93633680c0", "sighting_of_ref": "indicator--6414c83d-e135-4da7-a7fb-1e5bed4425e5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201040f2-bd7c-4cc4-986d-69e8213c1c16", "sighting_of_ref": "indicator--68af717c-2fc5-4a2b-891c-2b86f00a6346", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5132a2f-9203-4af4-9c89-356d8d396de5", "sighting_of_ref": "indicator--766939fa-c99c-4aaa-81d8-0f19b9022981", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc7d1ae-0bc1-466c-96d3-c36074d237de", "sighting_of_ref": "indicator--766939fa-c99c-4aaa-81d8-0f19b9022981", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b60040a-99f0-4310-a2ab-81acfaf16bd8", "sighting_of_ref": "indicator--ee023452-e73b-4bfe-9773-9f46db936c96", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153ece43-40e8-47d4-89e2-1b5889ae21e8", "sighting_of_ref": "indicator--b597776f-b0f7-4623-91f3-daad2836012c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f93fc91-6b85-40bd-a84b-5bc8c18baa8d", "sighting_of_ref": "indicator--b597776f-b0f7-4623-91f3-daad2836012c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5366ea63-07b5-4363-9348-bce0e682ce5f", "sighting_of_ref": "indicator--1f9e584b-f4b3-4096-b47d-b9da6022844e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd23a315-206b-45de-ad38-e2cd418b7a3e", "sighting_of_ref": "indicator--4c02af08-678a-44a9-985f-a50b62c2ce63", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29361c14-8d27-42f0-8bc0-b70d6888ed38", "sighting_of_ref": "indicator--4c02af08-678a-44a9-985f-a50b62c2ce63", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201f644a-8251-419b-8712-07953e4b26c2", "sighting_of_ref": "indicator--2b3bcb91-55a6-4f4e-9937-0239bae37f63", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e02327-9c81-4b95-a3c5-4ecaf336141b", "sighting_of_ref": "indicator--2b3bcb91-55a6-4f4e-9937-0239bae37f63", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c4ad29-99c4-45c7-917b-abeade4a4f49", "sighting_of_ref": "indicator--3ef3f0fc-3b75-4fbf-8733-943e2013b6a0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1fa0ff5-ba2f-49a5-9fbe-cf85e0441325", "sighting_of_ref": "indicator--36e4c4f7-a8b2-49f3-b64f-d6b08a85d527", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d38903-9608-4c1f-804f-72833fa29310", "sighting_of_ref": "indicator--769e6bb2-fcdd-497f-a37b-0e7f76ae01fd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831e4b5c-9620-410f-a4cc-366f972a8bd3", "sighting_of_ref": "indicator--3dbb0a6d-24ae-432f-94f0-ce5f49f87a48", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72dd5ea0-e943-469e-969c-fb8e62b7f0af", "sighting_of_ref": "indicator--3dbb0a6d-24ae-432f-94f0-ce5f49f87a48", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4f9d11-1386-40df-9ebf-53d278f55e19", "sighting_of_ref": "indicator--384d755e-de36-4169-b106-95101f3c40ad", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2b08ac-e1b6-440c-a96c-5d06869aa235", "sighting_of_ref": "indicator--ee282c60-a743-4a88-b6f8-12d139ab5bb9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8c9ca5-d8cc-4488-99d2-410ea8150c99", "sighting_of_ref": "indicator--3641bba0-db84-4c18-96f6-367986e7662c", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992a6ea9-6fa8-4d45-91fd-4e8025365f02", "sighting_of_ref": "indicator--3b271f90-3337-4f96-b4d9-80d2bfe06103", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45bca773-dab5-4082-93a7-6f94b5ee92dc", "sighting_of_ref": "indicator--98f99ac5-d595-4429-b86b-aed3b3eb0ff6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc37ea1-15e4-4ac6-83ca-b1fada4c0dee", "sighting_of_ref": "indicator--025ec0eb-dcb5-4635-9a83-4963a7be2810", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52723b04-2579-46bb-a60a-f86f36762081", "sighting_of_ref": "indicator--cbf7b624-ab6b-428c-806e-a2f7c06008fa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033d074f-524c-44d9-846b-49bb83d08898", "sighting_of_ref": "indicator--cbf7b624-ab6b-428c-806e-a2f7c06008fa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b62c851-76e0-4ad0-a557-841a507451b9", "sighting_of_ref": "indicator--c690e043-46bf-4283-9a57-21f2fdf51e69", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65759075-c59a-44cf-a947-30c607b7f47c", "sighting_of_ref": "indicator--c690e043-46bf-4283-9a57-21f2fdf51e69", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df74784-927a-41c7-a8a4-195ff10766bb", "sighting_of_ref": "indicator--3c099169-0514-47cc-a572-0a0afd0d7031", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc83550-a1ea-46c4-a986-1b3ea48ffa9b", "sighting_of_ref": "indicator--5d7f8737-e1c0-4c73-9915-8e0b2ea10d04", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8997e45-d48c-483f-8b2e-0b2954fb40ee", "sighting_of_ref": "indicator--df69b423-b68a-4e37-81b0-d430c3982d66", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969e6fd9-6761-4a89-9be6-517b386c62e4", "sighting_of_ref": "indicator--2a640f6e-155c-41ae-a6b1-436719f81bbd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0173ebd-94c5-4437-885c-c1aef3aee525", "sighting_of_ref": "indicator--3841d2b2-5388-42e0-a3e6-32f61847cc05", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b649317-e0a7-48fe-ad4b-a86705e48f11", "sighting_of_ref": "indicator--3841d2b2-5388-42e0-a3e6-32f61847cc05", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a7efc8-3363-43e9-8cb4-5606e5c7921f", "sighting_of_ref": "indicator--a265c5da-d4cb-4f59-b568-a65b9deaf7ea", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109507f5-ff91-48b7-b385-d91e89c479bc", "sighting_of_ref": "indicator--a265c5da-d4cb-4f59-b568-a65b9deaf7ea", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4544e2-9324-40ef-8d2a-99f2ba96adac", "sighting_of_ref": "indicator--d3f18987-6e04-43ba-8491-852d888fb2fa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7477e94c-d3d6-4e68-bf07-9c00ee90fb48", "sighting_of_ref": "indicator--d3f18987-6e04-43ba-8491-852d888fb2fa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a406c3af-28ae-4635-8e53-56be97c13303", "sighting_of_ref": "indicator--c43f6cbd-2519-4c90-8eab-2abf57bedeb9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f1ea70-d6be-4a28-b7a6-847d9df35ea0", "sighting_of_ref": "indicator--b543399a-d80a-4de4-b014-b1c5f063e5e0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ef01a2-4d6b-42a1-8d56-0b3d9482b0ed", "sighting_of_ref": "indicator--7e1ac742-9392-45db-a360-9d9dcce3dd96", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31fc4a0-7f5b-4d78-9298-6879aa87c189", "sighting_of_ref": "indicator--b817eced-b60e-461e-b039-27c619722e40", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a6d98e-f934-472b-97a3-b2aa8685b31c", "sighting_of_ref": "indicator--ee69054d-4830-4a95-9838-2632101f3dd1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc4e81c-f3c5-4f21-b0b6-098ce621c890", "sighting_of_ref": "indicator--ee69054d-4830-4a95-9838-2632101f3dd1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b3c41d-aa9f-40aa-9b81-b7254d9a315e", "sighting_of_ref": "indicator--7ec55aaf-9b5a-418f-b92f-0d51132226a7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ea0796-83bf-4611-be7c-e4b5a0b8f257", "sighting_of_ref": "indicator--01b60f30-e3d9-4e15-9bc7-92f21ba27cd7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b097af-848a-4e95-bb40-0ead646d8621", "sighting_of_ref": "indicator--18b71e60-e06b-4d16-a831-e51007e96a8e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b2f331-9019-461e-a8a0-59143cfebf8f", "sighting_of_ref": "indicator--44f8496b-c0cc-4c5c-bc5e-f94975dd1d4c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b127259-80f2-493c-ae8e-d2ddfcd1b2d3", "sighting_of_ref": "indicator--44f8496b-c0cc-4c5c-bc5e-f94975dd1d4c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854f975c-c40a-4b3c-8963-ac65cde929bc", "sighting_of_ref": "indicator--8899210a-5b9c-4633-9f5f-7f540d977774", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd29764-4250-4387-8992-554248167cc7", "sighting_of_ref": "indicator--8899210a-5b9c-4633-9f5f-7f540d977774", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b1116b-15fd-456b-bc69-65c5e0682d45", "sighting_of_ref": "indicator--9fd2ce06-f2a4-4ac3-a1cc-ca8fef4da180", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9847f5ff-3a26-4fd9-a88b-19521650b7ca", "sighting_of_ref": "indicator--9fd2ce06-f2a4-4ac3-a1cc-ca8fef4da180", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5cdd077-2479-4ee0-ab55-d70f5cc2742b", "sighting_of_ref": "indicator--9fd2ce06-f2a4-4ac3-a1cc-ca8fef4da180", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0782c1e2-5575-4476-8cc7-f3bb8a4c1f2e", "sighting_of_ref": "indicator--2b112e1b-14ca-47b4-b3d7-0882df48e5ae", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0899a2-1e5f-4da3-a83e-55cc915613e0", "sighting_of_ref": "indicator--fab2f4c5-82ff-4a42-8207-0f65da01d9fc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de239b00-e2cf-4260-ac5a-85cf6dd7cda4", "sighting_of_ref": "indicator--5e204b13-3d01-4be3-bd63-ec02af34bc80", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffefa45c-3ca9-45b2-92f3-576d8eb618b2", "sighting_of_ref": "indicator--86bf2583-e566-48c8-b36c-3397ac5e0d46", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd873b2-2d49-4350-8013-dd74754a6ef7", "sighting_of_ref": "indicator--86bf2583-e566-48c8-b36c-3397ac5e0d46", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91be89f5-069d-45e5-a6ec-e8afe7a0fb82", "sighting_of_ref": "indicator--86bf2583-e566-48c8-b36c-3397ac5e0d46", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b880830-ed22-4590-becf-b82aaab9b0c1", "sighting_of_ref": "indicator--9f28ab28-3a88-45a0-bd48-980b348bad5b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349cfd85-0689-4dce-9788-93b0aa102b17", "sighting_of_ref": "indicator--9f28ab28-3a88-45a0-bd48-980b348bad5b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685d693e-f4dd-4f5f-be49-ee5b745f5699", "sighting_of_ref": "indicator--64f49835-8c11-45b0-bfc6-c13438ffbbc4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ad62e2-0c49-440b-997b-5f8dc5a52cb4", "sighting_of_ref": "indicator--64f49835-8c11-45b0-bfc6-c13438ffbbc4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571eebaf-ce02-4d73-bb75-55909f8281bf", "sighting_of_ref": "indicator--64f49835-8c11-45b0-bfc6-c13438ffbbc4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb8d1c9-11d0-40b0-b98a-a4c52d2409a0", "sighting_of_ref": "indicator--b00b62d4-4345-42e4-ac49-849821298ff3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3b8f01-18ff-43cf-a1f9-fa3cb7ce5d0d", "sighting_of_ref": "indicator--b00b62d4-4345-42e4-ac49-849821298ff3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744f2e04-728d-4271-be00-463e6fb2578f", "sighting_of_ref": "indicator--b00b62d4-4345-42e4-ac49-849821298ff3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb2dc9f-94d7-490c-b8f5-ed128ac00b1b", "sighting_of_ref": "indicator--3c13cbee-e954-4164-a4ca-7c4be0c3f181", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c286532-487e-45f3-9e70-b3c3df5c8c19", "sighting_of_ref": "indicator--cfbc32dc-9b63-43c0-bbbc-38b77dccf1f9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc153f96-d8ca-45ba-991c-9bb39c8db275", "sighting_of_ref": "indicator--d64b7dfb-af85-46a8-8465-89237ce76ceb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc4480c-257b-4518-97ee-b4e4ac74103e", "sighting_of_ref": "indicator--18fd0dc8-2862-4d9b-be75-b6eda8bda4fe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f154d030-9135-43d3-b3de-1f1c13f5af6c", "sighting_of_ref": "indicator--18fd0dc8-2862-4d9b-be75-b6eda8bda4fe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fea066e-473a-4200-8659-35810c279f20", "sighting_of_ref": "indicator--7caf9cbc-9ba0-45e2-be3a-177a319a8b7d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6ec744-6d1e-48b3-bd9b-c62b4300adeb", "sighting_of_ref": "indicator--6364718e-7d5a-4265-81a1-6a7ea407c6eb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504101aa-2a00-4ec1-a6d6-7a767ae15501", "sighting_of_ref": "indicator--06a96224-eb33-4d74-86f0-1d02eb415a4a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7254830f-303c-406c-acb5-c9fd2adc1e20", "sighting_of_ref": "indicator--5bc017fe-b772-4432-a5af-c8737db1e90a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd654652-b831-471e-8c3d-f10390d02576", "sighting_of_ref": "indicator--5bc017fe-b772-4432-a5af-c8737db1e90a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3440c1-5509-4167-b9b2-5201001f74af", "sighting_of_ref": "indicator--ac6bb5ed-7185-4db2-96a7-8a321f04f366", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f75591b-e64f-41b9-ad63-81fa76978333", "sighting_of_ref": "indicator--71eb0e8b-fb32-49ec-916e-a77ccbb4dfa5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bf0cb9-f92a-48aa-a98e-73175467c5c3", "sighting_of_ref": "indicator--772df92d-6ab9-4985-b138-0d695e45a674", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a24030-6df3-4a95-bb0d-6e6e449c2e8d", "sighting_of_ref": "indicator--772df92d-6ab9-4985-b138-0d695e45a674", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e4176c-b42c-4982-84c3-8cb2d3ec1d43", "sighting_of_ref": "indicator--75e25599-3122-4d0c-8b64-50066ea24658", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8261ab5b-b459-4751-9ca3-30c3f4db115b", "sighting_of_ref": "indicator--54e5279f-c0ae-477e-b852-9da33e8ad8db", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d6018f-096b-45d4-9378-294a2b87106b", "sighting_of_ref": "indicator--9a31c6d3-b6e4-4e4b-b085-2609e824a824", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4a3df1-3895-4994-8206-a3bf8385a89d", "sighting_of_ref": "indicator--fc8791aa-070a-4fbf-abdc-637ab52a4744", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddda26ea-5a72-4c6c-914d-2e6fe961ecbe", "sighting_of_ref": "indicator--6588ec2f-3433-4ab2-a621-8a63c96a50d6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d38a81-6f15-4905-8ae7-d63ff8be0b71", "sighting_of_ref": "indicator--53ad7c51-e655-48ee-ade3-1d71a5cfeeea", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed89f2e8-10b4-4917-80a8-dc6900084cd1", "sighting_of_ref": "indicator--53ad7c51-e655-48ee-ade3-1d71a5cfeeea", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bce2429-b35e-455c-a12b-1299512569f6", "sighting_of_ref": "indicator--e0ef66cd-fee0-427e-ac68-7f788ed2f323", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae20e504-4a33-4b8d-9896-af87661c87f9", "sighting_of_ref": "indicator--f594aa1e-942c-4669-97a6-6a5ebefe96a4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef3c244-788b-4cca-a9c6-ed74640cc235", "sighting_of_ref": "indicator--da981757-7267-4985-9528-8594ae3f2769", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82af996-8b50-4377-8192-9f4c5887c93a", "sighting_of_ref": "indicator--35b698f8-5763-4637-97e3-7074a315434a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c167b6-2f65-4c96-96db-11ee0c9f0fd4", "sighting_of_ref": "indicator--671252f3-40da-4ec9-996a-c518f3b96229", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06035c90-cb2e-4118-9abc-4c023918c2ca", "sighting_of_ref": "indicator--1033682b-1926-4a66-a296-5f9a913dc5d0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3addcc6a-a37f-4824-bbdf-27a082a33180", "sighting_of_ref": "indicator--0f0d4fee-b867-4fea-98c5-8212710d8933", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa7f2f4-d8ca-44a9-b260-c874bc265f4f", "sighting_of_ref": "indicator--0f0d4fee-b867-4fea-98c5-8212710d8933", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9080b99e-c409-45cb-9d9e-c014217a0893", "sighting_of_ref": "indicator--0f0d4fee-b867-4fea-98c5-8212710d8933", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d411cc4-9580-4e8a-a2c6-727153596f82", "sighting_of_ref": "indicator--a3900fbf-ecea-42b4-ada1-6ce434d54155", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85653d83-0a29-4905-84da-0594fd8009d9", "sighting_of_ref": "indicator--a3900fbf-ecea-42b4-ada1-6ce434d54155", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca60892-b69d-43a4-86dd-8bbf29ac00e5", "sighting_of_ref": "indicator--d373e756-b38d-450b-be06-720d4ecc1020", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c75063d-32d8-4b91-8738-c0776cef5f7c", "sighting_of_ref": "indicator--73784294-2231-487b-a040-d579bf32929c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764c728f-7a01-496e-86a4-64b50f36ad87", "sighting_of_ref": "indicator--b52a9267-73c7-48d3-9062-a4c4912a73f9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa881df5-deff-4e8a-a7a3-4010bcac5daa", "sighting_of_ref": "indicator--35df49bc-9e05-47c5-8f70-478392283101", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac7a9fd-65fa-4eb7-976b-ad93baa70dba", "sighting_of_ref": "indicator--82561833-de0d-4a23-91ee-30c0e670de69", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65099c1-2dc6-4850-8c38-f69ed80abe93", "sighting_of_ref": "indicator--974e021e-17fe-4953-bd73-aced6823cccf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecd118f-746f-4671-9101-105dd60a05e6", "sighting_of_ref": "indicator--2708e8fe-baa7-4bef-a502-b6aeb7ef28d6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb12bd4-0756-4692-a590-0fbc455a3e54", "sighting_of_ref": "indicator--87bc7867-1aac-48d1-8396-16a5d62b1793", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e648cae-7b2b-44a2-a81d-9d5c5b2d0954", "sighting_of_ref": "indicator--51a186d2-2a23-49c5-b041-c9a1c0e535ce", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff736178-dbb6-4139-ba1c-3a71b8a81f5d", "sighting_of_ref": "indicator--b019eb0f-7b09-4107-a0a1-54c2bdf98edf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b1ea24-cfe7-4dbe-8636-29e33e527de4", "sighting_of_ref": "indicator--f46dc4a6-1a1f-47c3-bdcf-4f569d3ae751", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ef7f04-db5a-49e7-aff9-4faa0b6da109", "sighting_of_ref": "indicator--20888c10-639c-4b5d-a5d0-4772bbb5c695", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217e23ce-c43d-4e8a-adcd-24c075b34453", "sighting_of_ref": "indicator--6b4207f4-f282-4650-92d4-45aea90cdbd6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a270773-967f-4f09-987e-5c90fd6f7cf2", "sighting_of_ref": "indicator--b4bf9a0d-86f1-49db-9042-790e1713674e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8922f00d-cbe2-4d04-9807-d4329898c3a5", "sighting_of_ref": "indicator--cbd971eb-a714-4a89-bef1-57b0d6955880", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec60035b-6b9d-418f-b2ca-3ae89dafa207", "sighting_of_ref": "indicator--6a3ea107-a15d-46cc-95b0-6f6960ba3422", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5661116-b279-42a8-b0bf-0dc34d0d30e6", "sighting_of_ref": "indicator--6db74deb-f706-4d7d-8d36-c8ce6b2a5803", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6a94cf-78f0-4255-adc2-c5ab0e406992", "sighting_of_ref": "indicator--8deaf3c0-fc6f-4ca0-a728-278c50c4bad7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5803e288-cce4-4043-a0e7-e49e9ed02705", "sighting_of_ref": "indicator--b59e0ac4-fdcb-42dc-a462-e6b4b3ecae28", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1889f1be-252c-47a3-ab79-a4910ad22593", "sighting_of_ref": "indicator--d463f8a9-3082-4332-a462-861225d6a878", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bb5a58-1103-410f-bc50-4d3fb32008a9", "sighting_of_ref": "indicator--2eb35bc2-8f48-4722-851b-64e5041a806b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df04dff7-4c34-40a9-9651-910b9a195ef4", "sighting_of_ref": "indicator--01fa0bb8-06c9-4107-a264-313bc96b13cb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40228c6-a17a-4077-aae4-049b5c8101d7", "sighting_of_ref": "indicator--e03d430b-0691-43fd-b0fa-4bb0aa3b2527", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04022dd6-c6c3-4b61-a06a-60e76abe31d7", "sighting_of_ref": "indicator--ec1a41f1-4769-4f26-9954-8de780e60b39", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd1d455-d3e6-45d9-9d23-e0b81cc3eaec", "sighting_of_ref": "indicator--894a595c-c06a-4498-867a-6ba5f6091705", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7ef892-1911-47e1-a920-3fce3be8f051", "sighting_of_ref": "indicator--a1ff4b71-ba2a-4c40-8347-e2671d6827b8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c017ef-8580-405d-9f97-7f944ca0e8b9", "sighting_of_ref": "indicator--9a721ca1-f4d2-4c34-8f27-0a86c64bea8d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e4f7d6-79c0-4c5e-b3d4-bfec109c2548", "sighting_of_ref": "indicator--bdb3c418-b643-47d2-be02-2334bc2daa70", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9420dd-8599-4ee4-84e4-fea523a6e6b6", "sighting_of_ref": "indicator--4327700b-4e73-4df2-a8d8-6ebc8ba3cf26", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9be09e-d1de-49a6-be55-fd6ca467be44", "sighting_of_ref": "indicator--b1a0330c-81ff-45a6-bdec-f4639613505a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96810599-161c-456a-8406-c9ebc20e4529", "sighting_of_ref": "indicator--7676b479-1278-4a13-b4dd-9d9ddb670fdc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037f0d7e-f2e2-46ed-a9e0-1edc425fe1df", "sighting_of_ref": "indicator--93d8ad5c-3216-4241-8674-3b90e40350f1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19ed8e2-533f-4790-8f8d-65d7f358352f", "sighting_of_ref": "indicator--409073d3-d1de-4005-9d4b-f85baa97c79f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b730157-a4d0-4b28-b87e-9c7feb722f3c", "sighting_of_ref": "indicator--16f21cc8-1ce7-4d5b-99a9-ff8213e3510d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a11764-e826-4c6a-a42e-599c7c8e5d5a", "sighting_of_ref": "indicator--16f21cc8-1ce7-4d5b-99a9-ff8213e3510d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5dfff0-c191-4962-971c-11a5a4ca8dd2", "sighting_of_ref": "indicator--bb90389d-060c-4619-8f19-2a240c520393", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16c1ec2-9fd6-480e-a21e-a7b3cd7e90eb", "sighting_of_ref": "indicator--9090fdd5-812c-4f19-a11b-2f5c923b4a4d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d64eaaf-96a5-43a8-bdfe-afce93104400", "sighting_of_ref": "indicator--032bad56-fae6-4a2e-96e1-bfbf8ee12c2d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a817f6d5-0a3e-45f5-a202-ccac0a89f445", "sighting_of_ref": "indicator--f15b2ae2-d053-47e1-90ae-134a2cc0d8b7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e88a72-3604-469a-9fb6-59ebff58a72a", "sighting_of_ref": "indicator--12d513be-41ac-49a7-9ba3-9899b6d68a61", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcba605c-2a98-404e-b9f5-a9dc377087b7", "sighting_of_ref": "indicator--14291562-c332-4302-9cab-f27de77a5a44", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5822713b-1761-4b3b-b5bd-839ff708d6c9", "sighting_of_ref": "indicator--49ec28a0-f114-4d76-9cef-925afbeced30", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42930b82-f6f7-49dd-8d92-8849774c96a3", "sighting_of_ref": "indicator--9a8d13cb-e89f-4e1c-bc88-86b95e84c848", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b689c48c-0c57-48b6-8ea1-cd37edd5b8e3", "sighting_of_ref": "indicator--c4eb143d-23b6-43d7-ba06-04121878d538", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9300b15-f29a-43c7-8e1a-56eae42d325c", "sighting_of_ref": "indicator--d27c086e-483c-4c24-be26-75e88f2cab0e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f67c0d-891f-4a3c-b2d3-4418f38da99b", "sighting_of_ref": "indicator--db952b1b-2692-4443-9e09-c01ff8dba8a2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f314f105-9e77-4360-acc4-590770bf8809", "sighting_of_ref": "indicator--7c30a85b-e0d8-4712-9959-815844407945", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b688749-3122-44ff-9867-b0f956983a16", "sighting_of_ref": "indicator--f70a5657-e1cd-4c75-be52-0ff3658772c0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd5fa28e-8bc6-47fb-b7c4-e84fb25eb911", "sighting_of_ref": "indicator--316bdc43-02e5-4d6e-9572-b418c0fd5c6a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a668d7dc-cdf4-48b8-b9ca-f7f42555decf", "sighting_of_ref": "indicator--a11080df-c074-4db5-b91d-eb5d7708403e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9840073e-c760-48ca-8191-72d0f80ca028", "sighting_of_ref": "indicator--a13f7146-43a1-4d36-a66f-6b154713ac50", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343341d1-0fee-4869-9e78-cd50dd5cbf7a", "sighting_of_ref": "indicator--4357efe1-33c6-4c28-bb14-ef99ce041128", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7157e1-cc8c-4a4b-bbed-baf90bf59d11", "sighting_of_ref": "indicator--5a6dd070-9607-4dd6-be4f-4f3ac9ea8128", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7bc9de-d299-4639-ab79-05cb3fdffb62", "sighting_of_ref": "indicator--a082d4a3-be1e-4ea9-b1eb-faab1fa55976", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe08c37-48a8-4fc3-92de-73fb52abb3d3", "sighting_of_ref": "indicator--4b11ac78-88a9-436d-9210-47e1f960f225", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5cb46f1-931e-4da4-a744-ece80d4b613e", "sighting_of_ref": "indicator--d331d078-0c97-471f-aff3-7d8d1ab2a247", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b69315-40dc-4ff9-9559-64631e53e371", "sighting_of_ref": "indicator--52dd21c0-5d8b-446e-a2ec-aacca394406a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ae48c0-34ac-4aa2-aafa-4bc6a201fcb3", "sighting_of_ref": "indicator--947f719f-213b-46cf-becb-8505bd1f8bd6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165c722f-72e4-4954-9b7c-50927984bdbc", "sighting_of_ref": "indicator--8e55cc27-08c5-466a-9d6b-8423c3fd20c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2aba4a-69a9-4165-ad85-d50a01791b4c", "sighting_of_ref": "indicator--eb016fcf-9789-4248-9c95-812bbcbd4dc9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0acfd89e-f47d-4002-870c-89972de03d20", "sighting_of_ref": "indicator--212cf202-2ed3-4568-a0dc-eca03d4088d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1215b5fc-3b04-4a16-98bb-eaecc4186410", "sighting_of_ref": "indicator--5c4fc80d-6cd8-4ed4-ac6d-e7c0ba078139", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f7ed06-0a92-46ea-8b35-68bd5c5b0977", "sighting_of_ref": "indicator--19b7c495-61e0-446e-baa7-db44b3fd8859", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8467a17-2b08-4701-9854-908c9e683dbf", "sighting_of_ref": "indicator--a9dde82f-cf89-4537-8133-2c95eddea673", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9898d4cc-264f-4c3d-b37b-1d412efee21f", "sighting_of_ref": "indicator--88fabc30-5a57-4a22-a410-f7d8ba105fcb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf3229e-e2e1-40c3-9230-c87f38cfbd77", "sighting_of_ref": "indicator--3bd51875-e0ed-430c-82d4-61bea2d0962a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd5223a-4e10-4694-bd57-814763f88956", "sighting_of_ref": "indicator--3c263ac5-bcd6-4954-bc10-7897b50753d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86861bdf-1153-42c7-8739-fe0376ca6b1a", "sighting_of_ref": "indicator--0888072a-4ba3-4990-807a-702f9b400b14", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac85dce-cfcc-4058-8cd5-72fb7fc2ca4d", "sighting_of_ref": "indicator--c7a98117-8a3a-40ac-80a1-eccf319a04e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f55609-08ec-4384-80cc-b50bb3dbe81b", "sighting_of_ref": "indicator--1a5a398d-fb16-460c-bc27-462250bd5a82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10872ec-ef16-41ac-af65-468354a652c9", "sighting_of_ref": "indicator--fb7522ba-cbd8-4b7d-978b-b99f2e1ae2d6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cddbefac-955b-498d-85cf-dde0df548b5f", "sighting_of_ref": "indicator--5f0e7f31-14d2-4055-9b21-5a91b2f35c1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285b9df7-21d7-4e9a-965e-f4492c47c18b", "sighting_of_ref": "indicator--5ca2c253-496f-41c2-9390-4df75d9a0556", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd00073-3b45-4a39-b8d3-341b3d86e401", "sighting_of_ref": "indicator--9cb3d356-d188-4624-937c-aedbe8ea6ac3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac2fdda-0ac2-4246-949e-cecc81b885f2", "sighting_of_ref": "indicator--bce84ffb-b58a-4c38-abd9-cc27327c1046", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e90bcb-d1c4-4c39-bc45-afb9a242c74d", "sighting_of_ref": "indicator--bacec5c8-072c-4a50-bb70-389a73ab101a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c49a9ce-5845-43af-bb51-5d54f1350cba", "sighting_of_ref": "indicator--7631430a-e04f-4d60-972a-605136ad7764", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac2f3a6-1667-4f99-beeb-130665341504", "sighting_of_ref": "indicator--ce267791-25cf-4577-a0e9-b488d2117030", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38fb5ad-6027-4150-89dc-232b80037836", "sighting_of_ref": "indicator--fbd050c0-fbd6-4a38-a005-24817f60ef25", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb631b5-e942-48d3-9412-e521b5a26e04", "sighting_of_ref": "indicator--54a12353-e8ad-4baa-90b2-9321ad9a6ccf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f2edb1-3f99-4388-bd81-8ba08699ed2a", "sighting_of_ref": "indicator--b0d61417-99bf-4c46-a654-aa9a7ca2eea8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1698c387-ff75-4194-8f66-f702cdfa1558", "sighting_of_ref": "indicator--e2db4f85-1b91-4cf4-9644-1e1248d33f75", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b724b4ce-7047-46e7-8a98-5ea34a2c2765", "sighting_of_ref": "indicator--6dabe29d-cc35-4b7e-8d54-4b26f3ff8505", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bb575e-bf9a-4fc6-8adb-fe493c2c0f1b", "sighting_of_ref": "indicator--b3545238-a484-4f3f-aa30-ecf3caf6513c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abcaf0cd-3413-4899-9eb3-7907bfab3402", "sighting_of_ref": "indicator--4c2a18d7-5431-46b6-9fcd-dfe83a254f29", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448f0faf-8b70-43e1-aef9-7cd22fdccd76", "sighting_of_ref": "indicator--12e623ae-645d-4f8f-ae19-cb0b00704d4b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7978c9f-8f01-44cf-b36d-9b837b61c892", "sighting_of_ref": "indicator--a0e8c31d-d33a-4c19-8e4f-19d255bdf65a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa9d6cf-80a5-45b6-a3c5-48b018266fa1", "sighting_of_ref": "indicator--53de487a-7ec0-408e-b1d5-b1ceb46abf4f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901cb6e1-5bdc-48a7-bf08-7177ddd808bb", "sighting_of_ref": "indicator--998dfaad-12dc-4865-a1d5-434121d0c128", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c02d3c-d690-43a0-b957-54adc91cbf8e", "sighting_of_ref": "indicator--7d82a3f7-99a2-43ea-8f49-fddc5b5c9f9e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62973a66-9c72-4e51-b3e4-8b78bf73a4ec", "sighting_of_ref": "indicator--4b357f69-5814-48d0-987b-cf3f74229f31", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524d9bdb-deec-466f-b17f-cb97258aa533", "sighting_of_ref": "indicator--ff1d1da0-9635-4f0d-a402-f4c2de82b133", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5dd7775-14b5-4f2c-b3a3-a6d3c77f9042", "sighting_of_ref": "indicator--2198a9c1-ab9b-4e09-8570-58e5d0c1f35e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9abc2a-3528-4796-9fb1-c2f7ee0412ed", "sighting_of_ref": "indicator--b3d1d9ff-e89a-4d67-8e06-05f690673e3a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba268320-21ab-4c14-9f55-8700f345795f", "sighting_of_ref": "indicator--59e8e86f-d803-4b23-9338-14f66a55f465", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1c1d27-982b-4334-880f-ec6f6132ab25", "sighting_of_ref": "indicator--4b6f18e2-ae80-4a96-91d5-6ba4dc4bec42", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7540db96-96f8-4c06-9eac-007c6dd34b74", "sighting_of_ref": "indicator--92fc85ea-58b4-4918-9b1b-8407a27346c0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530f2cf3-11ae-463b-982e-05dcde0819b6", "sighting_of_ref": "indicator--86b9b129-5bfb-4fde-af5a-36c8f202e1d1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2a6421-d7e6-4570-b183-c493c598ffc4", "sighting_of_ref": "indicator--cbcbeaf9-0c66-4658-ae98-0c862821d9ab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1795b8ee-0437-4abe-b8b2-bf4f61bbc212", "sighting_of_ref": "indicator--14420031-ecc8-4c23-a0e5-2bc59b9e77cb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a78821-7c2b-47e6-bf96-8df54a091ef2", "sighting_of_ref": "indicator--7973518b-d4e6-4ee1-9230-45b2a84d3960", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe59298-2e67-492a-92d4-c5961db879a7", "sighting_of_ref": "indicator--36216e2f-2271-4ea0-b9a5-6abbc5c70655", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97025dd5-e6bd-4881-a11c-213aedf637f3", "sighting_of_ref": "indicator--caa3269a-acd1-4fd4-a205-c9569c11af65", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705f9f70-8dfc-40ca-ab74-3899c16c7aaa", "sighting_of_ref": "indicator--caa3269a-acd1-4fd4-a205-c9569c11af65", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a0ee35-fbc3-4f19-8abb-67a70c8fba3f", "sighting_of_ref": "indicator--23aa84ca-d734-4474-acdd-fd25a23c26ef", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120345c4-3a4c-4ff5-8b33-1fc10e24f9ee", "sighting_of_ref": "indicator--132d587e-18a5-4101-89ae-08db368b0c0c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e65269-f773-44eb-b39d-8680569511cf", "sighting_of_ref": "indicator--4ca9f20c-0b29-4b24-88b6-38a96028ac24", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e9a8dc-be4a-410d-a675-cfefb17d7775", "sighting_of_ref": "indicator--bbfad868-c4df-48d1-af8c-e5d405c5a8c9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540e8966-9233-42fb-bdaa-bed9f277ef49", "sighting_of_ref": "indicator--f3638ba4-ea93-4530-bf53-1dabb5160dea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91afbb78-5afe-4469-90a6-76ae47cf0afe", "sighting_of_ref": "indicator--c5fbfdff-2a66-44dd-896c-82efce04740c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7cb13d-b2bc-4571-bcf2-56ff60f309c2", "sighting_of_ref": "indicator--f7489d0b-b645-438f-b8d0-67ad400652b9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3c8b0a-20b6-4914-8c39-e6a8ff147f03", "sighting_of_ref": "indicator--601f9de7-c1d4-44d1-9b4a-faa765f9d7a2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5cd0074-8b9e-46f8-9492-edf2e359959c", "sighting_of_ref": "indicator--59a77528-d691-416f-a921-4d5e3e843f80", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0ef8a2-13f3-4d57-bee7-40e8739f39b3", "sighting_of_ref": "indicator--0eba1621-c497-43ee-8ee1-8b731ca9155f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32b99d7-e666-4008-9ded-36617f68caa1", "sighting_of_ref": "indicator--74c5bf02-7968-449a-bc4f-33805469cae1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddfa0063-549c-4f88-a96b-5be2efee127f", "sighting_of_ref": "indicator--1c716de9-9b75-4c62-9c1b-8bab934b5513", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113a96dc-2253-48db-8998-f147066e890d", "sighting_of_ref": "indicator--7a9a75da-4fc8-4abd-aee5-167ce2b56cdf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3310df87-01af-43c8-ba7e-93e78f1a3e40", "sighting_of_ref": "indicator--4a07f4bd-03a2-4955-8d91-574dda775340", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0bf0bb-5c32-4dba-9d9a-9de543badf1e", "sighting_of_ref": "indicator--fa83058d-4e49-4de6-a8ce-51ff91719e0b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c5f6e2-7ee9-4321-be03-31982094a085", "sighting_of_ref": "indicator--fa83058d-4e49-4de6-a8ce-51ff91719e0b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea97ddf-60ee-4e54-806c-d4b6fa9b9547", "sighting_of_ref": "indicator--fa83058d-4e49-4de6-a8ce-51ff91719e0b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb0f722-0805-4664-b385-0cd899d6cb50", "sighting_of_ref": "indicator--401657b4-e059-4f85-9254-6ee7795e3ac9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e669ce1-943e-4ec2-9a63-065a2d892b3e", "sighting_of_ref": "indicator--1dde8378-7efa-46a6-9123-8776d14054e0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545ce812-801c-4d9f-8e42-29107176abc4", "sighting_of_ref": "indicator--980e524e-a2e4-4353-a6ef-baa80fae8b89", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed841c5-0cf7-4bfc-a931-b25ab07b5bd0", "sighting_of_ref": "indicator--73bbec8d-da7e-4a7d-afa6-3bde55f21444", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b419e1f-e314-4028-a159-ef1808d95244", "sighting_of_ref": "indicator--22fddb9e-279c-459a-92d1-de8109d7e811", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95728f89-853c-4f64-99b1-5659217740f6", "sighting_of_ref": "indicator--dfff77e5-7524-4143-ab77-604ba1b54bdb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af03e5d-3c06-4c46-9672-fd030d404778", "sighting_of_ref": "indicator--5add637a-9052-464c-8c19-fa1534d973a6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0197e8d0-599b-478b-b885-58dda1793158", "sighting_of_ref": "indicator--05aeb047-4451-469d-9459-81c4e65451b6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbd3c73-db25-49cc-95de-36c2d06b8484", "sighting_of_ref": "indicator--16558bed-648b-4564-83dc-e64e838f60f7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e8471a-ce43-4dbb-93f2-862b506e15e6", "sighting_of_ref": "indicator--936d64a0-405d-463c-a1ff-08a39946fac2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3d266d-912d-4ba9-b465-435e6f30b98e", "sighting_of_ref": "indicator--da3a3582-790f-41e4-911c-3288e6bcd05a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa66e51-a1af-4bd2-9a29-9a3c2c09312e", "sighting_of_ref": "indicator--75e10255-105e-42ae-87de-048c5e3e5e18", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56d4e49-efd7-4250-be0a-f16a2761c47a", "sighting_of_ref": "indicator--ce57ce8a-8d97-4de0-9535-4d57534b900b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c670a8e-196f-4b3b-9a73-fe921106dbcc", "sighting_of_ref": "indicator--ce57ce8a-8d97-4de0-9535-4d57534b900b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1aa661e-d055-424c-9cab-3a1f4a20f7be", "sighting_of_ref": "indicator--ce57ce8a-8d97-4de0-9535-4d57534b900b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992a3713-9f8d-4521-aa31-ffe2c71f9461", "sighting_of_ref": "indicator--df3d2fb4-3ab2-4cf4-a3d2-5ceddd8d29cf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ed42b2-ac23-46e2-b40c-f6a1675e26f9", "sighting_of_ref": "indicator--f7aa3cd2-ba34-4bf2-8a46-fe800f55b3fb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d61a87-4311-4700-a090-37598181abfc", "sighting_of_ref": "indicator--72453a89-543a-4893-8134-cebc5edcb11e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2807982d-534e-485c-ae75-342818c208c0", "sighting_of_ref": "indicator--9423c4e6-42dd-4bc9-9801-782e73c047b1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1e2de6-784d-4022-9013-6b98f3d1fb87", "sighting_of_ref": "indicator--e2e96622-8acb-4721-b271-60c70d1b6343", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadcdc12-b98b-4345-931b-9e3c714c7b32", "sighting_of_ref": "indicator--2f810074-a13e-4e3a-be0c-c69ecee7385c", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56abde5-0786-4949-90eb-c144da0c4725", "sighting_of_ref": "indicator--1d361b8b-f457-488c-bd85-e356defb902b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307fbb72-a67a-401d-877b-77ba84694bb5", "sighting_of_ref": "indicator--5446ba47-d377-4f12-ba15-e5e6fa38ac06", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a7821d-6491-4ca0-9e13-ea82d5bdcd17", "sighting_of_ref": "indicator--c7c243fe-d7dc-4c03-8c40-0977f923dca3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c050468-77c7-457b-ac2b-35f586dc06cc", "sighting_of_ref": "indicator--69623131-0305-4682-9426-414b869e252f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad13f96d-70e4-4a0a-9736-a01970d0f2d4", "sighting_of_ref": "indicator--113d3b06-f559-4a15-8fc9-1aca1a633b75", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f831a9-1bfc-4b6b-8592-4c74f0b02371", "sighting_of_ref": "indicator--4dc35e82-0029-4443-9d18-02736e424e5d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e68f08-0fd6-4b07-a03a-afee22d5442d", "sighting_of_ref": "indicator--d8c17ac1-1961-461d-b2a2-124c5dd4e890", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df35f6dc-f83c-43da-b119-640a0840a942", "sighting_of_ref": "indicator--a9ef2a97-966f-46eb-bb82-2e80c8759724", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bab371c-6828-482e-8656-46cf0c72c1fd", "sighting_of_ref": "indicator--bf760f9f-6813-444c-b1a9-a4d4f7ee5994", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d689296-d47e-4bad-b396-734344bf1486", "sighting_of_ref": "indicator--d987861e-e5d3-4f1a-aa5f-32f110479f9b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a1923d-6329-4389-9b33-71d9ebd031dc", "sighting_of_ref": "indicator--643e68cf-6cb8-4c3a-aef2-1a9e43e6686b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281a32bc-1fd3-4389-89d0-7ccdf6cc3347", "sighting_of_ref": "indicator--643e68cf-6cb8-4c3a-aef2-1a9e43e6686b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898d3a9e-8092-4c16-8913-ddbd50077407", "sighting_of_ref": "indicator--b45e2815-e8da-4f71-95b8-f5feb5fb1782", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80871600-fd9e-46c0-88d7-cac3837e55bb", "sighting_of_ref": "indicator--b45e2815-e8da-4f71-95b8-f5feb5fb1782", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb217da8-aa49-4123-aeab-705ebb84c3ad", "sighting_of_ref": "indicator--489fa19b-2502-45b3-a0ee-26b31cf13e5d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc401e93-6ee7-4b88-baec-465a9dde9e1e", "sighting_of_ref": "indicator--489fa19b-2502-45b3-a0ee-26b31cf13e5d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd1ab17-c474-4100-b870-cc6cc77a0a09", "sighting_of_ref": "indicator--426a257e-6ac3-4820-ae31-e0ab7b3485bd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80839572-14de-425b-abc1-9ee594030e9f", "sighting_of_ref": "indicator--426a257e-6ac3-4820-ae31-e0ab7b3485bd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938c746a-6d0f-4f68-b766-b71f0dbb2463", "sighting_of_ref": "indicator--6331fd5b-31a6-4ca6-9e3e-486a67194b83", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffae4cbe-1cc9-4887-b488-217b58d71595", "sighting_of_ref": "indicator--1f3e9158-238a-4b8d-8b4e-7ad0e906b089", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ead3d16-019a-45bc-b342-527fbb82c114", "sighting_of_ref": "indicator--1f3e9158-238a-4b8d-8b4e-7ad0e906b089", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0b9ef8-0748-4370-9fd1-b3cbf9e90d20", "sighting_of_ref": "indicator--2d731709-27bc-4c58-bb61-4083625f5c1d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8917e371-c9b2-41e5-9322-898d2e9e7d48", "sighting_of_ref": "indicator--c9cb09a5-932c-40b3-a966-d08a956e1f36", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413f9321-74b0-49e3-a5f6-11eba7463402", "sighting_of_ref": "indicator--c9cb09a5-932c-40b3-a966-d08a956e1f36", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47685ac-fc97-4307-baea-f8bc82e03ed1", "sighting_of_ref": "indicator--c9cb09a5-932c-40b3-a966-d08a956e1f36", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5513730c-6484-406c-a4a3-851e2ac7ae33", "sighting_of_ref": "indicator--99070773-66dd-401b-810f-7e02b19d7560", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f6f43b-2772-4b38-ae68-b9f0b3ffbdb7", "sighting_of_ref": "indicator--e47f194d-c225-4689-9d45-612e3170582a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33ae918-50fa-46c6-97d3-045860e58924", "sighting_of_ref": "indicator--49cdaf91-14c7-4305-8a4d-8eb474d8e03d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d304f6a-fd8e-4425-ae11-b9bda9490a0e", "sighting_of_ref": "indicator--49cdaf91-14c7-4305-8a4d-8eb474d8e03d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961f349a-92f2-4402-8258-d42f402d310d", "sighting_of_ref": "indicator--644b9a8b-a211-4752-be88-89fa034a64cd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bc26ee-03f1-4b73-a53c-d3d2c21a9098", "sighting_of_ref": "indicator--644b9a8b-a211-4752-be88-89fa034a64cd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff4e723-31b2-46cd-b92c-c2b978bc754f", "sighting_of_ref": "indicator--360dae37-2718-44e3-8529-cbd629e5b30b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a9b730-e1b9-424d-bef3-8556d544dc2b", "sighting_of_ref": "indicator--d97143f5-f587-4327-af2d-b704c9868a60", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13967022-419c-4915-a82f-f2532f487c3f", "sighting_of_ref": "indicator--d23747b4-4369-48b3-a6cb-ca610e0acdc3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97649b66-7074-477a-8e27-07cbb845b1b3", "sighting_of_ref": "indicator--d23747b4-4369-48b3-a6cb-ca610e0acdc3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b87496-8b8f-45c3-9862-838670d1b777", "sighting_of_ref": "indicator--0275407b-15e8-4d16-938c-e947fb5571b4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5c3af1-f93c-4f8d-925e-fc0cdbf413c3", "sighting_of_ref": "indicator--0ba39a44-bfdd-47d5-929e-68010d0664fc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb8247f-d589-45e8-97ef-0464c3a262ee", "sighting_of_ref": "indicator--118a8af7-b61b-436b-89da-147dd431c71f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b589f22d-4a86-407b-99d3-32a711e18cf7", "sighting_of_ref": "indicator--118a8af7-b61b-436b-89da-147dd431c71f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328e33cc-6377-4a0b-8ba0-b8a85b4b2d0e", "sighting_of_ref": "indicator--118a8af7-b61b-436b-89da-147dd431c71f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7739ab89-bb26-425a-aa26-4f5045bd2daa", "sighting_of_ref": "indicator--7c885ca0-fa1b-4502-b332-3a5c083bab2a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c01d65-4540-4b12-a7da-5ebccbe18dc0", "sighting_of_ref": "indicator--7c885ca0-fa1b-4502-b332-3a5c083bab2a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28498075-46be-44e6-9edc-be370fcfc60f", "sighting_of_ref": "indicator--49be491b-530b-4850-90cd-d72132bff50c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343ddf96-a20f-4412-82f3-f984656b7cb9", "sighting_of_ref": "indicator--057ebff7-7e21-4012-9094-23695c1b83ad", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8b60f1-4fd3-488f-af87-f34f1d384518", "sighting_of_ref": "indicator--057ebff7-7e21-4012-9094-23695c1b83ad", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c7b0df-8120-4020-8a3f-b6305efa8fa6", "sighting_of_ref": "indicator--29f036a3-c02b-4382-b99a-9e56e6b68df5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3964a929-8214-4769-b300-bae0b5ebb37d", "sighting_of_ref": "indicator--9b4cb814-ea7a-4129-83c9-017e2d609124", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd2ea6e-b5ca-4fda-bd6d-641ab48f2960", "sighting_of_ref": "indicator--abef78d0-0ea8-479b-9fba-dd671bdbca9d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc61ce6c-169a-48df-ba63-2b73ca0a67c0", "sighting_of_ref": "indicator--abef78d0-0ea8-479b-9fba-dd671bdbca9d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c119e6d6-6c91-44af-a83d-e3324dbc0be9", "sighting_of_ref": "indicator--abef78d0-0ea8-479b-9fba-dd671bdbca9d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e68e1f9-dd2d-4170-b2d1-a66f604bf176", "sighting_of_ref": "indicator--0275a427-6ce5-4c38-81f5-62424e4d570c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d910406-2219-4a3f-96ff-aa7cc80740dc", "sighting_of_ref": "indicator--0275a427-6ce5-4c38-81f5-62424e4d570c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88370e2d-f184-408b-ba57-444f96dcc1a5", "sighting_of_ref": "indicator--3e1b9cf1-bfa9-4035-8b8d-db92e231ab9e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac9fb44-0585-46b2-851e-0b51013857a6", "sighting_of_ref": "indicator--3e1b9cf1-bfa9-4035-8b8d-db92e231ab9e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962808a9-2d55-4c7b-92dd-d844a9684382", "sighting_of_ref": "indicator--587e51b1-1000-43dc-9f28-a484265454cd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4d6d43-4eb7-47c5-a150-a44bee3870ee", "sighting_of_ref": "indicator--607d1f1d-0195-4f9b-8047-cbd234da466f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354e02ad-7a52-491a-beb1-792be4fcc5c1", "sighting_of_ref": "indicator--607d1f1d-0195-4f9b-8047-cbd234da466f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d3514e-cea2-4b13-ba5a-6cc8d972efa6", "sighting_of_ref": "indicator--34173513-0467-439c-b70a-a894997b3554", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e39c24-4703-431e-b191-38bb51164d7b", "sighting_of_ref": "indicator--34173513-0467-439c-b70a-a894997b3554", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85d319a-7b17-4a7c-a8a9-2c95e304f544", "sighting_of_ref": "indicator--2f444cdc-3066-46ab-a3f6-857b2a7453b3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7783fd-7607-48c7-a6a1-d3043babdba4", "sighting_of_ref": "indicator--63c7fb69-f6bf-4431-9d08-a0bdc98c6042", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d7ba8f-ed1e-4658-8b6c-a8c69428db8e", "sighting_of_ref": "indicator--63c7fb69-f6bf-4431-9d08-a0bdc98c6042", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e2fe71-dd70-4edb-a62c-b263648f31d9", "sighting_of_ref": "indicator--122970e8-1357-4b7f-a13b-3b4dd9d54ef9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936bb5bf-ffb3-4430-87c7-52f422f70a9b", "sighting_of_ref": "indicator--122970e8-1357-4b7f-a13b-3b4dd9d54ef9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbd4b58-5dd7-4187-9e9c-0fe1aca0b0e1", "sighting_of_ref": "indicator--2cfc3d49-21ee-4b5e-a42f-0677b91b1d05", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddfba9ab-11c2-4beb-8bf3-3046afc4eb1f", "sighting_of_ref": "indicator--2cfc3d49-21ee-4b5e-a42f-0677b91b1d05", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6806adb4-8381-4eeb-b4f6-041e27bafaa4", "sighting_of_ref": "indicator--faa1f2ea-35e3-40d1-bc8d-b943edec3ecf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc8b318-b1cd-48ad-b6c0-16c293b240ca", "sighting_of_ref": "indicator--faa1f2ea-35e3-40d1-bc8d-b943edec3ecf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ce03fe-89c8-4463-80a5-a54eb1eb66ab", "sighting_of_ref": "indicator--62e8b60b-262a-4071-a6b4-c139fc1805f4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f2ebd6-be51-4f33-9bd2-cb606fd7189b", "sighting_of_ref": "indicator--7edbfaa8-1793-4e31-8af0-91430ed0dc23", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152bb023-cfdd-403e-87be-26f312376a4e", "sighting_of_ref": "indicator--044888e3-83dd-49ab-95c0-d8cf8caebb2c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1b6aa5-2107-4840-b6cc-6f9d5dd2f939", "sighting_of_ref": "indicator--4388e95f-e02e-4c4d-b17f-aee7db6478d7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a49855b-c182-4db1-a854-8c0d06bade0e", "sighting_of_ref": "indicator--4388e95f-e02e-4c4d-b17f-aee7db6478d7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e337fcd-3345-46db-ba83-f8a74153af12", "sighting_of_ref": "indicator--2be04857-6b91-41ec-ad1f-c424a6804317", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1e33d0-3307-4469-bf4f-8ca63a0cdb40", "sighting_of_ref": "indicator--2be04857-6b91-41ec-ad1f-c424a6804317", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a933e0-0a6b-4983-8984-9468cfa5caa9", "sighting_of_ref": "indicator--e7765dc4-074b-498b-92f9-4c268e5ccd08", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39bb2637-3d64-4e65-b7ab-c1be7bacb213", "sighting_of_ref": "indicator--e7765dc4-074b-498b-92f9-4c268e5ccd08", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45541904-0ef2-49af-8828-2ab69738122b", "sighting_of_ref": "indicator--28a88c6e-d547-4b43-93a5-cb53b71ff42a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d480b6-dab6-4ebe-ac3c-7732cb0dd6fc", "sighting_of_ref": "indicator--3b1406b0-2488-4a9d-ba7d-cdba9cf4c7b1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c8294b-a429-412e-a66e-9797039a28f6", "sighting_of_ref": "indicator--142790d5-8e9a-4ca9-9006-ee319e956d38", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c458b81-26b6-439f-9404-4bf7bb4d6a3a", "sighting_of_ref": "indicator--142790d5-8e9a-4ca9-9006-ee319e956d38", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22d5e68-1731-4014-8f89-77a6f2361410", "sighting_of_ref": "indicator--009b7bf7-0e3c-4648-b8ac-cb329b0b0ba8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329e309f-ff8b-44a1-a4e3-8a78864f740e", "sighting_of_ref": "indicator--8550cbb2-7cf8-4e28-b5bb-7725c556e5c6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6352096-0925-405c-8746-ea00f7fc31d8", "sighting_of_ref": "indicator--2bd790f8-925a-4ee0-805a-4b3d19f73177", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a0c66b-cddc-4e3a-be33-64137b24a45b", "sighting_of_ref": "indicator--2bd790f8-925a-4ee0-805a-4b3d19f73177", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ceb69a-1b63-4a3f-a9a1-d76998c3feab", "sighting_of_ref": "indicator--79d6172d-9acd-418c-a93b-85ba31814ccf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ae5721-bc5e-4a96-b7d5-52b744d9a04a", "sighting_of_ref": "indicator--79d6172d-9acd-418c-a93b-85ba31814ccf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e68ac4-ce3b-4018-a86e-f47543450459", "sighting_of_ref": "indicator--33ddf616-4eed-47bc-8127-45e5b7c0f77f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7547e837-d50a-4170-ac8b-b6d4ad977650", "sighting_of_ref": "indicator--33ddf616-4eed-47bc-8127-45e5b7c0f77f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e72224-09da-4eda-8c14-7f0e7ef9fcfd", "sighting_of_ref": "indicator--36c9f31b-8ade-4575-84f9-52524a229851", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65356e5-d5fb-4ff4-a6fc-3be6a0fb5d84", "sighting_of_ref": "indicator--fd81730f-dcef-4072-8b46-8f206ba75525", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f010e24-79ce-4f4d-a66d-c7068d789a97", "sighting_of_ref": "indicator--63dd92b3-00c8-446c-a452-45f11f903298", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8018ba91-fd25-4f99-8453-9077f5705db9", "sighting_of_ref": "indicator--63dd92b3-00c8-446c-a452-45f11f903298", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5435de3f-5318-4cd1-acff-e7490e9e7156", "sighting_of_ref": "indicator--de533dd6-587e-477b-b96a-f0f27a843570", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a970cb-72b6-4775-a9c6-9c11b6005dc2", "sighting_of_ref": "indicator--de533dd6-587e-477b-b96a-f0f27a843570", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9546d9b-e5e9-4a4b-ad00-65901d4f148e", "sighting_of_ref": "indicator--d4633ddf-d412-4659-9d38-c81d5fd056c1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37db2cc-ea5c-453b-91db-fc93123c4b78", "sighting_of_ref": "indicator--cec621e4-e0db-4b03-b87c-02c727692d16", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757a807f-ced5-4a46-9e14-c4bd126ea1af", "sighting_of_ref": "indicator--cec621e4-e0db-4b03-b87c-02c727692d16", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb069f0-2695-4197-a3d3-abd8572b04d3", "sighting_of_ref": "indicator--3b64287e-5fb8-42de-97e2-54f076988c0b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4239aa13-c893-4866-b42f-839bd931e2ba", "sighting_of_ref": "indicator--3b64287e-5fb8-42de-97e2-54f076988c0b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb26d35-87b1-48fc-a127-6bc509980fea", "sighting_of_ref": "indicator--deb722d9-6a21-4287-b265-239fc971da69", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b19a40-690c-4d3c-ad46-aac1e81a9b68", "sighting_of_ref": "indicator--deb722d9-6a21-4287-b265-239fc971da69", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee8398c-ba76-449c-b4df-ed8796d46ccb", "sighting_of_ref": "indicator--140010ce-12fa-4dfc-b077-eceaca9ab4ea", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d5fae0-844e-4010-bdc1-5504f30cadb6", "sighting_of_ref": "indicator--67bc09d8-7118-442b-b3bc-b75a2525a0bd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c15539-ed07-4f14-a2b5-80a484f481eb", "sighting_of_ref": "indicator--4de80d9b-dfe4-4530-983d-4a5fd9c80c56", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3a2e0c-b771-4e66-89a6-86c0459671cf", "sighting_of_ref": "indicator--081f0768-8aa8-48db-8079-82513a3afb8a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19944333-3094-4ddf-ad3e-5daae5c5472e", "sighting_of_ref": "indicator--081f0768-8aa8-48db-8079-82513a3afb8a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c418901a-3d32-46cb-abac-cc10e0f04c83", "sighting_of_ref": "indicator--e8369216-e40f-4069-8996-f65b653a9460", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5a70d7-9983-4019-a17a-ceb3f462e34e", "sighting_of_ref": "indicator--a257ba80-b25d-4ff3-b075-a663b31d7799", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d042a197-5162-45f8-9a84-075a6e9686df", "sighting_of_ref": "indicator--c7104b58-3454-4b97-9b6a-da29f9a22945", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e6aa32-d7eb-4dca-85a5-6c5a8c8867ed", "sighting_of_ref": "indicator--c7104b58-3454-4b97-9b6a-da29f9a22945", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf6888e-3150-4254-8d41-674cb0ac77a0", "sighting_of_ref": "indicator--df9d55b0-72b0-43e6-a1e2-39812cb940d2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d157b2-9b56-4094-96e1-bea8705dd427", "sighting_of_ref": "indicator--3d22aa76-5f91-4857-afd3-333727f42a02", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3875f678-a05c-47c0-87d6-aa405d8cd1f9", "sighting_of_ref": "indicator--3d22aa76-5f91-4857-afd3-333727f42a02", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367f7661-8678-48e0-bd7b-3781d43071fe", "sighting_of_ref": "indicator--8588d9f3-0e4b-46f6-baa3-5d8f06e44524", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d7bb1d-4542-4921-8363-9a7c69fdbf71", "sighting_of_ref": "indicator--8588d9f3-0e4b-46f6-baa3-5d8f06e44524", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b915d6-9a6d-454a-b9c6-517a1348091a", "sighting_of_ref": "indicator--ae7a6547-892a-48cb-8be1-067f6d23d056", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3acc3c-d20e-43a6-bf3b-8052ccfe946d", "sighting_of_ref": "indicator--ae7a6547-892a-48cb-8be1-067f6d23d056", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c6c7884-580b-45cb-8b2c-cb6d2af031e9", "sighting_of_ref": "indicator--19d41e17-d3ea-418f-af3a-362fa43625be", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a571d2-09c5-4bf9-a0e4-b2517b9766f8", "sighting_of_ref": "indicator--cd83fb76-f160-46d3-92b0-5507ab6372c4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e068a360-9950-4baa-bd5f-5bec649c8fda", "sighting_of_ref": "indicator--58afceec-36a1-4688-8c8c-ca7b75eb74ca", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a859ba49-f36b-411d-8162-ac44eecb671e", "sighting_of_ref": "indicator--58afceec-36a1-4688-8c8c-ca7b75eb74ca", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11091eba-767d-4684-aefa-d9ca37826e12", "sighting_of_ref": "indicator--6346cb48-9d42-44a2-aedb-820d54ca90ed", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5cc9f91-087d-47f7-8d52-3ca3f26e1462", "sighting_of_ref": "indicator--b1318b85-beb8-4a58-b95b-9eeca8fa64aa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23df8859-84f5-4d3f-93a2-c0c52e60e450", "sighting_of_ref": "indicator--fdb5b861-00fb-443f-a1a2-b60babcf9639", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06c3814-7e6c-4163-9c3f-9067aa95e687", "sighting_of_ref": "indicator--fdb5b861-00fb-443f-a1a2-b60babcf9639", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9b3a68-9d71-420d-b345-ed79b879c2ea", "sighting_of_ref": "indicator--df5b168c-f215-4ba0-b556-bb9334ba6c41", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af4aa99-6712-4cdd-bf78-ed41eaf75bd8", "sighting_of_ref": "indicator--9e589c21-c7db-44ab-ab6b-a6d9b638f845", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab153f75-0d9e-4d69-b7db-2c25b52057fa", "sighting_of_ref": "indicator--9e589c21-c7db-44ab-ab6b-a6d9b638f845", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2476e10-6321-49b5-a3dd-fffcdd45d21d", "sighting_of_ref": "indicator--4178c2ae-3d1b-4848-b204-f12b416a1e1e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523cecf6-552d-4af9-8c7d-3ca31b65b361", "sighting_of_ref": "indicator--4178c2ae-3d1b-4848-b204-f12b416a1e1e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1490bf92-58b6-45d6-a9c6-345d87523718", "sighting_of_ref": "indicator--fbb61e4a-56d1-46da-bd45-75d47901f2a9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1744de-0e8d-479d-8c2a-a2407a8da6f3", "sighting_of_ref": "indicator--0b5cb097-8e2d-4518-8185-d9032d2393e6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8ce12b-ec4d-476a-96f4-719d05c7d0ef", "sighting_of_ref": "indicator--04d90e57-1d79-4848-91cd-caae0f0c5483", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4328d6-724c-4236-8afe-82c2a116797d", "sighting_of_ref": "indicator--c61c1f31-e2c8-42e0-b8f3-63c961f00626", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc16902-6aae-432a-b08f-f6bd253b62b1", "sighting_of_ref": "indicator--6ece1589-7661-4b58-8f58-0137f82ece27", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5398af50-df5d-40a3-b3a0-eed3f0f89fab", "sighting_of_ref": "indicator--4e22ac86-9e12-44ae-9ae9-33a380b59b2d", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f45686-b880-47d9-90fa-82bee2f017aa", "sighting_of_ref": "indicator--f43a71b2-6460-4958-b8a8-6e7c6009041b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2d8148-bdb3-4b62-bbe3-3d0420ca6882", "sighting_of_ref": "indicator--9def0dad-cd1f-4818-8d54-1735e5b50951", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c00b9a-b44f-426c-a547-b61b114014ae", "sighting_of_ref": "indicator--3e86540d-52c1-4726-97a1-28c13e240389", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d22d75-2893-4089-aef2-306ecbddb347", "sighting_of_ref": "indicator--94384216-b8fc-4223-9785-42aca0aeb11d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733ee48e-2cf4-4ccf-8354-a2877241e625", "sighting_of_ref": "indicator--08b66be0-ed34-4a17-b34a-03e6cae08670", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9353ec-7179-48d8-a77e-6493f0718f6e", "sighting_of_ref": "indicator--c278a272-98a1-4ef3-9832-486f85a8103c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc42d160-ad96-45b8-aa8c-271e2afaa03f", "sighting_of_ref": "indicator--a82ba55f-c333-496a-98b8-7cfeddfded53", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81888c1-da1b-4344-97ed-6950b9477d1c", "sighting_of_ref": "indicator--93d6dbcd-47fd-4b8e-ac57-98c2484a1a01", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5515b8be-badf-4301-af59-2b08d4d35c1e", "sighting_of_ref": "indicator--8857dd1c-f8f8-4d5e-bf64-953c3984c8ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80628e2-7468-4bcc-b787-9f5d76946bec", "sighting_of_ref": "indicator--96834f41-50cd-4a11-b841-041094bb87e8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124e7564-bf0a-4ef6-8db3-f072decdfaa8", "sighting_of_ref": "indicator--2a74fde5-16ff-49c5-a67c-630145841137", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e51be7-2abb-4842-86f7-f1925805d6ee", "sighting_of_ref": "indicator--83fabcd0-d7b1-4eeb-8757-345456d98073", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ae5184-215d-496c-80e2-8896000e70ec", "sighting_of_ref": "indicator--8a330f64-860e-4cb4-8abc-dbdb7e292a8b", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eecb478-3fdd-4041-b5d5-75a23119ae68", "sighting_of_ref": "indicator--fc1efce1-f670-4c61-9217-35d43d70bd54", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23eca328-90f6-467e-a4f6-4d7fb868f3a5", "sighting_of_ref": "indicator--084ebeeb-6c1c-4213-be64-e422891b940d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d77449-301c-4e68-a95b-0a231559b12f", "sighting_of_ref": "indicator--fa547d75-5546-4068-a7a6-d35faa7cf3d6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc561f1e-650c-41a8-b407-87c731bcb43e", "sighting_of_ref": "indicator--48e9fc31-a3b2-4312-8d6d-f4b6777e3d00", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765dd8af-e94f-43e8-9a96-4404698d9ef4", "sighting_of_ref": "indicator--f328d893-f7b5-4145-b68b-3693fcba7769", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67735eff-6679-4a9b-a8e4-ddb861c43112", "sighting_of_ref": "indicator--4ad446ea-28de-4008-9371-b937c2af14df", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03146e1-3d62-4e4d-b65c-534803595a6e", "sighting_of_ref": "indicator--b1f246fc-a903-43d6-984b-4a96408688da", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1edaa08f-116a-4563-b4e2-d67e94ba500c", "sighting_of_ref": "indicator--4e5e6ba9-2c7e-44d5-8f23-3e0714fc0d30", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e882f426-798c-4336-810c-fe3a3d802626", "sighting_of_ref": "indicator--5b1085c7-19c6-4de7-a5e8-ed6b4d15d325", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13359cdf-0066-4d28-9c67-726a31cd671a", "sighting_of_ref": "indicator--55c6d6d3-9aa4-4eec-88f1-5417860368ba", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b0443c-77c1-4286-8b3f-0b2cc984b8d1", "sighting_of_ref": "indicator--ac0fdc09-5dcb-414b-8ec2-f8556b74aaf1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532ee01c-5307-43b7-bb65-b7d2e98d44d8", "sighting_of_ref": "indicator--0522bf3c-22ef-4a0c-b531-02593f2951b1", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd101bb0-39b9-431d-83aa-56bac21f25b5", "sighting_of_ref": "indicator--b22811fd-388d-43f5-82ae-3cf9c683c304", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917e7a5f-e1e5-49c8-8b9d-0207a431e449", "sighting_of_ref": "indicator--9306bfa2-39a6-4d7a-b265-11f507ef9dfa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c572bd-75b6-4777-989f-03e556974e68", "sighting_of_ref": "indicator--88fa581e-a3f5-4449-8f45-e9c21ac14508", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a08915-d565-4ca3-9f5d-3c0262c8ac60", "sighting_of_ref": "indicator--4500c84c-79a7-4f64-a494-0265ecb165a0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b176a37-eda5-4bf2-88bb-3d232d3d69e9", "sighting_of_ref": "indicator--04e95735-afe4-4d9e-b8a0-5d434528c1bf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d6a0a6-ed37-470d-ae78-5e7b6bf79004", "sighting_of_ref": "indicator--36078ea7-b5be-41e9-9ef7-a5022d699807", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f22e69-be33-4cab-a28e-8043ae85f0d9", "sighting_of_ref": "indicator--d04a5c1d-089b-466d-8718-cf230ed5389f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad6e943-b40c-4553-b3e5-e4458ae7741e", "sighting_of_ref": "indicator--05e47c78-9cbd-471f-81ea-45b73c510f56", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd174355-28bd-4cf0-bf4d-2dcc51517460", "sighting_of_ref": "indicator--cfcdf4aa-1c47-4db3-9e6e-c42530dc3ed9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e014c2-4d95-402b-ae29-d7e6675fee60", "sighting_of_ref": "indicator--5fe1b699-6179-43e6-9d2e-d2dddbb5cc05", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97a6c08-c755-48ed-a9ae-9a25474e039f", "sighting_of_ref": "indicator--b515079f-c374-4e05-a30b-b94b7a965c92", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1987168-b33f-4900-accc-85c0ee3995fe", "sighting_of_ref": "indicator--048d2778-c1c2-440f-8cdb-5b3c62b033f2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4988f6db-0cf8-41f8-b124-64444e5f4d38", "sighting_of_ref": "indicator--711e2866-b396-4e77-8a08-b881ef4b1f1b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989e74ce-4683-44f4-8518-da90791c2783", "sighting_of_ref": "indicator--82c7433a-4d02-4fcf-93f6-c0f179b484a4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ddb6c5-40b8-4b62-8eaa-212ef5979764", "sighting_of_ref": "indicator--82c7433a-4d02-4fcf-93f6-c0f179b484a4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1217e776-d1b7-4b47-a1a0-b089e119e3a5", "sighting_of_ref": "indicator--d0eb89f7-ce52-4292-b223-fde411c3ad80", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c256f5c0-83f6-4f1b-862d-f50ec15e5a6d", "sighting_of_ref": "indicator--366e9ba7-b39e-45ef-a5f8-e76a87823d59", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e0639a-4b43-4476-bf0e-69b5d7dbbdc2", "sighting_of_ref": "indicator--4c0db490-b1bf-4ec4-bbb3-a80bd1236036", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93127186-fd32-4baf-b6d4-e0059f40eefe", "sighting_of_ref": "indicator--06915231-cf22-426e-b5da-3f8fc2c4cbfd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68fadfa9-d015-438f-862d-1c6a0c0eed42", "sighting_of_ref": "indicator--31a92531-0a6a-4ae1-b052-7b3311ea5e07", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cbeaa2e-3a0f-413b-a90f-e59a7a2037df", "sighting_of_ref": "indicator--f28868a1-375b-4150-9f39-f01daf47b446", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c101cc-7b89-4db1-a82d-0a3687ed6035", "sighting_of_ref": "indicator--fb65dccc-7b90-424e-9ba3-33e7d749a099", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46678ba-88c3-4089-afd3-8ddeca657c18", "sighting_of_ref": "indicator--5e467f2f-d2e8-45c2-a0a7-e531c5de6947", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f9d121-f418-486f-a185-b1ce10978ea5", "sighting_of_ref": "indicator--b95e4546-65c6-4d1e-9279-4fdc72250904", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ec984f-bfcc-4798-ba3d-398e45557a3a", "sighting_of_ref": "indicator--e3a228af-337c-4b40-aa15-8bd8019068e4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b4fcc5-2157-4b3a-87c5-deb3f369de00", "sighting_of_ref": "indicator--5067ae9d-7ff2-47b2-b72d-fa9d17b336ad", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2b1159-80ab-49a9-a886-212fb02d294f", "sighting_of_ref": "indicator--5067ae9d-7ff2-47b2-b72d-fa9d17b336ad", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1de746f-d4e1-42a3-89b5-dc86d784e830", "sighting_of_ref": "indicator--86897e3f-72ba-42d7-9514-3a066f1faac8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d7aac6-293d-40d8-a2a2-f1d2f1638d65", "sighting_of_ref": "indicator--12e22ded-7074-4fde-aeda-1d3e855d08f8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2f4f3f-24c7-482d-a5c5-9f8fd4bea97c", "sighting_of_ref": "indicator--4cf9e23c-84db-46b4-85a2-bbfc3d33192c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6306ed7b-ee4b-494e-bca4-615ccfabaca9", "sighting_of_ref": "indicator--832fd344-e7aa-4de8-b0ab-f481777703f2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122591e1-0b91-422b-8604-e3ad97fe6f73", "sighting_of_ref": "indicator--4829d0de-3c24-4c9b-a13d-092b6a85a30b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9458a8-ad41-4904-945e-68408138eaf5", "sighting_of_ref": "indicator--4cec8062-a13e-4e0f-8e5d-d50d92588f02", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa62c200-2ebe-4def-a11b-e17dca950f03", "sighting_of_ref": "indicator--451d1cbd-d0a7-4658-a149-570e9c4814c7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f20abf-c2ed-43f8-b395-a98d616e015b", "sighting_of_ref": "indicator--488ce061-d0e3-4a6e-86b4-623b500e1f4a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac424cb-f8ef-4ad8-b2f6-a4027591c38b", "sighting_of_ref": "indicator--b4fd79e1-71d0-4829-a6e2-cd0e611b3446", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c0b35f-0599-435e-bddf-4f7b02869b30", "sighting_of_ref": "indicator--58ab3b2f-ddd8-4811-8817-9af69f245e06", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935e7b13-d64d-4fc6-a1f1-fba467449901", "sighting_of_ref": "indicator--d64fdb98-8702-4b4b-b486-489518f9ee1d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b079cf-f10f-4a86-9d32-d2fe8509d7a9", "sighting_of_ref": "indicator--1a66ac85-21e7-4882-b9e9-7f4f541cc93b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40dc19a-ab30-487a-a238-cce2b4eba4c4", "sighting_of_ref": "indicator--f613f115-1e56-4d05-bbfa-42d02758fdc2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbdc1ac-fbe5-434c-93db-70828566600f", "sighting_of_ref": "indicator--46528b65-f79a-47c0-bece-8eb673f4fae3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2603af-db6d-4e34-9c92-4fc5c08557b3", "sighting_of_ref": "indicator--2e4ae6c3-4bf4-4e54-8c87-e2f3f1d03cda", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cfefeca-34ea-4b85-b77b-881d6070766b", "sighting_of_ref": "indicator--b769d02a-ada7-4ec9-91c8-27b3e0f57260", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bf060b-2091-4c9d-811e-441809f0a31b", "sighting_of_ref": "indicator--84615140-318d-4740-ac42-c9e9c4f6b28c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59e27ee-1053-4941-86d7-7098a0d13818", "sighting_of_ref": "indicator--e9cf9732-d3fc-4932-b908-263a65f8a085", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1cdc00-8cce-4004-bcb6-490d14985d48", "sighting_of_ref": "indicator--3cbb6191-deff-43bb-99bc-9776a6aac0ec", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6044f540-c866-409c-912d-84e95eaca6f5", "sighting_of_ref": "indicator--6dbd7be7-d98c-4f9e-8418-4b1eda944c27", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f72303-6ac6-494d-be03-de585a451d39", "sighting_of_ref": "indicator--87a2bc2e-b13b-4f4b-8bb6-9dd706f9dbe0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa4e63d-3ab1-4557-9332-b5809b226705", "sighting_of_ref": "indicator--8ff487ce-8bff-4f98-8184-96e68f76fe33", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8536956-1185-4863-b9f6-dfa6b5076700", "sighting_of_ref": "indicator--9e06b86e-e58f-4198-988d-2a819aa23892", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0312152-ff89-49ba-8850-f073b66ff134", "sighting_of_ref": "indicator--0e671ffc-7417-445e-8801-7789802903f5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a28621d-388a-49a6-85c1-7c0b41a0e5ef", "sighting_of_ref": "indicator--45143d12-3e63-46b4-b6c7-a9ac82b542c3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a4d4f2-802e-4e73-93d2-2d468cd389fb", "sighting_of_ref": "indicator--cd34565b-fac9-4d78-b677-e922062e927f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adca2c0e-b4aa-41dd-a348-264ea87df0ba", "sighting_of_ref": "indicator--4614a66f-eb81-49cd-95b5-76e337758a18", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa7fd80-2f73-484b-8ad1-553640148f6f", "sighting_of_ref": "indicator--0e484bf7-e93d-48f7-9984-2a87c009ba87", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9164ea06-f38a-4a6d-8d68-522c60bae20d", "sighting_of_ref": "indicator--9b4d6617-d956-4dea-a3b9-1fcc48faace0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d862ad7-9aad-4423-af08-b09abac08f03", "sighting_of_ref": "indicator--8e12e38d-46b3-4b25-9c37-a44ad61894a3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5745238c-3e87-4b91-8667-f60f7d8cb3e6", "sighting_of_ref": "indicator--8e12e38d-46b3-4b25-9c37-a44ad61894a3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d8fd02-9e6b-4de3-8e64-1f5f5bbda426", "sighting_of_ref": "indicator--dee4a653-9352-4b83-b58b-40a0f4dc709b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f242b4-3269-42bf-9481-88113a27b96d", "sighting_of_ref": "indicator--dee4a653-9352-4b83-b58b-40a0f4dc709b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a2f1cb4-039a-44e8-82a4-2e213b9ff990", "sighting_of_ref": "indicator--dee4a653-9352-4b83-b58b-40a0f4dc709b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf58648-3af7-4f06-a213-f52750f46ffc", "sighting_of_ref": "indicator--52bd2c80-0567-41ab-b42d-76263ff5c2d2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564aaee8-64c6-477d-bef0-3265d79fc033", "sighting_of_ref": "indicator--52bd2c80-0567-41ab-b42d-76263ff5c2d2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97cd5ef7-491e-4c92-8aef-81a530ca538b", "sighting_of_ref": "indicator--52bd2c80-0567-41ab-b42d-76263ff5c2d2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7d4b9a-a0e0-4f19-b55a-128adb35bf56", "sighting_of_ref": "indicator--591081e9-e540-4e49-b861-376e1858552f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba7e2d1-c3b9-429f-b789-e37d7cee0eaf", "sighting_of_ref": "indicator--e647475e-0efa-4ff4-911e-b61cb3d2bcb5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da18d259-ac54-4fc1-be34-e3d5a60c3a8c", "sighting_of_ref": "indicator--bcfc4ecf-f87d-4628-b6b6-68aec90b90ea", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1326f0a9-081f-4c36-87ae-88545665d7cf", "sighting_of_ref": "indicator--a974c3cf-51bd-495b-835c-32d436cc7696", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf478a5f-88d1-4242-a430-b82aa9e5523f", "sighting_of_ref": "indicator--9ad09752-f606-4f5a-bfdc-1362bd3d1cf4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2dfb7e-97e3-40bf-88d7-561e1d55ca49", "sighting_of_ref": "indicator--288409d8-dd53-4f50-87be-39041c8f1e4d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30eedc83-4385-4e5f-8c60-9d0425c62482", "sighting_of_ref": "indicator--7ca4f658-ff24-47d4-afad-1e194bb1e280", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7493e98-65a5-4114-9b29-0a1a682facc2", "sighting_of_ref": "indicator--13778dc7-ebf2-477e-895e-1cad667654bc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3248e6d9-03bd-4a17-b6e7-daf4b0b20303", "sighting_of_ref": "indicator--6d158436-5f80-4ffd-80c2-61934b3eda6a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--892c435a-7029-48e0-8e9d-65634e56ec6b", "sighting_of_ref": "indicator--8b47e671-a55a-4fbf-a837-158bf1868c6b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8946c5-3c0f-48bd-bbc4-a56b3f375135", "sighting_of_ref": "indicator--d4f1c74d-f754-4c75-9c24-44c0132204f7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267eae9b-c713-420a-a2b7-3e7517031939", "sighting_of_ref": "indicator--a3631047-7df5-4074-97dd-9a1c9f03d48e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f90c54-6d26-4594-80fc-d45a8ef4f286", "sighting_of_ref": "indicator--378b3e24-d46a-4728-9139-4ce91fcdb59b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231b0d8f-f1b8-49b4-9273-2b12ec243315", "sighting_of_ref": "indicator--69a53184-a780-49c1-8d07-01af6abc6baf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd66d8a4-ce5c-4c5e-9f05-656b795fc1a3", "sighting_of_ref": "indicator--986f1e02-f307-404a-8aca-96a441b500c7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85bd30f8-844b-4bcd-9d18-f77886665454", "sighting_of_ref": "indicator--a998a89c-a67d-435c-ab06-cc5259dfb5f0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56a545f-9871-47be-8539-3e41c47d5b1c", "sighting_of_ref": "indicator--5fd3d0db-80b9-49c7-aae4-b5c382501af0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915984f6-2a59-4ac1-8baa-0a4b83b849fc", "sighting_of_ref": "indicator--e37d45a3-8d7e-4e69-af9f-c0680954f98c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e800a5-aa7a-49d3-a980-7081b3d18f4c", "sighting_of_ref": "indicator--46dc6032-0536-40f9-8410-7525a5979102", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9812f6d6-e567-46ff-896b-8456346b8e6c", "sighting_of_ref": "indicator--4c1db07b-aa2b-4b9f-9381-874c17d82dd9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe8adc6-13a7-449e-ae4e-f3c33a3ccfcc", "sighting_of_ref": "indicator--329a703e-b82c-4edb-be12-396f29c00edc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61341ff5-6a98-4759-a827-7e63a7816032", "sighting_of_ref": "indicator--d509264f-c9a8-4b4a-8d00-cd3a54a03c20", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f123474-1787-4121-ba2b-64841d1358fc", "sighting_of_ref": "indicator--c5c6f8d5-397c-4dde-be86-b1b06087fd64", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a5837a-260a-497b-80bd-231e97c74e10", "sighting_of_ref": "indicator--9e9305cd-4160-4eb3-982a-3084940391f8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb43890-2d95-498f-8bcc-145ad39f1368", "sighting_of_ref": "indicator--9482d68f-cb24-4207-9407-5b79f9aaeac6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904f4c20-7703-4a7c-b6fe-0b54c4a8522c", "sighting_of_ref": "indicator--0a87d90b-2bde-4565-ab45-227ca0f96339", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a43807b-6cab-4eef-aa8a-55ce9b8a23a9", "sighting_of_ref": "indicator--88b4f49e-d800-4d35-becc-4ee9492717a1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a82dbb-901f-4d54-a2a8-bd1575414ef2", "sighting_of_ref": "indicator--ab67ae37-44b3-4060-85e7-eece13885476", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95829e3d-bfaa-4cd8-96ec-84648399ad35", "sighting_of_ref": "indicator--b7931048-e5ae-4910-bb1e-9d0c93ac8d29", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8c8af2-9637-4f2a-a985-93ac64b106ba", "sighting_of_ref": "indicator--1a6ffb2c-b108-487a-91bb-31660a346e93", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbec4ce2-e3bf-4d7d-9b9b-23c44eb53e49", "sighting_of_ref": "indicator--ee88b27c-c2da-4093-8fdd-5d7ac6788053", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b714b7-2461-430b-b9a6-5d79e592fcf7", "sighting_of_ref": "indicator--d1c09c41-afcf-4f4a-b789-73916979d80e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac3338b-0fac-411f-8fbd-c9dc6601dae7", "sighting_of_ref": "indicator--6a5da5fe-061d-4644-8f72-57718f761341", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac8b3fab-b6f4-462a-95b1-4afe93b2de53", "sighting_of_ref": "indicator--6a5da5fe-061d-4644-8f72-57718f761341", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bf2530-cd92-45ae-8c63-cd1bea03a78c", "sighting_of_ref": "indicator--6a5da5fe-061d-4644-8f72-57718f761341", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e88140-a4ae-49a5-82c6-e5e1c153416f", "sighting_of_ref": "indicator--2f095ab1-8fad-4b59-b9dd-4c12f7856b38", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd70b566-e080-421c-b9a4-a047ca4b372e", "sighting_of_ref": "indicator--1c600d60-79ba-414f-80fe-aeac925e5a6c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69332578-ded5-4424-ae7e-70a2c4dcf842", "sighting_of_ref": "indicator--1c600d60-79ba-414f-80fe-aeac925e5a6c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c5552c-73a9-47e7-9249-83cc4371aad7", "sighting_of_ref": "indicator--85f67905-355e-4eef-bb6d-5da91e2169eb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c913e7b2-f609-401f-a366-1aa78ac47e4a", "sighting_of_ref": "indicator--85f67905-355e-4eef-bb6d-5da91e2169eb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55154fa4-8b83-4b42-baa1-7ae0436e9d99", "sighting_of_ref": "indicator--21e99d10-c0f2-436a-9434-5741f58f221f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545eb21b-7072-4397-81c7-b757db520b32", "sighting_of_ref": "indicator--21e99d10-c0f2-436a-9434-5741f58f221f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16118a9-cdc3-439c-93db-0821bd9b211c", "sighting_of_ref": "indicator--1e6ad9b0-3a33-4cb0-be8a-656286c497ef", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ce0657-65ab-4807-88ce-849cb06aa56d", "sighting_of_ref": "indicator--1e6ad9b0-3a33-4cb0-be8a-656286c497ef", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855ac657-65c2-4131-97e7-3ddf8fd4aaf1", "sighting_of_ref": "indicator--2763fc94-1200-4a1a-840a-0734a5afda39", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8eb5c7b-fd5f-4bdc-b8e6-4d8e4fd1869c", "sighting_of_ref": "indicator--2763fc94-1200-4a1a-840a-0734a5afda39", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef71211a-a120-4308-90fc-62c2b8619199", "sighting_of_ref": "indicator--62e660dd-644f-4ae1-b90b-747032dc59b6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444f6134-70c2-46b1-ad96-1187f6abbadf", "sighting_of_ref": "indicator--62e660dd-644f-4ae1-b90b-747032dc59b6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e329489-0ebe-4dec-94a2-2e9ffecfab77", "sighting_of_ref": "indicator--360daecd-64e3-493a-a74f-c7019074ce74", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e213188a-4a52-4691-aa06-f35706d6d5b6", "sighting_of_ref": "indicator--9aea8fd3-a02c-45d2-afd0-3b0e288d847e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b890c9-c6f3-4e64-8e6d-95a73988a944", "sighting_of_ref": "indicator--889a4357-a0df-4f18-9bb8-075023769229", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a76d45-a40b-4d2c-bab0-d8857538e11b", "sighting_of_ref": "indicator--e407ae50-dd29-4645-aa13-9604dc86f94e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73590e4-3dbb-46cf-9cbf-3ead4d357aeb", "sighting_of_ref": "indicator--e407ae50-dd29-4645-aa13-9604dc86f94e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2270426-2532-479c-ab86-229ce612e9cc", "sighting_of_ref": "indicator--b55103ca-a2fc-4ca7-95dc-a3a08321f1a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc23e374-95e6-4139-b730-47f47a3fc992", "sighting_of_ref": "indicator--3ef20428-8bbc-4df8-806b-62d11cca8402", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4bbdd0-fbbe-494b-9b35-e27fb9f079bd", "sighting_of_ref": "indicator--7d3cb80d-0d8a-4880-972e-c8f7c32d91ff", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a194a3d3-6da1-4427-8ca6-597374baaf8b", "sighting_of_ref": "indicator--7d3cb80d-0d8a-4880-972e-c8f7c32d91ff", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730e56a7-33d1-49be-acf9-48466b8ac526", "sighting_of_ref": "indicator--14705fb3-88e4-4cd8-8e8e-1b3311085c06", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ffa26d-ed93-4b54-9ec4-81280f1ce424", "sighting_of_ref": "indicator--8c292be3-c843-4e9b-bd15-b44255989fd1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566ad3b3-f87d-4071-85c2-1775e6059d79", "sighting_of_ref": "indicator--437cb869-15f1-42f4-8329-d6309cc44f37", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3dc6b5-80b4-4e85-a942-823f041b9994", "sighting_of_ref": "indicator--437cb869-15f1-42f4-8329-d6309cc44f37", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa40745e-fca5-4ab8-8eaa-90f23f4041ca", "sighting_of_ref": "indicator--0f702da7-862e-454c-9470-521e62a8f582", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3a2a2b-8a93-4666-b165-5b4224dc9119", "sighting_of_ref": "indicator--0f702da7-862e-454c-9470-521e62a8f582", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00116309-5c20-4b9b-9d76-b19fbc3ec120", "sighting_of_ref": "indicator--2a64c3de-daa9-4aa7-b005-5063d54730ee", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fad5fe-562a-4a72-b956-0320d2e323e1", "sighting_of_ref": "indicator--44a08672-6d2d-4dfd-ab1c-f7bc4805c65b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb957e8-ef64-4171-881a-0c8ce4a3221a", "sighting_of_ref": "indicator--43b62acc-ec7c-4dcd-9181-31a963a1c196", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107bfab3-5752-46a6-8c66-a10ebc2a6cb3", "sighting_of_ref": "indicator--24cd4e56-5bc5-438d-9114-72e4a7cd1767", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e4fba3-c082-401f-91c9-de303c4d60e9", "sighting_of_ref": "indicator--d67e8672-af4d-4a41-b929-b96a79994d7d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b52cac-742a-4c05-8ec6-c60574db5951", "sighting_of_ref": "indicator--e1f75c02-3dcd-4cc9-ac7d-e689de3e63eb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd70179c-92fd-43e1-9448-c49bf1952d1d", "sighting_of_ref": "indicator--e1f75c02-3dcd-4cc9-ac7d-e689de3e63eb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231e9858-dc72-44e1-8634-c57692a99da0", "sighting_of_ref": "indicator--1ceb53b8-eafd-4607-9608-c5e0e7c11525", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e098541-fccc-4be3-8a49-9298bd20f807", "sighting_of_ref": "indicator--92dd08e6-f94a-4a41-97a4-2556cc0edf56", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e754904-0d9c-4b9c-961e-5532bed8467a", "sighting_of_ref": "indicator--92dd08e6-f94a-4a41-97a4-2556cc0edf56", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0869348c-14d4-4daf-b5b8-f76ca8f94fd5", "sighting_of_ref": "indicator--16e582df-6c26-4190-bc87-40a996e20b21", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4a4f41-c5ed-49a3-9e70-2dbc2b953c73", "sighting_of_ref": "indicator--909aac69-e4af-4462-ba72-31c3e6dc89ad", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce00e87-ea7a-42bf-abe4-8ef2ca60eec2", "sighting_of_ref": "indicator--c0897c1d-5aa8-4de4-91fe-e48dfd4bebed", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1ef774-84f5-4680-ad01-4a99e5def927", "sighting_of_ref": "indicator--af5e153f-be9d-4fed-8969-22a4a032cf39", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88d5ec0-5b94-460a-8a49-18231b9a80ff", "sighting_of_ref": "indicator--af5e153f-be9d-4fed-8969-22a4a032cf39", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bc83e0-9a91-4420-8ffc-00fc3d5c6b05", "sighting_of_ref": "indicator--1e846e5d-bda0-4d34-9417-6e39e7eb6986", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c4f286-eb83-47aa-ae38-63f9187c4e31", "sighting_of_ref": "indicator--1e846e5d-bda0-4d34-9417-6e39e7eb6986", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a393aafd-88a1-4e5a-95bd-51e5fec4426e", "sighting_of_ref": "indicator--842a084e-b79e-4104-adbd-ee3818d4c83f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6001dd48-7723-4953-82c2-3dd3dbf04b26", "sighting_of_ref": "indicator--35920130-d94b-40d2-8b55-5e32a35ae863", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f55be2-37a9-44c3-b849-334d9efaf3a2", "sighting_of_ref": "indicator--70be6d0f-1a44-4a2b-953c-b3bc22744702", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd1b462-a24d-4e69-b00e-d90c71430130", "sighting_of_ref": "indicator--99562523-730a-4add-b83f-44a2f76e6ce6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e6d982-4aec-4745-b498-0ccb4b78a9cd", "sighting_of_ref": "indicator--077a8c44-2655-4257-94f7-b10281aa404b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61b3143-d04f-4aea-8886-05127f719bf9", "sighting_of_ref": "indicator--76fee6d2-3849-42fa-a605-eb878e9d1209", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85488f0a-b29c-4568-8137-f41b17811d74", "sighting_of_ref": "indicator--8dfaf947-a2a0-4941-bc85-0a147fb7c2a8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074e151e-7b0f-4550-94b1-b59b765494aa", "sighting_of_ref": "indicator--8dfaf947-a2a0-4941-bc85-0a147fb7c2a8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f0f19a-8e50-4759-8851-18b53263bcc1", "sighting_of_ref": "indicator--27a0ca3d-f9b1-4e2b-89ae-aed7c55d14dd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2abb1a-82c7-425a-b584-81a1e006686e", "sighting_of_ref": "indicator--1a655ed1-8393-4199-8921-c5769d0a0313", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30956bf-d280-42f2-b3c3-2459304c9258", "sighting_of_ref": "indicator--d3a1b8d7-6afb-47b5-b92a-ba789752f8a6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587ec350-b004-41d6-8e38-5606fde4b806", "sighting_of_ref": "indicator--0e8ced30-eaa1-4440-a726-76b759471e6c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c1f1e0-b79f-4ba2-84ac-0877c2b9410f", "sighting_of_ref": "indicator--e6a24eaf-008e-46d8-b093-d3f84e11927f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdf31df-f030-4c73-a3e4-c92a1dd536de", "sighting_of_ref": "indicator--8d3bb166-f7ab-41b9-89e1-785ba780e9c8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6438ae7a-530f-413e-b8e3-215a195c50da", "sighting_of_ref": "indicator--2d3517bb-8b7f-470d-a819-722ec525b78a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46447ab2-6656-47fc-8b35-932d0e99b215", "sighting_of_ref": "indicator--7fa01595-69b1-4f56-973a-05a01823f847", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e18632-973b-4edc-b8a5-26a3152b435c", "sighting_of_ref": "indicator--7fa01595-69b1-4f56-973a-05a01823f847", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ebb2c8b-12d1-4e16-b7e8-4c4f7a573a02", "sighting_of_ref": "indicator--d6ea76ca-8500-4809-9f3e-357a507744ce", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36a834f-71ee-4157-857d-6e709219b015", "sighting_of_ref": "indicator--35e05bf4-0a2b-44a8-bf89-19afb54dcf97", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e75bb0-18c8-4820-83d0-67a16b67acf5", "sighting_of_ref": "indicator--e8f70e68-5691-4d10-a356-6adbd679a22d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c28bfd-ebca-4876-ac44-d9a9f97e7698", "sighting_of_ref": "indicator--6a3e7b94-8a98-48bd-a460-ddfcd9b77515", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ec80ed-54d4-4b34-828b-a4a47ddfd117", "sighting_of_ref": "indicator--c181027e-34d5-4bb6-8eb6-70dc75c97e50", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb5aed4-6603-4d58-8fcf-8db726d7161d", "sighting_of_ref": "indicator--0f48a96c-63bc-49c0-a0b7-54748448afef", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4c009b-a6dc-49c0-9440-347153152c88", "sighting_of_ref": "indicator--551c55f1-6c7b-4127-9683-018bbb040e28", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c815c38-d2ed-4854-b02b-52411cd27a1b", "sighting_of_ref": "indicator--a552d652-de50-4956-bfb9-acb0e8f6fd00", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327060aa-85dd-4384-bdd9-620bed4a20b8", "sighting_of_ref": "indicator--d1c8d174-5ab8-4f3f-81c1-8f6985766f65", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8815810-7744-45ea-b45a-68efcfc0031b", "sighting_of_ref": "indicator--1384a616-a1b2-4c07-9ebb-b0fdf0e9a8f2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0668ff88-0de1-4e92-b29d-0fa1c1cdf6c4", "sighting_of_ref": "indicator--e4fb03b1-fe9c-4c24-8de7-17b189b79588", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c59767-23bb-4347-bb45-1fed9d0ba10b", "sighting_of_ref": "indicator--d31d9882-d03b-417a-bc1d-c8977f852847", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa0e4af-482d-4461-838e-a9953785e067", "sighting_of_ref": "indicator--be064b44-cb89-46d7-891a-753753cd400a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2266c49d-4155-4534-ab68-d7e9f38c3e0c", "sighting_of_ref": "indicator--be064b44-cb89-46d7-891a-753753cd400a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690870a3-7ccb-45ae-a186-8d82727018e4", "sighting_of_ref": "indicator--9849e459-e596-4e04-959b-2a2340515eb8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a497c1-b5e8-47a2-b1c1-d0e4576fa392", "sighting_of_ref": "indicator--9849e459-e596-4e04-959b-2a2340515eb8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c603cf1-9435-4ca7-8b22-9317ce523411", "sighting_of_ref": "indicator--4e053d8a-c8fc-4bbe-a89a-346e2f395d14", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7290c26c-1f35-4187-842f-32ca5ff5c28f", "sighting_of_ref": "indicator--87c7725c-ffef-46fc-84ca-c578f5f1134d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f30fac-212b-41bc-ab92-8c86f7f11600", "sighting_of_ref": "indicator--2b3f05d7-2e22-4be6-bc5e-1903a796df58", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f15a22-b8f5-4b1e-9ed9-0630b03e59d9", "sighting_of_ref": "indicator--92e0a497-d57b-46a7-ac98-499575541c15", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7e5a52-0b96-49dc-80e4-6eec831a7cba", "sighting_of_ref": "indicator--d23b6607-c524-4f07-a960-a8763529daa1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970877a4-06af-49fb-9a74-eff88863515a", "sighting_of_ref": "indicator--9feac244-a47e-4739-9c48-5da99948cba0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa24efb6-541c-49df-b091-43b669cb0d64", "sighting_of_ref": "indicator--a8c42187-6259-40ee-9a74-c42da1bf390e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba528dd-1205-4b06-86a8-35b6871a00d6", "sighting_of_ref": "indicator--44303264-abdc-4c62-8b1b-9f573451c329", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76f5814-09ad-4c13-b4df-9dc441ec2f7e", "sighting_of_ref": "indicator--361b4e30-78c8-4039-86a0-e93d1706b5e1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbeb2b15-423b-410a-8c19-70c0fd918eaa", "sighting_of_ref": "indicator--361b4e30-78c8-4039-86a0-e93d1706b5e1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553f103e-8c20-4c1c-baf5-0eed69fb1bac", "sighting_of_ref": "indicator--6b3d22d5-7c12-41b0-9b68-9828212202ea", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f5d6d9-8d00-4eaa-867c-3bff7dedd6d2", "sighting_of_ref": "indicator--6b3d22d5-7c12-41b0-9b68-9828212202ea", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7a1ba9-081e-43a6-b6a1-2242acd79c0c", "sighting_of_ref": "indicator--6b3d22d5-7c12-41b0-9b68-9828212202ea", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8d70ac-2667-4cb0-afb3-4c74a49bad79", "sighting_of_ref": "indicator--fe907821-915a-4147-aa7a-6fd1da1e6c90", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456ebe09-1bd3-4737-a83c-0c2618cc858f", "sighting_of_ref": "indicator--a72cb4a2-d5ef-4c3f-9b86-ee65a002003d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc95d10-fdf2-44ae-9c2e-e44c7fd08004", "sighting_of_ref": "indicator--a354f89b-67cc-4fdc-87ee-c7f9186260fb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252bd6b4-07a9-4d1e-93a7-429f74f963f8", "sighting_of_ref": "indicator--de9551a6-8012-42ec-931c-1e5b14c38a40", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32de7aed-13ad-4003-bc6b-02ef6f9597f2", "sighting_of_ref": "indicator--022b5c60-e933-460d-9ce0-a8366751b181", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42796d03-1841-409c-82a8-05b92759ef3b", "sighting_of_ref": "indicator--f4549b02-9539-4fad-835e-e5ec2336d3fb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5f589c-0cae-43f5-ad72-2522d8cece18", "sighting_of_ref": "indicator--01cc5b3a-9f39-4412-a08d-e088ea93817f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef62da7-edf5-4409-b590-2da4c916a224", "sighting_of_ref": "indicator--3215926f-2944-433d-8d82-24a2bb57eb02", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdbf4709-c4bd-41d5-b592-ed716515ef60", "sighting_of_ref": "indicator--3215926f-2944-433d-8d82-24a2bb57eb02", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2798468-f0f1-43a9-8d1b-9f0e88c2193e", "sighting_of_ref": "indicator--10461da4-96de-4d3a-be45-a4b61c686abc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb1bb75-2169-4b96-b69b-cc0f3e6fd3cb", "sighting_of_ref": "indicator--5021f12c-2401-4f3a-a92e-830d93ab9f12", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6db36b-0db9-427b-9732-f3ea6695d85b", "sighting_of_ref": "indicator--2e558a9d-fcac-470c-8ab1-6e2e638022bb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d394362-fcee-4e92-95cc-2e83eeb92d5e", "sighting_of_ref": "indicator--2e558a9d-fcac-470c-8ab1-6e2e638022bb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7504041f-5efa-46de-adf7-a7ace409df16", "sighting_of_ref": "indicator--2e558a9d-fcac-470c-8ab1-6e2e638022bb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2404aa-d5b1-48b2-af05-73e4e0fc4d02", "sighting_of_ref": "indicator--38cb7568-296a-401f-8e2b-e8e78778375f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69893231-b2c3-49ef-b1cd-b282be774511", "sighting_of_ref": "indicator--8ef26e40-e8f5-40a5-9895-f1771a2582fe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39d047f-1e46-41c7-ab5b-0d725ae02291", "sighting_of_ref": "indicator--f07c11a8-0030-4604-b7dc-4c5bed352798", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d07bf3-6b11-4f99-8a12-fb445c17a478", "sighting_of_ref": "indicator--fe1ba458-1465-41ba-88fe-5b80bca17732", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6bdcb44-9deb-4da3-8fad-25b63ea71405", "sighting_of_ref": "indicator--9085e349-2ef8-4b53-9f47-18dd50a3533e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e036055d-fa0c-4abd-a4bf-3ed74359ba3f", "sighting_of_ref": "indicator--7d93129f-b76e-4297-9bcc-e441a8dd3bab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a529b6da-92bd-4e10-bc17-9294e830ddd1", "sighting_of_ref": "indicator--ad59c3ef-8b9c-4c2a-9eaf-dfb3d8646d42", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0850a4a7-33e9-4ead-9c3c-a8f20faa8975", "sighting_of_ref": "indicator--f2bcddf3-b039-47f4-9b7f-7e1405783494", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080eb952-02a6-4bb1-b0d0-caa328654c68", "sighting_of_ref": "indicator--f2bcddf3-b039-47f4-9b7f-7e1405783494", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f0c268-b948-41e8-8868-f7aa70a72f0c", "sighting_of_ref": "indicator--f8c73246-339c-4f51-8015-f6400a4e9ff8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20d9c0e-5072-4acf-aa14-820a5e28a6b2", "sighting_of_ref": "indicator--f8c73246-339c-4f51-8015-f6400a4e9ff8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4035a142-4737-4709-a575-3d79ae5ecd17", "sighting_of_ref": "indicator--a1d83335-5113-489e-8aec-7a8ddbe97c36", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8448d69c-920d-4f9f-8937-f920705bec82", "sighting_of_ref": "indicator--d8e0ad95-fbdf-41c7-9648-50c10d9cf7d0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff41b424-f66e-4452-b00c-7e469f1e2f15", "sighting_of_ref": "indicator--87962dd4-0516-4946-a3d3-c4cbdce6cde4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aefb07d-a9b4-4226-9233-41c9502429a8", "sighting_of_ref": "indicator--009c8d88-15e2-4f60-bc7e-41ef3d2d49ce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bdb48a3-dfe5-4c41-a471-7841ed51e49c", "sighting_of_ref": "indicator--51369c07-d4f6-45e9-89e3-718b7b0b8f93", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26078cdc-88b4-402b-9c5b-f7253e6672e8", "sighting_of_ref": "indicator--ae9a4b43-0525-4462-a1c0-5107989f0ef6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2cb851-767b-4b27-ba3f-1a54e00fe768", "sighting_of_ref": "indicator--c24376bc-8cbc-4efc-91c1-5b2e47af75e8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a32ac0f-0020-4bed-a6c2-33a719074771", "sighting_of_ref": "indicator--b0f0533a-b4e2-41db-8645-951d675471ab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1dbdc9-b9d4-4a47-9614-f23535fafb22", "sighting_of_ref": "indicator--087378a6-c8db-419f-acfe-dfa7b502bdeb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcdeeb49-11f3-49ad-b6f5-450e07e94880", "sighting_of_ref": "indicator--31b414bf-471b-42fc-b61e-9c30350a8046", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad5c069-eb67-4b61-a024-c7cd090637b6", "sighting_of_ref": "indicator--c4f85e08-9f0c-4001-87b3-38e05371e7ad", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5c7271-dab0-4f53-ab4b-10c00b5bff52", "sighting_of_ref": "indicator--9c28a3b3-91cf-442c-ae28-b3ad2fdf2a86", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e347f07-e926-46f4-850a-dba0012e8f8e", "sighting_of_ref": "indicator--448c827b-51c9-4125-9d8a-e0bc194f15cd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a1e183-e917-408a-91b1-92385fed7637", "sighting_of_ref": "indicator--41b686e9-29d4-4d87-b198-a9bc8ab90935", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae78565-6a70-46c9-9ad0-7bfe86718723", "sighting_of_ref": "indicator--472a801f-a631-4bf1-b20b-6da56ea81d88", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b509d121-2c58-4a8e-a9b9-2d3f4320c584", "sighting_of_ref": "indicator--4e70e068-2a1e-4b15-a9c4-d97f3d566e63", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6194f39-21d0-459c-8107-3be3eb5282ed", "sighting_of_ref": "indicator--9c3960cb-62d5-424f-9f88-67fd639ece67", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0135eab1-6e9d-4810-8b3c-b315940a72e4", "sighting_of_ref": "indicator--1c1650f3-8478-4636-aa77-50bbece04c0b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92991a90-9d2d-4e15-ad58-6d09e509a1eb", "sighting_of_ref": "indicator--cb3318a9-194d-40df-b6c2-59ea80c0fa3b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc9b72e-260b-4258-bd6b-7b03e15cc73c", "sighting_of_ref": "indicator--9195a7bf-b4b7-49f7-b0a7-81daedf6280e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef441f8-71d8-4de4-b40f-8935731defff", "sighting_of_ref": "indicator--6efe59c1-cca5-460f-a77b-b08329e732ac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c6ffd3b-24d8-40e9-8393-5cc7686bf7ad", "sighting_of_ref": "indicator--a4a401a9-7555-4e35-95bc-7e31780247d5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfeab88f-437d-43ca-aea4-d13b755beacb", "sighting_of_ref": "indicator--b4e4ee72-7380-4f34-886c-8020d13e73c1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91a798b-6efe-4e3b-aacf-68ac096b05ac", "sighting_of_ref": "indicator--02de9218-e909-414b-b954-30378bd3540e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fecbd79-30e0-4ef4-a51b-6b99228f4563", "sighting_of_ref": "indicator--a8b858d8-261a-480b-8b61-192ea45d7e7b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1165cf7c-996d-4823-af8b-af5ad26951c7", "sighting_of_ref": "indicator--fb5fe4d5-7d40-4989-af3d-0776523e4c67", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60e5a10-c7ba-4b0c-95e7-4a284b092518", "sighting_of_ref": "indicator--23e25a8e-3dba-4b4c-9e5e-0de52f391bed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0314bdb5-9c93-44c0-99aa-7054a8e45ded", "sighting_of_ref": "indicator--92bd1012-26ff-42c5-a151-461f56e2340b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6d0f6a-d9e9-4e42-9114-717b0ef517e0", "sighting_of_ref": "indicator--cfd32db3-3465-41c1-8b77-169e59fea386", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307421f6-553e-4438-abd8-e66cb75347e7", "sighting_of_ref": "indicator--457d50d7-b709-41b8-99f5-535e64521277", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1c982e-2060-4c79-bc1f-899820ff1de7", "sighting_of_ref": "indicator--725376b9-f4a8-4747-9f06-4fccb0ffe1bb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1966dbf5-61cd-4e0e-b1d0-a75cc81f6bd3", "sighting_of_ref": "indicator--dc610730-df11-41fd-aa6b-6679a477fb3a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a7fbe0-b35a-4e60-90ac-4dfb38cdeed5", "sighting_of_ref": "indicator--5cb5a44f-25c5-42ce-b29c-ac9e81ddbe69", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413cb981-a3bc-4612-99d8-8f699007bfcc", "sighting_of_ref": "indicator--aa545357-5fed-47a0-bc2d-d0246ee281a6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96caf640-b6d0-46e3-a3af-6daafca86f5f", "sighting_of_ref": "indicator--527228a4-1a85-4efb-85a6-5c46b187ce13", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8087ca5-b72b-4249-9ab5-6e26525b01e0", "sighting_of_ref": "indicator--57232b8f-d8f7-40b7-9ac7-581783554b00", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0164c23b-bb96-44a2-a591-4a2492d6a020", "sighting_of_ref": "indicator--29df77d9-53c0-4d53-aeef-341580ce51bf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767ceda2-ca8c-46a8-90c8-96e3a08a79da", "sighting_of_ref": "indicator--cfb42e3b-e622-49e0-94d2-aa0e41398a0c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1d02a6-d016-4cb7-8e85-8ed6381611e0", "sighting_of_ref": "indicator--d43d0e58-2061-476b-86ca-31e658651b71", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df635b4e-d60d-4a40-9ab8-2b4fa2145903", "sighting_of_ref": "indicator--ebfb522a-8e5e-4119-9c75-027acb58249f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68221d0-bf8f-4d4e-93e4-df68f191bcdf", "sighting_of_ref": "indicator--4b39c9fc-abe1-466c-8d3b-f672f9d6bd20", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3855e18d-217c-48a3-9a2e-fd6d83d18aa2", "sighting_of_ref": "indicator--df4dd698-a9b4-47c5-8b01-2ea35ac56b41", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd668ec6-fab9-4a4d-84a7-7ef3ed541d50", "sighting_of_ref": "indicator--4e136888-fa1e-4c39-8407-43138e29ebbd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50991a99-b970-4991-a847-3bf11422e4b1", "sighting_of_ref": "indicator--a06ef8ab-665a-4521-96bf-dade1ce7d7f7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609f200d-a882-474e-ae16-2c6d77753ce4", "sighting_of_ref": "indicator--8c1e1ba5-f464-48c6-864c-a3ac50dccd49", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f7238e-3186-42f4-847a-9ee63ac5a9e5", "sighting_of_ref": "indicator--d837d015-2df1-4853-a6fe-f3fcd3e44401", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f017c6-6367-45c8-a13f-e8a4c0975930", "sighting_of_ref": "indicator--a65298e0-3ffa-432e-870d-70afab876007", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abc1776-c1f3-44a5-bb3d-866b59c498ab", "sighting_of_ref": "indicator--3a3aa9ad-ecd5-485a-a707-909f622f009f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5ae0d2-bec3-420b-8cf3-6d7d42272d1b", "sighting_of_ref": "indicator--5e10e2e0-df84-4f3c-9847-182db4a719da", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965ddd8d-0042-4eb2-b012-70ff88fc426b", "sighting_of_ref": "indicator--70616421-0e41-4cc2-aa97-146055be5a11", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49a9639-8274-4637-a57b-627d8072bc7c", "sighting_of_ref": "indicator--8712eaae-04d1-4712-97ab-bdf1bf2a8f20", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5368c95-acd9-44b8-8a76-1df2d168a960", "sighting_of_ref": "indicator--14b72221-5027-424a-9266-c8cbf13b88a0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f9ff3a-7c3d-4627-a726-574cd8486269", "sighting_of_ref": "indicator--1cd3796f-dcb4-4696-a2de-06b8369e01a2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d19a3b-9b73-4593-8441-5e4bf1252a74", "sighting_of_ref": "indicator--2c955141-17e3-477a-8470-8c0e501aad76", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92932a25-a699-400f-abcc-7367041cb578", "sighting_of_ref": "indicator--f98effd3-e777-4742-842d-757b9568d86c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aaca5e3-377f-4933-b125-0aa66e8ca142", "sighting_of_ref": "indicator--573f2115-8aeb-4366-b264-ac336a94ecdb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa098c8-6860-45ee-9120-565e849dd760", "sighting_of_ref": "indicator--338aa082-b3af-4163-bd27-577e00d71dc5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76b83b6-6323-470a-afda-31d5807d66a6", "sighting_of_ref": "indicator--d43ddb8b-bac8-4fbc-b4ec-15f932d1f53a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2864cd5f-39fb-4318-8dbe-00811319abb2", "sighting_of_ref": "indicator--0ee957c5-fbf8-4801-a98c-89090eff16d7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213a331a-aa05-4e77-a6ec-a967be75b3dd", "sighting_of_ref": "indicator--988c36b4-eed6-4ba8-84d3-47373948b43f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf31256f-e888-4f62-8750-f6e06aa40125", "sighting_of_ref": "indicator--9b322704-91c3-44a5-9727-9da73384a334", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95cdb0b-b54e-4f76-a9b3-30d73f817dac", "sighting_of_ref": "indicator--ac39b3fc-c9b8-4b61-a310-31bd5cad8dbe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c3ce1f-0cff-449f-bd0a-76e12577554c", "sighting_of_ref": "indicator--27dff473-7618-49d2-a590-e14e23a41dbc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb1fd76-facc-40f0-8ba3-7f7848427aae", "sighting_of_ref": "indicator--979ec573-b1ae-4009-9208-9f2970eef132", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcceb5b1-3f01-4542-8248-a4c61aab4c52", "sighting_of_ref": "indicator--e67d33d6-2fdf-48d4-b93d-82f0cc338869", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974be0f0-4659-4706-96b9-3919347216b0", "sighting_of_ref": "indicator--df24fdca-1ac1-456d-a8dc-22430506d44d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5bd551c-42e8-4e7e-ae1b-c5b70280ccec", "sighting_of_ref": "indicator--dddadc76-7e7a-4633-a2ff-a5f7fcd08851", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0e4207-4863-41b1-8ed6-02b9a9634b6e", "sighting_of_ref": "indicator--0706a42e-3c9d-4f7f-bede-f24196f7b5c4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196de4b1-561c-42be-aa7f-da2b2c7e1e02", "sighting_of_ref": "indicator--56a012eb-3011-4079-a1c7-684dc343c679", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652e37ab-8f5b-4544-9f61-79948b7f8c11", "sighting_of_ref": "indicator--0460ea85-5140-4e6d-b6bf-6be761148408", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db73c9b-b2a0-46ec-af20-906ce432b0d0", "sighting_of_ref": "indicator--7e2d966e-1338-476a-9e12-d05db19eb8c0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8e9036-1249-41d8-b141-ab7ba57a9ee7", "sighting_of_ref": "indicator--219067e8-e0ab-4e95-9bf1-a430d7a287af", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5c404d-937c-46ca-a376-5cc05f602c61", "sighting_of_ref": "indicator--5a961ed1-56e9-4e43-8f11-40c831da813e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1a4185-8e36-490d-a813-0ce6d24c9e82", "sighting_of_ref": "indicator--ee391551-f9a5-4ef4-91c1-4f4812d04291", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda62687-d2a7-46bc-83b6-b9fb1066a5eb", "sighting_of_ref": "indicator--5ccaf45c-39c1-4c96-8b3f-fd8c7d51df45", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d819124-7a2a-42ab-b13c-816eff4b7b76", "sighting_of_ref": "indicator--edd18fad-a6d0-430b-8e12-e0b02f098455", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cdaf4b9-4efd-4887-b003-6583f60b12a8", "sighting_of_ref": "indicator--e782e3c1-7d66-479d-85bf-8a870095b21a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ceae2ef-42c8-47e2-b21b-48c64fc29ad3", "sighting_of_ref": "indicator--48613981-bdaf-4837-bcc4-14176369b49a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2dc399c-eda5-44d5-be9f-d78b36ae5839", "sighting_of_ref": "indicator--f0f87b6c-4b02-40dc-bad5-70c1c9733add", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9058cf6e-b8e8-4606-ad2b-14a5ea35e3d2", "sighting_of_ref": "indicator--13287db9-472b-41d5-abd7-f5006028a0c3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7feb65a-1597-45f1-9fa8-2d8f13d6769b", "sighting_of_ref": "indicator--2b3b4558-410f-44a0-84f4-7e0d236139ba", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a8a99f-3a34-41b3-bb2b-d0d7bd2de632", "sighting_of_ref": "indicator--e74f497c-afb0-4b7c-932c-1f6ac381e275", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954f10c6-acfd-46d0-ae26-39c8bf581329", "sighting_of_ref": "indicator--61bda71b-2fc3-42db-897b-cb8b387ae730", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b395157-2385-4b3c-83d5-78f1328145ac", "sighting_of_ref": "indicator--0e8562b6-4764-4f34-a0a8-4f325fab8f67", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1776f20f-ea53-46f1-b9da-640de57149a3", "sighting_of_ref": "indicator--c23b5a70-79fe-4fec-b53a-6f67a526c2bc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87660ddf-4d38-4c7f-af6b-b05f097403c5", "sighting_of_ref": "indicator--de265336-50c0-4443-9e28-3fef659e4666", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de867b7e-e22a-4377-bc28-f24d08af2e8b", "sighting_of_ref": "indicator--7e20b6e5-08fb-419d-a013-ce062627e4c1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a003b4-e489-48c9-9882-1749c055fea3", "sighting_of_ref": "indicator--58cb871d-7237-4ad9-86b7-e4ba2db39586", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17412120-15c5-4bf9-b09c-ac71bb239709", "sighting_of_ref": "indicator--edec3d0f-a057-41f8-87c7-d1ba11bbaad0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bffc377-c57b-4f53-b2d3-e62f22665770", "sighting_of_ref": "indicator--c70ddd06-faad-41f8-97e3-4cc2bbb1b2ef", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a46ffe-0def-4b61-b3f2-d9798b871f30", "sighting_of_ref": "indicator--444120dc-0a3f-4c10-9f57-7f0edcdccc47", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad7266c-7a85-4e63-aa92-5ab87fc166e2", "sighting_of_ref": "indicator--cdac6523-7ba8-4c36-9363-2a1b0d73d0f0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0521869b-500d-4960-83aa-6de765feb13b", "sighting_of_ref": "indicator--efe9b382-f80f-42ca-b356-c846e9b0feaa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9f9f0a-9b60-4669-903a-6d0815edd9f3", "sighting_of_ref": "indicator--3bff6bdb-8e5a-4ce9-b966-aee221b0473f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ddcec94-6f37-4ffb-877c-a8723b11de19", "sighting_of_ref": "indicator--9d33e952-abcd-4ddc-a307-d474e66693a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a1b72d-9c3a-4d56-83c3-ece9f96d3fbf", "sighting_of_ref": "indicator--9d33e952-abcd-4ddc-a307-d474e66693a7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c7f1f7-26b2-47ea-9d30-a8ffa0ae857e", "sighting_of_ref": "indicator--51b1a662-b380-4e3c-87c7-6e2d886856ab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240e61d5-d20b-406e-8c9d-6c4deb70a874", "sighting_of_ref": "indicator--35be2474-97e8-433d-8340-c9f09d7a38a7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3d53f5-0fb4-4fe7-824b-e9e8dee7fa83", "sighting_of_ref": "indicator--e84cb4dc-d4dd-4b90-a7ec-c9c26360093f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e74c91-17b9-4c80-b302-1eb18175d929", "sighting_of_ref": "indicator--7f1fce08-6572-4d4a-8ad5-16ce7bb9f05f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a524e68-27c3-4054-a00b-b54d86e376f9", "sighting_of_ref": "indicator--fa1928d8-8c55-4c43-b6ae-2c97b13277c9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f919c140-72d2-44bd-8565-c2a76f815949", "sighting_of_ref": "indicator--a0fb018d-263c-4afa-8642-bcd187d0b9d2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b084be-9d95-46ca-9d59-e9b78e3d29d1", "sighting_of_ref": "indicator--f1619900-d2b2-4f26-b292-ac10abbcb500", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d113370-6fc8-4ffd-b6b9-d517d72af37c", "sighting_of_ref": "indicator--c543d4ec-1c21-45b9-a4eb-30e1423a558f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7279c6bf-979d-4627-9042-857e8d5239a0", "sighting_of_ref": "indicator--77b4cbab-fc66-4193-9aab-e02d8a97dbbd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff08605-dd79-4b94-87ca-425e1bab02b0", "sighting_of_ref": "indicator--dcdf23ce-4c7e-4ec4-a513-f97b653cda47", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a02b207-61af-4587-8e05-edfcaa132598", "sighting_of_ref": "indicator--5e7b236a-345a-4b75-9cc9-5c3668917faf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56efb83-3e29-4474-8fdb-af278b243c7e", "sighting_of_ref": "indicator--4c07d3c3-3332-4702-bb34-80b14fd83634", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ff55b2-fab0-407e-90dd-3ab32714be75", "sighting_of_ref": "indicator--91051924-5927-4e05-b8aa-acadbabcfa7a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f33d0df-82f6-4099-9e75-de5077ea9bd4", "sighting_of_ref": "indicator--30ab7613-e3b8-4a69-b2ba-a3d840bcb422", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d17432-f010-4a09-9bee-40f3c6f5a8d1", "sighting_of_ref": "indicator--f4b25d13-3277-466e-b691-9878b98e3a71", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45185369-fc2b-4deb-9bec-6d6e01ae973a", "sighting_of_ref": "indicator--5ea0c10f-483e-44b1-a988-c315d042ce1c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec00de4c-23cb-4082-bab5-8801daf67c93", "sighting_of_ref": "indicator--e204b5c7-64f0-4df7-94b1-2f78c0108410", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4430810-e5c7-47b4-a2ac-8bb88ed71549", "sighting_of_ref": "indicator--39b1663d-9147-46e6-b761-d8085579e908", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3dbee68-525f-4bea-be3e-d65be7017545", "sighting_of_ref": "indicator--139eb534-ee02-473f-b99b-ccce1c8824c3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a200ecd2-73bc-45a7-8d9b-a993e4513d3a", "sighting_of_ref": "indicator--edb21405-2ae9-4f65-8b9d-01e9a0faf410", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13e179e-eeea-4ce3-afce-9176060762ea", "sighting_of_ref": "indicator--fb7d13ed-0ba9-41ed-b679-106618744173", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312f344a-2918-4131-a650-318e8527ee9e", "sighting_of_ref": "indicator--2c4ee772-c7f9-45f7-850c-1a5d9022b7c7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273e80f8-e20d-4451-baa3-51f4ac7554fc", "sighting_of_ref": "indicator--055e7382-0ff3-4fb9-9d6a-b013d48592a7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392741d3-f20d-4998-bd7f-ca5488d21e66", "sighting_of_ref": "indicator--240ec945-fe2c-466d-8b82-e93664286afc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec86fe91-36e8-4317-a2d5-a1b16b014d20", "sighting_of_ref": "indicator--88b8056a-6c3e-4d86-a9cb-569838a5b3a7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1935fefb-c829-438c-8978-12ca28418a9b", "sighting_of_ref": "indicator--2e42b123-9ddc-4503-8564-dc4df3e09cb1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b711acb2-c18a-4305-9de3-55f193c79420", "sighting_of_ref": "indicator--07319293-f045-4ae5-aae3-7b9bb2a86121", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c583c3d2-9ddc-4f8c-a100-df34dd68ec5d", "sighting_of_ref": "indicator--a49fdecf-7034-481b-8717-fb316aa407e3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c42dc11-5500-47ef-bf74-17419a079c0d", "sighting_of_ref": "indicator--43c84c45-6386-405d-9b1d-63393411e05b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ff9e27-1fa5-4988-b9a1-f2e7fb65cf59", "sighting_of_ref": "indicator--e15bc77a-e42c-4b60-8988-e7bb10ba42c3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ceadbb6-1b5e-4ee1-97f8-32190ff84a17", "sighting_of_ref": "indicator--af736c70-5fc8-418a-8561-8f3d7267c0ed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68918cb8-cc1e-4cb2-b361-17b5fa397294", "sighting_of_ref": "indicator--af736c70-5fc8-418a-8561-8f3d7267c0ed", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38612b4a-9cc2-4f66-a9ae-6e2f47799f91", "sighting_of_ref": "indicator--dfca0f20-891c-402c-a8cb-aea1e381b746", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd3b4db-9355-4912-8eff-c7c4db510748", "sighting_of_ref": "indicator--24d672dc-501d-4b43-a010-7ce6b7c8eabf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f993079d-8a2c-4db3-8fde-7397845891e2", "sighting_of_ref": "indicator--9c89cdc9-d515-408c-8fa9-d3b1fe68de12", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10dfb27-736f-4e23-87bd-8d1d66d83687", "sighting_of_ref": "indicator--9c89cdc9-d515-408c-8fa9-d3b1fe68de12", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ce980d-aba7-4b5c-b2c5-afa1d6a97fbc", "sighting_of_ref": "indicator--9c89cdc9-d515-408c-8fa9-d3b1fe68de12", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8367313-7e39-4cec-9724-9967a3dd9308", "sighting_of_ref": "indicator--5382a55f-5074-455a-b121-51d276d3abda", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06daba34-063f-4173-9d12-b8bf607915fe", "sighting_of_ref": "indicator--cb4bcfc4-b8d9-4f3f-a54c-89f578f806cf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fc6fa4-89f8-4e00-8eff-36e8df353269", "sighting_of_ref": "indicator--cef2c23f-947d-4e9f-84ab-6d13541effe6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7646511-bb9c-419b-bb92-824da5df7970", "sighting_of_ref": "indicator--c293421e-c9a6-4bd9-bb88-fda14d8d65fc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc7e548-f56e-490a-8218-c3beecfca06a", "sighting_of_ref": "indicator--c19dc975-fc0f-4b91-b33e-af2e158e7d61", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9740ecaa-f426-4b25-9506-4a20a9d99029", "sighting_of_ref": "indicator--c19dc975-fc0f-4b91-b33e-af2e158e7d61", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e9d376-69ad-45b3-ab9a-59d6e35163c7", "sighting_of_ref": "indicator--9f985d91-1984-410b-8127-6484f3ec767b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502bd904-694f-4bbe-9248-2b15fdfd3051", "sighting_of_ref": "indicator--9f985d91-1984-410b-8127-6484f3ec767b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79be636-0166-4045-b431-b781d78c17af", "sighting_of_ref": "indicator--d4e6956c-5ef7-48cf-8589-4878ccaf6016", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0b3465-3502-4a2a-b780-0d8d89fcc4bd", "sighting_of_ref": "indicator--c1673951-b98c-4ad6-8e07-25dcf9582b04", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838873ae-44df-4c09-aa74-445ba488443c", "sighting_of_ref": "indicator--ffb26a65-1f56-4ef1-9c31-d879e5e621e9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db9031e-7d2c-46d1-95b7-31b2cdc269d2", "sighting_of_ref": "indicator--9c9265a0-2681-4168-ae30-0c2a10cbb3e6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce09741c-0834-44f0-b8f8-40adbe6b9991", "sighting_of_ref": "indicator--0e6c6be4-4766-4d74-86e0-d676d57c0917", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f4c136-99da-4dde-b784-766ed891d6b9", "sighting_of_ref": "indicator--9d2fa191-b340-4b65-b261-e964244fd3db", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97fdcf09-fdc9-49a8-b98b-8c6a6c40c34e", "sighting_of_ref": "indicator--c95450f9-710d-4142-b114-5de0e5de63a6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b5eb4c-46e8-471c-b9bd-3785434247a7", "sighting_of_ref": "indicator--8217e8fc-a220-463a-aebe-e826711fafce", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afeeacaa-4fc6-4051-8c13-a955cf1ecb12", "sighting_of_ref": "indicator--817fb348-67f7-4442-b334-7ce296a6c55d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55bff9db-a9a4-4c4f-b621-568fdd181133", "sighting_of_ref": "indicator--d557e4eb-6495-4d1a-a23a-ea0d6fac2981", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40db828e-e995-45f8-975f-02651127b9d7", "sighting_of_ref": "indicator--957419c3-cbc4-4321-a6a9-7fcc425e5f80", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b42808d-970a-4cd0-bdcd-97caedc3ebdb", "sighting_of_ref": "indicator--8dca2ef7-195c-46d1-8932-3fa88b284fa8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f988477-e2ea-4502-9545-58832d39d148", "sighting_of_ref": "indicator--c3ec0051-fcc0-4b35-a670-faba21b9a606", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c41b70-0477-4d6d-b8c1-acb847738ed5", "sighting_of_ref": "indicator--c3ec0051-fcc0-4b35-a670-faba21b9a606", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fbfe8b-0791-470e-8409-b0aa00ec1a66", "sighting_of_ref": "indicator--4a3bea2f-3e82-4273-9292-3de732d51542", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a40d1c2-d7c0-4a9d-b4b0-37cc42252313", "sighting_of_ref": "indicator--9d67a159-23da-4512-ad5a-f8c0dda8f001", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc69816-ce98-4390-b466-42caf9416458", "sighting_of_ref": "indicator--4775b66b-7c72-4d3b-b02e-54b409c04f39", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4369c932-726c-4c82-96c9-404d7c5da4f0", "sighting_of_ref": "indicator--07038454-7198-4ed8-b642-f0c4f4e5f37b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5911b06b-9e55-4de1-9b73-b16c36179406", "sighting_of_ref": "indicator--7945ae6a-a559-4be8-b343-1f333df371cb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6d8136-63d4-49c8-bd41-b92accfad3bd", "sighting_of_ref": "indicator--f8e29ffb-6e50-4bb4-8b7c-c2fa1e0b1928", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd48862-b675-45ac-a79a-37aaf19cb010", "sighting_of_ref": "indicator--f8e29ffb-6e50-4bb4-8b7c-c2fa1e0b1928", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af30264-c30a-449a-aa2a-268669bc852c", "sighting_of_ref": "indicator--5ceffd41-f182-4f1d-866c-000b41acb389", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ca7d44-12b6-472c-a8e1-8191ca9c890c", "sighting_of_ref": "indicator--5bb31d0c-cc62-4684-8ff2-7a41d216e10c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b188e936-4b24-4d72-b75b-994290e4b1db", "sighting_of_ref": "indicator--067c6587-cc15-442f-b200-c2f36d0b8ab1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b73e84-49c1-4678-9545-555350a0e10c", "sighting_of_ref": "indicator--ffc415e6-b63f-47c4-8317-5518aba1a99e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da3605f-5836-4676-90fc-6af8d18a6e3e", "sighting_of_ref": "indicator--6b232b1d-faee-43b7-b193-698924670400", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b890a003-b3fe-4527-9f0a-c1557eb66e8d", "sighting_of_ref": "indicator--6b232b1d-faee-43b7-b193-698924670400", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bea0e99-cbf9-48c6-aefe-db483a9cee77", "sighting_of_ref": "indicator--6b232b1d-faee-43b7-b193-698924670400", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7cf42b6-45dd-4c89-ae57-e20367cc82e1", "sighting_of_ref": "indicator--2733a87e-61ea-4cbc-9bb8-37cf49984747", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03050fd-15ce-4936-a6bb-bebd8b775c37", "sighting_of_ref": "indicator--b192dcbc-73cb-4800-a1fe-c0c0e9dd6947", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812ac583-b838-49b0-81f9-f2d7c24539dc", "sighting_of_ref": "indicator--a629c7ce-7568-4d63-ac1c-29ba61686d15", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9526ffed-f932-48d9-aa9b-ffd99ce260b8", "sighting_of_ref": "indicator--247e5ccb-fceb-43f9-9a18-94ee0beeb4c6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60a63c0-1a70-40f5-ade5-b7660c1fa1a1", "sighting_of_ref": "indicator--0825cf83-e8b5-46d8-8edd-22614af593b8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a691582-13f0-4d51-b233-d89ee4bc7573", "sighting_of_ref": "indicator--0825cf83-e8b5-46d8-8edd-22614af593b8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b04b665-eb88-4364-bcf5-1e4cfdf92f80", "sighting_of_ref": "indicator--0825cf83-e8b5-46d8-8edd-22614af593b8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3df0e3-c133-4f64-9a28-b7f92a3e8947", "sighting_of_ref": "indicator--0eb94579-fa8f-4f0c-ab7d-01b5f9ee262b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbced93d-2b6e-47b4-9ac0-d45a852b1455", "sighting_of_ref": "indicator--24f08195-41be-4ed9-94f3-043f2217cb3f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfddc030-f4e9-4cf6-a603-3dddbdffacf6", "sighting_of_ref": "indicator--24f08195-41be-4ed9-94f3-043f2217cb3f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bdea1b3-a98b-4575-a06b-76167a178a5e", "sighting_of_ref": "indicator--686913e1-9b3d-43f5-ae8e-38fc9912e6fc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae55104e-d288-49be-a91e-ed18dfacc9b8", "sighting_of_ref": "indicator--5dca9442-793e-4835-907b-d6d85e9149fd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e370acc8-e0d2-4c7a-a636-f7e67313a1ac", "sighting_of_ref": "indicator--575c4cc0-89c7-4868-89fe-1f04ea73b878", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e28f180-438d-48d1-9ae9-b8a45bdba61d", "sighting_of_ref": "indicator--575c4cc0-89c7-4868-89fe-1f04ea73b878", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfab203-3c85-4a78-98b6-0535d4bde2d4", "sighting_of_ref": "indicator--575c4cc0-89c7-4868-89fe-1f04ea73b878", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebef5e8a-c7e7-4ae3-9322-4d30f7003f35", "sighting_of_ref": "indicator--f220f11f-491f-4d38-aea7-2dda52d744a8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c07b5d-5779-4397-b4bf-ef359022ec88", "sighting_of_ref": "indicator--875d6ee0-9e36-4cb4-b955-40355bb4de21", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97590d49-82f2-4700-a503-3346b49fad50", "sighting_of_ref": "indicator--7a35eee8-5d85-411a-870e-c73fce7b7e9b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3c0857-f323-4dbb-b7af-d90e21083fb3", "sighting_of_ref": "indicator--51563f20-be65-4cae-9e4f-2eaf70ef6528", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbf170f-7382-4c12-9892-3589e06915b3", "sighting_of_ref": "indicator--5652f30c-34b1-4424-9e9b-d3fbe664266c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f39d521-7d09-45ce-967d-1346526f8b2e", "sighting_of_ref": "indicator--637a78c6-01da-4ba4-b1ae-e8342348b362", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba62c7e-1e74-4404-a401-3dc56b2a34aa", "sighting_of_ref": "indicator--325a9b70-25ed-4210-a801-fe4951905f5f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4374b31-ad07-4dc3-95b6-9c4c50334eb4", "sighting_of_ref": "indicator--2306eb46-9004-47e8-ba09-f5fef26a4189", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcb2d52-2768-46dd-b7d9-c6900fc45d4c", "sighting_of_ref": "indicator--2d52c634-1a8f-40fc-9bfe-bb73fc969b23", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76408461-6206-455e-b2bd-5f72364c1f33", "sighting_of_ref": "indicator--789639ab-7b9d-4025-ac19-15d6704deeb9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23af6c8f-46c8-43e2-9e9f-af84d668e89e", "sighting_of_ref": "indicator--1bc6ccec-c6b7-4e79-9689-2ac99c25eb73", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7014193f-f387-450c-9139-baf137de058a", "sighting_of_ref": "indicator--85090123-532d-41c0-b9fd-346661d9f6a4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5241226f-5e04-4649-a2b9-acfd299ad21c", "sighting_of_ref": "indicator--140d3235-188c-4dea-8fd9-c2938f865f40", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f76bcca-f3ee-4873-8a42-387d5c00f30e", "sighting_of_ref": "indicator--4a13c762-30cd-4886-a6b0-46a600327f94", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94aea6c5-6177-4ec8-9c76-aeb73fe2eb72", "sighting_of_ref": "indicator--92603ac1-dbc9-4c10-8919-d99cf93952a6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1249bc-22ae-403a-8eab-0f2ba506dba3", "sighting_of_ref": "indicator--7c080283-c19f-47a4-b206-8061e9616121", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c521c340-9958-49c3-be87-a054a5861183", "sighting_of_ref": "indicator--2daf3a37-e2f6-47e3-8133-46373c2edd31", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25f6148-0776-4fde-8953-152ed0bcf5d3", "sighting_of_ref": "indicator--fcd9c225-c158-493e-ab38-cbfb7f52bd1f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebd405c-dadb-45d0-a759-c4f8e83d0a4d", "sighting_of_ref": "indicator--1a88a491-c15c-44ca-8fab-03819363fcb0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885f3678-0902-488f-8340-974d29ae0ee2", "sighting_of_ref": "indicator--d5653036-9d9d-4e75-8c1f-bfb6e38c3f2f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa9fa80-1d84-4117-ae96-827ddad54b91", "sighting_of_ref": "indicator--24aadb6f-804a-4c4b-9137-4f3f485ecdde", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb278ba-c620-4c50-bcca-0e8cae7ae2ab", "sighting_of_ref": "indicator--1d4302e1-e565-4e25-a069-82e0eb79451c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34645fb9-958c-4c96-8a03-4ced5da25c3d", "sighting_of_ref": "indicator--a6da8f5c-3f75-4a9e-aeb4-dc575710a8c7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe06c812-0a5e-40a6-990a-1bad08b1cdb4", "sighting_of_ref": "indicator--6129010c-1a44-40fe-a1b1-9e82bd2d01c7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6167fca6-18ed-419e-8986-1fec9dfa987a", "sighting_of_ref": "indicator--a3e5f7f7-484a-4bae-a188-497d953b15b6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac0a804-0649-496a-b152-7f90cd89cd5f", "sighting_of_ref": "indicator--9b264eef-4925-4f96-9f47-0239ea801e14", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb17658-3d34-43b8-bde1-97dddd082ad1", "sighting_of_ref": "indicator--e5728480-3928-402d-a0c4-24d7a104dae9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7884e0b-40ef-4e6a-8786-e167b9da74fb", "sighting_of_ref": "indicator--d2a3aaec-98f9-4271-99df-af0a3f84265b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d472dc-4ef0-4412-ae2c-ff2a7ca48a8b", "sighting_of_ref": "indicator--fb897448-ee82-4d87-9c48-9cc91373f605", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7df226-fa7d-437b-b010-1b96d99998e7", "sighting_of_ref": "indicator--1cf059a4-3644-449f-a64d-d6ae510ec2d4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbef162d-3ebc-4191-896a-6a64fdf54287", "sighting_of_ref": "indicator--ee00476a-9166-4c54-b263-ae51f85606d2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c985e76-d21c-4bde-9ada-3d19a57cee32", "sighting_of_ref": "indicator--ecc7180f-380b-4966-83bf-c36d0e4c67bd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd0e8b6-3819-4e51-bec8-a1460938973f", "sighting_of_ref": "indicator--a50d6f4c-4066-48ee-a792-4b99232477ff", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038e987c-6eca-46cc-8367-9157621654f0", "sighting_of_ref": "indicator--aeff1a9e-cc4c-4b53-ba30-2cf575a306ea", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3e9fb0-6472-44bd-990a-c1948687bba2", "sighting_of_ref": "indicator--c8df733b-d48a-4eac-9fe2-0c48aeb3b0a1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e076015b-af62-431c-8117-79cf5b39207c", "sighting_of_ref": "indicator--d736763e-ca85-427a-82bf-4c1d5b6464b1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0927f4c-147f-42d3-94f0-77ad7f153971", "sighting_of_ref": "indicator--d73686f6-b3a1-4b33-b68f-3ab90caedea8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e760ce-f7af-4390-a36b-18cb5f2d78f0", "sighting_of_ref": "indicator--e7d452b5-6b53-4d89-88fd-44a18989b9b4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58dbda72-4ccc-41e4-8b7a-29c1604d40da", "sighting_of_ref": "indicator--61ed47b8-1aeb-4b09-9805-3cbb49eaa474", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c152f8aa-c84f-44bc-820a-1b08bda9a21f", "sighting_of_ref": "indicator--e7d297d3-3d7c-437b-83c2-65a4ecb51da0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c89ed6-17e6-4931-b8b7-4693aa9a4e9e", "sighting_of_ref": "indicator--0c4ee44e-d3cf-4dda-832a-ba057d34cacb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190924f1-4eb0-47a6-96cd-2fbb7d256dcb", "sighting_of_ref": "indicator--640c78a6-1be4-42d4-8fbe-d6d5e0dd22df", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2231af5a-cf7c-41b7-bc2a-ae5e55e302a8", "sighting_of_ref": "indicator--640c78a6-1be4-42d4-8fbe-d6d5e0dd22df", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b27402-636a-467d-8185-2925ff686ff8", "sighting_of_ref": "indicator--9cc0e803-f21c-4577-9cd1-4cf115006b2e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38574f2-a979-4c1c-b5da-74b237fe008a", "sighting_of_ref": "indicator--f2dfaab7-836f-4527-825b-507a056c25a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9216f748-e149-4aa3-9a19-d6339cc376e0", "sighting_of_ref": "indicator--0a8c99c1-3c47-4aed-a0f4-e95611b5ec3b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1051abd2-13a9-44ac-8029-ca29d2959b46", "sighting_of_ref": "indicator--0a8c99c1-3c47-4aed-a0f4-e95611b5ec3b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5d3211-e98a-487e-a83b-57da894cf1bb", "sighting_of_ref": "indicator--0a8c99c1-3c47-4aed-a0f4-e95611b5ec3b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928b29e5-d36e-48f1-b11e-52e399b07257", "sighting_of_ref": "indicator--5af31f6b-e80b-4d28-824b-9323c7d9cfd5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66d924a-7fc5-4a41-a3a0-3f48a40bccf4", "sighting_of_ref": "indicator--c2879868-1fbb-4d73-9a93-09e8155dcc5a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b648ef-8f68-4931-a571-2533c2dda150", "sighting_of_ref": "indicator--311c9634-9178-43fd-bf0f-5782ed17ad63", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469f0b29-603d-4a18-a729-9084cff207fa", "sighting_of_ref": "indicator--9a9dfdf5-55d5-4e27-b09d-8ec355e32acc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874aa98a-fac1-47b9-9d0a-d75ddede595a", "sighting_of_ref": "indicator--c5691bc9-8f97-497e-a8e1-d1fd12508cf6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4dd6be-7c2b-413a-9bd7-799d9fb35d07", "sighting_of_ref": "indicator--c5691bc9-8f97-497e-a8e1-d1fd12508cf6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b0a05b-a0c0-4da2-b1dd-2b6e1af645ce", "sighting_of_ref": "indicator--c5691bc9-8f97-497e-a8e1-d1fd12508cf6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61513bc-a905-484d-b25f-a816f0640200", "sighting_of_ref": "indicator--37a48858-bb54-41f7-9314-6ca9f1a7ddab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7f899c-21bf-4c95-9482-ef2db24c129a", "sighting_of_ref": "indicator--37a48858-bb54-41f7-9314-6ca9f1a7ddab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8e4899-567d-4e2a-a9e4-2d6c0c21567b", "sighting_of_ref": "indicator--37a48858-bb54-41f7-9314-6ca9f1a7ddab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a92e3d-3d97-471c-bdc6-e3d7528a8de8", "sighting_of_ref": "indicator--ad26618a-bde9-4fc0-bb83-45facd0f8525", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1d92fb-e79d-4ecd-8871-da042e9eca7c", "sighting_of_ref": "indicator--3e6c66a6-b64d-4f28-ab41-147b2948d76b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ffd53e-fdfd-4f63-994d-d874f8b66e18", "sighting_of_ref": "indicator--f28eae1f-4e3e-40ee-a08b-430c7f046571", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19846de-9f70-4d44-8c3f-db92416ae32e", "sighting_of_ref": "indicator--f28eae1f-4e3e-40ee-a08b-430c7f046571", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba337c6-9d31-4494-ad94-fa1b52cc64db", "sighting_of_ref": "indicator--f28eae1f-4e3e-40ee-a08b-430c7f046571", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf31f645-f408-4cf6-8edc-c15f7be0758e", "sighting_of_ref": "indicator--33d02a18-92b0-4073-aab8-7fe064b3c232", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76522c8b-72f7-4258-951f-5931b6fe04a9", "sighting_of_ref": "indicator--33d02a18-92b0-4073-aab8-7fe064b3c232", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1419347-0688-4ecc-b579-75d5299e6b92", "sighting_of_ref": "indicator--33d02a18-92b0-4073-aab8-7fe064b3c232", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136a1b01-b2af-4535-93f4-f3208edc32ad", "sighting_of_ref": "indicator--8583b1f3-48d8-486b-9b05-d07cdf0ccbcf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1c3fe1-25a9-43fd-b465-a5e69b3b53ed", "sighting_of_ref": "indicator--8583b1f3-48d8-486b-9b05-d07cdf0ccbcf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ae5ccc-90a9-4bf3-8c2c-008c872f2c90", "sighting_of_ref": "indicator--8583b1f3-48d8-486b-9b05-d07cdf0ccbcf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d58239-974b-4bb5-a69b-6712bb5775ba", "sighting_of_ref": "indicator--64e4cec4-6c5c-4f0a-8bd1-f93e9c6ade1f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46bf40c-f723-4dae-aa40-fe1cceed2674", "sighting_of_ref": "indicator--fd5d9be0-de11-4b1a-934d-c7022d18c840", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b10781-e819-4478-b4de-5e1c145c9488", "sighting_of_ref": "indicator--fd5d9be0-de11-4b1a-934d-c7022d18c840", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66dff67-ab3a-470d-bd7d-44afbb61fc3a", "sighting_of_ref": "indicator--d4e2332b-e5fe-4244-a452-22a465271016", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d7c017-2dab-480d-a4de-e78243b87e6d", "sighting_of_ref": "indicator--b3bb5316-452d-4f84-b639-724ea4fb4e29", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4f6f03-1cbb-4dc2-8b6b-4cbc95cf6360", "sighting_of_ref": "indicator--a895e0b3-33b3-4d0f-b0b5-0c03a2b070e3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29f7ca4-8401-482e-81f4-ef2b8c79b89d", "sighting_of_ref": "indicator--4268f09f-aadb-424c-87dc-4f004cd6c286", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c810687-c870-4305-9b8d-f65f21ebd909", "sighting_of_ref": "indicator--f7b9ccc1-b4f0-4909-8ef9-76d70716ed60", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690099a7-1119-4dba-88f7-2d45f3db8b32", "sighting_of_ref": "indicator--16eece29-9ea2-4cb7-bb5b-bdb54b291e9b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be27b053-aaba-4053-97da-481ee704092d", "sighting_of_ref": "indicator--4dc49934-d7f5-4d2c-a7a0-3630d9516df5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14cfeae-9b8d-4baf-89dd-56d3c0dc4e44", "sighting_of_ref": "indicator--6013ae0a-aed2-4d4f-b062-ef2b657d7713", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11eb5ddc-f583-47fa-a120-438f6faf87e3", "sighting_of_ref": "indicator--6013ae0a-aed2-4d4f-b062-ef2b657d7713", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c937ce80-8c75-451f-8a8b-70cc93781136", "sighting_of_ref": "indicator--6013ae0a-aed2-4d4f-b062-ef2b657d7713", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e52bf2f-ca66-4c2c-b50a-364610fa07ac", "sighting_of_ref": "indicator--e83d5718-9470-4ddb-af3c-41e3dad5b126", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6866adfb-3ab9-466d-879b-70720bfc5e16", "sighting_of_ref": "indicator--9c1daeb7-a9ea-4591-a0fe-18b4786f9ba2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f587e3f-8c18-4297-9b5e-d64c7937d077", "sighting_of_ref": "indicator--242ec82c-6b64-4dc6-a820-4efa92f17fac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e417f7-72bd-4287-8cc6-cdd98e300479", "sighting_of_ref": "indicator--b1cc4037-9f9f-4feb-b3c1-3e1184551718", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c314b4ab-3f54-40ab-a9aa-c21437fb8a72", "sighting_of_ref": "indicator--84314046-400d-469f-832e-0317b9039392", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896ca514-d4aa-4123-82d3-2d0876f20ed6", "sighting_of_ref": "indicator--ef5a333a-ace1-4ff2-8bb4-3c978a50ae67", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365180eb-2cff-420a-b234-25f1ea665abc", "sighting_of_ref": "indicator--1f348de5-6294-4c0c-98b5-28e1cf87fe93", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68428f11-420d-4f6a-a6fb-9fcddb862431", "sighting_of_ref": "indicator--bec57089-ae96-4ed4-b909-ad1c0b84a919", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13dcffab-2562-4b9f-90d9-89861497b259", "sighting_of_ref": "indicator--dd50a180-ea2b-41ef-b2ef-a39b4c84fd66", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782a164e-5a53-4976-aea0-3cf5932ce891", "sighting_of_ref": "indicator--5707a964-13c1-48aa-871c-2919d1580183", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f83e6b-e161-4738-a04c-beecb91f237c", "sighting_of_ref": "indicator--24f33296-7f16-449c-ab29-49c8de73b4df", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d28173-6efe-45f8-b8f3-03dd4e1891cb", "sighting_of_ref": "indicator--3fa2f704-9751-48bc-8dc3-99c67ae75bc1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59ef5f2-2cce-4d47-b705-18dd265f7045", "sighting_of_ref": "indicator--863ea5f6-6fa6-4479-815d-71de090792aa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57cc4e32-2a91-475c-8099-077f222815d8", "sighting_of_ref": "indicator--9b3b359c-5deb-468d-909b-871cb26ade2b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fde2b7c-f394-48a3-bd96-def4ec38b777", "sighting_of_ref": "indicator--6f00f908-4571-4377-9090-d42a4f0af28b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5671ba16-36c9-446e-ad8e-76c28c227c05", "sighting_of_ref": "indicator--fb63a2eb-c12b-42e1-b4e8-25e2936a02ff", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ea5585-e173-4728-bc1f-ab57b282ebcf", "sighting_of_ref": "indicator--3cbad259-2366-4968-8389-e12520f314f2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31631164-2227-440b-8ab2-9c17fb067009", "sighting_of_ref": "indicator--6b5c7c0b-2134-455c-a1ba-4098d83d8d45", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bba10b8-75c6-41cc-a425-f7ef0ebfa9d8", "sighting_of_ref": "indicator--5af5aefc-a4dc-40b7-8ace-866bfbbe01b2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d88750-996e-4a52-8cd8-81c5aa64fe35", "sighting_of_ref": "indicator--145fd0a8-51c0-4e3c-b49a-163288cd122e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192a9019-835d-432e-9531-1b3c79f87b88", "sighting_of_ref": "indicator--966e95cd-bf0b-45d0-9859-40871ece975a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fad0231-666c-4b1d-a752-296f3b2c6cc2", "sighting_of_ref": "indicator--d76b55d1-76ab-44b2-9c97-6da7b49cd581", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6440bb92-12e4-4176-9fb2-b5802919bc1c", "sighting_of_ref": "indicator--3ee01fa5-83be-4838-839e-c50e2154cac0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5170316e-534f-4b64-a7ff-5e9470be08cb", "sighting_of_ref": "indicator--f5598d0b-22b5-47dc-8a44-b73ca9be3502", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c23d343-e081-4208-934f-1fc8465aec46", "sighting_of_ref": "indicator--6d991028-86e3-4082-947e-07fefeab3170", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b06c38-b231-4be5-ae1c-37968d0d279b", "sighting_of_ref": "indicator--5fadff6c-a82f-4251-ace1-50e22221b31e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df564361-9fe7-4a42-9db2-61582389d95b", "sighting_of_ref": "indicator--85d4ded4-beeb-4fba-b0d0-89309198dc14", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a02f0fc-3e93-4309-b41b-807238e268d7", "sighting_of_ref": "indicator--8f56255b-3e84-4773-bc3a-930f560f6024", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f153d4-807b-46c5-aaab-9c67fdaaa9ca", "sighting_of_ref": "indicator--50fe17f9-5d03-49c2-8f06-425e447b3d97", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65998680-dad5-4e06-819d-3932c256f61c", "sighting_of_ref": "indicator--bd948076-cfe7-4f4f-8fb0-cff8216ccff6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3cad6c-bf54-4347-864f-c631071136f9", "sighting_of_ref": "indicator--79614be7-0a5f-4d28-b6bd-f4b0cb99d5f3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e104530e-9934-489c-9d92-5c0ddee0c529", "sighting_of_ref": "indicator--3404bb3d-d139-4ad0-a87c-e87e73c747d7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3aadad-e230-45b6-9f3d-232ac5820cdc", "sighting_of_ref": "indicator--7260a4ce-be02-4e55-8d1e-a572103c15a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af4e3f0-08ab-47e3-86cd-b1f061133008", "sighting_of_ref": "indicator--94806ab3-7fd4-4ffa-a5c9-af4beefcc8db", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3694cbea-ee96-4e51-ab6c-b9b200a3b847", "sighting_of_ref": "indicator--7a716bf4-08ff-4eb0-846c-6c6aebc43e29", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be0cf45-6912-479b-9f21-37744be06079", "sighting_of_ref": "indicator--ef54607d-1e69-4905-ae92-927ff8e2337d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034ed440-03af-431a-80d4-e501b301d17b", "sighting_of_ref": "indicator--c1752621-1217-4aa6-a5c2-18ee428447ad", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01454c6-8eae-4bef-aff5-b488f8ba6758", "sighting_of_ref": "indicator--10c32c75-ed1c-40ae-a853-7caa9f68ead9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bcbf108-01a6-40af-ac29-7ca174134f06", "sighting_of_ref": "indicator--f2e42388-6b68-41f2-a63d-b1c721eca8b0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029d9a20-33df-4509-83d6-63df38cee28a", "sighting_of_ref": "indicator--ee2f6e22-574f-452d-9f10-1eb7f285d0c6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcffa065-e9d2-49d9-ae2e-4a5d00f9a093", "sighting_of_ref": "indicator--09e7dc0e-a066-4810-827a-5fe433090c77", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e78367-5e02-4354-90ac-950a54853fda", "sighting_of_ref": "indicator--c7043b4e-246e-40e5-b16b-099f93f10f0c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7aa19a-05bb-4927-9862-c356a96c8284", "sighting_of_ref": "indicator--9caa0977-f80f-42d2-8b90-509200c3a900", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aac1b53-07f1-4151-a75a-8b413f74a593", "sighting_of_ref": "indicator--6b7892b5-ce42-48c9-aea3-9e0a5c682958", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79009ae1-c6bb-4b30-b329-7aa7832469f7", "sighting_of_ref": "indicator--54915d02-d8d0-40eb-b16e-a5f9a364b206", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1426c9a4-6757-4957-a28a-7fa40281acc2", "sighting_of_ref": "indicator--cec612ee-9369-40af-9643-ca4415080367", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f57eaf-4fbf-4fb9-a70b-9dd5b74285d6", "sighting_of_ref": "indicator--cf876ec6-9af5-43ff-bb66-f707d14791fc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e96c15d-6f66-48ed-8757-9e6523f3e49b", "sighting_of_ref": "indicator--61b8569f-9ae1-4ed5-b57f-9221bd7b90c8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2477b7-e4e7-41b2-a0b2-6f63d9e31874", "sighting_of_ref": "indicator--e537080f-5a41-453a-99ef-058ab597578a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13cf591b-711a-4678-a73e-e4c76b166b97", "sighting_of_ref": "indicator--e537080f-5a41-453a-99ef-058ab597578a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2281fd3e-bcd2-4535-8bfd-429ac259ba70", "sighting_of_ref": "indicator--e537080f-5a41-453a-99ef-058ab597578a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966a1c5d-8667-411d-9eb0-ad3f74da0a18", "sighting_of_ref": "indicator--091ae75c-0441-4f8a-86c8-cab0cbfb6c2f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbd9f2c-0ce2-41e5-b872-d2c13780b502", "sighting_of_ref": "indicator--091ae75c-0441-4f8a-86c8-cab0cbfb6c2f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93c1be9-ee09-4911-b91d-863098c906d2", "sighting_of_ref": "indicator--091ae75c-0441-4f8a-86c8-cab0cbfb6c2f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56aab518-0a53-4848-9521-c1720710cdbe", "sighting_of_ref": "indicator--bbffb351-8778-43e0-9e8a-cffdc9bbc414", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6b5fdc-7d1a-44d3-8c2a-0c22807b9df9", "sighting_of_ref": "indicator--bbffb351-8778-43e0-9e8a-cffdc9bbc414", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fb26c3-d221-4383-9055-733728af5271", "sighting_of_ref": "indicator--bbffb351-8778-43e0-9e8a-cffdc9bbc414", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b67a1fb-e1e2-4476-a238-e631221938ca", "sighting_of_ref": "indicator--67142f24-0df1-4ffe-bb1b-6ea9d7975fe1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373e3d27-957d-4840-b818-a71e7f4a2d6c", "sighting_of_ref": "indicator--67142f24-0df1-4ffe-bb1b-6ea9d7975fe1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a56602-1a1c-4841-b778-cd700a10efc0", "sighting_of_ref": "indicator--67142f24-0df1-4ffe-bb1b-6ea9d7975fe1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed390566-7db0-4711-bb84-7ac604e8b133", "sighting_of_ref": "indicator--158264e8-ee5c-4d7c-80e2-621709467dd8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2079f7-5892-4e01-87b9-29395631d4aa", "sighting_of_ref": "indicator--158264e8-ee5c-4d7c-80e2-621709467dd8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15102119-c684-4561-9f00-b22d21138295", "sighting_of_ref": "indicator--20cdf2f4-2412-496e-978d-c746721a7b0a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f68eecf-2a84-4948-9aab-cebb16253a0a", "sighting_of_ref": "indicator--f6ec04e4-0a51-4a77-a26d-b078b28236ba", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f39c5f-fffb-4512-b5f7-fd5576460952", "sighting_of_ref": "indicator--82003d0f-768a-4da9-bc5e-cbee15c3273b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3c8f42-b709-4bb7-91b1-41ca8761a1dc", "sighting_of_ref": "indicator--8c9ea422-8109-4e79-904e-c46848e318b2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b38a86c-e099-4f96-ad6d-6dbb82b53c2f", "sighting_of_ref": "indicator--fdcef3a6-c1cb-45ec-8338-c1ca51c2040a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ea179c-595d-43a6-a143-20b6fcd3ec95", "sighting_of_ref": "indicator--cc0db8d0-bb0a-401d-865a-6d6d238e944c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1285c8d-4ce0-4063-95ab-428148ed0530", "sighting_of_ref": "indicator--cc0db8d0-bb0a-401d-865a-6d6d238e944c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31b42cf-f9f6-48d6-af69-db760df34e4f", "sighting_of_ref": "indicator--3ae5d809-8572-41ec-9690-1e9952654966", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f54c07f-f235-4bff-a752-52e9d021d177", "sighting_of_ref": "indicator--a37b1780-17f7-46ec-95ac-6f4f7457e6fc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5768e0f4-8e68-4745-a964-5af88643de5f", "sighting_of_ref": "indicator--1b5656fe-af16-42af-a09b-12ce39a830c2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e384a8cc-a484-469f-a272-63dd949117d6", "sighting_of_ref": "indicator--a032b3e1-834b-4c6c-a757-898720512acb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6fd72d-860c-4b65-aa01-acd642be48ac", "sighting_of_ref": "indicator--93847a12-173b-4c1f-800e-82d8cc8216d3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d47700-fe51-4448-add7-f7217e8cd3c4", "sighting_of_ref": "indicator--4b1ba79d-dba1-4a79-94fe-510ccce2aef6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e162ac80-4cfa-4605-b089-c0be1be83415", "sighting_of_ref": "indicator--ea5560bc-c345-41a9-8853-367353527dc3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd23377a-7f5c-47fd-88f7-1c3c4896d1ce", "sighting_of_ref": "indicator--92ba2760-fd40-4c65-b1b8-7cb39c24b660", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47039f9-7746-4b4d-9d2f-31f947626203", "sighting_of_ref": "indicator--1a316ca2-5987-47fa-ada8-0b8e79c1faa7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7190a329-ba84-47a1-a2a2-b8849652d6bc", "sighting_of_ref": "indicator--1a316ca2-5987-47fa-ada8-0b8e79c1faa7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c51685f5-3496-46fd-bae1-9a415597a85c", "sighting_of_ref": "indicator--f2533773-c6f4-47a7-ac7b-d3fe58bb66d1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a645c801-c38b-4272-879a-25a02c114a5c", "sighting_of_ref": "indicator--48717683-e75b-4591-8114-4df1ab633e4e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b13edc0-3a3e-4892-a2a9-09a8a291f828", "sighting_of_ref": "indicator--48717683-e75b-4591-8114-4df1ab633e4e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c2ebb4-25c4-453f-86f5-2a59252e8dc3", "sighting_of_ref": "indicator--48717683-e75b-4591-8114-4df1ab633e4e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae12a391-247b-4f68-81c1-47667ddf6204", "sighting_of_ref": "indicator--09f5df67-1f93-4af0-a477-a0a3926867a8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995fff92-8b6e-45e5-964b-55c1a526bc92", "sighting_of_ref": "indicator--c81a0a3a-820f-48b7-aa05-52f652511f9c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d94bf7f-ff44-4dc6-81cd-c7e2552dafca", "sighting_of_ref": "indicator--c81a0a3a-820f-48b7-aa05-52f652511f9c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af267ba9-1718-42f4-82ef-b2352aeae03e", "sighting_of_ref": "indicator--c81a0a3a-820f-48b7-aa05-52f652511f9c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b60527-c8cb-4cbe-add8-5d4fdd9e7ed5", "sighting_of_ref": "indicator--01fc594d-681b-4fde-af16-9056f93d2a1c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defaadf5-637e-409d-8d1e-82da667a525e", "sighting_of_ref": "indicator--b2bd0856-ec56-4776-b757-086769371af5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcaa1cae-7184-46e2-8683-ecb7a27d6c41", "sighting_of_ref": "indicator--108ccba0-7b0f-47fc-9937-f7aac2aefe49", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240e9182-3e75-4954-b852-3ac3bf642786", "sighting_of_ref": "indicator--75e1b64a-f5b5-4225-845d-fb03abbd195e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f29f03-ac7e-4320-836b-462acdd095ca", "sighting_of_ref": "indicator--d7331b65-aa7f-45d9-a48a-b2c31b05bf7f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21619ed-ead4-4912-8985-9196ee480856", "sighting_of_ref": "indicator--609ad75c-f781-4d09-a497-d1afa3b4d5df", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc1c061-688d-4c54-8dd3-4793d944ae8a", "sighting_of_ref": "indicator--c9be6e48-0e07-4946-a324-7316991c57c2", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e56e8c-433e-4ec7-8d90-cba451d813a1", "sighting_of_ref": "indicator--a0351c01-416a-4db7-a608-14fe79f485d9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e2d55c-8beb-4211-bc2e-3767be1348a0", "sighting_of_ref": "indicator--6a5f83ed-ea81-4f3c-98bd-679a4483ddd1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9f6b90-0682-4128-aa14-f8ca9d18c5c8", "sighting_of_ref": "indicator--2cad2a10-bbc2-4062-b364-8c23d30eb574", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24e7063-0a51-4e24-82bd-3c7764e3a9de", "sighting_of_ref": "indicator--ce46005c-c6fe-41f9-9e8f-7b1fe9ab3d64", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3548c69-9439-4272-8cc4-064f6c4760fe", "sighting_of_ref": "indicator--1fa32997-a528-4314-afd9-3926c4ae4529", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f83af6d-052d-4872-9196-6d03b1937486", "sighting_of_ref": "indicator--ee38ccfe-bdd5-48f9-9756-3e11a7a2661a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150520de-e656-42c9-b52b-69b2ddf6e18b", "sighting_of_ref": "indicator--39effb3e-4283-450b-8aa3-f9d9827b7165", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2eac397-051a-4b3e-b5a2-4935ae56018f", "sighting_of_ref": "indicator--d3428517-ac66-4aac-afe8-55db4b8991e5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7838d5-864c-4ecb-8676-8ac61174217d", "sighting_of_ref": "indicator--0331f61f-8e0a-4d8e-a373-4069e48e5ba9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea664f22-f95b-4eda-83b7-c22693b925f5", "sighting_of_ref": "indicator--9cf90e33-9b1d-42a5-9ad6-c1bb2b2b2f90", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17103128-3656-4171-a476-10046cb1b8f4", "sighting_of_ref": "indicator--5e417e11-1eb9-45c3-a809-91939f4ae4d0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b82bcb-421c-4a8b-8038-91b26ff1e51a", "sighting_of_ref": "indicator--1bdaa3d6-c5d4-4f6a-9fe9-34fc4624bb8c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ee2209-7eb2-4274-8594-0153258ba03d", "sighting_of_ref": "indicator--9d1c3d38-6fc0-4f12-a48c-806f13518ce9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59608d2-bcd2-4940-93a2-70d9a830a75a", "sighting_of_ref": "indicator--feb0393c-642a-424a-8cbc-9f8ea25cdb69", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3346e4dd-887c-47e4-9530-ef5a63515cd9", "sighting_of_ref": "indicator--8290fefc-17f5-46a6-ad3e-6c2bc9846794", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f29bcd6-69e3-47f1-9ddb-14a82c93f01c", "sighting_of_ref": "indicator--ba56a8f6-746f-4331-b6ab-ae797d5e0874", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6a327e-3a44-485c-949b-72448717e41c", "sighting_of_ref": "indicator--00c69f7e-0af7-4cf5-8bea-a941fbdb71c7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee49163-ac84-4ccd-9f75-26b9f4ff6273", "sighting_of_ref": "indicator--a53403d9-e616-41d3-aeff-b3360183c5b8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8ac6cb-a560-41a3-82d8-0c2b6d9ae6e3", "sighting_of_ref": "indicator--450fe5db-079f-487e-bf82-e495c70c8217", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d2f936-4edf-4658-86e3-2b09b036730a", "sighting_of_ref": "indicator--b4bb759b-874b-484c-8a0d-5ea4e97a00ab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa92e67a-0f78-4897-86b2-ade9b592c0f0", "sighting_of_ref": "indicator--b4bb759b-874b-484c-8a0d-5ea4e97a00ab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb8f513-1b72-4324-baf7-ece3fbde4984", "sighting_of_ref": "indicator--b4bb759b-874b-484c-8a0d-5ea4e97a00ab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c50612-6e55-4e31-acb1-41f7d4650fb9", "sighting_of_ref": "indicator--e634c44f-b6f3-490b-9ce8-d807dcb55ecd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d23e50d-f43a-4bd2-8948-ffabc5c8c3e1", "sighting_of_ref": "indicator--d19eebee-7674-4a36-b699-b485dffda822", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb04460-7dc8-412a-8136-40895980e77c", "sighting_of_ref": "indicator--d19eebee-7674-4a36-b699-b485dffda822", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325a93d6-d874-4fa8-b6c9-606d8cc1fa15", "sighting_of_ref": "indicator--d19eebee-7674-4a36-b699-b485dffda822", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2331b215-b46a-4c11-890a-8ea15c5572f4", "sighting_of_ref": "indicator--9d4d4ebc-53d5-492f-affb-3b0b1ba5ba21", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd5b962-5a0c-46a9-bba2-9e73407d5cfc", "sighting_of_ref": "indicator--9d4d4ebc-53d5-492f-affb-3b0b1ba5ba21", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bdc75c-5b95-4b4b-b11d-fffeb91c7305", "sighting_of_ref": "indicator--9d4d4ebc-53d5-492f-affb-3b0b1ba5ba21", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce974f07-a1e7-4618-ad0e-f6ccb15c7967", "sighting_of_ref": "indicator--2e08ac8f-c0f5-45f3-ab08-0e9b497cb9ba", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d205dd75-c454-40c3-aa05-d2f3d7f3ac47", "sighting_of_ref": "indicator--2e08ac8f-c0f5-45f3-ab08-0e9b497cb9ba", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d480ee78-5148-43f5-899f-f799eabad09a", "sighting_of_ref": "indicator--2e08ac8f-c0f5-45f3-ab08-0e9b497cb9ba", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19653713-f3d3-4b7e-adcb-1b3dcbd57e78", "sighting_of_ref": "indicator--5eb0807e-ae90-4ccc-a602-b556b4ecd1ba", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594669b3-df45-46df-a556-10a6cefdc9a3", "sighting_of_ref": "indicator--1758e7a6-680e-4f06-a6a8-f05212c44f50", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392bee5e-1cd9-43e1-a680-2b8fa28be925", "sighting_of_ref": "indicator--1758e7a6-680e-4f06-a6a8-f05212c44f50", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2cfd6d-0c94-416f-b2c2-1cbc630d6091", "sighting_of_ref": "indicator--31a3044c-3e0c-4a68-a499-97d1508eaede", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c4a18b-e265-403e-991e-47f3b11fb024", "sighting_of_ref": "indicator--289a2f81-c15e-4e97-a215-e447a919f5c2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9550274-cf10-465a-8031-a3e068e7f820", "sighting_of_ref": "indicator--4cc4900b-2ace-4738-ac1d-b067306f6e8e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03df3289-c348-4776-bf2f-f98e28ac25bc", "sighting_of_ref": "indicator--43685eb0-5ed6-4730-a1f5-47e635bec792", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963c5967-24e3-4d9c-a935-7e5a153c4fc5", "sighting_of_ref": "indicator--43685eb0-5ed6-4730-a1f5-47e635bec792", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc8545f-c623-416a-8a6c-8ce9ac8173e0", "sighting_of_ref": "indicator--e7e7b1eb-0c9c-48aa-b0d4-c99331c2b532", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbfb62f-0867-42b4-9125-094824a6ea37", "sighting_of_ref": "indicator--83c2f583-2a4f-4ec7-8bc4-c10a92f1ee01", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c657ef-9836-4217-bd52-5521563f5200", "sighting_of_ref": "indicator--e858dbe3-59bf-4c52-8bfc-4eb2304a19ef", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7a8da4-b972-4707-8fc9-f1233836c773", "sighting_of_ref": "indicator--4a09aa23-f9f9-4789-b48f-62de5df09cea", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685131fb-57f6-4063-94eb-e90880be4ec1", "sighting_of_ref": "indicator--d50824b5-8b0f-4f9a-a3ff-f400173fddd1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2168ba06-33de-4770-8716-ca5ccf0da427", "sighting_of_ref": "indicator--2c7619b0-bf9b-42eb-91f3-74e684119c7f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d953ee1-9686-4266-a868-213d06bdd674", "sighting_of_ref": "indicator--06855963-118c-4b0a-b6d5-def768c199ee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137c322b-dd82-4204-8a06-e0e949af8006", "sighting_of_ref": "indicator--299829e1-232f-4a45-9a8b-b42e66c9de5a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d02efa-e76e-4012-8dbd-347810450423", "sighting_of_ref": "indicator--69d897da-d20f-4643-950e-2b27f4c6a5f2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f5f224-3f6a-420b-ac06-769947f09902", "sighting_of_ref": "indicator--7bb8c0b5-d568-4e2a-8e70-062471cfc389", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f036392-e316-4689-b0ee-b08e635e53ea", "sighting_of_ref": "indicator--e05e1e3f-222a-45fc-8b65-94b5975ec9b5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06de94ab-24e1-4fcd-864d-27f12bdb79e9", "sighting_of_ref": "indicator--c81c7824-28cc-4862-aa2f-910943a9611b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ac878f-88dc-4109-9758-ad7a2c24730e", "sighting_of_ref": "indicator--c81c7824-28cc-4862-aa2f-910943a9611b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3edef3-12e6-4cad-b691-16a80288b202", "sighting_of_ref": "indicator--c81c7824-28cc-4862-aa2f-910943a9611b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b5e384-b2e1-4a7a-a1fd-25aab5ca16cb", "sighting_of_ref": "indicator--dafbde2d-c49c-4047-bd70-2089ad3090f6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94f2d1b-19af-4f9b-9f18-3d41602b4257", "sighting_of_ref": "indicator--c1851509-09fc-4157-a98a-c9cc23e4e027", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401142ce-71a5-431e-812a-027876d33a6c", "sighting_of_ref": "indicator--f4904c4d-18a7-4a3a-8f0e-64a4001e8842", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b28188-3416-4a47-a3ff-3b6f1794b64b", "sighting_of_ref": "indicator--7a69f543-75b9-4954-a3c8-8560d46ced03", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051badc8-9ba9-40e9-bc04-71a9dd69f569", "sighting_of_ref": "indicator--4bba262c-a0a9-4728-a8d0-2f92f3775c32", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00903231-3551-49fc-a874-551a1d87cf1f", "sighting_of_ref": "indicator--a859915a-7af5-4e7e-b049-9b8f64cf5f64", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e09086c-0157-4dd2-9d43-261070cb4e5b", "sighting_of_ref": "indicator--c041bbb4-53e7-4899-b9f6-b92227d4a644", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a9184c-6c0e-4546-bc90-dc14b62d2335", "sighting_of_ref": "indicator--f608d634-e6c3-433b-abbe-07a67dae3f54", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315d4ba2-d78f-4355-bcf5-c9ed6ba0fd43", "sighting_of_ref": "indicator--4f7c4168-db67-4aaf-8406-0991f6590b03", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814b62fa-98d1-4727-8c1f-30c97d0ad0e9", "sighting_of_ref": "indicator--d42f0dca-291a-45c0-a250-7976c99ec189", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65675077-c634-47f6-9a3e-ec28e5b99152", "sighting_of_ref": "indicator--f5f55419-c720-4052-ab00-dd3c1e3b2868", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f7d2a7-b221-4268-a1bb-b6e03e908168", "sighting_of_ref": "indicator--4a794b63-f0db-495c-9cc1-a541a61e2c39", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a9f409-fa86-4afd-bb15-bac588f18c4d", "sighting_of_ref": "indicator--8127fcaf-c41e-4ca6-898b-6c3a3b2cd75a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaed749e-5216-40d5-9274-af31233bcdf0", "sighting_of_ref": "indicator--e81dc01e-f43d-4964-a521-4c60477fb395", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594e0b51-72aa-411e-92b6-7ca6d06ad081", "sighting_of_ref": "indicator--062de773-563b-43ab-bedd-668dc9f52621", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a95c0d7-b0ed-4972-ad47-3bf9159de918", "sighting_of_ref": "indicator--83e55b19-3953-4a1c-b514-e7e64e28d2fd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692519b4-c70a-44d6-be6a-73b37183fd83", "sighting_of_ref": "indicator--28373823-c6d5-4da1-9cf7-ff7a05620a14", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72470e0-ce19-4b3c-8e2a-6a1917c54e55", "sighting_of_ref": "indicator--67985e70-ecff-4f73-9358-5492d81d032e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fccc1d8-c8c6-4972-9d4f-63ac857e5d27", "sighting_of_ref": "indicator--def855ca-fdd0-432c-8157-c609e33ef395", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d778d41-1de1-4bc6-a973-674fcfe80679", "sighting_of_ref": "indicator--42e6d867-1143-4fc8-8e2e-e20ec17f82ef", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42d31c8-b9d2-4896-8557-a8b6cb4fb933", "sighting_of_ref": "indicator--0849d3fe-7f9f-4994-bd1d-535f3a3ffc1d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4884e60-51d9-4669-9de2-90069c96abb2", "sighting_of_ref": "indicator--327f5b4c-8b23-4d48-be38-21e77a11be16", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20fbfbb-822f-4eeb-94ef-bfff6f489624", "sighting_of_ref": "indicator--7b7d4f1e-103f-4b7e-ae0c-11a82818a114", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5051674-f744-4d11-917e-ca33311fae2c", "sighting_of_ref": "indicator--09829bd4-5ff3-44cd-b4d5-a080e0a83411", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30fba615-fc63-4661-907c-47fc218b82f5", "sighting_of_ref": "indicator--b8cd8f4e-a73d-47a8-9fa3-3c7fce68c325", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382fcecd-55c3-4c1a-abe0-15819c02769a", "sighting_of_ref": "indicator--cbdc9870-7429-40a6-b183-5078fecf2854", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49039eb-e7a1-4489-9a30-69d230b74ebe", "sighting_of_ref": "indicator--396e7473-c630-41b1-9ba0-529f35e17157", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b3e4f4-0837-44e4-a539-6f35f174b3f8", "sighting_of_ref": "indicator--f1b8a8ad-0631-4d57-99e2-c43cd154b4ee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bba59b-4879-4c0e-9031-3eac45f43022", "sighting_of_ref": "indicator--d53fa20c-8775-4b3e-830d-8bb7d0375afd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43a58c2-1070-4164-9dce-594083966548", "sighting_of_ref": "indicator--247e4894-160d-4bc3-8c5a-2ff8c520e5d3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862631ba-07bf-4cc0-a00c-06d13caccc68", "sighting_of_ref": "indicator--016b3437-d0df-4882-9b91-9451efc8abec", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfb648d-7711-4a71-8125-ff3e1a7d57ab", "sighting_of_ref": "indicator--306cf8c3-fa92-43ce-b486-9b2d1d4a10e6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766ba133-6750-42c6-a8a1-a94197dae83a", "sighting_of_ref": "indicator--82bdf212-2eb2-4fe5-801f-d68f4187ff91", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e51b140-caff-4aac-b217-955c4c841cc7", "sighting_of_ref": "indicator--d8bcd02f-8728-4245-bde8-3d2d472b782c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a639e71-33f0-4630-876a-0bef332707bc", "sighting_of_ref": "indicator--66556583-ba7f-4e54-a88e-3db75218dbaf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c700c0fc-3e40-4fdc-b2d4-986fb230fd1a", "sighting_of_ref": "indicator--2c4e7733-918b-4cfe-9025-58fe9d7711ce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4bc1a0-27a3-4f9b-b269-856b820a658b", "sighting_of_ref": "indicator--421946d7-8773-40d9-9336-c3cb0d5c4f49", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cea3383-0c04-4ee4-bf97-593d3efc9938", "sighting_of_ref": "indicator--481ca315-8c30-4699-b9ad-43055f1302b6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c50b2c-71fb-4460-9698-aaf3f94a30ae", "sighting_of_ref": "indicator--28cbcaf2-6bfb-4690-9b3c-319226d3d596", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6093b9-4d11-4c65-9a3d-4a70d41b53e9", "sighting_of_ref": "indicator--214bdab8-008e-495d-8c56-7ac967f9db2b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f761b6-8ef0-46ee-bc92-09578ec62cb6", "sighting_of_ref": "indicator--e95b2743-2750-4666-95e7-a9a975c16409", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5893b8a9-c69c-4bf0-b7f2-302f7efdb50e", "sighting_of_ref": "indicator--e34823ed-5c92-4cb0-88eb-be99afab5065", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc4a24e-a3df-4e89-9588-1481c9512a81", "sighting_of_ref": "indicator--42893328-f0af-4202-8510-4d7edfeb9117", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd404323-9889-4928-8f33-b2511a2f1d21", "sighting_of_ref": "indicator--69769228-3684-44ff-9dd3-3135fd20678d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e802ea-23bc-4bed-a72d-53ecd08ea0d8", "sighting_of_ref": "indicator--10ebb9fa-c3c1-4921-a615-70eea1a9e63a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c263ef19-4248-497f-b2f1-566c1766c34c", "sighting_of_ref": "indicator--08495301-d937-43ea-a35c-0ba358e91b95", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026372ef-7457-402b-b17f-f5f1f15029fb", "sighting_of_ref": "indicator--a3dff02d-51c6-40b1-b743-0cfe0bf92155", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd964651-512c-44ee-8afe-93d3e7cbea59", "sighting_of_ref": "indicator--f1e3b43f-0b41-4ee0-a6af-8e04416cd245", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efbcb0a0-b5e1-449f-8478-208fb54a1770", "sighting_of_ref": "indicator--af0b765d-e40a-462a-af09-f2e5583e3a6d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6d945e-ece2-407c-a5c7-59e62922d863", "sighting_of_ref": "indicator--f515013a-c9e6-4016-b91a-0182fd651e83", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74eaabce-5071-41ff-91d5-09af73416eb3", "sighting_of_ref": "indicator--ac6b16fa-8a31-441c-84d5-e86bd81a965c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2daf60-1a4b-42c0-8fe4-1e1bad7cea3a", "sighting_of_ref": "indicator--e461cc7e-5842-4e49-a00e-8fc4c4ceebbb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be295cd-d58e-43fb-b5d1-710e60c833ef", "sighting_of_ref": "indicator--1db501a5-568e-4535-92d3-815704de2bca", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c647d9-bab1-4f7f-938b-6d38d8c85bc3", "sighting_of_ref": "indicator--8aaabb20-21cb-41d0-aee6-6acb70eb8acb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cfc6a2d-5cd9-400c-af58-496ae475b679", "sighting_of_ref": "indicator--b9a83661-45fd-4e6a-ba68-bb4096bc7d0b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d350fa-0f18-4f8a-b277-f4f68d38b24e", "sighting_of_ref": "indicator--f0aeaefa-0ca4-4490-84f3-582f4d38d38b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb44c44-fed1-40cf-b8ec-90825c8bf346", "sighting_of_ref": "indicator--f3f13fb3-0444-43c2-a504-82f1f0458ff0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0c1346-de91-4274-8c29-daf608257abc", "sighting_of_ref": "indicator--ae464636-d676-4f41-9ff6-8deeed198983", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06727513-9574-4691-b822-1f0e0168a518", "sighting_of_ref": "indicator--b967698f-13b5-487f-b810-805c83290aa9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82a27e0-02cd-43a8-86cf-7c74c63383fb", "sighting_of_ref": "indicator--5a190c84-23ba-45ce-a61b-79a1ec5b6d04", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63afbf2e-c0d9-4489-bb5c-3382cf59173c", "sighting_of_ref": "indicator--0bb4ec45-a224-44fb-b235-c68a4c891e32", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beab85f1-efd5-4d00-833b-5e82144c41ca", "sighting_of_ref": "indicator--b4b362a7-200a-430a-abbd-9dcc64f99419", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56b8e8b-3eb9-438f-852f-f1f86a839b63", "sighting_of_ref": "indicator--2148f236-1872-404e-aef7-bedfe82e29d7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d82575-069d-4550-978b-7d3b4e033e20", "sighting_of_ref": "indicator--49041585-b9fb-4690-a16e-acc67f220c1f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb280a2-bfbf-4356-834a-e81780e5b9ad", "sighting_of_ref": "indicator--cb72436a-2c09-4c4d-bb6f-aff38d98604d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff310303-f246-4f0b-afca-b71af52355d9", "sighting_of_ref": "indicator--32bf61c3-b7f0-47ed-bc9e-ff6ff725607c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0173cea3-5427-4dfd-bd1c-87a9e5a942c8", "sighting_of_ref": "indicator--5c60e333-eccb-4053-a639-aedc944bb444", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7a507a-0254-4f5e-81ea-beaf28d2fceb", "sighting_of_ref": "indicator--31ab7f70-a146-4e4f-9817-e38c189ea564", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968e337e-e529-4ca8-9394-3184fdc146cc", "sighting_of_ref": "indicator--1c6db099-1a38-4704-986d-c2773a67b54b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4267ab5-c130-42d5-939e-3fe5ec86d8db", "sighting_of_ref": "indicator--9acab6d8-0a17-40b7-b6dc-de0e2368f42a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed075cf1-4caf-4e70-b6a3-93c9c7d8ed32", "sighting_of_ref": "indicator--8c655395-5be3-4d9a-976a-d366f527dc8a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016f1145-4096-4696-8733-4ee8c954b6d2", "sighting_of_ref": "indicator--aa2ae955-0af3-4196-bd65-f7d3aa3fb093", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643dcf86-c313-410b-9b10-f548b9476a10", "sighting_of_ref": "indicator--61d54d90-b704-4d36-a069-07fbf2fd7fd2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31190525-ce98-491d-bd21-f0a65d72322e", "sighting_of_ref": "indicator--f136a9ad-51c1-4af3-9b2a-a7c4e29c84ee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b762dc1-b495-40fe-bd6d-04a335a1dfac", "sighting_of_ref": "indicator--1f826a43-ab73-4bc3-be76-0f5b4077b084", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088764f7-2898-4974-9d06-3ba5bb8673f9", "sighting_of_ref": "indicator--05335bf1-0c07-4a9e-8a14-7003b4e5924f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbca471-40fc-4b0a-9011-329f3a0e5339", "sighting_of_ref": "indicator--050ba679-18ec-4f7f-a540-95c02862c543", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b511f0b-3342-4030-9f9c-c43e5d2936fc", "sighting_of_ref": "indicator--158cb517-2956-4d59-b078-8fb7854b1409", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7750913f-dea8-4611-9c08-59b6e5826638", "sighting_of_ref": "indicator--20b2a85b-6879-404d-baaf-17094ae2c9e3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0f1506-6b16-4bb1-a34a-1876760806a0", "sighting_of_ref": "indicator--c44fb784-d01d-4369-8721-a9ac37b77e5a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d35230-7f1d-4382-a8d0-3986c229ace9", "sighting_of_ref": "indicator--fd12355a-dd94-4d2d-b8ab-e14f81b1358f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86eb5c9-d0e6-40b9-837e-52cc536c3ac8", "sighting_of_ref": "indicator--ffba8755-6eb9-42d9-9caf-1416ac12abb7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e06a17-f3ad-42db-b0e0-357f22247de7", "sighting_of_ref": "indicator--247a8ea5-4871-4803-a65a-b517d39ed9bf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518ccf66-ee66-4676-82c0-993679123ffb", "sighting_of_ref": "indicator--d2ee258b-dfe4-484e-a6ff-391153dedf4b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80d809e-cdf5-4ad5-8510-6503326f7e11", "sighting_of_ref": "indicator--44db7a71-dfd9-4451-ad4f-3b9eec68f19a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95de49b6-75c0-4eb6-9c1f-5435d4ffdd77", "sighting_of_ref": "indicator--9113ed63-8375-45e1-a0a1-2bbb0d0d7a68", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d452578-33e3-4134-8229-ea3b128327e0", "sighting_of_ref": "indicator--3464e902-5931-425d-ba76-93cfa1fda77e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd85c7c6-8f93-4eea-8dae-75aa093926be", "sighting_of_ref": "indicator--d06d7e88-4725-4e0e-ab97-afaf7ab6ae4f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe07cd13-dcbf-421b-a85a-9796d31c0933", "sighting_of_ref": "indicator--6e67a776-93a6-43c7-bd26-2a1dbe129c3e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a239845-cb82-4fed-82c3-52a3b56645bb", "sighting_of_ref": "indicator--1fc5a67b-1135-4cea-8178-78d8b2992a1a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88683642-0b87-4d14-bdaa-c44b08f2b0db", "sighting_of_ref": "indicator--0101694d-b317-4d62-aa60-a44ad6e79024", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958368ca-94ee-4121-b885-4546b642e7b1", "sighting_of_ref": "indicator--10d01d5c-1eda-47af-9333-f1ea42a50f5a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fc7481-6923-41d8-bc8b-0a19823e2c05", "sighting_of_ref": "indicator--39d39090-673a-47b7-ae4f-319ca7c1503e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8873f1ad-b204-4100-9ffd-07ec87e8c42b", "sighting_of_ref": "indicator--7e2fa6dd-7e38-47cb-aaa2-0ffecd1a35a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715cc3c5-e793-483d-be61-a5896c82f794", "sighting_of_ref": "indicator--c7a07c02-1710-45fe-9852-5409634a5bfd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b068c03c-5083-45f5-8528-a6ee18f2917f", "sighting_of_ref": "indicator--d7288c8b-7b71-47f3-b461-49b5f5b5cf00", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329ad166-7d55-49f0-8e46-53ec6be48734", "sighting_of_ref": "indicator--10ca3ced-5c87-4947-ad2b-e388bd470776", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff593ab6-63b3-4f27-a43b-ac1c3ac48b60", "sighting_of_ref": "indicator--6edb3e00-54cb-425e-af94-d21b67614779", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c395c6-0624-4183-971d-31ecf0d81551", "sighting_of_ref": "indicator--70861214-296a-491d-ad79-a0288320ef2a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be7eba2-82f2-4aa0-a885-802587f48656", "sighting_of_ref": "indicator--bc5cea99-52c8-4381-8829-6efaaed8c516", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983f2605-11d9-49cd-9303-38764e72f8a2", "sighting_of_ref": "indicator--5e693259-cf55-4655-8a20-add3282daf69", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a30193-fa3b-4282-9a0e-2ad507187958", "sighting_of_ref": "indicator--c0eb50d4-d1b0-4071-b26f-67d8252b1333", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad62df1d-5184-44a7-80d9-ec87e4c72ab3", "sighting_of_ref": "indicator--ed39fa05-d338-4e48-82ca-17678c125a54", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e271d7-a780-4e09-abcf-6bef7dbc0a00", "sighting_of_ref": "indicator--abed30d3-138f-4437-8522-e5f2525af3c0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9d0168-01c1-4c60-bd26-cc003d4511f9", "sighting_of_ref": "indicator--48012127-7ad0-4eb8-b42e-d11a8bd65732", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9bf8ea7-450d-4093-aed4-710173601b45", "sighting_of_ref": "indicator--805be56c-fc4c-4477-9525-d55f9a8a4a2e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954940b5-7a63-488c-8260-4c6a4af33b50", "sighting_of_ref": "indicator--87732ba3-11db-4981-9d45-c1d2b7a98c28", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd4e2f1-f549-40e0-9af2-78549910fce3", "sighting_of_ref": "indicator--cb113470-30ef-450d-af10-089d967f88b5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceed8b8b-3388-4f7d-99a0-8efc1198a075", "sighting_of_ref": "indicator--72cd47c3-ed79-4080-bd21-ea6724daf7c1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8123ec3-90c5-418c-80ce-ebf9aee58861", "sighting_of_ref": "indicator--ea382184-9883-4a2a-9d9f-b38740b32b9f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5db62d-e94b-4f02-baf2-bee63dd01ec9", "sighting_of_ref": "indicator--dd402606-de89-47bd-821f-a4445337e441", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec96dba-d632-4d34-b2ca-0d92ddb6e37f", "sighting_of_ref": "indicator--80bb6215-86e1-4073-b633-4c5517f78255", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490b5174-ea06-4cab-ba7b-3912fcd6fea1", "sighting_of_ref": "indicator--72a36db8-149c-4ac6-bb61-552e8257499e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e59e8e-4b9a-479a-9a7d-e1c52dd7eea6", "sighting_of_ref": "indicator--b7f5aa8a-d099-4ea7-978f-7d9938f49f8b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde30f5f-c179-4b60-8bbd-584939390b5a", "sighting_of_ref": "indicator--fb166f3b-b44d-4582-8e8d-4406c587e086", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52604d5a-7100-4c25-9e71-c31c99179c99", "sighting_of_ref": "indicator--de4ec458-2c2c-43b8-8fd0-e59a95ca6ce7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1742cd-b546-42fd-8409-ce1f4dbf1095", "sighting_of_ref": "indicator--e78e04b0-d413-45e4-a3d4-677e64bdaa1e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16618c17-c874-4eac-b65e-bee59162a134", "sighting_of_ref": "indicator--1b7ce7c2-3187-420f-a728-621c357bd0e7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec8e3eb-c0d3-4af2-aa27-300f9b82bcc6", "sighting_of_ref": "indicator--3215fd88-258b-4065-9f34-9bd466f5bdf7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3a8d83-34b8-43a5-9b3a-917f5e9ece71", "sighting_of_ref": "indicator--18beaf7f-2637-4261-beff-0cf353923398", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2543ea15-9c31-4e9c-a60d-a0e1f8987437", "sighting_of_ref": "indicator--5ed1d4e2-e5c7-4484-b623-376d785ae4b7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09854e8-955f-40e0-bab1-0f0b452822b5", "sighting_of_ref": "indicator--0c7f9608-868f-4dd3-b3b2-6168d4fb6a2f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0148dc0-dc95-4fee-ab8d-27a2eb28d719", "sighting_of_ref": "indicator--be857834-3208-4332-b639-0dd3935f9f0a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134ab4ea-bd82-4c47-a35b-acff7c75874c", "sighting_of_ref": "indicator--5139ffba-653a-41fb-a754-0a89b5ce1d68", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e76f5d-3088-4f0d-99da-43674fdb03fb", "sighting_of_ref": "indicator--08a7938d-b109-43fc-b639-f69e24092cfc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1885fd38-3ab3-4fd2-b7c0-c62a173c2fa1", "sighting_of_ref": "indicator--5994545f-1a5a-4596-b2d4-c0c13b636707", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2446c8d8-a7bc-411c-b055-2c8b61daa7b0", "sighting_of_ref": "indicator--79e5680e-db70-4526-a4c9-894e23ffda72", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec61343-b47f-4b6f-a4b8-29939955a5ac", "sighting_of_ref": "indicator--4ed024fc-a7f0-4d9a-b750-e17c7d688f9a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7eb4c82-3bd3-4710-bc24-d1067139959b", "sighting_of_ref": "indicator--a8d1595d-87a8-4ad3-ad4d-541188ffcfd7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc731ff-be8b-4367-9b27-1b890f60af94", "sighting_of_ref": "indicator--f6301a15-cdaa-4f51-aa29-2a142220ffea", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ce84c4-3d9e-4b39-9ab4-1316b8a7d346", "sighting_of_ref": "indicator--cea52bf4-5292-46ad-943e-8644a3fb9df5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9949fc1-cd3b-4bb2-a069-3f644a6652d5", "sighting_of_ref": "indicator--b89c2f3d-32d6-4961-b1b8-3825904a7490", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb866f4-84f2-4894-8172-0ed0359d59a7", "sighting_of_ref": "indicator--df1222ff-f72e-40b9-b614-8b10e5900abc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b7e700-172e-492a-b391-aa425bb5a030", "sighting_of_ref": "indicator--d6d3cf3f-3959-40b0-9bb1-fed58965e174", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5273a2d2-c2bf-496c-ba2a-0b91e836c2e2", "sighting_of_ref": "indicator--c327e18f-a853-459f-9d95-97caba66f79b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c1a242-1057-4236-8db2-2c356185ea10", "sighting_of_ref": "indicator--dd32cc3a-b4ff-44fd-9c25-0cb542a48e72", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8065fe7-07e1-4278-9946-c9ee86d0ee44", "sighting_of_ref": "indicator--fc555af8-bd13-4ae2-a03b-79dbe9c679ea", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b22e5c-ecc0-4ea1-8eb5-6945d7f17d5b", "sighting_of_ref": "indicator--e7f54ad3-27cc-4b56-b084-54af5c433373", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793d6042-fd8c-4e64-89e0-1ec45927eb4b", "sighting_of_ref": "indicator--f545f2aa-ee07-49ce-b360-94e39d320646", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed631bd-7a59-4b36-91a9-1a71e779ddbb", "sighting_of_ref": "indicator--75f93024-ecdf-405f-a9cb-565048061458", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cc8af6-6f19-4717-8fbc-d84f418251f4", "sighting_of_ref": "indicator--6b26669d-071a-4bf0-963e-2bdb713e853c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efee876-c415-4a70-b9ce-3bf8cd9b8abc", "sighting_of_ref": "indicator--9037c4e5-3631-4437-b940-0b1da1e6605c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab783ea-d868-4ab7-b028-9faf6e788f85", "sighting_of_ref": "indicator--91e2bfe3-84de-46cc-8484-3686801aaccf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053681e4-18e8-4250-bdb3-0ae454658385", "sighting_of_ref": "indicator--43ccb0f4-af12-4977-801f-25afd3f4f931", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d832cd4b-f072-4492-b781-39e1ca3734d6", "sighting_of_ref": "indicator--01ee596e-6fab-4e44-a3c6-27b921cf5f34", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee871c4-ffef-4d8d-ada4-5841948b5428", "sighting_of_ref": "indicator--5238dea3-34a8-4d9b-8e94-c08c928e603a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b19d2c-2942-4f81-ade6-e97d7a14a05d", "sighting_of_ref": "indicator--806d794f-d295-4377-9849-979c46415fd9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227d2ace-f32c-4aa9-a38d-9af51bee3929", "sighting_of_ref": "indicator--cbd4c786-d606-4811-92c4-e4421f4c6e35", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ada108-9f8e-42de-b1cd-175ad5fb73b8", "sighting_of_ref": "indicator--cbd4c786-d606-4811-92c4-e4421f4c6e35", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854c25d3-8e56-4ba4-bc12-7c8487325b9d", "sighting_of_ref": "indicator--6de13974-7de7-4f3e-b069-d0dc6b2ff287", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e726a4af-04b6-4847-9003-8241c2c216ac", "sighting_of_ref": "indicator--1655b4c7-945b-46bd-b8cb-e05005ce4c05", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0d1aaa-03aa-485d-8624-dbbb8f3ad517", "sighting_of_ref": "indicator--1655b4c7-945b-46bd-b8cb-e05005ce4c05", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032fadeb-f441-4bac-b47c-24b05dc3ca1e", "sighting_of_ref": "indicator--ecaa8601-1d02-41c1-9194-c97a72cef5ee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f5d159-bc8b-48c8-b797-34b986c92b55", "sighting_of_ref": "indicator--b2facf92-8743-4320-98e9-979071e515ab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f608070-4dfb-42a7-9981-51100f1f1cea", "sighting_of_ref": "indicator--2a4952f0-5db3-4bbe-9761-042d5bf597d8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa884e0-a73f-41f4-b69d-9f341a2b9077", "sighting_of_ref": "indicator--18a49651-90f0-40cb-89d5-de3313ccd865", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c114531e-7d81-43c8-be1d-93921e3929a0", "sighting_of_ref": "indicator--3bb1e888-fc10-4587-b7d4-dd522ff2529a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3dd8c32-a462-4558-84e5-debe67c13b85", "sighting_of_ref": "indicator--3bb1e888-fc10-4587-b7d4-dd522ff2529a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918c8bf0-35d7-4736-b9ee-bc94918da4cd", "sighting_of_ref": "indicator--3bb1e888-fc10-4587-b7d4-dd522ff2529a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b5f923-cbc9-4b70-a1ef-7757d68ddcf5", "sighting_of_ref": "indicator--7c9a0fb2-0c70-4702-93b0-3340a67f91c0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564985ad-b4f7-47f0-8684-5bcb55c0afb7", "sighting_of_ref": "indicator--7c9a0fb2-0c70-4702-93b0-3340a67f91c0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76c5f55-9bb1-44aa-8984-3a02849d119c", "sighting_of_ref": "indicator--7c9a0fb2-0c70-4702-93b0-3340a67f91c0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d266ffaa-34b6-41db-a67e-7da99a575666", "sighting_of_ref": "indicator--31e2d62d-7989-4d32-a2c1-7fb002142d63", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530f39ea-7b54-4236-a7b1-f02a3ab4b501", "sighting_of_ref": "indicator--31e2d62d-7989-4d32-a2c1-7fb002142d63", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c011d2-7cc1-4f94-a1dc-ce0a067239ca", "sighting_of_ref": "indicator--31e2d62d-7989-4d32-a2c1-7fb002142d63", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba99c735-067f-4a37-8281-28572bf8c613", "sighting_of_ref": "indicator--452ebc2e-fd10-4579-99fd-ffc26fff9172", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18bcff70-e95e-40e9-8e1d-bea26f969b50", "sighting_of_ref": "indicator--452ebc2e-fd10-4579-99fd-ffc26fff9172", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b45d9a0-39af-4ca1-82d4-5f8b4264435d", "sighting_of_ref": "indicator--452ebc2e-fd10-4579-99fd-ffc26fff9172", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9664c0-7625-44db-8d04-5d07f1770d77", "sighting_of_ref": "indicator--1383728e-7cea-4877-93f4-8ba534680c55", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9108e75a-1631-4989-a660-e53241e96719", "sighting_of_ref": "indicator--1383728e-7cea-4877-93f4-8ba534680c55", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ff676d-df30-4ee2-9704-0e4f22f7f5fd", "sighting_of_ref": "indicator--1383728e-7cea-4877-93f4-8ba534680c55", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ab40f4-578a-486b-8dc9-570f97be14a0", "sighting_of_ref": "indicator--ddb04dd5-5d35-4613-89bf-18b207f9a643", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b66ddeb-a73d-4153-bc2b-a179afbc42fd", "sighting_of_ref": "indicator--ddb04dd5-5d35-4613-89bf-18b207f9a643", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769b56e6-a3b1-4b3d-b0e8-c757db9a255b", "sighting_of_ref": "indicator--ddb04dd5-5d35-4613-89bf-18b207f9a643", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbfbb30-7ebd-4b52-a422-64e7300c5ab9", "sighting_of_ref": "indicator--185d0628-c8ba-40f0-9746-caa5e525dd20", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd8f9fa-fb67-4154-8d37-7bf65d969599", "sighting_of_ref": "indicator--185d0628-c8ba-40f0-9746-caa5e525dd20", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c04615-b062-453b-a3bf-78947bb90046", "sighting_of_ref": "indicator--185d0628-c8ba-40f0-9746-caa5e525dd20", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8fbb8e-289d-4039-9916-ee395093f0e2", "sighting_of_ref": "indicator--1817f072-a5c8-4455-9caa-897536d10564", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c8358b-8d3a-4f3a-9afe-4d2502270204", "sighting_of_ref": "indicator--1817f072-a5c8-4455-9caa-897536d10564", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39705f99-1bb2-4985-bcd3-31aa2d481b88", "sighting_of_ref": "indicator--1817f072-a5c8-4455-9caa-897536d10564", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ac7a9b-a805-4ae1-99e6-d5a9e1ae931c", "sighting_of_ref": "indicator--61c090f8-24ff-497f-a7a8-bbe9b117b8b9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7daae1-03ae-4832-8cb6-d4d20d20b653", "sighting_of_ref": "indicator--61c090f8-24ff-497f-a7a8-bbe9b117b8b9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ae8cfd-5a9c-4a32-8e32-fb1b75ec764e", "sighting_of_ref": "indicator--61c090f8-24ff-497f-a7a8-bbe9b117b8b9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723927a9-41b1-4174-bad1-80c0351d8147", "sighting_of_ref": "indicator--248835f1-aa60-406c-8ee6-3b1adad7ab2a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03bab33-92fa-49c2-8e72-603654da3635", "sighting_of_ref": "indicator--248835f1-aa60-406c-8ee6-3b1adad7ab2a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b7f1aa-ac29-4953-b6ed-1748a2d2dfc5", "sighting_of_ref": "indicator--248835f1-aa60-406c-8ee6-3b1adad7ab2a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7040b0b9-d935-4c82-a8b4-3e13bd05c308", "sighting_of_ref": "indicator--27a10a7b-15b6-4f0f-8b35-3e128bce8595", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3cf85d-1237-4581-a8c6-c495e5897785", "sighting_of_ref": "indicator--27a10a7b-15b6-4f0f-8b35-3e128bce8595", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7c7af1-8e66-4e6c-9c58-4844385c9a57", "sighting_of_ref": "indicator--27a10a7b-15b6-4f0f-8b35-3e128bce8595", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9221e10-0b0a-43ce-b103-853e8a060a18", "sighting_of_ref": "indicator--a93084e6-70e2-41d8-8fb8-728af2cbb231", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2546c80-1085-4a41-9760-125d871b6c2e", "sighting_of_ref": "indicator--a93084e6-70e2-41d8-8fb8-728af2cbb231", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81150d89-80f9-46d4-a0cd-4b791f227b63", "sighting_of_ref": "indicator--a93084e6-70e2-41d8-8fb8-728af2cbb231", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba9eea9-9688-49c6-8821-5a50091f838d", "sighting_of_ref": "indicator--621a9b9f-a6fe-4a44-a2ae-5675b7beae7b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38417dec-af2d-4f06-bf07-c263a67988a6", "sighting_of_ref": "indicator--621a9b9f-a6fe-4a44-a2ae-5675b7beae7b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a567579-d104-4701-a386-24ea548f01ed", "sighting_of_ref": "indicator--621a9b9f-a6fe-4a44-a2ae-5675b7beae7b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c573359-8f3c-4502-a950-34a291969a34", "sighting_of_ref": "indicator--a744d813-75bf-45b3-8935-411077525318", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1501de2a-003a-4648-ab21-c31af550a92e", "sighting_of_ref": "indicator--a744d813-75bf-45b3-8935-411077525318", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8aa634-46d7-4081-86b1-e72a496dcacd", "sighting_of_ref": "indicator--a744d813-75bf-45b3-8935-411077525318", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c426a90-96f7-44c6-8b49-643e491bf571", "sighting_of_ref": "indicator--18381df5-1e77-42b5-8956-a9cd1cd6ae9e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea8339e-4371-45a0-a84e-404b72f14494", "sighting_of_ref": "indicator--18381df5-1e77-42b5-8956-a9cd1cd6ae9e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1294f84-84d8-4134-83f2-3e465e444822", "sighting_of_ref": "indicator--18381df5-1e77-42b5-8956-a9cd1cd6ae9e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd24545c-33f5-48ae-a5fc-40163443fd97", "sighting_of_ref": "indicator--28c81981-393d-43a2-b3a9-0fa14f96ec53", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3dcd4a8-48b6-468a-af2f-05622d43560a", "sighting_of_ref": "indicator--28c81981-393d-43a2-b3a9-0fa14f96ec53", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c4040a-4c82-46e7-9f15-c5ee1ae6abb0", "sighting_of_ref": "indicator--28c81981-393d-43a2-b3a9-0fa14f96ec53", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41a199a-035c-432f-9c77-e79668be2ca2", "sighting_of_ref": "indicator--0cb01d52-1627-4fe9-a607-5f5295547f49", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e56006-aa53-47c7-bc3d-0b8cd1f1da51", "sighting_of_ref": "indicator--0cb01d52-1627-4fe9-a607-5f5295547f49", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1235b788-66d0-49f6-a6d9-63fa0ba830e4", "sighting_of_ref": "indicator--0cb01d52-1627-4fe9-a607-5f5295547f49", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a466a3e2-0acf-432f-b92f-f54902450de7", "sighting_of_ref": "indicator--647f7a5c-efb1-42e3-90bb-98ae91f1c92b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af599db-1231-4224-9da6-acd7a3a122de", "sighting_of_ref": "indicator--647f7a5c-efb1-42e3-90bb-98ae91f1c92b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050c5c60-0a6d-4d4d-9d5c-1fa4a80072de", "sighting_of_ref": "indicator--647f7a5c-efb1-42e3-90bb-98ae91f1c92b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c897b0-ba66-4763-9587-a745b81808b7", "sighting_of_ref": "indicator--6d9af1a3-a8e3-4f23-9cb2-c4f19a7861ea", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c38e8d4-b73a-4336-a137-949896f4d627", "sighting_of_ref": "indicator--6d9af1a3-a8e3-4f23-9cb2-c4f19a7861ea", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41fa1d07-d49b-44a7-b3b2-7dde18333bb1", "sighting_of_ref": "indicator--6d9af1a3-a8e3-4f23-9cb2-c4f19a7861ea", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5874ab63-d553-4f59-af8f-3d9382b11c32", "sighting_of_ref": "indicator--948ab7a7-91bc-4865-9d9a-fd8790737474", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42405ea-3cb5-4efb-abac-0c04d48d8aba", "sighting_of_ref": "indicator--948ab7a7-91bc-4865-9d9a-fd8790737474", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12aa36dd-807f-48a4-8161-4740512884be", "sighting_of_ref": "indicator--948ab7a7-91bc-4865-9d9a-fd8790737474", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995d8c61-593c-4d0d-a604-b14c60838a0a", "sighting_of_ref": "indicator--d263f315-a132-44b1-acc0-2cf488d117f1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd73f4f8-2cf1-40de-bc2e-f4e5fe4c2d75", "sighting_of_ref": "indicator--d263f315-a132-44b1-acc0-2cf488d117f1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228d9a19-4d02-4738-932d-be90490837c9", "sighting_of_ref": "indicator--d263f315-a132-44b1-acc0-2cf488d117f1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb54a78d-c7df-4d08-ad63-e64c0a156b98", "sighting_of_ref": "indicator--cccb4b44-6bb2-459b-ac7e-5492590ff810", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73f18ca-eac3-4a34-8d77-9057edcdcb91", "sighting_of_ref": "indicator--8ae4ce15-fbff-4507-8976-92eadda14aef", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e59cfd1-b80e-4a45-b70c-f603433803f4", "sighting_of_ref": "indicator--17372608-d9f0-4207-a56c-0f0c4dea71c5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618c25d9-69bf-432c-826c-f7d2d046761d", "sighting_of_ref": "indicator--08748c33-7460-472a-b6f2-d43a15f993b0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a6a350-ced8-414a-a3bf-6fc3333ff98c", "sighting_of_ref": "indicator--b7bf2144-e0c6-487c-8fa6-ced52d491628", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff3d583-3e80-4a29-9b29-2ff096cab284", "sighting_of_ref": "indicator--d59205ad-44e6-4708-94e1-c1e572094bc4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6db7dd-b463-4743-bf0e-e57318c6d684", "sighting_of_ref": "indicator--62a9c06d-e7ec-4410-8e68-f7e9f01718f0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9aa5af4-fac3-41c7-a3e2-682767e3674d", "sighting_of_ref": "indicator--b3ef2c9f-0a61-4d3e-a099-0bd4bf7979e6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87042009-52cd-4634-8da6-c7835bfdd14d", "sighting_of_ref": "indicator--246ac5d9-1f0c-4f64-a76f-fb9dbcefc333", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf7e30a-35ae-4681-9846-9ad028910834", "sighting_of_ref": "indicator--b57d1b95-91c6-4daa-bbd6-3ee2aabf294f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce3dd20-1182-4d7a-9ee6-7b8979564899", "sighting_of_ref": "indicator--b57d1b95-91c6-4daa-bbd6-3ee2aabf294f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77acfe29-1f0e-43fb-905c-0293380916b2", "sighting_of_ref": "indicator--b57d1b95-91c6-4daa-bbd6-3ee2aabf294f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f44d435-8d31-4b39-8466-7b800649983e", "sighting_of_ref": "indicator--7a8980ac-5850-4dcb-b262-decbe1db4f8a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e06c70-9894-4408-a793-d7749120a292", "sighting_of_ref": "indicator--7a8980ac-5850-4dcb-b262-decbe1db4f8a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915f12a6-da01-415e-a190-61ce0f26e527", "sighting_of_ref": "indicator--7a8980ac-5850-4dcb-b262-decbe1db4f8a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5144663-2bbc-4c05-81e2-2dbc245f589a", "sighting_of_ref": "indicator--de07529f-09bc-422b-a30d-e0bbdc39ef44", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a894cef0-6b97-4350-8451-92bba1093533", "sighting_of_ref": "indicator--fd39cf43-cf16-4a17-bacd-73d06925e1a2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d294b3be-35a8-4a82-9b48-264b74b4cdb0", "sighting_of_ref": "indicator--fd39cf43-cf16-4a17-bacd-73d06925e1a2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d39807a-25e5-4087-a76a-b9aab3ce55e2", "sighting_of_ref": "indicator--fd39cf43-cf16-4a17-bacd-73d06925e1a2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33782512-e9bc-446f-a63b-0b42463ac00d", "sighting_of_ref": "indicator--e7884d25-9a84-4ea1-8851-a32eebba0bcd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf33957-b35e-40b0-b281-69165c3e8de3", "sighting_of_ref": "indicator--8d42f086-d362-4094-98c4-5362623357cc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77bd268-ba30-4303-8fbc-af1a671742bf", "sighting_of_ref": "indicator--0e752448-d931-4f25-a2a5-a6e83fa3255c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7492657-9695-4a67-804e-e11ed785001b", "sighting_of_ref": "indicator--0e752448-d931-4f25-a2a5-a6e83fa3255c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ea7f95-ff61-4763-a01c-f320852331c9", "sighting_of_ref": "indicator--0e752448-d931-4f25-a2a5-a6e83fa3255c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b560f89-12ee-4666-9a58-7be29c76dd78", "sighting_of_ref": "indicator--68121536-e032-4b0a-ac0d-337b771a4e60", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131dc26a-c75d-4278-819d-4c28dabca1ad", "sighting_of_ref": "indicator--083c7afc-18ea-45d9-896e-d8b0708d378f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4287b78-ad43-46d0-841e-687e4592c57b", "sighting_of_ref": "indicator--18d5644c-a11e-45a6-bce2-213d7676eb8e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac37500-fd68-400c-ab70-4b21cccaf05e", "sighting_of_ref": "indicator--d8fac7ee-3723-4bdd-a500-2c3f0aead15b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fb2098-c3a9-43e8-b738-85911fbc2977", "sighting_of_ref": "indicator--ca8b397a-e78a-4793-999a-c9301f3d158c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959300e2-fb37-44a4-8a06-43c3842da20b", "sighting_of_ref": "indicator--1d92a7a4-71b6-45cf-9902-228b34b9b8eb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef3680b-3ae5-43c4-b5d1-d0f28ea6e9b4", "sighting_of_ref": "indicator--1d92a7a4-71b6-45cf-9902-228b34b9b8eb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4f05a6-642f-4510-a215-9dddc3c78207", "sighting_of_ref": "indicator--0558775c-dc7d-4a43-a662-5d98af23d756", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29eaaa8-59fe-4c86-8b40-c6c17b5eea0c", "sighting_of_ref": "indicator--0885a44e-fe6f-4085-b7c3-16680560b38c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948ebb69-ed25-48b7-8071-ec3f8d3258ce", "sighting_of_ref": "indicator--0885a44e-fe6f-4085-b7c3-16680560b38c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c66d67b-8798-414b-b588-4d7c416d93f6", "sighting_of_ref": "indicator--0885a44e-fe6f-4085-b7c3-16680560b38c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752e9bbd-975c-47f2-b00d-bc77330b3671", "sighting_of_ref": "indicator--75fa6eff-afd5-4a39-b8d7-73aabe3c987e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1bf9f0d-289a-4b62-9850-0be8a7b92ef4", "sighting_of_ref": "indicator--8033e5c2-e004-4920-b10a-c066a86c7cab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d844740-f5fa-4578-b5b3-954c6e1e403a", "sighting_of_ref": "indicator--6bdb9c9d-7ec3-4b30-91d4-835206e91e99", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba7c468-d1e0-47c6-8668-35067b408ce5", "sighting_of_ref": "indicator--9c8d4441-b5e9-4355-85e0-6090aaa983e4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56dc54f8-5250-4e7f-8213-0f132b0e701e", "sighting_of_ref": "indicator--5ba34c16-7fd1-458b-bc96-4264585f4cae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ddf2fd-537f-4066-8643-f6be5266bcb7", "sighting_of_ref": "indicator--81d07355-f995-4f7c-8357-f7e39c93237b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6bfc8c5-0328-4096-b471-2d8e0b151776", "sighting_of_ref": "indicator--fe627bd3-135c-4fd2-9475-8ce75c5433d6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fda8170-71e5-4ec1-a680-c413b7865b12", "sighting_of_ref": "indicator--13da691d-79a6-494e-bd12-58ae75242b9b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f418ff7-475d-4a7b-93ba-b4dbd3edaaf6", "sighting_of_ref": "indicator--13da691d-79a6-494e-bd12-58ae75242b9b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07076bfc-0ae0-41d7-be16-ce739801ac85", "sighting_of_ref": "indicator--13da691d-79a6-494e-bd12-58ae75242b9b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf3915b-a506-4811-b793-ec6453a7c770", "sighting_of_ref": "indicator--896aae72-6862-4a57-845a-2101a1e65335", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b268ca-1787-46e8-98f5-b9ce2e18476a", "sighting_of_ref": "indicator--896aae72-6862-4a57-845a-2101a1e65335", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767fa6e4-1281-45ab-9ae7-034e240bf752", "sighting_of_ref": "indicator--896aae72-6862-4a57-845a-2101a1e65335", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458f7b73-9d07-4598-9248-bb3697cf5a8a", "sighting_of_ref": "indicator--a6923769-18dc-483f-a461-5273353de766", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f049b289-4dfd-4765-aaa8-6b86e4a87d0c", "sighting_of_ref": "indicator--a6923769-18dc-483f-a461-5273353de766", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370156ab-55bd-44fa-a72a-59754f380093", "sighting_of_ref": "indicator--a6923769-18dc-483f-a461-5273353de766", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689e2a37-d4f3-4f3f-843c-aabb7e79b454", "sighting_of_ref": "indicator--312a2b34-469f-4cb4-8cc4-528e42a978bc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cea4cad-f16c-4896-8b09-7e6067d0e236", "sighting_of_ref": "indicator--2fb51b36-61dc-448f-965a-c0131600c8d6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7a0dad-1bf4-4e74-aeeb-ce8d89a03a3c", "sighting_of_ref": "indicator--369cf743-a5c0-441f-9d17-56a434b64ffc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df43e8f-0b2b-4fbd-9019-bc47f964e6f0", "sighting_of_ref": "indicator--fe6e7a03-8575-48fa-a725-aa70feba668b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2e228b-56c3-4877-a0e3-48529afb8662", "sighting_of_ref": "indicator--93068d3c-5017-4a2f-acad-bd8d7633a672", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd2c392-eca9-4a8e-a7df-7898b0e61f5a", "sighting_of_ref": "indicator--baaa1928-1ed3-4641-acfd-b48743e2e128", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf5fe3d-14fa-4d3f-ae69-ed5cb732376a", "sighting_of_ref": "indicator--270f275e-0e5b-4c1a-8062-7368432fd0b4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee24c91b-becc-4783-a5e4-80df72435c7a", "sighting_of_ref": "indicator--436c55c6-4d57-4322-8d35-64f97dbab1f4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976a0299-627f-4274-adb3-7a56f48f74ef", "sighting_of_ref": "indicator--9b5e3da0-f558-4ecc-8f15-26074f4e007e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14744507-bfd7-4e0d-ae66-6aa88c13d3d3", "sighting_of_ref": "indicator--92aab19f-3455-4313-a753-a961e1efa761", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad65eb6b-f4c6-4ef0-8374-c293d15b6392", "sighting_of_ref": "indicator--92aab19f-3455-4313-a753-a961e1efa761", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee74334-2d5a-4114-86fb-9f2419cc3f00", "sighting_of_ref": "indicator--9458336c-45e6-4b1b-bd7a-3d613078dd8b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9220b4-7462-4789-ad1b-5bf5951bd351", "sighting_of_ref": "indicator--a5ef650d-9441-400b-bc00-a629de85b7ca", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66101b8-6c83-4dbe-83a8-4e8c16d36d86", "sighting_of_ref": "indicator--53ba0c18-b635-40b4-bfaf-8dc490f0aeb5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12972be-7f84-452d-af34-8f485d8ae887", "sighting_of_ref": "indicator--9b0425f3-7f49-4d02-a502-9e0024a4f3da", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b07202-7d32-48c6-afd3-e255647b9dd3", "sighting_of_ref": "indicator--9b0425f3-7f49-4d02-a502-9e0024a4f3da", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01323fc1-f2b6-4104-a641-b7e26cdca0bc", "sighting_of_ref": "indicator--a8bccdf5-5f23-4d51-98b7-16e5d1d4543c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e491a9f-cf5b-4c8f-a773-1249bf72109f", "sighting_of_ref": "indicator--a8bccdf5-5f23-4d51-98b7-16e5d1d4543c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929691b2-ae7d-48a3-b43e-bf47506396ee", "sighting_of_ref": "indicator--877a7515-9d57-46b8-9dc7-c73a84d2dac4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bd5126-f64b-4dc2-a00f-39c119e3d3b5", "sighting_of_ref": "indicator--877a7515-9d57-46b8-9dc7-c73a84d2dac4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2823ff5a-1620-4273-8107-da8adf81c219", "sighting_of_ref": "indicator--ff8669b7-74fc-4682-98ff-09023a664b88", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe24cac-d18f-41e2-b162-96ccd32abea4", "sighting_of_ref": "indicator--ff8669b7-74fc-4682-98ff-09023a664b88", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cd12ec-63a5-49c6-8b7b-f747c40a5996", "sighting_of_ref": "indicator--c100399c-78c6-4b47-a6c2-885928a95a07", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca1abc3-cf41-4cca-82fb-bb1ff68ad93f", "sighting_of_ref": "indicator--c100399c-78c6-4b47-a6c2-885928a95a07", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6829d510-0324-4c52-b645-cf36bb6e7d59", "sighting_of_ref": "indicator--e7be67c4-0811-4314-b33e-d20f1420629f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec6adea-6ff5-4ad6-84c2-5741ee2a97b2", "sighting_of_ref": "indicator--eaaf976e-1031-42cc-8077-443f05f39ea2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccfbab59-8e1e-412e-9c83-82d9bc050926", "sighting_of_ref": "indicator--eaaf976e-1031-42cc-8077-443f05f39ea2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864a2dee-9646-4621-aad8-4580241ec809", "sighting_of_ref": "indicator--c3e5b5ae-5872-40d8-a6c8-2472fcc10496", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bb7929-50fe-4c12-8d78-469911a4cb7d", "sighting_of_ref": "indicator--fa4e58f9-b26c-46c4-95bf-b97257dc9ec2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6d77f9-c719-45f1-ab23-773bd9f0c2fa", "sighting_of_ref": "indicator--ba4a6167-c83e-4ea3-80df-b2de23e38eaa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64a12d2-193b-4930-97fa-71d4f932c633", "sighting_of_ref": "indicator--807fd24c-b236-4f64-8c14-b8e649c9fb3a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f505bc-8c41-4432-9ba4-be79fb8277bd", "sighting_of_ref": "indicator--807fd24c-b236-4f64-8c14-b8e649c9fb3a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9d0abc-a469-4ffd-bf10-e105d144fc50", "sighting_of_ref": "indicator--32273db7-d81c-4244-8e5b-53c10f46c262", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25de5196-7e8e-4280-97ad-aaf1649afed7", "sighting_of_ref": "indicator--32273db7-d81c-4244-8e5b-53c10f46c262", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30339ce-f9f6-45d5-a4fd-ca5997631578", "sighting_of_ref": "indicator--bad34645-4599-47c1-a49a-4a7de06253a8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71742d49-0da4-41bd-a580-a06e3a119e22", "sighting_of_ref": "indicator--41e53f8b-18aa-4533-a984-4c09b4862c88", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09f93b4-4217-42fa-a51e-3b53b04ce8f1", "sighting_of_ref": "indicator--81836e84-2680-4858-b752-c16571116ca9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0518b8ce-a38f-4bb4-9fd7-3eac9e6b160c", "sighting_of_ref": "indicator--81836e84-2680-4858-b752-c16571116ca9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b41007-697d-46cf-813a-a710bfb6821a", "sighting_of_ref": "indicator--81836e84-2680-4858-b752-c16571116ca9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202e2a04-f798-4436-8c60-b7f00f0772e1", "sighting_of_ref": "indicator--12314d57-b0e0-4a7b-8814-f2067fca1dc6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b231634-6c22-40cc-ae55-fbb1b73da16b", "sighting_of_ref": "indicator--12314d57-b0e0-4a7b-8814-f2067fca1dc6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4943fad5-1492-45b5-8a40-a5e04440caee", "sighting_of_ref": "indicator--2faa16e7-3b8a-4c73-ab7e-3a47f732b5b7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f2e1cc-c255-4c89-8b7e-92f49b54face", "sighting_of_ref": "indicator--2faa16e7-3b8a-4c73-ab7e-3a47f732b5b7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05590c90-961b-4299-922f-afe009fa89f4", "sighting_of_ref": "indicator--658527c2-0a33-47ee-a0ad-dea378ce06ef", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdeab4f-3bd4-44b5-aaad-2469399c187d", "sighting_of_ref": "indicator--1e3e7a0c-2763-4be0-a5b6-1bef143f7db4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94af63af-a6eb-4207-b7e4-0cd61cdfbdb8", "sighting_of_ref": "indicator--d179988d-3a5d-4397-9699-11539d49da48", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4017fd1b-f7c1-44f4-bc64-0844f598b89a", "sighting_of_ref": "indicator--d179988d-3a5d-4397-9699-11539d49da48", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1956dfcc-d179-434b-84c4-973fbfa140ed", "sighting_of_ref": "indicator--6e93099e-511b-490e-8561-276c90e942ed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606d452f-f474-40bc-b022-348f495a881a", "sighting_of_ref": "indicator--6e93099e-511b-490e-8561-276c90e942ed", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79726e60-0e9f-4d82-a7ef-d7dd4182ccc3", "sighting_of_ref": "indicator--592d09dd-7fbf-4e69-9bdc-2f66a559e6eb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a395e2-8b4b-4e96-b414-592d2afd2742", "sighting_of_ref": "indicator--592d09dd-7fbf-4e69-9bdc-2f66a559e6eb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cab1c2-b5e7-4f53-a7a8-7aab698d2444", "sighting_of_ref": "indicator--592d09dd-7fbf-4e69-9bdc-2f66a559e6eb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9c48f2-9e10-4cfa-915b-8b4b0de46e47", "sighting_of_ref": "indicator--869a9522-aa4a-4157-9ac6-c638106e56cb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420e7f23-839c-40aa-a4a1-3da9a9e9ae1c", "sighting_of_ref": "indicator--869a9522-aa4a-4157-9ac6-c638106e56cb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcc4461-441c-468f-b2e9-3672b11b6305", "sighting_of_ref": "indicator--7b63305a-e1ef-487c-8dde-97e9db2eb079", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5de8eba-baca-411a-a505-be22128a998b", "sighting_of_ref": "indicator--7b63305a-e1ef-487c-8dde-97e9db2eb079", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9195bf89-7ec9-4acd-b902-5e124f0cfedd", "sighting_of_ref": "indicator--e6cf12f7-67b5-445b-b17c-f3995e2c5106", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c679d26-fab3-4671-bd4a-4cf44ffb041c", "sighting_of_ref": "indicator--e6cf12f7-67b5-445b-b17c-f3995e2c5106", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407abeba-576b-4522-b50b-867be03c9e90", "sighting_of_ref": "indicator--fa1291ae-92d7-40d6-9e44-7d9f7949ed4c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbffcc0d-7970-4233-9c93-96131a9d6e8f", "sighting_of_ref": "indicator--fa1291ae-92d7-40d6-9e44-7d9f7949ed4c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5816dab3-e778-418b-a850-094301f3d260", "sighting_of_ref": "indicator--9b8f058c-8898-4da5-9385-b54e772389d8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be57f15-d94c-4b1a-9843-f7c062d28a3e", "sighting_of_ref": "indicator--678be8ac-fcfa-4b41-982d-7b73f8663317", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c42fd0-03c4-451e-8c9b-b15d4f8a4cd5", "sighting_of_ref": "indicator--2c5bfbe5-b529-4dfc-8c34-86343ec43859", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187fd225-94a6-49f3-af69-94e1d1430864", "sighting_of_ref": "indicator--2c5bfbe5-b529-4dfc-8c34-86343ec43859", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcb05a3-a848-4266-8d6e-66d6a22de34a", "sighting_of_ref": "indicator--471cebbb-b1a0-4389-aa8d-f603e0e1dd04", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a63ba1-62db-4ef1-9f3d-b47ce74c78da", "sighting_of_ref": "indicator--fd338e6a-9aec-42e5-9639-93f9ac1b508b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e989ed-c859-434c-ab28-6a46fe8b9cd7", "sighting_of_ref": "indicator--fd338e6a-9aec-42e5-9639-93f9ac1b508b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc102592-e076-4e4f-86e7-33629ed093e0", "sighting_of_ref": "indicator--548477a7-83d4-4af9-b196-6026d98b5f1e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c41c2be-42ce-40f0-96aa-98d13343e640", "sighting_of_ref": "indicator--b357b680-fa5a-49b0-8b16-01ac3fd76574", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a90e22-d4fd-41e7-b05a-54ae2a0bc452", "sighting_of_ref": "indicator--3efa4503-e74f-4801-a3e1-5b5f4faa331a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4a3a83-0322-41d0-945e-b99769c610f4", "sighting_of_ref": "indicator--3efa4503-e74f-4801-a3e1-5b5f4faa331a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf66eed5-e8d2-4c28-957c-a322e95cddc9", "sighting_of_ref": "indicator--b44fd6ba-08b9-48c0-a571-e867f61bdcc5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fb8dff-eb97-4731-9bd0-9131c65f78fb", "sighting_of_ref": "indicator--b44fd6ba-08b9-48c0-a571-e867f61bdcc5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2abac9d-69bc-4c8a-b63d-17ff99f89da7", "sighting_of_ref": "indicator--2292d235-e3f2-4fb8-9449-e7ad80c7a92b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0d7601-04fe-4727-a545-0955ef605f7b", "sighting_of_ref": "indicator--cd49eed8-abe1-464d-8c0a-454b0e0b77f5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e45e35-c955-4da5-a467-2c45b51a9ea8", "sighting_of_ref": "indicator--cd49eed8-abe1-464d-8c0a-454b0e0b77f5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32ccd1d-be01-4878-ab8a-047fc5cc20a2", "sighting_of_ref": "indicator--b0faaf30-f180-468f-a673-886fdb1d44a7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f74e12-0cb5-4d36-8711-0e49d338352e", "sighting_of_ref": "indicator--e572ca38-bca3-4676-919b-dcadf2b3fe08", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610c32d3-531d-4ae7-b4d9-f2ea99ad1629", "sighting_of_ref": "indicator--c5b4deb2-2c19-4a05-84de-cff97c1f184e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a009aada-00f5-4a83-935c-cc8fbbcefc28", "sighting_of_ref": "indicator--d1f1147d-c174-453b-af21-98221388e9a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7b53cb-6f56-4669-876d-94bb1a6a8929", "sighting_of_ref": "indicator--de330676-dca2-40d8-a35d-77f28ee280f9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc3cc0c-57c8-4704-901f-c46a664f1e20", "sighting_of_ref": "indicator--1ada66fc-a54b-448b-a1d7-9175b00631ac", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03530dcd-98ca-4717-bb62-7f625d4f42b7", "sighting_of_ref": "indicator--af7743d3-6bc8-428b-8d50-98053c8efd64", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543ff49d-9bbe-4162-b739-bd50369a5c2b", "sighting_of_ref": "indicator--ab778779-5e5b-4618-a1ed-e69d6e1e1342", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f57861-5094-423c-b2f0-0338629b44ee", "sighting_of_ref": "indicator--ab778779-5e5b-4618-a1ed-e69d6e1e1342", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d27e6ac-9fb6-44ba-a96f-8cec1f42514d", "sighting_of_ref": "indicator--ab778779-5e5b-4618-a1ed-e69d6e1e1342", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc79cf81-8252-44df-a10e-5af0ca35eb2c", "sighting_of_ref": "indicator--6e7f7715-7f8a-4396-a84e-3544b4314571", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2396a9d8-69ee-4afd-9b44-00d57f089dc4", "sighting_of_ref": "indicator--ce48732f-590a-43f9-b3a7-036fb9a01d36", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e20a84c-84f8-4c5f-bd0f-4e053b694342", "sighting_of_ref": "indicator--ce48732f-590a-43f9-b3a7-036fb9a01d36", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6013fed3-8a05-4743-a82d-b12b57d00b30", "sighting_of_ref": "indicator--c526860f-660f-4a1c-b18c-03c462757438", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc9674a-445d-44c1-aca1-6ecccd624a57", "sighting_of_ref": "indicator--c526860f-660f-4a1c-b18c-03c462757438", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56abd8a2-009e-459b-950d-3f64689805d0", "sighting_of_ref": "indicator--c526860f-660f-4a1c-b18c-03c462757438", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788037af-7529-4fe8-a532-41b3b71679c2", "sighting_of_ref": "indicator--1420de56-f6e9-4686-823d-a502598f6aeb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4fb170e-689e-4125-9324-44a4612037cf", "sighting_of_ref": "indicator--cd7787f5-918a-4a1f-b30a-c03eea63c74d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a44eb2e-8706-42fb-a918-f1e3aa4ef50b", "sighting_of_ref": "indicator--cd7787f5-918a-4a1f-b30a-c03eea63c74d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2276e7-afcc-416e-9969-58b82dc9f8ea", "sighting_of_ref": "indicator--cd7787f5-918a-4a1f-b30a-c03eea63c74d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c83827f-2aef-403f-b8d1-6904a6c00aed", "sighting_of_ref": "indicator--6209a9e1-9089-4dda-b85e-3c85c40ed20c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d3d7f5-d69d-4baf-8099-3126a34382cc", "sighting_of_ref": "indicator--6209a9e1-9089-4dda-b85e-3c85c40ed20c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b846bb66-a022-4a8c-a01c-113a5257e032", "sighting_of_ref": "indicator--3e3f96e0-ec2a-4259-a2ce-067bf0a0e79c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb55e4e-0e9d-49e0-9173-5eeedcf6fba6", "sighting_of_ref": "indicator--9d1a6d3c-37aa-4ef2-b6da-336c0b58fa88", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c75531-dd95-4bcb-b828-f3eccbad9bf4", "sighting_of_ref": "indicator--433423e4-e088-4a24-843e-ec1b163e6f26", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41cf4fb1-375b-406a-8989-f35371a8145a", "sighting_of_ref": "indicator--433423e4-e088-4a24-843e-ec1b163e6f26", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a62e7d-6e7d-4fe4-9a95-03b719e5ab8c", "sighting_of_ref": "indicator--d60a5dcb-dd2b-4752-a6b4-833b7c6d0882", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f7e8ac-661d-4497-bda7-b8e536f4e77e", "sighting_of_ref": "indicator--d60a5dcb-dd2b-4752-a6b4-833b7c6d0882", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01e0aef-8888-45a4-af34-3632937526ca", "sighting_of_ref": "indicator--d60a5dcb-dd2b-4752-a6b4-833b7c6d0882", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fa6ecb-c938-48ac-9647-59802d0f7f49", "sighting_of_ref": "indicator--bc364e0f-bc13-48e8-be84-d457710cb7ca", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37df7374-7d2b-4f51-8262-464e20b8244e", "sighting_of_ref": "indicator--ec1bb778-193b-47fd-80e7-3b77364664cb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2557799-636a-41d6-93e9-0c7979230ac6", "sighting_of_ref": "indicator--ec1bb778-193b-47fd-80e7-3b77364664cb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171751fc-da79-45e8-b200-932a77bbca66", "sighting_of_ref": "indicator--ff3608e7-c01f-4d22-9298-6dbaad79c532", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe18056-8b93-43ef-99d6-bb44512da7f2", "sighting_of_ref": "indicator--3c916752-97b8-4eb5-a91b-35f1e9efc892", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09d17c7-ff38-4f45-93d4-76d586c9e5fc", "sighting_of_ref": "indicator--17f3b9fb-0c54-4417-850b-afb2cd5d8c05", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76a90fe-57c0-48e2-a2d7-de6b6a79d15b", "sighting_of_ref": "indicator--17f3b9fb-0c54-4417-850b-afb2cd5d8c05", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1d8f39-da27-4413-89a7-4bec4ace8ab6", "sighting_of_ref": "indicator--a607e550-a2a0-4359-98f4-1a3e1a2c1927", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5478379f-8744-45e4-b7f9-57d675951e01", "sighting_of_ref": "indicator--85c9246e-6b95-4392-8a69-263d95ee04f3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034548b6-f361-4ec1-9b85-86982293bab0", "sighting_of_ref": "indicator--85c9246e-6b95-4392-8a69-263d95ee04f3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67591ab3-18be-41ff-ac4e-6e38e69a5f1f", "sighting_of_ref": "indicator--f7932f7f-53a1-4c75-a05a-baa872d122bf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9096bfe7-6167-4b8c-aaa8-dd28d4e0d7ba", "sighting_of_ref": "indicator--f7932f7f-53a1-4c75-a05a-baa872d122bf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0cb21b-07f0-4d35-b649-be8cd7c5d5db", "sighting_of_ref": "indicator--f7932f7f-53a1-4c75-a05a-baa872d122bf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9c6cdd-e37c-4546-9ba9-0057cf29d41e", "sighting_of_ref": "indicator--c848ce83-a786-4350-b12f-77484f9d43f4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed457e45-c055-4ac1-abc3-f5297a4ca032", "sighting_of_ref": "indicator--c848ce83-a786-4350-b12f-77484f9d43f4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0564f062-23aa-41e3-a3ee-b1bc68e38865", "sighting_of_ref": "indicator--84f1f4f0-b6f9-4649-b15f-689945d950b2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91010c1e-6e01-410d-b1da-730c2c3363e8", "sighting_of_ref": "indicator--84f1f4f0-b6f9-4649-b15f-689945d950b2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--decdcc22-becd-496c-92e5-248c5790eb93", "sighting_of_ref": "indicator--de6afde8-ff0e-4847-929d-6bd53ce4404b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8242fdd-cb52-4e22-a091-1136819cdf5a", "sighting_of_ref": "indicator--de6afde8-ff0e-4847-929d-6bd53ce4404b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8546c70-6e5b-4b45-9d1f-7f50ae20295d", "sighting_of_ref": "indicator--8e585575-1624-4b87-9656-b847ef595049", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98f66df-d83b-4a53-b575-cdba798d8bd4", "sighting_of_ref": "indicator--6fd5ea81-bfa6-403c-bc84-00655a964d01", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff8c5bb-f6fe-4812-a758-346be01568a0", "sighting_of_ref": "indicator--625269ec-3e88-4237-8393-3998425923b2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22651507-8c95-4de9-a565-f627c7d89974", "sighting_of_ref": "indicator--716e4e50-f730-46bb-a33f-e2e763fea0be", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9e7597-ca0a-445d-ac96-2c8119738675", "sighting_of_ref": "indicator--a3aeb93e-3b71-4266-85ec-cdc5a9f12218", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f54ecfc-4843-429b-a8c6-467c981e4250", "sighting_of_ref": "indicator--a3aeb93e-3b71-4266-85ec-cdc5a9f12218", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8273c4-b7ca-434f-a346-f7a310c59424", "sighting_of_ref": "indicator--c30dff70-6299-4927-9b96-9ea80e18451b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933e7be2-6f00-4ebf-9aa5-f5524d67ad7f", "sighting_of_ref": "indicator--ba4cbf7c-e3fb-4d81-acad-0f003cc40b83", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54f3b3c-f5f8-4416-b30d-468595206fee", "sighting_of_ref": "indicator--e250c015-2397-4a7d-9847-c2e8f3a0ebdb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9631b5-d0f7-4692-8b4a-c2df1d239a0a", "sighting_of_ref": "indicator--ebd2d076-3dc8-4bf2-83a7-9f2b00e6f27c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b04adeb-747f-4f7d-8fc9-854ae9f8e144", "sighting_of_ref": "indicator--ebd2d076-3dc8-4bf2-83a7-9f2b00e6f27c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187c0b45-6311-48e0-9221-8a011998c246", "sighting_of_ref": "indicator--a9e7a97c-0ffb-45f3-86c2-5ffeb2122e12", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fa9f4f-5fb4-4285-be60-b1de9e68f455", "sighting_of_ref": "indicator--a9e7a97c-0ffb-45f3-86c2-5ffeb2122e12", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f00bf9-6fbe-4725-a06c-c6621fc49b27", "sighting_of_ref": "indicator--dfe757dd-b291-4b3b-81d6-43c53cd46e92", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0876b5da-babd-495b-b4b2-070565589d39", "sighting_of_ref": "indicator--dfe757dd-b291-4b3b-81d6-43c53cd46e92", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8643b7f7-f6e4-4523-b425-2198501eb547", "sighting_of_ref": "indicator--b4e6140c-c0da-4d60-9ed1-ad11524fc665", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65e2fe6-7066-4b8d-8ade-0dd170b39d70", "sighting_of_ref": "indicator--97d44d0f-b867-46cb-8842-df1f26292a44", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232706e7-4a03-40cd-8325-2658bebed001", "sighting_of_ref": "indicator--6ea85100-5c5a-4cc0-a833-8afa0f86d7b5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c689966a-6324-48af-b08c-d2e8f4ddc843", "sighting_of_ref": "indicator--6ea85100-5c5a-4cc0-a833-8afa0f86d7b5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4f8f13-7c29-46f3-b338-d2f509dc58a9", "sighting_of_ref": "indicator--6c86d3d9-5afa-4c95-8610-db23ee45a03f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d179ff84-117e-4dd7-b75a-0fd8c9e091fd", "sighting_of_ref": "indicator--8b5f48e5-92b8-4e21-b2c3-860ff0b05e6c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55300ac7-334f-404c-8783-184aabbaca77", "sighting_of_ref": "indicator--1dd1cc85-29d2-44e5-a1f2-451e78127b33", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ff232d-74c2-4073-b377-4a3b4411db1d", "sighting_of_ref": "indicator--1dd1cc85-29d2-44e5-a1f2-451e78127b33", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e206ab7-5a81-49d5-914c-b60b788b1c03", "sighting_of_ref": "indicator--1dd1cc85-29d2-44e5-a1f2-451e78127b33", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240fd643-356d-4692-b1aa-eccb10825f5e", "sighting_of_ref": "indicator--e2b3f0e6-9d21-44cd-aefd-17e673ff0e70", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3053bdb1-233f-443a-92e7-0859b909100e", "sighting_of_ref": "indicator--e2b3f0e6-9d21-44cd-aefd-17e673ff0e70", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8870a191-c47e-4e13-bf4c-1c8e30f590c3", "sighting_of_ref": "indicator--4b174d7c-fdf5-4ef1-9841-dbd3ddcb9258", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5780ee5e-d42c-4ee7-87b4-89efa3e7ece4", "sighting_of_ref": "indicator--4b174d7c-fdf5-4ef1-9841-dbd3ddcb9258", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7187f855-f2fb-4684-b7c9-901a422742eb", "sighting_of_ref": "indicator--c8b266eb-728d-4707-831e-593119dca944", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40d7586-8c49-4eda-8475-01a03be60823", "sighting_of_ref": "indicator--a2bf0af6-f31d-4ece-94af-c80b82a9d706", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7446fc38-6d73-402f-864a-eb850573021d", "sighting_of_ref": "indicator--a6692775-ccff-4a93-85ea-1caf78e53053", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb2379d-baab-471b-8cd4-955183a2f5e6", "sighting_of_ref": "indicator--a6692775-ccff-4a93-85ea-1caf78e53053", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee595318-aeb0-4c34-9d6a-8292f1b159c2", "sighting_of_ref": "indicator--a6692775-ccff-4a93-85ea-1caf78e53053", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8162cdf-107d-4a31-aeaa-9b3e5d738cd8", "sighting_of_ref": "indicator--760b2aa4-73fd-48a0-a7e0-35b580501f03", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3cdc14-40e2-409c-af37-85c2c2317383", "sighting_of_ref": "indicator--760b2aa4-73fd-48a0-a7e0-35b580501f03", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fbd611-d29d-4940-a1de-ec0d7a20b851", "sighting_of_ref": "indicator--b11ef8c6-bdcb-4ac5-a810-34ff7b2b3428", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5648b61b-7c85-4f39-8537-c7d35faf8924", "sighting_of_ref": "indicator--b11ef8c6-bdcb-4ac5-a810-34ff7b2b3428", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7d5edc-4307-4161-9541-77d32cdf9dc4", "sighting_of_ref": "indicator--97f13eec-c4c4-4abe-85a3-49a3b6f33ee7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ca5c4c-7f49-4211-9e51-f7d55891ef95", "sighting_of_ref": "indicator--97f13eec-c4c4-4abe-85a3-49a3b6f33ee7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209f2e87-b96d-4154-b56c-6526525a6e28", "sighting_of_ref": "indicator--97f13eec-c4c4-4abe-85a3-49a3b6f33ee7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848f8756-08cb-4368-9809-f48f503c58bb", "sighting_of_ref": "indicator--cea30397-ac4b-4991-a612-dd4a62d275df", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f217859-f7bd-4f07-83f1-d4630b5ba686", "sighting_of_ref": "indicator--cea30397-ac4b-4991-a612-dd4a62d275df", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bd9a64-50c4-4b43-908a-1ea2b6a40484", "sighting_of_ref": "indicator--5f97e9c9-bc2c-41b3-9583-9cfc198c5992", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e22fac-eed6-43c3-a3cc-d6b88eeafeb5", "sighting_of_ref": "indicator--b23de41c-a3f3-4385-a70b-aa97337f7a34", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e225b3-dc0d-432a-9fc7-05a087504661", "sighting_of_ref": "indicator--b23de41c-a3f3-4385-a70b-aa97337f7a34", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85533af3-d172-4a36-944a-67b6fa2c70ce", "sighting_of_ref": "indicator--b23de41c-a3f3-4385-a70b-aa97337f7a34", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4286fb7a-2487-471f-8577-c38ebe3e7eb9", "sighting_of_ref": "indicator--ffcb4830-6bfc-433c-b0d3-5eea1443ebe5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1d70ed-5124-4d34-b208-c7626f7a9055", "sighting_of_ref": "indicator--965fac85-9c5f-4f58-a6c5-5e1bea67b77d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184b550f-e272-45ba-979a-4edafb3ef992", "sighting_of_ref": "indicator--965fac85-9c5f-4f58-a6c5-5e1bea67b77d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5423fb8-4632-45e1-aaf8-e47b5a3cf5ff", "sighting_of_ref": "indicator--eb0f50f5-a76f-4640-a74a-c292640acbc8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b643267-8356-4c2c-ae03-fe4301d73ccc", "sighting_of_ref": "indicator--eee6d7f7-3fd6-4358-9c3f-6309a3c3c57f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0d7c0f-8fb9-4484-a789-dc82413489fd", "sighting_of_ref": "indicator--eee6d7f7-3fd6-4358-9c3f-6309a3c3c57f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ed6ad7-6d45-4d20-ada2-d83d1b3a0bf5", "sighting_of_ref": "indicator--321f6902-d1a2-4917-8904-37cf675d4f96", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cdd913-02f2-4b67-98d8-01045b20196b", "sighting_of_ref": "indicator--321f6902-d1a2-4917-8904-37cf675d4f96", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ddfce5-07aa-48cd-aa6f-16e40b933c0d", "sighting_of_ref": "indicator--321f6902-d1a2-4917-8904-37cf675d4f96", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b3317f-690f-47b0-9726-9d81c31f1893", "sighting_of_ref": "indicator--6748ef5e-ca70-4de7-84b4-949e93a09a60", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f7cef7-525e-48f5-b571-4e954ded75db", "sighting_of_ref": "indicator--7e80ac39-28f1-415c-a5d1-9fcd5e417ee1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175ed04f-ab35-43f9-bd01-13c2ee6c230d", "sighting_of_ref": "indicator--8be46493-cf0f-4ce8-ba5d-aa5dc04f6aa8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d78eb6-395e-4aed-872d-c9bd308b96ec", "sighting_of_ref": "indicator--12cb50b6-bf7f-45dc-9df4-6db0c0625b8d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94631e54-ae07-4dc4-9af8-bbb9a1da2d10", "sighting_of_ref": "indicator--f4c5a1f5-0319-4ad6-8c86-5fd6b40daf06", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2628084f-a641-4676-a90f-3028d407d397", "sighting_of_ref": "indicator--de2e683a-622f-42ee-a3c7-6039a21e2530", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c876d2fa-bb2d-4021-9513-64b8a4e73d45", "sighting_of_ref": "indicator--6ecdaead-ec44-40a1-9940-66dfb92db640", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d2478d-7385-4ef7-97b0-7307790b8259", "sighting_of_ref": "indicator--4efb644c-85be-4824-be6a-7b6c5103e14d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3a5b5e-f75f-4538-befd-b0a744092a92", "sighting_of_ref": "indicator--9cb0b1ae-081c-4d44-b5d1-c991fa11412e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1886266c-f59e-4d8c-ae2f-eb4455581156", "sighting_of_ref": "indicator--9cb0b1ae-081c-4d44-b5d1-c991fa11412e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294ce674-b9e2-4f35-8806-e62fab090215", "sighting_of_ref": "indicator--df9f4ee9-2418-4489-91c9-755f2618898a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88b8ad0-8336-422a-b771-39dfa4dbd5f1", "sighting_of_ref": "indicator--df9f4ee9-2418-4489-91c9-755f2618898a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5239654-2220-44c8-8e3c-c4b40ddab9e0", "sighting_of_ref": "indicator--868e8609-3703-4c40-8f7c-608d738982d0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b85aa18-8eff-4ec8-b3f6-e4140769e22b", "sighting_of_ref": "indicator--c09c1907-b3ef-47c4-81ce-02912279d465", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd318fa8-2896-4dea-bb29-763f9e33904c", "sighting_of_ref": "indicator--c09c1907-b3ef-47c4-81ce-02912279d465", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b78090-73c6-41f1-9ea0-803786f7ce6f", "sighting_of_ref": "indicator--01df2286-9c3e-411e-8c07-e9a03a40ffd0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1bc1aa-1cf4-4aa3-8525-20206ba43a9e", "sighting_of_ref": "indicator--457f375a-ead6-4a78-b9f2-c65bf838ee4d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b73a9b2-bd52-42b8-a459-556ae5041e8d", "sighting_of_ref": "indicator--d88073e8-8670-4a6e-906f-071415b862df", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4848f12c-6ed0-492a-83b8-c844d673df46", "sighting_of_ref": "indicator--6b22548f-8caa-4c86-83a1-42cfbd0a7495", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b0118c-80af-4f67-8c10-8e705d8f71e5", "sighting_of_ref": "indicator--fc8ba4a3-cfed-4ad2-8dd0-bcfa4ffb05ec", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0d39e3-3a91-49ce-bfd7-566349cfbc23", "sighting_of_ref": "indicator--fc8ba4a3-cfed-4ad2-8dd0-bcfa4ffb05ec", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc084c6-b065-44b9-9b7a-a5f03a76f265", "sighting_of_ref": "indicator--fc8ba4a3-cfed-4ad2-8dd0-bcfa4ffb05ec", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94c3bc1-ba94-46aa-9f12-2197a5a48f62", "sighting_of_ref": "indicator--6b68e236-f9d6-4f94-949a-4afee8ca4b57", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e263e5-ecf3-40da-8020-0f4c4f00f39e", "sighting_of_ref": "indicator--419d156e-ccee-4bc9-84b5-73e3dc2e0a1c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27617dda-4a36-47ea-b27b-507ae6d3812e", "sighting_of_ref": "indicator--81ebade5-b489-4f35-a68c-17dcc4fd4d9f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1fb5a7-0a12-4c72-97d4-90674e0e0e94", "sighting_of_ref": "indicator--81ebade5-b489-4f35-a68c-17dcc4fd4d9f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9968d9-58a0-4323-94d3-4680be2e462f", "sighting_of_ref": "indicator--eeb85837-b609-4fda-9d67-18f20df54955", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f2a481-bd1f-4dc2-97f3-2b369412db39", "sighting_of_ref": "indicator--d8329a8e-7fe5-4114-91ef-36cf2fadb029", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f410fc44-40e2-4e04-9939-d109d532c633", "sighting_of_ref": "indicator--9a41363c-ff2d-4e75-8bf9-68a0dfda2c82", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a458831-2941-43f1-86b9-537d6010fd42", "sighting_of_ref": "indicator--8812d0ad-60de-4437-b88b-78c03b770f3b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d2cd04-7ebc-4988-8bd6-5582ad4b1f35", "sighting_of_ref": "indicator--8812d0ad-60de-4437-b88b-78c03b770f3b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8789c58-320b-4431-a3a1-c4a2ff88e2a5", "sighting_of_ref": "indicator--effc105c-a105-439e-8e14-f0e5db598394", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d81f2f6-15ab-43f2-8bf2-952fcb67fa9a", "sighting_of_ref": "indicator--effc105c-a105-439e-8e14-f0e5db598394", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0403ec-57e0-4f01-ac71-e13c63875a63", "sighting_of_ref": "indicator--c9625977-0585-4c9b-bdd5-bfd891e28636", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a71d47-60f4-45cf-bd86-c5fbc44967d0", "sighting_of_ref": "indicator--c9625977-0585-4c9b-bdd5-bfd891e28636", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c904370-171d-4286-91e9-bf5c8451497d", "sighting_of_ref": "indicator--a98a0043-14ca-4d4e-92ec-9b7adaf956a8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f34e99-322f-40bb-8e42-d64a423a62b0", "sighting_of_ref": "indicator--75241ebb-f01a-4ca2-8422-0b1913dd28e3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe2862e-f4ea-4a20-a5f9-17c48e545eef", "sighting_of_ref": "indicator--f9aa4cc1-3192-45d5-974c-9a1ac3c0a5d7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b391fb-490d-454a-a008-2766ea104cd0", "sighting_of_ref": "indicator--8cb88b30-7d07-4ca0-8bb9-548889ef54f4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0304ff-51dc-4351-9728-4a1a006b72b9", "sighting_of_ref": "indicator--e6f9605a-3c9b-4586-8c3a-52846b1f87f4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc29b09b-0a96-40ea-9c60-d34d4f5011dd", "sighting_of_ref": "indicator--5b65b9eb-f65b-4af8-86d3-6e27f130092c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ee1418-3580-494a-ba1f-fcf605db804a", "sighting_of_ref": "indicator--0a8085ac-5bcd-4004-a3eb-56cda0393c8a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674def0d-4c75-409f-833f-03fc6b675659", "sighting_of_ref": "indicator--fcc8db64-a160-4057-8a59-5f60aee023c6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231b8ec2-c505-423a-8e01-2f7f9e3f6ad1", "sighting_of_ref": "indicator--fcc8db64-a160-4057-8a59-5f60aee023c6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be4f0ce-28d6-4544-9362-e4c8b6bfdb5d", "sighting_of_ref": "indicator--fcc8db64-a160-4057-8a59-5f60aee023c6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f407e775-f6c2-486b-bcd3-b7dbb155ef92", "sighting_of_ref": "indicator--755749ef-54f4-473a-aba4-f7ecf4217221", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb5147a-857a-409a-affd-6841694c4718", "sighting_of_ref": "indicator--541b12a4-c451-414c-afec-4c787bdb438a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6057fe2b-fe98-4689-97ff-08a5e22a1fa4", "sighting_of_ref": "indicator--ff7bc2ab-07f1-42fc-b986-743d31bab5dd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331191b3-8e01-4d4e-8c03-350433672ef2", "sighting_of_ref": "indicator--3b68cb62-ad29-491e-8296-8a085b320ae6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0a3fd7-0362-433b-821c-444ae7673321", "sighting_of_ref": "indicator--2a0432d7-dd3b-4dac-afaf-2d9e20ea2eb6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6fd9bd-8c5a-4ba9-904a-8990f0b6bd91", "sighting_of_ref": "indicator--2a0432d7-dd3b-4dac-afaf-2d9e20ea2eb6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b086e13f-58a7-4ec2-9a6b-4c771a59ff23", "sighting_of_ref": "indicator--2a0432d7-dd3b-4dac-afaf-2d9e20ea2eb6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d68457-0a6b-44cc-87e5-cb2fd76580f5", "sighting_of_ref": "indicator--92e78e76-47f1-4023-a14c-0f797eac698a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b60a87-f616-4b00-b0cc-099a0eaa7ebd", "sighting_of_ref": "indicator--92e78e76-47f1-4023-a14c-0f797eac698a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad34cc2-d1c9-495c-9540-98b81ebc0eae", "sighting_of_ref": "indicator--91ba25da-d51c-416b-911a-b25651754c7b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb73ac2-d992-4c29-a4e0-5e74d92987ce", "sighting_of_ref": "indicator--91ba25da-d51c-416b-911a-b25651754c7b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab97163c-dad3-4a10-814d-edb045792ffa", "sighting_of_ref": "indicator--5eeee3be-e688-43d9-a9ff-5ad1be324f36", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b406177f-2f85-400c-b3d5-5a2e7aa478e7", "sighting_of_ref": "indicator--9b661ccf-54b4-4f7c-adb4-4c975221d4c7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd50784d-3cc1-44df-b095-1ea0fb38a21c", "sighting_of_ref": "indicator--9d851dc9-e07f-4d97-9e77-be61cb33429a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3670a94f-3a06-4c2b-a4fa-a5eda1b234ef", "sighting_of_ref": "indicator--9d851dc9-e07f-4d97-9e77-be61cb33429a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423cde3d-d50c-4595-b77a-c7221ddc9179", "sighting_of_ref": "indicator--4e680757-288c-4522-a9f2-0550bd39d6cc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04fa9da1-c827-4da8-b0ed-6d933d8d37c7", "sighting_of_ref": "indicator--4e680757-288c-4522-a9f2-0550bd39d6cc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad280d9b-589a-4950-a6f5-cd712f61e5c1", "sighting_of_ref": "indicator--d4379335-2de3-4ece-b56e-396aeee5a2b8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0550ea9-cf76-43da-ae8b-8f96ae90f98f", "sighting_of_ref": "indicator--d4379335-2de3-4ece-b56e-396aeee5a2b8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf622522-f2e7-4c77-952c-92bec7a000fe", "sighting_of_ref": "indicator--abad1bef-a84b-4611-b9af-035a1d0939a1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd0f004-5efe-4413-afdf-faf4d41ecf50", "sighting_of_ref": "indicator--eae60317-9a2c-4c5f-9388-3498605f4d48", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6998e8b0-44b6-49c3-a305-c915b67f130a", "sighting_of_ref": "indicator--6300d64d-09d4-45c1-82f3-ae5f1f46d58c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043d0b2a-7c56-4d47-8e63-9915cc3576e8", "sighting_of_ref": "indicator--66f1a152-9a9b-4e95-a1b0-bc774242124f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb32d6d1-969e-469a-bac5-3ca79986b6c8", "sighting_of_ref": "indicator--45d0a0cf-2bf2-4dce-b246-c6d96c71888e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a1d7a8-2f9e-4c12-8b6d-d02e11124da0", "sighting_of_ref": "indicator--45d0a0cf-2bf2-4dce-b246-c6d96c71888e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee8e061-af10-4a89-802c-04418f8a4170", "sighting_of_ref": "indicator--45d0a0cf-2bf2-4dce-b246-c6d96c71888e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f8707f-d725-42b5-b8d0-a9fd1f824e8e", "sighting_of_ref": "indicator--569f51f6-19f2-409e-bc1f-f2c2fe0d76c4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e337c2-a195-488f-8557-815acbcf7c02", "sighting_of_ref": "indicator--4a457f3b-58bc-4afd-a093-f3697a5d7a7d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3808144f-9cd7-4fd0-81f2-c01e61f7f1f2", "sighting_of_ref": "indicator--9223e239-4976-4b5c-a1a3-29c9fa62dcb2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9318a94b-f901-45f9-8af9-e04e15969c7f", "sighting_of_ref": "indicator--0f6cb4fa-ed79-4186-886b-c0879ef8e878", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee3f5a1-cf82-4a0b-a992-e7c2d443df63", "sighting_of_ref": "indicator--849da8cd-9f64-45b6-9bb9-9ef74ee39e85", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14da4ddd-483d-4e06-8394-43d8849ca22f", "sighting_of_ref": "indicator--849da8cd-9f64-45b6-9bb9-9ef74ee39e85", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e35d5a1-677a-4bd2-b316-3a8b04ce40de", "sighting_of_ref": "indicator--2302d028-1675-4150-a434-d650f5b9340a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65423b3-9d0f-44e2-9f67-db7d079bdf4e", "sighting_of_ref": "indicator--7781d4c9-bc0f-4acf-a734-43de04e87aa2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6c906a-d8d9-43ba-a038-b2924511d9c2", "sighting_of_ref": "indicator--6744a748-672a-4b22-bcf3-aaf216718011", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6b4fef-bffd-4ad5-bb36-af0fa683da06", "sighting_of_ref": "indicator--e58eaecf-e89c-4cf8-9c56-21912cbaf4d7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3493a58-ce8e-48a5-9364-29ebdb80d768", "sighting_of_ref": "indicator--e58eaecf-e89c-4cf8-9c56-21912cbaf4d7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2476be1-1952-431f-899f-3fd3e760b986", "sighting_of_ref": "indicator--8e4c65b7-f802-412d-95a9-c8efd79caecf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c493e9-9d01-44df-b545-1b9ce0ba2667", "sighting_of_ref": "indicator--b2bd1aec-3aa4-4e2f-880f-06477f136fe0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f97e69-39d5-4e02-aad2-498ed7fe9628", "sighting_of_ref": "indicator--b2bd1aec-3aa4-4e2f-880f-06477f136fe0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c367d32-f498-4bcf-9217-014b5aa5370b", "sighting_of_ref": "indicator--93bab5de-2e94-4899-8b9b-ee3932a28065", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405e7436-c063-4a10-8eb4-6fee19309d40", "sighting_of_ref": "indicator--0f7bd116-4229-4a3c-afb8-478142042cac", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a751e7d4-2b5a-458d-8e64-d6156358e0cc", "sighting_of_ref": "indicator--873f252d-6407-4c9f-9a33-0370fd855611", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499a0a15-b1fb-410c-875f-8e95e12c9602", "sighting_of_ref": "indicator--27bc82ea-5532-430c-90b1-e514375462a2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5403d5-e601-4970-865d-33ecb87794ed", "sighting_of_ref": "indicator--27bc82ea-5532-430c-90b1-e514375462a2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ae0a77-693b-433b-8737-f0b0938d257f", "sighting_of_ref": "indicator--a75b96e1-cd42-4654-be74-06e5887b70a7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949fba25-a33f-451c-9c7b-22a84d05941c", "sighting_of_ref": "indicator--c93af32f-c0c2-4b9e-9c26-c5ae480ab111", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa378bb0-900f-4e86-9c9d-3a1648cf8858", "sighting_of_ref": "indicator--c234281c-41fb-4392-9163-f6253e46f176", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496d0e7a-2da3-4b8b-9f69-206cacbf0160", "sighting_of_ref": "indicator--99e13fcb-a8a3-4c65-a4b5-8b4f18045fa9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7934e50-06e8-4c97-bb06-a20bd0c1cf4c", "sighting_of_ref": "indicator--99e13fcb-a8a3-4c65-a4b5-8b4f18045fa9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7250c2d-c577-4de7-8cc2-d3cec2d7a5c8", "sighting_of_ref": "indicator--99e13fcb-a8a3-4c65-a4b5-8b4f18045fa9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d207b944-fc7a-4437-8cab-4cd4ff09918f", "sighting_of_ref": "indicator--adc847c1-3f98-42b7-b331-5765f914858b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621ece1a-c39d-4783-90ad-a53acd7dd7ee", "sighting_of_ref": "indicator--adc847c1-3f98-42b7-b331-5765f914858b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12763601-006d-44bf-b772-a562229f0bf6", "sighting_of_ref": "indicator--d79ba7bd-4dd5-42f1-904c-d0e6f6aab676", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7931de03-0c03-4755-bc59-0f8a51c554b3", "sighting_of_ref": "indicator--991d4225-9be3-4a9b-a540-0bf7d7ee953e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064e9a4c-753c-4167-9e18-334fb716210f", "sighting_of_ref": "indicator--991d4225-9be3-4a9b-a540-0bf7d7ee953e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98b6413-ecb3-4905-81a6-5bd61b74ab53", "sighting_of_ref": "indicator--991d4225-9be3-4a9b-a540-0bf7d7ee953e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ebb279-5b13-4e85-b4b3-15c3a874afad", "sighting_of_ref": "indicator--c4ab9f2b-6ed3-4d14-805a-1e315e3f8bd3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9ec9c0-e13a-4412-aa4a-cbcd116ebd0e", "sighting_of_ref": "indicator--2fb13b57-09ad-483b-8fe2-1ac784ae258c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e02368f-7f08-487e-b3ef-cd5b27845706", "sighting_of_ref": "indicator--62c135c5-0aa7-44e4-93d7-9e8221946f47", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6417c584-e8bf-467a-b455-d33865e05c84", "sighting_of_ref": "indicator--62c135c5-0aa7-44e4-93d7-9e8221946f47", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2e4335-8554-4f81-8c24-318d627e4e47", "sighting_of_ref": "indicator--32a4d63e-7859-44c1-8644-c8b139320ab3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053a64eb-e113-45f7-b3b5-b7f68196cef9", "sighting_of_ref": "indicator--a8c2decd-df4e-4091-be27-6888d90be613", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67c7324-f1c6-450d-87e7-2695809abd29", "sighting_of_ref": "indicator--389b0ee8-6ca3-4d6e-a564-3943975a7b67", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e9c682-a5eb-4649-8d24-d15400068d7b", "sighting_of_ref": "indicator--389b0ee8-6ca3-4d6e-a564-3943975a7b67", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563f3ce9-e759-4fc8-b0b5-ac8ef1d957c8", "sighting_of_ref": "indicator--d173e6c2-91d7-4c5f-a38a-fb68a946aa43", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cba18a5-a370-424f-91e9-96fcd0ffaa3f", "sighting_of_ref": "indicator--d173e6c2-91d7-4c5f-a38a-fb68a946aa43", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edb8034-0a38-4f37-931e-126572bccff5", "sighting_of_ref": "indicator--ab80f1f6-cd16-4375-9b48-1c74a2c4f489", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f8b3d2-1780-4ba7-93d0-0370b857fffe", "sighting_of_ref": "indicator--ab80f1f6-cd16-4375-9b48-1c74a2c4f489", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29e01b6-3ec1-463b-9584-995226c42edc", "sighting_of_ref": "indicator--69ad06aa-69fe-42d8-b361-889092a28a7f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78e9026-7f40-43c3-82f6-d8cc9f69a0b6", "sighting_of_ref": "indicator--ce342624-ec94-4da5-88a9-4a3a50ed2475", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bc3c00-a2cf-4351-a564-877c99376906", "sighting_of_ref": "indicator--ce342624-ec94-4da5-88a9-4a3a50ed2475", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a48b6c-52ab-4fd0-a525-387d42913b20", "sighting_of_ref": "indicator--93cdeeb4-655c-4993-8e33-3afdf012d76d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db613477-32f6-4236-bd4f-535907c03246", "sighting_of_ref": "indicator--73997dd0-e903-4823-8b4e-d5b51644f44e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f725fe62-7dcb-4bf1-9856-a0d8361860ed", "sighting_of_ref": "indicator--73997dd0-e903-4823-8b4e-d5b51644f44e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1ee4ee-51fd-4862-b7ca-02bb570faaaf", "sighting_of_ref": "indicator--8d6275e4-155a-4283-813e-011bcfda98bb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767345cc-20fa-447a-942d-603dbf287507", "sighting_of_ref": "indicator--8d6275e4-155a-4283-813e-011bcfda98bb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf79aa4-6899-4e0a-b364-9f61ef306f3e", "sighting_of_ref": "indicator--3c123ba2-1b2e-4407-bc56-4224d70d2357", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99669c41-7930-4aaa-bbbb-2e8b457f686e", "sighting_of_ref": "indicator--4cbaa1c2-2479-42ac-b59a-667ddf67fbd7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a416d0ef-b7cb-4a19-8adf-b2524d376d96", "sighting_of_ref": "indicator--85bd4ebf-7771-44b7-9216-a4545c95b26e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b866dad0-984e-4646-8cde-c0d93a098b2a", "sighting_of_ref": "indicator--85bd4ebf-7771-44b7-9216-a4545c95b26e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6722295c-9de5-4444-b12e-58448e0cce5b", "sighting_of_ref": "indicator--85bd4ebf-7771-44b7-9216-a4545c95b26e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5e33d5-d80e-4830-9023-8fb281e480ee", "sighting_of_ref": "indicator--25a1df3d-a78c-41a8-a2b0-4e3a3e944764", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691531ff-cfa5-4e25-a19e-14f773f21d94", "sighting_of_ref": "indicator--25a1df3d-a78c-41a8-a2b0-4e3a3e944764", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8a8925-07a4-4784-8326-5b4076521864", "sighting_of_ref": "indicator--4c310712-4274-4221-b029-a44e6671393e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce47d11-2f05-4c3a-851b-1a46902817e9", "sighting_of_ref": "indicator--99b863d4-c9e1-49f9-9cbf-2d360eb4e6dc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea32e244-600e-43f6-a4bb-dc463f349b77", "sighting_of_ref": "indicator--99b863d4-c9e1-49f9-9cbf-2d360eb4e6dc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2246155f-87f6-4b46-be5c-97c0446b146c", "sighting_of_ref": "indicator--b03d534d-b590-4f17-9e51-362e783fa3f7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6842350-77a8-4cd9-8bc6-507126d78b3d", "sighting_of_ref": "indicator--b03d534d-b590-4f17-9e51-362e783fa3f7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7069072-b3db-45ce-a8ad-75cd7b9e8385", "sighting_of_ref": "indicator--8eed75ab-74cd-4259-938e-ad6ddd4564c2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740693f2-9861-4341-92b5-b31a77bfdf65", "sighting_of_ref": "indicator--1a73afb1-eb22-4103-a528-4b59781f2589", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd222a1c-65be-4682-ba8d-caeb0cfbe4ef", "sighting_of_ref": "indicator--1a73afb1-eb22-4103-a528-4b59781f2589", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c79875-a5e1-4917-8a80-8cbd2ecf9d31", "sighting_of_ref": "indicator--fa9cbb84-7bc0-4448-98f7-c59267c45960", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925a43ae-c6c5-44f1-b921-3a6880d0cfd4", "sighting_of_ref": "indicator--f69af5dc-52ce-4d18-9f08-43ff24fd74a8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7321d38c-de22-4cc3-b51c-5b15d6db01fe", "sighting_of_ref": "indicator--a6bc7f30-f536-463a-b215-45fe22a20e4b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a50520d-9f37-40f3-a1ba-219770243135", "sighting_of_ref": "indicator--6b971512-3aae-433b-9fca-31c478fc98c5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4982d79e-66bb-4ab6-a752-16d4e1d3e934", "sighting_of_ref": "indicator--6b971512-3aae-433b-9fca-31c478fc98c5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a0b7cf-ce70-403b-b2c9-1591f391abd6", "sighting_of_ref": "indicator--6b971512-3aae-433b-9fca-31c478fc98c5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b159eb-4f26-494b-8473-71d07d31cb4b", "sighting_of_ref": "indicator--5aa601ec-57c0-4b56-ae01-d8d08f48309d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93be694c-13a7-42dc-9f29-afbc8396bb09", "sighting_of_ref": "indicator--8c0fa4d5-55b4-4003-a05a-86b2988f8f72", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0854ddc5-453a-4298-a574-18aed75bfe15", "sighting_of_ref": "indicator--114449cd-1491-4a55-acef-692119be7be7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940585b1-eaa2-41fc-acbf-b19f1aeb4797", "sighting_of_ref": "indicator--114449cd-1491-4a55-acef-692119be7be7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d388a9-c232-47a3-9288-4f573b11967d", "sighting_of_ref": "indicator--f1ff3115-a482-43b5-8e79-6b7eea3b29a0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21536b4-12d1-4f26-a5fa-6abdc615eddf", "sighting_of_ref": "indicator--f1ff3115-a482-43b5-8e79-6b7eea3b29a0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3005a939-8319-4228-81e2-7277a0af5c44", "sighting_of_ref": "indicator--4a9147e6-659b-499a-a6aa-f3e5b370089f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637db0f5-7739-440b-94c6-3e9280561d62", "sighting_of_ref": "indicator--4c331496-8db8-481d-986d-0e27f0627e27", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730ce34e-a72b-4236-9940-07cd0de24d8c", "sighting_of_ref": "indicator--4804acd9-99ad-4162-9ef4-a5510a783c02", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9c5894-6e87-48a2-928c-25f882fcea7d", "sighting_of_ref": "indicator--4804acd9-99ad-4162-9ef4-a5510a783c02", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42f25e5-25a5-4f92-92f4-47fbd483baf7", "sighting_of_ref": "indicator--dfff63ea-da6a-447d-a46a-1d82825daa0d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae54311-d8a4-48c0-9aa6-d9a388238d6f", "sighting_of_ref": "indicator--9d6cfaef-71b7-429c-913d-aa4b872e81ef", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b1b1df-f61d-468a-950c-c8a592cd4c3d", "sighting_of_ref": "indicator--9d6cfaef-71b7-429c-913d-aa4b872e81ef", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317837b2-3877-42c3-9cd7-0a3c84f1073e", "sighting_of_ref": "indicator--09644c07-8730-465c-b573-4f260751b8ea", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c70954f-cae8-451f-9227-12eb76bc538e", "sighting_of_ref": "indicator--7d088eac-fe96-43be-9895-81918be22277", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b7dcfe-180f-4654-803f-909b846d6635", "sighting_of_ref": "indicator--7d088eac-fe96-43be-9895-81918be22277", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e054d9e0-d97b-45e0-9dff-2825fb27db1f", "sighting_of_ref": "indicator--21ca60bd-a15d-4b70-842e-763d21541c75", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4b2a6d-9fce-49ca-a01f-f497cbd7c0e6", "sighting_of_ref": "indicator--e636ec5d-7849-4371-abd3-3463b1d0d787", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e6c0b1-d04a-47c1-94e0-ac5e2ca033a8", "sighting_of_ref": "indicator--e636ec5d-7849-4371-abd3-3463b1d0d787", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1b86b1-7944-4e67-909c-53b59d77bc43", "sighting_of_ref": "indicator--e5f8b562-c9fa-448c-9516-2618bb35b96e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a8f119-830c-4f40-a6c8-abdd9eeb2888", "sighting_of_ref": "indicator--a227caa8-dda2-45bb-a3e7-950c17838ec1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adefda87-bf8c-43b2-a5e3-c814f25016be", "sighting_of_ref": "indicator--a639a64a-f667-4ba4-b8c8-0e7a548d198c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5f50fd-195c-4d60-bf8c-dad32d382981", "sighting_of_ref": "indicator--a639a64a-f667-4ba4-b8c8-0e7a548d198c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d02019-397f-460a-9292-b1f112219d5d", "sighting_of_ref": "indicator--5da775fc-0815-49a9-8554-4c34ac9cbd58", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7454295b-2feb-4ae1-80b0-8b95df7c8aca", "sighting_of_ref": "indicator--5da775fc-0815-49a9-8554-4c34ac9cbd58", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7b6aaa-2ca0-4f88-a0fc-38a6373be6a2", "sighting_of_ref": "indicator--5da775fc-0815-49a9-8554-4c34ac9cbd58", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77cf3ea-1fb7-444b-a376-8361258349a5", "sighting_of_ref": "indicator--8bc9f241-0385-4c9f-b5e1-33f34c438671", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad23cf42-b046-455d-aa18-0d66cdf6470c", "sighting_of_ref": "indicator--bf5334c9-91e0-4b14-bd11-21d29fd79db9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0504e78e-9340-4983-8d72-e4886fcc64d6", "sighting_of_ref": "indicator--1c1c682d-80e1-4fab-b88b-6b84de77a3ce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49dc6db-503c-443b-ac96-ee12fa2163e3", "sighting_of_ref": "indicator--1c1c682d-80e1-4fab-b88b-6b84de77a3ce", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4cd325-bff3-4344-82e4-6c8d85363951", "sighting_of_ref": "indicator--52d66ced-640e-4add-886d-a1f1624d92f4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e13d193-e1ba-4c58-81f3-ace5c5981482", "sighting_of_ref": "indicator--52d66ced-640e-4add-886d-a1f1624d92f4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0feaab71-deb3-4162-b27f-d3fe7e13faf8", "sighting_of_ref": "indicator--28e3f3c9-3d4e-4fa2-8b70-dfc40fb5cc31", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab78b7a-351e-4b33-bd80-708de0604802", "sighting_of_ref": "indicator--28e3f3c9-3d4e-4fa2-8b70-dfc40fb5cc31", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4669ec5-89eb-4062-bd06-479f5fd9e0d2", "sighting_of_ref": "indicator--042636a1-bbf8-4104-b2d8-8ab8ed91c37a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e86da2d-0d05-4ecf-bf7f-a2addb8ddf99", "sighting_of_ref": "indicator--042636a1-bbf8-4104-b2d8-8ab8ed91c37a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0b51a8-0a6b-4068-a904-2554e9a9f75f", "sighting_of_ref": "indicator--ebe929b7-6c1e-4ecb-848f-3dac7e3e7265", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8866a8a0-66f8-43ce-a172-e5e57f7e6785", "sighting_of_ref": "indicator--ebe929b7-6c1e-4ecb-848f-3dac7e3e7265", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c578ac6-dda8-4a0f-a8ee-c9451eb4ba10", "sighting_of_ref": "indicator--ebe929b7-6c1e-4ecb-848f-3dac7e3e7265", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcf0b73-d50b-465e-977a-52b0fc3c881a", "sighting_of_ref": "indicator--5ffde38c-ab13-4562-a5eb-38d32982bd84", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6500e8f-46c2-479f-9884-4cddb23d1937", "sighting_of_ref": "indicator--5ffde38c-ab13-4562-a5eb-38d32982bd84", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b9ea67-98e5-4548-9cc7-4ad015e2e43c", "sighting_of_ref": "indicator--5ffde38c-ab13-4562-a5eb-38d32982bd84", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80195f29-96c2-4d1c-9be4-9551ba45fb5e", "sighting_of_ref": "indicator--81711349-1e79-49ad-b5f9-d80ee835c55f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0327d6b5-2765-493f-aa75-daa437eb5589", "sighting_of_ref": "indicator--81711349-1e79-49ad-b5f9-d80ee835c55f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73cbeccc-c0cb-4327-ae89-f5d06a3ceb6e", "sighting_of_ref": "indicator--0a501424-3c70-45a8-b1c3-27dc6521ecff", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1948bc41-141c-42bc-83a4-c2a1de78192b", "sighting_of_ref": "indicator--0a501424-3c70-45a8-b1c3-27dc6521ecff", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26718c3-694a-4007-9087-64aa2c8644b1", "sighting_of_ref": "indicator--30fab9b6-dd7e-439a-b330-23a7e15b6a86", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10daa95f-def6-4615-86b5-f324ad4d45a0", "sighting_of_ref": "indicator--2df7a761-228a-4696-bd43-a05108f77f51", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c3fcfa-a230-464a-98cd-b78248facfcf", "sighting_of_ref": "indicator--6ed4d03d-d2c7-446c-a670-a53fa2ce95e9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51391523-230b-40a5-9f4b-3e6afff21436", "sighting_of_ref": "indicator--f9ec58cf-791b-43c7-8ec8-d117ae56205d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a92d9dd-6348-4c55-a21b-2fc86e1fca84", "sighting_of_ref": "indicator--51deeddd-a5c5-4384-b4cc-997160c08ffe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88377454-7d32-4c89-885f-996d83d5d4ba", "sighting_of_ref": "indicator--51deeddd-a5c5-4384-b4cc-997160c08ffe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c359ef2-83c5-43e3-ad1c-5568d384985b", "sighting_of_ref": "indicator--9610a7c5-a334-440e-9c9e-6c0b8dca069b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d0bba3-eb94-476d-900e-0cb0d436e4a4", "sighting_of_ref": "indicator--09480171-eddc-47c8-84ad-469dbf5ed293", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc0113e-bb40-458a-9725-849317717381", "sighting_of_ref": "indicator--09480171-eddc-47c8-84ad-469dbf5ed293", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729d86ab-7574-4044-82d0-ad11dcc705d0", "sighting_of_ref": "indicator--09480171-eddc-47c8-84ad-469dbf5ed293", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe5437d-8dfc-40c5-b62c-d4fbdc2e6c54", "sighting_of_ref": "indicator--802a211e-dcb3-4dcb-a528-09c8d9b5ce8f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa67c0bf-33d3-4b13-a993-45e60c5d89ec", "sighting_of_ref": "indicator--7a74f0bc-ce68-458d-9ecc-f8dcbb6f199c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ee0726-0d06-42cc-9f9f-1d4e8940feed", "sighting_of_ref": "indicator--7a74f0bc-ce68-458d-9ecc-f8dcbb6f199c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3caba59a-1af4-465d-ba3d-b901bb92776c", "sighting_of_ref": "indicator--3a303d41-f4bd-4e16-9841-caf63e46f5c2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef22ab8-b325-4534-b809-c4065b133b7c", "sighting_of_ref": "indicator--cddd218e-8337-4335-af67-d5061dddae05", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d37ffa-748c-4296-bb5e-6c4590c69fe5", "sighting_of_ref": "indicator--6b509305-e41a-437d-81bf-35de70a69f50", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7823647-23e7-440b-b331-2f89f47f1543", "sighting_of_ref": "indicator--6b509305-e41a-437d-81bf-35de70a69f50", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2799bb-647a-4def-9df3-f425dbf5b214", "sighting_of_ref": "indicator--6b509305-e41a-437d-81bf-35de70a69f50", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79708f23-b355-42cc-8333-8a7add4a54b1", "sighting_of_ref": "indicator--11c58ec8-074c-41fe-a119-d18f00a0c40b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59489ab8-b489-49c5-b1e1-6ea22f8e04b8", "sighting_of_ref": "indicator--8bf8a824-282b-4b9e-adb5-d9102b9168bd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d145853f-7487-4c21-a955-3dae6f414012", "sighting_of_ref": "indicator--94fe9ec4-3183-41a4-bab2-6ba97095e2b2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e3d937-a62d-4376-9383-84aaf70b2bc3", "sighting_of_ref": "indicator--94fe9ec4-3183-41a4-bab2-6ba97095e2b2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35bc3de-ade6-4548-8600-c4e340e763e6", "sighting_of_ref": "indicator--d8fd04d9-3336-4e3c-a320-df0e7b301155", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207cfb19-c15e-4154-92ed-4309bf48667e", "sighting_of_ref": "indicator--d8fd04d9-3336-4e3c-a320-df0e7b301155", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957b233a-28ba-4256-8e93-425d09258f57", "sighting_of_ref": "indicator--ad828466-d02f-41ed-8832-7647298832e7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336feefc-d5c0-40e7-998d-8026ef03df21", "sighting_of_ref": "indicator--ad828466-d02f-41ed-8832-7647298832e7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5680d3-642c-4398-8a55-9e366a7855a3", "sighting_of_ref": "indicator--d45359f4-0bf6-4ed6-badf-61b77cb6f8cf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b3f004-e935-44b8-bf88-a04eb985779a", "sighting_of_ref": "indicator--d45359f4-0bf6-4ed6-badf-61b77cb6f8cf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ad2c00-aaee-4760-8f32-0be54b6b6af2", "sighting_of_ref": "indicator--b123d5ba-e41b-4349-a5f1-bb741f7a797e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818d2a7c-2a3f-4c0e-9c43-75d819f42c6d", "sighting_of_ref": "indicator--b123d5ba-e41b-4349-a5f1-bb741f7a797e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473498d1-48d7-46a9-a79e-82989769e077", "sighting_of_ref": "indicator--97ced920-d1b2-45f9-9ef7-ef59145d9fb7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6692f199-0803-4c80-8db4-613564d8fc1a", "sighting_of_ref": "indicator--97ced920-d1b2-45f9-9ef7-ef59145d9fb7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f3a8ad-b3dc-4ee0-9314-285f89927130", "sighting_of_ref": "indicator--94ffbe8e-dcdd-4469-83a9-cda7e2be4bf5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cce148a-041d-4fbf-8a29-149b99ce434d", "sighting_of_ref": "indicator--94ffbe8e-dcdd-4469-83a9-cda7e2be4bf5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39d048d-0ef6-4f08-80c6-7b11e1c2c453", "sighting_of_ref": "indicator--e0646e04-c754-4cda-87c3-33250898972e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11d457a-5aca-4c95-9c90-aa890315e0ce", "sighting_of_ref": "indicator--e0646e04-c754-4cda-87c3-33250898972e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210369f4-8236-4be0-b80b-2e29b932ebca", "sighting_of_ref": "indicator--645469da-0706-4abb-83e6-50501680f62c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad63f139-0de8-4246-9e21-d40ea13c41e6", "sighting_of_ref": "indicator--9e694084-aaa5-481e-b29c-9e914f4736a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f92e5bc-e85f-4743-aed6-fec33a90f2d2", "sighting_of_ref": "indicator--72c8f5cf-0c8e-4949-8b5e-6ebf290b46a8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95fc3e2-5d00-46b2-aaa7-6ce8b58fa6cb", "sighting_of_ref": "indicator--72c8f5cf-0c8e-4949-8b5e-6ebf290b46a8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ffc23b8-1718-4ce1-9c4d-533acc34cf24", "sighting_of_ref": "indicator--f1403f35-16b4-4344-bb95-213073e9f156", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c264e9-a2cc-455e-9ea7-504bc4570ec7", "sighting_of_ref": "indicator--3661db79-1bb1-4977-86d0-1384a4457a84", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18ea5b5-d87e-4ff2-b8e9-47b75a67767f", "sighting_of_ref": "indicator--d162e7d7-d5df-4038-bdfd-008057e7641e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a546b840-e7d1-49b4-9ea4-2f48672e4c21", "sighting_of_ref": "indicator--02c29760-2c5e-4c58-b529-bae8ce04d9ee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de266f8e-dfac-4da4-bbfc-b9710b5c6b8b", "sighting_of_ref": "indicator--81c74b63-2868-49ce-98ea-5d67976b3e83", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf3e3a5-1f25-44c1-a40f-ee300bf0f682", "sighting_of_ref": "indicator--03976a9f-e7d9-483e-8a22-c659556aaeb4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05a76e0-4272-496e-8e70-7ac611c85936", "sighting_of_ref": "indicator--03976a9f-e7d9-483e-8a22-c659556aaeb4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9076a4-1db6-4e8b-ae03-492d91971a18", "sighting_of_ref": "indicator--fbfaa0ed-83bf-4e2a-acc2-1b30eee90d02", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d566e85-daf9-40c0-8f3b-4d4d3a26b8c6", "sighting_of_ref": "indicator--1f276346-bd43-42e0-b418-9d19c9e11788", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cb3ac7-0c41-468e-858d-9464af931a15", "sighting_of_ref": "indicator--1f276346-bd43-42e0-b418-9d19c9e11788", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b53677e-ea0f-4344-89e7-30bc21ac5bb9", "sighting_of_ref": "indicator--bb741327-d449-4873-8d16-e9ab1090dcd7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af447a3-7816-4bec-a0a1-8cd594198623", "sighting_of_ref": "indicator--bb741327-d449-4873-8d16-e9ab1090dcd7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadd108e-39ca-43d6-b4d1-8f2b41c738bb", "sighting_of_ref": "indicator--bb741327-d449-4873-8d16-e9ab1090dcd7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739d91c9-2827-4022-8983-d99fec32e652", "sighting_of_ref": "indicator--29e3cbd9-c003-4a6c-ab45-f98341099937", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c316dbf-fdd8-4db9-a459-79201e1f0841", "sighting_of_ref": "indicator--29e3cbd9-c003-4a6c-ab45-f98341099937", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90be2df-8ecd-4ef3-b7ff-30d71964d08f", "sighting_of_ref": "indicator--d0b2848a-e9ad-434b-8449-79978cd29fbb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808711a0-2a86-4e6d-a321-259f15df82b8", "sighting_of_ref": "indicator--ddb02316-aed5-4ad1-bc2e-713501c89f8f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad02a4d-989c-4180-af27-6e1ea8c569fe", "sighting_of_ref": "indicator--ddb02316-aed5-4ad1-bc2e-713501c89f8f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29bc19a2-a17d-41ec-9c70-30070469bc78", "sighting_of_ref": "indicator--45ef26f2-785f-4a0c-a5ed-640a47bded10", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29917e98-646d-4b5c-ba64-806ace77f11f", "sighting_of_ref": "indicator--45ef26f2-785f-4a0c-a5ed-640a47bded10", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23c1695-d425-46d8-8b78-b23a7abe21c8", "sighting_of_ref": "indicator--45ef26f2-785f-4a0c-a5ed-640a47bded10", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d97a74-4bcd-4925-9acf-e68c007e4452", "sighting_of_ref": "indicator--42e7beca-d3ad-4ec1-a49a-e25204147d49", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471762a7-46bd-46ba-8654-5c79f1e9d641", "sighting_of_ref": "indicator--42e7beca-d3ad-4ec1-a49a-e25204147d49", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8764bc7-cc2c-4a45-b6b4-0284a303ab98", "sighting_of_ref": "indicator--42e7beca-d3ad-4ec1-a49a-e25204147d49", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816f2753-e313-4012-8470-6ec91cd06a6f", "sighting_of_ref": "indicator--f9065e59-da1d-48a6-83f4-a2d92951ad48", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d5b0b7-1315-406e-b9d8-2932bc8401cb", "sighting_of_ref": "indicator--6dc58d21-63d6-4dc2-b7a3-7d61b1f594ba", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca5053b-25b9-410d-a2cc-ff25dddd9010", "sighting_of_ref": "indicator--6dc58d21-63d6-4dc2-b7a3-7d61b1f594ba", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db249b39-c53c-42ef-b23f-ddab010c3583", "sighting_of_ref": "indicator--bc66f44d-d6f3-4506-8390-a245bdbdbb7c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede44638-f1b0-4c2b-b90b-7d92b72944e0", "sighting_of_ref": "indicator--0fecbd58-2f20-4b6e-94ff-9e44bc909910", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341edb68-3e59-4641-a60a-720fd6233b31", "sighting_of_ref": "indicator--0fecbd58-2f20-4b6e-94ff-9e44bc909910", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cacd05-d026-40d4-80f4-7d89bf851469", "sighting_of_ref": "indicator--0fecbd58-2f20-4b6e-94ff-9e44bc909910", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5595ff7a-29cb-49ad-a44f-63b594ff31db", "sighting_of_ref": "indicator--972c1042-77ab-45d2-8138-7a3efabfbda2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167aeaf5-02a1-459d-b138-197064b964e2", "sighting_of_ref": "indicator--972c1042-77ab-45d2-8138-7a3efabfbda2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35993a2-9452-461c-83f1-c237f3961311", "sighting_of_ref": "indicator--caa7bb3d-d29e-4ecc-ad54-4c9e00f9146f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310b4e8b-0216-4453-92b6-2238f43a6404", "sighting_of_ref": "indicator--e6a0e7c4-4170-4de9-8fac-09188bd90118", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb790985-6f5f-449b-b165-96491d69fcbc", "sighting_of_ref": "indicator--708fa617-035b-430f-a4db-4cd39ec04221", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e97880-b1bf-4c52-9afb-9f594c0a1daf", "sighting_of_ref": "indicator--708fa617-035b-430f-a4db-4cd39ec04221", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1b85bb-e68c-4b82-adde-59c6ad2717c6", "sighting_of_ref": "indicator--da4082e5-c4eb-4dc9-a0f5-95b56cdba5f9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec668d28-3225-4814-bbfd-e32ddd52cbcc", "sighting_of_ref": "indicator--da4082e5-c4eb-4dc9-a0f5-95b56cdba5f9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a5c9e8-2cdd-4604-a481-2c3c3a6676fa", "sighting_of_ref": "indicator--da4082e5-c4eb-4dc9-a0f5-95b56cdba5f9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9de45cf-408f-418e-aa5d-8db2f0f1ce64", "sighting_of_ref": "indicator--d3985ff0-bd95-4b22-8b6d-cf7ade5f476e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829c03f9-2088-4a74-8aa4-14eb9178c434", "sighting_of_ref": "indicator--d3985ff0-bd95-4b22-8b6d-cf7ade5f476e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094b499d-37db-4986-8352-177b435b15f5", "sighting_of_ref": "indicator--4a150f5d-32a9-4035-99f7-431c17104e05", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb3edec-88b2-4adf-aaa3-8d15680ef3ac", "sighting_of_ref": "indicator--1a08ba03-7e52-491d-a303-067dff05f1f9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de10400-09ce-4d8c-8d68-274bd412cd52", "sighting_of_ref": "indicator--1a08ba03-7e52-491d-a303-067dff05f1f9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ac90fd-fe91-4c1b-a9a8-8b70b5ad85d6", "sighting_of_ref": "indicator--051be5a0-3dbb-4a51-a165-688f30d4be1b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c41a4e5-01ca-4933-ac2a-87cd73a48f0b", "sighting_of_ref": "indicator--b1b1d742-7f99-4284-a9dc-1dc22b31dc4e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1032b24-ae50-49e2-8c64-434f6c0f75a8", "sighting_of_ref": "indicator--b1b1d742-7f99-4284-a9dc-1dc22b31dc4e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8beae16-4e5b-4a3a-a4b6-135d252e5fc3", "sighting_of_ref": "indicator--b1b1d742-7f99-4284-a9dc-1dc22b31dc4e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0bddf8-f724-456a-9dd6-4bcf165d5a00", "sighting_of_ref": "indicator--c28f1672-eed6-4bb0-b2d4-58e2dd27ef80", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585fb245-89ab-48f4-8f18-eb7adad3e6f6", "sighting_of_ref": "indicator--c28f1672-eed6-4bb0-b2d4-58e2dd27ef80", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100e9a0a-3788-4334-99e5-98a6b2831d84", "sighting_of_ref": "indicator--c28f1672-eed6-4bb0-b2d4-58e2dd27ef80", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8a9f6c-b80c-4ecf-ba50-4188169a0ccf", "sighting_of_ref": "indicator--b8b00cd8-f929-4bd4-a206-4123f0dd8a4b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d2e6c8-df9b-4213-8bfa-470fec717b54", "sighting_of_ref": "indicator--b8b00cd8-f929-4bd4-a206-4123f0dd8a4b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9d4fcd-77da-41e5-8ba3-8a29af57e34b", "sighting_of_ref": "indicator--bb42f481-c5b7-43b1-8055-1efd238736b5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78399450-729a-44a9-b4bd-d027b88764d7", "sighting_of_ref": "indicator--bb42f481-c5b7-43b1-8055-1efd238736b5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db82041-512c-4692-afed-f039edd2d8af", "sighting_of_ref": "indicator--bf475bfc-afe1-41fc-8ef6-f057c2bacbc9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24630f87-c433-4144-9a1a-158567c38089", "sighting_of_ref": "indicator--59774fb8-8cd3-4a85-806c-186f78c6d78e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7974ff-3639-40b2-8601-0b0959f30ee9", "sighting_of_ref": "indicator--3272f8a2-a59f-4df9-a86b-33f4d2188774", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660a9abb-e9da-48bd-b59b-8eb47bc9ca1a", "sighting_of_ref": "indicator--3272f8a2-a59f-4df9-a86b-33f4d2188774", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fe5668-89a0-45cb-9803-74a52a1cc40d", "sighting_of_ref": "indicator--ae5b7ca7-f55d-4d7a-99c9-516bc5af560b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d611a30f-b419-4ac4-96d2-1a2fd9d2d3b3", "sighting_of_ref": "indicator--82185c95-ef0b-4dfc-a8f6-99c54be13039", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550a2b5a-3ad6-4a57-a6ae-f107010b405e", "sighting_of_ref": "indicator--82185c95-ef0b-4dfc-a8f6-99c54be13039", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d625fe6-588c-4831-ab82-63166cbcd122", "sighting_of_ref": "indicator--7d0f8a96-74a4-4d2c-8b93-bca6182cd850", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f678c52-38db-4694-9d02-d37d000f6752", "sighting_of_ref": "indicator--b8d9be1d-b461-4dcb-b15a-e0cff91d4863", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac4ed8a-e84b-4854-a8a9-05d2ab6ec4c9", "sighting_of_ref": "indicator--b8d9be1d-b461-4dcb-b15a-e0cff91d4863", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf3c4ef-1be4-4a1a-ac6b-99797741721d", "sighting_of_ref": "indicator--91104383-b8b0-4b70-8445-7e16e14a3574", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e285a8-c024-47db-8743-1d38b8f6f73d", "sighting_of_ref": "indicator--c4511a18-fa56-46b9-9efa-f9ccfcad433d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f632370e-e207-41be-8cf3-3d18d332a22f", "sighting_of_ref": "indicator--c1e6a0eb-9110-4ec1-87e6-39ea40aa9750", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15c19b3-1336-437a-b475-9939bad1df1f", "sighting_of_ref": "indicator--191a2700-2d78-4917-b53e-e6bd61b91b32", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5576f7ae-e7ba-4854-8a13-40d75697006b", "sighting_of_ref": "indicator--191a2700-2d78-4917-b53e-e6bd61b91b32", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef410a22-48c8-403a-9ec5-7f271b1f3460", "sighting_of_ref": "indicator--d994e8f3-a20c-4193-8d4d-638e7503dfe1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e33187-b524-416c-ac21-b09bebaebab3", "sighting_of_ref": "indicator--7d4313b9-f2e2-4a35-b7ce-4aa842c93500", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3351ea60-0850-4060-9d04-b142cd454ff2", "sighting_of_ref": "indicator--9e1dcd92-1782-4847-96e4-3d77d410c84f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514ab015-a489-40a2-abba-1dbfb7086f2e", "sighting_of_ref": "indicator--9e1dcd92-1782-4847-96e4-3d77d410c84f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1852c0ed-e041-40b0-b284-43b260c6aaa0", "sighting_of_ref": "indicator--7f91299c-d058-40f0-a401-ad3bc38677b5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fefa060-e786-4caa-8fd5-77a99567132e", "sighting_of_ref": "indicator--7f91299c-d058-40f0-a401-ad3bc38677b5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a07ee32-21e0-4172-a329-40076ea53a01", "sighting_of_ref": "indicator--435a8d21-8cea-4242-9131-517118af8b02", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33998c61-385d-48cb-8c8e-1c4332ed8b1d", "sighting_of_ref": "indicator--c176f81c-5efc-4925-88e8-c71554cc7601", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11754ba0-1f9b-4531-8081-d29a99ec07f5", "sighting_of_ref": "indicator--c176f81c-5efc-4925-88e8-c71554cc7601", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269e2bea-efe5-40be-9561-e8d363c44ceb", "sighting_of_ref": "indicator--843a5b81-3af9-4d3e-8537-f40c9e592f6c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e60e35-b2b8-4a1d-b7e3-3f297186475e", "sighting_of_ref": "indicator--bf0cdaff-c9cf-4615-96ba-73d14078b27a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457f6c02-7914-4d75-a8f7-6bd8a242c3b1", "sighting_of_ref": "indicator--1cc8c8c0-4c19-4b9e-a0ba-50d994b388fe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2012268b-a901-4b8e-af1e-394903a607a0", "sighting_of_ref": "indicator--97533e27-27f1-4c29-94ba-20a8fc76a748", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52f3757-d6b7-48ce-9dfd-775a2b7b8875", "sighting_of_ref": "indicator--eac466b0-ae8a-4cf0-b3f3-8c2c046cce9a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1cd453-65ad-43aa-bafa-2fc951f2e544", "sighting_of_ref": "indicator--b98d17ff-b7e0-4ce1-9234-cd9014606219", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ebb9dd-925b-43bb-bc0e-b3f3d2a14ba6", "sighting_of_ref": "indicator--b98d17ff-b7e0-4ce1-9234-cd9014606219", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6bd242-3b39-4070-998a-1bc1dc179deb", "sighting_of_ref": "indicator--7329f733-16d8-4fc7-8913-487fe6f15ba0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f80503-1bec-411e-890a-43db7c19457f", "sighting_of_ref": "indicator--3dbc2e01-b67d-4a5a-88ed-5e1a2142eb74", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495c4e4d-f51f-4543-b08d-7bd469a801fa", "sighting_of_ref": "indicator--a3bc9f78-95be-4fca-9aff-83e432e88367", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f1b38c-dd3d-4ec6-86ba-c664ea088547", "sighting_of_ref": "indicator--55abe92f-40f7-4ae4-881d-c243631f6eef", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25dd2234-57ed-4d59-a96f-a60bdda95b9c", "sighting_of_ref": "indicator--55abe92f-40f7-4ae4-881d-c243631f6eef", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb03071f-7b1b-465d-850c-80cde57cc9c3", "sighting_of_ref": "indicator--39a576dc-abbf-439c-bf9e-c448c0d37cab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0222cde2-241b-4eff-85b4-36274192d6c4", "sighting_of_ref": "indicator--d3c0dcd8-c926-45fa-9351-42aa40c8ebe7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a35a89a-2507-45a8-94ea-2b37be1c08a5", "sighting_of_ref": "indicator--d3c0dcd8-c926-45fa-9351-42aa40c8ebe7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e20d40-16c0-4693-8927-771f0702d317", "sighting_of_ref": "indicator--d84bc798-29c7-45e7-9a7a-addf2f3f7fa3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189526f1-0fb0-4af9-b7d4-e2348f941233", "sighting_of_ref": "indicator--d84bc798-29c7-45e7-9a7a-addf2f3f7fa3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899d5416-4a21-4b08-bde9-977e9d3231a0", "sighting_of_ref": "indicator--2eb90df7-ccc3-4bc7-acef-0210b99cb861", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983a4329-6bc6-4611-b81b-98d7bbaf5277", "sighting_of_ref": "indicator--4358f4cb-ab71-4c72-afeb-753a970cb0ce", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336091e0-5137-490f-bfbb-658971e72946", "sighting_of_ref": "indicator--4358f4cb-ab71-4c72-afeb-753a970cb0ce", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d71be5-e568-4a32-bfbd-4837fdfd1104", "sighting_of_ref": "indicator--9fcc5131-46aa-4f69-8429-7359b221d2dc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a502333a-09aa-481a-9977-a5767fb051b5", "sighting_of_ref": "indicator--9fcc5131-46aa-4f69-8429-7359b221d2dc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9f4b43-9966-43fd-98f0-319d7ea2c2df", "sighting_of_ref": "indicator--9fcc5131-46aa-4f69-8429-7359b221d2dc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460e62d3-bdaf-4cbb-9e69-2c3c9ba1b2ff", "sighting_of_ref": "indicator--1666b99a-5a5b-4f8f-a470-88456e05702a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47e1c00-6e4b-417e-8ec0-18ad689bcef2", "sighting_of_ref": "indicator--1666b99a-5a5b-4f8f-a470-88456e05702a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799739a0-4fc6-40b8-9b8f-1081e88d4413", "sighting_of_ref": "indicator--5f8c6b9c-fdc6-4d59-a06c-fd3fa271974d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e233b26-c77c-4262-9fc9-dcb925febc79", "sighting_of_ref": "indicator--5f8c6b9c-fdc6-4d59-a06c-fd3fa271974d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c078e2b1-a54f-443b-876b-3db2dda9c369", "sighting_of_ref": "indicator--4c80236d-80e4-4c34-b7ca-df9da04200d2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7dbdbc-6c8a-4a7d-b4a2-56234d78f906", "sighting_of_ref": "indicator--513f90d2-4b94-47a3-90a7-11caf6ef4b58", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fff1b39-bc4e-4af9-a75b-2e74acf89f55", "sighting_of_ref": "indicator--513f90d2-4b94-47a3-90a7-11caf6ef4b58", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd6403d-1f33-444b-b2d8-11f384d91909", "sighting_of_ref": "indicator--4bea5a81-941f-449b-a2bd-f3a77f3c7ad5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae77725-dd38-4125-87c5-399b04ab7d48", "sighting_of_ref": "indicator--809b414e-9828-488b-880c-89f369cbc2d1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b42b0a0-5fbe-42c6-b0c7-e751e8fcac8f", "sighting_of_ref": "indicator--809b414e-9828-488b-880c-89f369cbc2d1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff567545-7e0a-4965-8f04-dd6c5c58b7a5", "sighting_of_ref": "indicator--12be9234-4363-4a1e-ba74-8070bc47561a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a29bb2-2a28-4a71-9491-05fd9be10a78", "sighting_of_ref": "indicator--accd46be-e84c-4d00-b02e-07b2493d9568", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6c39c4-df15-4461-9f14-49ce69f7936c", "sighting_of_ref": "indicator--eb6be877-f98a-4a6d-884c-d9b5a0a6d70b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6c7deb-db71-437c-9fb2-d9141a690af8", "sighting_of_ref": "indicator--3bd8b336-987e-43be-881f-13da32455009", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ea37c2-50e8-4c3c-a009-952bc9a247c7", "sighting_of_ref": "indicator--3bd8b336-987e-43be-881f-13da32455009", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0b0da4-e248-4f3a-a1b2-590c5c9f8c52", "sighting_of_ref": "indicator--009a87a9-2ef4-476d-b5b8-c6f1042557c0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71289bcb-d445-4db8-8cf4-20261ed50cff", "sighting_of_ref": "indicator--5dbf3b4d-d052-4cf5-9ae9-7835364aeaf1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34d9447-7a97-4833-82e3-d76e27619345", "sighting_of_ref": "indicator--5dbf3b4d-d052-4cf5-9ae9-7835364aeaf1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54512994-53ef-4e85-8e7a-20aae0a273f4", "sighting_of_ref": "indicator--69151f8b-99a4-4db3-9c3f-ef23a6d22b9c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2af97ff-5700-4bf8-99af-e6cc45eb5f56", "sighting_of_ref": "indicator--708a789d-1835-4d0c-a132-11b3873fbe7a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53350c51-e4aa-4ba7-bcf9-42af93cbe2db", "sighting_of_ref": "indicator--e4b4835e-d4a6-4138-8ec6-8fda63a20aee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc67887-4757-44cc-a24e-4aa685354279", "sighting_of_ref": "indicator--e4b4835e-d4a6-4138-8ec6-8fda63a20aee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37884161-85eb-4c6a-8e03-fd0aabae2fcb", "sighting_of_ref": "indicator--f967ed72-65e7-441d-80aa-324ddb8b8d5d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6208ed-8a06-40ef-8d0a-af1796eaa566", "sighting_of_ref": "indicator--401978b7-976a-4518-98a0-e9d54b2520d7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5e095f-1223-4ef3-9d8a-fcacb1319d6a", "sighting_of_ref": "indicator--d484ba56-0540-4923-b776-5c8a4292d7d5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a478a381-28ad-44a6-86fd-411ed0b7666a", "sighting_of_ref": "indicator--d484ba56-0540-4923-b776-5c8a4292d7d5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24abe78-43bc-4f35-8fcd-be9c71b7f911", "sighting_of_ref": "indicator--9e52f484-02d4-49fe-9c22-2c4f7b2c887e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced5f2c4-0dbe-4e78-9ab8-19d2c5996c74", "sighting_of_ref": "indicator--21e05d5b-301f-425f-bc46-e5ee3e4e4ba4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6729f7a0-3027-4cad-a150-5064c17077e5", "sighting_of_ref": "indicator--21e05d5b-301f-425f-bc46-e5ee3e4e4ba4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de9b154-bce4-4681-ba32-89c77fdd3c1f", "sighting_of_ref": "indicator--21e05d5b-301f-425f-bc46-e5ee3e4e4ba4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1252314-5ce3-4b2e-9120-e61e9da18063", "sighting_of_ref": "indicator--8f5087bd-4497-451a-ba6e-8e7c5937e1bb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9630688-c557-4952-994f-aeaf17399c2c", "sighting_of_ref": "indicator--b4d1c95a-4ae3-4120-b1f1-81e6db3722e5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0a1b27-d746-4984-98a5-95701dcb253e", "sighting_of_ref": "indicator--3b5431bd-45ad-4284-b9b6-e9584fd215c4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c192f0-197b-4f5a-ac30-0f1b7d4a38c0", "sighting_of_ref": "indicator--3b5431bd-45ad-4284-b9b6-e9584fd215c4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8fe6b1-c82f-409b-923b-5b242d1e9a03", "sighting_of_ref": "indicator--3b5431bd-45ad-4284-b9b6-e9584fd215c4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4d5d23-35c1-4d45-8636-1625efe27f4f", "sighting_of_ref": "indicator--78daf34f-87d0-4b94-8296-ae56b5263696", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2703c16d-c390-4302-86c6-c6882db1130c", "sighting_of_ref": "indicator--179ee929-2ed9-4f07-bbf3-6c15b2249847", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fcf3ca-a4ac-4818-877c-5c36f8985250", "sighting_of_ref": "indicator--179ee929-2ed9-4f07-bbf3-6c15b2249847", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ac79e5-8887-4352-b55d-7e02b08b1a65", "sighting_of_ref": "indicator--da614d4e-4497-4427-a45d-59060d7a9a69", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a221f2-33b3-4aa4-9764-e2294f6f40ab", "sighting_of_ref": "indicator--c080222b-bb3b-46ba-9b20-ec7a97e6132f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8593cc27-de02-4f8b-a53c-0f010ae557a3", "sighting_of_ref": "indicator--8a7d2dab-9fdd-4c43-a38d-2ce13e960cbc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03dfa20d-bcac-49d7-8461-5bb994edb9a8", "sighting_of_ref": "indicator--9a0d56b4-b520-4327-adfe-a199de58ebb4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd78cb7a-606e-4105-90de-78c387415403", "sighting_of_ref": "indicator--9a0d56b4-b520-4327-adfe-a199de58ebb4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e979a41-67eb-4cfa-995f-9ab410db33df", "sighting_of_ref": "indicator--4888b1dc-905b-48a3-bde7-0f8efa7d1cdf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6a8f3e-ba5c-483b-9eba-6ef8d6762e8c", "sighting_of_ref": "indicator--4888b1dc-905b-48a3-bde7-0f8efa7d1cdf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253176e3-b574-44d3-a684-72c0cb8a120f", "sighting_of_ref": "indicator--cf005541-7f96-4bfe-b8ec-5ecc4d6b1cd7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f499a7-8a71-48b0-90a4-f61d840d53c3", "sighting_of_ref": "indicator--35471a22-5149-41e6-a43a-5c400c46f059", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38edd7c-5c97-4df0-af16-05c985051065", "sighting_of_ref": "indicator--35471a22-5149-41e6-a43a-5c400c46f059", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce91dcb-79d4-40ea-8d93-4aca94f99555", "sighting_of_ref": "indicator--89539f3d-9c73-4a25-a0bd-0c10353ed4de", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60779a96-45fb-4b00-a6d6-72e21ad4b3a1", "sighting_of_ref": "indicator--89539f3d-9c73-4a25-a0bd-0c10353ed4de", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f40fb4-10c9-4007-bd94-89516b25f8b9", "sighting_of_ref": "indicator--954cfd35-57d8-4e34-933a-b2beefd0768e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14cd4db-dfdf-436e-b625-5e998a7c6249", "sighting_of_ref": "indicator--3a0593e0-5312-4d09-941e-b9eebd3023a3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d7967b-875b-43be-b1da-d9729d324f3c", "sighting_of_ref": "indicator--3b32fdd5-01b6-4d7f-8286-8e64a2256307", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771a9cb2-078d-4e0e-af5c-839ffff30867", "sighting_of_ref": "indicator--baf75566-10f8-4d19-bfe6-f1a451b1d29a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d507492c-d75f-4c48-9dd7-f07b71282564", "sighting_of_ref": "indicator--6b7db93c-40c9-418a-812e-1cd4f5908b0e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1624789f-dd6f-45f9-80f1-ac2791c4e206", "sighting_of_ref": "indicator--993e45bb-23c0-43f1-9ba8-5c310c837b6e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b486ae3-dd01-4851-b658-f9090cba449c", "sighting_of_ref": "indicator--993e45bb-23c0-43f1-9ba8-5c310c837b6e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d2f478-453b-428a-ab0b-2f9aecb4755c", "sighting_of_ref": "indicator--76998f1e-0952-48fb-8f4a-8e55593e4449", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa00b16c-d71b-4f34-9e5c-5a15bd18f76d", "sighting_of_ref": "indicator--282bad07-3578-4668-8d23-63f48fb6bbd8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc9cde5-eb48-4ed0-9fea-f576a3770323", "sighting_of_ref": "indicator--282bad07-3578-4668-8d23-63f48fb6bbd8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c7b092-5a0c-441a-8511-882bfb07e8b6", "sighting_of_ref": "indicator--029f69bd-765b-4090-b831-38a2cca01a0c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99f1f40-1393-4ade-8234-9f3fbff7025b", "sighting_of_ref": "indicator--cc612db6-eb11-43e9-b085-50a7cb0f5d4b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c750fcd8-75ef-432a-bee9-e2cd7b5c5df0", "sighting_of_ref": "indicator--425f0e7b-0d98-4273-96df-bf0ef3521d60", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a98e53-2ceb-4a26-96cb-a744e45782bf", "sighting_of_ref": "indicator--7e34fda7-f71c-4bbe-8cd8-6208cde064d6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d053e7-ca16-4ed8-ab24-9b9e364e095d", "sighting_of_ref": "indicator--088d2790-d0ae-4d34-a4fe-e97f142620eb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03259640-8e9c-4aa3-b6f4-51c86fa8a962", "sighting_of_ref": "indicator--70dab74b-2b98-49f6-af62-c0c72e7dffcd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c86a64b-7908-4ba6-9c72-48f3cf989446", "sighting_of_ref": "indicator--70dab74b-2b98-49f6-af62-c0c72e7dffcd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84be55a0-6d37-49d8-8048-77f8064ee504", "sighting_of_ref": "indicator--70dab74b-2b98-49f6-af62-c0c72e7dffcd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e23b31d-d05b-4470-854a-4c5fa5fe85a6", "sighting_of_ref": "indicator--c6673220-e973-4367-b7af-cf41b41ee8da", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea38e350-ca3e-4c1c-993d-6798c7cc81a1", "sighting_of_ref": "indicator--6984ead5-6ed4-44a8-9ec4-d7adda649905", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3d6a4f-e9d2-4768-bba1-f83f47364d58", "sighting_of_ref": "indicator--bd420dbf-2bb3-44b8-ac86-ee25b54adf1d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8b56bd-49c2-4bef-8790-1c69f647ca6c", "sighting_of_ref": "indicator--2e159c2c-345e-445b-8dba-4f3a04eb4e7e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8762e625-2640-497b-9436-5ac23b1d79aa", "sighting_of_ref": "indicator--2e159c2c-345e-445b-8dba-4f3a04eb4e7e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43cf6ec-5afb-4f77-8413-4c9513f77f63", "sighting_of_ref": "indicator--17475683-6de0-4d61-8089-afaea9dd86db", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfe8f8e-e912-47c0-a46c-62aa11c70bcb", "sighting_of_ref": "indicator--17475683-6de0-4d61-8089-afaea9dd86db", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199a2ab6-a2e3-4df1-9611-95d02c927eea", "sighting_of_ref": "indicator--17475683-6de0-4d61-8089-afaea9dd86db", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91201c59-c09a-4a2b-afcc-1601863335d7", "sighting_of_ref": "indicator--6c1551b3-82c4-4b47-bb22-ebec2219dac5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2eefe05-a789-4dd2-83e3-e636cfcfadc6", "sighting_of_ref": "indicator--542fd78d-71e4-4a32-93c7-53b66e25ec33", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794a3872-e29a-4e9e-9fd1-dc1561e8f9b3", "sighting_of_ref": "indicator--19e8d556-0425-45bd-bc4e-aa73e95e80e7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab146a8-26ba-4f21-8f60-765a7db0e878", "sighting_of_ref": "indicator--6a560573-db57-4730-9cf1-4e567fa49bb0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e94f28-0d42-47c2-9adb-f970069fabfe", "sighting_of_ref": "indicator--6a560573-db57-4730-9cf1-4e567fa49bb0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21cfc6b-2425-4930-93a3-de4d662538ac", "sighting_of_ref": "indicator--7f849286-9c9b-4d54-9507-f9080f445c4d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4f8aa9-0170-4964-841f-fcb4b70d16a5", "sighting_of_ref": "indicator--ef7b29d6-d978-4925-940c-8ffa6c77b62c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205fe975-8562-4183-895d-a968b90fb254", "sighting_of_ref": "indicator--7ed8b34c-cebb-4b87-92f9-9c12359a2c71", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff05f344-15f6-45b5-8d96-f4998932d94e", "sighting_of_ref": "indicator--f243ca42-3e24-4cf1-9252-ed4d817ff16c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdcc64e7-419f-46ef-8d4d-05a749eb25a5", "sighting_of_ref": "indicator--16ff73aa-97fd-422e-bcfe-d85c4c81ae22", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c9b3e0-87fe-4875-a68a-2734a3f23c67", "sighting_of_ref": "indicator--16ff73aa-97fd-422e-bcfe-d85c4c81ae22", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11ca840-63ca-4f49-bbd6-09d3e9b7f0c6", "sighting_of_ref": "indicator--16ff73aa-97fd-422e-bcfe-d85c4c81ae22", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8812fc85-5a76-45a1-bfd0-72a777d5052a", "sighting_of_ref": "indicator--566c254d-f1d3-4449-9863-bc3ad233c4c5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbcc58d-1107-4bba-9d87-ccad9edbe22f", "sighting_of_ref": "indicator--566c254d-f1d3-4449-9863-bc3ad233c4c5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4629c69-d942-4800-b5fc-dfb8f488fb5e", "sighting_of_ref": "indicator--7e4ca37f-3c75-41fb-b991-f5413dfbfb16", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5f9700-71fc-492f-9ee3-39f9e9ff2bef", "sighting_of_ref": "indicator--19c948e5-5a08-4008-a2d6-c83ab4a3c0d3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd55bea-a16b-45ea-b9d5-2cc25acdd7d5", "sighting_of_ref": "indicator--08d3fa35-a3bb-4eeb-a1fa-3e62e57d9924", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fb63aa-00d8-4d4a-a255-68681c18ab0c", "sighting_of_ref": "indicator--ee1b1a0b-fd47-400d-9567-4e956533783c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667d29a0-fa69-4c76-a6fa-deeb6d3a8ba1", "sighting_of_ref": "indicator--ee1b1a0b-fd47-400d-9567-4e956533783c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ee7279-9b81-446e-a63e-3876f1ded04c", "sighting_of_ref": "indicator--688e9825-1945-4a22-b456-7f9cbe2c957a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0968b6ef-f2ed-4263-a425-5ea9ed1768ee", "sighting_of_ref": "indicator--688e9825-1945-4a22-b456-7f9cbe2c957a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b076debc-6987-47d2-9684-5fa1db687f18", "sighting_of_ref": "indicator--1c310c6b-194f-4e98-a88c-4b058ae998d0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246f7339-eb70-4e1f-93de-1b4b9d5b72ee", "sighting_of_ref": "indicator--1c310c6b-194f-4e98-a88c-4b058ae998d0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71a4f2e-5342-46e6-be29-7d4dbc1f9c31", "sighting_of_ref": "indicator--72956d61-3073-4650-a106-e589a2d91919", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699ae5be-c565-4293-92e8-d6f90d87bd63", "sighting_of_ref": "indicator--72956d61-3073-4650-a106-e589a2d91919", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb0afd3-6d00-4f10-850b-da6b81b755c3", "sighting_of_ref": "indicator--a56dabe9-79f1-4f31-8c2d-e49ccc326cec", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30347da2-3ff9-41db-953d-620ee669a801", "sighting_of_ref": "indicator--a56dabe9-79f1-4f31-8c2d-e49ccc326cec", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7afa7d-5e20-4b46-ba39-d70a1285f696", "sighting_of_ref": "indicator--adcb2f5a-3c32-44ce-9285-164e2ed1afa4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52503d8-d160-429c-ac75-68a8c0f4b960", "sighting_of_ref": "indicator--adcb2f5a-3c32-44ce-9285-164e2ed1afa4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5db4975-964b-4cb9-8aa8-ae77936d5b9e", "sighting_of_ref": "indicator--10d0ef5c-5a81-4e8c-b9b3-df893fcc91f9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da9ac82-a21b-41cf-8f20-18fae2666863", "sighting_of_ref": "indicator--10d0ef5c-5a81-4e8c-b9b3-df893fcc91f9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d89f864-3787-4958-a5f0-61f27fe31486", "sighting_of_ref": "indicator--71b04d3c-c49e-4d15-8650-0c512257e0ba", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1035f1-d453-4776-8467-ddfcd0f640d0", "sighting_of_ref": "indicator--d186b7c6-bbe3-44bb-8af6-845b892565b7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d69ee7e-0c66-4f3f-96b6-d984fe94f600", "sighting_of_ref": "indicator--6ff509ab-4a9d-4c33-b479-e8ceb6327e04", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7e51c8-3a4c-4743-9092-8eafd07705a4", "sighting_of_ref": "indicator--50109cbe-6246-4d3a-bc49-f3cda1572776", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43587770-43c8-4b6c-9a77-a2be84ace617", "sighting_of_ref": "indicator--963e6603-81a7-43ac-8f89-0f3d93ff14b8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3afd4c-0d58-4d25-8bc0-370e22037146", "sighting_of_ref": "indicator--ab473946-23df-442c-8329-b869a9860052", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3329ba1-3b1e-42cb-8aed-bde5d42e0985", "sighting_of_ref": "indicator--ab473946-23df-442c-8329-b869a9860052", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f76e736-c0a4-4d39-993d-a677e1bcc83a", "sighting_of_ref": "indicator--ab473946-23df-442c-8329-b869a9860052", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb818c6-4068-4b99-ace0-b28c7017479b", "sighting_of_ref": "indicator--3f6eb130-bd3b-4f7d-9956-01fbec916593", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c909324-15b0-4569-99f0-be801354c757", "sighting_of_ref": "indicator--3f6eb130-bd3b-4f7d-9956-01fbec916593", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb368f8-d0c4-44fa-b664-3b3cca1a25d8", "sighting_of_ref": "indicator--9b2fe46b-b246-4955-862f-f27f378ee86f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57b5157-658d-4de4-87ad-1f8e11b2e086", "sighting_of_ref": "indicator--9b2fe46b-b246-4955-862f-f27f378ee86f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922d5ff9-3f84-43ea-8145-4f7384f9d3a0", "sighting_of_ref": "indicator--9d2f64fb-3812-4264-bef1-b60665a47836", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a02a1ff-5c94-4fde-8a0a-2c2eadf90ab2", "sighting_of_ref": "indicator--51ea35c0-43aa-4c0b-94df-c2bcb268c566", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2640fadd-ed1b-43dd-8d1a-17adc5922d3a", "sighting_of_ref": "indicator--51ea35c0-43aa-4c0b-94df-c2bcb268c566", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9968de04-001d-4e62-8ba9-3d93154149eb", "sighting_of_ref": "indicator--bc41592a-d856-4c97-b020-372ecb2fbfcc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6141928e-fb42-43ae-8744-8c718ac09854", "sighting_of_ref": "indicator--96ed8548-b4a3-4610-9e6f-188e43385f11", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589096c2-00ac-4f45-879f-b11510a109e7", "sighting_of_ref": "indicator--96ed8548-b4a3-4610-9e6f-188e43385f11", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6537042-59af-4317-b6aa-6d116095f21c", "sighting_of_ref": "indicator--12c5e820-ba8d-493b-a1b1-9899187a43a6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31442f9-aa96-4545-b7e4-e45cd7606b0b", "sighting_of_ref": "indicator--12c5e820-ba8d-493b-a1b1-9899187a43a6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edeebc0-905b-45f2-8b19-0ecfb98b5e01", "sighting_of_ref": "indicator--66b36f73-34a2-4bd1-9ff1-5a2460ff76f0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d7a75d-7dbf-4b36-9381-d41ac53ed85e", "sighting_of_ref": "indicator--66b36f73-34a2-4bd1-9ff1-5a2460ff76f0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577621a0-7a21-4979-bb5d-bfbb233496c4", "sighting_of_ref": "indicator--f7a2ea8f-8011-439e-91b8-99c73e7bb543", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee1181a-66a8-4f43-9bf7-d4acf3c1dccb", "sighting_of_ref": "indicator--5d7a0727-d75b-454a-987b-4dd9a21f9bc1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a90f4a1-20f5-4cf4-bc1a-27bc872b28ee", "sighting_of_ref": "indicator--f60693e4-00d9-48b5-8da1-316b6a82300a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd5e2cc-a751-4dcd-b62f-9fd6e7a74eed", "sighting_of_ref": "indicator--f60693e4-00d9-48b5-8da1-316b6a82300a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f0eee0-cb88-488d-80dc-8af5ed9feaf7", "sighting_of_ref": "indicator--3cdf00f0-1ae2-47ad-98e1-fd2b7eae9b0d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0402e6ed-6104-4a8f-8527-9a277ee2f513", "sighting_of_ref": "indicator--a74eb0e6-91f9-4fbb-8a29-efa0162c27f5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f65701-8442-4c08-a9ad-b6297ec86e9c", "sighting_of_ref": "indicator--a74eb0e6-91f9-4fbb-8a29-efa0162c27f5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149a2d6b-d5df-4086-befa-ba42086180db", "sighting_of_ref": "indicator--1515bbee-1f51-4b56-86b5-35a50948a52d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2bcc6e-7dc7-4ee4-ae06-9c5d5a992188", "sighting_of_ref": "indicator--5ee99b45-3401-480c-bd3c-2c7fc358b016", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80c75e7-cc30-40c4-8daa-54b8d1fbb57d", "sighting_of_ref": "indicator--5ee99b45-3401-480c-bd3c-2c7fc358b016", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa18932-0e4b-4975-ada4-aaabc6eeeaf3", "sighting_of_ref": "indicator--1f9a0ff1-28c2-413a-8dab-8bf5a9d2e225", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b59d9a4-1f3a-40e9-8ddc-3d3036bbcdd7", "sighting_of_ref": "indicator--1f9a0ff1-28c2-413a-8dab-8bf5a9d2e225", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7781f9ef-d280-41a3-8ea5-6052347023f1", "sighting_of_ref": "indicator--1f9a0ff1-28c2-413a-8dab-8bf5a9d2e225", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420491ad-a580-4d25-883a-ae2ed0a55b30", "sighting_of_ref": "indicator--440c5f7d-610a-4d98-a202-ab519e55611c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ff15d8-d934-42ca-804e-4e2c4c086557", "sighting_of_ref": "indicator--e4ecc192-b0cd-4018-a6ce-a0681b9f5081", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8acbc70-2bbc-4d63-a2a3-9d60a92c38e7", "sighting_of_ref": "indicator--11746605-2d05-41b7-b57e-88b7034d052c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2317e0a-52c0-4bbc-b9b5-03edbfd6243d", "sighting_of_ref": "indicator--abdb8db4-5ec0-4261-89c9-d7b8966d3102", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815674cb-92de-4985-b51e-726d2cad4c49", "sighting_of_ref": "indicator--47ea90ff-3457-4aee-ba62-0c18675b66ca", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8a8d64-bf18-4d97-8d9b-dd2092dd751d", "sighting_of_ref": "indicator--d3ba286b-65c6-4144-9b7d-32f7d73d70d1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e89d2ab-a591-4df0-b336-8c630ab9d843", "sighting_of_ref": "indicator--d3ba286b-65c6-4144-9b7d-32f7d73d70d1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a855524-f30a-41cd-82e2-8534452937e6", "sighting_of_ref": "indicator--2e675045-0dee-44ee-b1cf-e1d1c578e650", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85306665-1148-4967-bdfe-519d48de2337", "sighting_of_ref": "indicator--79dd1d99-93c4-4262-bf11-ba10f3049bef", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddb8372-db69-4037-8024-0349f5b5d147", "sighting_of_ref": "indicator--6461b4e7-37b9-4278-8add-4d500b153f9e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a26d661-aff0-4619-ae89-072f6d275dee", "sighting_of_ref": "indicator--860a24b6-8fb6-4519-86c4-bf8129257df0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3695fc98-f38e-45b6-88a8-36e585f4cbd9", "sighting_of_ref": "indicator--860a24b6-8fb6-4519-86c4-bf8129257df0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3c8559-edd1-4222-8f0b-dc3775738b47", "sighting_of_ref": "indicator--860a24b6-8fb6-4519-86c4-bf8129257df0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4b717a-5686-4892-978d-52556e0b18ec", "sighting_of_ref": "indicator--80c76150-a280-4834-bb23-9ad5bd12cba3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4fe22a-85cc-410e-bef4-dd5ded02eeca", "sighting_of_ref": "indicator--9576e2fb-0aca-4412-8577-db4305055759", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039baaac-9a2e-4ddc-ab12-d9f4b1de37c9", "sighting_of_ref": "indicator--f0a55812-a215-470a-9948-80b84564c297", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b352bc27-66d2-4eea-8e29-f745e58f315e", "sighting_of_ref": "indicator--f0a55812-a215-470a-9948-80b84564c297", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1a8b6a-ee6d-438d-a4d8-4f1f38b45032", "sighting_of_ref": "indicator--2b9414c2-aee2-48e8-baeb-f9b8b000db36", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5d58d1-44a3-42e4-8e7e-e9db07122cc5", "sighting_of_ref": "indicator--c54d3435-2292-4be1-a623-fa08730ced3e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d4b397-69c2-4e6f-95ed-75b2733322d6", "sighting_of_ref": "indicator--9d1d0ee3-e2da-4e51-b08c-021a9f0420da", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454676e2-8def-402c-93d5-3ef1acdc4d5b", "sighting_of_ref": "indicator--9d1d0ee3-e2da-4e51-b08c-021a9f0420da", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57d06ca-4aaa-4209-bf07-ae75e18f4210", "sighting_of_ref": "indicator--9d1d0ee3-e2da-4e51-b08c-021a9f0420da", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a60a7c-4f11-4443-99ee-ab14441074d3", "sighting_of_ref": "indicator--014d6cef-894c-424c-87fe-9fd8dc497cee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb751d9-7b0d-4084-ae10-8191d243a25d", "sighting_of_ref": "indicator--014d6cef-894c-424c-87fe-9fd8dc497cee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425a59e2-ee51-43e7-9ac9-ab05c73dfe2d", "sighting_of_ref": "indicator--45829d66-cb76-4385-b3c3-5dc0e8946ccc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8e624b-4209-4c94-afd7-db3c84585ee5", "sighting_of_ref": "indicator--641f03b3-67c6-4aaf-a2a9-276ccef20d23", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f76dc3-778d-47fb-9037-b848f881e607", "sighting_of_ref": "indicator--641f03b3-67c6-4aaf-a2a9-276ccef20d23", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4340edb1-935f-4bbc-a9f8-f231181aa5de", "sighting_of_ref": "indicator--64efa9bc-88a3-4954-a971-5287481ef945", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da49d42-734a-4712-ba9b-351e2bd5ecad", "sighting_of_ref": "indicator--636a6391-010b-4dd0-a4e9-2e026bf87e3e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837d5bef-8b60-4d27-bb36-6a1daa236b78", "sighting_of_ref": "indicator--636a6391-010b-4dd0-a4e9-2e026bf87e3e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8232cae7-2a7f-42dc-a577-62aae3a61d24", "sighting_of_ref": "indicator--636a6391-010b-4dd0-a4e9-2e026bf87e3e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ae2df3-8148-4071-87a6-7aabdf744aec", "sighting_of_ref": "indicator--e5b732e9-9163-4113-87f9-5e05a2b401b8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d29b889-f63c-4773-9c63-1e07d2f90928", "sighting_of_ref": "indicator--35c2b97d-8e25-44a7-ae0b-da4abf81fcee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e77eb62-e8f1-4ad5-8531-8f490c364911", "sighting_of_ref": "indicator--35c2b97d-8e25-44a7-ae0b-da4abf81fcee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52227c2e-6f20-49e4-8995-abd9c30856f2", "sighting_of_ref": "indicator--23e567e8-5c26-49cd-8cf3-1ae9583f7af8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a148f996-e132-4c6c-abcf-3360bec501fd", "sighting_of_ref": "indicator--de30deb5-cb5b-4d21-9c6c-e7891a7b3c80", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5a239c-f8ad-4e9a-a9fb-6c16e099ed84", "sighting_of_ref": "indicator--c3571c91-c4fc-48d4-a49a-330f0a502f12", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89e3598-f76c-4826-85af-3bd6e8b79654", "sighting_of_ref": "indicator--f2977111-0645-455a-9d78-a90bc7fbf3f6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31335aea-a3b7-47c5-adf6-192dbce5aa64", "sighting_of_ref": "indicator--ba483d83-9a7b-4be5-bebc-51b24ff0695e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a3ef2e-3901-4342-b654-c7f6d8c53d4f", "sighting_of_ref": "indicator--ba483d83-9a7b-4be5-bebc-51b24ff0695e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8bcdaf-948b-4506-9b03-876f7452a418", "sighting_of_ref": "indicator--cc923afb-4b97-45b9-9cc0-57921cb84548", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4acf7d-286a-4aa3-b6c7-e1e6c7bb8178", "sighting_of_ref": "indicator--625f843a-dd65-43b3-b2f7-514c319492f5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad2630e-12aa-4284-bb4c-8ae041eb354f", "sighting_of_ref": "indicator--379ff4b2-0dd7-4543-be8b-971aba397fae", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74d1aa8-975a-446f-8730-b01d52de0534", "sighting_of_ref": "indicator--ef9e1c64-2f90-435d-ab60-11b02af3480a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9a90f2-8f66-4354-acfc-039a0adf0a15", "sighting_of_ref": "indicator--8469205b-baef-476e-bc72-96188c0d1ec0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a05d795-a2f2-4640-b685-9b4a5ef32063", "sighting_of_ref": "indicator--5c131c61-82ad-4cba-9231-33b230e11714", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d84c6b-f4bc-42b3-bc63-c0be2ff8b012", "sighting_of_ref": "indicator--ad3d3363-4525-4b99-afa8-61aa0828b8b3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfccdbff-c636-404c-a8cc-9df5b8514056", "sighting_of_ref": "indicator--ad3d3363-4525-4b99-afa8-61aa0828b8b3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8be8a6-773b-462d-aca5-9cebb7fe6857", "sighting_of_ref": "indicator--c1a643f7-b1d8-493f-92b5-955df0c693ad", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d73241-4c64-46af-be7f-d236dfced326", "sighting_of_ref": "indicator--3648d1ad-5ebd-4c3b-a6e9-75529cee11a6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2a6391-2634-4afd-8396-8347b4423f5a", "sighting_of_ref": "indicator--3648d1ad-5ebd-4c3b-a6e9-75529cee11a6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd78228-3be5-40de-9a86-a3fe72cbdd2c", "sighting_of_ref": "indicator--61477f7d-a549-4f1c-8628-dde782bc97d2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9648209-1beb-4489-876a-e6141f11f0d9", "sighting_of_ref": "indicator--61477f7d-a549-4f1c-8628-dde782bc97d2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f8d1a2-e5f6-44e7-a583-1880c7b98b75", "sighting_of_ref": "indicator--c379aba4-6e36-4bff-80a7-9439be34cdc8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4ec94c-2990-4bcd-9d6d-8d3e78e1b644", "sighting_of_ref": "indicator--140ca483-1f3b-41a0-9b00-215e49f17792", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bcebfe6-f13b-4139-aa0b-7a2d2000d611", "sighting_of_ref": "indicator--140ca483-1f3b-41a0-9b00-215e49f17792", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7de0c7-b04f-41b8-aa00-3e5439d23aa9", "sighting_of_ref": "indicator--c54fd624-4810-48c1-87e6-4533961ab37b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b5fe97-a7d3-424b-ba3e-07a49cca4c87", "sighting_of_ref": "indicator--556e7aaf-a66b-470d-87bb-5c51927b9e11", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074a9589-4993-4ef4-9b84-120522998326", "sighting_of_ref": "indicator--556e7aaf-a66b-470d-87bb-5c51927b9e11", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f673840d-8401-4e88-84f9-78ad1aecadfa", "sighting_of_ref": "indicator--79336bb4-43f1-457f-a8ec-fdbf64716093", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53337e55-3d28-4927-8cd2-2fa05ed67fa2", "sighting_of_ref": "indicator--36da54ca-1d80-4e14-8041-07dd0b6eebde", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c3ebe1-187f-418a-ad49-5d84f96e5bda", "sighting_of_ref": "indicator--d9cf2a73-0610-483d-bd87-cf92f9315a19", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345dd82f-87f6-4b89-a6f6-5f384bb09450", "sighting_of_ref": "indicator--7c1a05b5-ed6c-4e82-9f82-5d1aa7baa64b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3cf856-8e11-407a-8cac-92321d23f729", "sighting_of_ref": "indicator--0eebee71-068e-4d49-a0ba-d8ea2eef56af", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492d78e8-1d54-4e3f-bd4e-6c721f4ff8b4", "sighting_of_ref": "indicator--1b79c443-4f45-477e-b794-0f2509ca8c5a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714c0068-3517-492f-ac6e-cbf3d05d77cf", "sighting_of_ref": "indicator--1b79c443-4f45-477e-b794-0f2509ca8c5a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1d3e40-cc69-47e8-b7cd-0488537ff02c", "sighting_of_ref": "indicator--80be6d4e-cd2c-49e6-bdfe-86480a71f258", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16dfa046-28ad-4a8d-ac8b-2a382782ec89", "sighting_of_ref": "indicator--d4d52332-a16b-45af-882c-db20effc84ab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17f628a-0c69-45a8-91af-b91688b54df7", "sighting_of_ref": "indicator--109c50f8-4f51-49e1-9db0-876f48ab91e9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27092652-e73c-4fb7-82e2-110d6e671eb5", "sighting_of_ref": "indicator--f9e9bdec-ff87-4566-82e4-b6c0f17dea4f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e756547-4c1c-4b15-bd16-a593cd0e9ef5", "sighting_of_ref": "indicator--f9e9bdec-ff87-4566-82e4-b6c0f17dea4f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372703bf-10d7-49a2-b3ac-4ce6307bf238", "sighting_of_ref": "indicator--59a099b6-c947-402e-a6c1-4d14b71a00c2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f256ca53-9451-4dee-83b0-2255d9a8c92c", "sighting_of_ref": "indicator--1a5ddf5a-3e77-4862-ac0e-ab459ef44547", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f07370-0b3f-4513-a328-bdde76680cd2", "sighting_of_ref": "indicator--52b12012-3e1d-46f6-82a9-b87b2cc8505f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a3e8b3-4503-4d1a-860a-64c320098237", "sighting_of_ref": "indicator--99059c46-a0a0-4cee-9904-75f92323aa61", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec2751d-9900-4004-acd6-ad829628f8c3", "sighting_of_ref": "indicator--c08e660e-0f93-4935-b589-bd5436beb8fd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217fcad3-b794-4577-9226-f30ca2cd5119", "sighting_of_ref": "indicator--c08e660e-0f93-4935-b589-bd5436beb8fd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de930bb0-8096-42fb-9810-39cc1b227748", "sighting_of_ref": "indicator--52986f96-b42a-4e03-b146-0701058e7745", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac423d7-0446-40fa-b7a3-de973bf2a5a7", "sighting_of_ref": "indicator--1ee10e4b-2ae8-4ceb-8258-7939ffb1a630", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b037c3-852c-4ad3-b771-41e2880ae8f5", "sighting_of_ref": "indicator--2726a46d-e001-42bc-ba09-b4ae011c0622", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2535ddcf-3d8f-499e-9a8e-e8a472554a7b", "sighting_of_ref": "indicator--007aa988-010c-47af-8edb-47bb0120a77c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6a3e2c-a954-4cd2-8e50-49d961727550", "sighting_of_ref": "indicator--f7d19620-3e9b-4cd8-8f31-55eaabe8a12d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e2204f-3917-49a6-a4fb-b007d2576e0c", "sighting_of_ref": "indicator--1b496829-8801-472b-87e1-d20002392183", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bd1f68-bb62-429b-b05b-8cd57d8f95e3", "sighting_of_ref": "indicator--a5662963-ebb9-439a-a8d7-cccaae34047a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7077473a-bdd8-43b7-a461-d00511c5108f", "sighting_of_ref": "indicator--4f0a5132-c317-4a6e-926e-f8d4fc9b22a0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0930c68-34cf-495f-a51f-79202f1b132c", "sighting_of_ref": "indicator--4f0a5132-c317-4a6e-926e-f8d4fc9b22a0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec73dbf-303c-4cae-8461-2bd3e5b8ce44", "sighting_of_ref": "indicator--948475e5-5c4d-4456-8457-67e580d7d071", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba36c1c6-2ff4-4fe5-be6b-ec162f55f9a3", "sighting_of_ref": "indicator--a9fd2c2a-a266-49fb-95cf-4c6d8bf09cde", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacf66f3-5c56-4a80-ac7a-9f6dff319dd1", "sighting_of_ref": "indicator--a9fd2c2a-a266-49fb-95cf-4c6d8bf09cde", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b92232-05aa-404c-9d9b-6cff901b52e7", "sighting_of_ref": "indicator--57b416d1-4857-4fdf-9c06-d6da4e974cc8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5649094-2061-428b-a623-46dfd10f7aef", "sighting_of_ref": "indicator--3e325fd8-39c3-470d-83db-be22b2633a22", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73119251-6e40-421e-8c60-1cf9b87d8d1a", "sighting_of_ref": "indicator--1f47151f-fc38-4d69-906d-5404891d3ba9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201c584d-2a0a-4308-bb03-9b89d8d2160f", "sighting_of_ref": "indicator--1f47151f-fc38-4d69-906d-5404891d3ba9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea757a9a-9187-4ef2-9f71-ff5e7e4835a2", "sighting_of_ref": "indicator--1154c3d2-665a-41e4-93b3-9c821ef5bc05", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80616d89-e145-49bd-b9c4-86f45187c9e8", "sighting_of_ref": "indicator--86d16758-36fa-42c2-9bc7-14ae835e1ce6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b2945c-d809-4f08-a9b8-07530a6dadca", "sighting_of_ref": "indicator--c5cb5563-1d8b-40b8-b649-1b5e59239870", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96d2cd9-0d8e-4adf-9639-9f5eacdd33ca", "sighting_of_ref": "indicator--5eb2cd53-4deb-4c29-b229-5c52324b4a3e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1bad09-fd90-4536-8ee8-d15f01647d6e", "sighting_of_ref": "indicator--5eb2cd53-4deb-4c29-b229-5c52324b4a3e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d10ba33-dd0a-45b3-9a7a-6884ae4079f7", "sighting_of_ref": "indicator--31a53ff1-3e3c-4651-8906-82b2aa61a00d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346b3c56-555b-46e0-bc7d-b17a39540e0e", "sighting_of_ref": "indicator--31a53ff1-3e3c-4651-8906-82b2aa61a00d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a499e610-68fc-4a43-aef3-4bbffb722313", "sighting_of_ref": "indicator--6c42e8aa-b7b8-4fda-9b06-586416843b49", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97d40fb-e86f-4dce-82ab-c4592ec282a4", "sighting_of_ref": "indicator--e0b73163-a39d-4928-81da-32c38b63ce95", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81cc3e3-e34b-43f9-b658-f050b7c20ab2", "sighting_of_ref": "indicator--e1953ef2-02f6-4f9d-9da2-f6727d299b20", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb218e0-785a-41ff-a0d8-46c4ffd2201f", "sighting_of_ref": "indicator--3635e5e1-1ecf-4238-a721-c38134ce6136", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a874e80-ddc7-445e-80eb-e450abb7aed5", "sighting_of_ref": "indicator--358918bc-b43c-4690-b6d5-1f7954046a26", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4203eb8-e760-4e73-bc70-33eb2e256149", "sighting_of_ref": "indicator--2a1a7912-5cfe-4e22-ae5d-14d56c1d2e38", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff8ecf7-2d6d-4746-9c00-28dab7b5790b", "sighting_of_ref": "indicator--d4ae645c-73a4-4b78-be6b-dfbd37f9916f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b2bde7-4097-45d3-a3e0-5734eefa1f60", "sighting_of_ref": "indicator--2947971b-83a7-4c27-8f16-5de15ae54e16", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1a0562-0676-4f06-a290-76103bd1d7d6", "sighting_of_ref": "indicator--5f857b7c-0de9-4eb1-a397-85db266ece63", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f8f879-cb9b-4c71-bbf5-be893c67d0a9", "sighting_of_ref": "indicator--817b050d-b5ad-49b0-ae83-610c794d5001", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562b55ce-0657-434b-a60c-cafeae6608f7", "sighting_of_ref": "indicator--bb3571b5-1161-49a9-8ae9-1bf32b27335d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f36e99-f3ac-45a8-8afb-a286fc266605", "sighting_of_ref": "indicator--9322ca3d-b260-4be2-b4b4-1d880a2a3f57", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5163d61-0dd1-4b27-8f95-9d239de0c03a", "sighting_of_ref": "indicator--4d5202ea-df33-4057-b0c8-a5b3667c91d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5abd7d1-c031-4dfc-a78d-e7f015b158cb", "sighting_of_ref": "indicator--132677bf-46ef-46ea-82a0-b670727956e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47dbbbe-1459-4b23-8c4f-dde974f52cd1", "sighting_of_ref": "indicator--ca1c0649-a2eb-47c3-a10c-5d0ecb832576", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa86f2a-9614-4517-a92f-c63ebf2d722d", "sighting_of_ref": "indicator--5a80aedd-b83b-4bfc-aa28-659a806d0642", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb32a0ee-44ef-44ec-924d-0d85dffecf30", "sighting_of_ref": "indicator--5ef9088b-fbdc-42fd-b416-f06f21301f16", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac1c0ea-5437-45f2-8d78-4c48a936fa6f", "sighting_of_ref": "indicator--23d3834e-a0be-4d8c-9e37-6e2c2d061fbb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0096ce25-aacb-44a2-93cd-f8c08408a0b4", "sighting_of_ref": "indicator--15585acd-6a72-4b89-932c-9b2a93496549", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b20ecb-3e84-4759-b769-c0e2529dc7a1", "sighting_of_ref": "indicator--9b78790e-b697-400e-b265-976252077ba2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c81d4c-6590-498e-9892-8648598ab8a4", "sighting_of_ref": "indicator--413e226f-fe4a-4f96-b128-d312deb659cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd14177-a6d2-4681-a099-75a9949ac1a9", "sighting_of_ref": "indicator--284e6b6c-ee17-4b79-af42-c07114e0b219", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6783f667-0d51-4e65-a1ae-c4ce4d0d5eda", "sighting_of_ref": "indicator--5959f6fc-544c-4089-a840-613c7e099172", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b047f1-bc15-4ba3-83e1-e8ddae52bc3d", "sighting_of_ref": "indicator--cfb77845-3a84-40e6-b4f8-7a0a316b0c23", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d743670e-cf1b-42a7-8ffc-801dc5622ad5", "sighting_of_ref": "indicator--9a1d415d-df03-4b02-915e-3f6c9381ad7a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baab2194-b67f-499a-89cc-5d77b5c35a13", "sighting_of_ref": "indicator--82965395-a3d8-4cc1-b94e-81e39d761eba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dccf71a5-f3bd-42d8-8d3b-c209183071c0", "sighting_of_ref": "indicator--d6ae17c0-9a7b-41c4-b1f2-2abaa4a4b720", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d9bff3-4f07-4931-a11b-98e976cea3dc", "sighting_of_ref": "indicator--31364d72-9336-4ac9-aebc-31f6b026671d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90aef56-1eae-4f93-bb83-21709de8e8f0", "sighting_of_ref": "indicator--82e5c292-4d62-4e87-9b6f-3889971f9727", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93824f65-af4b-4dff-bc13-5804f5901942", "sighting_of_ref": "indicator--7c277ab4-f5a0-4525-b888-9f71814db761", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e277ecc0-9254-4a5a-99f1-cefdc68378e5", "sighting_of_ref": "indicator--d1fba24c-fb0e-46bc-93a3-6f2ce9d302e7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595b6683-c6d5-4ca2-ba6f-2fd389e8309b", "sighting_of_ref": "indicator--7a19bb06-b3cf-4a02-b502-1a8bcf9670b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ae03ed-8c80-43f1-bc7a-d9fd82e3994e", "sighting_of_ref": "indicator--f78cdddc-8ee7-4319-aed3-6c9478f98f48", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b703398a-236a-4b8b-be61-a896e04e2c32", "sighting_of_ref": "indicator--4c0f474c-fc1a-4390-94c9-aa3603aaee62", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b5ad8a-10cc-4e06-ad05-b43a828d5c64", "sighting_of_ref": "indicator--037f9dda-a636-47a2-89b5-ed2fa78e7158", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92749d01-d472-4310-9f40-f7b90e78fd8b", "sighting_of_ref": "indicator--ef7ff4e6-7ac9-48ff-9b94-16f7af5616e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362f7070-8955-40be-b139-ba2804c68602", "sighting_of_ref": "indicator--2c858084-bf97-4e1a-9132-4244ef37f59f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d502300-c986-4385-8986-c726f1f4968e", "sighting_of_ref": "indicator--cce57435-12c3-4ff4-be40-885d2d94578e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1fc7e1-bc40-4cab-9695-03cdd4720c23", "sighting_of_ref": "indicator--0c0a087c-f1dc-4b45-9d06-757ac836a516", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5f67cd-beba-4f2e-8154-2c4750b4f4ab", "sighting_of_ref": "indicator--866aa5e3-c0fd-41a4-bd5c-48ad090ead32", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa130c3f-bbac-4b36-b9d9-6cf43b50e15f", "sighting_of_ref": "indicator--9526307f-cf86-445e-8dcc-30cc59707606", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a0a995-8f38-4cbc-b686-3f329be780e3", "sighting_of_ref": "indicator--28cbdafb-2d32-445c-be86-dc254095df58", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7411a37f-7234-45c3-95ef-3061ff847432", "sighting_of_ref": "indicator--98bf51f1-8271-44cf-b532-90872b8b955c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d46a91-b559-4cb4-a2a7-874c02e1654e", "sighting_of_ref": "indicator--e23aa920-08a8-4592-97ce-579504f6a3de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37fb198-e240-4885-91dc-6fea01143438", "sighting_of_ref": "indicator--9d80ffbe-f237-4511-ae5a-b56b7bc7bac4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85ccaf1-e5b2-4991-897f-0c7ade45501e", "sighting_of_ref": "indicator--57f50d13-ffb3-43d7-ba1c-98b2a9db1618", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e436fb62-615a-4624-b151-a39b0c74411e", "sighting_of_ref": "indicator--57e70c90-d6d8-4dd2-bc41-2917aaf8677c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5557d5-add1-459b-a97f-b0203f9082d4", "sighting_of_ref": "indicator--d24df19b-0c89-4700-8cf7-4e272d4839a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b67dc33-7b53-4608-887e-10611b009319", "sighting_of_ref": "indicator--12beb8d7-4420-4ed3-a494-401adde197c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54094f3-34f6-4fa8-b934-3f017a918bcb", "sighting_of_ref": "indicator--0c4884f4-9c1f-46f9-8a86-7e8b3e4dfb36", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2a3a03-c199-4d60-874f-751b4dd1c990", "sighting_of_ref": "indicator--758ecd01-2d34-42ce-8a27-35104a83eea1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7cab3e-c61c-4d1c-8f67-b021b12c25c9", "sighting_of_ref": "indicator--06275a04-ab9c-4e85-ba23-9161fd767055", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45565c66-4abd-484a-b593-ab838f13e6f3", "sighting_of_ref": "indicator--9db7890e-8aac-4491-b9bd-d98a648c58cb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506f2f35-a2e8-4684-99a6-3548ce07ba50", "sighting_of_ref": "indicator--d13949c8-a619-4641-872e-a8a36449fd7f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a4ed31-0f3a-494b-9f1a-d61dc8b6fe8e", "sighting_of_ref": "indicator--ca4aef0f-21f9-4972-8c4a-6012c552ea9c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c553a03d-38ac-413f-bd16-6b7f6c7dee75", "sighting_of_ref": "indicator--8b1c8752-6b1b-4153-9313-726f13f562b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5676d1-a049-4131-8183-cb3ba7117562", "sighting_of_ref": "indicator--1f33250f-197e-4712-a4bd-75c6ca45a20f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d55eebd-9ddb-469d-982a-49a62d9e57c2", "sighting_of_ref": "indicator--8436ba7e-11b8-49c2-926e-ee6e4133b331", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20492194-1d99-47d2-9fb5-2867f4c3564c", "sighting_of_ref": "indicator--fe1a48fb-c46c-4391-9004-816def3fd163", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1eb916f-4fc9-4e4e-8883-68d74ca45414", "sighting_of_ref": "indicator--b76da523-4d59-44f2-88d8-624614388e44", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f10f43-02f7-41e5-8da4-8f366f697aa9", "sighting_of_ref": "indicator--f3a76cf3-a235-4755-8f56-dfd324ae1767", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4063fb-22ec-4653-ab77-932dcfa19940", "sighting_of_ref": "indicator--3a479b04-9f16-4faf-b7d8-1a370cd37930", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbc17c8-18c3-4c40-ac6f-030277e94760", "sighting_of_ref": "indicator--7fd11183-bbff-4bad-a9a4-9d5f846b4795", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82b2563-e38a-443d-8f9f-272f204de024", "sighting_of_ref": "indicator--3814a445-a47f-446e-ad54-58f95c528db6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0d9caf-17ba-4596-b5ca-beac82dd1b53", "sighting_of_ref": "indicator--f70e1e17-f10c-4cc4-b952-1626b35c2058", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ee1fa6-06f8-4152-a309-6aff30d5a07f", "sighting_of_ref": "indicator--5a83d6d9-fdd4-457c-9daa-413fad793279", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e298822-c533-4598-9eed-edfd8b3603bc", "sighting_of_ref": "indicator--4a07c9ed-9989-4242-bd7d-d304254fad0d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6c3849-659d-4e52-9366-3ea5cc4dc3ca", "sighting_of_ref": "indicator--8490dfe3-1b66-47e7-8c36-e37678c3c8c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cebc6075-ba75-436b-9a42-3fbede0b88e4", "sighting_of_ref": "indicator--d3c3082f-cedf-4f06-8fbc-ea5ba9e31f1c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a261a82-1bd3-438b-9221-836580e67a49", "sighting_of_ref": "indicator--c97f3797-f21f-4f64-9a77-18fea91f7bde", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4f93a8-c9b7-4880-b9f0-b16ee2958521", "sighting_of_ref": "indicator--39a304dc-4a92-4e1e-8dfe-5751114b1e0c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6d3d64-1f40-45eb-871b-f550a41c0096", "sighting_of_ref": "indicator--75731a76-b520-4937-b161-4a55f6c278ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9695bb5-4fe0-4c05-928a-3f6cfe52be86", "sighting_of_ref": "indicator--eae7be58-8a3b-4feb-bff9-5bc5279c890f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60a3125-0322-4f30-9ca2-93b7b05d1c40", "sighting_of_ref": "indicator--36b9ec9a-de08-4907-95aa-3c62daf7e878", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10fe82d4-5952-4dae-825f-683b5aae0e34", "sighting_of_ref": "indicator--e34cb762-98f2-4ccb-96db-e0bfd039785c", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78f45a5-15bd-419d-8f56-f6fc065d65c4", "sighting_of_ref": "indicator--c040aac9-15a1-4054-bb54-c3cc287b70c4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfb4a89-5d68-4648-9e6e-34a55d160b4b", "sighting_of_ref": "indicator--736bbaa3-db32-4dc9-b0e5-074b95911f3f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f128040-acf9-4604-af42-ee6a55ae1e0a", "sighting_of_ref": "indicator--38ed8f03-1a5a-4806-97d9-49a248567b88", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbe3db6-1520-44b5-95ea-79667a57d387", "sighting_of_ref": "indicator--38ed8f03-1a5a-4806-97d9-49a248567b88", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ad72ef-4cb1-484d-8c7c-dc85424fd790", "sighting_of_ref": "indicator--38ed8f03-1a5a-4806-97d9-49a248567b88", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec86898-51aa-46f7-b993-077a6c046fed", "sighting_of_ref": "indicator--b9ac7053-d7bd-4703-983a-4c7a42b83f41", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ea6da0-bd29-4f5d-8164-fe736b4833a4", "sighting_of_ref": "indicator--6f91211b-de6a-4ab9-8ca6-187ac0d6288c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e35baf-a3bf-4f33-959c-9538dd73cf98", "sighting_of_ref": "indicator--310459e4-48a5-486c-97dc-edd076a7d750", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5afc56fe-330f-49a5-91c2-1b98df79ce2b", "sighting_of_ref": "indicator--c2109507-67a8-46e8-bba6-e36816eec8c5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef1fd7a-e26a-4f1d-87e5-22751eed8074", "sighting_of_ref": "indicator--c2109507-67a8-46e8-bba6-e36816eec8c5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5785e5-056c-4db2-82c8-3d6b451fcb60", "sighting_of_ref": "indicator--216a1fc6-eec5-4811-ba20-54a868c33a88", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031e9f23-cc5c-449e-8863-165ded06c7df", "sighting_of_ref": "indicator--216a1fc6-eec5-4811-ba20-54a868c33a88", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42cb9626-7242-4723-90ef-a20766715047", "sighting_of_ref": "indicator--216a1fc6-eec5-4811-ba20-54a868c33a88", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755675b1-7dd3-43a2-83e0-125db77d55f1", "sighting_of_ref": "indicator--6b9b3641-844a-4902-9271-a1b2ec0ab135", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f13f822-934f-41eb-9136-58c8649ad2be", "sighting_of_ref": "indicator--7b9ab12c-bb69-494a-acb9-07c42a55b77c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985cbb7c-2946-40d6-a39b-35232c98d090", "sighting_of_ref": "indicator--765fb971-6cd3-4a1e-b50c-ccecf903306a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c5decd-cfda-4a60-9851-923e5182d92a", "sighting_of_ref": "indicator--765fb971-6cd3-4a1e-b50c-ccecf903306a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925a5e05-54f6-4328-af15-6fb7d1854f73", "sighting_of_ref": "indicator--0231ba53-e6d9-4084-b18e-3aa530a043c6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa46508-2c38-4cc9-a164-a941b7cc0945", "sighting_of_ref": "indicator--0231ba53-e6d9-4084-b18e-3aa530a043c6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0673db00-ec91-482e-806a-490ff0ec068d", "sighting_of_ref": "indicator--0231ba53-e6d9-4084-b18e-3aa530a043c6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac23333-3c19-49ad-b227-b2e6c8de3ea7", "sighting_of_ref": "indicator--b57c57c4-3f48-4949-82c7-856a7df3f13f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de67aeb-83b1-49c4-ae41-5d6a9d74f0fd", "sighting_of_ref": "indicator--b57c57c4-3f48-4949-82c7-856a7df3f13f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a5c0bb4-1ab0-453e-8620-45a10313fb60", "sighting_of_ref": "indicator--fab60c93-daff-4146-8cc6-081c9b16b0d1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450d524a-ee47-43d9-aede-a018108e1884", "sighting_of_ref": "indicator--fab60c93-daff-4146-8cc6-081c9b16b0d1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263cdb8b-e57e-495f-9801-2d515266e24d", "sighting_of_ref": "indicator--25c1b28f-da23-4f3a-af12-5518356b28b3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d605829-eb53-40ff-9dad-ae45d698b671", "sighting_of_ref": "indicator--892ea0b0-be27-4435-a9ae-cdd6e9ed1eff", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5242bcb-7b31-4e61-b311-9cabccbeffc4", "sighting_of_ref": "indicator--892ea0b0-be27-4435-a9ae-cdd6e9ed1eff", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa64bfd6-4785-4d50-901c-5a69eec2891a", "sighting_of_ref": "indicator--892ea0b0-be27-4435-a9ae-cdd6e9ed1eff", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4dbb3e-cd0f-4d60-81b7-d978a443ba05", "sighting_of_ref": "indicator--3bd3688f-8a8d-41ef-bdb2-7c6c350a7b14", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecfbb9c7-76e8-4f59-b183-d2fe27bee7f3", "sighting_of_ref": "indicator--918c9c70-817f-4f08-9bd4-7c6dbfd17cc3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b8c624-24cc-4e8e-a885-11c93e171f21", "sighting_of_ref": "indicator--918c9c70-817f-4f08-9bd4-7c6dbfd17cc3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b3fca9-8646-40de-9f50-aa5d4ade9bb5", "sighting_of_ref": "indicator--66757979-f701-43e1-995a-98249ef9cf3e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecee6e9d-38d5-47aa-bc57-486ad49af858", "sighting_of_ref": "indicator--d10bea0e-238f-47bd-8386-ce1bd531fbbe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4040bac0-4afa-4efa-a441-e4a2824e194e", "sighting_of_ref": "indicator--d10bea0e-238f-47bd-8386-ce1bd531fbbe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09eef09e-9465-4e62-8f4b-037c625421b0", "sighting_of_ref": "indicator--d10bea0e-238f-47bd-8386-ce1bd531fbbe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d0be9e-bf42-469d-a808-6b13f8aab98b", "sighting_of_ref": "indicator--4317fea0-b013-40ab-bfbc-bba5c94dbe9b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b64e458-8d54-4eea-bf83-8f54b0553c6f", "sighting_of_ref": "indicator--824f53e1-cd79-4356-85ac-90863da5fadb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5016f30-33fa-40d6-be9a-522d02be39f9", "sighting_of_ref": "indicator--824f53e1-cd79-4356-85ac-90863da5fadb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2741e6f6-61d1-4b4d-ae93-6b8d1ac850d0", "sighting_of_ref": "indicator--3f43f9ad-4c20-4c75-b535-d8239039bb1e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fd98aa-c1cf-424e-a6ec-91a258e9a5bd", "sighting_of_ref": "indicator--3f43f9ad-4c20-4c75-b535-d8239039bb1e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6babf9d0-84b2-4c00-a85a-d8dd2390ace1", "sighting_of_ref": "indicator--8cb99dab-10c0-45d7-a587-79be8e98946f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d53e5fe-1ca2-4705-b4cf-f6e573c21987", "sighting_of_ref": "indicator--8cb99dab-10c0-45d7-a587-79be8e98946f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0e4761-fe0d-42ad-bb99-f9fa788157cf", "sighting_of_ref": "indicator--837cafaf-8ca5-4a69-8d98-e082166e6b61", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5cf987-3f1e-47af-831d-ca4a1711e479", "sighting_of_ref": "indicator--edd117fa-2b2d-41f1-9d79-2aabb6ce70fc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6155367c-8591-496a-bc10-1a87b2b20154", "sighting_of_ref": "indicator--edd117fa-2b2d-41f1-9d79-2aabb6ce70fc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928db68c-57dc-44b4-bd30-3a517a596443", "sighting_of_ref": "indicator--69f2f0fd-330a-448a-b190-44ba0923ffe0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9a8d8b-a016-4d86-bea3-8b747162d5bb", "sighting_of_ref": "indicator--ab272214-10df-4b8e-bae6-de0c46f1cc14", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f01fc6-822e-4057-9d0b-9e095da76b82", "sighting_of_ref": "indicator--ab272214-10df-4b8e-bae6-de0c46f1cc14", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf52e649-ab74-446f-a7c6-5f06c00cc5fd", "sighting_of_ref": "indicator--f694f816-7b74-485d-af82-99ac4561d235", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faee64f6-a52f-4115-99d3-488c56204019", "sighting_of_ref": "indicator--f694f816-7b74-485d-af82-99ac4561d235", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10394bcf-c7ec-414e-8d4d-b0de3982d565", "sighting_of_ref": "indicator--4be561a8-2154-4d94-90be-9c0e894f77dc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c405e9b7-20b4-4f6d-aeec-1c154a446e92", "sighting_of_ref": "indicator--4be561a8-2154-4d94-90be-9c0e894f77dc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1eacb4f-38e8-44a9-970d-1b9fcaadc129", "sighting_of_ref": "indicator--7e2bc4a0-0048-47a5-878b-607b597b4e30", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b0be96-8720-4ea7-8e6e-ae93015bd239", "sighting_of_ref": "indicator--7e2bc4a0-0048-47a5-878b-607b597b4e30", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111fee2d-7b7f-4fab-8336-c9d2460907a9", "sighting_of_ref": "indicator--7e2bc4a0-0048-47a5-878b-607b597b4e30", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efebae29-341c-4020-93e8-727784574991", "sighting_of_ref": "indicator--20a2a8b9-a0af-4f72-ae67-4b292de4e9c1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812df68c-9955-4066-a109-c110b57cfb6c", "sighting_of_ref": "indicator--20a2a8b9-a0af-4f72-ae67-4b292de4e9c1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d661d37b-b313-4660-ba40-6a5d86d251bc", "sighting_of_ref": "indicator--40338e25-0d0e-4d16-8d60-117a184acaeb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c0b8de-cb4d-400c-b6aa-02834282ea17", "sighting_of_ref": "indicator--40338e25-0d0e-4d16-8d60-117a184acaeb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec5e98e-17fe-468b-97d9-db4619974bea", "sighting_of_ref": "indicator--89407358-5a1c-4560-b71d-939e7f7e64b4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0302ca13-7655-44ec-8e11-193e32c55cc1", "sighting_of_ref": "indicator--89407358-5a1c-4560-b71d-939e7f7e64b4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be37052-e9cd-4be1-88af-5fed833161a1", "sighting_of_ref": "indicator--89407358-5a1c-4560-b71d-939e7f7e64b4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5872da3-1640-45fd-95cb-d0fb69cde9de", "sighting_of_ref": "indicator--2df52018-7243-4057-ac8b-b424a6c9fef5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d16682d-0cfe-4568-afb4-a561fb76589b", "sighting_of_ref": "indicator--95b1efe2-1f6c-4eb2-aae5-72ce5fecd110", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74427e4-d940-4086-88f3-4c49c96b6531", "sighting_of_ref": "indicator--e8bab539-511a-4b34-939c-ecffa318bf63", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51534c73-8528-4a7f-a24f-5a7afcf81d41", "sighting_of_ref": "indicator--e8bab539-511a-4b34-939c-ecffa318bf63", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fa10c6-9c33-432c-92fd-648eb8c048cd", "sighting_of_ref": "indicator--87d2a91c-2789-491a-9ad0-65231b52112d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2217e1-093d-46ff-8c93-0f8193b2f927", "sighting_of_ref": "indicator--87d2a91c-2789-491a-9ad0-65231b52112d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7cfa03-529d-4ae6-86b5-7d3460be48fa", "sighting_of_ref": "indicator--39b3ef53-a3d8-4cc4-8ee3-1975fd0cebdc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343a54a7-50ec-4e89-bac1-cf3fd67c2a6b", "sighting_of_ref": "indicator--d983a950-eae1-43fa-863a-97fbb30f6a9d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c7cd20-1b11-4cc6-820e-2376d286df9c", "sighting_of_ref": "indicator--d983a950-eae1-43fa-863a-97fbb30f6a9d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29191b3e-8e0c-4899-9746-1277e05e6d41", "sighting_of_ref": "indicator--ef6eebe8-4854-4e1b-914e-a42f6732a0ea", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d7cad7-ce2e-47bc-9022-175eb375af7c", "sighting_of_ref": "indicator--44aeb186-04fa-4eec-8cb0-13836aa44767", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b0f36d-736c-4601-a1b5-86ae0de3ae4f", "sighting_of_ref": "indicator--f65907cc-ccc0-42fa-a0db-9ebae066590e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647a50be-16b0-4e86-aeb7-d59c4941c492", "sighting_of_ref": "indicator--294d7bb9-8318-4e26-a3bc-bb0825f0e8f3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9f0bf9-6cb8-407f-b531-ae1336854e60", "sighting_of_ref": "indicator--d5f1c32d-d715-46a7-8631-ae67d2772f54", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b3aee4-727a-4b85-9e86-6981e737a3c0", "sighting_of_ref": "indicator--d5f1c32d-d715-46a7-8631-ae67d2772f54", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25662e23-e557-458f-925c-bf7738654b80", "sighting_of_ref": "indicator--d5f1c32d-d715-46a7-8631-ae67d2772f54", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807487de-3123-406a-b8df-939dd804df64", "sighting_of_ref": "indicator--d80d6b7f-88c9-4b94-9967-d04233d67dac", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c4b050-b8d8-4387-a99d-4a1e5e54c059", "sighting_of_ref": "indicator--8bc74da0-97cd-4d10-9973-de08a502f550", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1dc1503-c05c-4f86-b395-14c1cd3054ac", "sighting_of_ref": "indicator--00278fc0-5382-4e37-b30d-e86b83cca8d3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2df96e-9f88-4465-9d54-e37cf5901481", "sighting_of_ref": "indicator--7b257545-2aa8-4aea-a12b-077faba4868d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2449e13-b8f0-4a3f-9c4f-0203b0c61334", "sighting_of_ref": "indicator--7b257545-2aa8-4aea-a12b-077faba4868d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4c7b55-ff0c-44b2-8e77-9f64cc3ed26d", "sighting_of_ref": "indicator--018cf780-f2f3-4d26-afc3-4127b9754baa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706c5d26-e992-4d94-8a45-a604b2752fbd", "sighting_of_ref": "indicator--018cf780-f2f3-4d26-afc3-4127b9754baa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a775a4b-fb8e-48eb-91b2-5cae6e3cd4c9", "sighting_of_ref": "indicator--79c7123d-6fcd-4d53-840b-82d2420b4936", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad0e689-be49-4a15-a6a5-c07f84ae808e", "sighting_of_ref": "indicator--d2298b88-2928-4ac8-a976-450a1db97e20", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e9b44a-3ab4-48fd-b019-e47f1ce8c46f", "sighting_of_ref": "indicator--274a4d61-7e93-47bb-ae13-f68a2780b956", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76b3876-cc82-4fd2-b7f0-900cb1fc989c", "sighting_of_ref": "indicator--274a4d61-7e93-47bb-ae13-f68a2780b956", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22f5cc3-a36f-4fbd-bfab-9259354833c2", "sighting_of_ref": "indicator--bb23b0f9-8dd8-4f22-9843-8616481944d5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb92bfb5-a8d3-4554-9636-ee9642afc7b6", "sighting_of_ref": "indicator--bb23b0f9-8dd8-4f22-9843-8616481944d5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7215527-e4d5-4fe3-80cd-25aac89b3937", "sighting_of_ref": "indicator--d25b9400-85bc-4fcc-8537-f52833f8cef8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1b4fd9-61f4-428c-a174-6bd110c46a0c", "sighting_of_ref": "indicator--d25b9400-85bc-4fcc-8537-f52833f8cef8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685bb738-0086-4969-90df-f513fb266ddb", "sighting_of_ref": "indicator--00f4acac-d687-4271-af24-76836e4b7198", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ff960a-742b-41f9-910a-a64702960b8a", "sighting_of_ref": "indicator--a6e70f9f-3a4a-49b8-b514-664b8e23d255", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc7937b-1dd1-4ebb-8e8a-cf198bf645dd", "sighting_of_ref": "indicator--14179c83-5de4-40eb-a4ab-38bfb0096e24", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0fad04c-fa75-4942-b538-e036db1f339e", "sighting_of_ref": "indicator--14179c83-5de4-40eb-a4ab-38bfb0096e24", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2264ad5d-2477-4921-9759-08b8a39bd145", "sighting_of_ref": "indicator--f05b60fb-d043-4990-93cb-6a76c954f918", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7472bf-28af-4893-8a6f-fed875cef9a9", "sighting_of_ref": "indicator--44ae36c8-923c-432f-96e0-6e85593f47d9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46d476b-6ad4-4fbd-9444-b95dbfdc4e6f", "sighting_of_ref": "indicator--528978a7-9291-4ed0-a77d-020e3b73c66b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e46044-ba3d-4864-ab94-264b2a3edfce", "sighting_of_ref": "indicator--528978a7-9291-4ed0-a77d-020e3b73c66b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c56dd9-3570-4105-b4cc-5d279e4d4726", "sighting_of_ref": "indicator--d14ecbe5-a3d4-4116-a504-471375ecab70", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8db3744-53f6-481d-a2e5-1386f2d7c68c", "sighting_of_ref": "indicator--d14ecbe5-a3d4-4116-a504-471375ecab70", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36635716-29b5-4f8f-8784-e793e05a6598", "sighting_of_ref": "indicator--d14ecbe5-a3d4-4116-a504-471375ecab70", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c519d4b1-f2b4-4397-9631-f33e1f05fde0", "sighting_of_ref": "indicator--78935a0a-fd40-4d92-b37e-37f047b2c5d5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b76daf-c4c1-48c8-86d4-52a4918d74a7", "sighting_of_ref": "indicator--20683714-e8bf-4311-8e83-918ea52d9f35", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7274841f-ca4a-4432-9bb2-cca460583dcd", "sighting_of_ref": "indicator--0bcdc4d0-97e2-4620-aec5-29604ed73d2c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c45c121-a945-4348-91b8-89b7477f2c04", "sighting_of_ref": "indicator--0bcdc4d0-97e2-4620-aec5-29604ed73d2c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92b8e4a-fa8e-4175-83ad-5d3492b2fc51", "sighting_of_ref": "indicator--f22c5a1d-6c19-43af-a558-9ecde079584b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ba498c-0ce1-42c4-9798-06895ebf2712", "sighting_of_ref": "indicator--f22c5a1d-6c19-43af-a558-9ecde079584b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb76037a-193b-4641-a3b2-924fc04f2525", "sighting_of_ref": "indicator--3688704f-0391-49fa-93ad-1c12da612d6d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7acbe96d-4171-4ac1-bc73-c5f5de88817d", "sighting_of_ref": "indicator--94d796b2-aa46-4141-8962-8d9db760a65b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e237a099-179d-44fd-a33a-59328681a694", "sighting_of_ref": "indicator--f2bf54bc-e394-4311-b0dd-e5b1044479e2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86b0d03-42de-42d1-a28d-966cc4b0ce37", "sighting_of_ref": "indicator--f2bf54bc-e394-4311-b0dd-e5b1044479e2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9d4784-c83a-415a-8c0e-8d87e565b71e", "sighting_of_ref": "indicator--4aff282f-d360-43f8-8b00-8cf28e970308", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af4ba3e-e9c5-4c1c-8dbf-c4ab12ab291e", "sighting_of_ref": "indicator--4aff282f-d360-43f8-8b00-8cf28e970308", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751f2b75-7c0e-4413-af74-8a8706681a93", "sighting_of_ref": "indicator--8fbfe79f-cb30-4476-be91-f72f952cab7e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcfce526-ae76-491b-8902-7a44f5da602a", "sighting_of_ref": "indicator--8fbfe79f-cb30-4476-be91-f72f952cab7e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7073f09-c8c6-489c-89c4-fdf936d11798", "sighting_of_ref": "indicator--8fbfe79f-cb30-4476-be91-f72f952cab7e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb25aa78-c0c4-41cb-bcf1-36c0b16732e2", "sighting_of_ref": "indicator--fec4364f-1930-4796-8a92-7b66af4bae60", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9afe6b6-38bd-4da5-846c-d1ef446cc4cd", "sighting_of_ref": "indicator--fec4364f-1930-4796-8a92-7b66af4bae60", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d567c4-9a5c-40f1-9393-4f716b42bbc8", "sighting_of_ref": "indicator--40a1b64a-e926-4617-9ef7-d760c4b1b062", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a971988-1aaa-44af-9071-fc0217b317c8", "sighting_of_ref": "indicator--40a1b64a-e926-4617-9ef7-d760c4b1b062", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092f6ffb-e8d8-4dae-a5a7-3307e7ea4152", "sighting_of_ref": "indicator--49e1944f-b358-4684-b3de-f11014e80425", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc35a79-3eef-4fa4-bf86-53148fb99e5b", "sighting_of_ref": "indicator--49e1944f-b358-4684-b3de-f11014e80425", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f93974c-2f23-450a-b7ec-2f684876019b", "sighting_of_ref": "indicator--49e1944f-b358-4684-b3de-f11014e80425", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99bd7ff-327b-49a1-b615-1366543a8bee", "sighting_of_ref": "indicator--fe383491-8127-4deb-a2f2-7af2f37930fd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bafaec2-6ec9-403a-93d4-26c5f8e406c3", "sighting_of_ref": "indicator--fe383491-8127-4deb-a2f2-7af2f37930fd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad60f39-9a62-4d2a-99bc-62d7d5e30b4d", "sighting_of_ref": "indicator--495fcb11-2ea8-431a-88e4-c588234d43d7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d855747e-b7ec-4d30-b373-bf2efb01a75d", "sighting_of_ref": "indicator--758abd94-60e9-4087-87c7-c03a07760bbd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d0342b-f941-4984-ab07-2000fbfb07ce", "sighting_of_ref": "indicator--4d2a4014-10b1-47f9-bb58-fc79296cf52e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aabe44c-b5a8-48ee-8579-37f754a350f6", "sighting_of_ref": "indicator--7f7644cd-8729-4ff9-bf70-67189eb35624", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0b7e9c-98ab-48ea-a22b-43934cc3bf10", "sighting_of_ref": "indicator--03caf950-5ed6-4ab1-8d25-1964f59e79fb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b88cae-6931-49ed-9983-d86f2e4fac03", "sighting_of_ref": "indicator--b09ab7fa-1e58-4a93-acf0-c427783350ac", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c27b3f7-6c84-47f8-aa60-2a8517eee877", "sighting_of_ref": "indicator--b09ab7fa-1e58-4a93-acf0-c427783350ac", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea42c909-71ab-4aa8-abcd-769e72a5c862", "sighting_of_ref": "indicator--918699d7-3af7-4687-92d7-d024dab0b536", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a459f5c-756e-4b5a-b97d-427c5e401ce5", "sighting_of_ref": "indicator--918699d7-3af7-4687-92d7-d024dab0b536", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f27a716-48f2-460d-a954-8c6caf545ee6", "sighting_of_ref": "indicator--e4dd0c70-2ef8-4d46-803d-8001a5512b3f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a487c6b9-d35b-4a21-ac1c-9f750c431df4", "sighting_of_ref": "indicator--e4dd0c70-2ef8-4d46-803d-8001a5512b3f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacd7221-6779-4e11-8af5-cb032a520036", "sighting_of_ref": "indicator--d6116d81-2e3b-414c-9090-9ca2720825f6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd8b04d-26c3-4feb-b310-9d31d39dc9ee", "sighting_of_ref": "indicator--7da0feb7-88ec-42e7-b546-8e9c0907727b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdaa2b2-6211-4653-957b-415164bd6b15", "sighting_of_ref": "indicator--5e3d215f-7c97-4ebd-ac4d-aa43fa46d9c6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e66c38-7c45-4162-864f-f42a56940287", "sighting_of_ref": "indicator--5849431f-865a-4f05-b5a0-9c51585d72a8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54426536-2f0f-440b-bbb4-88a05541f567", "sighting_of_ref": "indicator--2c67a9af-75ee-493c-ac2f-03060ccc43dd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b148c6f-7f7b-4529-ad6b-bf83463df9fb", "sighting_of_ref": "indicator--2744b19c-3a89-49df-81d2-9884432ab3fd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd63e8c-4dd3-4bd8-8c77-e1400383cbea", "sighting_of_ref": "indicator--337fb15c-c1ae-46b0-945a-22467ae6117c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8242bf-3653-49c5-b17b-2bb089ea4eda", "sighting_of_ref": "indicator--70a33e66-9c47-43f4-b8b4-9a8067d13877", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79358899-77ac-46c4-9f76-262669b5d92a", "sighting_of_ref": "indicator--d79c36c8-1861-4635-a96e-bf549b7a58f0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5bfb72-8863-4203-9e85-a1c88c9ea8ac", "sighting_of_ref": "indicator--d79c36c8-1861-4635-a96e-bf549b7a58f0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00397f3-f8ce-49cb-9b7d-984176dbdd0f", "sighting_of_ref": "indicator--2c2cad28-b231-4ab7-b259-0d393c506ed9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b843d7cf-8625-4be7-b65c-a3ee48309171", "sighting_of_ref": "indicator--2c2cad28-b231-4ab7-b259-0d393c506ed9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb4f538-83cc-4cfa-9d29-fde23986e13c", "sighting_of_ref": "indicator--e2a9998e-1236-4102-8ceb-d63e2f5c9168", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6504ca8-147f-40d6-a670-5c5048b1cb15", "sighting_of_ref": "indicator--e2a9998e-1236-4102-8ceb-d63e2f5c9168", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829f11d6-2e58-4749-b212-f9ee939a3337", "sighting_of_ref": "indicator--cb0826a3-8094-4efd-8bd9-7f7b85127142", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b860a3db-709e-48ca-b3db-22b7ab6e71eb", "sighting_of_ref": "indicator--cb0826a3-8094-4efd-8bd9-7f7b85127142", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950d7392-dbfe-46b2-9668-24c112e3ae14", "sighting_of_ref": "indicator--cb0826a3-8094-4efd-8bd9-7f7b85127142", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babb62ee-259e-4182-91c1-db5800085e59", "sighting_of_ref": "indicator--2a3115a0-23d5-43b3-b2a4-1330d3de0d65", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e9f08f-6adc-4e0e-a865-5e8a3b2eab13", "sighting_of_ref": "indicator--f4c39d00-f950-4097-a782-e39a2989a92b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12257fdd-6948-46a2-9b39-c21d3b7bf05b", "sighting_of_ref": "indicator--f4c39d00-f950-4097-a782-e39a2989a92b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc25384-49a1-4104-8d35-8ce175d3ecee", "sighting_of_ref": "indicator--b373196d-b8b4-414c-9554-a286ae749dc7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4f1e8d-81a0-4805-8bc0-dbd07610595d", "sighting_of_ref": "indicator--b373196d-b8b4-414c-9554-a286ae749dc7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5779e240-f8a2-43e2-b37c-4447a6d0c27d", "sighting_of_ref": "indicator--b373196d-b8b4-414c-9554-a286ae749dc7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426228bc-d6e0-41c2-bb28-5115275c7e3b", "sighting_of_ref": "indicator--d8572f66-42ba-4056-b3ea-ca1ea5d8ffe0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0a0f99-25b0-4f77-9cdf-65b6e066d2ad", "sighting_of_ref": "indicator--d8572f66-42ba-4056-b3ea-ca1ea5d8ffe0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d199f9-5da6-4180-ae4e-53134eac696b", "sighting_of_ref": "indicator--d8572f66-42ba-4056-b3ea-ca1ea5d8ffe0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c439902e-5043-4991-9796-db2b73cabdee", "sighting_of_ref": "indicator--c5928263-e366-451e-964d-b96202a70e2a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d71268-973b-412d-ae18-bebea1251331", "sighting_of_ref": "indicator--1a707284-4bc5-466f-8248-9811c7079ed5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad31992-a51d-4ebf-9bf6-acd98a7190da", "sighting_of_ref": "indicator--1a707284-4bc5-466f-8248-9811c7079ed5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ca1f85-2667-44b6-a869-fa8e9661dbeb", "sighting_of_ref": "indicator--3dc0fd4a-11b1-4e67-98ac-e71f038f339a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f240a1-dca6-44b5-afb0-e9bf1fe53271", "sighting_of_ref": "indicator--32348e51-4b0a-4753-851e-6b4249a90259", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5c10c0-8741-40da-85a2-5e24d5af6d49", "sighting_of_ref": "indicator--e5cb4844-5bed-45c1-b093-38ef189728e1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c717371-2cb9-4c6e-a0e3-b4d70cf45695", "sighting_of_ref": "indicator--54b9b2e3-c89e-4a19-9417-6cc3ffcf611b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ac467b-f7ef-4007-a6bb-2ee6a64576ba", "sighting_of_ref": "indicator--54b9b2e3-c89e-4a19-9417-6cc3ffcf611b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812cf647-ed32-43d0-843f-6824c31c519a", "sighting_of_ref": "indicator--d6b2b083-72b6-44b0-984a-35ca73ef2f34", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b06d3d-8465-4f84-983a-34341f649b42", "sighting_of_ref": "indicator--d4974499-5344-453b-8be7-0aa0b03af292", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fc7e8d-139a-406a-9187-6b9eccd27e38", "sighting_of_ref": "indicator--3f9cb072-b35c-4f4e-b253-d2f26848bc8e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b60b7fd-bfe3-463d-865c-6f05049cc45b", "sighting_of_ref": "indicator--3f9cb072-b35c-4f4e-b253-d2f26848bc8e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681183cc-dbff-417b-9b6d-284e07799dd4", "sighting_of_ref": "indicator--46b9b22b-374a-42c8-8102-1e31d5e0c01f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808653fe-56d5-44fc-9f9c-07a113e065cb", "sighting_of_ref": "indicator--46b9b22b-374a-42c8-8102-1e31d5e0c01f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c851ad9-246a-48a3-a9a9-62c0a5295f66", "sighting_of_ref": "indicator--6aa120b0-7373-4ed1-a2fc-9d879a8b0995", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53edcba3-52b1-4c61-b59f-76d326f57405", "sighting_of_ref": "indicator--6aa120b0-7373-4ed1-a2fc-9d879a8b0995", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1297a7c9-f62a-4a79-be60-a018dfd001e8", "sighting_of_ref": "indicator--6aa120b0-7373-4ed1-a2fc-9d879a8b0995", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac39dcb5-fc26-4ce6-9d6e-99f9c884b6fd", "sighting_of_ref": "indicator--50d7c8a9-025e-44b4-ad57-d43094b33bcb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f239916f-45c6-4744-8e41-7a1f89b9b4ab", "sighting_of_ref": "indicator--50d7c8a9-025e-44b4-ad57-d43094b33bcb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed045738-ab75-4e58-8504-62f1cc6654c3", "sighting_of_ref": "indicator--56dee3e2-f968-4b04-9ca0-2672ac09ab18", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f3fc9d-80ff-485b-9eb7-f3e31ba379c6", "sighting_of_ref": "indicator--1f3e6172-6806-4f00-bf7f-28ff4e4405c8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2767a8-4e2b-47ad-b6aa-1e3afe0dcca3", "sighting_of_ref": "indicator--1f3e6172-6806-4f00-bf7f-28ff4e4405c8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9333c272-5652-49ca-8c0f-229ac4d1a5e1", "sighting_of_ref": "indicator--972d527e-2b3c-49c4-b708-277c756de5a7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d72c39e-c432-4748-a4c3-beab9005fd93", "sighting_of_ref": "indicator--6500a874-3615-42de-b04a-1e3aecfd6591", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4ae35e-b574-45d9-a14e-5d54422f4c0b", "sighting_of_ref": "indicator--d7e0c895-2f31-4aae-8bad-e3fa73df98ef", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06993c7-ef76-43eb-b757-fa6c33b380db", "sighting_of_ref": "indicator--a30ba7b4-8af4-4a13-b6cf-369f843099e3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e483fce-23e3-4d0e-b41e-d8674fd44084", "sighting_of_ref": "indicator--a30ba7b4-8af4-4a13-b6cf-369f843099e3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014bede1-c9a6-4c4c-9e2c-516e4d6e0a8a", "sighting_of_ref": "indicator--f92093ff-c82a-4e88-94da-13385292e274", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196e6ce1-9365-42dc-8366-8204cf9cdff1", "sighting_of_ref": "indicator--0681101b-3557-45d4-8932-c2d0b80830ca", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59edfc6-bc24-48a9-ba73-69a9dd53083f", "sighting_of_ref": "indicator--87490af5-e024-4086-8ba7-8b61a155a358", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274bf0c2-8678-4363-b060-6a70998e50c1", "sighting_of_ref": "indicator--b094104d-299a-4954-855c-53fb224d923a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7718e1be-a6f5-499f-86c1-757dd4ea794d", "sighting_of_ref": "indicator--b094104d-299a-4954-855c-53fb224d923a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0cea3cc-8ed7-4d64-9f85-497995835881", "sighting_of_ref": "indicator--4e10ba38-3bfc-49e3-afc4-e768183d41da", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e17c1e-43cd-486a-bade-64ba15fc9987", "sighting_of_ref": "indicator--e5ac83e1-32f1-45eb-abf9-aac392685b73", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2edb3901-6304-4fc2-ab49-a03844e77502", "sighting_of_ref": "indicator--55134e94-caf9-4e37-9d2a-9229acb79fb3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c523ee5-e600-4755-b203-6d6955a7359c", "sighting_of_ref": "indicator--afdb76a1-95ec-4788-9d2a-8173aedca9a3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2100d7a8-cb22-40f4-9f06-4e6d65d45401", "sighting_of_ref": "indicator--afdb76a1-95ec-4788-9d2a-8173aedca9a3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2465c41-deb1-4eaf-87b3-a674ad2027c8", "sighting_of_ref": "indicator--e85deb7d-3008-4884-8dda-a12618758d43", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186f6755-0437-4801-9e2b-a9e9b9bfe905", "sighting_of_ref": "indicator--77e19801-f583-42f8-8b11-8871124127c5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d655e90d-916d-4433-ab8d-b6ce3a258cda", "sighting_of_ref": "indicator--27198cf9-f1c6-4b79-9a35-f0ff5a84bbbe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1bbfe4-3e83-40c7-aee1-a139cba2b574", "sighting_of_ref": "indicator--824ce722-6b49-4667-91c1-fca03fd50602", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928132cc-d47a-413e-ac68-bb5120598e9d", "sighting_of_ref": "indicator--f40d2723-18bc-4c5b-bb59-4d111fd641ba", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1004ceab-50fb-436d-af66-6909a1e25d34", "sighting_of_ref": "indicator--f40d2723-18bc-4c5b-bb59-4d111fd641ba", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c2d33c-7790-43f2-8f77-f0cb2d0f514f", "sighting_of_ref": "indicator--eb153cf9-fb22-4201-bc18-f756055d78ae", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811cc9fc-6138-4b6f-849d-587471c9fbe1", "sighting_of_ref": "indicator--158bfd51-2985-460d-9e4d-56871c323163", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45404649-c078-4b61-9e4b-06d037c3b74a", "sighting_of_ref": "indicator--700526b8-906a-4465-8819-ab3f812cb70c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1334a00f-740c-4ca9-bca7-8460e75d8a7e", "sighting_of_ref": "indicator--8b09c5d7-ce4c-4013-b6d4-afeb5f2e284e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3088a1b8-e0a7-4b4c-a019-b6f4d89d95ec", "sighting_of_ref": "indicator--8b09c5d7-ce4c-4013-b6d4-afeb5f2e284e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef051156-a99d-4c6d-9547-a70944dd063c", "sighting_of_ref": "indicator--a7f691de-782c-4a8a-be95-4dfb10fc13fd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3722a37c-3de8-4541-9507-ff5714fcabfc", "sighting_of_ref": "indicator--d6f8693e-0555-485e-bbb0-3e9518549403", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619db4ea-e84e-4540-86b2-7eb6bedeab46", "sighting_of_ref": "indicator--d6f8693e-0555-485e-bbb0-3e9518549403", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81b0751-a472-4e55-aab9-7487e2cde519", "sighting_of_ref": "indicator--d6f8693e-0555-485e-bbb0-3e9518549403", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad36e33c-a600-43d0-bf83-39b006d14a6e", "sighting_of_ref": "indicator--7084da1a-e7c1-4964-add6-18d6a85cd157", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b504e8-52cf-41c6-9c7a-9c546c9f328c", "sighting_of_ref": "indicator--09d9d3af-75dd-4a96-9e91-b1ad5c2577e3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a657b3ec-35fc-43a0-beb9-abc6d899b0cb", "sighting_of_ref": "indicator--b8a06c71-206d-44aa-a16d-f74b07ff8746", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eace3210-1cae-47b3-a227-5e3ddab1bfb9", "sighting_of_ref": "indicator--30abbb8b-756d-4f57-bdc5-a67973820b68", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197e1893-3709-4559-8577-962de00d8e5d", "sighting_of_ref": "indicator--d1695a46-91b1-4081-b6b9-191e396d9d81", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49599bce-3c4f-4e6d-ae85-5c7f3a84c129", "sighting_of_ref": "indicator--5e1db22a-c65c-4eaa-8325-6a8d6af7cde9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23506215-1c92-4d4c-b07a-65ed0ca8bf80", "sighting_of_ref": "indicator--5e1db22a-c65c-4eaa-8325-6a8d6af7cde9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56d4653-add5-4e34-963e-526f98404331", "sighting_of_ref": "indicator--7bcfe762-c775-4672-82f1-80ac6700f751", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45104b96-ca67-4683-9a4a-d7dbbb7cdcb9", "sighting_of_ref": "indicator--1d9447c2-8ae6-419b-856a-db2e784d090c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f693bc6-668a-409a-aca5-5c363eded9ca", "sighting_of_ref": "indicator--1d9447c2-8ae6-419b-856a-db2e784d090c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3029325a-6644-493d-b195-94d86e5424e0", "sighting_of_ref": "indicator--1d9447c2-8ae6-419b-856a-db2e784d090c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9c5f1f-b977-44de-a38c-961c413f1b6f", "sighting_of_ref": "indicator--75b080eb-f984-48e5-97dc-604824939a5e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2672154-0eef-420d-aab2-445a1df38131", "sighting_of_ref": "indicator--75b080eb-f984-48e5-97dc-604824939a5e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e701cea-d93a-406d-bfaa-0f7abc273e79", "sighting_of_ref": "indicator--ebe61a2e-e21a-47e6-b5db-559e50a5fa89", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7b4461-3eb6-45ba-b0f3-47607debc017", "sighting_of_ref": "indicator--ebe61a2e-e21a-47e6-b5db-559e50a5fa89", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9077873b-44b5-496c-98a9-13ffcbdd3415", "sighting_of_ref": "indicator--56d3bef0-942c-4af9-a5da-f9765835a86d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5384b803-ca3b-422c-9a25-1488c753b1f1", "sighting_of_ref": "indicator--fcba25d7-a099-485c-a2ac-73ec5c183a4d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82612aff-c6a3-40c2-bbd6-14cc5cef445d", "sighting_of_ref": "indicator--fcba25d7-a099-485c-a2ac-73ec5c183a4d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a37c3c-a475-4cf3-9650-ba627654e6bd", "sighting_of_ref": "indicator--dfb330f1-6fbe-4268-b6c3-1d506b0fe11a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12424a8f-3cb4-4e9f-9040-fafbf681b6bb", "sighting_of_ref": "indicator--dfb330f1-6fbe-4268-b6c3-1d506b0fe11a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf973f0-f46e-4c3a-9a63-a20ba54c33b4", "sighting_of_ref": "indicator--276559e1-bc78-4dc8-b4ac-cfee0eff7648", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f8ce35-20ad-4636-91f1-ef3270a411ab", "sighting_of_ref": "indicator--e01c13fa-15a2-4a7e-a5ca-f70120bb6cb0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed10bcf-25e7-4f16-9bb2-7aa959bb30e7", "sighting_of_ref": "indicator--9fad1ad0-a3c6-4cb7-b33c-c74da22a9859", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2751705-4904-4614-be35-4a976889a372", "sighting_of_ref": "indicator--8293bca2-3331-43c7-b8b9-fef1abafa6b8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85761b9-5b84-48ce-bc13-fa64d4a68e0e", "sighting_of_ref": "indicator--cb91fe98-1990-4197-b90b-6c0a11f83baa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae66295e-4116-4b96-845c-73a13ae138c7", "sighting_of_ref": "indicator--cb91fe98-1990-4197-b90b-6c0a11f83baa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--addc4181-ec0d-45ad-b860-6b58736a2d47", "sighting_of_ref": "indicator--5f79e22e-345e-4246-90ee-97d21b3487ee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4f8e5d-d9f5-4ab7-abb7-e0073cd72bb5", "sighting_of_ref": "indicator--3be11379-bb2f-4e71-8bd5-156937d1ba71", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4e617c-9014-4cea-97a3-438c5d5113f3", "sighting_of_ref": "indicator--3be11379-bb2f-4e71-8bd5-156937d1ba71", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd329fb-b10b-4ce8-b643-a2577a6f604c", "sighting_of_ref": "indicator--48a85058-7192-4a3b-b975-02612951efe5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d86eac-1d87-49a6-b806-f76da741d399", "sighting_of_ref": "indicator--48a85058-7192-4a3b-b975-02612951efe5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e27c23-b742-4e6f-83b2-de6c244850e1", "sighting_of_ref": "indicator--48a85058-7192-4a3b-b975-02612951efe5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f015720-f893-469a-8998-8c4c7f9807f2", "sighting_of_ref": "indicator--b3d0f46d-36bd-4290-a53d-f409b07360a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c7966d-44cb-4735-87d9-c52ba2b1e04d", "sighting_of_ref": "indicator--646aac6c-7247-46fc-b9c0-3782109abc84", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f13cb44-851a-4d09-8d45-6f47eb0f2aa9", "sighting_of_ref": "indicator--838c81f7-7969-42e3-b273-0ab412e83e24", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1863e8-459a-4e4d-a6ec-0457def6a274", "sighting_of_ref": "indicator--779805e7-39ac-4162-8705-5aa7686668c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4506711e-0811-4a5a-baec-5c573b399fe1", "sighting_of_ref": "indicator--8c0ac22d-7c4a-4cf0-9188-fc0938e3922a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636b99eb-8258-4aee-ad4d-0f0110a795dd", "sighting_of_ref": "indicator--c7df1767-34cc-4c71-a860-8671f74be6f4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3934c7-9a8b-4df7-a71b-3e47c5d46f6a", "sighting_of_ref": "indicator--046dcc25-38ae-4df9-be65-15d0394934ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dae859f-7c62-4800-8d7f-c7e084f31536", "sighting_of_ref": "indicator--5dc8883f-cd82-4b2e-912d-02e7a288e40a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c34dea1-e637-4c50-8771-23f39ad74551", "sighting_of_ref": "indicator--6c8c8d10-6940-4f9b-a1af-cf8bf414420d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8569df4a-1384-4f88-8566-ca3fc9fdcd60", "sighting_of_ref": "indicator--e61f09c7-ea2e-49ec-a25b-370755a23e03", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38b5edd-e6f8-410d-8b51-13fba86a74fe", "sighting_of_ref": "indicator--e61f09c7-ea2e-49ec-a25b-370755a23e03", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e145db90-3bbd-43b4-9b0b-9d1dfbd647de", "sighting_of_ref": "indicator--43b0542d-51e4-451a-ab73-f1fad96a5c1f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558d26d9-a1b3-4e4c-b137-194e60a807dd", "sighting_of_ref": "indicator--e26e50bc-791a-457b-b052-73c73c2864eb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12a6f68-57ce-453b-8417-2c156751f182", "sighting_of_ref": "indicator--e26e50bc-791a-457b-b052-73c73c2864eb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19bcaef-aed6-4986-a0a8-52480c13dd8e", "sighting_of_ref": "indicator--e26e50bc-791a-457b-b052-73c73c2864eb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0281bb1-dbc4-4eda-94a7-dcd5e0c9b7ac", "sighting_of_ref": "indicator--ac3acc99-fd3f-4766-8127-e7f4470707e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0a4eab-a895-4bfb-89f8-6f229fb308fa", "sighting_of_ref": "indicator--2edd0e09-ca9e-4ac2-a760-08778f998930", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82d60e6-4051-43cf-800c-257b43088bd6", "sighting_of_ref": "indicator--e05bf311-90cf-4767-94e7-94298afeaab9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85c6f30-0faf-404b-937b-ccd2f5cd404e", "sighting_of_ref": "indicator--00d7e8d8-0dc4-4463-9785-f7051d535a72", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b83e816-8a4f-494f-8f1b-a233cffb427e", "sighting_of_ref": "indicator--00d7e8d8-0dc4-4463-9785-f7051d535a72", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13417de-bab9-4fe3-b940-d001c45521da", "sighting_of_ref": "indicator--00d7e8d8-0dc4-4463-9785-f7051d535a72", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c474e3-95ad-470f-9628-bc86d76ab62b", "sighting_of_ref": "indicator--cf1ed018-b645-4ffc-a56f-210302e595de", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3be1ad-8803-42dd-8919-b8ac171a87f2", "sighting_of_ref": "indicator--256ccb62-19a9-444b-88f2-270f586efe0a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be49651e-128f-4648-90ae-96292d209f23", "sighting_of_ref": "indicator--256ccb62-19a9-444b-88f2-270f586efe0a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc13f28-49a6-4a15-a587-8cfd8b84f0f2", "sighting_of_ref": "indicator--64d6416f-c683-4d6d-a6d4-9e936415361f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e60c9e-199b-41c8-9db0-449468cb1f2d", "sighting_of_ref": "indicator--64d6416f-c683-4d6d-a6d4-9e936415361f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9ddd4d-f056-40e3-860c-7aaf126541a2", "sighting_of_ref": "indicator--a3367a0e-403e-49de-815b-91bb379a3658", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0c0a26-be77-4463-941b-9d48b87064e1", "sighting_of_ref": "indicator--8ec2d707-bbc1-42cd-9fdd-f9d1699546b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3487e5b0-114a-492a-8af7-083178649a46", "sighting_of_ref": "indicator--37ea2624-90f0-4f1d-9738-026547288b36", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90921ca6-fa37-4a05-ab38-7c1d9c18d8bc", "sighting_of_ref": "indicator--6f8746ef-841a-4367-aa6e-6738aa392944", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8174fa-9411-4232-9418-0b977828f584", "sighting_of_ref": "indicator--611a7613-d514-484f-9e51-a9be1c0cc92d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21df04f3-6ab7-4e93-a456-9a5122138f41", "sighting_of_ref": "indicator--8ca4eb0a-18ae-4884-880d-568163c6498a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2ae437-d868-4d5e-b12b-321454fa2414", "sighting_of_ref": "indicator--cdd1f5b7-c4a8-4cbd-94ff-0dd411b30654", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba4759e-0f41-4943-8def-7c6a087b5316", "sighting_of_ref": "indicator--cdd1f5b7-c4a8-4cbd-94ff-0dd411b30654", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801146da-ea9d-4738-a140-1c9ecc7bb9ff", "sighting_of_ref": "indicator--580f9350-07f4-42f5-9425-31ae0e904a59", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be1ae5d-1b5a-4d59-81ff-9af494aa2f75", "sighting_of_ref": "indicator--580f9350-07f4-42f5-9425-31ae0e904a59", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75225dd6-8ff7-45f6-8842-402030d2c9bf", "sighting_of_ref": "indicator--c2513504-c480-49c0-9a80-357a32f2f76f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b1f1c8-917d-4429-b99b-7e75b0f817fd", "sighting_of_ref": "indicator--c2513504-c480-49c0-9a80-357a32f2f76f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27727bb-a701-4ab7-9cb1-b457e3dd2a57", "sighting_of_ref": "indicator--efc845f9-2e57-40be-aa7c-43bb43305971", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2fa574-b65c-4616-9dfa-a61fdfd7e7b3", "sighting_of_ref": "indicator--01ba00ef-183e-4c3a-aca0-48d7921a61cc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e8a767-f4c5-4c51-bc09-ec2fdcd08885", "sighting_of_ref": "indicator--0d3c6408-6ab8-4dd6-9b57-3d43b145e059", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13610daf-3e0f-4f5a-af1f-c15eb574427f", "sighting_of_ref": "indicator--e0b24f82-6423-4ebc-98dd-12f1f5230db5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d69223-dcc2-47b2-8433-bdd1e8f58964", "sighting_of_ref": "indicator--e0b24f82-6423-4ebc-98dd-12f1f5230db5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d75ed8-8aab-4be7-91a3-d53472deb665", "sighting_of_ref": "indicator--1e8d79f4-4950-4f1a-8337-6aa76b108140", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec697d6-d4d0-431b-8ef1-7d0064613c33", "sighting_of_ref": "indicator--0cf299c9-9fd4-46e2-bd02-280363368f08", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7603111-b670-4bf4-aa44-04357d9782e4", "sighting_of_ref": "indicator--0188c256-ea39-4b23-b293-70b66164d374", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7157c4-3d55-4ded-851c-c67e919a50ec", "sighting_of_ref": "indicator--0188c256-ea39-4b23-b293-70b66164d374", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ad881b-676a-4521-a956-fd34968708e7", "sighting_of_ref": "indicator--749ca2bc-1cc2-4d08-ab43-d34f709c1cb8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b27266b-714b-41ff-87df-6105da75f3b2", "sighting_of_ref": "indicator--85da315a-4056-416b-bab8-245d4aa30a59", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d568815-1412-41e2-b208-18e8f7273ade", "sighting_of_ref": "indicator--43e7ecd6-b242-4d36-8c8d-e5dc2a7b90c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0cf16f-3703-4f9d-ade6-99d42a8ae470", "sighting_of_ref": "indicator--cf2b7bc8-846b-4a3a-98e7-4cd5f7a35c00", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7aa71f-e229-4b71-bd3f-163d90bd73de", "sighting_of_ref": "indicator--b848c75a-bc4a-4790-aaf2-02097992128e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304410c8-a8ca-477b-a1d7-acc89f43410e", "sighting_of_ref": "indicator--5cd00a27-bcb8-4eae-baae-85b794b466c1", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb4e8b8-eb55-48d6-a485-ff46cbbba633", "sighting_of_ref": "indicator--1400a6ce-0dac-49ed-ab0a-873ac50e808c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7314ae6c-080a-4efd-a105-9fc149c4c9e9", "sighting_of_ref": "indicator--68b0731f-8036-46a0-bee3-4db72ad21fd3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b36f7c2-2c7c-4313-a3f0-dab251b59cca", "sighting_of_ref": "indicator--fe172abf-a1f1-4f5d-965f-32429d5246a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2032c246-7fc7-4f73-9a18-e84baa14e94f", "sighting_of_ref": "indicator--d5d17519-90f3-4072-8e84-b671e7155128", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39032589-f68c-4e22-aef6-4605a88ae8f4", "sighting_of_ref": "indicator--88637ffd-6bbe-4d4b-8f66-5c4529b7ae18", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554ceee6-0b4e-4cb0-b281-e47735a023fb", "sighting_of_ref": "indicator--97ec6d7f-786c-4c8d-8c61-d24931d85e42", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fd8854-4df7-412c-97e9-2345bbbe7d1a", "sighting_of_ref": "indicator--2d7358c0-c40b-44a4-ac17-bfdde0fcde31", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04aa8712-3768-4e1a-b147-c85e3d26434a", "sighting_of_ref": "indicator--9e62e2a1-7d66-4622-9ac6-033d2b502cfa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ac22c0-07ea-4dd1-8a21-e74cda7c36ec", "sighting_of_ref": "indicator--dab64c61-f9e9-4ac8-9ec2-2b1dd07c1b0d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8e219b-4ec4-4104-beb9-ac2a30c1c2ee", "sighting_of_ref": "indicator--dab64c61-f9e9-4ac8-9ec2-2b1dd07c1b0d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dc20db-70fc-4215-b4e6-0fef650b1acc", "sighting_of_ref": "indicator--fc1ac22b-02f4-4e93-9509-b23d50d14cef", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596939e6-1299-4e58-aa66-03edcb36b224", "sighting_of_ref": "indicator--fc1ac22b-02f4-4e93-9509-b23d50d14cef", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde04ca6-b79d-4680-9d04-4714d0969038", "sighting_of_ref": "indicator--d90a3638-c8d5-45e3-b96e-ea049db17911", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b17bca-301f-47ff-a122-009c0443fee8", "sighting_of_ref": "indicator--f944af08-636b-4992-9606-21ee8eaf9563", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51ff868-0cc8-4c5c-a224-3f04fa5a17ad", "sighting_of_ref": "indicator--2e62cb0c-fb84-4f1e-b10e-450f8252ebed", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5fff1c-26a2-4aa6-a868-d7ff849cf163", "sighting_of_ref": "indicator--f3b1a908-fca3-4aa7-bf59-30450aeb8877", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63c78f2-02a7-4691-898e-01193b6193f0", "sighting_of_ref": "indicator--d4fed952-5c21-4bea-bb06-c87b72b21491", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb862773-fead-41f9-b700-2cc4088883f9", "sighting_of_ref": "indicator--d4fed952-5c21-4bea-bb06-c87b72b21491", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98bb8bfd-3237-4641-8f52-0c23030ed3b7", "sighting_of_ref": "indicator--36e8890d-11d9-4c0a-a0a8-3ebe408d8174", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f15831-60c5-4b15-aafd-dd4b6f482ac1", "sighting_of_ref": "indicator--462a02ea-a763-4ac6-9be6-64df225dff38", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307403df-045a-463e-a7f3-f9af2e5528ea", "sighting_of_ref": "indicator--462a02ea-a763-4ac6-9be6-64df225dff38", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bf3b59-0f37-4fc9-8074-6944f8f7da3f", "sighting_of_ref": "indicator--462a02ea-a763-4ac6-9be6-64df225dff38", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa572563-8ef0-49d2-8cbd-d654a2bc42f4", "sighting_of_ref": "indicator--9c615f10-8ec6-4fed-9144-6f5740983bf1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5bcf27-1076-465a-9076-3759d9cb5f3a", "sighting_of_ref": "indicator--18cd7503-1b4c-4d94-8efd-14eb09c0160d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de99bae8-b2b0-4a9d-a13d-a5f9b061d9e5", "sighting_of_ref": "indicator--6197d53c-838b-4f81-a733-2597069741db", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de74d64-7e8a-465c-8417-55ec2b8b6958", "sighting_of_ref": "indicator--98bee3cd-a038-4c4c-ab84-36ac24873a91", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf59742-a03e-418d-8fe8-f0797b62c84e", "sighting_of_ref": "indicator--07edaefe-d3cf-4c9e-970b-9b7b06ff70a5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1d3a05-bfe7-4979-bc30-35a99d79da17", "sighting_of_ref": "indicator--75c52ffa-e190-4988-91d3-68299e043722", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd1a825-2fc5-43b1-a193-0cf2ead422be", "sighting_of_ref": "indicator--06dbc723-821e-484d-8576-be36c064def7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024a3470-6d2b-4f54-8cbb-f2312ac00a6e", "sighting_of_ref": "indicator--06dbc723-821e-484d-8576-be36c064def7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bcac8e-449a-487f-8726-98b58f5bf82f", "sighting_of_ref": "indicator--9c8bd21a-7db4-4936-adfd-2f00fe4ff023", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e327283-e284-4355-9665-9c4674a6c06b", "sighting_of_ref": "indicator--02c49c82-a8cd-42b2-931d-ef88f3b63519", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf1a09e-048f-4383-8a3b-e651550ce2d3", "sighting_of_ref": "indicator--8b4fe40b-ecc8-4af7-9761-7fccdab231f1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c390486-2025-4fec-a22d-631c3a0af601", "sighting_of_ref": "indicator--8b4fe40b-ecc8-4af7-9761-7fccdab231f1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d968a228-f21e-47b6-8cc9-c4944c43adc4", "sighting_of_ref": "indicator--66cd61cd-2f56-483e-bfb0-67d4ac68946b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b463939-9a58-4450-aa9a-beb72c11cff1", "sighting_of_ref": "indicator--66cd61cd-2f56-483e-bfb0-67d4ac68946b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834f4295-c44d-4453-9537-81c80eca6998", "sighting_of_ref": "indicator--e6647944-0f0f-4949-876a-23c86676fd9d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc7cc06-b183-4773-ab0b-3a5fd83e19bd", "sighting_of_ref": "indicator--e6647944-0f0f-4949-876a-23c86676fd9d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d79e04a-8be8-4549-bd8d-bf07b7df575f", "sighting_of_ref": "indicator--e6647944-0f0f-4949-876a-23c86676fd9d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47bc6f0-7d54-4ad6-9ef5-b999982380e8", "sighting_of_ref": "indicator--4b2a3d64-5861-4b07-8753-4bed5d2287a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f34243-6f81-4224-9b0e-8db9f3c60fbd", "sighting_of_ref": "indicator--4b2a3d64-5861-4b07-8753-4bed5d2287a7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963fe2c5-359e-4a99-8b9e-0061e73982f7", "sighting_of_ref": "indicator--bd00fef1-7f04-4454-91ed-41ec6984b733", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deccf944-730c-4172-8fba-2f740c3739a6", "sighting_of_ref": "indicator--901ec2e0-421c-44d7-8b10-7bdceceb048f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6a75f1-b23e-4959-8447-1c194ba623d4", "sighting_of_ref": "indicator--901ec2e0-421c-44d7-8b10-7bdceceb048f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dccb1ce-0481-4e1f-98e8-e71fd9916845", "sighting_of_ref": "indicator--f7914cfc-f5e3-477d-8644-16948e2b02af", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef05934f-c1eb-4638-97aa-9fb7e449f562", "sighting_of_ref": "indicator--f7914cfc-f5e3-477d-8644-16948e2b02af", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4ff252-1f4b-48ff-8cbc-070c7b8cddb6", "sighting_of_ref": "indicator--fe6294d9-bb56-429c-975a-8f0c2c4f8866", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9340f5e0-adba-4702-a004-6fb6d786ff5c", "sighting_of_ref": "indicator--93ca8947-fb7b-4639-87b7-9ddfcd09d1b4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a5d3d5-7d15-422a-81b2-efe292438218", "sighting_of_ref": "indicator--e2ea75cf-3f33-415e-b10b-7bbaa941298c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574eeb9d-caea-4503-85ad-c2219ffa7c22", "sighting_of_ref": "indicator--76157386-f9a0-41ed-906d-b4cdf245afdc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8320621-5586-4269-bec4-4f86d7a06e53", "sighting_of_ref": "indicator--80f3db5b-288c-43e7-ab17-46c14b86e65a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--383e63a1-9e02-4c3d-a921-f92a939b043e", "sighting_of_ref": "indicator--960b3506-73f6-4616-9333-dc08b42c6729", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f1bcc6-a6d0-4a7e-8aa0-61f2504dded1", "sighting_of_ref": "indicator--ff546a91-faba-40c1-971d-a9bb6cef3b9d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da709538-0486-4464-a4fb-82a590922dce", "sighting_of_ref": "indicator--bde83248-a434-4b57-af81-f44b4351f3e2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fe91dd-2d35-4ccc-8004-42e91b23e854", "sighting_of_ref": "indicator--f919f7ad-ab07-4a58-a0d5-451530d9ad3c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c219e86-5df2-482c-9785-5fc7650e6791", "sighting_of_ref": "indicator--f919f7ad-ab07-4a58-a0d5-451530d9ad3c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8487b89-739d-4d3f-a4ed-d388376f8ad4", "sighting_of_ref": "indicator--f919f7ad-ab07-4a58-a0d5-451530d9ad3c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5c00a5-5e1d-485f-be1a-47174aaf7858", "sighting_of_ref": "indicator--12d5d3a9-40ee-4221-9e41-515b6200c1bd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebec77f-7605-47eb-abfd-43e8d270b101", "sighting_of_ref": "indicator--b5340a9c-4f45-4012-86ae-f7431915b392", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ae7725-c20d-4306-8c9b-5eab4bf1bae6", "sighting_of_ref": "indicator--b5340a9c-4f45-4012-86ae-f7431915b392", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b22d7c-2de5-4101-bc2f-35e6d48b8068", "sighting_of_ref": "indicator--fa7faa41-5954-4d3d-b2f0-58092fc51559", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47bcb7f-dfa6-4379-a22c-580d12ebfd1a", "sighting_of_ref": "indicator--06856d1f-1743-43a3-abda-0aed75dc2045", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b350397e-9a47-406b-83f0-6832ce770433", "sighting_of_ref": "indicator--5353b0c4-bede-4508-8da6-3a6ef49dbe26", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13109e84-edc8-41b7-87b6-3fe4aa5d3c12", "sighting_of_ref": "indicator--5353b0c4-bede-4508-8da6-3a6ef49dbe26", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2dafb7-3d26-4006-b859-6a332ed82948", "sighting_of_ref": "indicator--d564a539-d952-46b5-a546-61c5ffd16d8b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d426e5-ba83-4306-a3dc-15e67fb3dc9d", "sighting_of_ref": "indicator--91850e8f-1319-4f94-84f4-ebe571d09592", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccacc1d1-162d-40e0-a7a4-c41a737c58fb", "sighting_of_ref": "indicator--45b482aa-ba1e-4b38-bcac-eac4b6cec2ad", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59eddc68-192e-4ca6-9ba3-c3eaf54f074c", "sighting_of_ref": "indicator--45b482aa-ba1e-4b38-bcac-eac4b6cec2ad", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55ec6bb-651b-45e0-bfc6-0c15d0012d08", "sighting_of_ref": "indicator--60b2ab02-1298-46c0-8a8c-806cfedebf34", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296db998-168b-4a90-815f-d91e8163248f", "sighting_of_ref": "indicator--60b2ab02-1298-46c0-8a8c-806cfedebf34", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd015015-dcfa-4542-b097-ee39edb130ce", "sighting_of_ref": "indicator--944aabec-9926-4918-8771-e8ca121ff63d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb72321-4ef7-4828-9143-e2f45c9e21b6", "sighting_of_ref": "indicator--0bae8a06-c69b-47b3-8543-2e3be81bd118", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c233c2-0649-4bc5-92f6-aef92a7e27f3", "sighting_of_ref": "indicator--1cf9482a-2b77-4986-8900-4d45e3bb5ce2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4ad0d4-30a4-469f-875b-5c8cbb302df6", "sighting_of_ref": "indicator--4f444a53-5011-453c-9444-2425d5694152", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3156b993-93f2-4e6d-bb5b-7a912deff238", "sighting_of_ref": "indicator--35f05761-44cf-43ec-82dd-8b0ded396fae", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d55f669-9587-4344-8e99-dedf613d5672", "sighting_of_ref": "indicator--ba402238-9778-4e4e-bd90-1ed2ee6cdefb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b18e86-093c-4028-96c5-688a0e6ceb1c", "sighting_of_ref": "indicator--b2318554-66b4-4563-a45a-cb85930a3aaf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84ac5e4-7bd3-4c13-9cce-d3769904cf7e", "sighting_of_ref": "indicator--b2318554-66b4-4563-a45a-cb85930a3aaf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28814e53-857f-4120-9e1a-c705d7272fec", "sighting_of_ref": "indicator--919c21e0-c762-435e-8331-e018e17c6e47", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412943d4-2883-4370-9f9e-fb805704d7ef", "sighting_of_ref": "indicator--9c81db92-83de-4fbe-8695-f85d538c6093", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d4dca1-4e86-409a-ae93-b2e8267ed520", "sighting_of_ref": "indicator--9c81db92-83de-4fbe-8695-f85d538c6093", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a33a75-3df7-48e2-b13b-e658e48ae9bb", "sighting_of_ref": "indicator--da9d6e1a-fa78-497a-9dd4-18ea8e23adb0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5efc2db-e773-4f3b-9a5b-0b01b3403273", "sighting_of_ref": "indicator--81ab8a1f-9e2f-4c20-89ed-07800656d488", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5de551-41a3-42cb-b4c7-ba02a9d40891", "sighting_of_ref": "indicator--8378eec4-7109-4021-8440-9d8b942783e5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53aa067b-0e7d-49cd-a659-ee0e00de72bf", "sighting_of_ref": "indicator--8378eec4-7109-4021-8440-9d8b942783e5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8374e0-ea7a-40e2-9a34-3d68267e6434", "sighting_of_ref": "indicator--bcc1a978-3483-462c-9bdc-95853ae1f7dc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f64cabb-d38a-42b4-8e86-4369f1477b39", "sighting_of_ref": "indicator--1031c920-aeb7-4e7c-b82b-19888fd1f71f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e1758d-84f2-467f-a7a0-207239bd0cb6", "sighting_of_ref": "indicator--d0aaa32a-2d27-4654-b9e7-a044fb377f03", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23bf67a9-eaee-43cb-86bb-fd7edaac6ee2", "sighting_of_ref": "indicator--0076c778-c376-400b-be3a-cd2ba39c7a7b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3475b7bc-45ee-4b20-b1a2-7ccdc6f1348f", "sighting_of_ref": "indicator--245b587d-41c5-4d54-9b1c-ba42a0c76956", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3a773b-d4cb-4c3c-ac87-05a36931c38d", "sighting_of_ref": "indicator--be350efa-f780-48dc-9933-fe67f12e1a38", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a881dfd-0cb3-464e-80bd-800da721d61c", "sighting_of_ref": "indicator--61bc6f5d-5d0f-4165-978a-4d49a360d834", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8fef5b-6ff4-4bd0-9d64-10776cd7de87", "sighting_of_ref": "indicator--0ee799ca-2853-4e06-897b-9d1210022443", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615b90b2-9863-4617-a1f6-09af549cb32d", "sighting_of_ref": "indicator--9cf6ddcb-5af8-4f18-9117-06a9a6059e94", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bac69c-ac43-47f1-8f43-aca56e7f9277", "sighting_of_ref": "indicator--bf3063b8-2d73-4975-9400-007118910efc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e24bd3-da15-403a-977c-41dc13c05a92", "sighting_of_ref": "indicator--85a480c7-4b99-4751-a5ec-56f71aa1c608", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe154d0-27b2-45c1-bbb3-9d8e3f511d4f", "sighting_of_ref": "indicator--43567f30-72da-4782-a108-db79e36e0209", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cb4cd3-46a3-40d0-b76f-4ea6db2b6a3f", "sighting_of_ref": "indicator--c1770cbc-7e62-44e0-b316-b60ab9559e4f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897c95fa-b59f-4c06-86fd-da05f43a2bf2", "sighting_of_ref": "indicator--9137b5a3-6fbb-4ab8-b83f-ed073b4bb4df", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c55cce-abbd-4583-8cb0-44e670e5fa85", "sighting_of_ref": "indicator--ad734d9d-58ab-4bd1-967a-9ade647794de", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d88bae-4941-4baa-b439-4f752d4caa20", "sighting_of_ref": "indicator--81c7b275-f815-4aad-9acc-351df8aaabd4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f51b18-5c36-4412-8475-01705e89e01d", "sighting_of_ref": "indicator--675be940-65fc-4831-b920-499554b1ef96", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436c89df-b85e-499a-a230-d5c43dedcb62", "sighting_of_ref": "indicator--610d9038-8609-4f39-b778-5e81b9ab8bcb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a87b9ca-598f-41d5-93ea-27580bbf8df4", "sighting_of_ref": "indicator--12559b22-ee4a-4ae9-8f35-9eed0122f171", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc23d9b7-7bbe-41f7-a942-bc39d6ed9183", "sighting_of_ref": "indicator--d60dc096-c56f-41bd-9972-0f29a95fd36f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea515fa-6e77-4c3d-aaf0-0c19ea691ac6", "sighting_of_ref": "indicator--851d91f3-7e62-4225-8685-b7b715882118", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856d5a62-1590-4ed5-9d9f-6fbcf1aec564", "sighting_of_ref": "indicator--4d27d384-d4b1-4f24-8753-009871a7aec7", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ee3814-e6ab-4f4d-92ab-9282b04d9cc6", "sighting_of_ref": "indicator--396f3d57-506c-4d9f-bea1-8f6b88947232", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fe50cf-2484-4b84-b3e4-d77cd8eb9a08", "sighting_of_ref": "indicator--c951d1a2-466e-4b93-aa07-bd1a88ab061e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc117c4d-5f7c-4900-96b0-38798bc5934f", "sighting_of_ref": "indicator--4c486b16-db43-43a9-bc41-063bba8708f9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98404938-37c1-4a31-92d6-746d31e5533e", "sighting_of_ref": "indicator--17fe91df-5202-418f-803b-1b16eea75c74", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17168a09-ae85-4d49-a6d5-fc91b7b33bd9", "sighting_of_ref": "indicator--bb0745d8-e9ab-45eb-809d-36b3b34111dc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e65968f-69b4-493b-90a9-dcccd9dc3066", "sighting_of_ref": "indicator--7871213d-1238-4bec-9bcf-5da139b1b17c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d10dc1-76fb-4dca-a74b-7d33a539d236", "sighting_of_ref": "indicator--ffaa85dd-a421-46c4-911b-e094cb3d563e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a105fb-9eaf-49a6-90f1-837c2d9ed066", "sighting_of_ref": "indicator--58e7eb91-3108-459e-8de2-1646cdac102f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70980005-afbc-44ec-8e63-548fc65a3d0e", "sighting_of_ref": "indicator--32913c11-887e-4d98-bcaf-b11374f2cec2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f33ac2-f833-416d-9e11-c801737aab1f", "sighting_of_ref": "indicator--b57f2551-3b31-407d-b482-948090c24dee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb617729-96bb-48e0-b83b-9e2f573d6a43", "sighting_of_ref": "indicator--d0555794-b034-4f2d-bfce-1dcdabe05dad", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f2e60c-d615-4dff-9be5-0bccc1224a37", "sighting_of_ref": "indicator--72e56054-9b0b-4b96-a107-9f71b06e4f28", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881a6e57-7035-472f-90e1-244c7026b72a", "sighting_of_ref": "indicator--2ff72e3f-6c59-4e06-884c-b5a4dd5c4cfe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0bbce9-6c82-45cf-967f-f1c4cf9f5fdc", "sighting_of_ref": "indicator--c99435f8-4b54-47d5-b2dd-d48fcd744e16", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781c54fe-8ce0-4602-ada2-45829c81386b", "sighting_of_ref": "indicator--cef7807c-0963-45d9-ab14-d61df2d5715c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80b6cd1-a956-4e6d-ad48-a897f00c9775", "sighting_of_ref": "indicator--67d6843f-f4ed-4727-9c98-5167a5c6bed5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a324765-898d-4dfd-968f-bde354e887c6", "sighting_of_ref": "indicator--68ecd531-68e3-49ee-a821-d91866229227", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58768e7a-19cf-4a65-9b4d-8d8c6c5c49de", "sighting_of_ref": "indicator--572d5bf2-8fd4-489b-b357-dbb578b8043e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3910c0-c9dc-460b-b07e-63df310505c6", "sighting_of_ref": "indicator--2d1024dc-13fc-41cc-8ced-9ce401855bfa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2607c1-b85b-4799-8442-43266ec9319b", "sighting_of_ref": "indicator--ee454d3b-6b8c-4d22-bc32-5016f9c6241c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b04b4c1-f227-4be4-a7c3-dd3ce3ed392a", "sighting_of_ref": "indicator--081a0350-418e-4f85-8660-404751d290c2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e454cb-ea38-405a-b66e-b03357605258", "sighting_of_ref": "indicator--4ab61a32-bcf7-4eea-bd43-f635faec3b4b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96372775-1bea-4ad7-b519-54f5d9070615", "sighting_of_ref": "indicator--e55451c7-2965-4d07-9e25-717600270b39", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f3fa3b-53a4-440c-a9fe-c51ecaf0d40b", "sighting_of_ref": "indicator--78ce0d67-b459-4d3e-9c3b-e1570e96fc23", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d6b712-2156-4f2c-b012-e568e5d87df2", "sighting_of_ref": "indicator--118028ec-206d-470f-8922-921bff735709", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5224d1-f639-4247-b984-a3a41126bcf3", "sighting_of_ref": "indicator--b65cd5bb-c982-458a-92cf-ccd47f22f3da", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c31590-eecf-4bcf-81a8-20d40615f013", "sighting_of_ref": "indicator--0f19304b-a22a-4469-b7b0-9bb7cf67dc9e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b05b5e3-0509-4ffd-a5cb-52e65dca8066", "sighting_of_ref": "indicator--6ebe0529-2a12-4887-9040-5e21526316a3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7693d9dc-0484-4ff6-a094-2a5fd58c7318", "sighting_of_ref": "indicator--6ebe0529-2a12-4887-9040-5e21526316a3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5626a7d5-bda0-46b4-9a38-c220aa526a1d", "sighting_of_ref": "indicator--1019e66c-17e8-4f3d-b5e4-cc1c788da536", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a93a0f5-5f28-434f-9612-b30668e9bd63", "sighting_of_ref": "indicator--1019e66c-17e8-4f3d-b5e4-cc1c788da536", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8295de-d64e-43c9-a540-576c635de4b7", "sighting_of_ref": "indicator--e2ef70b7-a4b7-429b-9d34-4fe04296818a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35881d8a-0157-45f4-a8c5-49e5585efe7d", "sighting_of_ref": "indicator--df44fdbf-5d5d-4366-a937-7c478711a4e5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c44ee55-6ded-4310-8cbf-7b1373042320", "sighting_of_ref": "indicator--2fcf6678-931e-4b4d-bb3f-92bee7866f65", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54c8889-ad17-4d11-8554-efed25dc28c8", "sighting_of_ref": "indicator--887ff742-2834-4c6c-8c38-44e342eec739", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209900fe-190c-4720-b2a3-50f050b604ac", "sighting_of_ref": "indicator--887ff742-2834-4c6c-8c38-44e342eec739", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487e9e9e-a0bb-47e8-9883-36883fb29225", "sighting_of_ref": "indicator--c3098683-c6c4-41f4-988e-3319ac68d0e1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d170c6e0-d88f-4090-8fec-6622a616b7c2", "sighting_of_ref": "indicator--4bbc4c04-d6cf-47ac-9980-ee12c143e53e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81a9e7c-4c33-4e98-a41a-e7601b72e4f1", "sighting_of_ref": "indicator--9c80e73c-3f2d-4e6a-9f14-9cdbc7d5f181", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33354fef-5da3-4e05-a9ec-c6b5ea6c0883", "sighting_of_ref": "indicator--b99303ff-01ee-4ad0-947c-76d1d6963ad0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f44ae3-5a36-4388-a788-b7f619be29b0", "sighting_of_ref": "indicator--2e6366c5-6a36-4acb-973c-a924c42b0fee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae02cea-1954-40d2-a7bd-fd78fc1296b4", "sighting_of_ref": "indicator--739dae27-95ff-416b-a95a-0e735c27a9a2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da938bd5-3382-4e47-8195-ae67a68ff60f", "sighting_of_ref": "indicator--71fa23a8-6288-49ec-84ba-89f755554f94", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd2de29-8d01-41db-aa56-cf9cc6920b79", "sighting_of_ref": "indicator--a47a8e20-100f-4cfd-b190-a89713da2372", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8373d060-6637-41e6-8dcf-91f04de18749", "sighting_of_ref": "indicator--a47a8e20-100f-4cfd-b190-a89713da2372", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ede107-361c-4a6f-9674-15ff4db6bcdf", "sighting_of_ref": "indicator--a47a8e20-100f-4cfd-b190-a89713da2372", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1388f5-bdf6-43a1-b3b6-7293128675b7", "sighting_of_ref": "indicator--79bd4c5c-c9d6-4bba-bd84-fd760ec399f7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68884a6a-5a06-4a59-aa76-808fd2794b16", "sighting_of_ref": "indicator--d7db60e1-f30f-4536-8864-dce98ecd92c2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee7e4c6-2019-4812-b415-68e9b72653d4", "sighting_of_ref": "indicator--d3021b2c-aa30-406c-8305-71fed0d24a4d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285b63f9-b5a0-4f00-84bc-b2fdc6d8d617", "sighting_of_ref": "indicator--41ff6736-599b-4574-9f09-b3717c2ff62f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfc1c0f-8075-4aee-92a8-0ea22b38b246", "sighting_of_ref": "indicator--41ff6736-599b-4574-9f09-b3717c2ff62f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a2b6e6-cb9b-44b8-8f45-957fda919108", "sighting_of_ref": "indicator--3262ebbe-688b-4a4c-bb7a-f1cd6a5944ed", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba731a7-327d-42f5-ba53-b4909f9e08e0", "sighting_of_ref": "indicator--3262ebbe-688b-4a4c-bb7a-f1cd6a5944ed", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c446f52-e736-429b-9e13-d3256c34fb25", "sighting_of_ref": "indicator--2be0abc3-907a-4166-9636-945f67c31943", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8799ea0-5e8d-4c4a-9420-54b48c3e223c", "sighting_of_ref": "indicator--ecf33bc0-3a0c-4bb3-9416-caac93a5c73f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f084d2-e304-4779-935d-7a5e808cda48", "sighting_of_ref": "indicator--32b622d5-9bbe-4682-9f9e-39c31e111cb1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fabff8-9285-481e-903c-3880435b5e9f", "sighting_of_ref": "indicator--1148ab54-37fa-46e8-b737-03f21d0fb6c5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31679fe9-0d5f-450c-bc3d-b1af4e4f0162", "sighting_of_ref": "indicator--1148ab54-37fa-46e8-b737-03f21d0fb6c5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4faf290-17db-47e5-87c7-61f850ff111c", "sighting_of_ref": "indicator--1148ab54-37fa-46e8-b737-03f21d0fb6c5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54b3e86-2533-4c4d-995b-2d55dcaca796", "sighting_of_ref": "indicator--0451a328-7a0e-4b9e-bf5b-a4d93a1d7cc0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b2086e-715d-42a8-aae6-8cdae7a5dcbf", "sighting_of_ref": "indicator--8ecacc1c-c1a6-446c-8637-8a3f151ea0ed", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51e1b68-eabd-4489-ac16-764375330cc7", "sighting_of_ref": "indicator--ccd34279-b164-4a9d-950a-0e444ec2a7e6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8859e829-401e-4273-bcef-159f25681fd7", "sighting_of_ref": "indicator--e888ea57-5a3d-4700-bb30-0ee2f4c01abf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e225d486-7273-42c0-971b-c9b32e84475a", "sighting_of_ref": "indicator--8a264e05-903e-4659-a6a8-c9621f2ec716", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ccd833-c87f-485c-a2c9-79712ac9af00", "sighting_of_ref": "indicator--9580d078-c425-4dc2-9341-c1a943840972", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1a8556-4a2d-4e09-9e98-906505312083", "sighting_of_ref": "indicator--9580d078-c425-4dc2-9341-c1a943840972", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59eed75a-c60c-48ca-9099-ea2b79db5e22", "sighting_of_ref": "indicator--9580d078-c425-4dc2-9341-c1a943840972", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd088d2-385b-4c6e-b177-e530dc4e9855", "sighting_of_ref": "indicator--bb45c673-27cf-4d87-8cd7-e817fa193b38", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e01fcd-98c8-4724-84c1-263daad29687", "sighting_of_ref": "indicator--bb45c673-27cf-4d87-8cd7-e817fa193b38", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc412bb-5e97-4957-8a9f-758559d6f542", "sighting_of_ref": "indicator--bb45c673-27cf-4d87-8cd7-e817fa193b38", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5663d024-6b08-4f19-aaf2-ec8cb0dfac25", "sighting_of_ref": "indicator--8948971d-799e-4d9f-bec0-d5dda7fbd5b7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d399f7f-cd02-4a78-a1e5-84ab0cc002f9", "sighting_of_ref": "indicator--8948971d-799e-4d9f-bec0-d5dda7fbd5b7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5528eda-9e4e-42a8-991a-0e3b19565fec", "sighting_of_ref": "indicator--f9cee43c-8995-47bd-8fec-c6cccbcb0fd0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9a0672-5f23-4f85-ac04-7cb26eaddb41", "sighting_of_ref": "indicator--f9cee43c-8995-47bd-8fec-c6cccbcb0fd0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a34f0e-3155-4c23-8ffb-75cd8e8a174f", "sighting_of_ref": "indicator--f9cee43c-8995-47bd-8fec-c6cccbcb0fd0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1503adc1-b2e7-4ac3-bfff-d8b53fea4967", "sighting_of_ref": "indicator--05788f0d-9391-4b46-9c91-f80ba0bbff9e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c8cd96-1345-4181-b033-e1707fbd78cc", "sighting_of_ref": "indicator--4d70321d-5252-443a-ac1b-8a423fecdb51", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd30c1f-7543-44f4-b9c0-8f81847ae5ce", "sighting_of_ref": "indicator--4d660a31-c530-42ea-b943-a9016de15198", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cefeeca-14dd-428b-a6ac-9088a5a607e9", "sighting_of_ref": "indicator--8ce0ca74-b3b3-4f07-8f79-443885d084a8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be4ab66-c5ed-4c42-831a-c02dae232a0f", "sighting_of_ref": "indicator--12ea5a99-acdd-4e9a-842a-8c4cbfc097d9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318be20a-def8-4e3a-b140-83db60d7b247", "sighting_of_ref": "indicator--6e815bff-2057-4203-af2d-5cc9d350808d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3373b55-20a2-4b8b-bd92-326a7b0c644d", "sighting_of_ref": "indicator--6e815bff-2057-4203-af2d-5cc9d350808d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20eb403-25d4-4810-b055-a92cb89b72bb", "sighting_of_ref": "indicator--6e815bff-2057-4203-af2d-5cc9d350808d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc457463-a941-43a9-a0d9-a710e8b45564", "sighting_of_ref": "indicator--dc29365e-1f69-48d4-810f-53b0877e81e0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4f8d19-2824-4362-95fb-fcb789a7d3e2", "sighting_of_ref": "indicator--dc29365e-1f69-48d4-810f-53b0877e81e0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f563a0bf-2802-48de-ad8a-b58b3b645313", "sighting_of_ref": "indicator--32df7e6f-ed4f-4780-8d89-7baa78c89829", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191c3b92-0fcf-451e-a40d-5414d210c430", "sighting_of_ref": "indicator--78ba29a8-9fef-45c7-bbdd-00f0a4912a79", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f02f54-14de-45bf-935a-85b210e2a93a", "sighting_of_ref": "indicator--eb1b9f9b-6b3f-4439-b995-cfa98359c46b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7022e6-5013-42a9-837e-0eb2be2a590e", "sighting_of_ref": "indicator--4ff27b58-2338-4567-923b-cae59b6bb08b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbd753a-d846-4a9c-acd4-93ff70924357", "sighting_of_ref": "indicator--f855b08b-717c-4c82-9ed2-f13a40725e1f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f54ede-d056-418f-aebe-f6373b43470c", "sighting_of_ref": "indicator--3819c205-085b-4f80-99fd-8a5d2db44960", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393f5f22-e5a4-4b19-8da6-4bdf6e7a1543", "sighting_of_ref": "indicator--0bc5b65b-404f-4a85-a98f-c55bf8b32c84", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f501c149-f284-426f-9e26-3cb3c8e92ee6", "sighting_of_ref": "indicator--233f882a-d02a-4a12-8096-61615c1f614d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c10f7b-8655-47ae-bb25-d01581ba8b7c", "sighting_of_ref": "indicator--edb782d9-8928-441b-a834-58a4d17b0ce1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad9e2f5-cfad-4ccd-a089-f4fd4943fee2", "sighting_of_ref": "indicator--a66ebce3-cf87-40fe-a029-c3b166d8638b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2047d8f-de27-4009-a028-a21434e57ceb", "sighting_of_ref": "indicator--d59afdc0-64f3-45e3-b274-9a376642543e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b21bda-1536-4959-9e0c-e7033fd211f7", "sighting_of_ref": "indicator--f9d4726b-1cd9-42df-a7cb-013c3bf33b20", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae11a8f3-fd24-49c6-9994-4e150c65e9fa", "sighting_of_ref": "indicator--3d608347-7378-4f4f-87a9-18d8fdf0d6ca", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384259a3-f976-4565-b039-593142a8f24a", "sighting_of_ref": "indicator--aa93262b-692f-4b94-aaaa-3511ee8bceb0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6158b717-221b-4c39-bdcc-583151cff122", "sighting_of_ref": "indicator--639b559a-8e9b-45d6-b245-b61f3d4238ae", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222b7c02-4523-48f4-932d-cdc93073c48e", "sighting_of_ref": "indicator--4efdf28f-f928-4d2e-bf01-0171c5f6c400", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743daf3a-8050-4f54-aed4-00871a60a1af", "sighting_of_ref": "indicator--cffe35ee-8e88-4c4e-9947-c6a338ba6dd4", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781f1944-3a2a-44e1-bb21-815209d3186c", "sighting_of_ref": "indicator--32fd616b-3602-4725-a472-755f6d2abe33", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c731cc1e-3edc-4ce0-bb7f-4679b3fef7f2", "sighting_of_ref": "indicator--32fd616b-3602-4725-a472-755f6d2abe33", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8380d699-9a45-491e-b7f4-6da1792f7e01", "sighting_of_ref": "indicator--72ca705f-859e-4a48-bd22-6464cf3912ae", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e75144f-2b4f-4fb9-b600-2db1be5f39f9", "sighting_of_ref": "indicator--72ca705f-859e-4a48-bd22-6464cf3912ae", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b71bfe-96e5-414c-8b81-0a9544bc9365", "sighting_of_ref": "indicator--4b6f6d15-62c9-4181-a2d9-6db0393cd1ba", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe1aa05-7287-4878-bbb5-72c8359fd4ec", "sighting_of_ref": "indicator--be34fb69-3d85-4fc1-b989-44e6a4842f18", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe5ac1a-7100-4055-ba93-66e1da96edd5", "sighting_of_ref": "indicator--be34fb69-3d85-4fc1-b989-44e6a4842f18", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790c554b-21e3-4e24-9492-26e1bd13751a", "sighting_of_ref": "indicator--3f05d0af-46bb-41ad-89b2-991ec8c3cfea", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b0348b-5d3d-4214-b575-5d0ccea187ce", "sighting_of_ref": "indicator--3f05d0af-46bb-41ad-89b2-991ec8c3cfea", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dccab54e-72e5-4634-945a-c7065659a5cb", "sighting_of_ref": "indicator--f153afbb-8518-42d8-8935-ae25edd5efc8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35139b3-a82e-4329-ba52-4787f6a248a2", "sighting_of_ref": "indicator--a218b75a-325d-493d-b109-35b7ef3313c9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c5f2e4-8d10-4f32-9c61-7611eddecaa5", "sighting_of_ref": "indicator--a218b75a-325d-493d-b109-35b7ef3313c9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00245c3-abbe-41cb-b057-c852d3c5f67b", "sighting_of_ref": "indicator--a63dbd36-9e9c-4666-be0a-24975e33a5c1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7519ec49-d583-4a98-b484-e8ca5aab6c9d", "sighting_of_ref": "indicator--a63dbd36-9e9c-4666-be0a-24975e33a5c1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d07760-00f6-4fb3-8ead-9fa557c44d49", "sighting_of_ref": "indicator--317166d5-50c8-4253-90d8-0eaf82d57532", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c178539-3e83-4805-99df-adf02558b94c", "sighting_of_ref": "indicator--317166d5-50c8-4253-90d8-0eaf82d57532", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5dcbb8-3eca-4b49-90b2-8aa440495364", "sighting_of_ref": "indicator--f3fc98f8-0fa7-4899-9328-65b68ed85889", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71386a76-8838-458c-8646-c0519d0dbea0", "sighting_of_ref": "indicator--f3fc98f8-0fa7-4899-9328-65b68ed85889", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fcb673c-8f9b-446a-8520-d0e4c65f888b", "sighting_of_ref": "indicator--aea26725-bed4-40c7-825b-d6c7b0b147d8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538e791d-7ad0-45d4-8105-b88027ff6eae", "sighting_of_ref": "indicator--aea26725-bed4-40c7-825b-d6c7b0b147d8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1cef2f3-ea89-47ac-8aac-4a9f3ad3e2ef", "sighting_of_ref": "indicator--decaf552-8046-4750-ba4c-3d1270920ea0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e835e3-5847-45d0-b8b4-5727be725e98", "sighting_of_ref": "indicator--decaf552-8046-4750-ba4c-3d1270920ea0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431ea050-a244-4adb-bae4-6a9884113d51", "sighting_of_ref": "indicator--901f6f9c-96dd-4c5d-8348-ab2c843ff58c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e229136e-6c3b-41d0-9f40-96d09c4f70d4", "sighting_of_ref": "indicator--901f6f9c-96dd-4c5d-8348-ab2c843ff58c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1cc65c-dcc6-4726-96a0-a967571e09ba", "sighting_of_ref": "indicator--361ca14d-b6a4-4d5c-a01b-3b9618160a94", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c0348f-d407-477e-ab46-77b8537ee44b", "sighting_of_ref": "indicator--361ca14d-b6a4-4d5c-a01b-3b9618160a94", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0560ce31-d126-4a26-9eb5-77f2fbba24d5", "sighting_of_ref": "indicator--7762019c-f075-4721-b43e-a54b4e4b050b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9072d298-420d-47f4-8ac1-a66f3e7ee9a4", "sighting_of_ref": "indicator--29efab41-f79b-463d-9663-b9dbc828c4ab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6022902b-58bd-4ca5-a63f-338c3c7dc050", "sighting_of_ref": "indicator--29efab41-f79b-463d-9663-b9dbc828c4ab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1339c313-4e17-4ef4-b55c-80cde771f41a", "sighting_of_ref": "indicator--5c8c7272-d856-42ca-964d-097e7ffb5ebc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a37c8d-ce79-4d44-badc-18a3b6a1f898", "sighting_of_ref": "indicator--5c8c7272-d856-42ca-964d-097e7ffb5ebc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cc0746-b21b-4741-b917-61bf945fd057", "sighting_of_ref": "indicator--dc2c527e-b254-407b-b186-b52085190f77", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89f019c-a924-43b0-b431-f0259af6f773", "sighting_of_ref": "indicator--dc2c527e-b254-407b-b186-b52085190f77", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b447d7c-c1ac-4149-b02f-0f8fb314a6bf", "sighting_of_ref": "indicator--a0fa6ee3-c300-4707-90a1-24828183249e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5104fab7-34ff-428a-8587-2994e2875bfe", "sighting_of_ref": "indicator--a0fa6ee3-c300-4707-90a1-24828183249e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be47e6fa-9cfe-4d60-8a5b-5c4b09e5178b", "sighting_of_ref": "indicator--0d07298e-fa82-4311-9a23-6bc1eb862ce1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac2c886-0026-45c7-8218-9f3f15f7612e", "sighting_of_ref": "indicator--0d07298e-fa82-4311-9a23-6bc1eb862ce1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346df22c-e76a-4055-96d9-1275daf96db8", "sighting_of_ref": "indicator--23293d91-1bfa-4975-8495-c74f880a7996", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1f9164-f532-4561-8346-ff67ef925002", "sighting_of_ref": "indicator--1af14816-f539-4ab7-9b30-07183a1f2dd0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5be199-5685-44ec-bb7e-f37c9722ed0b", "sighting_of_ref": "indicator--a082504f-e95e-49d1-a920-8b529e08a704", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff37755-6891-4969-a2b5-c82fe7205cd0", "sighting_of_ref": "indicator--a082504f-e95e-49d1-a920-8b529e08a704", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba5538a-6618-47f1-93bb-784feaa3c04d", "sighting_of_ref": "indicator--a082504f-e95e-49d1-a920-8b529e08a704", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7107f0a4-b84f-4537-a68b-1aa0f7d3695c", "sighting_of_ref": "indicator--0c447e7d-c8ca-4436-9532-4d2a835fbe26", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa331b79-744e-41c9-9e05-57f91ec02ca8", "sighting_of_ref": "indicator--0c447e7d-c8ca-4436-9532-4d2a835fbe26", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649ea73e-21a6-4c57-8631-b9f03076fb01", "sighting_of_ref": "indicator--9694ac8f-020f-4bca-9507-d0814b0662c2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44563b6-32dc-418f-8c92-4d1fc260e883", "sighting_of_ref": "indicator--1cca0497-a582-46c0-83a7-0b221178f4e5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24571d7-b49d-4616-bd9d-dd927038c919", "sighting_of_ref": "indicator--bf6747ce-0762-4f8e-9b1e-7f3c40efc480", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4096db1-c39c-4888-9a89-3c6a3d7b0f17", "sighting_of_ref": "indicator--bf6747ce-0762-4f8e-9b1e-7f3c40efc480", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136bfacf-b51e-433a-9c63-5523529e9b6f", "sighting_of_ref": "indicator--83ddfd80-bcc4-4496-8ebf-7caf520e433e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f82739-9d2d-43bc-ae7e-39c8a9c172fc", "sighting_of_ref": "indicator--83ddfd80-bcc4-4496-8ebf-7caf520e433e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f184ffa-b641-428a-9ae6-3144d020f59a", "sighting_of_ref": "indicator--aec786ef-7bd6-4c22-bed3-3889205be7b3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccfe497-92aa-4eb8-b291-8d8dd70c3c84", "sighting_of_ref": "indicator--312fd881-4929-42c7-bcad-24bfd684ba85", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8150f69-e0d9-490e-a51c-339d0925f868", "sighting_of_ref": "indicator--ba1e2d86-964b-4787-af7c-b73fafc0b337", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf76316-68c4-48e9-a606-e47ba56a32ae", "sighting_of_ref": "indicator--f735137e-0342-43ae-87dc-a463d95ee8d9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb21ef4c-cc43-4c35-b10b-f812717ed7af", "sighting_of_ref": "indicator--f735137e-0342-43ae-87dc-a463d95ee8d9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfc7714-d23d-40ec-be87-1ab2441fbaf4", "sighting_of_ref": "indicator--f720e872-f307-49d4-b11d-4959248ee3ac", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1b1acd-c2b7-47be-880c-da589818f835", "sighting_of_ref": "indicator--f720e872-f307-49d4-b11d-4959248ee3ac", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7884fa7f-c8b2-4bd1-943e-16322262c20c", "sighting_of_ref": "indicator--a892142c-9626-4c79-8221-f51b20b9d249", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3d18f4-c959-4eed-af3a-f950cb232394", "sighting_of_ref": "indicator--8c2be4f8-9d87-4ffd-9fb6-1a5ab5a007d5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6be7072-fd89-4d7d-b00f-13ecbcbd7739", "sighting_of_ref": "indicator--2bf52291-6fa4-4757-84fc-3fac180c240c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1318e37-3da5-4c94-95a9-681f3147008b", "sighting_of_ref": "indicator--ce835ae8-e44f-424c-b722-230e5e184134", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6030423-3a19-47b3-af1a-fb6adbe636aa", "sighting_of_ref": "indicator--ce835ae8-e44f-424c-b722-230e5e184134", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac86b6d-97f3-43ad-85e2-027cd20d8598", "sighting_of_ref": "indicator--e6c6e676-ac6d-4ea0-85a8-207861edb74f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65963734-bd06-4330-a027-ace8e0b64232", "sighting_of_ref": "indicator--e6c6e676-ac6d-4ea0-85a8-207861edb74f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48122fc1-e103-4ba3-a1e4-ca97bd0fe7e2", "sighting_of_ref": "indicator--e6c6e676-ac6d-4ea0-85a8-207861edb74f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6ea9af-c051-4946-87c4-62010ba5cb73", "sighting_of_ref": "indicator--cd01adee-24f1-49b7-948c-a059d5e9dc6f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65c353a-bf55-4fa7-8487-e2047e7f2479", "sighting_of_ref": "indicator--d7903b9a-c739-43d4-bfb4-da86b75723dd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdec52b8-e8e8-4041-8443-59bd34b12b28", "sighting_of_ref": "indicator--bbaae1d0-16ac-4302-9323-1ee61dc3b413", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6ebba2-4584-407d-90ce-d24189a17446", "sighting_of_ref": "indicator--858be4d3-4e7c-433f-805f-576e931db4c0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1376ea-4fe2-4b80-b645-8acaea9594ca", "sighting_of_ref": "indicator--858be4d3-4e7c-433f-805f-576e931db4c0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e08e95-160f-43fe-ab4d-62019d554b95", "sighting_of_ref": "indicator--746d733c-3476-429e-b592-dbcc15b7aca0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d869bfc-c52b-4b9e-9f90-c071520af8ac", "sighting_of_ref": "indicator--746d733c-3476-429e-b592-dbcc15b7aca0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ff5632-fa7b-48c5-a3fc-c9d2b4963675", "sighting_of_ref": "indicator--4a52815b-37d9-4de7-82d5-41480725fd03", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c59fdb-3069-4b6e-b28f-866c497c98c6", "sighting_of_ref": "indicator--3c1bd07e-a154-4433-a98c-555178e18939", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ce20eb-96a9-431c-a4e9-dffc2cdac876", "sighting_of_ref": "indicator--3c1bd07e-a154-4433-a98c-555178e18939", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c8f7c0-bda1-420c-828f-fd9b42ee6202", "sighting_of_ref": "indicator--3c1bd07e-a154-4433-a98c-555178e18939", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3e6502-3190-4163-aea8-c71e0fa95090", "sighting_of_ref": "indicator--550d106c-464f-4420-8fa4-3218c4f6d66a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8106291e-bfa0-4403-8efe-a2c8ed61d154", "sighting_of_ref": "indicator--575e3446-4d5a-4c3d-954f-5818ff196070", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb324a65-e8bb-4f5b-9d1c-01c4fc0767a4", "sighting_of_ref": "indicator--b71f37e9-2f96-462f-8fc0-3cd9336fdd4f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e21a4b-c6d5-4be1-a8f6-8df4c5e3f4a2", "sighting_of_ref": "indicator--d6adb976-9fea-4151-8298-3742a49e7adf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52925c8e-8c8a-404e-be81-5ffccd0dcb47", "sighting_of_ref": "indicator--45a6d1f4-e21d-4bd7-b4ff-edc0cd8944dc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5177af-6bcc-4859-b1b7-35f8bd3ee6ae", "sighting_of_ref": "indicator--fea7ca9d-180e-47e9-9cde-37376e0261c8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f119c04-82b9-4d90-a510-643f4caaf002", "sighting_of_ref": "indicator--fea7ca9d-180e-47e9-9cde-37376e0261c8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564c16b2-9cce-471b-b485-b0a9b5280ff1", "sighting_of_ref": "indicator--9bb6f4ee-cbda-4395-b827-db4b2de923ef", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d474f2c9-ca7c-4080-be22-fb446e5d03f5", "sighting_of_ref": "indicator--71eb1aa7-e891-4e4c-bc95-9d4f69350763", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001890c0-75f6-47d0-be5c-a0d7bbe31271", "sighting_of_ref": "indicator--77e4660e-ef56-4a51-9aa8-ccba00fbaa7e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee653b21-9586-46ac-84de-320f0e0bbaa1", "sighting_of_ref": "indicator--11f5161b-c49c-4194-8098-b07571fc637e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0461ff0-68bb-4a1d-b75f-39f79bd96354", "sighting_of_ref": "indicator--11f5161b-c49c-4194-8098-b07571fc637e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e2a44c-7a7b-46a9-8702-aba2d7fa2e55", "sighting_of_ref": "indicator--3aaab5c0-2db4-4021-971c-51325ca6cd7a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3968df85-a32d-4118-afc2-0ded59553ca2", "sighting_of_ref": "indicator--39e1158b-daff-4fac-82ba-d00714e59bf9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbee186-2512-4539-8eee-76f25de2b04d", "sighting_of_ref": "indicator--d4eb0fa5-8e3f-4637-a134-95192ee64dea", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d88f7c-5c22-4eaf-9e28-c0e906189d76", "sighting_of_ref": "indicator--d4eb0fa5-8e3f-4637-a134-95192ee64dea", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb30ad0-5ef1-4ec2-bd8e-b357b9f257ac", "sighting_of_ref": "indicator--c3bfc53b-d41f-4b43-bb89-137136e60b6b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41071f6-f394-4cd2-95f7-43bd27b5df5b", "sighting_of_ref": "indicator--9cf69165-4adf-495c-a271-a3f75ebea966", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12971772-d4ed-49ed-8ba8-4593b4173aa7", "sighting_of_ref": "indicator--9365b6d9-14bd-408d-84c0-d74bba30ad2f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba04077-2f85-49ad-92bf-d0e3c33498b2", "sighting_of_ref": "indicator--9365b6d9-14bd-408d-84c0-d74bba30ad2f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804fcd83-5cca-4764-b6b3-706e946e4651", "sighting_of_ref": "indicator--18e52519-c6b5-4ef4-ae0a-aa082f2f5e05", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d0516f-0f57-4cd6-ab01-25960fd86326", "sighting_of_ref": "indicator--18e52519-c6b5-4ef4-ae0a-aa082f2f5e05", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740b644a-dad6-4cf7-a9ec-e7e6f0877142", "sighting_of_ref": "indicator--48172a21-9d17-49b4-acc4-d069073a0966", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5555dce7-00d1-4a04-91e1-03a385212fcc", "sighting_of_ref": "indicator--48172a21-9d17-49b4-acc4-d069073a0966", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f387cff-ceb2-4bcc-8df6-ebd90c60c734", "sighting_of_ref": "indicator--be0ff690-50bd-49ca-9260-edefd40e15c8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f914e6e6-7550-4bb7-bf81-92eb09af0dda", "sighting_of_ref": "indicator--be0ff690-50bd-49ca-9260-edefd40e15c8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e252c78a-1dde-4769-badd-e1cf82c72faa", "sighting_of_ref": "indicator--af614fd2-747d-46db-8435-25baa17379db", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a87c2f2-8d01-425c-9243-f57a9db941bd", "sighting_of_ref": "indicator--af614fd2-747d-46db-8435-25baa17379db", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2082da-ba72-4d3f-8493-d952f9a917e1", "sighting_of_ref": "indicator--23ab905f-b1e4-43bd-bec3-84979af495d6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eeba34b-1055-4a2c-9d57-575b36c821b2", "sighting_of_ref": "indicator--23ab905f-b1e4-43bd-bec3-84979af495d6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cae9f42-3872-4cae-853c-42ac394e3798", "sighting_of_ref": "indicator--23ab905f-b1e4-43bd-bec3-84979af495d6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb8d4af-1088-4b40-bb53-13f5221e6443", "sighting_of_ref": "indicator--af10e645-4e76-412b-a832-e9d47e37ea3a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f392f3-9ab9-41e6-a7bf-6618584f9e0a", "sighting_of_ref": "indicator--af10e645-4e76-412b-a832-e9d47e37ea3a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4acfaa-f169-45d0-9ae0-9953bfb239aa", "sighting_of_ref": "indicator--5940f12d-c2a8-44a6-90d5-7b4282c052a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485c0d37-cd3f-4b4e-a809-4b66c22fdc4d", "sighting_of_ref": "indicator--5940f12d-c2a8-44a6-90d5-7b4282c052a7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5b3a64-193d-47dc-9b0b-5ac5702bd844", "sighting_of_ref": "indicator--68f88093-789a-4b5f-b80f-550334345a6e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50185ac7-7a5b-4125-870e-f062cfa457a9", "sighting_of_ref": "indicator--9395dd97-9744-401b-b4c4-84c201dadb69", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5133ca9c-22c4-4d1a-81ca-52010d613728", "sighting_of_ref": "indicator--725bfa46-55e9-4ef2-8394-4bc0cf8b429b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d113d4fb-eae4-494d-afb2-e22d6c81421e", "sighting_of_ref": "indicator--725bfa46-55e9-4ef2-8394-4bc0cf8b429b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f973ee85-300d-491b-b7f8-49b6619e56e1", "sighting_of_ref": "indicator--f2714f5c-36d6-4cec-8186-19956f4959d3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63c6937-1d54-4c27-9432-f83133c004a9", "sighting_of_ref": "indicator--31620df4-c542-40c8-bc9d-7eaae4734728", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6bde38f-1af0-4256-8483-e3e9ec109c27", "sighting_of_ref": "indicator--800b4430-3150-461e-b07e-3c2b27189968", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35c393a-8b76-4dbd-97f7-33b1492ef9f6", "sighting_of_ref": "indicator--8b17384d-b2d3-4840-bda5-3c3d52d2a437", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ef7a41-d664-468b-9f5e-4619be303766", "sighting_of_ref": "indicator--f1fdf67a-6e5c-4956-b39f-92d980cf233e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81e2582-b42a-4429-b65b-2e1a8000c7a0", "sighting_of_ref": "indicator--f1fdf67a-6e5c-4956-b39f-92d980cf233e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88add6a-99e8-485c-bf76-ffb46f7c8713", "sighting_of_ref": "indicator--f1fdf67a-6e5c-4956-b39f-92d980cf233e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97571ced-48b9-4357-be8e-add516a6b4c4", "sighting_of_ref": "indicator--48e796da-dce9-4388-b9f3-d8d73c354297", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e696a7-4eb1-4d61-91f5-a8dd01c923d7", "sighting_of_ref": "indicator--98b77d96-a6b9-4d6b-98bb-0fd8db725ecd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea0e6e0-eac9-4c08-8b16-f1cdb1c20a4d", "sighting_of_ref": "indicator--98b77d96-a6b9-4d6b-98bb-0fd8db725ecd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5804844d-d95f-478f-b24e-ce181987cd9c", "sighting_of_ref": "indicator--7d9d728d-a11f-412d-a94e-690e48d29fa6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869bf055-5df6-4ee8-95e3-bb9e4f2ad1fc", "sighting_of_ref": "indicator--7d9d728d-a11f-412d-a94e-690e48d29fa6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88859dd0-e74e-4578-ac37-2f9c8b43555e", "sighting_of_ref": "indicator--347cdcad-5031-4555-bdf3-ff242b9d722a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67bd8b5-8e7a-4762-a833-915f2142a6d3", "sighting_of_ref": "indicator--347cdcad-5031-4555-bdf3-ff242b9d722a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0fbbb98-cbb1-43c0-918e-63b6ed835c54", "sighting_of_ref": "indicator--a483ce02-2bd7-4b52-b871-111c6dee8211", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55564e2f-91de-4d89-9398-01dba5c18856", "sighting_of_ref": "indicator--d341dd52-8cfd-4956-baae-09243f0ef8e3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4e7dea-5da8-47fd-89e4-378c0402260b", "sighting_of_ref": "indicator--d341dd52-8cfd-4956-baae-09243f0ef8e3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c61d59-a2aa-41c8-b93c-7cb6e80ca0ff", "sighting_of_ref": "indicator--be59aec5-e1e3-45c7-a0d6-cd0b0a8d3234", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91317983-e14d-47cf-870c-6b7b37ab01a7", "sighting_of_ref": "indicator--be59aec5-e1e3-45c7-a0d6-cd0b0a8d3234", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c909f99b-8c7e-495c-ad70-178544c89ec1", "sighting_of_ref": "indicator--be59aec5-e1e3-45c7-a0d6-cd0b0a8d3234", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69cf289-c868-4050-9bf9-4b6dbec1f455", "sighting_of_ref": "indicator--7bdf5ea8-4dbc-41db-995a-fe3127dbdc14", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c12deb1-38f8-47a8-8965-26351be8fa64", "sighting_of_ref": "indicator--dc0a6b9b-df36-4b84-939e-8a9eb9afba68", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4645ac-03c9-4666-95c2-96792aefe5c7", "sighting_of_ref": "indicator--dc0a6b9b-df36-4b84-939e-8a9eb9afba68", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85a96f8-05ee-43cf-90fc-9b66c5265fe3", "sighting_of_ref": "indicator--f306a9ab-2868-4278-8283-2bee892dc042", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b391fa-940e-40d4-aa3e-92ca48e61ec3", "sighting_of_ref": "indicator--b6ddff1e-4f4f-4825-a97b-6100116074c7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361b008f-2f1a-447c-9b85-7c5937f344ba", "sighting_of_ref": "indicator--b6ddff1e-4f4f-4825-a97b-6100116074c7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd0819f-52a0-4a94-a449-59647237468a", "sighting_of_ref": "indicator--c6181887-a02e-41e3-937b-83954d41fa90", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fee5f40-cf8c-47ab-9b7b-98e404e78295", "sighting_of_ref": "indicator--c6181887-a02e-41e3-937b-83954d41fa90", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8dadce-c04f-461d-ad1f-8e5fc19e1081", "sighting_of_ref": "indicator--97eedb35-38e6-410e-9509-d84e2a2f12ca", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3daf1625-151c-44ba-815e-27f820e56285", "sighting_of_ref": "indicator--97eedb35-38e6-410e-9509-d84e2a2f12ca", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590e818f-2eec-4820-b138-b263b8718711", "sighting_of_ref": "indicator--7c157a29-cd15-4089-ac94-45cb156a2221", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b50a7f7-51a3-494e-aa70-5277bee46c23", "sighting_of_ref": "indicator--c363cbf1-9d27-4115-8c8b-f6de6cb8d593", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23dda7ac-068c-46b2-a6ff-1ede6e3264ca", "sighting_of_ref": "indicator--0aa59706-2827-4322-86df-4e1c1ee778ab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a256523-7572-4e57-a551-116f0758dcff", "sighting_of_ref": "indicator--0aa59706-2827-4322-86df-4e1c1ee778ab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e65de4c-a402-4c1b-a990-350ddabfd768", "sighting_of_ref": "indicator--bb19fbf7-7495-47e9-9b9a-f95772415c8a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24cb313-3a23-4616-9e41-58240e1891a8", "sighting_of_ref": "indicator--6e531a21-51fe-4ce9-b1d1-73fedd5e5c22", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa54033-076c-4274-91a4-3bc6cca08dcc", "sighting_of_ref": "indicator--4512d9f6-a860-4d4b-8f22-04d96b001161", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3241d944-0298-4f55-b53a-2235834c3308", "sighting_of_ref": "indicator--e6eb2288-e876-41a0-85d5-860481ca91e1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8971c4-6e57-4a6e-b96f-d4a00161bbdf", "sighting_of_ref": "indicator--e6eb2288-e876-41a0-85d5-860481ca91e1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d9a34b-0cfa-4555-b630-576c3e76d708", "sighting_of_ref": "indicator--d257b6a1-fe1b-4c22-a539-d0a8d4fa3b93", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d219d1ae-dd34-4e5e-836f-bfab37650c14", "sighting_of_ref": "indicator--db8693e5-7fc2-46c7-9792-a83ac301a9fa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06ca711-b2fb-4abd-9532-8553690d786f", "sighting_of_ref": "indicator--db8693e5-7fc2-46c7-9792-a83ac301a9fa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2797e4fe-748d-4f4a-8d2c-400052ff5686", "sighting_of_ref": "indicator--db8693e5-7fc2-46c7-9792-a83ac301a9fa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af0da45-1b8f-43f9-86ee-9da8859e04c3", "sighting_of_ref": "indicator--6a638b6e-e8c5-46fa-ae02-6cdee2af4e11", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e40103-ab8e-4bae-8902-1f799c96fbc3", "sighting_of_ref": "indicator--58a26c6e-5266-4470-bac9-070ee4b74d98", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f191ae-95fb-4f37-ae8a-006883a00673", "sighting_of_ref": "indicator--58a26c6e-5266-4470-bac9-070ee4b74d98", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb99a5c-2ebc-4ce3-81fa-d572a18d7d8c", "sighting_of_ref": "indicator--6c4b53a1-2289-4fb1-8916-25079b93fc27", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a7959d-ee51-4172-b347-7043447756a0", "sighting_of_ref": "indicator--806661b8-9ef9-4a5d-8989-1f17824b7c91", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c01c9c5-d103-4457-a82d-0479528c3daf", "sighting_of_ref": "indicator--11296961-4480-48ed-8291-30f68f354eb2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126538dc-d254-4a05-9cc3-95aa53333dd7", "sighting_of_ref": "indicator--11296961-4480-48ed-8291-30f68f354eb2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03dd9bc1-c9e6-448a-bbaf-cf10d8548bca", "sighting_of_ref": "indicator--3d0f1d74-536b-4885-b2ef-1944692e00c9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323bf598-11c4-45a6-82b5-a9d3ece43d56", "sighting_of_ref": "indicator--aaa5e793-d948-4dbd-b0b9-3cbbde4d9c9a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0920e8-6799-432a-9953-93d12ffbebf2", "sighting_of_ref": "indicator--aaa5e793-d948-4dbd-b0b9-3cbbde4d9c9a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55959d39-ab62-4391-bcc7-5d9ae1c52f85", "sighting_of_ref": "indicator--c73703a4-c9c2-4f0d-afa9-a1bfa1b4de40", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4d3f5a-db0d-4c83-9d35-74e5c57626a7", "sighting_of_ref": "indicator--c73703a4-c9c2-4f0d-afa9-a1bfa1b4de40", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f00733-588e-438d-92a3-18e5fcd49e80", "sighting_of_ref": "indicator--c73703a4-c9c2-4f0d-afa9-a1bfa1b4de40", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693c68c3-522c-4b85-9b13-998b37ba8b1c", "sighting_of_ref": "indicator--26ce6005-3adf-45e3-a20d-05abd8165e80", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a29cd1f-6760-4c09-9624-ec863ce26811", "sighting_of_ref": "indicator--0949fbe5-3237-4070-ad3a-048201d7f4d0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2f8cdc-16d8-4284-b5de-1a0af0843587", "sighting_of_ref": "indicator--0949fbe5-3237-4070-ad3a-048201d7f4d0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6734f4c7-ade5-49db-9f0c-299f09a0f2f2", "sighting_of_ref": "indicator--43013205-b769-42d2-a4ec-3931fe261890", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365282de-9b26-49d6-9ea0-bef7de448a63", "sighting_of_ref": "indicator--29a6c5f1-a181-4d88-870c-d18ae40d6ec0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fb7dc1-aa3f-4027-a701-289f87e31de4", "sighting_of_ref": "indicator--29a6c5f1-a181-4d88-870c-d18ae40d6ec0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c68105-936b-4e9b-82aa-478f1ea7ca42", "sighting_of_ref": "indicator--271ce435-c2d2-4840-8d70-fe525ad189b5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9973168-f003-400e-a0a2-d65cc3ba8649", "sighting_of_ref": "indicator--ab43b590-83da-4ab9-93a2-3727db2a9605", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7836be-c105-46ab-8599-be3f7f05e30d", "sighting_of_ref": "indicator--ab43b590-83da-4ab9-93a2-3727db2a9605", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5c80d8-2159-4c4d-9d52-acc092e3f64a", "sighting_of_ref": "indicator--6cd7f353-bbf6-4a33-a634-5de143200c42", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003cc19b-1783-4f19-b364-2545f98605eb", "sighting_of_ref": "indicator--6cd7f353-bbf6-4a33-a634-5de143200c42", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebc81c6-cde2-4e3a-ab25-b2553f7d8c31", "sighting_of_ref": "indicator--b25d613e-e902-4210-ab5c-79636c89a776", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfbe151-4db7-4fc1-a671-44ddec92bdd8", "sighting_of_ref": "indicator--8f857a7a-3020-493d-9f52-bbb9a98972b0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f288a432-6158-42f7-8b48-02acc90d0710", "sighting_of_ref": "indicator--8f857a7a-3020-493d-9f52-bbb9a98972b0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda86554-1e2b-42f6-9a6f-9083d9c44541", "sighting_of_ref": "indicator--9b82a8c5-e484-4ea7-9460-7dac6dee8598", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec1a900-1ab6-4000-8571-8b2268065e6e", "sighting_of_ref": "indicator--9b82a8c5-e484-4ea7-9460-7dac6dee8598", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f18eb0-3b4b-4afc-91c9-f81e6e4d03ec", "sighting_of_ref": "indicator--1da455ff-d9b0-4b8c-a8d7-03e08621b805", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d380e14-f23e-41e0-a1e2-8576b1483871", "sighting_of_ref": "indicator--1da455ff-d9b0-4b8c-a8d7-03e08621b805", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b337352a-5113-4a88-b979-190eabb9365d", "sighting_of_ref": "indicator--1da455ff-d9b0-4b8c-a8d7-03e08621b805", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b23f40-c0a2-481f-b6ec-a9c8ead597dd", "sighting_of_ref": "indicator--95cd9cae-9a3c-40d6-8b6c-93f058110e61", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b355d09-ca11-4287-8d86-f3f6b88d31cc", "sighting_of_ref": "indicator--95cd9cae-9a3c-40d6-8b6c-93f058110e61", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbf59a6-067a-4b52-a0ff-0a35a65fb1af", "sighting_of_ref": "indicator--1e4af2d4-a489-471b-a673-56b5a1a23f40", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d83a6ea-4730-4a34-bf0a-cebb67175860", "sighting_of_ref": "indicator--1e4af2d4-a489-471b-a673-56b5a1a23f40", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac80738c-3cf3-4b61-8067-e646d3b2f5a3", "sighting_of_ref": "indicator--da36e71a-cf2e-4a59-9031-0d5debb87705", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e83db2-7c42-4d67-8ae4-97ad6129f764", "sighting_of_ref": "indicator--da36e71a-cf2e-4a59-9031-0d5debb87705", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5521c5e1-21fa-4e60-b5c6-9599167effe5", "sighting_of_ref": "indicator--da36e71a-cf2e-4a59-9031-0d5debb87705", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a291353d-3412-4a2f-8ada-0ecc86732edb", "sighting_of_ref": "indicator--c700a364-3dce-40f0-9215-a09c6fe7e7fb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d4cb44-c443-4bb8-af65-3570eeb8fb54", "sighting_of_ref": "indicator--ff9e1047-8053-4411-82b2-9b085b866b41", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e93a91-7bf8-4518-8e37-6528226a0d05", "sighting_of_ref": "indicator--6f968d2b-9ff0-4d7d-b30a-6d1bfd45fc74", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc9278b-a637-4048-a92a-0754ea990117", "sighting_of_ref": "indicator--0834539d-6a95-432b-be4e-58092d9ad3bc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c518e59-caa6-42f9-8d80-bfa8ea666f9e", "sighting_of_ref": "indicator--0834539d-6a95-432b-be4e-58092d9ad3bc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33527411-bac3-4321-8bef-913885fc09b6", "sighting_of_ref": "indicator--0834539d-6a95-432b-be4e-58092d9ad3bc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3eea68b-4ce3-4424-b33f-04d149aa9afd", "sighting_of_ref": "indicator--caa7dd87-dbf9-4a7b-afc0-14f0723368d7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4790741c-50d6-45bf-af36-54cecd2e5d7b", "sighting_of_ref": "indicator--7b1396b0-db55-4b9f-97a3-d86a5322336e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a23c7ff-f621-426f-98d0-5595d5a41c42", "sighting_of_ref": "indicator--7b1396b0-db55-4b9f-97a3-d86a5322336e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c29345f-7f04-45a9-ad9b-db02b7c64c44", "sighting_of_ref": "indicator--30bc1caa-2abb-4864-91f2-2dc3af08276b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e136a60-8417-405f-ad43-40725bee0b33", "sighting_of_ref": "indicator--30bc1caa-2abb-4864-91f2-2dc3af08276b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189dce20-459f-43dc-8251-5477fe0ff5bd", "sighting_of_ref": "indicator--29585d90-b353-4ad8-b263-6f0cd5ed2713", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c3f99e-d901-4b1d-8d58-f209d7cfbebb", "sighting_of_ref": "indicator--29585d90-b353-4ad8-b263-6f0cd5ed2713", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32b151e-4f4c-4d0c-a080-15a8f8ca6b4d", "sighting_of_ref": "indicator--ab3d4250-8606-43ab-a9ec-39c8ae2639a6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46da45c9-cff7-4f75-9035-4e5208a44d79", "sighting_of_ref": "indicator--ab3d4250-8606-43ab-a9ec-39c8ae2639a6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f9fdb1-099c-4f36-946c-1537ddcfcbe4", "sighting_of_ref": "indicator--133b1c28-e5f7-4ff4-84ae-d2888d387ac2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591e9303-8f11-403a-b3c1-413e44a18fad", "sighting_of_ref": "indicator--133b1c28-e5f7-4ff4-84ae-d2888d387ac2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a100e1e3-2339-4f96-996e-6ce9215650d4", "sighting_of_ref": "indicator--c0ed96ea-e873-45b1-9e8e-ba921d63d561", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9887ff61-e9ef-4ceb-9cad-7956a956f631", "sighting_of_ref": "indicator--01dafadc-f301-4ebc-81fa-fd51d61eb985", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08518994-e8b3-45e5-840f-ab2c1f6f77bc", "sighting_of_ref": "indicator--cb9c0109-b390-4182-9d28-3f40abe63fb3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd769cc8-6c6c-4e18-8a3c-73cc3aae0525", "sighting_of_ref": "indicator--cb9c0109-b390-4182-9d28-3f40abe63fb3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89bb4951-3101-41f8-a3aa-1fa362e8bc07", "sighting_of_ref": "indicator--73883bfa-867f-4ff2-a487-68441d036697", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f538fb3a-b770-465a-a1c7-879b7eaa9864", "sighting_of_ref": "indicator--73883bfa-867f-4ff2-a487-68441d036697", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da5e0b4-342d-486f-87da-3cbae5981c8d", "sighting_of_ref": "indicator--73883bfa-867f-4ff2-a487-68441d036697", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b9633e-229d-4380-827f-eb2be40beb3e", "sighting_of_ref": "indicator--13d4640e-8bb3-417f-b6eb-0232176c3100", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ea6877-4dec-4cf4-a63d-47e5300ea3ea", "sighting_of_ref": "indicator--13d4640e-8bb3-417f-b6eb-0232176c3100", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5faa5e-5c0b-469c-af43-da6aa43b3e69", "sighting_of_ref": "indicator--13d4640e-8bb3-417f-b6eb-0232176c3100", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b499b3-6bd9-47e5-9f69-341cfe5644af", "sighting_of_ref": "indicator--73ac94a9-1af8-4ecd-a412-73bff2d47669", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7394f9-5cf8-405b-8047-5b475e901e34", "sighting_of_ref": "indicator--9573ede0-7224-463c-9419-c30439f450bf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a18fed-7bec-4bf5-8085-2f325495059f", "sighting_of_ref": "indicator--0d99b097-f23f-4d5c-b202-6284c0a3a00d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74646d3-2e3e-4a67-952a-c68fd6e69274", "sighting_of_ref": "indicator--0d99b097-f23f-4d5c-b202-6284c0a3a00d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515fcc96-2194-4f97-8dd2-c9e2c83add2d", "sighting_of_ref": "indicator--6b255448-8bf9-4c47-b903-0451527a5146", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540f16b1-30e6-4879-b781-32fe4115d4c2", "sighting_of_ref": "indicator--6165c35d-ade1-47b9-8a15-7e1c49a6d4d2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e7551f-d944-49ee-b143-ad18a6f209c3", "sighting_of_ref": "indicator--537781c8-e710-4272-9b25-f3c455aa5ea2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42144136-29fc-4edd-87f6-cea3ff3d40ac", "sighting_of_ref": "indicator--124f5044-5ce9-465d-83c1-3df6b6ee3252", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8429341c-1ae2-42ef-a81a-853f806e4789", "sighting_of_ref": "indicator--124f5044-5ce9-465d-83c1-3df6b6ee3252", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd440cf-6e63-432e-ade8-310a8798879a", "sighting_of_ref": "indicator--4ba1f078-09f6-42ed-ae10-c5a41da652d4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2468ed3a-fb0d-4976-bb4f-f8a326fdb142", "sighting_of_ref": "indicator--4ba1f078-09f6-42ed-ae10-c5a41da652d4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58180d0-99cf-4084-a503-826e71dfa51e", "sighting_of_ref": "indicator--4ba1f078-09f6-42ed-ae10-c5a41da652d4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb5b72f-fdc6-4cc7-b3a8-014b92dfd5e1", "sighting_of_ref": "indicator--db8b630d-bf58-4e97-9648-693640854038", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b38720-ca94-4a51-ac84-36d13f31c4e9", "sighting_of_ref": "indicator--68971a2e-499b-44a4-b408-249f565e1d62", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c913604-bcf4-4cf1-a050-ecb234b2b8d6", "sighting_of_ref": "indicator--233ab25c-7db4-4b18-8bca-68595b242368", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae24d254-b5e1-4d04-8445-3e58fe8a18f9", "sighting_of_ref": "indicator--233ab25c-7db4-4b18-8bca-68595b242368", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589d41a8-df07-4de6-8b3c-6634cfbd27c5", "sighting_of_ref": "indicator--bc91d2cd-0223-4378-adaf-981ca072f1d5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb16019a-0a8a-4269-a78f-d73b8c4e735a", "sighting_of_ref": "indicator--bc91d2cd-0223-4378-adaf-981ca072f1d5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3cf665-42f5-4712-8b55-d01033efed34", "sighting_of_ref": "indicator--b49a5e0b-0866-423e-bb71-bf7bffc3270f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d778ed8c-9d23-484f-80e6-56b7d7298168", "sighting_of_ref": "indicator--ba973fe7-6b24-47f2-83e5-afcc14f05366", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56261ee-26d8-4dc6-b6ce-f75f7cea870b", "sighting_of_ref": "indicator--e8c06a7a-c71e-4299-bd89-e2e240cbb51d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c5a595-2367-4d83-ac58-d0309d6a5086", "sighting_of_ref": "indicator--2c054178-f48f-48e7-ba07-620030e9e71e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0619c2-e581-414f-9e9a-0c9e09973e41", "sighting_of_ref": "indicator--03a6031f-78ae-4aeb-a960-0ab8b988aa25", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f8bda1-fcca-41bb-aeaf-03bf206e53b3", "sighting_of_ref": "indicator--f2d8405a-cce7-4d03-a373-9f1887d9d031", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898e2236-965f-42a4-b838-1eb7ee205034", "sighting_of_ref": "indicator--395c3f35-d938-422a-beb9-fa7d7828db6f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ec68cc-1b31-4b3d-a478-a877bfbb75ed", "sighting_of_ref": "indicator--28a68a3f-bf83-4c91-928c-afec43b6599f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6f81c9-be2e-4f3a-a07d-6512e99d9a23", "sighting_of_ref": "indicator--c901c2ce-bebf-421e-8842-e6bbbd9ca196", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf7835a-f888-4ceb-9c70-c8bc3afd6b4b", "sighting_of_ref": "indicator--033520ed-9f96-440f-a584-8930c6749a7e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3436d3-58ee-4ebd-b2b2-eff6a1e0d068", "sighting_of_ref": "indicator--28965dff-e018-45fe-835a-65f6aece73d4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b8eeab-2013-452d-87d0-3b5b5b4542ae", "sighting_of_ref": "indicator--4de6c576-185f-489d-bbab-6a27594a6f74", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e647e8c-c31d-4828-b10f-6bafc95d5a07", "sighting_of_ref": "indicator--4de6c576-185f-489d-bbab-6a27594a6f74", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16800ed8-69fa-46a2-b294-f05cdaf26db3", "sighting_of_ref": "indicator--af5f0ecc-d951-428b-80ab-7cc8b89171b2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbbcb18-16bb-4ef7-a819-542d623444b3", "sighting_of_ref": "indicator--4ebbc0f6-f6cc-43de-820b-53c5654c6f84", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd3acd0-aaca-4cd4-9af4-f3fcac257279", "sighting_of_ref": "indicator--4ebbc0f6-f6cc-43de-820b-53c5654c6f84", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682623a0-c2a6-40f8-a86c-0062ac20d092", "sighting_of_ref": "indicator--7f8971b7-7654-491c-acfa-0e7762851b2e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8adce20-f2b7-431d-87af-02f5de1de3d6", "sighting_of_ref": "indicator--7f8971b7-7654-491c-acfa-0e7762851b2e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fcc4b1-ffd9-4cec-bb68-3afca735cf53", "sighting_of_ref": "indicator--9caec566-31f3-4c10-bef8-ad935a005fad", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4217ea-995e-4f85-9fb3-bb9966a61986", "sighting_of_ref": "indicator--7f703cb5-b65e-4408-9bbe-7c530a700cdb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3905f704-68e8-4e91-a572-6335f021155c", "sighting_of_ref": "indicator--7f703cb5-b65e-4408-9bbe-7c530a700cdb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02032ede-1844-4be4-ac17-6b85ccea57c6", "sighting_of_ref": "indicator--973ef4a4-8fa5-446d-9c6c-203668688601", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6d8f87-c1d3-40e8-b456-294d989bfa3e", "sighting_of_ref": "indicator--1ad7cfb5-e2ea-4550-93a1-825c5bdaca3b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b560fc69-e508-41ea-9067-b38c7e83cdf4", "sighting_of_ref": "indicator--1ad7cfb5-e2ea-4550-93a1-825c5bdaca3b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5111f11d-2b79-4d26-9113-58b61685d925", "sighting_of_ref": "indicator--1ad7cfb5-e2ea-4550-93a1-825c5bdaca3b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7730ef1c-1481-449c-8adb-d43682d41787", "sighting_of_ref": "indicator--afb2e8ce-8a32-4438-ade1-37ad8404d3a3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d8fb4d-9083-4b86-97bf-b6d18d78d4d3", "sighting_of_ref": "indicator--fa357b98-0054-4a3d-bbcb-1009f0efe519", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8553d0a-e856-4ffe-83a2-cda9fd799b3d", "sighting_of_ref": "indicator--317f3ecd-da42-453d-a63a-e57e2c9d4551", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb76066-6040-46c8-ad29-208c20d48538", "sighting_of_ref": "indicator--17dfa955-a663-4b41-8f3e-9f2be4e62013", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4665776-5ad8-4b25-aba1-a47dbe07051e", "sighting_of_ref": "indicator--17dfa955-a663-4b41-8f3e-9f2be4e62013", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b325dc-0214-4b2f-8626-c4c27c6c297c", "sighting_of_ref": "indicator--1ba1e394-5c28-4411-9a03-9dc47049e345", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d4d4b4-7146-4427-becd-bc326083909d", "sighting_of_ref": "indicator--1ba1e394-5c28-4411-9a03-9dc47049e345", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f483ccd-9809-4a07-8776-1d57ad2cc7cc", "sighting_of_ref": "indicator--90ec25be-9781-4065-ab4f-e2b22b2b83ba", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f011fb1-666a-4e70-a5d7-b9adc9be71df", "sighting_of_ref": "indicator--bd9f2542-7373-48b6-85ae-872fe9fc9351", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2ec94a-2b9b-439e-ad8a-6a38b641449f", "sighting_of_ref": "indicator--505969d8-db2d-4a83-9b65-d1a92ddfecda", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129a9e4f-d5b4-42d5-948f-534bd29291a1", "sighting_of_ref": "indicator--505969d8-db2d-4a83-9b65-d1a92ddfecda", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329e3f36-83b3-430d-911a-0a73fecef51f", "sighting_of_ref": "indicator--505969d8-db2d-4a83-9b65-d1a92ddfecda", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d5026d-c0ae-4831-bf92-01c904bd72fa", "sighting_of_ref": "indicator--5e88452c-45ac-4384-8fad-45e24d932d1d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2634079a-ff34-40eb-87fc-d31ca54add15", "sighting_of_ref": "indicator--5e88452c-45ac-4384-8fad-45e24d932d1d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9898023b-1d7a-42dd-8a65-480a5bb43a6c", "sighting_of_ref": "indicator--48f2c6cd-c681-417b-ada6-262f0f53656b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee95027-8a68-4833-891c-fdfd1ab9ed20", "sighting_of_ref": "indicator--48f2c6cd-c681-417b-ada6-262f0f53656b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a03180-a0af-459d-9716-15a7a371fe3d", "sighting_of_ref": "indicator--260fd277-d6b0-45ef-98db-c959ab7b841c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d6704e-ebaf-4cd6-88ff-821e8abdcdab", "sighting_of_ref": "indicator--260fd277-d6b0-45ef-98db-c959ab7b841c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a52e302-c737-4e21-88a4-7e671df2ae7e", "sighting_of_ref": "indicator--728edfb3-fb45-4a79-ae46-b37fee8e4431", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3457a92-9164-4357-9332-a2d84e8c714a", "sighting_of_ref": "indicator--e21a978a-5973-41b6-b33d-209c8fd7e5a6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40162a2-7720-4ce6-95be-3bbc62ae218e", "sighting_of_ref": "indicator--e21a978a-5973-41b6-b33d-209c8fd7e5a6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5150742-e1b9-4140-8dba-a00a1de9b83e", "sighting_of_ref": "indicator--7a101953-b024-4344-b183-58ca93620c65", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5beab8d4-05cd-4e2d-b88c-9a3dd94aefa1", "sighting_of_ref": "indicator--7a101953-b024-4344-b183-58ca93620c65", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc1fccc-116b-4bc6-be8f-3c42650ed415", "sighting_of_ref": "indicator--7a101953-b024-4344-b183-58ca93620c65", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b459c40-cd70-489e-a8b8-696e80290ddb", "sighting_of_ref": "indicator--8662f4c5-367c-4a52-aeac-881f44a2a6f1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2364be-183e-4f38-aa42-61121d29d7d8", "sighting_of_ref": "indicator--8662f4c5-367c-4a52-aeac-881f44a2a6f1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c17057-d2e1-4436-a196-d8d2377a4996", "sighting_of_ref": "indicator--8662f4c5-367c-4a52-aeac-881f44a2a6f1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcb3d8c-7a8b-4168-ade8-0f1af4cca912", "sighting_of_ref": "indicator--3a671845-2f58-495d-8e18-44afab41c62b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621e184c-9b24-402e-9c83-b5f40cec605a", "sighting_of_ref": "indicator--3a671845-2f58-495d-8e18-44afab41c62b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe1c9b2-1303-4a95-9d6c-1ac4f181c155", "sighting_of_ref": "indicator--3a671845-2f58-495d-8e18-44afab41c62b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c68c2e0-a0c6-4d60-9914-edc0ee9d6364", "sighting_of_ref": "indicator--88bff93c-1535-4cae-8c8e-55771f04f3db", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec53c56-8a40-4343-a089-2fd617b35e6e", "sighting_of_ref": "indicator--a929cb53-14ab-4220-a4ce-b1d80e9a8759", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc432438-daf9-445e-b5e4-8877c1fdf8b3", "sighting_of_ref": "indicator--f6746fe0-a134-444f-a1e7-7e62444a7941", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3a0d1b-16d4-4e1e-a7a3-be68d0cba429", "sighting_of_ref": "indicator--f6746fe0-a134-444f-a1e7-7e62444a7941", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089282ab-3f15-43ca-be2a-b60ffbbe08b7", "sighting_of_ref": "indicator--f6746fe0-a134-444f-a1e7-7e62444a7941", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f4e47d-7a49-4b75-b35b-983c7c4731da", "sighting_of_ref": "indicator--6d7c403f-de04-435a-a5df-0ee397d576ce", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f003f5-4a71-48e4-97aa-26380423b154", "sighting_of_ref": "indicator--6d7c403f-de04-435a-a5df-0ee397d576ce", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8e170f-353d-47f1-abce-219fce239f23", "sighting_of_ref": "indicator--1cd4dd5d-cc52-439a-aecd-610f1f50f583", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9174702d-c7dc-4e8b-919a-3d24f8dbaa13", "sighting_of_ref": "indicator--1cd4dd5d-cc52-439a-aecd-610f1f50f583", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb39ab8d-2176-4ad7-b5ac-387ffe4e8971", "sighting_of_ref": "indicator--e135a71a-9620-409a-a475-1c68a68d5e0b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba76b4a1-d56d-4b64-bc78-39d8099a4fb3", "sighting_of_ref": "indicator--e135a71a-9620-409a-a475-1c68a68d5e0b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4debdb-1089-4855-afc4-bee060d87226", "sighting_of_ref": "indicator--77fa878e-d441-4a33-b956-55fc9ea40392", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5033ab6-6c78-426d-8548-4912be3eae8e", "sighting_of_ref": "indicator--77fa878e-d441-4a33-b956-55fc9ea40392", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2f6001-6f1d-4232-a727-5c8c0170f475", "sighting_of_ref": "indicator--5fede048-ec7f-45a8-b696-dbaa0a5ba085", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3289f9c7-56b8-4e01-bb55-59f1f80cc516", "sighting_of_ref": "indicator--5fede048-ec7f-45a8-b696-dbaa0a5ba085", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a746c2df-12c4-4153-9b4b-f63a546336db", "sighting_of_ref": "indicator--1e81b804-b32a-4a3a-86d7-68f29b4c7855", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6babf4-196f-44d4-9032-2bf94dd6ed8c", "sighting_of_ref": "indicator--c272b084-f87d-4bb2-84f1-8404b899e898", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d56b9e4-1dde-49ed-9dc4-bc0953c83779", "sighting_of_ref": "indicator--ecb014d4-af26-452a-913b-55f55b55d0ed", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36ab1fe-5db9-46fa-92d1-d5d297a6fc45", "sighting_of_ref": "indicator--ecb014d4-af26-452a-913b-55f55b55d0ed", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda30cf0-59a9-4096-b1fc-7f92c16b6d41", "sighting_of_ref": "indicator--f38d84e9-6d9d-41f0-875a-2b0940c4e709", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed44ae23-d12d-4f09-acc3-1ec77907896a", "sighting_of_ref": "indicator--4e6cc0ec-52a5-418b-bb95-afd1327df04f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1c2bc7-c7af-4f56-9546-b99ed8d1ed0a", "sighting_of_ref": "indicator--4e6cc0ec-52a5-418b-bb95-afd1327df04f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f04e10-0110-4d73-8c39-0c87d3494fa6", "sighting_of_ref": "indicator--85977fdf-b724-4660-a1ad-cb397ee98a98", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7d4e9a-581e-4ce8-bf7b-0c3b1873d5ef", "sighting_of_ref": "indicator--85977fdf-b724-4660-a1ad-cb397ee98a98", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fcf524-a19a-4afd-b6ef-8c7ae7a69c24", "sighting_of_ref": "indicator--97bd3c8e-3277-414d-b4ba-aeea88d130ba", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68715205-2981-4fc8-a79a-f8aa06ad9a42", "sighting_of_ref": "indicator--7173981a-ef5f-4092-8bc4-d04a02a60db2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb179f7-5238-4cc7-ac72-f4960bb54dc3", "sighting_of_ref": "indicator--7173981a-ef5f-4092-8bc4-d04a02a60db2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5122ec-8043-4d8a-a5aa-6b8065b3e0b8", "sighting_of_ref": "indicator--f39de9b2-cc7c-46e9-add8-5c156b2734cc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d82920d-d3cf-4388-afda-637a1a650ef5", "sighting_of_ref": "indicator--31443be7-467a-4f4a-b5fe-d4f26e89e963", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1fb186-d3de-4c20-8f7c-dd6b856ec85c", "sighting_of_ref": "indicator--31443be7-467a-4f4a-b5fe-d4f26e89e963", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ff986a-5a86-4d78-baae-a67590cc39c3", "sighting_of_ref": "indicator--9c69417b-97d4-4d1d-85a3-2c1805895607", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358e0c58-939c-401d-8434-77ae073c526a", "sighting_of_ref": "indicator--ed5723c9-ead4-4df4-9a07-ceb1c91a2842", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3f2c9e-4a4d-4bd4-8929-a7d9ba3a551b", "sighting_of_ref": "indicator--9dcdb3b8-b447-4d69-8fc2-18a397555ebe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8399d773-a159-4f66-9841-fe3a4737df11", "sighting_of_ref": "indicator--9dcdb3b8-b447-4d69-8fc2-18a397555ebe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0a6679-f8fc-447c-a6b0-8f9705e98f96", "sighting_of_ref": "indicator--c0c6c693-5262-4336-9b6c-76ae2f67a96c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e6adf5-fa46-4188-ae4f-e452d0b643aa", "sighting_of_ref": "indicator--cccd2f7c-0c1a-4186-b28f-cf922e34f03b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91481141-6fa1-44fe-b4e2-c0bba7cacc62", "sighting_of_ref": "indicator--cccd2f7c-0c1a-4186-b28f-cf922e34f03b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a56f781-3eff-4d64-b8ee-4253ede1a777", "sighting_of_ref": "indicator--11ebc682-bb6c-4857-9f4c-40b72d923b27", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb25200-e512-4617-803a-5e8e999bf11c", "sighting_of_ref": "indicator--11ebc682-bb6c-4857-9f4c-40b72d923b27", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ad165e-3b8b-48bf-b85f-bf30f39df19a", "sighting_of_ref": "indicator--1f28d501-2ea7-4fe1-9fd8-a6dcd35b656a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f55ace-8c79-4177-b6c6-9a7de78ed4bc", "sighting_of_ref": "indicator--1f28d501-2ea7-4fe1-9fd8-a6dcd35b656a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a89dffd-0cfd-486c-8f8f-817c1fdd6973", "sighting_of_ref": "indicator--b8bbb89a-0cd0-4bd2-b021-0be580966b24", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037fb448-ed1f-4651-b358-553bb78e0ab6", "sighting_of_ref": "indicator--cb01a816-4059-40f8-b480-1d2145c9a1c2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2ce2b0-37f6-4602-85c1-d51659eecf71", "sighting_of_ref": "indicator--fd51f225-6ed7-44fb-9a2f-95f27c9dd61c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5cecb2-d58c-41e8-a296-4b1936e76bf8", "sighting_of_ref": "indicator--ea38cf62-5203-4bf4-8f49-339fe542bc5a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b549d7-492c-4b0b-b50d-d555d8e3b11a", "sighting_of_ref": "indicator--ea38cf62-5203-4bf4-8f49-339fe542bc5a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be987e5-7716-4dc1-a656-55974583522b", "sighting_of_ref": "indicator--24ca4859-4927-4c54-84a0-184e3d5c1e20", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39987418-3d0f-4be7-b0a8-c36ad132a9c2", "sighting_of_ref": "indicator--3fd64df0-7e04-419d-82f3-bdcdf3daa126", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3a29ff-3979-494d-b102-0d0091722b57", "sighting_of_ref": "indicator--f0e2bc53-e2ca-4083-a9ea-c813f73c279f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4898dc7b-e4ed-468b-9830-751331b90729", "sighting_of_ref": "indicator--a8167e95-5a60-42ad-a024-68f10d3572bc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6745be6-e296-4913-b76d-acb20236268a", "sighting_of_ref": "indicator--1114687d-d484-4570-aa75-97d490c78080", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a7a0d7-2180-4e6d-ae45-768d878b34ca", "sighting_of_ref": "indicator--9f95764b-d2f0-49d4-94c8-36ab44f178cd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a2c192-7bad-485d-bd37-334a8c340fbd", "sighting_of_ref": "indicator--a010b1ae-cd9c-4507-ba73-0dbb29f262c5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a6146c-498c-47b1-bde3-4e3ca11a0809", "sighting_of_ref": "indicator--a010b1ae-cd9c-4507-ba73-0dbb29f262c5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21962c21-93cb-4fd5-bffd-237cbb784a82", "sighting_of_ref": "indicator--fd9a90bf-1cb6-436b-85d4-6563d5a75e3f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b295a683-9f6b-4418-8ec6-133ecadad12b", "sighting_of_ref": "indicator--fd9a90bf-1cb6-436b-85d4-6563d5a75e3f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ab03a5-7677-448a-b557-08d49c8419a2", "sighting_of_ref": "indicator--c429baff-b1e9-49cf-996a-b278dcc43701", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4795b6dc-42db-46bb-bbfd-74d64f605858", "sighting_of_ref": "indicator--8d8f66a2-abc0-47cb-919c-07922745f004", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473fb694-0b4b-4626-974f-d0beddd3b5c2", "sighting_of_ref": "indicator--5b1f2772-3b3e-4589-8ae5-4a3aaf4292f2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de52c3a-91d4-4575-b1be-da0e8d3cb04c", "sighting_of_ref": "indicator--5b1f2772-3b3e-4589-8ae5-4a3aaf4292f2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d631e5-210f-419f-819e-e3f5bd1d64e2", "sighting_of_ref": "indicator--64026704-c3d6-4cd2-a2eb-7052244f1867", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb9faf3-5686-4789-98c6-0344aaacad22", "sighting_of_ref": "indicator--4d178f78-1fbd-47ac-8ab2-6bb430c9483e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050bfe15-ef47-4bfc-ab4b-2280a762f89b", "sighting_of_ref": "indicator--a8c60ba7-0414-4816-8e37-d76be945deff", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd0d474-e758-43fd-90b9-2e0f19bee385", "sighting_of_ref": "indicator--261c75de-9503-4b30-a5d7-75883ba1b57a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd0a99a-a0a1-42d5-89a5-8a3f2c92decb", "sighting_of_ref": "indicator--e7732be8-9253-4b57-9726-0b35d7cb86d0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3f35cd-b9ff-4d77-a1c2-7f644896eb7c", "sighting_of_ref": "indicator--e7732be8-9253-4b57-9726-0b35d7cb86d0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e655f6-7b4d-454e-b88e-37197a7acadd", "sighting_of_ref": "indicator--7a56cd70-64c8-4662-b7ab-1b6c03066307", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c43752-7797-4a05-9083-ac788bc8856b", "sighting_of_ref": "indicator--7a56cd70-64c8-4662-b7ab-1b6c03066307", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7474f53c-08e3-46b0-a9d0-7f5227eb01f9", "sighting_of_ref": "indicator--029cf950-fc93-4022-b364-eb4df08c9a00", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d2cabb-9137-4371-9d5b-0a18afa5bd63", "sighting_of_ref": "indicator--029cf950-fc93-4022-b364-eb4df08c9a00", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec6c7d6-2ca7-4df6-9e66-3d3ab5e20fdf", "sighting_of_ref": "indicator--740ee86c-1402-447d-94ac-eb64ae185b03", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1738dd25-5a52-40fe-9213-8918ea4b33a8", "sighting_of_ref": "indicator--4fa28e5e-7d8d-466b-971d-cf7ecde2f546", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3903e637-216b-4b0d-8b3f-e794c787838b", "sighting_of_ref": "indicator--4fa28e5e-7d8d-466b-971d-cf7ecde2f546", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a238925-751c-4575-926a-9a33615eaee0", "sighting_of_ref": "indicator--4fa28e5e-7d8d-466b-971d-cf7ecde2f546", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0b56c0-7d81-4d46-815c-79c639ce45b9", "sighting_of_ref": "indicator--c4ca7aff-7724-4ef4-b567-1f20ca5134fb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295fa51a-d3bb-477c-8a57-8076b37cdc45", "sighting_of_ref": "indicator--c4ca7aff-7724-4ef4-b567-1f20ca5134fb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e14ebc-7a3b-4a69-a996-3de3f89b2745", "sighting_of_ref": "indicator--17a92b3a-cf3f-48d2-8cad-8a025df3d726", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64e5303-a56c-4223-9777-bbc1669c4253", "sighting_of_ref": "indicator--c79080b9-d3e8-4311-8898-0651afce4760", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e1a1d9-9703-4a2a-8867-4940ca93b636", "sighting_of_ref": "indicator--38702296-e0ed-4349-a436-3cc838376e3a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b221046e-42b5-47e1-b3f2-7a7ce15cc3bb", "sighting_of_ref": "indicator--38702296-e0ed-4349-a436-3cc838376e3a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c808597-7aea-4f50-8ac2-4ce38b3c5a43", "sighting_of_ref": "indicator--4076cfd7-0dbd-48ba-88ec-bfd90bb5d186", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0875010b-496f-43ff-948a-f56dc9238149", "sighting_of_ref": "indicator--4076cfd7-0dbd-48ba-88ec-bfd90bb5d186", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f1ba2c-f6e4-441c-8f73-9c62c97fd9cf", "sighting_of_ref": "indicator--5818bf3b-a692-494c-bc42-1021e70bbae1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9897110-0caf-4a8a-8da4-d979dc0b46f4", "sighting_of_ref": "indicator--5818bf3b-a692-494c-bc42-1021e70bbae1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f05857-7c65-4f0d-9d71-64285037a8b3", "sighting_of_ref": "indicator--aa7edcb8-80db-44d4-b140-f7cc404a2716", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3689337e-8c89-4de4-b726-978ffb79d8ec", "sighting_of_ref": "indicator--f64320ff-c0c4-4e5c-8e0a-dc68d28492b9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa58d73b-531a-4d33-a301-7576ca2125a7", "sighting_of_ref": "indicator--f64320ff-c0c4-4e5c-8e0a-dc68d28492b9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5416b2-69ff-4db4-9c1a-87f35849ef5f", "sighting_of_ref": "indicator--49653b88-0141-4143-a420-9c90ed578a91", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8138f247-1558-4a4f-87c8-006288721616", "sighting_of_ref": "indicator--b84dc9f4-116f-4247-976d-515be9f3a6c2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8836f88f-b399-443f-b2fe-f50b62f65e3a", "sighting_of_ref": "indicator--b84dc9f4-116f-4247-976d-515be9f3a6c2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c7e9e2-114f-4076-9ca0-f1bf9aa4648a", "sighting_of_ref": "indicator--b84dc9f4-116f-4247-976d-515be9f3a6c2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33066fa-53e8-4c70-a32c-3031cb18c26c", "sighting_of_ref": "indicator--7cb9c6f4-5cb2-4ef5-b220-0e058f4cd294", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc7d214-1c60-4fe2-834c-c450559a61ab", "sighting_of_ref": "indicator--be192c29-0970-46af-a74e-ad2f1eac6f94", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0861743e-8627-4a8e-8946-73d3cb05aca8", "sighting_of_ref": "indicator--be192c29-0970-46af-a74e-ad2f1eac6f94", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf3ad94-4fe4-4a10-b6c9-b9f9ce46c5dc", "sighting_of_ref": "indicator--0bb6926e-e2dc-4539-becf-a98754c2f282", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a1a9d5-d9b4-4e1b-8509-a5e87cb422fd", "sighting_of_ref": "indicator--0bb6926e-e2dc-4539-becf-a98754c2f282", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be858588-bb23-4e7b-8ab7-0c252e2d5278", "sighting_of_ref": "indicator--9fdb47aa-a7c9-4a69-ab9c-f010f8a4faa1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3462fcfc-1870-48f6-b952-458ca5e92e31", "sighting_of_ref": "indicator--a2a6468e-33d6-4e00-b507-31b56d7c4add", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b0e437-107d-4d78-aa67-8d3c1fc94786", "sighting_of_ref": "indicator--a2a6468e-33d6-4e00-b507-31b56d7c4add", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fa123c-c94f-44fa-9b61-c3db7b8da2d1", "sighting_of_ref": "indicator--23e23b20-a453-44d4-a352-c608622cd0e8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19da36dc-3d06-4d7a-b6c0-4295173846a8", "sighting_of_ref": "indicator--9bf3f8a4-859e-4833-a303-3519378a2891", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22ec96d-fe47-4410-9d8f-29070af196a4", "sighting_of_ref": "indicator--def307c4-db1c-4970-a265-0168b8834c0f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575f4709-d191-40e0-bd0a-8524063855b5", "sighting_of_ref": "indicator--2c8e9ba1-8509-49fd-8f01-4fb2f0d35a3c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58de3d52-1790-4141-b218-fc8f9dce40ab", "sighting_of_ref": "indicator--590e288e-30ad-4a85-b81e-417b3b574332", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7e0abc-db11-4c78-8f08-1385b005b491", "sighting_of_ref": "indicator--590e288e-30ad-4a85-b81e-417b3b574332", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ee5240-07a5-4eaf-a37b-dc9f8e7e196c", "sighting_of_ref": "indicator--89c709de-e3c4-41b1-98c0-fd4233d9def7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3472c986-3917-4ce8-8e7e-5e27534b6a5b", "sighting_of_ref": "indicator--63fa8b81-d4bd-4384-bb28-77bd696c36d3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153afd79-52a5-413f-98f0-1ef8ff0aeac3", "sighting_of_ref": "indicator--63fa8b81-d4bd-4384-bb28-77bd696c36d3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa569cb-a074-41f9-b5d8-9b9782d52b3e", "sighting_of_ref": "indicator--015ae8e2-1972-4848-9834-5913f9744ffe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bffce4-4149-43b9-a33f-d043356fefdc", "sighting_of_ref": "indicator--a6c37047-cc52-4b67-b487-d41cfbea70a4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b92b92-aebf-4381-ae29-05cf644f2a2a", "sighting_of_ref": "indicator--4e6a0b84-8ea9-46c6-901f-f69dcb65863d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba141b1c-1213-446b-b38a-4ac122aa7823", "sighting_of_ref": "indicator--4e6a0b84-8ea9-46c6-901f-f69dcb65863d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d406407-30d8-405c-9672-62007578993f", "sighting_of_ref": "indicator--885f2e17-e8c3-414b-b618-4031c0c81145", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bd851a-b4db-4eab-9d96-1624b52024c5", "sighting_of_ref": "indicator--885f2e17-e8c3-414b-b618-4031c0c81145", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70088989-d6c0-4a92-a208-14a7e31b4bab", "sighting_of_ref": "indicator--64082ad1-0442-4fc3-97ce-b3edc4ae315e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89820835-6021-441b-a1ed-2d4b56a656e3", "sighting_of_ref": "indicator--75439022-4c3e-47ca-ab3e-ad61fbd871d3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f731452-0f1a-40cb-b5d0-79a0710a742c", "sighting_of_ref": "indicator--75439022-4c3e-47ca-ab3e-ad61fbd871d3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170c17f5-75be-4adb-96b8-4fe18e80a550", "sighting_of_ref": "indicator--c4a7cc8a-1462-4b1d-96a3-1bc5ec5b065b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e53939-0cc2-4892-9e24-0f8b920ebd9f", "sighting_of_ref": "indicator--d66f907c-19b6-4b3f-b7a4-a1d5584a2a3b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8338562b-be65-42a7-b26a-f0bffcbd605b", "sighting_of_ref": "indicator--d66f907c-19b6-4b3f-b7a4-a1d5584a2a3b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c4d042-7008-472e-a8db-77b35946006e", "sighting_of_ref": "indicator--c1252fd9-db73-470c-b965-ab55eec2e573", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c015fc-8b4d-434b-b6ef-853a43c95e4d", "sighting_of_ref": "indicator--c1252fd9-db73-470c-b965-ab55eec2e573", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454ab223-9a9d-41af-9c11-e832a8b1c626", "sighting_of_ref": "indicator--41f07bb4-9ee9-462c-9596-b7e74ff9bfd2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a5fde3-3012-4f08-b07c-7bfb4cc62c0b", "sighting_of_ref": "indicator--4b0a0c93-d252-442e-9856-dae8044c398d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5a07b7-3f77-4590-949a-52b5178b372f", "sighting_of_ref": "indicator--04c744b9-d990-485d-9117-a3952daa5e68", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ca17ad-7675-4e90-97fb-120672b52acc", "sighting_of_ref": "indicator--5677fdfb-da84-4ab4-9c96-c2e921639de2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41be37a9-f4f3-44fb-8754-d477f90fbb7e", "sighting_of_ref": "indicator--b8b36c0a-6caa-418d-b1c6-eed6bbe4d157", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2d0728-4a92-411e-8425-203315d3a4be", "sighting_of_ref": "indicator--b8b36c0a-6caa-418d-b1c6-eed6bbe4d157", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6f6fbb-b3b5-4110-95ba-19d035d65814", "sighting_of_ref": "indicator--ed5858d2-bbe2-488c-b878-675b35d8fe13", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c74b37-7dac-496d-8985-4fe985fe34bc", "sighting_of_ref": "indicator--ed5858d2-bbe2-488c-b878-675b35d8fe13", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d23eb8e-7a59-4e56-916d-d6c26e83b071", "sighting_of_ref": "indicator--ed5858d2-bbe2-488c-b878-675b35d8fe13", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2f0c2a-a1b2-4e0c-b647-5c0b61db3b55", "sighting_of_ref": "indicator--7a5a14cc-5038-4d5d-8a04-e9960b1d357e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76202153-6bf5-42b0-9a0c-bf692235e52d", "sighting_of_ref": "indicator--7a5a14cc-5038-4d5d-8a04-e9960b1d357e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d12e01e-8c3e-45c6-939b-7a49cb571515", "sighting_of_ref": "indicator--e7773d04-f0c9-41b0-aa92-6e05e6414ff4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c89e9c-cb65-4d4b-9aa1-151b15f03784", "sighting_of_ref": "indicator--8aac2629-a37e-41d6-9348-c9cc53a0b761", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b040808-8c0d-4cd9-a552-82a3c9fdf127", "sighting_of_ref": "indicator--88919133-f896-4730-8f8b-5311b6d2435f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28569b2-5a5d-4d7f-906b-d7f49895f533", "sighting_of_ref": "indicator--88919133-f896-4730-8f8b-5311b6d2435f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b12b783-1c9a-4c43-9a71-d641151cdbc2", "sighting_of_ref": "indicator--9dfbfe1f-f3d2-4f53-adff-9e2d65945213", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34259381-1ccd-4d1e-a0c1-807f25a6ebc8", "sighting_of_ref": "indicator--7b789c55-c448-4507-a8f7-f613d53f3b83", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51528b18-e224-444a-af41-9460cf1b3617", "sighting_of_ref": "indicator--55514a64-3dc3-454a-8ec3-cd41725a487f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2be26b-fcba-44b0-a45d-ad05d8b62b5e", "sighting_of_ref": "indicator--512d09af-bec9-4d5c-8048-083bc4b6c6fa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9802bb45-23ac-4022-b33f-f6319672dc84", "sighting_of_ref": "indicator--512d09af-bec9-4d5c-8048-083bc4b6c6fa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d26752-abc7-4b08-9e04-b4862e1d167c", "sighting_of_ref": "indicator--c491eb3f-86aa-440d-a716-bab5e3faa44b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c6ae48-a041-442b-9080-07baf0c87846", "sighting_of_ref": "indicator--c491eb3f-86aa-440d-a716-bab5e3faa44b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3e0873-76a5-4c9d-ad75-b831514ead76", "sighting_of_ref": "indicator--192a435d-60b6-4b8e-ba2f-700d8e4082e2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1eb89c-ba5d-4a0e-994b-ef5d545a363f", "sighting_of_ref": "indicator--fbd762cc-4ecd-446f-a229-1b337526c2d2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43eb039f-0660-49de-8696-cf49e51c4dc3", "sighting_of_ref": "indicator--fbd762cc-4ecd-446f-a229-1b337526c2d2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c435581-5849-4ccc-b20b-707c5396de6f", "sighting_of_ref": "indicator--061d5c9a-fb8a-4570-af7b-9ef3f793551b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662535a2-83b0-4e1d-8e8e-8c479816e61c", "sighting_of_ref": "indicator--b5095163-97d9-44cb-bec8-8f04acbdba2c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97752f7-da04-4e4e-841f-d7b59e5e943c", "sighting_of_ref": "indicator--4f0ca758-2565-405f-a6c2-29a3f5b5e3ab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c8dc6d-04ac-4794-a4e8-4bd469a79d56", "sighting_of_ref": "indicator--aac7024d-e8e8-4965-aa65-10c877743bf5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ed5af3-65c7-4c19-bef7-570be9ee1030", "sighting_of_ref": "indicator--aac7024d-e8e8-4965-aa65-10c877743bf5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a61130-1fd4-4ed9-96c8-bd2d571c246f", "sighting_of_ref": "indicator--e60bfe97-1820-42d3-ab35-3bdbd223afa9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490a8a1d-d61b-4488-9735-96accbfa2fe0", "sighting_of_ref": "indicator--e60bfe97-1820-42d3-ab35-3bdbd223afa9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299fc914-c15e-4ae9-be1a-e455c6162930", "sighting_of_ref": "indicator--8de919f3-8a8a-4be4-8ba3-413ec491f291", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5e5eab-1e14-465a-b480-3eccaa0de110", "sighting_of_ref": "indicator--9ce6db9d-c57e-454d-825f-0ce5ef4d378b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68abbb42-8728-4a36-9e76-b71c291dbe45", "sighting_of_ref": "indicator--9d16e67e-5db0-4227-b7d9-f6a1787039c6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a289c0b3-60b7-4f49-acdc-f98466634e96", "sighting_of_ref": "indicator--9d16e67e-5db0-4227-b7d9-f6a1787039c6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6e0802-484f-4445-8bc0-18d1badba536", "sighting_of_ref": "indicator--f1b121e1-d0bd-47aa-991d-45f152dc3ea3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e870a1f-fe64-453d-99d6-ca1c950053d5", "sighting_of_ref": "indicator--821ce22c-40b2-4770-82c7-da4699372a3d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d806c628-722f-4630-9b15-25129f318a39", "sighting_of_ref": "indicator--a421eca6-9d67-4292-8775-440eb56f18af", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8bcdf1e-d898-4290-a637-4a21e25e2326", "sighting_of_ref": "indicator--75367b73-832f-4533-aeb7-7ced3fe79fb6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5c728e-ca0b-4190-a3a9-b3778fc48dac", "sighting_of_ref": "indicator--75367b73-832f-4533-aeb7-7ced3fe79fb6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0d512b-ecf4-4da1-8056-e1b64ae40a61", "sighting_of_ref": "indicator--75367b73-832f-4533-aeb7-7ced3fe79fb6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d55e48-cbcd-4a86-ab63-e06beaf25589", "sighting_of_ref": "indicator--c1daa350-c666-4f66-8bc2-7fa7e39b1ced", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbd64b2-fca4-43eb-810d-8f304fc4f7b5", "sighting_of_ref": "indicator--a5a58f6d-68fe-45a4-b88d-9217d0ec9214", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b85a8b7-6a4f-428f-bafe-24a0fd0212c0", "sighting_of_ref": "indicator--ed88f777-dcf1-4e29-9861-acf9ddc90ba3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f264441-8c93-459e-ad79-560b3d6d6999", "sighting_of_ref": "indicator--ed88f777-dcf1-4e29-9861-acf9ddc90ba3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f04c14e-f190-4f23-bad5-0dd9b3cbed54", "sighting_of_ref": "indicator--ed88f777-dcf1-4e29-9861-acf9ddc90ba3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0ac543-ea74-4966-b460-0b399d60ba23", "sighting_of_ref": "indicator--2976d3a2-43bb-4468-a2fa-3edf94d102a4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9757bcb2-9022-4293-a27c-47a225d25cd5", "sighting_of_ref": "indicator--2976d3a2-43bb-4468-a2fa-3edf94d102a4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5236d6-73d9-40c7-b665-2103083db494", "sighting_of_ref": "indicator--3fe893ba-b33d-4361-aabe-a66013a6dbac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe03b87-9f04-43f0-9873-11611113d0a0", "sighting_of_ref": "indicator--3fe893ba-b33d-4361-aabe-a66013a6dbac", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5df979-45f9-41d6-9fd2-ff31d0ec3589", "sighting_of_ref": "indicator--3fe893ba-b33d-4361-aabe-a66013a6dbac", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94148253-b1c6-411c-81b2-c928697b4a9a", "sighting_of_ref": "indicator--fd73fa50-975d-48ac-9705-4e5db4d9b8b3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3dc38ef-644a-40c4-82fa-9b818c338b7f", "sighting_of_ref": "indicator--f802d880-ef13-4875-bc69-ed30cd4acfe7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4f3681-e1bd-457c-969e-2b9d1333760c", "sighting_of_ref": "indicator--887595ca-d152-4098-95f6-ae1b34393910", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9a035b-fc75-4bc3-97b2-1760d75ee142", "sighting_of_ref": "indicator--887595ca-d152-4098-95f6-ae1b34393910", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdce6316-859c-4b61-ab9f-c8d963b2d628", "sighting_of_ref": "indicator--7df7ee82-0361-44e0-990a-5e640691554d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa09315-ea71-44e8-98cd-88dc22468ff4", "sighting_of_ref": "indicator--7df7ee82-0361-44e0-990a-5e640691554d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e35243-ce89-47df-b477-3b2becd982b5", "sighting_of_ref": "indicator--7df7ee82-0361-44e0-990a-5e640691554d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614761d3-3afe-4f0f-8555-968b3d7f58a4", "sighting_of_ref": "indicator--d3e0a2c2-5aa1-4e1e-9200-a0ba87a3b2be", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03f4d41-255e-4bd8-a442-9f789f65760c", "sighting_of_ref": "indicator--1072ecd7-46f0-44e2-8b16-3dd454d34229", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6124a113-c60a-453f-bbe4-863030cbe020", "sighting_of_ref": "indicator--1072ecd7-46f0-44e2-8b16-3dd454d34229", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350118c9-8690-4c2b-91d2-d01002f886cb", "sighting_of_ref": "indicator--1072ecd7-46f0-44e2-8b16-3dd454d34229", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3580e6fc-98a3-4277-8eb0-725d05f75145", "sighting_of_ref": "indicator--8bd84216-5712-4a8e-a81c-d609b89bcb18", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaae64b2-f2d8-441d-9597-42a5b3c36270", "sighting_of_ref": "indicator--647360e8-5b14-4a4f-84cf-5b3f529d1b17", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2259cb48-6786-4f96-bd7e-9593c332178d", "sighting_of_ref": "indicator--ee3d716b-5904-444e-a495-ed25e510adab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66abbee-40b0-4767-ae9e-ef868ebb960b", "sighting_of_ref": "indicator--ee3d716b-5904-444e-a495-ed25e510adab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fecbacc-b8a3-44f7-91e5-cac026384171", "sighting_of_ref": "indicator--92252c5c-bc59-4a64-993d-68af003bc071", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63347d8-7d40-4f5b-9733-2c5c3e60a1aa", "sighting_of_ref": "indicator--0d53d603-8e3e-42c6-a7e3-83720d1ba4cb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99760db1-c7ed-4a38-82c8-39b549e30f7a", "sighting_of_ref": "indicator--0d53d603-8e3e-42c6-a7e3-83720d1ba4cb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9290a9d-fe0e-4186-93c7-a034e894dbb9", "sighting_of_ref": "indicator--0cc43422-1bcb-4838-87b7-6e9fd8679db0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9159f039-8dd8-45f4-be83-277a3c5844ae", "sighting_of_ref": "indicator--56c43b16-0f86-4efe-b530-695755ceee67", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48087442-9055-4e8f-af32-840609d3b754", "sighting_of_ref": "indicator--56c43b16-0f86-4efe-b530-695755ceee67", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f6d717-c807-4df0-9361-7f091c4b8b90", "sighting_of_ref": "indicator--56c43b16-0f86-4efe-b530-695755ceee67", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf2a9a2-6b1f-4cb4-8215-ad24388308cb", "sighting_of_ref": "indicator--ecfa93bd-fa6b-4b04-a910-94c55c605b3c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21cb355-8238-47a4-a011-e777ba100e36", "sighting_of_ref": "indicator--ecfa93bd-fa6b-4b04-a910-94c55c605b3c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0284a879-674d-4043-ad7d-a0ae9ec9beef", "sighting_of_ref": "indicator--8a59a860-e9a4-4fad-b835-a4d39957bc2c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68712dbf-9f01-44a0-b604-8471035dcb86", "sighting_of_ref": "indicator--8a59a860-e9a4-4fad-b835-a4d39957bc2c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271b25f8-6132-4e8a-a5c1-ec507ff3a1c7", "sighting_of_ref": "indicator--d5a26fa5-39ae-49a3-860a-4aafebbca6a9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a8a8a7-e782-42f8-898b-53356223b9dd", "sighting_of_ref": "indicator--bb941689-c685-451d-bbba-ef530925a11d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644f02a4-ea98-4e77-8a45-d7513231d4e8", "sighting_of_ref": "indicator--4d723957-0a0f-4e19-aac7-3c8f404df075", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed72c1ad-0695-44c9-a6da-c06765761206", "sighting_of_ref": "indicator--c759e10b-ffb7-464e-89bd-d2d4f72b6efe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54cb4e77-e9b6-4a72-9237-567e32e01ea5", "sighting_of_ref": "indicator--f8bdeb3e-4cb9-4cf3-920b-60bdd57078d1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3825624-ec39-44fe-84b8-73f6198871bc", "sighting_of_ref": "indicator--60e884ee-69a4-4482-a2cd-4764c9b6d4ce", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe26782-ccca-4d2b-8605-aa9f3aeee691", "sighting_of_ref": "indicator--735673e1-617a-4406-a36f-c24d66141be5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f982de-044a-4b52-bad8-d88ecbcf3d05", "sighting_of_ref": "indicator--de2e8ee3-fde3-4346-a2c1-80fe7a83da93", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5651de-9f32-4ec0-9bce-4319ed5e35c7", "sighting_of_ref": "indicator--de2e8ee3-fde3-4346-a2c1-80fe7a83da93", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a848d7-6a2a-4de6-84fa-6428d696460e", "sighting_of_ref": "indicator--de2e8ee3-fde3-4346-a2c1-80fe7a83da93", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe1ce9a-0f7f-4e35-bcb0-311497abd4da", "sighting_of_ref": "indicator--a7c1e63c-196d-4972-9ee6-461888b511cd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405c55ea-7157-4aaf-819e-2efb74201c4a", "sighting_of_ref": "indicator--16a752d9-546d-491a-8c5a-b0bc7f6a9b37", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455e4990-b91a-4bef-ba98-a64ca3754812", "sighting_of_ref": "indicator--16a752d9-546d-491a-8c5a-b0bc7f6a9b37", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bad3ef0-adb3-4ee1-a145-d2bcf1b02a97", "sighting_of_ref": "indicator--a3710d1e-d79a-47d6-8bc0-9111274c42f0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e60373-a048-4bf6-8edd-949c59c17866", "sighting_of_ref": "indicator--a3710d1e-d79a-47d6-8bc0-9111274c42f0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d0444f-f265-417b-9bfa-8c8b06ee1782", "sighting_of_ref": "indicator--a3710d1e-d79a-47d6-8bc0-9111274c42f0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288e87f6-4d23-4e72-8130-2c0e70011ba2", "sighting_of_ref": "indicator--9b767e65-f87b-4321-b212-64efbf5486fd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e187b6-9ec4-4586-a0c1-2cb6db5e97f7", "sighting_of_ref": "indicator--9b767e65-f87b-4321-b212-64efbf5486fd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305de642-e77c-42e7-975f-fb25d1501eb2", "sighting_of_ref": "indicator--0f5f844f-0c25-4ef1-a232-3980fb139759", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88594382-fa40-4cc8-94de-74f64d21cdd8", "sighting_of_ref": "indicator--0f5f844f-0c25-4ef1-a232-3980fb139759", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e303ab39-a3da-42c6-b2a6-1d3b0ec5214d", "sighting_of_ref": "indicator--9ab099d9-2a3d-4518-b1b1-54fa843a3a5b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f178cf0-4190-48ae-8fe2-545248aa4b03", "sighting_of_ref": "indicator--9ab099d9-2a3d-4518-b1b1-54fa843a3a5b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50ff7de-a33b-4034-981a-c01c2a4c9a3a", "sighting_of_ref": "indicator--bed653d2-f05d-4d1f-97ef-8966e215d944", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07320e42-083b-40d3-9b99-b5b6a001a99f", "sighting_of_ref": "indicator--f92ed6ee-f7ab-4cf7-9479-768d03d0c7d5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a3ec3b-e5ef-4771-9a86-6091fc018c42", "sighting_of_ref": "indicator--7b462edb-ecbd-46d2-8838-524bdb688397", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da20c128-2c52-41b5-951a-e547a0920803", "sighting_of_ref": "indicator--7b462edb-ecbd-46d2-8838-524bdb688397", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935c4dec-c823-4735-afff-27afe72e3ca4", "sighting_of_ref": "indicator--4c4b19ac-1eaa-4bb8-9b51-bbcd42a9a677", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802e61ab-5463-4702-afc0-6b243b5c3194", "sighting_of_ref": "indicator--4c4b19ac-1eaa-4bb8-9b51-bbcd42a9a677", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f12707d-8f22-43d3-aa94-908308477e36", "sighting_of_ref": "indicator--4c4b19ac-1eaa-4bb8-9b51-bbcd42a9a677", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2de341-e6e1-47e0-acb9-1725c96d8c7a", "sighting_of_ref": "indicator--98b7b106-57a8-46ae-ade4-3435d413e8f0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8493b901-e7d6-4da8-b7a6-9c7410fc6bee", "sighting_of_ref": "indicator--98b7b106-57a8-46ae-ade4-3435d413e8f0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d5e230-2c6c-4a20-8ecd-aa63e0098d4b", "sighting_of_ref": "indicator--1f8b1eaf-d0cf-4a45-b1f9-e5430b02ca38", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb46f3c-5acd-439c-9723-af729c70b0a7", "sighting_of_ref": "indicator--1f8b1eaf-d0cf-4a45-b1f9-e5430b02ca38", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d4aebb-ae33-48f6-b806-b08504f86a78", "sighting_of_ref": "indicator--b1affb81-edf3-45a4-a830-2041e62e699a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674aaece-2ff4-4feb-b9a9-62089c718a3d", "sighting_of_ref": "indicator--5305f178-4ff3-42f3-aab3-b9fb1eaf5b22", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4dac45-ada6-4919-ac63-eccb61558298", "sighting_of_ref": "indicator--ce27f8ac-2ef1-46c8-bec2-0518eb91b8bb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79373999-8866-4fd0-8541-76ac22e69a5b", "sighting_of_ref": "indicator--452a3cf4-1ee4-4283-be14-800f89a46363", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce919325-1534-42dd-9d9d-42ef67c98e0d", "sighting_of_ref": "indicator--452a3cf4-1ee4-4283-be14-800f89a46363", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca0413b-fa89-4241-8e34-1896d3d930d9", "sighting_of_ref": "indicator--d85908b1-7112-499e-b921-fe55cf23fbbd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6e43c1-b4ea-426f-a6d9-c31dba810c01", "sighting_of_ref": "indicator--569abfba-083a-4c1d-8346-ce05e03f66c0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de169b0f-8c5d-429c-8bf2-15781b0dc7d8", "sighting_of_ref": "indicator--569abfba-083a-4c1d-8346-ce05e03f66c0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e400a4b-ae87-4543-bdfe-ce08ac81a6f4", "sighting_of_ref": "indicator--569abfba-083a-4c1d-8346-ce05e03f66c0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b22460-77b3-4b69-82ae-97cb77411a01", "sighting_of_ref": "indicator--bd84336c-a283-44cc-8997-c8cfeabd1767", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eda4139-32e9-4d36-ae5a-7fd03e41df8a", "sighting_of_ref": "indicator--18dd3241-ac08-4a9b-a222-7a7867775da7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a501ac1-6a23-4e36-ae71-9b65240f66d2", "sighting_of_ref": "indicator--8ff750a4-dbd7-4a6e-a0ba-ed9c39430ef2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8dc1528-072c-489b-9740-79dc228f23ba", "sighting_of_ref": "indicator--8ff750a4-dbd7-4a6e-a0ba-ed9c39430ef2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa2035b-243e-4d96-9535-5d483a58f7ba", "sighting_of_ref": "indicator--f7b7988c-421d-4047-95da-42c34f65af40", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a5d101-b560-4190-8bc5-aab072f586df", "sighting_of_ref": "indicator--2c69cca7-d3cb-4239-a47f-5646b18830ca", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2139291-68b0-4be4-916c-6309bbe0f53e", "sighting_of_ref": "indicator--2c69cca7-d3cb-4239-a47f-5646b18830ca", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e5e5cb-35bd-44d7-a360-d1c19f1369eb", "sighting_of_ref": "indicator--e231932b-2287-421c-a112-df84e492543e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737e08a3-10e6-42cf-aa3d-6cd64273fadc", "sighting_of_ref": "indicator--e231932b-2287-421c-a112-df84e492543e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6776b9-996e-4998-a808-fbd0a0b60486", "sighting_of_ref": "indicator--db500ada-95be-4d6f-b5e7-461c2a227e50", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cfb5f7-713d-453c-b860-a3f49d963e90", "sighting_of_ref": "indicator--aff2bf06-b9c9-4bf6-a5d6-1180a4aeed2b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ea2d4e-cbd3-4cb9-8cb2-9c976b5979ad", "sighting_of_ref": "indicator--aff2bf06-b9c9-4bf6-a5d6-1180a4aeed2b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18004a33-ad5b-48d9-b78f-2c9bfed84f1f", "sighting_of_ref": "indicator--3fba49bd-68c5-4971-8db1-935335e25435", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16fc425c-e733-4cba-b9db-2521dea1f247", "sighting_of_ref": "indicator--54bb5480-133e-4ce1-81b1-c37e29bc6c51", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235cd0bd-be34-44f4-9cbc-15d47c1026b0", "sighting_of_ref": "indicator--54bb5480-133e-4ce1-81b1-c37e29bc6c51", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2151cc2c-809c-4da9-8db4-b774e5c593ac", "sighting_of_ref": "indicator--a5d099ed-b3c8-4b10-a06f-a8ff18d79510", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c026f3a5-b6a2-4d88-bbff-173cf6efd5a3", "sighting_of_ref": "indicator--ef69592f-47c1-4a99-9770-4e54a2c8002f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc86c8c-3aa5-4a78-8fec-55d0e5fe8b9b", "sighting_of_ref": "indicator--1cfc85ec-0bc0-4ad2-9035-8f1c87ff894b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b45f29c-39c1-4c89-885c-262bef4f7d93", "sighting_of_ref": "indicator--1cfc85ec-0bc0-4ad2-9035-8f1c87ff894b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c071914e-3843-468b-97a2-e78797ae3050", "sighting_of_ref": "indicator--1cfc85ec-0bc0-4ad2-9035-8f1c87ff894b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b2f28e-3e31-43e5-b13b-69e4785cc586", "sighting_of_ref": "indicator--3e69ac83-0ac2-4fe1-b91b-871bc30789be", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13d143f-8e1a-4bcd-aff2-718e6a3d2676", "sighting_of_ref": "indicator--3875b62d-608d-45b7-9f25-e7c6016e5b12", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09895281-0f79-4831-8d3f-64b2808365d3", "sighting_of_ref": "indicator--3875b62d-608d-45b7-9f25-e7c6016e5b12", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae6a332-a502-4a28-800a-bc0df1f04171", "sighting_of_ref": "indicator--c50a4a96-e531-46b0-9a23-b6e09ca45644", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd111e1-9e47-45ac-8699-95de6095a14a", "sighting_of_ref": "indicator--e00a5612-75a8-47ac-a4d3-98081bedcba7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c24445-0456-4a44-8c45-2ea86c8acc80", "sighting_of_ref": "indicator--886ff87b-219b-4323-9e7a-a2396be26d63", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896a3338-46b2-4f35-af3c-442a740a1dd9", "sighting_of_ref": "indicator--886ff87b-219b-4323-9e7a-a2396be26d63", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3491d8-2daf-4087-bca0-a4dbb758e357", "sighting_of_ref": "indicator--4b449db2-3faf-4e0d-b040-19121ebda9ab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1432bc-36c2-48a6-9e34-b3343e1f4416", "sighting_of_ref": "indicator--4b449db2-3faf-4e0d-b040-19121ebda9ab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18132e1-97fc-42ff-b9c7-ea86ac4ffbd0", "sighting_of_ref": "indicator--5ab7f6e7-6ae6-4c5e-9a47-eb7385a40cab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf265408-b164-4583-bfbe-112fb953c95c", "sighting_of_ref": "indicator--5ab7f6e7-6ae6-4c5e-9a47-eb7385a40cab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58645b5b-362b-4e0c-a31e-49dc78c8ae51", "sighting_of_ref": "indicator--98363730-9feb-4ed6-8182-b0a2601aa916", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4c97fb-06ad-4da2-85fc-6a7038281c6b", "sighting_of_ref": "indicator--e7663913-c0ae-4ca1-ba90-5ea334f530b6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489f2177-b77a-43ed-8db1-d0102900da47", "sighting_of_ref": "indicator--e7663913-c0ae-4ca1-ba90-5ea334f530b6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc7bd53-4feb-4a99-bcc3-3d89392fcc93", "sighting_of_ref": "indicator--e7663913-c0ae-4ca1-ba90-5ea334f530b6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8d4840-554e-49d8-81d6-21e029b9a97b", "sighting_of_ref": "indicator--ae29cf0a-004b-44c1-a02b-c492889f1ff4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872027ca-2699-44a0-92cb-8aae2ba6cb30", "sighting_of_ref": "indicator--ae9eb607-252c-4120-aea3-1e416809cf55", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c3cd0a-99f1-4f49-9b67-c50e0c982e38", "sighting_of_ref": "indicator--ae9eb607-252c-4120-aea3-1e416809cf55", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fb6e13-7984-4b5f-90a4-87e4125e1ec6", "sighting_of_ref": "indicator--098594fc-dc17-4658-8c0c-3a3f81b0d4a9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828d3181-e20d-4714-9415-d105218ca7d7", "sighting_of_ref": "indicator--37e57f8a-7d02-413b-9ff5-3d28e947c71e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb4731a-53e7-4015-903d-6f6fc6d5287e", "sighting_of_ref": "indicator--a6dde99a-ea56-4755-ae3e-16f33504d426", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78359d3f-0c48-46ae-bdf3-a70b161beb7c", "sighting_of_ref": "indicator--883d78f4-d626-4cb2-b1ad-827ac88eb49d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf60b05-c808-4889-bae5-91c8b8e0d442", "sighting_of_ref": "indicator--883d78f4-d626-4cb2-b1ad-827ac88eb49d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1ed621-7ad8-48f1-a066-29489dad428a", "sighting_of_ref": "indicator--4f2de164-0ff9-43ea-97b5-7816b8ef34e7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9eb8248-38b3-4cb0-ac61-ce0fb813bb42", "sighting_of_ref": "indicator--f5d21533-7518-43dc-aa67-1a007140928e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6862c246-cf10-4982-a7ee-96769b9bc96b", "sighting_of_ref": "indicator--f5d21533-7518-43dc-aa67-1a007140928e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97cf92f6-03ad-4d60-9435-9b76c2bde901", "sighting_of_ref": "indicator--1d65e238-e64d-4150-bf92-d230e72fa445", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179971a6-6ddd-46a7-8adb-f8673335a95b", "sighting_of_ref": "indicator--23ac587b-938b-41b4-868e-489237d3eddd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f066f4-89b8-439d-ace2-9769a3b92bbe", "sighting_of_ref": "indicator--6046b1f3-f76b-47b5-85b5-3fa2a3de6bca", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1a74aa-c698-429d-bc1d-3e1537e03155", "sighting_of_ref": "indicator--31f8fd8b-8083-4149-a13e-89f730b87c34", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a1fed5-d767-4688-95ba-d181fbb8ec76", "sighting_of_ref": "indicator--31f8fd8b-8083-4149-a13e-89f730b87c34", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6e5b9b-e419-4eb2-b995-e8c702e7cb78", "sighting_of_ref": "indicator--316d0106-7d7b-41c2-bc39-85e21eb5054c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00f577d-63bd-49c5-89dd-6d1f0aa940f6", "sighting_of_ref": "indicator--316d0106-7d7b-41c2-bc39-85e21eb5054c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6498ec2c-13c6-466d-a87f-e39eecbc7108", "sighting_of_ref": "indicator--cdd1a256-d5fd-493f-85a2-adcaf632e9ee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c592ba60-a7d8-4810-b44c-f7cf307438ac", "sighting_of_ref": "indicator--f211c7a8-a353-4034-aa2e-7f0f664189d7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a3784c-16c6-4d9c-9366-30c99cea5fb0", "sighting_of_ref": "indicator--f211c7a8-a353-4034-aa2e-7f0f664189d7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fb9ccc-ec26-4288-b132-5330fe2770d3", "sighting_of_ref": "indicator--6917098f-eb2c-428f-89cb-95ee8c67f644", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae79efe2-3078-46e4-950c-318c0da72d02", "sighting_of_ref": "indicator--6bc523cf-7b58-4296-9995-b34e9b52df42", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3445541f-9615-4337-9017-bff07d0d4138", "sighting_of_ref": "indicator--6bc523cf-7b58-4296-9995-b34e9b52df42", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6214508-7585-4ce7-a8d9-83c922675b80", "sighting_of_ref": "indicator--43804fb5-4062-42a7-8728-24c0360966ba", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a5e092-968c-4ae6-aef5-8305983910fa", "sighting_of_ref": "indicator--d10c3d82-72db-449a-9210-f7ea0b93105a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921d547c-e26f-4dde-a241-7a179f8f46e1", "sighting_of_ref": "indicator--d10c3d82-72db-449a-9210-f7ea0b93105a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20c36ad-676e-434d-ac40-6ec7f16e37a3", "sighting_of_ref": "indicator--ad11391d-a3c0-4881-9501-ccc01e5687da", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46baf761-0f67-4868-99c7-0c8a1f8a76ad", "sighting_of_ref": "indicator--afa72fa4-c0f0-4d61-a241-8ecd3c126c0a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea2fc4c-e5c7-4a90-a62d-1af9c2833634", "sighting_of_ref": "indicator--49789aaf-49b7-4562-ad97-0d921165c364", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb039915-585e-4abb-b305-d153f2b1dbf2", "sighting_of_ref": "indicator--49789aaf-49b7-4562-ad97-0d921165c364", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1663d5-0d50-451c-a9a4-bb9954ce424b", "sighting_of_ref": "indicator--8eedf982-9a0e-4b5e-83d4-bfd5f7922946", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708d9fda-841b-4fb8-8d33-ef401f30c153", "sighting_of_ref": "indicator--8eedf982-9a0e-4b5e-83d4-bfd5f7922946", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da860e58-d451-407d-a512-caeee1e5f5d4", "sighting_of_ref": "indicator--8eedf982-9a0e-4b5e-83d4-bfd5f7922946", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af4cf06-0bfe-44ff-902d-fb28cc239e2c", "sighting_of_ref": "indicator--d26a29bf-328e-4b38-a29a-5395c3bd796b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed674a3-1f7d-4fdd-9b26-6f1765183c0c", "sighting_of_ref": "indicator--303298e3-c055-4f2c-82a6-0f95cc1190cb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ba2f77-93f3-4765-addb-e5a1f1e52388", "sighting_of_ref": "indicator--453804f5-c9de-40b7-9a5e-819ef4ea124a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59aad002-c2d8-47dd-8a39-3e85e00804b0", "sighting_of_ref": "indicator--f3251637-ea12-4bf2-af9e-1787adfdfba4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe1b9d8-712d-4570-9388-9d2016d0a15f", "sighting_of_ref": "indicator--800a1f1f-48dc-4535-8a66-a13007ce7f2e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219148ef-c0b8-42be-8934-d00313f1ce7b", "sighting_of_ref": "indicator--800a1f1f-48dc-4535-8a66-a13007ce7f2e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd01f15b-685b-47ca-8104-492e8b4f8e6e", "sighting_of_ref": "indicator--c001834a-7b11-4c46-bd90-b546fbfb511d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e129a93-9476-4670-82a6-1bcae78495be", "sighting_of_ref": "indicator--468cf7f9-23fb-4bd3-b384-4375676487fc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469f62c8-84cf-44d6-a88f-50cd138c131f", "sighting_of_ref": "indicator--468cf7f9-23fb-4bd3-b384-4375676487fc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f314a19-7f97-414c-b1d7-67ab65e5f870", "sighting_of_ref": "indicator--909d256d-4c70-49b5-a911-42c39ad4a5fb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37ed663-7c66-43d8-8d61-d5b71e499462", "sighting_of_ref": "indicator--9b7dcf4c-799e-4da1-a040-b91b627aea5c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f743b7-6628-403e-b2b6-540b54116c6c", "sighting_of_ref": "indicator--9b7dcf4c-799e-4da1-a040-b91b627aea5c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff5313e-696d-4fe0-8930-d44cbe660d97", "sighting_of_ref": "indicator--b488133b-52db-4f4a-86a1-b89c29e177ed", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef3f59e-55be-441a-9b33-6032f59b011b", "sighting_of_ref": "indicator--504910bf-8833-4821-93b4-1f67c91c9e75", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b939395c-f6f9-450c-8a67-d301e87e649b", "sighting_of_ref": "indicator--504910bf-8833-4821-93b4-1f67c91c9e75", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9d0487-628a-466d-a899-fbea07ebabb0", "sighting_of_ref": "indicator--2077d76d-4fbf-45cd-86fa-4e15e85059dd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f85e440-166f-48c3-82a9-55a8a261050e", "sighting_of_ref": "indicator--5c35cf85-e65b-4ceb-8889-e35a8850b5ff", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8942212-adc1-4ce2-a8b8-11546e1e7bd9", "sighting_of_ref": "indicator--5c35cf85-e65b-4ceb-8889-e35a8850b5ff", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db1d89d-f7d6-47b4-885c-87a73ac9ab1d", "sighting_of_ref": "indicator--e2906cca-4b0b-4734-b2e2-6e2ade94950d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d35c66-0546-4d8e-885c-156eca9087e7", "sighting_of_ref": "indicator--e83a5f28-a670-47f3-a458-9b975f3365cd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c25450-bb52-45cf-a76c-ebd226f55c21", "sighting_of_ref": "indicator--0f1c770f-9658-4a20-91ff-fb005ee2c72a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393251a6-a039-4b6c-b86a-8a80f2215f30", "sighting_of_ref": "indicator--d2a8eba0-3904-4ccf-9785-4b6230e5b37b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e4c72e-2839-4316-aa97-31bb137853a3", "sighting_of_ref": "indicator--d2a8eba0-3904-4ccf-9785-4b6230e5b37b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0711e793-49b6-4fc0-b0aa-abb1671be4cd", "sighting_of_ref": "indicator--d2a8eba0-3904-4ccf-9785-4b6230e5b37b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52546ed7-0bb2-4a7e-9375-82fe3ed835c7", "sighting_of_ref": "indicator--1fcc91d9-d624-450d-8ac0-80b2f46c8e8b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3845e384-ada2-4fb2-b42f-ceac112238a0", "sighting_of_ref": "indicator--1fcc91d9-d624-450d-8ac0-80b2f46c8e8b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019d96ee-ac92-4992-ac59-a3a7f3788279", "sighting_of_ref": "indicator--27522362-182a-417a-8bdd-8f63d3bf7341", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838803e9-08b0-4d8f-a64d-049bafe2233a", "sighting_of_ref": "indicator--27522362-182a-417a-8bdd-8f63d3bf7341", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e397f4a4-5814-4116-b2fd-597dc987c67b", "sighting_of_ref": "indicator--dbe42201-ecad-4eb6-b048-a6d04003f7d9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57676ef-05f3-4662-85ec-27cc9627e112", "sighting_of_ref": "indicator--44963794-6dde-4a43-acdf-5e137270b83c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d78c350-08ba-4182-a5d8-a35f043df6cb", "sighting_of_ref": "indicator--44963794-6dde-4a43-acdf-5e137270b83c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90ccac3-1327-47b9-b828-004ea3e054ab", "sighting_of_ref": "indicator--7bd65158-207e-4bc9-961a-0ff05821cfc8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f9eb7a-0941-421d-aa33-6de4c2a53830", "sighting_of_ref": "indicator--7bd65158-207e-4bc9-961a-0ff05821cfc8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31791d8-82c5-4f46-b76e-a7505f809ba5", "sighting_of_ref": "indicator--ba7fac78-d329-48a3-bb92-f5f1b47ae6eb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0aa4a43-5842-4210-b29f-a19cdc5eea80", "sighting_of_ref": "indicator--ac5c51a2-ea92-49eb-b980-df67ee0e4f34", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f962a14d-0649-4694-80f0-1c9d8bef19fa", "sighting_of_ref": "indicator--ac9dc51a-dc40-40a8-bbf2-865ab2b56524", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ff5801-a9ff-4443-b722-8c446c726790", "sighting_of_ref": "indicator--ac9dc51a-dc40-40a8-bbf2-865ab2b56524", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60594c55-2b28-41c6-8c0f-b39f4b610be2", "sighting_of_ref": "indicator--60c26cbb-9bc7-4ea6-8864-b410c3a90e1b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c382b37-eb1a-4ac6-a58c-0452fb07215c", "sighting_of_ref": "indicator--307e6d9b-ec7b-4653-a498-977be3fed7d4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e6ad5e-8fa4-47c5-8be9-eacdaf7da60f", "sighting_of_ref": "indicator--c418dd8c-3b1d-4696-a8a0-1d2559f5f933", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780e8f94-24d9-4257-8216-d6623544babc", "sighting_of_ref": "indicator--384bcebf-a47d-4e92-89ff-4a963089274e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ae0737-c941-417a-bd62-4fd1262d2478", "sighting_of_ref": "indicator--384bcebf-a47d-4e92-89ff-4a963089274e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa2ab90-ac90-497d-b0d3-c62592ee5fce", "sighting_of_ref": "indicator--cd8c4703-8ea7-4c78-b0d6-ec5c0887dcc4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2772092e-9d80-480e-bdfc-011edb9a183e", "sighting_of_ref": "indicator--cd8c4703-8ea7-4c78-b0d6-ec5c0887dcc4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2fb3e6-bb38-458b-95bb-1d91d394d44f", "sighting_of_ref": "indicator--065cedb3-c567-499e-bd5f-7d713f91ef10", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262dc642-02d3-4eb8-8b2e-9ca6bb68b0a9", "sighting_of_ref": "indicator--dca72923-2e0f-4058-ace6-d9f55d5f160a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d967d8f4-5365-4d5d-8c9a-77a7d9602ece", "sighting_of_ref": "indicator--09e97834-3658-43c5-b3e5-31096e4c1703", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8d0d69-664e-4618-91e9-7bee03cd378e", "sighting_of_ref": "indicator--09e97834-3658-43c5-b3e5-31096e4c1703", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9340f1f-e08d-4b52-bbb7-ac33554bfc13", "sighting_of_ref": "indicator--0cda402a-7c29-451d-ae90-1f33c6f9570c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8a39cf-e3df-49db-a595-47d721fc0723", "sighting_of_ref": "indicator--40f5c7e3-b523-41a3-941d-e4efb2033ca9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9aa8f7c-fa2e-42af-823e-ca3e0b8160a0", "sighting_of_ref": "indicator--40f5c7e3-b523-41a3-941d-e4efb2033ca9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f15af5-fbb2-4cf9-b376-bc75713ac29e", "sighting_of_ref": "indicator--40f5c7e3-b523-41a3-941d-e4efb2033ca9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab43d05-38be-4070-ba96-3d3aeefae776", "sighting_of_ref": "indicator--8cab4406-8aad-4d00-86f2-ae83c41f9d67", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97acb39c-a232-48d6-a99a-7fe2af2a04f7", "sighting_of_ref": "indicator--8cbfcb56-8a00-45de-b08a-1c3ba8bcc503", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6cbdef1-702c-4edf-933f-deff1aa070a3", "sighting_of_ref": "indicator--8cbfcb56-8a00-45de-b08a-1c3ba8bcc503", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0216819-d401-4a04-805d-ff75289b71e2", "sighting_of_ref": "indicator--940bf3dc-401b-4e50-83f6-ce258dabd466", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27a4361-cecb-4c24-a676-04e8c37df7d7", "sighting_of_ref": "indicator--f8c21ead-7173-47ce-bb5b-5b1170955956", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a01a326-edaf-42d4-997d-1d6392e846e1", "sighting_of_ref": "indicator--f8c21ead-7173-47ce-bb5b-5b1170955956", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3081db-5065-4371-bdf0-449d2ecc9432", "sighting_of_ref": "indicator--f35eb999-2c79-4721-8df9-daa2f2ef0a15", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4a96e6-954c-4035-b78d-e43ec1f10c06", "sighting_of_ref": "indicator--7d1c62bf-d991-43c0-8931-c4acfca334f9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23f882b-2198-4e72-98b1-165d60672892", "sighting_of_ref": "indicator--a15c61e4-f2dd-48ac-9e52-b92cfae80f9e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f370f128-8956-4018-99d5-7384c80ab97b", "sighting_of_ref": "indicator--a15c61e4-f2dd-48ac-9e52-b92cfae80f9e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516e806b-c513-417e-aa09-24ff7af27242", "sighting_of_ref": "indicator--08fdd849-a3b1-40e9-a53e-c819a9d9e4bf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e8b35c-b9ce-4534-b638-117ea811ecef", "sighting_of_ref": "indicator--36e1fe58-fcf0-43e6-9ecd-f7bb88bdc520", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb760cc-6431-465c-ab26-502dc7742725", "sighting_of_ref": "indicator--36e1fe58-fcf0-43e6-9ecd-f7bb88bdc520", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2e0117-032f-4446-8a8b-c5f041cd6127", "sighting_of_ref": "indicator--63e29177-73fe-4a0c-8441-8108364cc135", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ac52ba-c578-407a-a8da-de68486d460b", "sighting_of_ref": "indicator--1b4a622b-ec87-4e03-b1ce-8750c0f75c25", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847567a2-a2a5-4e1e-a20e-b43a1c395f3d", "sighting_of_ref": "indicator--6753d9a0-94eb-4e92-92d6-21011e5110f1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acc8f91-746f-4e23-8088-213c8e6fa8dd", "sighting_of_ref": "indicator--76f46a77-7e9b-4a1a-9ba6-2edcac2a6db2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea39ae95-e68a-4f0c-898e-57aefce056fa", "sighting_of_ref": "indicator--76f46a77-7e9b-4a1a-9ba6-2edcac2a6db2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8cd0e2-7e24-4e36-b415-22fe0829b795", "sighting_of_ref": "indicator--51368919-340c-476f-b28c-c512d7f7cab6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1cb1dd6-c684-438b-a463-8d0a9099852f", "sighting_of_ref": "indicator--51368919-340c-476f-b28c-c512d7f7cab6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b80b22b-c8f2-4966-bd00-7b3539f435f2", "sighting_of_ref": "indicator--7f0a09c0-8a76-454f-ac1d-473592c009f6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240ba503-e61e-426e-a9c5-23f094cf08a4", "sighting_of_ref": "indicator--7f0a09c0-8a76-454f-ac1d-473592c009f6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c1da77-ab2e-4d1f-a88b-77059abea65a", "sighting_of_ref": "indicator--82487948-4b2d-4d16-bba3-9e7c8c59b2a2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb2ef99-b9c9-4ab5-9c49-8029f91c9745", "sighting_of_ref": "indicator--82487948-4b2d-4d16-bba3-9e7c8c59b2a2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29283fc6-0466-4013-8ce2-44c171327530", "sighting_of_ref": "indicator--960d4d69-7218-45e3-a5eb-2aad6937d2f6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d2a030-b162-44fe-88b4-b7d444e7062d", "sighting_of_ref": "indicator--e17871b7-9b8c-4e71-bdb2-ff51d442a106", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7676001f-3013-453e-bd2c-7e85ff5e7cef", "sighting_of_ref": "indicator--e17871b7-9b8c-4e71-bdb2-ff51d442a106", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9011f9c5-6e60-433a-85eb-0b16a866938e", "sighting_of_ref": "indicator--e17871b7-9b8c-4e71-bdb2-ff51d442a106", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad09f3b-083b-4600-a2fd-601d21e4f869", "sighting_of_ref": "indicator--0b69cf54-8fcb-4493-8d2b-7ad0d2862022", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d32d043-ba40-41be-b96e-9eca198fcc5f", "sighting_of_ref": "indicator--f84f04ce-f60b-4321-9668-c9e7c4394741", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96cb7fd-d0cc-4386-9978-5ee478ccfd48", "sighting_of_ref": "indicator--1fc2c3c4-dfe3-4cc2-b695-0872000eda44", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05498f62-caaf-46bf-9045-b8ada7a7836e", "sighting_of_ref": "indicator--1fc2c3c4-dfe3-4cc2-b695-0872000eda44", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a08cf6-98c7-4aba-942e-c39ea4470366", "sighting_of_ref": "indicator--d8d5d7aa-b43f-4d11-920b-9d09a9559843", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b193ae-d74a-4cce-beeb-641502021c03", "sighting_of_ref": "indicator--d8d5d7aa-b43f-4d11-920b-9d09a9559843", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385c4c6f-92b5-4633-9a4d-349ece393a5b", "sighting_of_ref": "indicator--e71460f1-f62a-4b1a-86bd-1af9db132a30", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72c28b4-39d1-47d4-9235-d5498475ab3f", "sighting_of_ref": "indicator--ab026b12-a7cf-4364-910b-e372390324f2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c6ecc8-2802-49e1-853e-f69ebdca9f80", "sighting_of_ref": "indicator--ab026b12-a7cf-4364-910b-e372390324f2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfeabe02-1c73-42cb-ac68-baecd4956d1c", "sighting_of_ref": "indicator--7ee49be4-0d49-476d-8573-ec40567d42af", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a01680-7365-4409-a064-dd1c21d1a215", "sighting_of_ref": "indicator--7ee49be4-0d49-476d-8573-ec40567d42af", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce58a67f-59e5-407d-9096-0b707f5145dd", "sighting_of_ref": "indicator--cd126311-3a1b-444b-a07a-ae29777c5fb4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a732efe2-b8dc-4797-8250-b9d8692ef9a7", "sighting_of_ref": "indicator--735122d2-e3a6-4a0c-8d1d-5a70a0c10938", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8713dd6c-4640-4e15-905a-e816ca79cb90", "sighting_of_ref": "indicator--0af3c399-8d19-4472-8316-671efd9b158d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05770ad-69cb-40c1-9f8e-f0176aa24198", "sighting_of_ref": "indicator--cde198b6-e6c0-4579-8f68-582f728dfff1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02dd199a-e1a8-4073-86eb-0a4980e647f4", "sighting_of_ref": "indicator--ff575ea7-bd7c-48bf-824e-bbff7c16628f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b622a5-997b-4d2c-a4c0-fe7a996be24a", "sighting_of_ref": "indicator--47fe2a37-0ac3-413e-9b48-e1b86bfe108d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07877fb-ddfe-40ac-b919-10cf76c9d3fe", "sighting_of_ref": "indicator--47fe2a37-0ac3-413e-9b48-e1b86bfe108d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72752bca-5ef8-4da7-89e0-44d31f089746", "sighting_of_ref": "indicator--77e2d3d9-9ae1-4873-bd67-2cd1fe0bac86", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96993dc1-8d28-4197-afdc-5abbfd90f61b", "sighting_of_ref": "indicator--77e2d3d9-9ae1-4873-bd67-2cd1fe0bac86", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36254a43-4dc6-4d0f-aa89-5178b4b3b8f3", "sighting_of_ref": "indicator--77e2d3d9-9ae1-4873-bd67-2cd1fe0bac86", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca708b6-43b6-4a9d-ae5f-a0f9a0292909", "sighting_of_ref": "indicator--f6422397-6be3-4955-9d1e-13d0fd5bb02d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a529784-9ab2-4f66-b0eb-27ce7968ddbc", "sighting_of_ref": "indicator--f6422397-6be3-4955-9d1e-13d0fd5bb02d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b7020c-d2e2-46f1-a0df-ef2215467fcb", "sighting_of_ref": "indicator--24ceb01d-aaf0-49c0-9700-0e64cd729940", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba4685b-e83e-44ff-87e5-86d01d03d2fa", "sighting_of_ref": "indicator--24ceb01d-aaf0-49c0-9700-0e64cd729940", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9500f8-b375-4e2a-9cf0-8b54f4ffcedf", "sighting_of_ref": "indicator--59ee30c3-0bc1-47e5-9f69-f6fe876e46c2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ced07b-adef-44a7-8955-9423901405bf", "sighting_of_ref": "indicator--59ee30c3-0bc1-47e5-9f69-f6fe876e46c2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf31708-9425-4c4c-9bc0-0bfc07bc593f", "sighting_of_ref": "indicator--76545f38-ca24-4557-850c-5cc688cb93e3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fef5e47-9e4d-4030-bd6d-69bc53994d4e", "sighting_of_ref": "indicator--76545f38-ca24-4557-850c-5cc688cb93e3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faac4eba-38da-4332-9975-9127cdf6a4c1", "sighting_of_ref": "indicator--9a540ea3-c34a-4639-83e6-f9a2e56c6c26", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca875a2-4aef-4d32-93f7-3a7a16df6136", "sighting_of_ref": "indicator--9a540ea3-c34a-4639-83e6-f9a2e56c6c26", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e1d244-b4f7-4d17-8d78-e39dfe5d41c9", "sighting_of_ref": "indicator--365e50aa-d357-4ca4-b2af-c9d9c1035d7f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e1304c-36f0-4cea-b24d-eff2f06627f1", "sighting_of_ref": "indicator--365e50aa-d357-4ca4-b2af-c9d9c1035d7f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7990dacc-51fa-4e65-bd69-14911e9ae997", "sighting_of_ref": "indicator--cee7dee6-680e-41b2-8812-dca3bc0cda15", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5a20c4-3ba7-49eb-b596-35c1dd7c0ea3", "sighting_of_ref": "indicator--cee7dee6-680e-41b2-8812-dca3bc0cda15", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f035af-ce2c-4cb5-83b2-925c0bc0739d", "sighting_of_ref": "indicator--7fe8c9aa-590c-483d-81c0-7f5861ab51a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41c0c86-dee8-4964-9f76-7398f51f9ecb", "sighting_of_ref": "indicator--7fe8c9aa-590c-483d-81c0-7f5861ab51a7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eeccdc8-3175-4e43-980b-5dc372c63637", "sighting_of_ref": "indicator--5e5e5771-589a-43a1-a32c-033bfd8031d7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639c83f3-0c46-40ee-8ef9-235a143c7414", "sighting_of_ref": "indicator--5e5e5771-589a-43a1-a32c-033bfd8031d7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994d4a88-a9b7-4812-b89a-d655d3777ed6", "sighting_of_ref": "indicator--581a1414-e252-4baf-8d44-87ae5a99872b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63976953-4936-483d-bb75-17aa1e1eabe1", "sighting_of_ref": "indicator--581a1414-e252-4baf-8d44-87ae5a99872b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90f8c19-693f-4c30-b5f7-81735830b589", "sighting_of_ref": "indicator--5e915960-b59f-4493-9273-80297a49c301", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1053208b-eb46-4fa7-81f0-befa363d898a", "sighting_of_ref": "indicator--5e915960-b59f-4493-9273-80297a49c301", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215fad03-7697-4e49-9a38-a65ffa873fe4", "sighting_of_ref": "indicator--6cad8346-12f2-4185-b069-ecd55581d617", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e167924-8e30-44c5-8596-a94a1481e31d", "sighting_of_ref": "indicator--81ceb0e0-3502-48b3-8553-f3d521f1223c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bc4162-2110-4150-a230-37b1feaec6ff", "sighting_of_ref": "indicator--81ceb0e0-3502-48b3-8553-f3d521f1223c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95f1140-53cf-4b7c-bdd4-b18acdeababa", "sighting_of_ref": "indicator--c6bc8b1f-2278-469f-8809-273761bb53d4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a276441c-815a-4fc3-9ad2-b358c010648f", "sighting_of_ref": "indicator--cef59d21-055a-43a9-be56-0988ad50ea5e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6975e4-3bd9-4a96-817a-39458919de36", "sighting_of_ref": "indicator--cef59d21-055a-43a9-be56-0988ad50ea5e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3ac5c8-db18-4a1b-95d6-49830447eeae", "sighting_of_ref": "indicator--cef59d21-055a-43a9-be56-0988ad50ea5e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f3aecb-415a-4247-9bf7-fe520e13d938", "sighting_of_ref": "indicator--e4ab35f5-e3f6-4c11-9e30-b02947a43734", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3635f809-7829-4aab-b1f2-462be6601f8b", "sighting_of_ref": "indicator--e4ab35f5-e3f6-4c11-9e30-b02947a43734", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbffe72-b20a-4650-9a81-d85d569001ab", "sighting_of_ref": "indicator--c2cad824-205b-4c99-9f97-d9d19eff6674", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00401008-f5f1-45f4-95b9-06855605d7e5", "sighting_of_ref": "indicator--809deaae-a01b-4f79-83c8-341ee201f91c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf4c199-cdf9-4fad-b840-d17dfaf42771", "sighting_of_ref": "indicator--d7f7c53a-512b-4f65-9211-a0b7c7dfa6ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9143ecab-864e-456e-a09a-d15f6635fd8c", "sighting_of_ref": "indicator--3480698c-bd59-4f7a-bcd0-fcaf87d702b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f1d1a6-c70d-4faa-9bd9-d894eb8ab5be", "sighting_of_ref": "indicator--7f5708ac-0431-44aa-8afd-db6e93aed58b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ebb7a9-8408-4b3b-9968-d49057634b91", "sighting_of_ref": "indicator--1403504a-2df1-436a-b3c5-a3f3cf0923c4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c112852-ea07-4840-9189-247e5f96ee39", "sighting_of_ref": "indicator--8382e2f7-0b21-41d1-89c0-7d587d191753", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a54b01c-e593-4985-8d62-a30ecfefa8f3", "sighting_of_ref": "indicator--ec07b625-2e26-4158-bbc6-588165ab83de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39846530-46a8-4a96-a68a-07f2a2afcbbd", "sighting_of_ref": "indicator--6f5cfdff-3ece-499b-bcf9-c333bc8cd8c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd11b52-dfd0-4bd1-9e0a-4a26f0e8aa9e", "sighting_of_ref": "indicator--b29b5ad9-59ac-4b57-b096-bd5b25b438ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e19ad46-3eaa-4018-8bcb-a48d7ae3063f", "sighting_of_ref": "indicator--e64a2cdb-2923-4e12-a88a-bf8e61f70b5a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63574b68-22d0-472b-80b7-8ed6723a18e1", "sighting_of_ref": "indicator--61635572-7d1f-482a-8013-6d62a698f966", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772378c5-322c-42fa-87f3-ef7384e0ab4d", "sighting_of_ref": "indicator--1488e6cf-2e90-4331-b3d3-63626338dd52", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768e546a-f2cb-4103-9491-82c6a994f756", "sighting_of_ref": "indicator--792d0dbd-09b6-4efa-a086-ff64bb088629", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43251ff3-5392-410d-9b07-602dd7fb6c7f", "sighting_of_ref": "indicator--b11a3583-015f-4dd7-bc68-b4dabe3fbfd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22720d0-b1bc-4844-b476-39120c16f6ed", "sighting_of_ref": "indicator--f4840fcd-4391-47ee-baa0-75c568d5eb64", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561a9f2c-55e5-40bf-8c8c-7681bf2265d3", "sighting_of_ref": "indicator--25c2c135-843e-4d4b-85cb-030ef78df54a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbe2a64-91da-455c-8573-c7f56f6eb728", "sighting_of_ref": "indicator--c00f1c75-1f9d-486d-b549-3e717dfdd367", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14172ef-1468-4c66-a4c7-349f0960a9bb", "sighting_of_ref": "indicator--ad60ec77-3c91-48fc-8d5e-9cf39ec7e68e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f040584-05e3-4968-b223-d5292c203cbd", "sighting_of_ref": "indicator--25434a08-7039-4c6f-be40-ee108bfc4278", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391fecaa-05ba-43f9-b0df-dda4feea1312", "sighting_of_ref": "indicator--922d5384-891e-4476-917d-2d0ec70c9dee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40af9b3c-fcda-4e08-9650-e38932e6de30", "sighting_of_ref": "indicator--03498a67-7474-49d9-97bf-bf15c0ed8895", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e67250-1d39-457b-bfe6-3a956397c9c1", "sighting_of_ref": "indicator--12ce7daf-7dfa-4719-b0e0-37f29518cab1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808979b0-a250-4678-a0f0-89d183afbb4a", "sighting_of_ref": "indicator--05eeb271-d0fb-4995-a23f-048445087439", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54822165-7954-4bd7-a036-d5a8f94701ee", "sighting_of_ref": "indicator--5683534d-20f6-4993-8f46-247874e7aed0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a028edff-41ca-4e5a-a5fa-07aac4d2a728", "sighting_of_ref": "indicator--9254deda-8aa9-4f1f-8f15-692178f3d65a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64c8310-2923-4689-ba2d-8d1ce1df5c1f", "sighting_of_ref": "indicator--51f956be-cb58-4b02-8f33-c56cb0476989", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3383664f-5c8a-4ce8-9c35-0fa1ee94c8ab", "sighting_of_ref": "indicator--a846ec58-ee7f-42a7-9d22-7916429c6705", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ad2ab8-5d70-4493-bbc2-a52a4d28d27b", "sighting_of_ref": "indicator--b4663374-9a56-444c-b468-3943453a9123", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e36e8ff-b063-4780-9ac1-ece973f0d8a6", "sighting_of_ref": "indicator--6c4b82e6-93e8-4ca2-94d9-b1dd17339b59", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f947676-668c-4f41-bc4f-05ace3f3d9c9", "sighting_of_ref": "indicator--9b44e96a-df19-4d7a-9d2b-beface1bb857", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659351f8-bf45-43c2-a655-735d29032b8c", "sighting_of_ref": "indicator--54a4b99d-c72a-4e43-a017-e2f53f063bc4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29838b83-24cd-45da-917e-9206071ba9a2", "sighting_of_ref": "indicator--9bd5967d-1a2b-44f5-93cc-32fd1c0832f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c644d7-331b-4575-a3de-f3955f5c8145", "sighting_of_ref": "indicator--10d75c9a-4fb7-416a-bdf8-03de050ebee4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a11fbd-2450-4661-b1ca-e6006d5f8fce", "sighting_of_ref": "indicator--92fb7718-2e26-4047-bae3-cb911a9fd0e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312e43dc-edbe-491a-b6fc-79b8cd326531", "sighting_of_ref": "indicator--5b90b90b-467c-41bf-b63b-68961f31bc45", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aeeadd5-8fe3-4a5b-8aab-10e9a203bee5", "sighting_of_ref": "indicator--3677b7ab-90e9-456f-a4bb-b7413d87d09e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a84e57f-4d41-4c92-83aa-2ba64c8a4311", "sighting_of_ref": "indicator--d2e59de7-debd-4bff-9d7d-3deb7eda9727", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b70a101-487c-4afd-9928-d2efe5ba6cda", "sighting_of_ref": "indicator--5e5ccdf6-bddf-49b4-b118-b87e2303f426", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02ddea6-1123-48e6-8dac-0e90c7a79e99", "sighting_of_ref": "indicator--e0ba055f-d5cc-4393-a9c4-684fb24e4c5c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca120ccc-ca4f-4005-89e4-55e31d98d0d8", "sighting_of_ref": "indicator--a18da63e-cf2a-4b96-bdbb-a064ebfeb79e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e93f521-d951-4415-a3ce-0e0b0973a2ed", "sighting_of_ref": "indicator--f1c07b72-d892-436d-911c-69d8cf8623bf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee26265-7fe0-4b04-82af-5b4de420ac59", "sighting_of_ref": "indicator--3536652f-dc62-4e3a-b0ef-97ad0fbf56d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf335ec-b0e9-49ce-9766-242c7a8a056c", "sighting_of_ref": "indicator--b7de5fb9-60bb-40dd-9a2b-ab940c8d9c7f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9650c59-a161-4c0a-9b21-0f087707fec3", "sighting_of_ref": "indicator--ed9ad92d-d70a-4581-b662-5db6213321da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74163bc-265e-4365-b962-ee2b09d164b0", "sighting_of_ref": "indicator--1a4cc914-c19d-4a8a-93f9-62a0efa96b87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d92951-880e-4b52-b1f8-9218a56a2a42", "sighting_of_ref": "indicator--70b55ce4-d6f3-4693-b59a-14e74928657c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16904294-6b60-4618-a36e-b3c810e1dd78", "sighting_of_ref": "indicator--30358af9-bff1-46f5-8cb7-95f052a07783", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd563fdf-53a5-4c7e-b25e-fea04a74b708", "sighting_of_ref": "indicator--df44c664-4f25-4e90-9cba-ccc7ac20e72c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc43f0ed-cd3d-4b00-8b43-a0a5b2df4f0f", "sighting_of_ref": "indicator--52c56ad9-4525-4124-af3d-911f015010da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad249dc4-60ee-4ff5-b417-cd2459b23c35", "sighting_of_ref": "indicator--dd01b4e0-9619-4a35-aec1-4978b85c0bee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04d3c39-4a43-4811-81a3-9a31bcb8702d", "sighting_of_ref": "indicator--33d3b6b2-245d-4a48-b259-ae8e397fbd9d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8406a9-2895-4ad3-8157-01f828b6645f", "sighting_of_ref": "indicator--d4909ba4-6885-409e-a3eb-6afca705dd2c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa6bb37-5935-4be8-8ee6-e36881e5a17c", "sighting_of_ref": "indicator--4b285457-4efc-4652-a524-0bfc0470cea9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13a574f-1d73-4e67-bcd1-be03ae545a25", "sighting_of_ref": "indicator--d96527c2-46e3-4254-a2e2-c32e262a732e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5c7aca-b22c-489d-9318-d565ba40c69a", "sighting_of_ref": "indicator--9bf48dda-e4b7-4c0a-941f-dde89700fd99", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c652b4a-c13e-4230-a77a-039b37765eb9", "sighting_of_ref": "indicator--84ff4ac6-5d63-4ab6-a7c1-79ddf8857814", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72c1f34-2cd4-43c6-bbd8-abd3a6fd1114", "sighting_of_ref": "indicator--1c59f581-29f9-4689-9152-2d369a4bf233", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d326c2f3-b2a6-4f86-98b8-b4c200ebc33d", "sighting_of_ref": "indicator--489c38c2-17e0-4161-8fc1-cc966d73bf36", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d9b274-4db7-4bc9-b12c-44edfe0241d6", "sighting_of_ref": "indicator--23dc8cf2-ca3c-459a-b7cf-15f657b936e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b399aa2-e098-4dbb-ad78-e2b32aab97ad", "sighting_of_ref": "indicator--63bb5b49-e230-4747-9233-d71e600e12fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce485ad-8e79-4f92-b925-2d0a83dfeb4d", "sighting_of_ref": "indicator--1667a38c-46a0-4c9f-9083-7f2e820ed51e", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d592e4e8-391d-45bb-bc0a-c6aa857bba66", "sighting_of_ref": "indicator--614b6af0-7f42-4013-9447-55376501ff3b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c665a2e2-cea0-46b2-8b8b-9192b9204ec1", "sighting_of_ref": "indicator--614b6af0-7f42-4013-9447-55376501ff3b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa75931-70c9-46d1-9515-5754c2553af6", "sighting_of_ref": "indicator--614b6af0-7f42-4013-9447-55376501ff3b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31176299-c583-48af-aa1e-a5629cbc33d0", "sighting_of_ref": "indicator--b6beda05-e1d3-44af-9d07-b811bd56d499", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73af170f-7e61-4c2e-8367-9d24c9c1d443", "sighting_of_ref": "indicator--b6beda05-e1d3-44af-9d07-b811bd56d499", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7e5ce3-1b4e-47a9-8527-327ced31e94a", "sighting_of_ref": "indicator--b6beda05-e1d3-44af-9d07-b811bd56d499", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1f5dbe-de51-43c4-bd30-38163fc70f93", "sighting_of_ref": "indicator--ac34cb64-6dd0-474d-a831-e7e7e01e1d73", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b754cf-53c2-4a93-a5d7-fc23f7d5c034", "sighting_of_ref": "indicator--0e5bc2dd-a07e-4765-ac1f-6c49958f850b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b402f50-5bcf-49a6-81e3-e97764122674", "sighting_of_ref": "indicator--5466864c-84bc-4ad6-ac28-fcb2651f17aa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b9daff-5aee-4334-92c3-b3703cfb6f25", "sighting_of_ref": "indicator--37bfbcd6-e4c9-432a-a6d7-44349d8f83e4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f2cc7b-a7b8-4a8e-aadd-2ea1e6d968b4", "sighting_of_ref": "indicator--a51d8a35-f93f-4406-ab6b-502fd5a3ab87", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22edc62f-5eb1-4aed-b584-b331b412bd66", "sighting_of_ref": "indicator--59912fd5-64fb-45db-89f5-9bfeb39f014c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e37b32b-b5c8-4d05-a0c3-eca9ca9e33c5", "sighting_of_ref": "indicator--8c2ad5ee-fb3c-4237-a9b1-2b827be03d7c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd64546b-4f32-4ab7-8f3b-900382d120c9", "sighting_of_ref": "indicator--be2dbf14-afc1-4e25-aec2-4457ac026998", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67070cc-e3b0-4b1d-9a79-320d10b5a0d3", "sighting_of_ref": "indicator--649baedf-1ae5-4a0f-b2a5-e5c6451a622d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b47208-72d8-4edf-83a8-4191acd9f9f2", "sighting_of_ref": "indicator--64cd84ed-a189-4936-9026-dd6d2b7a47f2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26f64f3-7ade-4a92-bbf4-c853a0e56bb5", "sighting_of_ref": "indicator--a927dc77-6f18-4dbb-921f-62d08b315954", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5cd5f81-c055-4472-9c2f-03728c1f2b8e", "sighting_of_ref": "indicator--5f93d4d3-540f-4564-b978-ac20612db944", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c61d795-542c-4178-8754-b4cbbe0fd6c3", "sighting_of_ref": "indicator--10330266-1851-4a33-b5c5-9c7b05ce3ce0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eba55e0-b220-4d55-8afe-161eb993d3e6", "sighting_of_ref": "indicator--3790deea-3d79-431f-85c6-318306cef619", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21a0399-0fa0-4ba1-a942-248e3858a127", "sighting_of_ref": "indicator--a9cb9695-1ec1-4729-b982-eb43bee0fee6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0ff72f-4668-43f6-815d-3e86de935a2e", "sighting_of_ref": "indicator--cf269c75-00b6-48cd-8b8d-bdaf28f5ea84", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2068e8b5-af89-473b-b86b-b6ae6e50d003", "sighting_of_ref": "indicator--176168ca-a31f-4387-9971-4f05a300e830", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2165a2-5dad-4091-b9be-d47c61df1609", "sighting_of_ref": "indicator--2dca74a9-0347-489e-bcba-805f98adaca1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f79cfdf-b80b-4003-91cb-284da7886aa6", "sighting_of_ref": "indicator--2c42544c-990f-42bf-be1e-22bf68a76860", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77788f3-4acf-4839-a011-25702b93dcea", "sighting_of_ref": "indicator--2c42544c-990f-42bf-be1e-22bf68a76860", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8b0dd4-1ee9-45ee-87bb-37eedf2b5399", "sighting_of_ref": "indicator--2c42544c-990f-42bf-be1e-22bf68a76860", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8c5384-d62a-4ac4-93ce-7513ff6d42df", "sighting_of_ref": "indicator--2b2c2f07-3cc1-4ccb-9b7b-d12af1a3b18f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8269e881-5496-453c-9995-7202d263b348", "sighting_of_ref": "indicator--ba774897-1dff-4c61-a656-fc37036f256c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f59bfc-3e80-43c1-9737-8e170fc05716", "sighting_of_ref": "indicator--ba774897-1dff-4c61-a656-fc37036f256c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35bf9321-0c1e-4280-a67f-df07af9e519d", "sighting_of_ref": "indicator--9048e8a9-9018-4043-98ff-e9c9c9863c9e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5121d0-26e3-456c-8687-fd45e6bae10e", "sighting_of_ref": "indicator--70b07de9-cc86-4899-89fd-0af0882d3353", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bb889b-fd6f-4a87-a2da-659beb9849f0", "sighting_of_ref": "indicator--6158dd8e-145b-464e-8d9a-4267462067cf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88195273-006b-4fa9-a64d-0199afcbd7b9", "sighting_of_ref": "indicator--f1a31dcc-336a-4974-9494-6e3549c0fa10", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997b0c3f-63e7-49aa-8d86-5f7eb620633d", "sighting_of_ref": "indicator--c65d258e-0b6f-4fa5-885f-9cfa1ab7dd7c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab7e7f4-b601-4fe6-a53c-e36b699e8507", "sighting_of_ref": "indicator--8022aed9-9eff-4d39-be19-193401209c04", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3e89fc-eb33-4e04-866e-697f1b00a0ee", "sighting_of_ref": "indicator--4cd8e924-ab69-4536-beb6-455f51e23f7a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749c87ce-aeeb-4176-a52a-111dbea05530", "sighting_of_ref": "indicator--ff12bf8a-8aee-41e0-9ba6-207c745ec77f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e196f3-f68d-4ea1-95e0-4f5c3beba5e3", "sighting_of_ref": "indicator--a17b9111-b67f-4f88-9129-686025bfe717", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90f7634-dccf-4368-b3c0-6cace3d5f42a", "sighting_of_ref": "indicator--29d816df-5bbc-498b-b41a-754d762f4aab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb8a5a3-ca72-4eda-8a07-5d9fd18ebd87", "sighting_of_ref": "indicator--51c42074-f270-430a-b739-3dfa48c6fa0d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f02fb6-172d-466f-9aae-6b8bcc633607", "sighting_of_ref": "indicator--281bc0da-4e5c-410f-b559-2ee9598fa63d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf33f834-2f41-4b4a-8b38-3d4905e17746", "sighting_of_ref": "indicator--55690985-b984-48c3-9027-6dfdcda04eff", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b1fe43-379d-4b24-a029-2fb0a0c81081", "sighting_of_ref": "indicator--5f0b01c9-ecb7-408d-9620-b0d33b79831e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d653cd-602c-46cc-a535-87bdf9c15b2b", "sighting_of_ref": "indicator--65202163-7d83-4d2b-b0d1-4d56c0544a74", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d0de4a-3d31-4ea7-9e1d-81263adcbcf1", "sighting_of_ref": "indicator--65202163-7d83-4d2b-b0d1-4d56c0544a74", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66810258-fdbc-49e6-b195-6ac84a66d43f", "sighting_of_ref": "indicator--c57c8ce2-9780-4a61-b07f-af377abfde13", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced469db-b0ec-42bf-b391-40a7e9d0bc6c", "sighting_of_ref": "indicator--6f456d5e-7e02-46c0-8982-e72583c6f5e0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7acdaa9-dd52-467b-8333-015c78be622e", "sighting_of_ref": "indicator--6f456d5e-7e02-46c0-8982-e72583c6f5e0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f926f197-8489-442b-b769-74e6452eeba1", "sighting_of_ref": "indicator--fff01595-7648-41c5-a99d-2c47eea5edf7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a2ac28-f42a-4c51-9e95-e4fc01da5094", "sighting_of_ref": "indicator--fff01595-7648-41c5-a99d-2c47eea5edf7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3875c5-4080-4bc6-b6cc-9466919bba91", "sighting_of_ref": "indicator--e387c979-2271-4edd-8080-a3e14b7423fb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bdb9482-f65b-48cc-84d1-54f6bc74a34d", "sighting_of_ref": "indicator--e387c979-2271-4edd-8080-a3e14b7423fb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fafc0dd-15f8-4dcf-a962-70ce54429176", "sighting_of_ref": "indicator--e387c979-2271-4edd-8080-a3e14b7423fb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083a09a9-dfea-4dd9-9331-c94e63ad7e6a", "sighting_of_ref": "indicator--e239402f-68ec-4102-b24b-b7d4e7edf939", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0330078a-60cb-430d-ba04-8ac60950e538", "sighting_of_ref": "indicator--703320d6-f4db-41f9-8a6d-b66ba8f41315", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fccb30d-b45f-4077-9eda-68f0fd7e7d5d", "sighting_of_ref": "indicator--b5a399af-3d80-4260-a8ec-e81b570fca77", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163c6b6c-4ed0-451a-86ec-95635ebf120a", "sighting_of_ref": "indicator--a19ebcdb-8e27-4b2b-93d3-7d4ad484a4b0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d469f2-540b-4ed5-a0a2-9bd9d43dfcf2", "sighting_of_ref": "indicator--a19ebcdb-8e27-4b2b-93d3-7d4ad484a4b0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdbaa84d-62fe-4d4f-ac24-fbbeb25bbb09", "sighting_of_ref": "indicator--a6e266bd-e894-40f3-9281-e872d4e71e99", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9258061c-6104-4eef-8c80-f8d5377261d0", "sighting_of_ref": "indicator--9f203341-0b95-4006-86eb-c241235cc42a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a65cbc5-e318-41bf-a270-3f5c03c3c695", "sighting_of_ref": "indicator--4413f869-09d2-4fb6-a46f-e00331b6a959", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e7084a-7ea1-4373-9343-8030d852db04", "sighting_of_ref": "indicator--563720cc-c59f-4b90-9d42-bea6bad8736d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2982ee4-514c-4479-88b8-03a2d0452696", "sighting_of_ref": "indicator--a336b1e6-698d-47f7-abcf-37921d4b37b4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7961c958-47ce-457a-b650-f04c88b9a78a", "sighting_of_ref": "indicator--b982556d-33d5-45fa-be1a-866ed7eeb3b1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c97b02e-24a3-4dd5-a90d-1b252446aff3", "sighting_of_ref": "indicator--b982556d-33d5-45fa-be1a-866ed7eeb3b1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0b5ab2-2c50-475b-a8f2-7c5f5c4e8bcf", "sighting_of_ref": "indicator--045550ec-5601-495a-bc74-507bb3e659f5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e698a22b-c9fb-42f0-8cdd-8e945c45d9aa", "sighting_of_ref": "indicator--5a04493c-d38d-4c9d-b292-e633273dcaf3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23210b10-22a9-44bf-aa7a-03d444aaf5ad", "sighting_of_ref": "indicator--a11f3145-1675-476f-83dc-72ab532b97e9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1abcde40-05c0-4d4d-8892-17756007f0a7", "sighting_of_ref": "indicator--015384d1-18d4-40ae-abc9-acfae56a71a0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1914a4-fe2d-48d2-a6a7-bd34cadbb42b", "sighting_of_ref": "indicator--015384d1-18d4-40ae-abc9-acfae56a71a0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477cf2cf-507b-4664-a686-c062ce3193e2", "sighting_of_ref": "indicator--883411e6-46d5-459d-99d1-14074760c6ff", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaebed9e-7712-4df9-af40-fb54efd67c37", "sighting_of_ref": "indicator--f884c1f0-ddff-47b0-8400-daf4dc47f736", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31cfdb5a-1ec6-4cc4-a856-4c49ee564985", "sighting_of_ref": "indicator--2d5e8353-c18a-40c7-baf1-1c58e095944e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de70f3a-ed7f-4a8d-87ce-d024cd7771de", "sighting_of_ref": "indicator--2d5e8353-c18a-40c7-baf1-1c58e095944e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f3d56d-4e67-471d-8eba-df1fd07aa210", "sighting_of_ref": "indicator--c207f91a-cafa-403f-b46e-862d13b1acc4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68479b86-a789-4d2c-8c95-a39f4cabc2f8", "sighting_of_ref": "indicator--c207f91a-cafa-403f-b46e-862d13b1acc4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d19db8-8158-42ed-a283-21e6a07bd43d", "sighting_of_ref": "indicator--9c949014-da23-46b0-8df4-caa8c9e9d3ac", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306c876a-094f-4266-99cf-860a14c26474", "sighting_of_ref": "indicator--c409bd35-7588-4b09-a5f0-16ef4bce46bb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb0b504-145a-4166-b6a3-5cc4278a9b0e", "sighting_of_ref": "indicator--8afb6307-0942-4706-b662-590437882f64", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8347c4e0-8df9-43df-8ad1-d3115f9e584a", "sighting_of_ref": "indicator--4d2999cd-29e9-4a0a-8235-4df4c78639e9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ab7e16-374b-4eea-a1e1-c7ab65cfe2c0", "sighting_of_ref": "indicator--9b51f465-ba8d-4519-94ad-98c14635f987", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbcc580-eb1e-4ccf-a5c8-e38fdc4e3ce3", "sighting_of_ref": "indicator--e41a8a8f-8754-4486-b978-734a6c93d262", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf3a3bb-fdd2-4a0f-82bb-472e3eac2ca6", "sighting_of_ref": "indicator--7c6a35d7-69bd-49bc-b84a-9b3c4269e11f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d1e231-285b-4841-a093-ed9d2f50f757", "sighting_of_ref": "indicator--ff6c1cba-0e27-47aa-a462-ece41ee26442", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d387702c-bd80-4f2e-9607-320066df441a", "sighting_of_ref": "indicator--20a9aa7b-a666-4ddc-8928-81a3138227a0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8419e3-9f44-49f7-8478-d07f1be3a9e1", "sighting_of_ref": "indicator--b5bce57e-657c-4f36-8d07-1894306be0b3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb38c82-1c91-4ca3-bcae-c54041c5d0b7", "sighting_of_ref": "indicator--f940f145-adf3-4f09-90d9-fbe0a75937f6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f960f02d-997d-4c03-b161-c42d7fbd7b9b", "sighting_of_ref": "indicator--96aa7459-8716-4d4f-8b81-162c22cebd8d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b057ff2-dafe-4fdd-9652-4a4b89a07713", "sighting_of_ref": "indicator--4d4afae1-bf56-48a3-834c-55d4a1ebdf46", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab00680f-3541-44ce-95e5-e362f00fa2bb", "sighting_of_ref": "indicator--4d4afae1-bf56-48a3-834c-55d4a1ebdf46", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c663189-8a7d-40f9-96a4-c58b4e2333d9", "sighting_of_ref": "indicator--72469e57-9397-41d9-b8cb-a8920b4da9b3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d0f2ec-2e53-4247-bf96-2c98a0508f95", "sighting_of_ref": "indicator--72469e57-9397-41d9-b8cb-a8920b4da9b3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55503907-e626-404d-9ba6-31b94483cb49", "sighting_of_ref": "indicator--46ccb5b0-a87d-443c-865a-75e5de5a53cd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf28ef79-47dd-4d3b-a348-1e2e791ea89b", "sighting_of_ref": "indicator--d117a03a-bc71-4b58-80d7-e626e881e97f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6ca63a-4ad5-4361-a9b6-d2be2f89f9b3", "sighting_of_ref": "indicator--3d11faa2-3e03-48b0-993a-6e924ee5fdf9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87ea210-8f94-4512-b9e6-a3f0d0378df3", "sighting_of_ref": "indicator--d7b0a05e-0ecf-46a8-b709-bc3b22d4d8cf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb830f0-c7cf-4c9a-9a21-d12a1c234ec2", "sighting_of_ref": "indicator--d7b0a05e-0ecf-46a8-b709-bc3b22d4d8cf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c98f3d4-55f7-4a49-96db-31d45b047e96", "sighting_of_ref": "indicator--08b027a0-fbb0-4882-bb08-4e930c0ac1f5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0905040-f5e4-4ea2-a2cd-fd63bf7826d5", "sighting_of_ref": "indicator--08b027a0-fbb0-4882-bb08-4e930c0ac1f5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec003b8b-bb2a-420f-8b47-1aaff84fe513", "sighting_of_ref": "indicator--6b060d97-2ca0-463c-a208-e5cc850ef371", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b854cc86-b180-451e-a67b-1ef15950ec16", "sighting_of_ref": "indicator--0bb533ab-df63-4e53-9c41-ff3f860cc7bc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2bb7f0-64ca-4598-922e-08aa559d74ba", "sighting_of_ref": "indicator--d3fd53e6-829c-4e03-b683-9f2c1d46e76c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29813337-f21c-4f16-a96e-5696dd962aaf", "sighting_of_ref": "indicator--d3fd53e6-829c-4e03-b683-9f2c1d46e76c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6600575-0244-4e8e-b492-1389788bec8b", "sighting_of_ref": "indicator--23e766a8-747e-42fb-b2a1-88d379e9f76f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849b1f6d-e5a6-49b5-91da-4e10a6737474", "sighting_of_ref": "indicator--55fe5bf1-017a-4bc1-b087-64a38ef37816", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123ce95a-5fdf-4b13-8a10-8972d146409e", "sighting_of_ref": "indicator--83390ac4-9df8-4307-a7b2-4764966ee8e4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52715c71-249f-4b28-adf0-2627442336c1", "sighting_of_ref": "indicator--73fdf655-1ba9-483a-9773-15618a4c24ce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59889aa-632a-4d06-910f-ee10a835f844", "sighting_of_ref": "indicator--73fdf655-1ba9-483a-9773-15618a4c24ce", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3c988e-1a49-4e9a-b1df-21f03f69d83f", "sighting_of_ref": "indicator--e79eb67f-4616-4de1-8635-9be214bfd8f6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6366e06-aeee-4f82-a0d3-e11deed7aba1", "sighting_of_ref": "indicator--2773e14b-0efb-4164-969e-1b74af31de48", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c25626a-a3be-4caa-a4f1-bccf81d320f7", "sighting_of_ref": "indicator--2773e14b-0efb-4164-969e-1b74af31de48", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6e276f-44ac-4e79-bf33-8f60c94282c4", "sighting_of_ref": "indicator--982ec824-ee2f-4add-bfd2-98ed5aeae90d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594f4227-3ef6-4f86-a618-63141a3e2114", "sighting_of_ref": "indicator--1945c1a9-c71f-4958-bf7a-edbafb8fb2c2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66aa4924-32c0-43f0-81d9-4f5dab4144e8", "sighting_of_ref": "indicator--414c3168-7c33-4f60-b7b5-0e0a64a8473d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c2a1a0-bf2c-4830-909a-39770daef841", "sighting_of_ref": "indicator--414c3168-7c33-4f60-b7b5-0e0a64a8473d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b27066-aa66-4077-a451-5a4fb3b0fe86", "sighting_of_ref": "indicator--dae72580-6a34-4487-a68d-bbb77129d4a9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01cc4734-04b9-4427-8e67-13f23202c86b", "sighting_of_ref": "indicator--dae72580-6a34-4487-a68d-bbb77129d4a9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c9617a-2190-4588-972a-3a91fd123fa5", "sighting_of_ref": "indicator--df42e3d3-8b90-432e-934a-801a0b3c0e2d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35cf26d-c216-4c53-9cef-f0479e9ae244", "sighting_of_ref": "indicator--9dad8a00-4d64-4c93-9af2-141811f00d1b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105ee91c-d354-4948-a257-6a55b4e14772", "sighting_of_ref": "indicator--9dad8a00-4d64-4c93-9af2-141811f00d1b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd15b7ff-7b7e-475c-b80b-453f0232cc5b", "sighting_of_ref": "indicator--d61bc583-9962-4a48-83b6-a0a80cb4682b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfa54c4-c43b-454f-bcf1-cb8471152850", "sighting_of_ref": "indicator--a131547e-b8c4-49e7-a92e-af31199bc6f5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bebc733-0525-4d47-88b8-1e4c3c47b54c", "sighting_of_ref": "indicator--1a69e096-4894-4828-9de5-9ed70d49becb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97ecaed-0878-455e-8dd3-3c05727387b9", "sighting_of_ref": "indicator--20087e2c-9524-462e-b2f1-7897941c92a5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47fb1763-33f2-437d-b1f7-ef7aca25b501", "sighting_of_ref": "indicator--043c36b1-9a44-4748-b73f-e817fef876f5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef29c6c4-f181-4a0b-af6c-d0309ee44202", "sighting_of_ref": "indicator--8d972baa-2187-4afa-a203-1bef6f116086", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9469888c-e499-472d-ab48-ea8d3f704363", "sighting_of_ref": "indicator--c05e5448-0902-4b50-932d-a831b730d741", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dcc6f3d-c3d4-4100-af41-d4b6fb707b25", "sighting_of_ref": "indicator--457c2069-e3e4-4ba4-ba01-fb9ee2df64a1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e401d4-9b38-4ab7-aa7e-a309c31b794b", "sighting_of_ref": "indicator--457c2069-e3e4-4ba4-ba01-fb9ee2df64a1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0468fb3b-8d92-4166-8d02-5524a12f560c", "sighting_of_ref": "indicator--b02c55b7-315c-4dd1-b453-d62799f1a66e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64889e0-b872-4eea-a7b9-366071bc88ac", "sighting_of_ref": "indicator--b02c55b7-315c-4dd1-b453-d62799f1a66e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48069cda-9ac0-4694-bb85-4da32596e928", "sighting_of_ref": "indicator--b02c55b7-315c-4dd1-b453-d62799f1a66e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe68988-8903-4296-bd39-1c1f8e7579c7", "sighting_of_ref": "indicator--2f873ea8-1890-4b4d-af2d-32d5057d56ec", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efc3926-6b51-4022-99dd-5e30b2968394", "sighting_of_ref": "indicator--2f873ea8-1890-4b4d-af2d-32d5057d56ec", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e52185-2790-4b6c-932f-15f4f64795d4", "sighting_of_ref": "indicator--b03d2a0f-f8f3-4d3d-9b64-7daad5fbaae2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040c6d56-164e-4940-b0fc-55c3bbddc920", "sighting_of_ref": "indicator--b03d2a0f-f8f3-4d3d-9b64-7daad5fbaae2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c069abc6-c9d9-4cf7-a66b-15832f6c2db7", "sighting_of_ref": "indicator--b03d2a0f-f8f3-4d3d-9b64-7daad5fbaae2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a87cb73-9f08-48d3-961e-0bf24ce6ccf0", "sighting_of_ref": "indicator--7974aea6-e576-4d06-a8ae-c07b86b54599", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa154f3-906c-4abf-b9a6-fc2bf53b3c26", "sighting_of_ref": "indicator--7974aea6-e576-4d06-a8ae-c07b86b54599", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad7b95d-4a5d-4591-beb6-9d7c919b1f21", "sighting_of_ref": "indicator--444aef53-461b-4052-8906-a0519410b8be", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5a5322-8c06-4718-8555-1d51a2a2b083", "sighting_of_ref": "indicator--360c042a-3106-402f-a2b3-bae03caf92a4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818f8caf-3d78-4699-8ba7-38247c956d70", "sighting_of_ref": "indicator--1b94a0ff-3781-4c40-a026-915eccac76fe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d808ffc3-6f83-4de7-9bb5-a4ca558cd41e", "sighting_of_ref": "indicator--71daaa38-d51d-46cb-b361-921f87a177b3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a5c858-c24b-428a-b00d-6fd75411ad80", "sighting_of_ref": "indicator--617cc359-523b-44a7-9880-5e290b044d48", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a9ae4b-be22-43ba-9fcd-7e07e10500be", "sighting_of_ref": "indicator--99019d80-fcf4-4fd1-8488-89987b1e943a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9ee5e6-7f67-46d0-80c7-0ee1e89d2e58", "sighting_of_ref": "indicator--9ca4d425-d310-41b8-8c16-51ef3661fa4a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8d37d3-c119-4110-9d29-a380fff80650", "sighting_of_ref": "indicator--9ca4d425-d310-41b8-8c16-51ef3661fa4a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141412f6-86c0-41cd-8721-289ce30fd0b9", "sighting_of_ref": "indicator--31e66f18-2f7f-4d79-b9da-ea1ed37f0b5a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542eb9dd-48ff-49eb-86b1-a92293599c22", "sighting_of_ref": "indicator--31e66f18-2f7f-4d79-b9da-ea1ed37f0b5a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56f8093-1b7a-45c3-b81b-706cc8e4bf33", "sighting_of_ref": "indicator--ca842f88-65c1-43eb-a0ec-8819e65d20fd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ac7532-08c2-474b-b67f-a66d4127f323", "sighting_of_ref": "indicator--ca842f88-65c1-43eb-a0ec-8819e65d20fd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ae6880-c2c0-4081-be08-4311dd2a0e2e", "sighting_of_ref": "indicator--2d499906-b09c-4c7d-9107-0abd362f6ceb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa900170-8d6a-4d49-9073-4f5f111931e3", "sighting_of_ref": "indicator--ad825b2d-92fd-4b26-9d82-126726f481db", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56bf119-b14a-46e5-8d7c-27867781b166", "sighting_of_ref": "indicator--ad825b2d-92fd-4b26-9d82-126726f481db", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a146ea-233b-40b9-9d39-b786a67db066", "sighting_of_ref": "indicator--3f8013e6-8697-49a7-aa88-301c01084207", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3aaed65-94a8-47cf-ad53-1dfa0f4b8d66", "sighting_of_ref": "indicator--37117d7f-80f6-4fa6-a696-15366c755127", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c37d926-dc8b-490c-a7e7-2ff9f8573819", "sighting_of_ref": "indicator--37117d7f-80f6-4fa6-a696-15366c755127", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db2777b-3090-4d43-ad39-b8e54932c2e8", "sighting_of_ref": "indicator--61906494-4f08-4808-8cbd-9a6645123b5c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1a0551-c95d-4877-a1c8-174822a54b76", "sighting_of_ref": "indicator--a71fab58-9002-4e31-bb07-7f1bac6e1ca2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99ed64a-7b33-4940-bd57-e31bc9e90d12", "sighting_of_ref": "indicator--42d9a4cb-a3ec-4759-93f4-516a6cef27fd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6295e8-86a0-40ea-99c1-6fdb528f93df", "sighting_of_ref": "indicator--42d9a4cb-a3ec-4759-93f4-516a6cef27fd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580e7725-fa31-4c64-9611-440d23f54e27", "sighting_of_ref": "indicator--538061d7-8a25-47d0-a68e-7a70d39c773e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888aa30a-491f-453e-9eb2-11c52783d59c", "sighting_of_ref": "indicator--91554f3d-d77c-4656-bb3f-24628afb127e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69aadf45-ea57-4757-9637-24c1af0a22b5", "sighting_of_ref": "indicator--2a3bae49-c4d1-4533-b84c-6b87091cea13", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08db3eff-db15-497c-bc92-a110d57aaf24", "sighting_of_ref": "indicator--2cc54d2c-d65b-4b76-8b91-625741e94674", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c08e48-51e5-4551-a8f8-82009d7d9e56", "sighting_of_ref": "indicator--a4167048-9dfd-45ff-a01c-39565ffa9690", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4bbd50-8c4d-4ea6-a0ef-eb022c5c41f4", "sighting_of_ref": "indicator--a4167048-9dfd-45ff-a01c-39565ffa9690", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d127f0-b7ff-4a97-a7ec-06ea0aeb6c76", "sighting_of_ref": "indicator--60fe79de-4dfe-4e6c-9f94-a210f1bc68c8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdbf94e-c794-4459-8785-605924cb6793", "sighting_of_ref": "indicator--2f5ad139-3e0b-43f3-be16-c9577020b9a9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d3fbfd-d16d-4d30-ab08-bd4f0453535c", "sighting_of_ref": "indicator--2f5ad139-3e0b-43f3-be16-c9577020b9a9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06387400-170f-4b04-a44f-e09caf21d3af", "sighting_of_ref": "indicator--cfaea674-2a48-48c3-87f9-855a70a4abbf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b13743-551b-49b0-acb6-dd96af5a97cb", "sighting_of_ref": "indicator--ec23f718-bcf5-4634-8037-50ed1367077d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03487aa-2a10-4a35-b6f7-6cad94493d55", "sighting_of_ref": "indicator--a27dd5fa-3839-461b-a5ba-499f07f853ab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c0b247-8f25-44b8-8983-3a1428c22c84", "sighting_of_ref": "indicator--ca905bef-6e02-4657-92e6-fd1a4efec9b6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54787cb2-4676-48a3-87ac-e94b7fa51f49", "sighting_of_ref": "indicator--ca905bef-6e02-4657-92e6-fd1a4efec9b6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00da57a0-63c6-4e68-8143-2f655bc5f818", "sighting_of_ref": "indicator--e13c02ee-3236-40b8-83c2-e4379f1d6fe2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a325fc40-fba5-46d0-8129-4a7c46b2151d", "sighting_of_ref": "indicator--35ab08f1-1bce-4e1f-91ec-587dc7f5191a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6448b3-e074-4950-9c96-92b5e351a64e", "sighting_of_ref": "indicator--35ab08f1-1bce-4e1f-91ec-587dc7f5191a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d22c3da-b04c-43f2-ac86-49cc9c233484", "sighting_of_ref": "indicator--35ab08f1-1bce-4e1f-91ec-587dc7f5191a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878a9e97-bbb5-453c-9f0a-b3339dc428f5", "sighting_of_ref": "indicator--ddf9a91a-81b5-4bbb-9f1a-610a77dd6871", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae96e41-2eb2-4f6e-bd7b-85ddf8dc4207", "sighting_of_ref": "indicator--65222d0e-f7c2-46ff-9fc9-116aef577380", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d7a8b0-19d0-49ba-a781-e17710eefe2b", "sighting_of_ref": "indicator--052818cd-56f6-4a4f-81ff-35290c3fe9dc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d848fbfc-bba5-45e3-ac34-7caed628ae87", "sighting_of_ref": "indicator--052818cd-56f6-4a4f-81ff-35290c3fe9dc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d02efb-30ee-4595-b588-8ffffa525fe1", "sighting_of_ref": "indicator--2836ea1f-9aa4-4077-84f1-c9e5f20cb03d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c631687-5d29-4f5f-b506-3293c70c48f5", "sighting_of_ref": "indicator--2836ea1f-9aa4-4077-84f1-c9e5f20cb03d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f010649-83b4-4e80-982e-373223ee62e8", "sighting_of_ref": "indicator--cf47be6f-00bb-4472-8404-30b44b71824b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04e2969-ba0e-4078-a439-4b80c267cb5e", "sighting_of_ref": "indicator--65aa860f-417d-4769-8676-0c605b72783f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5a7427-d848-4b16-b31a-c7b05aac5765", "sighting_of_ref": "indicator--faec26a5-fd6c-45ce-8f3c-2973b71bc3ef", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6cca622-3c7e-4680-ae1c-1900221225ca", "sighting_of_ref": "indicator--9ce13589-7949-430f-8eb1-f75538e0f4a5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45334470-dddb-46f9-bd12-89fa2f83dd32", "sighting_of_ref": "indicator--9ce13589-7949-430f-8eb1-f75538e0f4a5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f3f814-5d55-4800-8010-3b1963e2e260", "sighting_of_ref": "indicator--6dd180f3-73b8-46cd-addb-7ccf054bd1dc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479ed713-1f32-4afd-9a64-d6c3b8e08fe6", "sighting_of_ref": "indicator--2946f5dc-8635-49e1-9565-5d340ffe6c85", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362f5890-9c98-4055-9962-e547c69e3ecc", "sighting_of_ref": "indicator--4cbd92a0-3dee-45eb-829f-98ed28bb40fb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd551c64-1209-4b4c-8960-a86017d5c3a6", "sighting_of_ref": "indicator--179a9a0c-0d68-45b5-9e75-6b9c54cea693", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d89af0-0eff-4d36-b48a-69d351c63c77", "sighting_of_ref": "indicator--fc962c52-f3d0-4881-a63c-ff3ea1ebe72f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dd2696-a48f-4620-b830-c43a22feb752", "sighting_of_ref": "indicator--fc962c52-f3d0-4881-a63c-ff3ea1ebe72f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97969ce3-4f6c-4e2e-90fd-0bcd661fbd79", "sighting_of_ref": "indicator--b8da9054-0702-498f-8f6f-99e90383df87", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff3fc08-6855-4c84-9f73-25fc586fadd9", "sighting_of_ref": "indicator--bcacc047-024c-42dc-9ed5-3a41c0324d08", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079a4a57-7cb6-4e40-ac7e-f5821326d789", "sighting_of_ref": "indicator--77390568-874f-4750-88ca-8a303c537ee7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89160a94-efde-402f-a072-2fbdb6d110b8", "sighting_of_ref": "indicator--fc49cefa-3a2d-45e7-a47b-63922adbddd1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb06f8c-f314-405a-975b-a8e68f047623", "sighting_of_ref": "indicator--fc49cefa-3a2d-45e7-a47b-63922adbddd1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ededd8ad-eeed-4f36-992f-395b95bb958a", "sighting_of_ref": "indicator--fc49cefa-3a2d-45e7-a47b-63922adbddd1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ab7053-d25b-40b5-a525-ce321ee8f58f", "sighting_of_ref": "indicator--b7fcb66a-39e1-43d5-ba7d-0021d8c46c44", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba79b14-75d9-4be6-8262-bcbdbf598be2", "sighting_of_ref": "indicator--018a3c05-f5bb-498a-9b56-121e3d3a35a5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249d7eb1-2653-435f-8361-688ee17eea31", "sighting_of_ref": "indicator--018a3c05-f5bb-498a-9b56-121e3d3a35a5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef767ff-4faf-4aa2-af10-e0e52541414c", "sighting_of_ref": "indicator--cf2ce79f-f07c-41cc-858d-facb3693ad3f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc1ac87-e87a-4ee4-8b4f-046f47714cfc", "sighting_of_ref": "indicator--0538d704-6e25-461e-90ee-ffe2e214a94c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a91ce92-031c-4493-85bb-8943a090bd1b", "sighting_of_ref": "indicator--1693da6c-e96d-4d33-9ea9-6d02513ddba7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c459a075-19bb-4ccc-86f2-39ef2975c70e", "sighting_of_ref": "indicator--1693da6c-e96d-4d33-9ea9-6d02513ddba7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86989adb-0418-4d72-8dc7-efa850c982cc", "sighting_of_ref": "indicator--23dcc50d-c57c-43f5-ba9a-0f7f6534521b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be930083-e3f4-4414-a49c-93c926971310", "sighting_of_ref": "indicator--9ec340cf-db49-4f20-b190-fc196bf4aa51", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfd0d1e-9acf-481f-b641-c9f0dbc47098", "sighting_of_ref": "indicator--651c1db6-3577-4a73-bce1-f7396ac3434b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d357d06d-00c5-4b47-aa90-91bbf7e35884", "sighting_of_ref": "indicator--31d4c4b4-d993-4971-b852-d4cb4c019bb0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352636f0-cffc-4afd-ac25-7d33666dbef1", "sighting_of_ref": "indicator--f7c215aa-b9ed-462e-8ccf-2e2191ab67dc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c063fc5a-dcaa-4d4b-8cd7-f7c8f910b6cc", "sighting_of_ref": "indicator--f7c215aa-b9ed-462e-8ccf-2e2191ab67dc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2b785a-fcb9-4b1f-a171-dffcf0046f58", "sighting_of_ref": "indicator--f155b3ec-b6f9-4b08-a10b-9e2384dbb4e5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ddb572-8222-4036-8f6f-701933d96938", "sighting_of_ref": "indicator--f155b3ec-b6f9-4b08-a10b-9e2384dbb4e5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b52e98d-c71d-4bc3-95a0-9b938e05ced8", "sighting_of_ref": "indicator--fba16a02-0764-4670-a350-3495f32a4894", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5013f1b-d90e-4abf-a476-1b42a7bdae95", "sighting_of_ref": "indicator--fba16a02-0764-4670-a350-3495f32a4894", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e005943-dbaa-45c5-a236-a931067e4dbd", "sighting_of_ref": "indicator--1f8555a6-7d72-4746-b88d-a1a50da8bee0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d138d4a7-7f9b-4efc-bba8-af7df44bbc08", "sighting_of_ref": "indicator--671fd6df-d634-42f7-982f-badb16beb7d6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91fc32bd-a616-4d0b-851c-90e48dedc061", "sighting_of_ref": "indicator--8fccbf41-ac14-427d-bed1-6be6dff7b1dc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83650037-810a-4d19-9c5a-f813a0a685df", "sighting_of_ref": "indicator--da34b051-a6f3-4ef4-a805-3482f991f7b9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31464b3d-7d2d-4c97-9246-7544f17abae0", "sighting_of_ref": "indicator--da34b051-a6f3-4ef4-a805-3482f991f7b9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a92aa67-2bf9-4312-b94c-430b6ff9a130", "sighting_of_ref": "indicator--da34b051-a6f3-4ef4-a805-3482f991f7b9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064abf56-1928-44c9-b3fd-228d1bcad69f", "sighting_of_ref": "indicator--9eb47f54-1bc6-4244-8c83-c2945de776f3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b300dd9-153a-4e24-a530-b4b5e0cd0dfb", "sighting_of_ref": "indicator--9eb47f54-1bc6-4244-8c83-c2945de776f3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ada3e7-dba9-4ec9-9358-f04cf50cfd74", "sighting_of_ref": "indicator--be6a2f39-641f-48c6-af6c-c33c197788ec", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8105956b-e1c7-43d9-aaa2-5272c1c5cf05", "sighting_of_ref": "indicator--be6a2f39-641f-48c6-af6c-c33c197788ec", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24aede0-e027-43a2-a634-64276dc7df3b", "sighting_of_ref": "indicator--be6a2f39-641f-48c6-af6c-c33c197788ec", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595b5076-8956-4701-84be-ead200c7c7d6", "sighting_of_ref": "indicator--0ec0d087-9d31-41e9-8eec-c841eba4c62e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450b48a3-afe7-4f53-b12f-a9901f0639c4", "sighting_of_ref": "indicator--81eedf38-e141-41c2-ad0a-fb3fad07dbca", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5a2252-c011-4a74-8b99-4f78fb1a7151", "sighting_of_ref": "indicator--81eedf38-e141-41c2-ad0a-fb3fad07dbca", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca72705-7036-4d00-bc80-bf8084b1457e", "sighting_of_ref": "indicator--c9af648f-92e6-4cb7-ba9d-134f9f648404", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65bffdf-3370-4e22-bf7a-53edb543be04", "sighting_of_ref": "indicator--1d1a2392-af07-45ce-a5ad-bb2329a4c05d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c0500e-169a-4f31-8440-1eab2286372c", "sighting_of_ref": "indicator--f709b652-b2d7-417e-85c1-231dcb893b6a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c77628-a334-44d7-8cd0-ad8104f674c5", "sighting_of_ref": "indicator--a119d93e-37ac-4ae9-a9e6-349ba2b2a249", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec891da-87e3-482e-807a-452fc298b224", "sighting_of_ref": "indicator--f4b21cba-d6d8-4953-a260-e5e4b6c9f020", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad2aa47-6bd2-448d-a811-d5989954505f", "sighting_of_ref": "indicator--a1318c90-5027-43f0-bbe6-e12562128066", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb32e8a-9322-4949-841c-0c80293346bd", "sighting_of_ref": "indicator--a1318c90-5027-43f0-bbe6-e12562128066", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bebad88-7386-4e39-af58-d409f1452420", "sighting_of_ref": "indicator--49625922-fe6d-4f2a-af92-9317906f220e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654eefc0-34d8-4947-a39f-9605a4df9481", "sighting_of_ref": "indicator--0771e353-67f0-4071-8793-3dceb677c4ae", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42dcbf05-9691-44d8-bfd2-566989624df5", "sighting_of_ref": "indicator--1bdeef3f-0e6a-458c-9057-c94b4b731c2d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdc6233-52d5-4c86-8326-efea68cf0e47", "sighting_of_ref": "indicator--1bdeef3f-0e6a-458c-9057-c94b4b731c2d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b547572-8557-4b15-b3ef-f7b639af7336", "sighting_of_ref": "indicator--38da3f1d-270b-4178-a5d9-c84b1f9ba89b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51acac4e-c2f5-47f3-bd84-0217e00881a7", "sighting_of_ref": "indicator--38da3f1d-270b-4178-a5d9-c84b1f9ba89b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eeb1474-ceeb-457e-b4a2-7283315739ac", "sighting_of_ref": "indicator--21bfd8fc-1db6-409a-9cee-4519df184a1c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc97d7a-e2e3-4900-b661-00ee4497158a", "sighting_of_ref": "indicator--9c94172d-484d-4d04-92f9-26e66576699c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55acae7f-e485-4cc4-a3f9-b2e43ac42e9a", "sighting_of_ref": "indicator--205213df-bd37-472b-8a01-6b445b2cc2cc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b38f885-d201-404b-810d-76426b3e8733", "sighting_of_ref": "indicator--a6821e97-73d6-4267-b6f7-4b9ac72bd844", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eceb0704-6f4d-4c49-b932-08da6306d338", "sighting_of_ref": "indicator--ed8447cc-d8eb-4766-aa88-2cb16dbb76b5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001d3527-f772-4974-baef-cf17ae4bd701", "sighting_of_ref": "indicator--3285a625-7f51-4c4a-b94a-3f766e4dbe7d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af2154a-923f-477a-ae40-3326b54ab771", "sighting_of_ref": "indicator--3285a625-7f51-4c4a-b94a-3f766e4dbe7d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ac95a8-8993-434a-874b-715541adef60", "sighting_of_ref": "indicator--9f4dbc82-232d-4ac5-91a7-b8509aae08f8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9936b32b-b71e-4857-8a9f-68abc17f04b5", "sighting_of_ref": "indicator--e79fe16a-64a9-4d26-801d-97e44737e557", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9937aa63-d947-47ae-9980-0c618c452640", "sighting_of_ref": "indicator--d95e2b01-2ef6-430e-b9ad-b85ae1224aee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8d4426-76fa-4853-b6d2-b21146a66e78", "sighting_of_ref": "indicator--c6cb89ce-666c-4f15-8d43-f8622f964a81", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da67e7d6-db6e-406e-9dc1-34ff793c0882", "sighting_of_ref": "indicator--c6cb89ce-666c-4f15-8d43-f8622f964a81", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42efe9e-f1d0-4fbf-9342-534b08ea29b4", "sighting_of_ref": "indicator--5d5968db-6fdc-4cd0-aa7d-e2548c6680a4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d796f24b-5462-4e34-b880-3186046cc794", "sighting_of_ref": "indicator--5d5968db-6fdc-4cd0-aa7d-e2548c6680a4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e244d15b-5ea8-482c-849c-9937488b0586", "sighting_of_ref": "indicator--a2518c6e-0854-4b17-a933-bb6496da4d94", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8256e52f-f009-4e21-b52a-5a9d5e9dd7e2", "sighting_of_ref": "indicator--691a199e-db71-4980-a189-b90aeebabb84", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de95d0bc-2296-4d9d-a542-49c11b125bf2", "sighting_of_ref": "indicator--59d2e22d-4fb9-4c9a-a565-0acc0edb4bd9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95aff820-412e-4620-a10f-6ea4e02c080c", "sighting_of_ref": "indicator--73696a20-5fe0-4ebe-985f-66ebc07bc2f1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f593610-9a49-4548-924a-96509beb4f17", "sighting_of_ref": "indicator--73696a20-5fe0-4ebe-985f-66ebc07bc2f1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3338e4e3-bc6a-42d0-a47d-2e90985a6eb6", "sighting_of_ref": "indicator--ccac6f19-50ef-4ecc-9467-6efad53f7d30", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4146d4b0-9862-405f-98f1-305b2bce699a", "sighting_of_ref": "indicator--c37babf0-6ffe-4ab6-9ef0-2b0f066807f2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da4d1dd-0a68-4df4-ad60-2592dea2da0c", "sighting_of_ref": "indicator--c37babf0-6ffe-4ab6-9ef0-2b0f066807f2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c06626c-27fb-4b13-820b-aa469a041a1b", "sighting_of_ref": "indicator--a8a953ae-6001-49e5-badd-68c03744a13e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64015d08-3635-4f6e-aa03-015e07cc5fb6", "sighting_of_ref": "indicator--42be1894-e9fe-4ab3-b8f9-809ba6eeb6fa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee2e43d-8bd0-454c-a459-c5feb3922056", "sighting_of_ref": "indicator--79832c0a-dfad-46bd-86ba-397cfb53dcec", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c1c2e2-8551-40f1-aba6-f4521daf68e6", "sighting_of_ref": "indicator--38ad1f4e-126b-481e-8260-3dd1b070df62", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb76963-d514-45e4-855c-1c7b72b04890", "sighting_of_ref": "indicator--38ad1f4e-126b-481e-8260-3dd1b070df62", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0f6576-1046-4696-8aff-467f4efcccda", "sighting_of_ref": "indicator--00b0a2fc-f844-49e3-b594-94eebdc443f1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a7aa66-6bc4-4958-b5b2-47a6ff5cefa1", "sighting_of_ref": "indicator--f7f5a91b-88e8-4fb0-b42e-a46fb4d040ce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b3bb8c-4a21-4da9-aedf-51df8e8fa9f9", "sighting_of_ref": "indicator--a5ee2524-593a-435e-a2ed-afde6e5ebc2d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d09f2e-39a8-449a-8a94-80da249ee105", "sighting_of_ref": "indicator--f8af4e5c-2e0f-4484-9bfe-82eea2749890", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a762af11-c891-4ea6-b4fa-ad3768f3a126", "sighting_of_ref": "indicator--f511dee7-ad24-4d05-9338-63ee439694fb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacef4a2-9e32-49b1-84c0-6e747b3379da", "sighting_of_ref": "indicator--f511dee7-ad24-4d05-9338-63ee439694fb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4cc366-579c-4f64-b74f-7fbe603ac4cb", "sighting_of_ref": "indicator--b15e6d37-980a-4423-aa2b-a4e8490df026", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbbe36a-6106-4216-9a25-b63f19bea945", "sighting_of_ref": "indicator--81d0f355-e4ae-4552-8cbf-805dcf02942b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28fc6e4-55ae-4bbe-b43e-b2b799d42e50", "sighting_of_ref": "indicator--87b6eaf6-885e-42df-892f-22ffcbc397bb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae0c65a4-4cfa-4582-8273-fc025ba7b55d", "sighting_of_ref": "indicator--87b6eaf6-885e-42df-892f-22ffcbc397bb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6b2438-18e5-4d19-b5cd-0ba51ce4d475", "sighting_of_ref": "indicator--8257e402-b356-4780-80f8-4ebfab906f79", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3ec69a-8fc8-42d1-98fe-44917f6b9934", "sighting_of_ref": "indicator--0e326943-72e9-47cc-a171-16769051cce6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81daccd5-b3cc-4a07-bb4c-c48b4b6e58ef", "sighting_of_ref": "indicator--d3206114-837a-40e8-bfcf-e4f34df9b10a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba4384f-ab65-42c9-95aa-a4ce1db4b726", "sighting_of_ref": "indicator--dfd219ff-04dc-4501-a7f9-7cee90d27896", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28ec832-fd8c-4f04-b34e-31421cb36720", "sighting_of_ref": "indicator--0f01fb0b-05d2-445e-a65c-68beabc805eb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c96602-2dd3-453f-a396-b6361a069ba3", "sighting_of_ref": "indicator--369e42a9-109a-4299-8f54-c102dbdfcdd2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e6b5ea-93ce-4a64-9efa-2ede94a0739b", "sighting_of_ref": "indicator--369e42a9-109a-4299-8f54-c102dbdfcdd2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7045bac-5674-4e36-9eed-21bbac63d779", "sighting_of_ref": "indicator--bbb48737-4659-4c56-9482-c9b140369723", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcc4dd2-d4a6-4335-949d-78d8756b99a3", "sighting_of_ref": "indicator--bbb48737-4659-4c56-9482-c9b140369723", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed425b7-3a54-45e0-98c6-dad97c6764b9", "sighting_of_ref": "indicator--0fa13d5a-1816-4881-882f-2ef5175a7614", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ab2f59-d0a4-49b5-84f5-dac27dc4d91e", "sighting_of_ref": "indicator--0fa13d5a-1816-4881-882f-2ef5175a7614", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f886f68c-9db6-4320-9c77-ca5b7b656bdf", "sighting_of_ref": "indicator--00284048-7d53-432e-a946-7d2fff41d03b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6923ae16-7990-4f41-b53f-6d3b09f0d88d", "sighting_of_ref": "indicator--8abadb26-4637-49d2-afaa-4e570ca7f3db", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919878f0-5a7b-4945-8034-2cea8fc40660", "sighting_of_ref": "indicator--a590033a-81d9-4fe5-bd41-6f0d95b5f746", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca41fa9b-e71f-49bf-a1aa-a6a0109ff450", "sighting_of_ref": "indicator--5311ed4f-8268-478f-85b1-b7272be1a5fa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99652cd1-de51-4e03-aba5-753a5dc9ea0c", "sighting_of_ref": "indicator--94ccca58-498a-4574-ade3-bbd23be12f1d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74e72ac-5ac4-4b77-9f42-c1804d683559", "sighting_of_ref": "indicator--94ccca58-498a-4574-ade3-bbd23be12f1d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4686ab-5e7e-479d-8d6e-e40dc50a140d", "sighting_of_ref": "indicator--a8231a42-1490-4278-92f5-7399173034c5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee6ae99-b944-4a29-9e02-dfd4afb721b7", "sighting_of_ref": "indicator--a8231a42-1490-4278-92f5-7399173034c5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4da2bf-84e5-40d2-ab91-f965e255d4f5", "sighting_of_ref": "indicator--4e738c3b-b4d2-453f-97f9-68f213fbf960", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caace0a7-56b4-436a-aefc-53b2ce600273", "sighting_of_ref": "indicator--802c4270-bba9-472b-aef0-7fa6e38c2166", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836754a9-0442-4e1b-9b71-a948c8df958f", "sighting_of_ref": "indicator--802c4270-bba9-472b-aef0-7fa6e38c2166", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e39a51f-183a-4090-bbca-d4fd9b15a4ec", "sighting_of_ref": "indicator--6c48b996-db63-4bda-b01c-f2dc3f30902e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d337d3d6-b7ad-4fb8-a123-30736b5543f7", "sighting_of_ref": "indicator--2c75b5bd-f9a2-413b-86d0-32ffd11d71e6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac526a9c-1b79-41c0-8573-6439ee0d2973", "sighting_of_ref": "indicator--03cd0b73-00ed-43b5-8f63-1b06670b0057", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5272a9bf-663e-45d2-9939-c9100464d5d8", "sighting_of_ref": "indicator--9060d513-e0d5-4ba9-897b-db9931e62ebe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030487ad-9a5d-45a1-9576-6f339c3af2ce", "sighting_of_ref": "indicator--5acb0746-012d-4290-871a-b8b0027f04bd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ce05f6-442c-401c-972a-5e82b301a090", "sighting_of_ref": "indicator--5acb0746-012d-4290-871a-b8b0027f04bd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bafa7f05-1e01-4ce6-bfba-99b2e845222e", "sighting_of_ref": "indicator--7302ac24-d387-4372-98a0-dbb5b9c5f6a1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840cc52b-37d5-4b54-b3ab-2572a1b9a9d3", "sighting_of_ref": "indicator--c1430160-973d-44a1-b8a4-b609c04cb38a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f764e4-a355-49c6-a3b9-96fb1130bef5", "sighting_of_ref": "indicator--570d5288-54cb-4cf3-ad7a-e9d542c2e26f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e47ef1-a17d-4471-8d19-b2c638b18c99", "sighting_of_ref": "indicator--570d5288-54cb-4cf3-ad7a-e9d542c2e26f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73d382a-fc38-43e7-8fc4-bcf745918fa4", "sighting_of_ref": "indicator--320d83d3-ece6-4c84-b7f6-933cc4e1c7d1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b6447d-dd0d-4d05-94fb-ee3d2bf6e374", "sighting_of_ref": "indicator--275296e9-143e-49e4-a239-d2f8292cc7ae", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5caeaf45-eb19-46f9-b8c3-fcb98ab2e388", "sighting_of_ref": "indicator--275296e9-143e-49e4-a239-d2f8292cc7ae", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9886bc0-ab24-42e9-8e9d-e7bf4ebe8298", "sighting_of_ref": "indicator--b6842ec6-d7e3-4a57-9b31-015ff4266341", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81aa6098-78af-4ad3-a809-d14970490180", "sighting_of_ref": "indicator--b6842ec6-d7e3-4a57-9b31-015ff4266341", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cae2ce-e344-4596-aaaf-25c317e13665", "sighting_of_ref": "indicator--b6842ec6-d7e3-4a57-9b31-015ff4266341", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d598dda-9956-4b60-810f-38cbc72da37f", "sighting_of_ref": "indicator--c86dc362-acca-44c5-ad5c-df87503210e4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eef143f-4bcd-4e44-933e-80b673c313f6", "sighting_of_ref": "indicator--c86dc362-acca-44c5-ad5c-df87503210e4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbfa2b75-482c-4a01-bb49-19f753bd8501", "sighting_of_ref": "indicator--c86dc362-acca-44c5-ad5c-df87503210e4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece06a64-89c5-4ac6-9f00-60fa36964e5b", "sighting_of_ref": "indicator--3228c05e-1107-4ddf-a0df-897b8f69f723", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f3c7aa-180a-46a7-9560-1d2ad4281392", "sighting_of_ref": "indicator--3228c05e-1107-4ddf-a0df-897b8f69f723", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1826c3-dd50-4410-bf41-3f4326283be2", "sighting_of_ref": "indicator--e5db7fcd-4cb7-470c-8bfa-1f84fac85ac5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7254ac2-6abd-4a03-bce1-f09b948d7015", "sighting_of_ref": "indicator--e5db7fcd-4cb7-470c-8bfa-1f84fac85ac5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6653fde0-820e-473b-85fe-62b9ffa760e9", "sighting_of_ref": "indicator--2f48bab4-0073-4a80-be15-894ee0165c3f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac64835d-d044-433c-8c3b-7e23f8b11182", "sighting_of_ref": "indicator--2f48bab4-0073-4a80-be15-894ee0165c3f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99e2355-8e63-4e25-a256-04c261e3b205", "sighting_of_ref": "indicator--1435ae14-d6bd-4858-a126-c8bc1383c31c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682f00fb-77b9-4a4b-b871-d0e05b504d1f", "sighting_of_ref": "indicator--1435ae14-d6bd-4858-a126-c8bc1383c31c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42cda31-f104-40d1-ac56-0d78cd312446", "sighting_of_ref": "indicator--a3c4c923-0c9a-4093-abc9-f2246a5e92b6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c609f42-72f6-4be2-947c-62a11b3120c0", "sighting_of_ref": "indicator--a3c4c923-0c9a-4093-abc9-f2246a5e92b6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3742a7-c073-472b-9253-68850a0e9c08", "sighting_of_ref": "indicator--01c2de1d-7c48-47d6-8b61-d535e1661882", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2989f5e-be42-4e0d-b00b-a5c8c98abc5d", "sighting_of_ref": "indicator--01c2de1d-7c48-47d6-8b61-d535e1661882", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b880abea-be93-4eda-86c0-53f37923fc62", "sighting_of_ref": "indicator--cef43648-2348-4f7b-9669-159da1d9d36e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b727770-2451-4304-8f82-896c10ee43bd", "sighting_of_ref": "indicator--cef43648-2348-4f7b-9669-159da1d9d36e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b250b85a-3829-48fd-ac18-019aabeb9c56", "sighting_of_ref": "indicator--77c0f11c-be6e-4a67-a6cb-57784d136c90", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b141a86-2f21-494d-ae1f-435f6acd9b62", "sighting_of_ref": "indicator--82ff3de1-5e5a-495c-8f40-9cb233e0acc2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd8ce6e-6fea-4572-9dc5-1e86e302807d", "sighting_of_ref": "indicator--82ff3de1-5e5a-495c-8f40-9cb233e0acc2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b8c323-610a-4cbc-9eaf-28925ce66de6", "sighting_of_ref": "indicator--82ff3de1-5e5a-495c-8f40-9cb233e0acc2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7b7cae-f856-469a-a25c-52adc984d582", "sighting_of_ref": "indicator--659e0f5e-5cc4-4d9c-8afe-39bbc733e48b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a759b415-5235-44c1-b078-68d5996b9c6c", "sighting_of_ref": "indicator--510d5e19-b9cf-43f6-ae58-ca440ce11098", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e783949-e854-4426-9923-448e81426399", "sighting_of_ref": "indicator--9c376d6d-1e8c-4012-84e7-9404b6a4dd32", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3880bb-92fc-444c-9173-68d08cdda291", "sighting_of_ref": "indicator--8758744f-ae5b-430c-af86-400545dbf083", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c0365a-57f3-443f-b4ef-5bf3d5662a71", "sighting_of_ref": "indicator--c598d110-da1e-427c-ad1e-c2346127a132", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b875d929-d65c-4f2f-90e9-f7fb3f45fa39", "sighting_of_ref": "indicator--3717a8f8-7e41-4996-972d-536ab28fe72d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4d6b86-0440-43d2-9e5c-2de6680cf31f", "sighting_of_ref": "indicator--3717a8f8-7e41-4996-972d-536ab28fe72d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d652ed88-4fd6-45f1-9241-22cde5b9a617", "sighting_of_ref": "indicator--bdff78b6-68ec-4a7c-96fb-b61967284e1b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04f973b-2b09-4c7c-b7d1-de148eb29512", "sighting_of_ref": "indicator--2410c1d8-5f4b-424c-b071-94db0f1a73ed", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce54f59-01bd-4b2e-b863-bb92cfadc839", "sighting_of_ref": "indicator--3bf808ac-8ab1-475d-9c74-69952491581a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823c25cd-6187-46c9-a367-e5a53a27569c", "sighting_of_ref": "indicator--3478ea25-4970-4b07-8160-b5e462c01136", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d15657-9a52-4149-b994-872166af0331", "sighting_of_ref": "indicator--168b6ebe-952e-477e-a3f6-808daa5e7273", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f219ab97-8905-4046-b4e5-fe0e8e3ab228", "sighting_of_ref": "indicator--408674a6-b431-4228-a2d1-b36b92a9711e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9362645d-3f3a-4bc5-b1ae-355fd0634bcd", "sighting_of_ref": "indicator--ab403597-01f1-4c7f-8f4c-666c6f52330b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03b51af-2aba-4142-9bb3-4e756ab0e1f2", "sighting_of_ref": "indicator--682e22f9-c780-4049-8783-562824ec3969", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ddcecf-f6e1-4c12-9cfa-364e170c04bd", "sighting_of_ref": "indicator--c8269e2e-6898-4973-9ae4-a3416851c38b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1877cb75-08a8-48a9-986d-3d58d0ac1a27", "sighting_of_ref": "indicator--c8269e2e-6898-4973-9ae4-a3416851c38b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49d939b-049b-4159-92f5-50d8a9df5b75", "sighting_of_ref": "indicator--c84ce2e0-6196-4723-ab79-fc1dd18d1685", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e4f911-cc77-46c8-96a6-0d801fd10641", "sighting_of_ref": "indicator--e154890d-73c9-409a-b65c-8e04e1432166", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d066ce56-e53e-47dd-a3ac-3ab60bfede7a", "sighting_of_ref": "indicator--46003313-42f3-43e2-8502-e1f2443f1f20", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3578ded-f4ef-467c-9cbf-40ee34464ecf", "sighting_of_ref": "indicator--d4f07976-1855-4dba-a856-4fc8c48cbff3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df03530-7fbb-45dd-b285-25f20642a59c", "sighting_of_ref": "indicator--e71c89a9-c2ff-4155-94e2-b2d03a107681", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85dbdf0b-c3bd-4e0c-ace8-28ef70d7addf", "sighting_of_ref": "indicator--06e52de5-e05c-41e5-9dad-c76ad0d058f2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45af8d73-8021-4f77-b020-825458269651", "sighting_of_ref": "indicator--adda91c7-0bee-4caa-9842-ed4c91f908c5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1bb599-08c8-41a1-a8b8-c6df64022900", "sighting_of_ref": "indicator--1696f5eb-d840-4ccc-8210-432481049d27", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750807a0-d744-4276-9670-e77542526118", "sighting_of_ref": "indicator--675d8aeb-bef0-4d36-9fb4-90601c5470fa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abd72c4-af83-4450-9dc8-9a98bd5abe13", "sighting_of_ref": "indicator--76290a7a-6070-47c9-b25e-87a95ce54b8e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811a53aa-f457-4548-b031-56d7190ff8d8", "sighting_of_ref": "indicator--9eb7d492-658f-4e40-9804-01844d3820c5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3557a347-1e7b-4ff7-b9fa-4c2e3546897a", "sighting_of_ref": "indicator--0ca47d51-b53b-4cb3-9ed6-6133b268be14", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b061d67-04f5-42f3-9387-146bbb95ada0", "sighting_of_ref": "indicator--0dfc5859-4157-4a82-9059-20bff5c2f7e1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd08bd9a-4e35-4916-99d1-7fcdda60ac99", "sighting_of_ref": "indicator--7ee9ddd7-0208-4fe9-a5bb-dd4aad993939", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b54b05-0fa9-40c6-8b2b-f8b89f5785f3", "sighting_of_ref": "indicator--09e5fc63-bb4f-4f50-a5a0-cec667ce314e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6362c42f-1549-40d9-9bb5-d6f9c9ae73ed", "sighting_of_ref": "indicator--09e5fc63-bb4f-4f50-a5a0-cec667ce314e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4bf4c3-ef3c-4f5e-8605-b4599dd8d100", "sighting_of_ref": "indicator--148a7620-d853-48f7-b392-8ce4040eb51b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb21181-87cd-40db-92b3-78743a3bfaa5", "sighting_of_ref": "indicator--22b3eb0f-e2b2-4251-9be3-2ead90b52a1a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce6c2be-6c3a-4d3b-abdb-aa7f46c0b8d2", "sighting_of_ref": "indicator--c7b0f6e9-deca-4f17-9b16-a28352b8edde", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22705e0d-d822-4ce7-8005-bfaa1b0fcd55", "sighting_of_ref": "indicator--a8a940c5-9d31-4b31-bba2-f523c4baf965", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf728b4a-608f-4186-bf07-7f48666935cc", "sighting_of_ref": "indicator--76c680bf-e1f9-41b4-a1da-9fe5f40ccf5f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466548c2-73c5-4e96-a4c5-071e976b7533", "sighting_of_ref": "indicator--3aa31e58-803d-4f2e-a54a-9b9492001453", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7a4485-75d2-4e59-842f-9fd738bc2caf", "sighting_of_ref": "indicator--ecd14817-c03c-4498-ac83-bc72f5e7ac0d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2021cd-e2e3-40a1-b9ac-00d0f27233dc", "sighting_of_ref": "indicator--875b9440-ee41-4bd9-a0a6-4001166e85b3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ad3d1c-500c-478d-b518-02aeae41e06b", "sighting_of_ref": "indicator--fa7cceb0-ecd7-4f9b-8b10-99cd4eee6f0a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fcd757e-1328-4777-a9d5-c12e0f15db32", "sighting_of_ref": "indicator--753650fc-a4ce-422f-90cb-044f039f00f9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3109d4-ce42-486d-8269-9e220ab1ac55", "sighting_of_ref": "indicator--8d1aed42-7fd2-441f-a4f5-3682863387f9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2549b825-b591-448c-88b0-1e2d0f0a669f", "sighting_of_ref": "indicator--d9ab8ace-d67a-480c-8824-26dd7f26adfe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb34c891-9fff-4be1-8863-7f05e6ba9f51", "sighting_of_ref": "indicator--6d795b85-1fef-4e0a-b30d-703dc80fb6a9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855c4d1e-3229-4418-9db2-f24308416dc5", "sighting_of_ref": "indicator--c83e2349-6af2-4db5-a29a-cfbf8cec94bc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3622b2-b745-4619-b004-d678fa4defe6", "sighting_of_ref": "indicator--f7192193-6cc2-4bb3-9438-335a4be02f3f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a4f97e-e7b9-493e-9c4e-f5f8dc3a3ed5", "sighting_of_ref": "indicator--30796240-ea9d-4e9b-b62e-5a6572b74e51", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4275bb5e-5cbe-4cf6-9620-c33e763cb5b2", "sighting_of_ref": "indicator--99086b3b-de14-4d80-9249-62b1532ba17a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27b347b-18a6-42b2-ac25-5ae9d1983952", "sighting_of_ref": "indicator--20a09d62-965a-4640-978a-bd87fa785e36", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b689a8b7-e420-485d-83f6-781ba98f001f", "sighting_of_ref": "indicator--9d420764-2797-4fe0-af5e-7e2b2ffd2cbf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e5d2e7-db0e-4657-ac5d-a9017662a658", "sighting_of_ref": "indicator--55ec2c6c-54f5-4004-a179-fac81e1cb225", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0035ccc-c29f-4ea1-a5e1-08bfc2602f2a", "sighting_of_ref": "indicator--b2a93f17-c604-4ea5-b1b5-7f504cf620ac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf09216-3ccd-4a98-913f-d1ad910e7c40", "sighting_of_ref": "indicator--b2a93f17-c604-4ea5-b1b5-7f504cf620ac", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0a77b3-bba3-461c-90e2-c9620d5da8eb", "sighting_of_ref": "indicator--e0cbb44a-435f-4e6f-9434-d6cc50e4b8e4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a75b97-13fb-4ee5-a01b-a166fe79c238", "sighting_of_ref": "indicator--e0cbb44a-435f-4e6f-9434-d6cc50e4b8e4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aae7e1b-1915-4b03-a143-7205fe26f9bb", "sighting_of_ref": "indicator--00e27541-ce0d-4450-9068-023d1316d6ab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7639bf50-4d67-4e95-a7cd-13252624571c", "sighting_of_ref": "indicator--00e27541-ce0d-4450-9068-023d1316d6ab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aecb188f-9b3d-4270-86c7-3b04c2ba64fe", "sighting_of_ref": "indicator--00e27541-ce0d-4450-9068-023d1316d6ab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6e7703-0a6c-46b6-ac91-7b2a9093e69b", "sighting_of_ref": "indicator--86db42b8-ec0c-4dc6-8f0e-14e573bb23fb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92ec651-f550-4485-aabd-917a6eb028e0", "sighting_of_ref": "indicator--81bfdfc5-431d-4de4-9d96-2c5754e51628", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cd1844-3907-41da-bbdc-ee2f4e3b416a", "sighting_of_ref": "indicator--84ecf9a7-06a5-4bfc-ad57-ab2306efa8e5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c39eaa-9612-425a-8642-f352d9559b67", "sighting_of_ref": "indicator--8a80554b-8710-46d3-bd9e-f96a623069ba", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6384bbc-6487-44d8-8463-45871c05a9f6", "sighting_of_ref": "indicator--c587d882-bba6-4b2f-9c60-630bf654cfaf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab0d184-56d8-49bd-99e4-5088785b7738", "sighting_of_ref": "indicator--fa591802-8191-45ca-a9eb-dba5cda8f9a5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5becb995-9354-4b01-8ea9-ff7ce59888a3", "sighting_of_ref": "indicator--913e723d-7b84-4d81-ab28-b2d06d88ed81", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f43930-9bd1-497d-b449-ce07e1c05c4b", "sighting_of_ref": "indicator--b4a6c1f0-9acc-4064-9a7e-9dd94178e15c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9329d206-8748-44c9-a936-6624ed404db1", "sighting_of_ref": "indicator--b9f37e03-0352-4017-90d6-ba89419657f9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4032b0db-bb7c-43fe-950b-c30c3779a455", "sighting_of_ref": "indicator--5b5a02e4-8b5a-4f58-84cd-aa540e54be32", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3bb557-537a-4fdb-abc6-306e5b7e4191", "sighting_of_ref": "indicator--4f43f2cf-05a1-4256-bec3-11754dbb3171", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1deb0f-900e-4122-be7e-75ef6197dd79", "sighting_of_ref": "indicator--9955e9fd-59d8-447d-8600-a948846be5de", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccf9129-da3c-4f40-b65c-9fdd4f2fe539", "sighting_of_ref": "indicator--44ef476b-cb9f-44c0-a5e0-94066dffdbc6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505340a8-c7f7-4a2f-bc1b-7a231d1a5f4e", "sighting_of_ref": "indicator--f75b9c35-5990-44b9-b35e-b22e2ea0aa5d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b2980e-1224-40c3-a574-6486379249c3", "sighting_of_ref": "indicator--8afee985-9d8c-4544-a6bd-6aa1f9f62671", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07948f9f-ae88-4e6c-8f22-22e00a55511d", "sighting_of_ref": "indicator--7658fced-b0bc-4b9e-8d68-627473ce0d78", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7be2b8-3b96-4938-a788-15045dedd87d", "sighting_of_ref": "indicator--7f04c6f8-c961-41a9-8625-0ed35251d147", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851ca943-54db-4bf1-8bbe-2cdbf6cf571a", "sighting_of_ref": "indicator--ce39eb5e-4e03-49d8-b5df-f532c57e37fc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58126c96-ac85-4a41-941d-82f018ab6b53", "sighting_of_ref": "indicator--ae831980-e1e7-4fec-8b8e-5c6df31874d3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f5bfeb-1a32-4144-b89f-9c3f0064b0d9", "sighting_of_ref": "indicator--dc37c2a2-623c-4a9f-9057-ed36744a635d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93798a5e-8cf6-4f56-b726-a4be4dd5d472", "sighting_of_ref": "indicator--4b2b10f0-b2df-458a-a668-bf6423ebd1bc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f041ba-d089-4421-869f-aa21c1266670", "sighting_of_ref": "indicator--8786a45c-4fe8-4c8d-8688-bdc016619948", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c2a95e-b09a-4b82-b026-cd6950eda2ae", "sighting_of_ref": "indicator--14f9b4a1-334a-4631-b4bc-389872b51cef", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be28622e-410b-4f19-9a14-90b84fc2024b", "sighting_of_ref": "indicator--6f3574cd-a3a8-4b12-9edb-e5f955ab976b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5073098b-22ad-4720-aef1-fc2b82f47e81", "sighting_of_ref": "indicator--f3ad1d1f-7d55-439c-98fd-d24c5ce8bb74", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b3e1d0-4fc1-43d7-adb5-d7a65a6bfd40", "sighting_of_ref": "indicator--8627a264-3d8e-444d-b37f-91c4c3c841a2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9126902e-bf91-4618-a6d9-a38a3e535145", "sighting_of_ref": "indicator--8627a264-3d8e-444d-b37f-91c4c3c841a2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975c405e-bc58-4f15-bf0c-46ed4f8504b0", "sighting_of_ref": "indicator--3c205d27-06e8-4237-8cc1-ed44fef196bb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91db7f0-1a3f-49e0-b483-6b33c395579b", "sighting_of_ref": "indicator--baad7e46-6c61-46a8-8675-6732a4dd4390", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a48249f-57a4-4d72-97d0-0b1304b0fd8f", "sighting_of_ref": "indicator--baad7e46-6c61-46a8-8675-6732a4dd4390", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e4a65e-5ee1-42b8-9520-03c8ded84ea0", "sighting_of_ref": "indicator--6fdd3bbf-5368-4006-9db8-7bb4181351af", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae3fcc5-aa09-4161-8603-e95cae746eeb", "sighting_of_ref": "indicator--6fdd3bbf-5368-4006-9db8-7bb4181351af", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b2cc5e-b5cf-4b4f-ab64-34da3a4023e7", "sighting_of_ref": "indicator--6fdd3bbf-5368-4006-9db8-7bb4181351af", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baabd596-6406-4eb3-b536-09a15e471580", "sighting_of_ref": "indicator--f8a21ee9-2e4b-4cce-8110-0ec10fd90fdf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f80f317-47df-4b87-aa40-aa9a266d7e20", "sighting_of_ref": "indicator--f8a21ee9-2e4b-4cce-8110-0ec10fd90fdf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21dbfe3-8734-4c37-83fc-aba31ace2dcd", "sighting_of_ref": "indicator--f8a21ee9-2e4b-4cce-8110-0ec10fd90fdf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfcc8787-9c41-484a-b49c-3c4788aebd83", "sighting_of_ref": "indicator--0487b8eb-31c3-4a4b-9e99-935df1c5da20", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda55953-b3bf-4b23-b371-346ce336acd0", "sighting_of_ref": "indicator--0487b8eb-31c3-4a4b-9e99-935df1c5da20", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1b1aca-8111-44eb-99f8-afc7ec2c0ae5", "sighting_of_ref": "indicator--0487b8eb-31c3-4a4b-9e99-935df1c5da20", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c28983d-5c97-41f8-93c6-85958c5bcac5", "sighting_of_ref": "indicator--9d0302ae-e58f-4c36-ad3f-12f2df4d40a4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf877ac-6f8e-4757-93c2-58e3049680a3", "sighting_of_ref": "indicator--9d0302ae-e58f-4c36-ad3f-12f2df4d40a4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73feb7e-2364-483f-99dc-bb65bf68f0c6", "sighting_of_ref": "indicator--9d0302ae-e58f-4c36-ad3f-12f2df4d40a4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8288b1f2-e395-44c4-8a90-a6574b86b775", "sighting_of_ref": "indicator--223ac1c1-13f3-4d3c-9fef-22cd6b8a67e2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c9ee7f-a9f4-4118-a7c5-820bb4b8eec6", "sighting_of_ref": "indicator--223ac1c1-13f3-4d3c-9fef-22cd6b8a67e2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23d34b7-5d6a-4b31-b4c0-e8e1fa0182e0", "sighting_of_ref": "indicator--223ac1c1-13f3-4d3c-9fef-22cd6b8a67e2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05b33c9-15c7-42f0-92a2-6e5cf0d88676", "sighting_of_ref": "indicator--2a0c2944-8737-4e66-857a-5da41d55501c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ff20db-7146-4b7e-aace-aac25a8f0cdb", "sighting_of_ref": "indicator--2a0c2944-8737-4e66-857a-5da41d55501c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2f6a13-47ad-49b7-960f-1f4fef086db7", "sighting_of_ref": "indicator--2a0c2944-8737-4e66-857a-5da41d55501c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff4d889-d7e7-4df8-84f1-e7a47640a95d", "sighting_of_ref": "indicator--9693e321-42e0-4ba8-ae16-3363e6e1bdfd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37110b4-212c-4568-a573-f2be6c1b701c", "sighting_of_ref": "indicator--9693e321-42e0-4ba8-ae16-3363e6e1bdfd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31690311-503c-4175-aa32-2e9706894e8f", "sighting_of_ref": "indicator--9693e321-42e0-4ba8-ae16-3363e6e1bdfd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7ebcd3-3f88-4e04-9453-9ba704f7478c", "sighting_of_ref": "indicator--931d9f03-b994-4865-b34c-4e91e9be94f5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d41cafe-5c5f-4777-8926-477e52f96f63", "sighting_of_ref": "indicator--931d9f03-b994-4865-b34c-4e91e9be94f5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76d6a9a-7051-4e21-819b-6533926b3072", "sighting_of_ref": "indicator--931d9f03-b994-4865-b34c-4e91e9be94f5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67315133-ecc9-4653-b8b2-9b4dbcf716ff", "sighting_of_ref": "indicator--17569027-50d7-48b3-b643-e8bc591c9fb4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086202a3-76da-4e27-91db-9c0e3bbda8d1", "sighting_of_ref": "indicator--17569027-50d7-48b3-b643-e8bc591c9fb4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1311f0b-3972-4951-97cd-1f3a2462749c", "sighting_of_ref": "indicator--17569027-50d7-48b3-b643-e8bc591c9fb4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e7392d-f410-4872-b6f4-6a4818bbc553", "sighting_of_ref": "indicator--42448dc5-082b-4d22-adec-fc7169d4a001", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe6bc75-d313-414a-bd77-c163b6bca7ed", "sighting_of_ref": "indicator--42448dc5-082b-4d22-adec-fc7169d4a001", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927bb6a6-bdcc-4ea7-96ae-a5b196b6d712", "sighting_of_ref": "indicator--42448dc5-082b-4d22-adec-fc7169d4a001", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63838270-ea77-4e4a-a1f3-01981660c6b5", "sighting_of_ref": "indicator--ee362607-1d74-46ed-af0e-9bd17a448fac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e98570-1af3-4eef-9c20-3bc712ccbb2a", "sighting_of_ref": "indicator--ee362607-1d74-46ed-af0e-9bd17a448fac", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f20a647-8836-428d-8dd8-71f6f28e75c2", "sighting_of_ref": "indicator--ee362607-1d74-46ed-af0e-9bd17a448fac", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dca69ec-dd1e-4f76-9398-d98aaa13d5fe", "sighting_of_ref": "indicator--31879967-c071-48f4-8700-dc0949f252b0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6e5795-197d-47be-b6fa-beb159dda9bf", "sighting_of_ref": "indicator--31879967-c071-48f4-8700-dc0949f252b0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9543c56-bcde-44e4-865f-66c3dfbc850c", "sighting_of_ref": "indicator--d381f727-cfcd-4c8c-b2b5-ae3fbea9da27", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e82460-641c-44f2-b2ca-9283eed35f7f", "sighting_of_ref": "indicator--d381f727-cfcd-4c8c-b2b5-ae3fbea9da27", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71685925-0bbe-4011-93ec-f1b2864385bb", "sighting_of_ref": "indicator--97575b48-918b-4848-8fa5-2cfe3f514bbc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8a3e15-9e7e-4d83-b4f0-406b898823f8", "sighting_of_ref": "indicator--97575b48-918b-4848-8fa5-2cfe3f514bbc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8a78e1-cdc0-427b-8469-8aa49689ad0d", "sighting_of_ref": "indicator--97575b48-918b-4848-8fa5-2cfe3f514bbc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0980b526-1e48-4869-9b10-271ca04ed82a", "sighting_of_ref": "indicator--b67541dd-2409-4487-9414-d5ccb69507ee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6192ab0-84a7-43a3-ae38-a18592c15634", "sighting_of_ref": "indicator--b67541dd-2409-4487-9414-d5ccb69507ee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dafa7c6c-8b1e-4677-9946-9e8f5aa5eb9c", "sighting_of_ref": "indicator--f6132555-ba5e-483c-9820-ee9154b1f251", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc866a4e-5e0a-428e-917b-feaa11186d78", "sighting_of_ref": "indicator--f6132555-ba5e-483c-9820-ee9154b1f251", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17221b5a-c011-4691-8dce-74131fa5562c", "sighting_of_ref": "indicator--f6132555-ba5e-483c-9820-ee9154b1f251", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d93286d-8127-4cc0-805b-aeb6effdde54", "sighting_of_ref": "indicator--3814a00c-4ea0-44b8-af1e-aa78a5ca6738", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b965f38-6f8e-463b-a8d7-bd9b742dd7df", "sighting_of_ref": "indicator--45e150f8-aee2-41e4-8dfc-4c3fdb096bbf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7bc4c3-0d7e-4f21-9cc2-a2d9de0221ff", "sighting_of_ref": "indicator--049336e8-4976-434a-b9cf-f04f333d4be6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6615e57-f32e-4519-92c4-d1ae05c4fd39", "sighting_of_ref": "indicator--5531bfa7-88b2-4e17-9ecb-3f7917ee57bf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57aa158-44da-4daf-b715-f0706349894a", "sighting_of_ref": "indicator--0b287226-9b23-4750-b794-554e8a5276ce", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2f73c9-ab17-4898-8ff6-912fb13bed4e", "sighting_of_ref": "indicator--95deba9b-cd9c-4b3b-a520-29b6386be12b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9e9cb1-b2a2-4ab7-8252-eb943e1e6cf4", "sighting_of_ref": "indicator--52cde3e3-7de6-454f-b033-082455e8421f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22f016c-b521-4fdf-9f29-173df362dd33", "sighting_of_ref": "indicator--f34f2154-4e03-49aa-8ddd-60eccc4ceb4e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f459a150-7336-444a-82d0-9235f82f499d", "sighting_of_ref": "indicator--4727c8fb-ac33-4a73-ae71-e74eb033bf07", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e427ece-2652-41a5-be21-c4fe509f1276", "sighting_of_ref": "indicator--6779d5b9-b69c-495c-9a87-c8f5c466b852", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05034a55-fc87-4629-886c-05a4d8b6ce1d", "sighting_of_ref": "indicator--37e9991d-78b5-4a4b-b414-ff8d028ca7f8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a4eee5-18c9-4214-a3af-c424cecb5bc7", "sighting_of_ref": "indicator--a4118224-a4ea-41b4-b4a2-5ff9d97d714a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8561c781-4d4f-4dc8-96a3-6960fb4d107f", "sighting_of_ref": "indicator--0f6fcdb7-855b-4c54-9ed8-dafc572ab66a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21c82c0-c163-46ec-91c8-c2ef8ac71d6b", "sighting_of_ref": "indicator--afad4b9f-a62e-4991-b195-a522ca6a0c2e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1545193f-bf1b-4885-806d-bb945290d6b5", "sighting_of_ref": "indicator--81eb9f70-6c96-4022-86c0-402a43515d3b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f54576-a263-49e0-ad96-361662ac43a8", "sighting_of_ref": "indicator--d4bd9c97-4125-4608-a992-6242c5dc51f7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68838349-36ea-4d92-82c7-59f232603bc6", "sighting_of_ref": "indicator--7536b825-4170-4a84-8628-f4a30c536e5f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db8f877-6b4e-4dcb-bc89-46b058bed712", "sighting_of_ref": "indicator--7536b825-4170-4a84-8628-f4a30c536e5f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1b77ba-5109-4f97-a575-73e6622e4b45", "sighting_of_ref": "indicator--8c690bcd-36c7-4adf-a082-144e522e9060", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae94261-e770-484a-8e1c-9028f3690a55", "sighting_of_ref": "indicator--a5cdde58-4a03-46f8-a1eb-b1671a865a26", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484b407f-5dcc-453b-8051-83e6229a80cf", "sighting_of_ref": "indicator--a5cdde58-4a03-46f8-a1eb-b1671a865a26", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c338e397-15f6-4faf-a014-e27ff27fa62f", "sighting_of_ref": "indicator--8024d50d-157f-4455-aac5-2ebdb4748296", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5ccab0-724e-4ca2-bc01-3d3120e23f83", "sighting_of_ref": "indicator--e9dfd38b-6943-4a94-8219-95e56a3ce58b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b4cb8d-18f6-46e5-9d86-8ec476eeaed0", "sighting_of_ref": "indicator--3a4cf642-d78f-450c-873a-a6e52aca7a7a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d6382e-8368-4a11-946b-1a1b65880f48", "sighting_of_ref": "indicator--612479c6-9340-4dd3-a284-325b3dbb76ee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29ca75a-a597-4cd0-bf08-391b4a94d49b", "sighting_of_ref": "indicator--dcefbaae-9ac7-49ba-9f6b-8b01e6fb365a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e201df-b7ed-4c88-ba78-b4df321fa942", "sighting_of_ref": "indicator--03eda14f-9a61-4073-87d0-c9b17b0a4109", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3810c9b-473a-4e75-9cc7-9e6dae4e5faf", "sighting_of_ref": "indicator--de521615-50ba-428c-a13a-d19b1c27d7d0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0733aefa-795f-421c-aa93-c416d26d6f35", "sighting_of_ref": "indicator--af593f03-9972-4b83-aa16-e7127bd0b5a9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e12c32f-3cf3-42b6-9026-efaf952c31ad", "sighting_of_ref": "indicator--af593f03-9972-4b83-aa16-e7127bd0b5a9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67c7e44-64b1-4020-a2ac-197e5b424bee", "sighting_of_ref": "indicator--2a1a978b-6c86-4e82-a772-dd619f3c1c45", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67acd436-f186-4dcf-b6a2-8ecaee7f8793", "sighting_of_ref": "indicator--2e92b287-bdca-416f-87f3-4c6adeed81b0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357a196f-e7d9-43f9-b147-431d53ff5f86", "sighting_of_ref": "indicator--c1d40df1-0a51-4505-ba2e-70719f2cb93f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b8733c-922e-46c9-a07b-e0241cd622ef", "sighting_of_ref": "indicator--c1d40df1-0a51-4505-ba2e-70719f2cb93f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1f4689-499c-486a-aded-425f0d0e7381", "sighting_of_ref": "indicator--9f96635d-be11-44a1-88ff-19464f0ff004", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dab8703-b768-405e-aa26-6965ab312a49", "sighting_of_ref": "indicator--ceca3bd5-9925-4479-bc64-3730fd5a6c1e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18de4d30-7702-4238-970e-39e4815ef537", "sighting_of_ref": "indicator--ceca3bd5-9925-4479-bc64-3730fd5a6c1e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2bfad70-8a9a-4bee-8b51-ef7333b49c83", "sighting_of_ref": "indicator--8ba6a080-81c9-407b-8806-6f6f66f2d2a9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee85187-2adc-486e-8252-7a0d50464620", "sighting_of_ref": "indicator--8ba6a080-81c9-407b-8806-6f6f66f2d2a9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc36782e-92d6-4f5e-8104-efcc5c4cd413", "sighting_of_ref": "indicator--a3a3a190-caa4-4ba4-b90a-8da98eeab867", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625baf79-3169-4e2b-88c3-1eb8181485f0", "sighting_of_ref": "indicator--4d1bbea3-3839-45a0-86fa-c8d5502570ec", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48543289-6825-4cf5-a217-af70f08a2eb3", "sighting_of_ref": "indicator--5b5c9258-1022-47f5-8480-42e69cae56e2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6f3399-c259-4ade-8056-467b1eda6b43", "sighting_of_ref": "indicator--5b5c9258-1022-47f5-8480-42e69cae56e2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b34a1e-e226-4db1-af7c-c1b8981d820a", "sighting_of_ref": "indicator--105f90b3-e77e-4e70-89fa-2024908a4a88", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7761f30b-5174-4427-9f9f-f97d1950ed61", "sighting_of_ref": "indicator--105f90b3-e77e-4e70-89fa-2024908a4a88", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d49bf6f-8e6e-4714-b8a0-c01426e56b67", "sighting_of_ref": "indicator--21420ea8-0ee9-4127-8b7e-eb155ca3c7f1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a21ee0-bac5-4b69-bc4f-825e57842a34", "sighting_of_ref": "indicator--7ae43719-45ef-411c-8b76-f4a6e79e9144", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e489b1f5-ff54-42fd-bee3-06697a0aedd7", "sighting_of_ref": "indicator--7ae43719-45ef-411c-8b76-f4a6e79e9144", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340909ac-0ac3-4c42-87f4-52ebc60e6a76", "sighting_of_ref": "indicator--7ae43719-45ef-411c-8b76-f4a6e79e9144", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48aa3e57-c5e3-432a-a082-22fcc8ceeb3d", "sighting_of_ref": "indicator--1e1ebd4d-8fc1-4358-b6e2-fa830859c63c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d589c325-3d6a-4569-83b3-2ae3ea63258c", "sighting_of_ref": "indicator--79fa4323-038a-4d4f-838c-a1b8a52b302b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea98fa5-4bed-49fc-932e-46d5e8a05932", "sighting_of_ref": "indicator--79fa4323-038a-4d4f-838c-a1b8a52b302b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbf1e60-ff69-430e-95bd-ac133478ff4a", "sighting_of_ref": "indicator--79fa4323-038a-4d4f-838c-a1b8a52b302b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abe7443-989f-4a87-9c37-573cfbf9ce27", "sighting_of_ref": "indicator--0837ed43-f970-4496-832b-5dfd6fd3e343", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18fedbd-ea0b-499a-8749-8bb940d372fc", "sighting_of_ref": "indicator--fde1c517-1275-46fa-ae49-8fc6544293cb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c96715-4120-40d1-aa13-c2ec1a07df93", "sighting_of_ref": "indicator--d87f97e1-cc91-426b-bc54-5d45bc883cb7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c59353-206d-4f94-900f-596a4e107dfb", "sighting_of_ref": "indicator--d4f2bf5b-cd89-4145-ab75-93a48137eed3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71dd5989-d105-40ac-806b-10db8b47746d", "sighting_of_ref": "indicator--303d0258-970f-4d2d-9421-dce347fab54f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4eca438-4464-467e-95dd-5651da1da7d8", "sighting_of_ref": "indicator--a601abc4-3641-4fd6-bd06-f07738cfd3f1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857ee1a4-c7ab-43ad-9151-42c5bdd5f71b", "sighting_of_ref": "indicator--e66f80a5-0455-44cb-b8e7-d854cbacbd67", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3d3519-2cf0-4569-ad70-3d820edacdbc", "sighting_of_ref": "indicator--c2b91995-afbb-4f46-8733-d7f8bbad0aa5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c33d90f-3d23-4aa9-a4cc-b191d7498224", "sighting_of_ref": "indicator--fcb109ab-81bb-413e-843d-04e250a50129", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594563fa-36f2-454d-91d3-24bc77c32661", "sighting_of_ref": "indicator--eebdfcc3-de43-4b90-baa5-d91dd32e3bb8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2549a922-92bb-495a-8cd1-8b1d40ad502d", "sighting_of_ref": "indicator--789f2de8-c802-41f7-a2e6-f62254d21d1f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b01fe6-9ca0-4b3d-a90b-3bbaa537ea6f", "sighting_of_ref": "indicator--789f2de8-c802-41f7-a2e6-f62254d21d1f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa3b560-263d-4ad7-8698-25fa5f7b4354", "sighting_of_ref": "indicator--789f2de8-c802-41f7-a2e6-f62254d21d1f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b71c1ab-ae96-409b-a03f-0969fa6303b7", "sighting_of_ref": "indicator--e441ab4a-98c4-46df-afc5-da66f2c75ba1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50735113-4751-4ffb-9853-15c80439a17a", "sighting_of_ref": "indicator--d76f96c9-0c6c-4353-b49d-a488774bfc06", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c29496-7f57-48bf-892c-39be02e9bb75", "sighting_of_ref": "indicator--9d947de2-83d5-40ed-a264-bc2d96585882", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413911b3-37e9-400b-b8d4-2786cd8d3f87", "sighting_of_ref": "indicator--82cf75f0-8784-4583-bd23-3f86d36b22da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d608c488-7ee6-4745-b644-ce382e8193f7", "sighting_of_ref": "indicator--a9e18902-1f8a-4e49-be4b-09b16d0256e2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16372c04-79c4-4f91-8994-5af23524e927", "sighting_of_ref": "indicator--a9e18902-1f8a-4e49-be4b-09b16d0256e2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0af0d5-e860-4fca-9d33-881776d12866", "sighting_of_ref": "indicator--a9e18902-1f8a-4e49-be4b-09b16d0256e2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0f06ec-8100-4bb0-9ae6-11297f3435d7", "sighting_of_ref": "indicator--3ebcdb0f-5c85-4fad-a989-6bf8304f8033", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fc2fed-f8c4-4df5-91b2-bbff2ba5fc83", "sighting_of_ref": "indicator--a28a1add-657d-4049-92b2-e6992f07af04", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c35c30-a8cc-496b-8614-5cc7b57f9381", "sighting_of_ref": "indicator--98276da1-5199-4bdb-8e11-7948ced50c88", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804af815-4406-445d-8fe9-7c62972dbc7b", "sighting_of_ref": "indicator--98276da1-5199-4bdb-8e11-7948ced50c88", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0be643-4c35-469f-a8e3-1e1845533d42", "sighting_of_ref": "indicator--5d7165ca-b215-468f-9568-2d8422791c28", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1276d6ad-84e2-4938-a476-5f900974d73d", "sighting_of_ref": "indicator--efa60cea-ecd1-4d8e-a0e0-93f50db2b3ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1443c0b8-755b-46b7-9c5f-f75e130bbbb8", "sighting_of_ref": "indicator--89731c1e-c7cf-4540-958d-f155c60378c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be67ce53-00f8-4c3d-9424-9363a3aece34", "sighting_of_ref": "indicator--dade2438-2ad8-4e2d-b3a1-41e9bb909d84", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091cff76-0fff-4d69-8c07-bedbf48e2944", "sighting_of_ref": "indicator--03ef0eee-a6d5-4d66-a52a-f8882e8b12f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baaacf77-b6f2-4a78-b0a7-3cedd2487f33", "sighting_of_ref": "indicator--bfa18a9e-972d-4f99-b9d7-e290b8b527de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b9b454-2da1-49e3-ae42-2355f689fc75", "sighting_of_ref": "indicator--195fde53-6ef7-40ca-851e-5d58739c2a4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a5112b-abcd-4c6e-8a4c-5a8d4c5e3a0e", "sighting_of_ref": "indicator--efcff708-c566-4728-b637-4b70e4e72f1a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dccdda8-5f5b-46a3-b0e2-51a17027b14d", "sighting_of_ref": "indicator--345da2d2-9df2-4c17-a73a-41a99dc8f0e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb5c723-b34c-4792-8cf6-39fe406cc357", "sighting_of_ref": "indicator--68618a83-15e6-4773-8cd3-027e6a8b64f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4962b9-9123-4fba-bea7-054d7b65fe56", "sighting_of_ref": "indicator--d3ae8f11-26a4-44d4-82fc-9b3c0750840e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c497e7-9525-40cb-b0ef-591721dfecd2", "sighting_of_ref": "indicator--3f28bd3f-239e-468c-9bfb-6914f4de770c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5adfe498-7459-4e11-86ab-44f8cfbcdf53", "sighting_of_ref": "indicator--d4db0b12-d9a0-490c-b88c-64dd3f155003", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39338a02-9219-42c1-a308-0d73e3675dd9", "sighting_of_ref": "indicator--9e164aba-6d3d-4dd8-925d-f96ca4bbd5b5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52b198e-57f7-4a40-b17e-2c9631c20325", "sighting_of_ref": "indicator--5d97141f-8838-49b2-b8cd-904a3ddbcf50", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fdd262-d779-444a-8b1b-f5cbdc82db9e", "sighting_of_ref": "indicator--ccdd6736-f5df-4ed3-90bf-8898323581fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4d3e8a-b597-4d6f-a966-f075a3490392", "sighting_of_ref": "indicator--56775b98-e8c5-4e45-bd1e-482023cae45c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27ae951-fc15-4bfb-b6aa-81ebcfa0b2fe", "sighting_of_ref": "indicator--17f04c60-4d62-4de1-8279-10c34412356a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15086679-cf7a-4bcb-906a-0fb6b9a5dd0e", "sighting_of_ref": "indicator--287e7db3-0cef-4285-8685-5faad70f8fe6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72dc4a8-eee9-4a47-8682-1c868d77b3fb", "sighting_of_ref": "indicator--5b2303a5-4320-40fc-999e-46fb92d3236c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99db06ef-bbc9-4555-9bd6-cd6a12ce4743", "sighting_of_ref": "indicator--887e0fd8-3c92-4c8f-ad85-ce606cbd48d0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8502858-ed64-42c3-a73c-bdf49b0ea5c0", "sighting_of_ref": "indicator--887e0fd8-3c92-4c8f-ad85-ce606cbd48d0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a5524e-fc4a-4a5a-80d5-7d9020f98e2d", "sighting_of_ref": "indicator--4cb11290-a8d4-42b4-9a7f-86d78b454c60", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f3d4b4-c147-4425-b3a1-423a7019762e", "sighting_of_ref": "indicator--d3580188-b335-41a7-b899-5039309c1ac5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701354c1-0a1a-4b62-9761-6181a20944eb", "sighting_of_ref": "indicator--cc6ac6ef-4384-4bef-a9ae-ebe23ca3d161", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18eda3d4-1ef9-4d30-816d-e89fc565c67a", "sighting_of_ref": "indicator--263eaca6-436d-49fe-9663-c82f65aad2ae", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f2e4dc-3538-46db-9d91-30efa2e7bc42", "sighting_of_ref": "indicator--263eaca6-436d-49fe-9663-c82f65aad2ae", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d073b42-8c14-4d02-beb3-73ee923cca2a", "sighting_of_ref": "indicator--263eaca6-436d-49fe-9663-c82f65aad2ae", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd51c070-6840-46a2-b41b-5d81f82ad0b1", "sighting_of_ref": "indicator--c343748f-e72c-4b64-8bc8-930a1fe442dc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63eff7df-be90-499f-bd50-3c6ad5b80a27", "sighting_of_ref": "indicator--c343748f-e72c-4b64-8bc8-930a1fe442dc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de9fb2a-1023-4ef5-8774-3aa5af83ae82", "sighting_of_ref": "indicator--c343748f-e72c-4b64-8bc8-930a1fe442dc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d528bd9c-ab08-415c-af15-ed2cdcb6fe7e", "sighting_of_ref": "indicator--901145a2-122b-457b-9f36-ad2803f2dcaa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d147d531-0d28-46d8-81c1-6341c2b2f2d2", "sighting_of_ref": "indicator--901145a2-122b-457b-9f36-ad2803f2dcaa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd127d05-c2f7-4c0c-9d02-e5ad4e24f487", "sighting_of_ref": "indicator--901145a2-122b-457b-9f36-ad2803f2dcaa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6baa678c-1c7f-4080-8a28-13776a0fe842", "sighting_of_ref": "indicator--a30532cc-17bc-4ff3-90f4-0b61f58a10ed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94eff80-559b-4368-87dd-b5e7336f2a43", "sighting_of_ref": "indicator--a30532cc-17bc-4ff3-90f4-0b61f58a10ed", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba47951e-0496-4b17-8a0b-228ea6e691f1", "sighting_of_ref": "indicator--a30532cc-17bc-4ff3-90f4-0b61f58a10ed", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c333b2c-689e-41da-b632-7f8fb31273f9", "sighting_of_ref": "indicator--a3676240-191e-4a38-aba7-fd343b1d9cc3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6917f3-ed65-4081-9ed8-18a75711288e", "sighting_of_ref": "indicator--a3676240-191e-4a38-aba7-fd343b1d9cc3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886b4d4a-46c9-4804-9faa-82dd94e51337", "sighting_of_ref": "indicator--a3676240-191e-4a38-aba7-fd343b1d9cc3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9f349d-b5b8-4722-8519-f37f4d0d6c28", "sighting_of_ref": "indicator--4815f8e8-bbef-4183-91a4-73b490c0f231", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc312dd5-0698-4596-a5d1-4f69bbcbb6bc", "sighting_of_ref": "indicator--4815f8e8-bbef-4183-91a4-73b490c0f231", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b314dc4-219a-4528-a9d8-89d03bd2c1eb", "sighting_of_ref": "indicator--4815f8e8-bbef-4183-91a4-73b490c0f231", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e619d93-cb61-4101-a80f-b09a597bdfe2", "sighting_of_ref": "indicator--087baa9e-f21f-42a8-badc-28a2c2e1611d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5090ebf2-4264-4b06-874d-35f788511995", "sighting_of_ref": "indicator--087baa9e-f21f-42a8-badc-28a2c2e1611d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b549ff54-d2d4-4a2b-bfaa-e97f14b8107a", "sighting_of_ref": "indicator--087baa9e-f21f-42a8-badc-28a2c2e1611d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba89d1d-56cc-48d7-88d5-b7680b1a734c", "sighting_of_ref": "indicator--421521c7-7980-4185-84fe-77dcfaaf70bc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ddaa5a8-9a54-4715-bdcc-e788970488a6", "sighting_of_ref": "indicator--421521c7-7980-4185-84fe-77dcfaaf70bc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3862bbe5-c7a7-4d48-9fd2-840abea47533", "sighting_of_ref": "indicator--421521c7-7980-4185-84fe-77dcfaaf70bc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc49bb1-92cd-474e-93b3-2a4d0f5cfb97", "sighting_of_ref": "indicator--3c42ba69-fb17-4ae7-921b-5403669c86fc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171f364b-5c91-40bb-b2c8-fdf898184005", "sighting_of_ref": "indicator--e525faad-ed93-424c-9d92-0c42d7b4beac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c22ce08-6411-414a-a746-08325969cb33", "sighting_of_ref": "indicator--4e1d46a6-ec02-4bdb-886e-b3f127e86c7f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975d1b02-2059-45a9-b1a6-892576d47df2", "sighting_of_ref": "indicator--91adaec2-bf82-4b64-b55e-e7b6a809a6bc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749fe01b-e830-4f9e-8dfd-6b0cb59243ea", "sighting_of_ref": "indicator--818b055d-7552-459b-a17e-79ffe67b6886", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3635aaf-4094-495f-811e-34e5f086cd19", "sighting_of_ref": "indicator--0eefa1e0-d41f-4956-968e-7789e97dbbf2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b5620b-5303-461b-ae4e-6ee6ca5e7b0f", "sighting_of_ref": "indicator--48696b47-9ab4-4770-9a47-7996232c6945", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4367c883-9b79-4c72-866d-2d4e5147c198", "sighting_of_ref": "indicator--69cdac98-ef79-4dde-a704-e272f5b6eb6c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7047d883-b8b8-49be-82e6-e27ab37013c8", "sighting_of_ref": "indicator--5ff65b18-baf7-48fc-ae3a-1d61ab8cfb73", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552e5b1f-e98f-419d-ab0e-d8beae839f3c", "sighting_of_ref": "indicator--e9e45c48-13bd-498d-b919-556b02824e0a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa52066-79e5-4cbe-aaa3-b6777c478029", "sighting_of_ref": "indicator--8bb1b3dd-904a-4565-a0e5-ac073915729a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79aaf18c-a35b-4c69-b544-0cc854414ed8", "sighting_of_ref": "indicator--8f4076d2-7c60-4417-9bac-c2035adf4201", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735607a3-fe69-4c96-8642-29648ca87234", "sighting_of_ref": "indicator--a27fb848-c281-4e47-b33b-027005947805", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c0dab8-d2b4-4886-9c1f-7cfa28b6b83f", "sighting_of_ref": "indicator--556668a6-48b9-4338-a79a-e8e7611bb93d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a6a241-1aa1-4a49-9082-b3250366ff33", "sighting_of_ref": "indicator--27a83840-02c4-4470-8f8e-e6d3382596fb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161eb551-f11f-4365-a658-22640fa3f7aa", "sighting_of_ref": "indicator--aa09efe2-baf7-4c83-a4f7-6134bca0cb03", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd19a478-9c48-4112-8860-263f8a9fe574", "sighting_of_ref": "indicator--9e6b7415-8897-4022-b3fd-0540b5fe7385", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908d6da1-41ff-4f07-96f2-c9bc5c72169f", "sighting_of_ref": "indicator--93fe372b-7c91-468a-bd29-7a53c404356a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093f8427-621c-4735-9526-2534f43c9d88", "sighting_of_ref": "indicator--dc7524d8-34d8-4c4a-a411-0ad187646e33", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd6b95f-39e0-46fa-8f27-8b125d838884", "sighting_of_ref": "indicator--afb5a9b0-a0e1-4e74-bd5f-a9c8a116e6c0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c51c3f-c7c0-4547-aed8-0aa715240bdb", "sighting_of_ref": "indicator--9bed785e-4d7a-4528-8056-caf3042d469e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13369e0-45d0-4030-84eb-4c5df1f53128", "sighting_of_ref": "indicator--d1c3a641-a0b7-4e42-b237-f16398263b75", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8dba32-4559-45dc-9a40-8fff34636400", "sighting_of_ref": "indicator--8583e6ab-0e4f-4601-b480-1369e1c12946", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e99cb1-8acf-45e5-8bf4-897b93cfbe31", "sighting_of_ref": "indicator--fecf0395-1e55-4ca8-994a-69583a5bf566", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2798e676-dc84-49ff-a591-8458e2cb37db", "sighting_of_ref": "indicator--86b8b10d-3d3a-477b-a6af-ee5d5f661adb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e201ba11-1b41-472f-9ce4-e7bff448ca66", "sighting_of_ref": "indicator--1543d43b-14f6-4919-847f-320c553a5a86", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdad3368-351d-4eb0-ae5f-ec29d041b382", "sighting_of_ref": "indicator--03736f04-e0d6-40b1-9759-ff1965b4ea58", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95a7de4-f6ac-49bb-aba8-9c922989b966", "sighting_of_ref": "indicator--6f85742d-7e4b-4d7b-ab17-a35bc71bf1ea", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0204ed0-2268-4ed6-a730-0a21dabc0edd", "sighting_of_ref": "indicator--a7b60602-6ea4-497c-8d05-151b0a4aeaa8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afde228f-a826-41c6-9901-527d95359e6c", "sighting_of_ref": "indicator--faed994a-945c-43be-b6e2-249793032d28", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ebbf880-eb68-45e5-ba65-fd133f0268d1", "sighting_of_ref": "indicator--50f00a5a-7a85-4c15-8d8c-3dd2dc8c4b2c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2521816-01a9-407e-90c6-aee6f699af63", "sighting_of_ref": "indicator--2cb5d6f0-382f-43e7-9d1b-8ec8163fbe91", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e973d2b0-3390-4d95-893a-09fc9fb2f3fd", "sighting_of_ref": "indicator--b51f705c-22a2-423b-acac-34d4b220d958", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba56c7bb-f5f4-42e8-99c5-92338369d501", "sighting_of_ref": "indicator--faa4858a-9fad-424b-ba34-7044b6e521a5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976e67bd-fa11-4ac9-b7a1-fb62d8cc34b0", "sighting_of_ref": "indicator--c5bc2692-8ad0-44d2-ba9f-d9b4ef3e9b59", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207ce8c1-820c-4505-a5fa-1c14eee61498", "sighting_of_ref": "indicator--3c123306-3ace-4e4c-b826-6eabca168148", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4206281c-cf3a-4fad-8a19-da854a2ff313", "sighting_of_ref": "indicator--1cab1dae-e624-4521-b9ce-9c63e741bd9f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe989ba-b1ae-423f-bb9b-ee8f627927f1", "sighting_of_ref": "indicator--3444dad8-e08d-4aad-8acf-4bd52a1ec0df", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2f47fd-373e-497a-b8d3-8fcd63e0e44c", "sighting_of_ref": "indicator--9cb7bae3-c3bf-4fb9-bab9-697fab0a4f9d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620048e2-3ca6-4987-90fe-f1ab95d2b3c8", "sighting_of_ref": "indicator--c3380b9a-9d5b-4f8d-b58a-18e5049f42e4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545658a6-b30e-4520-9cbd-bbcf64caaa08", "sighting_of_ref": "indicator--e3e725eb-6dc4-4ca4-b0f2-40284dd772f8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e54fc3b-d8ef-4d44-83ac-1be65cd1d11e", "sighting_of_ref": "indicator--6cdb0f25-43e2-4f86-8bfd-a5c53faf261a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4abbb6-826b-40a9-a88c-75f6c0e09268", "sighting_of_ref": "indicator--efadc7a3-58cb-419b-a236-b07c49218ddd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c687c68d-fe37-425a-aeaa-e8d25a96b1a5", "sighting_of_ref": "indicator--22713628-0aa7-42fe-8759-6220a2cbefde", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cec5183-37bc-45e7-920e-22edbecdcf1c", "sighting_of_ref": "indicator--042853cb-797a-48fa-9a3a-fbe541d3d27b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb9a614-a8b9-417d-bdce-95fb095591de", "sighting_of_ref": "indicator--5949f87d-cbcd-43a4-9bfc-e779fd606876", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb27e68-c747-4cfb-8b77-34e5ea39a6c3", "sighting_of_ref": "indicator--3ce49b2b-82a2-4aaa-a952-dd6b21379a77", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d6e0a8-7a55-4979-b008-d183b5610ba7", "sighting_of_ref": "indicator--7cd610c1-be55-4b1f-96d7-6e55fcc4cb13", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0956433c-e596-453b-83f0-9c0c2961d0ce", "sighting_of_ref": "indicator--9ea7ebcd-2bbd-4b15-95ec-832fdd2e51d6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09df296a-754c-4b75-b949-ddb0075c6569", "sighting_of_ref": "indicator--8f3248ee-864f-40a7-80cd-a631b72faddb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97665d49-6a0e-4ef8-adde-117c8c7c9388", "sighting_of_ref": "indicator--5a8606db-def1-43c2-834a-0b2938517c26", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6557e3-8c27-4d24-a09e-62341c019177", "sighting_of_ref": "indicator--1fb2c62e-78d9-4366-83bb-cb6646e1a4a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cb3c23-e8bd-4ca8-a689-b811cacd4716", "sighting_of_ref": "indicator--af2077be-4f5d-4ce9-a913-a803060406f0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ae57b1-7e8f-4c1d-89be-fc56743eb3ce", "sighting_of_ref": "indicator--b1896617-d028-42c2-b9f0-fbdb877dcd4a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246c6e20-85a2-40f0-a95a-f29a6ade9aa3", "sighting_of_ref": "indicator--025a6658-0c9b-4f20-97b0-740c061d9920", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ad75d4-3a32-4c4c-bff5-7e8311f2712c", "sighting_of_ref": "indicator--0d8f09e4-774f-4075-9aa8-bf035eb38b4a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67935f2-3b7e-4b66-9008-611e23049d46", "sighting_of_ref": "indicator--1b178f8f-3258-463f-8a6a-97c81c8b0b61", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bca989-0c77-4b13-9215-bea3b1bdb7e3", "sighting_of_ref": "indicator--c45a4232-e1fa-430a-8bf8-7fb7376c704e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f19440a-1d99-48d6-bd27-cf948aca8f44", "sighting_of_ref": "indicator--b52ff872-3fb0-480f-b1e3-f77c5f5527b1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97669858-e2b5-4653-82be-f1e023c7bec6", "sighting_of_ref": "indicator--8a278fe3-d6ac-41a7-af2e-22ce7f0ad839", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1708886d-f574-4d36-a95b-adbad21b4d7c", "sighting_of_ref": "indicator--0ec4a338-be07-449a-851f-73257b1991fa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b3fef3-ae02-4f0b-b705-b0e42d0ed31b", "sighting_of_ref": "indicator--b387126f-af57-4ded-bc6f-9cfe48d9aa06", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d5d09c-b9e3-4abc-8678-2a0147549a26", "sighting_of_ref": "indicator--b422a670-d094-446a-a8b3-819eb497d22a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c55fe96-59a2-440a-9e5a-689627fd9a8f", "sighting_of_ref": "indicator--11e90fd7-f09b-4bd0-8366-d11774e68961", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0bf8cd-b86c-4fdb-9590-0eda2c855069", "sighting_of_ref": "indicator--6c30b0ae-d4fe-4238-aa7f-4903c569820f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27dbff6e-52de-40b2-8672-f56e95523ab3", "sighting_of_ref": "indicator--c21b719b-6aad-4f70-a4fb-ccec38b19cef", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ccda9fd-34bf-48cf-ac59-19265e03c16e", "sighting_of_ref": "indicator--73cf49f4-2da2-42b8-9727-7a2e5dbd1ac3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f04480e-00fd-4410-913c-91506fe446de", "sighting_of_ref": "indicator--389eca7e-7aa2-46ae-95a8-5984cbaff5c8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acd1428-d7ef-42b8-adc3-62baba317694", "sighting_of_ref": "indicator--31866b39-cc31-4aff-acb4-8328f27aa8b0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f4e13e-9481-45f1-aa28-84c6438da643", "sighting_of_ref": "indicator--68ba99f4-0634-473b-9ce5-71a53802634e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfece02-71ce-4f42-9899-a993a0bb9052", "sighting_of_ref": "indicator--657f29e0-175f-4128-960f-9bd55752043f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e76041b-d1ab-4b95-9d3e-f92dd317b12c", "sighting_of_ref": "indicator--d533f212-cd78-40b9-a298-a3b308f8dc75", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6b3bea-30ba-47c2-8cdc-e62075490c41", "sighting_of_ref": "indicator--e7c74c21-71aa-49ea-bd85-e2f5a63b6af6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c03759-f707-43cb-8fc6-7e8b6be89427", "sighting_of_ref": "indicator--90aef04a-1401-442f-aa82-e451d6910ad7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97248b42-e45e-45f7-bfed-fd2c0f85d55a", "sighting_of_ref": "indicator--28897aee-fbe6-41a1-93c8-c5baa38c9252", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812c547d-007a-4a24-aea9-2cb2fd489e3b", "sighting_of_ref": "indicator--3bc6e32a-d9a1-4eed-a012-a48c49276678", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e1282c-6154-4139-8296-16a9d950ff01", "sighting_of_ref": "indicator--2ac356b1-48d2-411d-9133-e0a7088c12be", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95562f9-29f9-497a-a53f-f8b4f06c112d", "sighting_of_ref": "indicator--470b0a46-2697-4a2f-8755-933a4535e805", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2333a575-75ef-4802-bb1c-40341977e3ae", "sighting_of_ref": "indicator--8332b211-c88a-4b9f-8f0f-350aff1ac0cf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b78a66-18b8-4ad2-8c44-1d751c7b1d53", "sighting_of_ref": "indicator--2b56ea88-064b-49ed-b796-e03866eca6f8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af64173-6474-4704-b5ae-424af87d6cc9", "sighting_of_ref": "indicator--3d6c9f9e-4a23-4c12-8113-075a6d1ed7a4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4e80e4-200b-4022-975b-fa3b8588eb0e", "sighting_of_ref": "indicator--63c1e55d-6df3-44fe-b7d7-cb5e632a0fff", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9edbeac0-aba8-4eb4-87a3-afda058c28cc", "sighting_of_ref": "indicator--b9d92712-b31e-46e8-afac-a7b52a648c5a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161615c6-aa08-44ef-817d-158a3812208d", "sighting_of_ref": "indicator--07f59e41-50ba-4696-8b2f-a9cdfc8cc985", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2ef4b6-8b99-4ad6-8c7f-e28d62bc236b", "sighting_of_ref": "indicator--9aabdc93-350c-4d8b-afed-a17f65879b47", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530c19f7-02b7-4e9f-95e3-ab70e7c469a0", "sighting_of_ref": "indicator--53ddb31b-84c3-4a9c-81ff-2fcd72b25cab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71f1a7e-7bdc-49b4-b785-757114b801e0", "sighting_of_ref": "indicator--73b8b40d-1883-4437-9d36-3d1415a10786", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020a5fc7-c9a4-4011-bdf6-970b0e6e2c67", "sighting_of_ref": "indicator--66dc4647-7af6-498b-82b7-14f4b7e193a2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d49e8a6-e629-489a-9c01-eab7fa4ab7cf", "sighting_of_ref": "indicator--a2534c89-4e71-4559-abb4-1d9814b9de1c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac23c0d8-4e2d-4db7-add4-c1bd6ad83727", "sighting_of_ref": "indicator--85e37476-68a2-4447-b209-abb309536801", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed161dea-7de1-492a-94e5-a1f130caab7d", "sighting_of_ref": "indicator--7435d251-f3be-4d34-bd58-161080c60f0c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a5e413-2bc0-4aee-9c89-218ffa76fd37", "sighting_of_ref": "indicator--81cb0144-911f-4d42-a976-37fdfb0ff7df", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77461b0e-e873-4739-8921-485f89e848ea", "sighting_of_ref": "indicator--a62b4f25-0588-4e27-82ec-59a258f0d702", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466bed2d-e027-4572-b5d3-8e9adc09bc49", "sighting_of_ref": "indicator--24fee239-ab3f-4d54-9fcc-18d920eb4711", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ac1144-00fa-433b-88a6-d61b50cd34f7", "sighting_of_ref": "indicator--e200b572-1004-4e98-9b16-c7f93a01b919", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e641207-52a8-47b2-b239-4e518b08c293", "sighting_of_ref": "indicator--01188c30-ad50-4625-9554-ca32ca733a47", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f27cfe-86b4-4cf9-bdd8-c48c85559e56", "sighting_of_ref": "indicator--6b7235e8-c1bd-4116-a1af-9ceb0fb41e6d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd087705-930e-44d7-8ed9-2179b5d2fb15", "sighting_of_ref": "indicator--397ad448-22bf-4512-909c-3e2d3457864c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4d476c-7368-4d30-80f2-4a9ca07e50c3", "sighting_of_ref": "indicator--bf369c3e-3334-458e-853f-1575a791ce97", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc0797a-56aa-46a2-925a-4c781d318ba6", "sighting_of_ref": "indicator--faced307-df4d-485e-a40e-62a13c0d2b3c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5acff1-6361-4bae-a8c5-b04c1e5be703", "sighting_of_ref": "indicator--fb6729c8-e65b-43c8-8edb-9b340bb4850b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a89df2a-6a5f-46aa-abd8-0883e775886a", "sighting_of_ref": "indicator--328702a7-6843-450d-82d7-13da7861730d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d65b11e-7393-41b9-a877-7824577a58e0", "sighting_of_ref": "indicator--5e00ff13-969c-4f69-a20d-6e905ad101f4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1d4d67-8797-4736-b82c-daf91f46454e", "sighting_of_ref": "indicator--d6f2695f-f89c-44d9-a214-f8caea393432", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c5482f-6c7f-4c7d-928b-f2861363e1a6", "sighting_of_ref": "indicator--83e4a57b-65fa-41c3-af54-83e077e83ac6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3509030a-9c0a-439d-8011-d26d809d07cc", "sighting_of_ref": "indicator--5a0cec3a-8062-456a-90fe-bec974072326", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471e6a43-0baf-40c4-85b1-6a850f4b78b8", "sighting_of_ref": "indicator--1c3fe92c-7013-4d96-aed2-748305e723fe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7addf6-82be-4c89-b046-16747f8405b9", "sighting_of_ref": "indicator--0cdb8136-5e50-4723-a282-d4c192390356", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f367288-8c37-4c64-a576-6c597b2cbb21", "sighting_of_ref": "indicator--cc3d9d80-e112-404b-a2e7-5481d724637b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8f23dc-fa72-466f-a966-7e334c36b1ae", "sighting_of_ref": "indicator--3fdb6cfd-e839-4557-a571-2e7bd16baae3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd4e5fa-e838-4322-af55-bff1bcd46908", "sighting_of_ref": "indicator--8c7274bb-7081-4b28-83ae-04680826ebca", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1a9f5e-d512-4c85-8dd2-881489030a51", "sighting_of_ref": "indicator--240a4d1b-46d9-4fd7-875b-0466fa7324a5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528aa768-c5bd-4945-8f9c-a080832fc583", "sighting_of_ref": "indicator--bc0b1070-3184-42f8-b7f1-0b800cb5ada1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c9e7f8-4d29-4941-8f58-65a8135d2072", "sighting_of_ref": "indicator--62558f43-a065-4fbe-b483-829020a6af70", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1fae5b-19e7-4c34-a4c8-d34e11289de9", "sighting_of_ref": "indicator--425b97e8-68c1-4ed0-b0a8-e6882b062481", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7efb4cd-74c9-444f-87ff-4cd5cbe37daf", "sighting_of_ref": "indicator--d3aead1c-5b99-42b9-a1c6-053463805000", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd4cef3-5f3c-4291-877d-945876670ea4", "sighting_of_ref": "indicator--1283b618-7de1-402f-829a-57037d1016d6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1c2985-b51c-4530-8ee4-8a15b6bdadf6", "sighting_of_ref": "indicator--fb839e8e-e68e-456e-b091-93470b1a253f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f607899-299e-43d8-acf9-d28c97b99d54", "sighting_of_ref": "indicator--324eaa7c-e776-4968-8bcc-f5c8543c4380", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78738f95-7de1-4b55-b58d-05cc69f38abc", "sighting_of_ref": "indicator--b0ec4a4d-a2dd-43df-af59-529e9a93aac2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44791064-9e05-43ef-a23f-a4103d563f75", "sighting_of_ref": "indicator--4a628574-9051-46e1-be13-a619ec0a0268", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577c0bb6-07f7-4c4c-8ae2-c799f73219ac", "sighting_of_ref": "indicator--f3030b00-f31c-4190-a80f-c505ed4eeb97", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce909f59-45ef-4b8a-85ef-53e53bf134b8", "sighting_of_ref": "indicator--953d87ef-be75-4fd0-88bf-2c8f48c496c1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d4baa0-5a59-4880-9098-9a9f89ace691", "sighting_of_ref": "indicator--24684b0d-86c0-4159-982c-2ff4a53d419a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc58fe0-cf71-4c31-a46e-b780ba5a1861", "sighting_of_ref": "indicator--2c18f711-bb83-473f-ace6-6023f33e188d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641d41e5-08db-4f57-8a3b-eb0e4a149538", "sighting_of_ref": "indicator--d51a8bc5-f02c-4235-9099-eaf5ae730deb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48ea569-41a8-4386-9615-2445715ff68c", "sighting_of_ref": "indicator--9b9be148-8f65-43f5-b95c-a5da852f1357", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b23a96-dfd8-4888-bd4a-d017267b3a5f", "sighting_of_ref": "indicator--2c123ac5-529a-4c0e-bf02-9db0f1456871", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26e95d1-b544-4577-bb59-5d0cd9f61586", "sighting_of_ref": "indicator--a87a67cc-eef3-481a-879b-e5fc54f5c5d6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358886c6-93ef-429a-9f38-b88fc6f17fca", "sighting_of_ref": "indicator--6f6cf066-1dce-46e9-a94e-2fb35ff588f9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee2b36d-e308-4811-ab84-2084c389c804", "sighting_of_ref": "indicator--eca5e130-194f-4da0-835d-250733cdf95a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bba68ce-75e3-42b3-a79e-179d586d19f9", "sighting_of_ref": "indicator--1c4d8532-eed4-4364-bb6b-d9c24b010de5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde5524c-dae3-4439-97f8-80c207d9cb91", "sighting_of_ref": "indicator--78aa4074-d3b6-4c84-8c35-250dc129120e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adbe912-b4c6-4be1-b576-4433441462c4", "sighting_of_ref": "indicator--7a04d174-ac63-4f7a-be44-df1875348bd1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2606676-37fe-41f9-81b8-7b2c4f8586f1", "sighting_of_ref": "indicator--ab90154c-212e-4fe4-a98e-b8dd29c2484e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed7fe1f-cb26-4de9-8c95-de08118d2ed8", "sighting_of_ref": "indicator--b8d3c5ff-2606-4bdf-a8bc-f6581e55f070", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a181fa1e-5aee-4072-8c8b-e4b41d205e08", "sighting_of_ref": "indicator--2fb5d627-413c-4a64-90e2-c58ba0f23b6f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0625dd4a-9e3a-420a-b797-89dff6d0135f", "sighting_of_ref": "indicator--95825a89-90ae-46cf-8b5b-07c9c79453e4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a6acc3-26d8-4e3b-99a4-ffbb67c1cac6", "sighting_of_ref": "indicator--2c3350f1-79b8-4947-9cfa-687f5c0be229", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20de13d-fa00-4612-8c00-fe4af5b0c787", "sighting_of_ref": "indicator--a903a5b2-c540-4e83-99ee-641833432f6e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23eac8a8-385e-4bb8-bd3e-832e38712dec", "sighting_of_ref": "indicator--cf65bbd9-727e-4de7-9ae4-56f5aeac9ef4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba7ed1c-a17c-420b-8273-a36b5dbd5329", "sighting_of_ref": "indicator--557adb0d-15a9-4c5d-af32-b2c27a73c539", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b9ad86-935f-4e52-8bf0-044721f10925", "sighting_of_ref": "indicator--e40ef739-87ba-4312-8bd9-d47eee80894a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c54514-314a-4bc1-b436-53c3f801947c", "sighting_of_ref": "indicator--5ef7f498-888c-4969-8043-9d499d32569e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9b2335-488a-4c9b-aa99-3e61964e7f9c", "sighting_of_ref": "indicator--2da4aab4-0d07-40eb-ba4a-3f2708392ad0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cef2f1-1eb5-4404-bed4-ee1340ff2a9f", "sighting_of_ref": "indicator--c6e590b0-f0c2-4ba7-bb2a-9fec615882bc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dcf6f54-5b9f-4f83-be0e-d8c2803a8a52", "sighting_of_ref": "indicator--bdf08607-e45b-4903-8160-253a2fff8a6d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e949657-4d3e-42cd-8850-1adfa2d67da4", "sighting_of_ref": "indicator--2f3f3780-430d-4885-afd1-5b3d6e88a8f8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7caf67-fd4c-4373-bfb4-ad26efecf48d", "sighting_of_ref": "indicator--2e312dbd-714a-4bfc-82cd-843d1968e7ca", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2abfe9-5c53-4ee1-a47a-85150203f073", "sighting_of_ref": "indicator--16f613e5-00a7-446c-a02d-d3757b0fab1c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd2a355-70f9-4961-9de8-4c5905daffcb", "sighting_of_ref": "indicator--73ceb7b8-a18f-4485-b2e6-06bc724e3fee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df46d764-337d-4465-8df8-6b1a0f332257", "sighting_of_ref": "indicator--a3ef5ad9-d525-4004-8251-51ee5fa52326", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f805c1-d876-491d-a422-98622f253334", "sighting_of_ref": "indicator--fd2cc010-cd2a-4278-9340-c95a66c28ef8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f4415d-a7a1-4daa-9bfd-a99c5cccf16f", "sighting_of_ref": "indicator--d843a784-5a5a-40e9-be00-fa70bd126710", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fe36ad-2d68-4825-bc95-eab11c1c04c9", "sighting_of_ref": "indicator--7198d794-7d4f-4a86-b38e-caa2b0dddc6b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663d6442-16d4-4f57-8f93-ad7ca0af706a", "sighting_of_ref": "indicator--a2eb309f-67ce-49d9-a004-6b12d887da4f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82524d5b-12b0-4cae-88ea-eb6e2a1fd729", "sighting_of_ref": "indicator--2489c093-d789-415e-9d5f-0aa6aeba272c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016cf23d-c4cb-4dc9-bb23-a1334e64d200", "sighting_of_ref": "indicator--0ce766f7-ba42-4a66-b23c-3064b36a65a9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047afab5-1407-48f5-bb93-e00366988ad1", "sighting_of_ref": "indicator--f5e442a8-0c84-4134-a1fe-0fa2af1c8d1c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ddd7f0a-c131-4686-87ee-4e3b2fc1834d", "sighting_of_ref": "indicator--9aa79ed9-7737-4976-b802-02fe3959444e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ca5395-bab9-4613-a44b-66d539326251", "sighting_of_ref": "indicator--c9728801-546f-403c-ac79-e20696059d01", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f84dd2b-8c0f-461f-aed2-b17c4fdede5d", "sighting_of_ref": "indicator--1778e8df-168a-4c4b-8e51-44c2178c4204", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f35c3c-4324-4d79-b3bd-6cac2b6c5c39", "sighting_of_ref": "indicator--aaaef807-9837-490a-8ce7-f17cd69618ac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a61d73-ac06-4a7d-9a6f-07a291e47494", "sighting_of_ref": "indicator--a69892dd-ca9a-499d-93f6-7b29ef1ee50b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7895b08-afe8-491d-bd0a-8c45c342cced", "sighting_of_ref": "indicator--e7e13245-f42d-45e1-9a58-2df8bb8b65ed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33dde71c-9197-4960-9d2e-1a22f322478f", "sighting_of_ref": "indicator--bf4a6444-f2c9-4f1c-a867-33113653d1fe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b84a05-78b1-408c-8090-e0e5bc530cd1", "sighting_of_ref": "indicator--ef1d43ea-1e22-49d4-8a73-6ce294d37759", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915af873-075e-419c-a7b3-a047a081981e", "sighting_of_ref": "indicator--61db8fc0-ca6e-4d43-a7c5-637009e42415", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6704fd86-a4fe-42e8-bff3-b4c3d739da45", "sighting_of_ref": "indicator--a4aad552-95fc-4d6f-9f66-00e48dc11bff", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bcd33d5-a0f3-471a-9db3-9428a425748a", "sighting_of_ref": "indicator--0b52612b-5a20-4b2c-b9fc-7c7f94d735a9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4320946a-b02e-4e96-91f9-93f15726692b", "sighting_of_ref": "indicator--23c8c76a-16d3-43e8-987d-214da6b85344", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad074410-1dd8-4ab6-9d04-d939fa286a73", "sighting_of_ref": "indicator--d4b4072c-b69a-4d38-b111-ba2f77710ae4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9236392-e5df-43de-a1e1-4f785a771f62", "sighting_of_ref": "indicator--5348f2ee-50a8-4125-ade4-ed040760789a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e2bcff-69f7-49d4-84e1-b669497d366b", "sighting_of_ref": "indicator--5673ec5f-046d-49bb-b5ab-a6b93b0b9c98", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7ca675-49b2-4572-b146-034ece6ec22d", "sighting_of_ref": "indicator--e76f8077-fb54-41a1-842e-d457f45393f7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7652b0ad-ee33-4d1d-9cfb-67b708d376a1", "sighting_of_ref": "indicator--31eb8f75-5b0a-4add-afd3-07868811d391", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f0cc21-bffc-49ff-905a-1a70d1461538", "sighting_of_ref": "indicator--9e18506e-7bc0-4333-8689-956909a163b8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9007e01c-bb29-474b-85e6-86f214c56bfe", "sighting_of_ref": "indicator--10b66e81-45be-4913-937b-62fc692602cb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ed1efe-1206-4ecb-950b-f92823735920", "sighting_of_ref": "indicator--605d4504-e4a3-4b6c-adcd-bf7d4e569f85", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330866d3-0a22-444d-b400-250cc795636d", "sighting_of_ref": "indicator--e15c417c-c90b-4a1a-8177-b0ea4d29e404", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a609e3e3-b927-4840-af4b-974114a6153c", "sighting_of_ref": "indicator--559e9644-ffd0-47b6-911d-9cebc7d45f74", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8779d134-b045-4682-b84f-7420cf913850", "sighting_of_ref": "indicator--8233a1d7-9fab-42b5-9b96-b6b64706515c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43dd7626-3b11-4829-9586-0da20dae6012", "sighting_of_ref": "indicator--5610edf0-1035-470c-9bf8-a663c3b96b6a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2e81b9-bd17-4938-a690-afc5fe424b6a", "sighting_of_ref": "indicator--4d8d8241-41c4-4f04-aca9-4db2b026eabb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e33e430-befd-49c3-83fb-a9b3b9c69a73", "sighting_of_ref": "indicator--50e25d65-11d6-4fb4-8ee2-50ae3aa27bee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b78c52-9fbb-4768-8f9a-966bd992123b", "sighting_of_ref": "indicator--07608083-91e8-4d86-905c-4a2f28c377fa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b43ac49-c8ce-4870-8e8c-1aca2607adcb", "sighting_of_ref": "indicator--e04e3f1b-5738-49c3-b833-595d4a4ae93f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb846f8a-395e-447d-b04f-dd29440957b1", "sighting_of_ref": "indicator--9d79fcde-e1d9-4de3-82bb-7a9e225b2d83", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eac1edb-7e72-402c-9c3a-b847b4d7f5b4", "sighting_of_ref": "indicator--098e0245-a31d-48bf-ba0d-a6fbe5b0b371", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba352ef9-48b6-4862-973c-1197a4ebd5dc", "sighting_of_ref": "indicator--62d6687e-00af-4221-ab07-03528cbfb162", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1bfdcb9-dacc-46a5-9d19-0cf4492609cd", "sighting_of_ref": "indicator--d008e76c-a92d-4ea3-9fa3-63ba4696547f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe959275-fc3d-4d98-bb2d-436893e8b05b", "sighting_of_ref": "indicator--907e70a1-1564-4c4c-8335-ba654fb5ef50", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4293eb-b07d-468b-b0e3-fdbde7ee4330", "sighting_of_ref": "indicator--b6c075b7-7316-4391-8d99-3acf740885b7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5330fa66-0b0a-4111-bee1-878ecb64ce90", "sighting_of_ref": "indicator--e26c782d-53bb-4fde-a685-2a749b6f5f18", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1617baf-8175-409d-ae9f-e2b7c5c566ce", "sighting_of_ref": "indicator--0f11e054-44a8-4862-a5e6-f6d5089febc9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e0c7ae-a01c-4d29-8da4-11e5f4c25de9", "sighting_of_ref": "indicator--48df9e20-86db-4547-93e8-a45803f8e8f3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c762b93d-539c-486c-a5ac-eca3e9dc8bc9", "sighting_of_ref": "indicator--7162e483-de79-4b81-bf9e-63391b950fe9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425d1e65-fdec-4647-be5c-8c2cbb5e8b1c", "sighting_of_ref": "indicator--7a4a1475-e44b-4fda-9540-5d8523721014", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f433f035-86e6-448f-a47e-7d5943eb1a3c", "sighting_of_ref": "indicator--8a471f4a-af74-4db1-be4f-b96e0ca43213", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e1c14a-e7e1-4e7f-9446-50a7e35bd135", "sighting_of_ref": "indicator--f542ed9e-7227-45bf-a189-41fe3dede4dd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf15df1-5063-4375-9d32-685f5ca199e2", "sighting_of_ref": "indicator--04e5712e-bdda-41a3-89be-79526decd032", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81ea14b-539a-47b5-9a0b-3806b0416bf1", "sighting_of_ref": "indicator--2c6b28ed-819a-432b-b736-f1732c76122b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79c8b25-4d6c-4186-adb2-a6cf72bbaa73", "sighting_of_ref": "indicator--05add764-4f89-420e-9049-5396e7f24e14", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54851e5a-749b-4223-b1c5-776d04a510ae", "sighting_of_ref": "indicator--71185290-9a57-451c-9b2c-c3b9fb509c01", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d0e87f-9e53-460f-a68e-95dc301316a6", "sighting_of_ref": "indicator--38a66e95-6d70-48cd-a9ae-9990c6ee37f2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134c0d0a-69b6-4a7f-9e2d-b74f5280d794", "sighting_of_ref": "indicator--3b022c91-5037-4748-98de-a7b9e6e78b01", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a3f217-0a73-45d2-934d-53c0756e748b", "sighting_of_ref": "indicator--634e36fb-9a94-4c6b-aa70-7937bfeaf5b9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fc652e-3803-4659-a65c-6626a9d49cab", "sighting_of_ref": "indicator--21b74e54-a529-4d80-afee-1839901262f1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd961e93-1a6f-4441-a8a9-cb1a6dc86957", "sighting_of_ref": "indicator--3328d677-30f8-4e56-8704-fad100afd5c4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeeb59af-22f7-4775-9d43-c498e44de72d", "sighting_of_ref": "indicator--392a051a-2553-4526-a59a-d93b1fcdc214", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f03affc-a227-4c97-a26a-a935de1ec8d2", "sighting_of_ref": "indicator--848a13f6-f8d8-4e21-b0aa-ad98240f62e4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246352aa-bb48-4d5f-a2a4-78b542e74909", "sighting_of_ref": "indicator--9f45dee1-38c7-442e-b0b3-34104c8ff4ac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ee0034-4b13-4c39-be76-adf9ed775cb6", "sighting_of_ref": "indicator--781c33f7-a109-4e3b-8257-09bd198f00d5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce02aeae-25bb-49a0-a619-ad122938a54c", "sighting_of_ref": "indicator--820930d1-c87d-40d2-bc7c-533a86171b71", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40114007-7fd1-4f62-9b80-0dfa8cc49cfc", "sighting_of_ref": "indicator--26fb0ee4-be4b-4da4-971d-63a605d846d6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d871195-e904-46bf-8909-1be14e0a9ee1", "sighting_of_ref": "indicator--f3616978-39c4-492c-aae4-b212fab9a54c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7185c7-df26-4034-8018-afe3d99d60d9", "sighting_of_ref": "indicator--5574ae83-5756-45b7-8bb5-d2eae424e6f1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82020efc-9234-448e-b1ae-fe20c644ad7c", "sighting_of_ref": "indicator--798ffdbe-e739-45c2-9724-8f79bd78b17b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bca6896-95b4-4ce5-837d-878fdcf9ecdf", "sighting_of_ref": "indicator--5cb8b9c4-af78-4bde-bb24-a65b7b5e79a5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50dc3f69-b2a7-4f8e-bc29-0b4fd4e90f3c", "sighting_of_ref": "indicator--c0ea8cc4-78b0-4c70-9127-bb1f62f9f077", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46f9dea-e799-4883-9766-2c25e0164f1a", "sighting_of_ref": "indicator--7fc4e571-12b6-4112-a6e1-19aae44b8c9d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7388c2f8-6ca2-424d-a627-601feec7d824", "sighting_of_ref": "indicator--06444876-df46-46fa-8bdb-6148d834682b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17226687-2f16-473f-a780-66751ea9a637", "sighting_of_ref": "indicator--8edbd28b-af31-430c-8911-bd2b018f1a9d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b7da49-bef6-46cd-9132-4dae01e744fc", "sighting_of_ref": "indicator--8173c27d-5393-49b0-ae28-71f13983d002", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35665dcf-40b3-44c0-b289-55b30a23d318", "sighting_of_ref": "indicator--7beefb1d-56b3-4bdf-bac6-17b37e2819fd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94336f09-2877-4548-9e2f-de0d6cd9b138", "sighting_of_ref": "indicator--ef112a8c-fad2-4eb6-b6ac-40edb35b8bd5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f16b6de-1135-43cf-98b3-031981523261", "sighting_of_ref": "indicator--5b44528e-cd12-4de7-9c71-cc69babcf4e3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5744dd6-1e5d-4f99-86a7-5cb159461251", "sighting_of_ref": "indicator--f0a95e6d-9352-4f46-ab38-5ff59717b6e1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc38db1-a2d0-4d09-8aa4-b69dfdbd8851", "sighting_of_ref": "indicator--8835c260-4666-489a-ad7b-16fce5f86d2a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad4ccd1-18eb-4e2c-a27b-57a63e07f016", "sighting_of_ref": "indicator--4fc9f53d-c7d3-44c5-b623-37aa10fea263", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb393f0-4481-47e5-a4f3-bc4282425f78", "sighting_of_ref": "indicator--5558b103-2110-4cbb-94c9-2c4769efbd5c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc3c85f-bdc2-401d-b981-2a64a4c69e35", "sighting_of_ref": "indicator--bfc56a2d-40e0-4c48-b1b9-95b6f76b362d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27b933c-abb8-454a-b166-c1b3ed7a68a2", "sighting_of_ref": "indicator--19237793-b829-42db-aefc-82f96937ef34", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2001ffcb-18e8-47e2-8e13-3699a984dd0d", "sighting_of_ref": "indicator--a3192bd1-bca6-42a0-9dd8-d8b1c770d1ee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a224543b-9739-43f6-bdc4-306c28028326", "sighting_of_ref": "indicator--8c146f52-e672-4c39-8f8a-89149173e0f0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100b56a2-4bac-4f98-915b-180e25a14a5a", "sighting_of_ref": "indicator--9ccf18dc-601e-4dff-9073-553758e0e66e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692655d1-37ae-4509-b536-cb895091a66a", "sighting_of_ref": "indicator--667771b0-197d-472c-8500-6dc3194910c0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff186ce-3ee8-43fd-adc3-10c690dce1cf", "sighting_of_ref": "indicator--1fc860b6-29f9-45fd-b41e-9a1c80eda0ff", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7aaa80b-044e-4129-8c4c-d50d0d89293d", "sighting_of_ref": "indicator--3b41335c-ed93-46b1-a4d7-f10c014771c1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828a91e1-5f86-4a5b-8074-14ffae94ab22", "sighting_of_ref": "indicator--9b247bee-6386-4827-b88a-d2750254face", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536bc469-231f-40d5-b3ca-3166887aea84", "sighting_of_ref": "indicator--f820bd8e-b08e-4117-9273-afdd47637c4d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9edea648-fe56-4eb8-b5ed-511b16b69da7", "sighting_of_ref": "indicator--5bacbe01-cef6-4e16-92f7-a48239ba9196", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ecad416-eb28-48cd-bf6e-5507525052c3", "sighting_of_ref": "indicator--27d20667-b0a6-408f-b4ab-8653a5a47990", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6b5e9c-ddb5-4464-8200-350936b37e08", "sighting_of_ref": "indicator--ef357b6c-e14c-4d89-bbd2-9bf1e0374e69", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94acf7da-9c75-453a-800d-dabf894013d8", "sighting_of_ref": "indicator--728f75e4-2278-40f0-aa09-7609334fb7f7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba39ff0-c51f-4f18-b46f-b8b03048fe5d", "sighting_of_ref": "indicator--01e8bd9d-bfa6-4ec6-b8c0-c22cbe4fa50e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20e796d-e2d5-4661-9644-ca57b28a9ee1", "sighting_of_ref": "indicator--635454da-8919-4622-952c-477b61aa07f6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d1a1a9-de6b-44fb-bbaf-b44b253138aa", "sighting_of_ref": "indicator--6700eba2-7b72-4e48-9141-9b339a9cd4c7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e883d2fd-ac20-4a00-8c4f-536a0ce031fc", "sighting_of_ref": "indicator--db2dc573-8783-4763-965e-090a5485cfd5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074772ad-bf09-4b32-854d-bdba36f0bb2b", "sighting_of_ref": "indicator--05ad0772-d467-4d55-8db9-98c24f017c96", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9b845b-c76c-484a-8f02-d0ae287108a1", "sighting_of_ref": "indicator--fd92cb00-dad0-48bc-81ea-c6a988d600ce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547bcf96-fb0c-4c56-9ab5-3fa530f26d18", "sighting_of_ref": "indicator--d30f44eb-43cf-4495-b460-bdb197d7dbdd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b71f25-4aa9-488a-98c8-00e916ca3efc", "sighting_of_ref": "indicator--b0c83df9-b827-4464-91da-add9ffd3fb60", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6e0e35-c519-4277-9332-0c060ce265a6", "sighting_of_ref": "indicator--17a8335a-9960-4c34-82d6-270f20d8e235", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0e1fef-c034-447a-a5cc-938c9efe0d79", "sighting_of_ref": "indicator--f429ce94-52e9-47d9-b2a4-883f7c9a8ecd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a109cb1-94a2-4b10-93ef-b4bd1d85add6", "sighting_of_ref": "indicator--02622934-f1e1-4fbd-9957-aeddb002f376", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801aa07a-c1d4-4f92-b74d-aac009187e33", "sighting_of_ref": "indicator--31f0d73f-6eca-40c1-837a-9af77d793b95", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c09ad88-5297-4e2b-9bf1-f32933291326", "sighting_of_ref": "indicator--e0154a73-9b65-47ac-a9fa-783414483005", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eafc0dc-ce3a-452b-a082-8c78cb332723", "sighting_of_ref": "indicator--9adbdb9b-594b-424f-a4e2-b7794a250bf3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a457b9f1-f9ef-4024-917a-9d711da9f03a", "sighting_of_ref": "indicator--b3ba85aa-2887-4fe4-8d18-ea1dd73f82e4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ca40f9-1827-48b7-8cae-d6c38f6c3bc4", "sighting_of_ref": "indicator--10ebce87-0792-4cff-a810-6478fb4abf91", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfd4cb4-16d4-42d0-8284-964f1d234c33", "sighting_of_ref": "indicator--c939be05-b966-4d23-a210-6393951b6ea8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eabbae8-d045-4b3b-bfa1-73fa6d04e13c", "sighting_of_ref": "indicator--489bf7c6-4560-4cf7-954f-bf502e0873bb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54795c21-1173-464b-907b-210764927a77", "sighting_of_ref": "indicator--48fcd12d-cc6b-4154-8631-d85c7ff48a72", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0dec19-00ff-48ee-b5ab-c52c3485f4b6", "sighting_of_ref": "indicator--52a2ceca-9ffb-4b09-beaf-3da5a20073de", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39946743-d581-4cf3-b7c1-e92b746550e4", "sighting_of_ref": "indicator--2b8c0567-a939-43c6-ae17-8a4040bc68da", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5936ee-4729-4556-ade0-a271edaee488", "sighting_of_ref": "indicator--e36835a1-37e8-4423-b72a-ab79bf73eebe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1cd48ae-177e-4cca-9fa4-ad3bdfb0d87a", "sighting_of_ref": "indicator--bd825d3f-b824-418a-90a7-79edd1beea01", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b92aa1-f28d-48be-b4df-40962ac1b4b7", "sighting_of_ref": "indicator--82b39f63-de1d-4ccc-9486-525eaf05d05a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d320a056-00c6-42a6-90c1-f3e20a3a01b7", "sighting_of_ref": "indicator--a3bf9a14-d8d4-4505-84f6-aadc162da8f1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a972357-b543-4a8c-83af-c8047aedac4b", "sighting_of_ref": "indicator--eee034e6-7faf-4c7e-a4fa-107c4fa1b730", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa1e269-67e7-428f-953c-b3beb2db4f8d", "sighting_of_ref": "indicator--e75b3e17-4dde-4c24-873a-4a16f683ae14", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d278bc7-89a1-4333-98d8-71dff1eceb0c", "sighting_of_ref": "indicator--8d4dc70d-33ed-45e9-abb4-81851a398621", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e4aa79-b1e1-43a8-a0c5-99248aee082e", "sighting_of_ref": "indicator--1982a43c-0fb3-4302-bcc9-56bbfecfd83f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9dc2485-ed43-4a00-817d-10228e169af3", "sighting_of_ref": "indicator--4a873a14-80dd-4528-bc11-ab93c8329de0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8164c60-945c-4819-b3f7-4f8d008fb527", "sighting_of_ref": "indicator--6160afdb-5311-47bf-90ab-f49c8acaca65", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d07a6ba-bf2c-4270-82c3-be3d0a5fb526", "sighting_of_ref": "indicator--4c985de2-8438-4f5a-84fc-b544bbb927b4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250ceb84-3e0b-4e75-a6fc-3cb3805f9408", "sighting_of_ref": "indicator--58a24a70-dc7d-42ff-abef-48dd074afdcd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78055dc1-c49b-42b7-8c52-37658b9a3567", "sighting_of_ref": "indicator--d10050f9-2be4-4d41-ab4f-378b038e92d4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16dddf1d-2e0a-490c-b97e-03732820d12f", "sighting_of_ref": "indicator--a69c3292-d288-413d-8ef3-c8466dfd285e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7074ba81-f3eb-4e33-91c7-052c55a3b260", "sighting_of_ref": "indicator--06da9956-a4c6-4e49-8425-d9e5cf516a15", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e177b47-f1a1-48be-8e03-60844b2432cb", "sighting_of_ref": "indicator--a2bdb294-0109-4ade-8869-44505c3e1026", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa99ca4d-e4ac-4567-a52c-dd16b96e8705", "sighting_of_ref": "indicator--21160aec-08cf-4785-b61c-d8f7fa728f01", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b76aebe-0c51-4ce2-bf3f-5e9af82711f1", "sighting_of_ref": "indicator--d701cc0e-e2b7-4481-9948-677e644dfbca", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b40f6f-437c-48df-ab23-4255576b2c17", "sighting_of_ref": "indicator--7166d8ac-1fad-4730-ba46-e548ba6cce3f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79dfe66-3c6d-45a5-b2c3-ae62f05b8901", "sighting_of_ref": "indicator--f059d95a-0ca7-4ede-8411-32917f898824", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d3d2ed-723d-45b1-968b-4e8835658a48", "sighting_of_ref": "indicator--83a47de8-55cb-4bdf-a31b-44dcb01f052c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65b21f5-c718-47ae-8679-c27c643ab4fe", "sighting_of_ref": "indicator--ac42a6d6-aa3d-4a3d-8590-a279616afbfc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b06949e-a035-4c8f-9322-077f8e9efa92", "sighting_of_ref": "indicator--7dfd9d1e-ef00-4443-b424-aae9bd265fdb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08fce8be-df37-4eae-a173-0e3cb0ba67fc", "sighting_of_ref": "indicator--0c2163ef-ce74-4a22-8a76-bceff058d4f9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95b0a4f-8788-4b3c-b6c6-f044ea5efbf5", "sighting_of_ref": "indicator--04b704e7-f5ee-4b72-8ddb-21476c9fc3a5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85560d8-c7a6-4558-8e5d-a474dc3e7265", "sighting_of_ref": "indicator--fce662ea-0dee-4872-8899-9d9d517f07ee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568d1a8a-a3c4-40de-920f-5798b84191c5", "sighting_of_ref": "indicator--6cf1f704-3f23-418c-8ec9-e8e13bd2d65d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eaabc23-a6d3-4070-926c-e9fafd1eb37f", "sighting_of_ref": "indicator--e4e12206-5f00-41c5-9d91-fc5f6d292a1d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff4e53f-b960-4345-ac24-c28772279795", "sighting_of_ref": "indicator--30da6bef-d808-49f4-9a9e-a69761c96393", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3149e55e-badc-4664-b0de-b8dc3a753e9f", "sighting_of_ref": "indicator--f5aea54c-0cd9-4222-9a10-1eb1be50a6e4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8238a8-eae9-4373-b6b9-4356e22b2b1f", "sighting_of_ref": "indicator--0d5fe17c-f0f1-4e37-9277-a6c17559cfb9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2359ed3e-5d7e-46c9-bc5a-cad93481b1ea", "sighting_of_ref": "indicator--c2ac8311-949e-45be-b935-d9841296c445", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b362eac7-e5c9-481a-9142-3ca1ac6d1060", "sighting_of_ref": "indicator--421198fa-10d2-407c-be0c-8327e6f940a0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d97ab97-dcc3-4754-8e81-61bf6fef0b28", "sighting_of_ref": "indicator--b63a993a-833d-4b37-8dfd-c11e1b3575f0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0dce2f2-17e7-4949-9d82-95a22c621322", "sighting_of_ref": "indicator--845720f5-4881-4960-9570-a5b939bc7b77", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ccaa64-42d7-4f00-bbbd-fe6cf55ebdab", "sighting_of_ref": "indicator--8f3fa333-562b-41da-9dfe-150c4234957e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c5ee36-9a77-420b-901a-208abaf0ab12", "sighting_of_ref": "indicator--fb2754f2-2f9b-41ba-917e-7cb16e407f85", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7108dfae-04a6-41ac-bf9a-d65522a0794f", "sighting_of_ref": "indicator--35d50bf9-9e15-4989-a786-01bf6272ce7e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99cd8c7-9e72-4ffd-946b-1f6ce6082d93", "sighting_of_ref": "indicator--dc345082-e5f3-4f8c-b57e-54e9cd8c6dc8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38f885c-979f-41c1-b241-e5474cf965a3", "sighting_of_ref": "indicator--69bd15c5-34d9-4d53-aeb7-8e1aa606017c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db85a64-c05f-4a95-a117-69e410f15f2b", "sighting_of_ref": "indicator--39b9ff31-7f43-4111-9dfe-0aeade08d0ad", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc0ce02-309c-4ef8-84ab-d710b3bc6cfb", "sighting_of_ref": "indicator--7d37f872-da99-4db2-b129-8ed93de4ec82", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc4a4df-1cdc-46c0-a071-e1138264b3f7", "sighting_of_ref": "indicator--a309f9b2-c6d5-47b9-89e5-b3c7042ec8b1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4175903-b68b-4147-ad2e-3837e8e0dafb", "sighting_of_ref": "indicator--e507af78-9df8-45c7-b6dd-17863680b8a4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053ad63b-9df6-449a-a6ae-14ac8e699540", "sighting_of_ref": "indicator--89c113e2-4553-42b5-bde4-868975b80bdb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c675ae-e4df-4cca-841b-c5e3746265f0", "sighting_of_ref": "indicator--384b8fda-7c49-4a09-93ad-64fb9ad224a2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028454ee-f91f-408e-bfee-4ce69c9501f3", "sighting_of_ref": "indicator--dd380d5d-30ff-4e4a-83c1-d4f7d5dc006c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2640184-ab6c-4826-a4c5-d08e337a134a", "sighting_of_ref": "indicator--770d7b0f-8785-41c9-bb90-8a2334bb7c51", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c5685c-0045-4375-b3d6-5a1325aa8f61", "sighting_of_ref": "indicator--fe5fce33-da59-4ec0-89a3-efc16ebff57c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022f989d-6c6a-4a35-8222-2fc898f035f5", "sighting_of_ref": "indicator--aeb2446c-c131-4a32-9e44-313a6c5c96f6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb72f1b-a1d1-4a6b-81df-5445dc52064e", "sighting_of_ref": "indicator--35391b9f-dfcf-4897-97a1-670fbf8799fe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57697ca9-a874-4774-9028-b7df54fb637b", "sighting_of_ref": "indicator--9a854ba3-cd59-4c71-8705-4657248c08ba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d37506f-b438-4981-a182-dc1f67aba2e8", "sighting_of_ref": "indicator--9e74a94c-b1d4-49cf-acbc-127015a3edcb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fdaf1b-5f93-486f-bb18-8b9081327c40", "sighting_of_ref": "indicator--cdf2d4ab-a8fb-4fdb-97ae-3e0813530c4d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814d80c5-1a86-4431-95b7-c7c43bbebd33", "sighting_of_ref": "indicator--6b2a5b68-1966-415c-b22a-223f683cbc50", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ffe9487-832f-4014-a22d-7d2b85f99ae2", "sighting_of_ref": "indicator--6b2a5b68-1966-415c-b22a-223f683cbc50", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca573f7-4cec-4379-9466-6597380a741d", "sighting_of_ref": "indicator--e2960e22-76f8-4da8-b6f7-5f6fc9fd5362", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b0c016-9c6f-467f-a7a3-136c62e6e374", "sighting_of_ref": "indicator--3207f583-b3fd-4bbe-9f85-38ea5ae50d56", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619030e2-d65d-48aa-95ec-bc515d205f71", "sighting_of_ref": "indicator--9bb4f728-6eb5-4d66-9dd5-4a210a923dd1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b85625c-c7e3-4d50-8f71-6116d6457f73", "sighting_of_ref": "indicator--0489b5a4-4cb4-4fe6-8d4d-1fedb292512b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1731ea0b-c749-4b72-b0e6-55d5748cc0b6", "sighting_of_ref": "indicator--4a4abbb2-a7f0-4682-87e8-6a2e65bea9d0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f0cb35-e50c-4d30-b618-f5540e178ab5", "sighting_of_ref": "indicator--414d4ce6-4d4e-496b-93d5-cb2973d2745d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffc8ef6-134e-441b-ac98-5592a64d604a", "sighting_of_ref": "indicator--5a232d5e-1c05-4b32-bb0e-1ea7d5817ddc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7beebfa-6ff3-4ee0-9bfe-a77f59637306", "sighting_of_ref": "indicator--a4a7d723-0e3b-4ac7-954d-17c0fb6ab545", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8765b591-5e1f-4bac-85b1-c74f8f5b0d13", "sighting_of_ref": "indicator--1bcdf163-0902-4034-9444-fcd82e2d3bd9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399d66c8-071b-42e6-8def-abc06347c62a", "sighting_of_ref": "indicator--1bcdf163-0902-4034-9444-fcd82e2d3bd9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6a7611-ec06-4f4a-9694-8d68852a14e4", "sighting_of_ref": "indicator--66e6eb51-a637-46de-87d9-011c681d74de", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d5c811-ba2a-4959-a7e9-aa76bed547a8", "sighting_of_ref": "indicator--83e9c1d6-e6d4-4643-886e-4ba3c1023b44", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7e6db3-8b5c-4914-815f-14e761fd64af", "sighting_of_ref": "indicator--b5516429-94c1-4a42-b3ab-93919ada8ebc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849bd195-efa0-4fc7-b3cc-9fccbbc698bb", "sighting_of_ref": "indicator--5bc8778c-436f-4bcd-960e-a35e6712ba33", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a6a41e-881b-4ba3-b3be-4db1a2411bc2", "sighting_of_ref": "indicator--de4079b1-0536-4c64-92ed-dab1cbf87147", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69fe9299-04d4-47ae-b83f-9e7a1dbbdd4b", "sighting_of_ref": "indicator--f58ac243-eea6-44d3-a49d-577bdc7bac49", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21ce4c4-66b9-4a84-bbd9-78cea9039ece", "sighting_of_ref": "indicator--f58ac243-eea6-44d3-a49d-577bdc7bac49", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe3e72e-f3bc-4d44-b613-6f8ccda63634", "sighting_of_ref": "indicator--f58ac243-eea6-44d3-a49d-577bdc7bac49", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2135fa77-eea5-4dab-8ba6-64f87f40382f", "sighting_of_ref": "indicator--9f69f9e4-4b8d-43a8-800b-790bd3113bc0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e37a586-7a5d-4981-aad1-3d85fcd8635e", "sighting_of_ref": "indicator--9f69f9e4-4b8d-43a8-800b-790bd3113bc0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc3a989-ddbd-40a8-8d26-943b8b17bc22", "sighting_of_ref": "indicator--f5c06d87-8e20-4f4c-950d-db803b8fb94d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0859227a-2d99-4502-a4b3-0ead5518c9e4", "sighting_of_ref": "indicator--7131c043-8bd4-4c6d-9a2e-ebcf81d08117", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ea239b-9a62-4e6a-990c-331db513ec6f", "sighting_of_ref": "indicator--47b7120b-bcd6-4d94-9c82-87ef36530592", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19c581c-8018-4e95-b269-ba3e3f67348c", "sighting_of_ref": "indicator--90dc587e-3505-402a-8263-323949135e41", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966a0aa0-2d28-43ec-8be1-069bc4f68f5b", "sighting_of_ref": "indicator--9b012092-9143-4262-919d-882572dc248c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc950a40-b4f5-487f-ab32-4b4b68ed6a6d", "sighting_of_ref": "indicator--5caa4295-6b7b-4b10-83dc-4bf5b4b0d1a6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b5d559-1fa3-4972-8be5-771d7f8bb209", "sighting_of_ref": "indicator--53ad13f8-8b7a-4d7d-869e-d94854fea491", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351db2d9-acba-46a1-9f36-a07cd03ba0ff", "sighting_of_ref": "indicator--201797b6-743d-493e-9540-586564572855", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481d44d7-4149-4a9c-a601-887b550e1a9b", "sighting_of_ref": "indicator--a8659e2f-92ec-433d-9b21-21adcc0946e0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e23703-b4c0-4f5b-9950-fbb1733fa3ee", "sighting_of_ref": "indicator--ea3ea2aa-7083-4d9e-b576-b71ebb890644", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef4161b-90cb-41f1-984b-99f10eeb42de", "sighting_of_ref": "indicator--ea3ea2aa-7083-4d9e-b576-b71ebb890644", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821fc20a-ba8c-42a0-aa87-e65c3162023f", "sighting_of_ref": "indicator--ea3ea2aa-7083-4d9e-b576-b71ebb890644", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f02dab6-de65-468d-bd16-4fcd0106e1f4", "sighting_of_ref": "indicator--73c27a46-1dea-4cb9-986a-4842a73a6da6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37062e25-5c74-4f1e-baa2-6c949f1e1f7f", "sighting_of_ref": "indicator--565391cf-be76-4106-8d6c-6136276b9d93", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad202133-afa4-4e6c-8e00-fe322946070f", "sighting_of_ref": "indicator--16f1084b-f057-4efd-83a1-8b10e6a4a716", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ecddb3-e9b5-4421-8af1-9be423d13148", "sighting_of_ref": "indicator--fac167db-63c2-4046-b5b0-347752034351", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e34393-27a7-46d4-ab4c-28c694cf063b", "sighting_of_ref": "indicator--1e3e19d7-1919-4d55-81c4-b3b3cf103a06", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d47d30a-0221-4437-aa25-2b468ba92aea", "sighting_of_ref": "indicator--1e3e19d7-1919-4d55-81c4-b3b3cf103a06", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def1bfd3-f13a-4718-af3a-e7d6a1fdc979", "sighting_of_ref": "indicator--691d9560-28ab-4863-b27b-3dd4f47d41b8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5826bea3-6439-4fc2-80a0-da3f2b36ecfb", "sighting_of_ref": "indicator--691d9560-28ab-4863-b27b-3dd4f47d41b8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cfac8a3-7c18-4fce-b731-6ed7dd8ab3f4", "sighting_of_ref": "indicator--691d9560-28ab-4863-b27b-3dd4f47d41b8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717318a6-daec-4fc3-ae26-be2dd58e8101", "sighting_of_ref": "indicator--e0401c5f-eb21-43d6-a732-b354460de176", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e63ba9-9395-487e-9f8c-be239aa6cafa", "sighting_of_ref": "indicator--e0401c5f-eb21-43d6-a732-b354460de176", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b727d5-1410-4217-9444-1adb5f3134ee", "sighting_of_ref": "indicator--9a39f721-2a83-4630-bc19-160f88d978bd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66becc15-eb43-4a6f-9084-a6f5c4d641be", "sighting_of_ref": "indicator--028ade0d-27aa-42c2-88d0-a0540b42578f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96a5510-4f40-45ae-9be8-19083b7e2334", "sighting_of_ref": "indicator--e574c9eb-7ea1-4865-9a11-f59dc385acb2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12d138b-e42d-43ec-a6c7-68ddc10577dc", "sighting_of_ref": "indicator--fc02e2e9-8271-41c6-9944-7ec638875c79", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed92d873-eb2d-4010-be53-e4af6793a8d1", "sighting_of_ref": "indicator--fc02e2e9-8271-41c6-9944-7ec638875c79", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7b2a5c-3147-4510-89f5-76e3182052ac", "sighting_of_ref": "indicator--78cb0c20-554d-44f5-bbee-c83fee9e7b0c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ad78c2-8d8a-4bd2-8124-273db2be2d94", "sighting_of_ref": "indicator--3e478d5a-8ffb-4d16-a823-14235dbeb567", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ca32cd-c066-486a-9e51-8bea0c56b22a", "sighting_of_ref": "indicator--3abf8db8-7348-4fce-809f-ac40b0475d5c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c9343e-fcef-4c64-a3d7-7b9e94cb34fa", "sighting_of_ref": "indicator--61db45e2-90da-45e0-bd9a-7257d735c0f1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802a93a7-da9d-4585-8adb-637540e132bd", "sighting_of_ref": "indicator--fbdff913-1e93-4f59-86c9-3b3b3a45e047", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80acd400-bdad-4360-95ba-285c9793e813", "sighting_of_ref": "indicator--68ce9d3a-9778-44eb-ba2f-3d0d37d61aca", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0b3164-b287-496f-9389-96678fc45ab2", "sighting_of_ref": "indicator--1634d410-dbdf-4992-bfa2-58e01b3a7eb2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e732684-1c70-48b8-9b89-51e8698a2976", "sighting_of_ref": "indicator--91752442-70d7-40e0-aa00-4e9637ba8915", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea04e1b-7376-46a4-bc67-440ef564ead6", "sighting_of_ref": "indicator--3c781aa7-b31a-44eb-8273-b17a6589a5f3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be60d4ec-a79b-4b00-995e-cb1b1fa52d25", "sighting_of_ref": "indicator--3c781aa7-b31a-44eb-8273-b17a6589a5f3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1dda6b-5a79-4785-828c-342e6e9006c4", "sighting_of_ref": "indicator--c465b1a5-04c9-4fee-9a97-f3bd893074a2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b31b24-d53d-44c8-aae8-77ff227df211", "sighting_of_ref": "indicator--aa0e956a-7411-40b5-b6b8-6ba4a519b579", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb2b1a4-e676-4ef6-b7df-89f06a1ed28f", "sighting_of_ref": "indicator--aa0e956a-7411-40b5-b6b8-6ba4a519b579", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4c7f05-e8d1-4d3b-b3a9-8fbba76ba1b2", "sighting_of_ref": "indicator--a6c9ea83-b7dd-41e6-9bee-d6f6e081f2a7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae582e1-45be-462e-b606-3b9330daa23f", "sighting_of_ref": "indicator--7d4c48d7-6d59-4ccb-bc68-45d49014faf7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e849787-9248-48e4-9134-f6b6d0655483", "sighting_of_ref": "indicator--f6581a3a-a3a4-4184-9321-c6269ef166d7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0766e542-2d5d-49af-9006-f02cbaa3a07c", "sighting_of_ref": "indicator--047b3fb4-971a-4989-9596-e4731f70e1d6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb28728-cf5b-478f-9ef7-eff72fba223e", "sighting_of_ref": "indicator--752c1c57-58d5-44f5-9f47-3e0d00895cab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e132804-a8ee-4608-a4ef-00e1760df9a2", "sighting_of_ref": "indicator--1cc67fbb-1ac5-4d3b-96f7-e3c0df4b3ca0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acbdfb1-7d98-477c-bf42-6246453d7183", "sighting_of_ref": "indicator--31c8a549-8654-424a-a2e8-bc5833972926", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb91046-8d0e-4fe1-858f-d9e5d3b52d78", "sighting_of_ref": "indicator--5173edc8-ff9d-4401-afb2-d91e39c19e67", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f587ad-6930-417d-af28-a97cfed8d6d3", "sighting_of_ref": "indicator--5173edc8-ff9d-4401-afb2-d91e39c19e67", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ef7491-d88d-4bd4-b94f-313556a816ff", "sighting_of_ref": "indicator--21a81461-e170-4c9a-a4cd-9f05069098e3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87c11c8-25ac-4ffd-b18f-a21fcd9af8a6", "sighting_of_ref": "indicator--79134dc3-4289-4365-abc4-a8c9546e69fe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06590f3-c451-4969-b981-c4e2ac2e4454", "sighting_of_ref": "indicator--29dddba4-f8f1-4367-a08a-fb037b01dff7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76c3b1b-4ba0-40d2-b84d-5820843f8cc1", "sighting_of_ref": "indicator--7ee45ef6-16d5-444c-a73d-ef1c3b5e9a78", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f94d896-10c0-4428-b0e6-1a6eb336fc0c", "sighting_of_ref": "indicator--7ee45ef6-16d5-444c-a73d-ef1c3b5e9a78", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd5f638-6f2d-4a3f-b083-f15a28504cc0", "sighting_of_ref": "indicator--a6d4ceb7-c384-42b9-8ac8-5ba845d590c3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4c3605-9a49-4626-8d2f-0e9d5136aa22", "sighting_of_ref": "indicator--a6d4ceb7-c384-42b9-8ac8-5ba845d590c3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91d05cc-f3b1-43c3-af78-46939cf9c154", "sighting_of_ref": "indicator--eb1be741-85db-4a53-894d-f6ed1fef74de", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b03007-86fa-4ba0-a4a3-3544c55a7532", "sighting_of_ref": "indicator--bae39fdd-0ff9-4cbd-89e4-6234dd35785f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4866449-2eb2-4722-aeee-74c0cdadc429", "sighting_of_ref": "indicator--c857634a-eb49-4b33-ab01-380a4650b740", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81a19d6-fbaf-4463-a546-1375c839dfa6", "sighting_of_ref": "indicator--2904883c-2034-4002-add5-9ee8d377b22d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ee7e98-7dbb-4a42-b8a3-6bcaf5401ead", "sighting_of_ref": "indicator--9aaea23a-127d-4331-b4f2-83386b2f067e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3076cf9-e6b3-4100-a6d0-52c728c48298", "sighting_of_ref": "indicator--a2f3a866-736c-4801-b349-d0e9395d3c4e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20a12bf-8cd7-436e-869c-d3d62ca021a0", "sighting_of_ref": "indicator--b7826691-84b2-4ce0-bd9f-90b4ac998dde", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f59f5f-d1da-4f9f-a99c-4dee0fc1276c", "sighting_of_ref": "indicator--1c728614-d83b-4c84-9d95-02c9da535bd1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33a4c44-f03b-427e-b2bc-9c3f929d3f49", "sighting_of_ref": "indicator--27038819-921a-48c4-9dc7-a581362ee781", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c100eb07-2393-48e5-99f9-c006a24a8774", "sighting_of_ref": "indicator--4794a58e-b5e3-4e8c-8e28-6cf70b18db48", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9ca971-70e8-4da2-8388-60d4c0a3d880", "sighting_of_ref": "indicator--4794a58e-b5e3-4e8c-8e28-6cf70b18db48", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e708558d-bfc5-4abc-9cd4-66667597d6f0", "sighting_of_ref": "indicator--a26c74c6-0a1e-4dc3-8bb1-9a650f70b564", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4235ffcf-b1de-4693-93c5-b6b1c1919081", "sighting_of_ref": "indicator--a73bc5d7-a68a-4d99-97d8-86cb162c434a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e34a657-d450-4c36-a44d-413411587b81", "sighting_of_ref": "indicator--85bfbc6a-b930-4948-b01c-0ccfeccff443", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4ef1d0-25ab-48f0-a52e-d8f9f4fe7644", "sighting_of_ref": "indicator--cc377976-8ed7-4eaa-89a4-01b58ae6608d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46403c15-4e09-4ab1-8477-aba0666b6c70", "sighting_of_ref": "indicator--0c0e2235-3c16-4882-8c8b-89912ecfeec4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cdbc8e-0221-409c-82e8-ed3b101c00bb", "sighting_of_ref": "indicator--ec180639-3880-4a0a-a9b1-80ebded03b80", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a390357-212d-44bb-93af-858c366a5cb8", "sighting_of_ref": "indicator--fe5a963d-2451-40fb-aced-b96ff9951fff", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f787b9cb-5be0-48d6-8435-c1f67321e40c", "sighting_of_ref": "indicator--ded6b2d2-16fd-429a-ae04-e047008504fe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd670712-1d03-42ee-a34a-d93183b74e38", "sighting_of_ref": "indicator--6ca4fdea-9e30-4c06-8495-4c67f72ae211", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c78b4a-e782-4238-bfb2-22ca42b17f93", "sighting_of_ref": "indicator--6ca4fdea-9e30-4c06-8495-4c67f72ae211", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8ba74c-f5ee-460d-804c-c64f90766be8", "sighting_of_ref": "indicator--00770860-9222-499c-8448-dd8ff250f258", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bd630e-cdd5-440c-bbeb-b6ac61886d30", "sighting_of_ref": "indicator--10c52770-fc55-4fc8-93ee-f9718a22ae13", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2501e5e7-1b7c-4515-8699-b06fd0944628", "sighting_of_ref": "indicator--81eb0c28-ff03-4030-a6ca-2a284ad7952b", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b266652-1b78-4dd6-9ce4-581e2327cc2c", "sighting_of_ref": "indicator--4233474a-f948-4a5c-b41c-a2dae1b813c5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26219ea-9b0a-4065-abde-d49a84fdb2d0", "sighting_of_ref": "indicator--690a203a-6f71-46bd-b965-7b995d4790cb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed80ef8d-e721-4aa1-af3c-7461f01b8d10", "sighting_of_ref": "indicator--690a203a-6f71-46bd-b965-7b995d4790cb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf554ac-32a5-4d89-8285-897ffe46a4b7", "sighting_of_ref": "indicator--1adbde7f-c724-4163-89ca-82aa1644c654", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1884e27f-a46c-4728-8ec6-c2af97c27e4b", "sighting_of_ref": "indicator--87ffec38-ad43-4244-9504-8b968e7cc2c8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db1c7c1-b2c0-4070-937e-952ea09fa9e2", "sighting_of_ref": "indicator--05ccf62a-c742-49cc-bd76-976c32d1d97e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d10798-92b3-44cb-86e9-04153d4e733a", "sighting_of_ref": "indicator--05ccf62a-c742-49cc-bd76-976c32d1d97e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791d5bb2-5a5f-4637-9b7e-74d930f86de6", "sighting_of_ref": "indicator--05ccf62a-c742-49cc-bd76-976c32d1d97e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22e73b5-9b1a-4c7b-8857-53af54ec7b58", "sighting_of_ref": "indicator--0a194ee5-8620-435a-a4c8-a4641e73f7b9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e2cb23-bbf8-4813-9338-19bc2f617c86", "sighting_of_ref": "indicator--0a194ee5-8620-435a-a4c8-a4641e73f7b9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddb17dc-cf18-46a2-bf20-9d73eac16389", "sighting_of_ref": "indicator--0a194ee5-8620-435a-a4c8-a4641e73f7b9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8484e9-807f-4c3d-a39b-7d5caeec220c", "sighting_of_ref": "indicator--d85f9b17-d34b-4191-8553-049e9ce207e0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5da685b-f208-4e17-a693-1e9b02edcad5", "sighting_of_ref": "indicator--d85f9b17-d34b-4191-8553-049e9ce207e0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66cd47f5-9d58-4be8-a16c-900074b5dd49", "sighting_of_ref": "indicator--d85f9b17-d34b-4191-8553-049e9ce207e0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291dc15d-caaf-4fb0-a995-01cd52b0736a", "sighting_of_ref": "indicator--6c938b4d-1bf9-4589-b0ef-263f4b1fdc8f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797c2265-8f37-4dff-bb9f-9aeb56ee9e70", "sighting_of_ref": "indicator--6c938b4d-1bf9-4589-b0ef-263f4b1fdc8f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc002967-da48-4126-8cd6-5e104dce51cb", "sighting_of_ref": "indicator--6c938b4d-1bf9-4589-b0ef-263f4b1fdc8f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e506d131-bc5f-4d8c-8951-00ba83b2fe06", "sighting_of_ref": "indicator--c0c29b9a-464c-4f9c-b5b8-04509be60efb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aab4d27-b365-4c2c-8875-7747c2cf67f3", "sighting_of_ref": "indicator--c0c29b9a-464c-4f9c-b5b8-04509be60efb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d23c59b-92e1-4fb6-9868-1edd04364c2e", "sighting_of_ref": "indicator--c0c29b9a-464c-4f9c-b5b8-04509be60efb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ea3c5f-7594-43be-afda-4cae417426da", "sighting_of_ref": "indicator--b9d385b9-ebc4-4e67-8f0e-cdb91d958aea", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385ace13-6b23-4e73-8cee-6530ec7c6451", "sighting_of_ref": "indicator--b9d385b9-ebc4-4e67-8f0e-cdb91d958aea", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da06d4b1-d5d5-41eb-851e-be5c86e260de", "sighting_of_ref": "indicator--b9d385b9-ebc4-4e67-8f0e-cdb91d958aea", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b2270a-f10c-4f97-9924-32737385ebf5", "sighting_of_ref": "indicator--fa80d196-a7f8-4f5b-815e-10907813b7c7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8746a6-2eca-4cc5-b7a9-baf78d14c233", "sighting_of_ref": "indicator--fa80d196-a7f8-4f5b-815e-10907813b7c7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fe2209-7e98-4f1c-9e8b-b95aa0b7b6f8", "sighting_of_ref": "indicator--fa80d196-a7f8-4f5b-815e-10907813b7c7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a5078a-3bb2-48d2-be5d-72168c5f08ba", "sighting_of_ref": "indicator--aefa061d-10fd-4e0f-b260-b03fb040d800", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc233852-8085-435f-9341-da4495bd1b1b", "sighting_of_ref": "indicator--aefa061d-10fd-4e0f-b260-b03fb040d800", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64bf5e77-e276-42a5-ad98-9d56a89a99d2", "sighting_of_ref": "indicator--aefa061d-10fd-4e0f-b260-b03fb040d800", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c388f3-20da-46e0-92ab-6fd83c1f7896", "sighting_of_ref": "indicator--f2b88c35-793f-48fa-bbc6-a5ae5cf5c64d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674642d3-4c8e-49ca-ac25-a66ea465fe28", "sighting_of_ref": "indicator--f2b88c35-793f-48fa-bbc6-a5ae5cf5c64d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad443dcf-a9da-416d-a03d-35f6353500ab", "sighting_of_ref": "indicator--f2b88c35-793f-48fa-bbc6-a5ae5cf5c64d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88598e38-392a-4522-9d7b-8024768fd8ee", "sighting_of_ref": "indicator--ef606fa0-8012-4399-b79f-0d4d2493b2c3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549f09a1-896c-41e6-9bc8-dfbbd0150330", "sighting_of_ref": "indicator--ef606fa0-8012-4399-b79f-0d4d2493b2c3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677b64e2-a85d-4350-9c8f-623673994fb9", "sighting_of_ref": "indicator--ef606fa0-8012-4399-b79f-0d4d2493b2c3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d438e7-a955-47fa-9dee-e350fdaa44b6", "sighting_of_ref": "indicator--b00913e1-64ce-437b-bf37-27c77f91e7e5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b36402-cbd2-46eb-96ab-629057552a59", "sighting_of_ref": "indicator--b00913e1-64ce-437b-bf37-27c77f91e7e5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0a0f1b-0d8c-40c2-a033-3f9bd512a799", "sighting_of_ref": "indicator--b00913e1-64ce-437b-bf37-27c77f91e7e5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e738a9f2-d79a-49f2-b83c-66232e4c1946", "sighting_of_ref": "indicator--e6db5b16-d62f-4f55-98d7-0568cb382863", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3628d5-f1c9-4a32-87a1-3575f72b735f", "sighting_of_ref": "indicator--e6db5b16-d62f-4f55-98d7-0568cb382863", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179e0412-efb0-4ca2-a6b7-41282dcd0aa0", "sighting_of_ref": "indicator--e6db5b16-d62f-4f55-98d7-0568cb382863", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8223f797-0351-4367-9025-4e8bf08cea4d", "sighting_of_ref": "indicator--ce3e3014-cfec-4ef3-b0a1-91eef53a364c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3340f25-5d73-4cb6-b3bf-020bf96c7346", "sighting_of_ref": "indicator--ce3e3014-cfec-4ef3-b0a1-91eef53a364c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0944ce57-2297-4a53-8d7a-9b7d7ea42854", "sighting_of_ref": "indicator--ce3e3014-cfec-4ef3-b0a1-91eef53a364c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81b63d9-66c5-48bb-853a-07107050c21e", "sighting_of_ref": "indicator--261b84be-b998-4334-8162-cddb4c7e057f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf47f1c1-e823-4cd8-b954-801457466f66", "sighting_of_ref": "indicator--9dc6b757-97ac-4fde-8b8e-ea41d50251fb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82a2e7d-e459-4a37-bcc5-02df4feed378", "sighting_of_ref": "indicator--9dc6b757-97ac-4fde-8b8e-ea41d50251fb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e1e147-24ae-4742-85bb-4e0be0b2b6fc", "sighting_of_ref": "indicator--9dc6b757-97ac-4fde-8b8e-ea41d50251fb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5be591-6ccc-4a0d-8334-f76698240e80", "sighting_of_ref": "indicator--97afb36f-58ad-49b6-806a-c07c8ea7f888", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c0de5d-9f93-47c5-9a49-aae923b76a0b", "sighting_of_ref": "indicator--97afb36f-58ad-49b6-806a-c07c8ea7f888", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd8df46-ce35-4c96-85da-29604db4eacc", "sighting_of_ref": "indicator--97afb36f-58ad-49b6-806a-c07c8ea7f888", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a36dce-c423-4fbd-8465-ddfc4f8a0550", "sighting_of_ref": "indicator--97c13d1b-6650-44f9-95f6-ec4a8c0ca33d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf0fca0-46d6-4d32-857e-e127cb7ad2de", "sighting_of_ref": "indicator--97c13d1b-6650-44f9-95f6-ec4a8c0ca33d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76009a92-c7a4-4ad2-a5ba-d324a4c9a957", "sighting_of_ref": "indicator--97c13d1b-6650-44f9-95f6-ec4a8c0ca33d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a488db-d203-467b-859d-5549abefb262", "sighting_of_ref": "indicator--deb5b6fb-69ec-407a-9351-68562e7a8e90", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168ce01c-d484-4503-a236-17dcef125a9a", "sighting_of_ref": "indicator--deb5b6fb-69ec-407a-9351-68562e7a8e90", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89aef13-5d68-4b18-8c4c-3f8fa76e4c2b", "sighting_of_ref": "indicator--deb5b6fb-69ec-407a-9351-68562e7a8e90", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b39a995-e842-495e-80a1-83c10c694e85", "sighting_of_ref": "indicator--aa79bc63-3a98-4f5b-a1af-159b01c3cd55", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a38ab7-452c-46a4-bfae-5da5f619f89b", "sighting_of_ref": "indicator--aa79bc63-3a98-4f5b-a1af-159b01c3cd55", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15ca745-3f88-44e7-84a1-1f2363da3bbd", "sighting_of_ref": "indicator--aa79bc63-3a98-4f5b-a1af-159b01c3cd55", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7ccd3b-276c-4541-bd1c-9c32bf54e597", "sighting_of_ref": "indicator--bdf91ec5-3cb5-4bfc-ab80-c37d00f6e1ee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da81992e-e37f-4483-99dd-564371dd1bc5", "sighting_of_ref": "indicator--bdf91ec5-3cb5-4bfc-ab80-c37d00f6e1ee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303f967c-b0e9-4155-9c33-61150fd80579", "sighting_of_ref": "indicator--bdf91ec5-3cb5-4bfc-ab80-c37d00f6e1ee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48941a8-fbab-4248-ac73-52ed9c1d4940", "sighting_of_ref": "indicator--9d4fafe1-ffd2-4d23-9e5b-403c105be67f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec3520a-ebfe-4505-9673-217145fdf558", "sighting_of_ref": "indicator--9d4fafe1-ffd2-4d23-9e5b-403c105be67f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f711416-cac4-438f-a694-524bfea2fa6d", "sighting_of_ref": "indicator--9d4fafe1-ffd2-4d23-9e5b-403c105be67f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb2115f-196d-43c6-ad9e-a19f940d421c", "sighting_of_ref": "indicator--a57d6719-b57a-4291-a049-3199367cc73e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab8feb0-e3cf-40c9-b5ef-1961d30b6bcb", "sighting_of_ref": "indicator--a57d6719-b57a-4291-a049-3199367cc73e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9486ac41-1c13-4839-b192-c869b647967f", "sighting_of_ref": "indicator--a57d6719-b57a-4291-a049-3199367cc73e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd6eac1-aef2-48b8-961c-7c7c131ac892", "sighting_of_ref": "indicator--c1d3ecf5-b263-46a8-b1b0-4d83b464c4e0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33aee6b-ae25-4abc-b018-269812cc4d2a", "sighting_of_ref": "indicator--c1d3ecf5-b263-46a8-b1b0-4d83b464c4e0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711397a8-7e2d-4ae3-b937-a3042c10f7e6", "sighting_of_ref": "indicator--c1d3ecf5-b263-46a8-b1b0-4d83b464c4e0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7bc61ca-35bd-4cf3-8a23-0b4f820fe7aa", "sighting_of_ref": "indicator--43fb46aa-157b-47b7-b60e-6b524311f4f7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f055820b-31c1-4ef7-a560-e3c05e63ec7f", "sighting_of_ref": "indicator--43fb46aa-157b-47b7-b60e-6b524311f4f7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362c12d0-c903-4287-91f8-edadbd9670df", "sighting_of_ref": "indicator--43fb46aa-157b-47b7-b60e-6b524311f4f7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6b1920-25f1-468b-a1d6-474620241b22", "sighting_of_ref": "indicator--9e32f38a-8b42-4559-9a58-957ed2f4197c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e9a398-1110-47ba-b171-235ab1c3c7cf", "sighting_of_ref": "indicator--8105b1ed-2fb4-40bf-833a-90bbeaa036c5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d4e6a9-19f4-4727-9c53-55a546cbcd68", "sighting_of_ref": "indicator--4840ac46-856c-447c-8dec-5f31719ba8c2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2cae36-dda9-4fa9-a00e-71b3aefbe033", "sighting_of_ref": "indicator--a64e6ea7-8352-4ab9-927d-ebf1e33583a8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48f992f-a881-4aae-8698-cf7bc89af7ea", "sighting_of_ref": "indicator--a64e6ea7-8352-4ab9-927d-ebf1e33583a8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b473bf-bcfc-4c37-9b70-5f8c5584aa90", "sighting_of_ref": "indicator--a64e6ea7-8352-4ab9-927d-ebf1e33583a8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40604b1e-c16a-4a61-b88e-1be5c8ab54f0", "sighting_of_ref": "indicator--9b57c636-a5ca-4c7c-84dd-29684361864a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecc9825-ed55-4a09-9057-11e02ceeaa53", "sighting_of_ref": "indicator--9b57c636-a5ca-4c7c-84dd-29684361864a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c7392c-bd66-4396-8322-6796e5f2d887", "sighting_of_ref": "indicator--9b57c636-a5ca-4c7c-84dd-29684361864a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5ff788-8768-402a-a09b-a8ed59f07569", "sighting_of_ref": "indicator--57a918e1-20e1-4588-b9c0-99ca7bc60a09", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee1bbb2-1172-4c48-8911-848486370184", "sighting_of_ref": "indicator--57a918e1-20e1-4588-b9c0-99ca7bc60a09", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96b71e8-0181-45bd-b8ab-7e2f0d33023e", "sighting_of_ref": "indicator--57a918e1-20e1-4588-b9c0-99ca7bc60a09", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7223e3b-9505-4f0f-9202-7a4c4c88b669", "sighting_of_ref": "indicator--691b611a-7709-4bc2-9595-59aec1e4828f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfce00d-1fa3-4564-8897-eef27afed6c0", "sighting_of_ref": "indicator--691b611a-7709-4bc2-9595-59aec1e4828f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e76cc38-112d-425d-86eb-e80d3b220ae8", "sighting_of_ref": "indicator--691b611a-7709-4bc2-9595-59aec1e4828f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b75e3b-949f-427b-8bd9-9bbcd4278d24", "sighting_of_ref": "indicator--4fbca7be-3304-4de4-8c2e-c6e98cb3fb89", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc66c17d-bfad-41ac-bd57-dade61a75a30", "sighting_of_ref": "indicator--4fbca7be-3304-4de4-8c2e-c6e98cb3fb89", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533d39df-23b6-499f-8633-0d49a53e1fbc", "sighting_of_ref": "indicator--4fbca7be-3304-4de4-8c2e-c6e98cb3fb89", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a0f13b-39f2-43b6-9560-eaa3964b825d", "sighting_of_ref": "indicator--b78f43ad-ffc5-4188-8288-56746d65c85e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a64dc5-41ff-4148-a3d2-2161b940d4f1", "sighting_of_ref": "indicator--5be2f165-acea-42fa-b8b9-dab06a828aed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f2a740-0c6d-4cdb-8b71-fa943afe6acd", "sighting_of_ref": "indicator--5be2f165-acea-42fa-b8b9-dab06a828aed", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182e8855-20c7-42db-882d-3491e9e76cdd", "sighting_of_ref": "indicator--5be2f165-acea-42fa-b8b9-dab06a828aed", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924adb4a-9edd-47e1-9c75-3f1caa539df7", "sighting_of_ref": "indicator--3f833643-bf92-4074-9ce8-76783d3fbaa5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a54d14-c189-4ef6-918a-fc403cfb22b4", "sighting_of_ref": "indicator--3f833643-bf92-4074-9ce8-76783d3fbaa5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875d4c15-4d19-469b-ad30-77eb2be0d756", "sighting_of_ref": "indicator--3f833643-bf92-4074-9ce8-76783d3fbaa5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4344aa5a-a2e7-43f8-b520-7bf886d8fd85", "sighting_of_ref": "indicator--1d90eeea-201a-4410-9123-fe4c4863ea74", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a79427-a91d-40f4-8a2b-1eace59b84bb", "sighting_of_ref": "indicator--1d90eeea-201a-4410-9123-fe4c4863ea74", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d7b986-4ded-4487-a210-c170d44e7539", "sighting_of_ref": "indicator--1d90eeea-201a-4410-9123-fe4c4863ea74", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c59f2da-b064-4ee9-95d9-cbadcaff81b1", "sighting_of_ref": "indicator--b2d18b11-caa5-4b0b-aa09-2dcb1938c835", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22008a99-06f1-4362-8ec0-69d130eb20dd", "sighting_of_ref": "indicator--b2d18b11-caa5-4b0b-aa09-2dcb1938c835", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d01215-bde9-4e97-92c3-bf220b08d55a", "sighting_of_ref": "indicator--b2d18b11-caa5-4b0b-aa09-2dcb1938c835", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f429fa62-8ca1-4067-ad3b-b0a9fa0bca05", "sighting_of_ref": "indicator--48695076-38d6-4074-9ae4-3ca59046b6c0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df3f791-b62a-43aa-bf0d-92537f22cf5c", "sighting_of_ref": "indicator--ac6f19ac-d052-4029-afbe-f033634d91c6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21fa9c82-ee29-4659-8bd9-d78cc9a713ae", "sighting_of_ref": "indicator--81baea7a-d6be-4715-9dd0-355c41db50a0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd81dc9d-7aba-44b9-b21b-ef12684a1dcb", "sighting_of_ref": "indicator--7d745c03-2767-4f51-8501-f19e3a60fe68", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723744e5-2a33-434e-a8e7-9d3a0e16bffb", "sighting_of_ref": "indicator--7d745c03-2767-4f51-8501-f19e3a60fe68", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45a6867-af8f-41d7-ae47-213026094d2e", "sighting_of_ref": "indicator--7d745c03-2767-4f51-8501-f19e3a60fe68", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02de800d-05cb-4651-a09b-6f50159133fa", "sighting_of_ref": "indicator--9bd457c3-2590-4df3-9924-e0c58bf45ceb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37cd12fd-73d9-4281-b320-367fbbbfa18c", "sighting_of_ref": "indicator--9bd457c3-2590-4df3-9924-e0c58bf45ceb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f40b0b-2572-4c92-8b08-56ebbabbe957", "sighting_of_ref": "indicator--9bd457c3-2590-4df3-9924-e0c58bf45ceb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6f955d-5288-4986-8017-5458bfcbb199", "sighting_of_ref": "indicator--f8191b31-123e-4556-b467-ec61081693cf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed554ff-956d-41c2-beee-4ff3146ec581", "sighting_of_ref": "indicator--f8191b31-123e-4556-b467-ec61081693cf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa18dabb-3c70-4c62-a61d-8273972296ad", "sighting_of_ref": "indicator--f8191b31-123e-4556-b467-ec61081693cf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f8d23e-a3d3-41bf-b367-b65ba035adf1", "sighting_of_ref": "indicator--930eaf82-5a4b-4b20-8ce2-e75e7feb6a88", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ceba95-b202-40f6-ad6f-b82263b02219", "sighting_of_ref": "indicator--930eaf82-5a4b-4b20-8ce2-e75e7feb6a88", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4faac96-e36a-43e2-913b-b01dc52fd669", "sighting_of_ref": "indicator--930eaf82-5a4b-4b20-8ce2-e75e7feb6a88", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe631a1-d721-45e6-80ef-7e945036975c", "sighting_of_ref": "indicator--de5a93ed-df76-4e62-97fc-a43e7c669f06", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d946caaf-25dc-4375-aaf4-6eb1d5014a73", "sighting_of_ref": "indicator--de5a93ed-df76-4e62-97fc-a43e7c669f06", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b89c0e-b738-4f12-8c7a-26b664c43f3b", "sighting_of_ref": "indicator--3d831162-5a20-4c21-ae1c-af07303a7aa9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6257c85-a2c1-4fb4-a3e4-e9a7998b96cd", "sighting_of_ref": "indicator--3d831162-5a20-4c21-ae1c-af07303a7aa9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5005efae-50eb-459c-9306-5acaee1d2234", "sighting_of_ref": "indicator--3d831162-5a20-4c21-ae1c-af07303a7aa9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d17e75-456c-4817-bd64-5d1d0f181ef7", "sighting_of_ref": "indicator--8c3b8420-a8f1-4434-a1f1-f03999a691f3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681f43b8-4365-4ccb-bf78-86fb664338b3", "sighting_of_ref": "indicator--8c3b8420-a8f1-4434-a1f1-f03999a691f3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb99f45b-fc0e-4a14-850e-f5a7bdaffdfa", "sighting_of_ref": "indicator--8c3b8420-a8f1-4434-a1f1-f03999a691f3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ab3da0-b0c1-4259-8072-6a8fc9246942", "sighting_of_ref": "indicator--8cecd299-bca5-4577-a5de-4fa0b18de0c9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b635a8-9e30-4d07-8658-8887101e87b2", "sighting_of_ref": "indicator--8cecd299-bca5-4577-a5de-4fa0b18de0c9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bced977-b083-4490-bfc0-4aa7369861ab", "sighting_of_ref": "indicator--8cecd299-bca5-4577-a5de-4fa0b18de0c9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b93d2f-f3e5-491a-97c5-2e9a9141d73d", "sighting_of_ref": "indicator--3bc0c102-12f3-4bef-b0cc-16e5b76e70df", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e02957-d98b-4794-8540-d64ac71bfaab", "sighting_of_ref": "indicator--3bc0c102-12f3-4bef-b0cc-16e5b76e70df", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ee8ded-878f-4dba-affe-3bc1081f47fd", "sighting_of_ref": "indicator--3bc0c102-12f3-4bef-b0cc-16e5b76e70df", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479d7aa5-11c0-41cd-baab-badd12b4049b", "sighting_of_ref": "indicator--e0c91653-8e0f-4a0c-abad-170f4a849ba0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa40c3b-971f-46fe-b42c-2b069d3c55aa", "sighting_of_ref": "indicator--e0c91653-8e0f-4a0c-abad-170f4a849ba0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80f0201-572f-4947-82ef-113a6923825c", "sighting_of_ref": "indicator--e0c91653-8e0f-4a0c-abad-170f4a849ba0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2784b4be-7efb-40d0-9b0e-a0295a9c8335", "sighting_of_ref": "indicator--8e27fec5-5cb9-4d90-a661-f7d88f26fc47", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a1cc00-bcb4-4b3a-8776-4d153035f9e1", "sighting_of_ref": "indicator--8e27fec5-5cb9-4d90-a661-f7d88f26fc47", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a905027-4594-47aa-8f53-d8680532a2a8", "sighting_of_ref": "indicator--8e27fec5-5cb9-4d90-a661-f7d88f26fc47", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea36092-ea92-4ad8-b01e-58f322459647", "sighting_of_ref": "indicator--4ee6897e-7fb4-4784-9de2-3a12c805943d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e320b98-cc04-4ae8-9adc-68c0affd2580", "sighting_of_ref": "indicator--4ee6897e-7fb4-4784-9de2-3a12c805943d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ff047f-e38b-411f-8535-aa6d96328afc", "sighting_of_ref": "indicator--4ee6897e-7fb4-4784-9de2-3a12c805943d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911155ff-881d-4476-9a06-5f4b12cf6ca6", "sighting_of_ref": "indicator--91ff1837-43dc-4f95-befa-0ad7c2a1037a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3613a9be-4534-4702-9aca-7fb1b6032eea", "sighting_of_ref": "indicator--91ff1837-43dc-4f95-befa-0ad7c2a1037a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca94884-1a30-48ff-8fbc-1c8aa11affa9", "sighting_of_ref": "indicator--91ff1837-43dc-4f95-befa-0ad7c2a1037a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8364cd8-6685-4b89-8e5b-d54e07ec7a15", "sighting_of_ref": "indicator--0d25b70b-c0af-4e63-bde2-bf37f609a624", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e18c9d-3a8e-4985-b346-7817c50ac92d", "sighting_of_ref": "indicator--0d25b70b-c0af-4e63-bde2-bf37f609a624", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a180529a-6a45-4dee-906b-009bcc7029db", "sighting_of_ref": "indicator--566605be-c9cc-4a21-9b7d-da55cc0340d3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dde6c4b-5d53-4ba9-beea-63a4976b3cd3", "sighting_of_ref": "indicator--566605be-c9cc-4a21-9b7d-da55cc0340d3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b18d702-55e3-4e25-b074-042120b4053b", "sighting_of_ref": "indicator--566605be-c9cc-4a21-9b7d-da55cc0340d3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3c6300-451b-417c-97fd-0feeca5ef7fc", "sighting_of_ref": "indicator--8cfdd08a-415f-4fd7-a6a5-3b24d797e030", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbd72da-ccd9-4c62-9617-6150cb2d39f5", "sighting_of_ref": "indicator--8cfdd08a-415f-4fd7-a6a5-3b24d797e030", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ba834e-f9ce-4ae3-84b0-6d3d5e1ad8a5", "sighting_of_ref": "indicator--8cfdd08a-415f-4fd7-a6a5-3b24d797e030", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46bb857f-17d7-434e-bc90-812ec30ede5e", "sighting_of_ref": "indicator--e02f68ee-9806-465c-9b63-0ebb511f836d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030777a1-2f53-4d6b-931d-9a71311caab6", "sighting_of_ref": "indicator--b469bf4c-a7e5-4ae3-8249-cd3b5ce2c6b6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f223e772-d6fb-4a6f-b2e8-826bb81b74ff", "sighting_of_ref": "indicator--b469bf4c-a7e5-4ae3-8249-cd3b5ce2c6b6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94251bc2-b25e-4e0e-b91d-0982a3b66ae4", "sighting_of_ref": "indicator--ae7ce23a-904e-480d-8f7e-dabe4a517422", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f4e207-4ade-437f-853e-9810cf6c0e0a", "sighting_of_ref": "indicator--ae7ce23a-904e-480d-8f7e-dabe4a517422", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c14f4d-b16a-4856-9cc4-071bbb48dda4", "sighting_of_ref": "indicator--c15c6f81-4a99-4595-846f-2fd6db0f5e98", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65ce4ae-efc5-4f24-b60d-0f31cc30965d", "sighting_of_ref": "indicator--c15c6f81-4a99-4595-846f-2fd6db0f5e98", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8f531e-067c-4291-a253-03b7ed80317c", "sighting_of_ref": "indicator--139c5030-a545-4d5e-9224-5964660d5322", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73ce842-1f5f-4d30-aa1d-76edc2de97dd", "sighting_of_ref": "indicator--50379fc6-c117-43bd-aca1-8ef033dd3d9c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61379422-7c29-482a-8685-a813e81cf56d", "sighting_of_ref": "indicator--1635f2fa-8fb7-4ef7-8982-25adc21fce41", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70f3384-7cd5-4329-8172-d2e4d908257f", "sighting_of_ref": "indicator--1635f2fa-8fb7-4ef7-8982-25adc21fce41", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f712f3-1af2-49a8-9d74-b458d683bb38", "sighting_of_ref": "indicator--0e2eaa8f-a822-40e0-ae7b-6c65f87af673", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71fa225-0b90-4250-aacd-ba6556ff27c1", "sighting_of_ref": "indicator--29de02d4-1091-439f-b069-0575811f893b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6efcb93-7559-47f7-aedc-02598ccfdd9e", "sighting_of_ref": "indicator--479f25ca-15fc-4813-bc07-617ae5a292a8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa2cd3f-d2cd-401e-bc46-747d77e9b943", "sighting_of_ref": "indicator--e03969bc-c281-4b12-bc31-09fbf9524bd6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d9d0ab-8720-4287-bdc0-fd63653ae57b", "sighting_of_ref": "indicator--90726829-94b0-4f85-9eb2-e3ce5c2ac091", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13dc615-e8e2-494f-8a8b-727aa51d8db1", "sighting_of_ref": "indicator--dca11602-89c7-4e68-b64f-f6075103fa9a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a406bd-4918-4993-83e2-85ca649b96fa", "sighting_of_ref": "indicator--5b687003-5e2f-4570-bcc6-48942a7f1677", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5042fbb5-3e37-4696-a782-8c026e12b72d", "sighting_of_ref": "indicator--10635709-3879-445c-895e-0a696575c4b6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65053c13-9247-4388-a8c0-1315e20b1388", "sighting_of_ref": "indicator--e54184b9-4208-49d2-a566-73e6aa89081b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f542b7c3-eee8-4a31-bc19-dba982494302", "sighting_of_ref": "indicator--e54184b9-4208-49d2-a566-73e6aa89081b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4187dbf6-f9e6-4bc6-9e47-12ce40c9c1c0", "sighting_of_ref": "indicator--e54184b9-4208-49d2-a566-73e6aa89081b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413658ef-020b-41f3-8a50-2fce5c685354", "sighting_of_ref": "indicator--9e70ea84-3207-43bd-9125-d044a17208ab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd7539a-f27e-4506-943f-7de04b64b42b", "sighting_of_ref": "indicator--5f51b9ee-5f8c-4c87-9fa9-8b513ed61a64", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f571a0-88ac-4b11-a950-616d6bb57fe2", "sighting_of_ref": "indicator--b36b61b1-3c01-4b2b-a28b-7edf07b2b075", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37cdb138-b312-445d-9b7c-b267944c4483", "sighting_of_ref": "indicator--4256553d-6887-4335-bfdc-c0a34ab4a0a9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4079356d-5226-4c0d-97d3-8ee22c50b12b", "sighting_of_ref": "indicator--a8ae8718-4d0c-45ea-b301-e48160bb7117", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94e042f-9f6b-413a-b87a-5a1836b05f28", "sighting_of_ref": "indicator--a8ae8718-4d0c-45ea-b301-e48160bb7117", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d479dba-bd9e-4f41-93d5-d4102307197b", "sighting_of_ref": "indicator--a8ae8718-4d0c-45ea-b301-e48160bb7117", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969379ef-2ce6-4cd1-bdf7-3387c4cf2aa9", "sighting_of_ref": "indicator--39128491-67b2-41c0-ac22-0a82728e4728", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687836e2-e2be-4553-b739-4a877163ab5a", "sighting_of_ref": "indicator--39128491-67b2-41c0-ac22-0a82728e4728", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e81723-21df-46da-8e6b-7040c645c1de", "sighting_of_ref": "indicator--39128491-67b2-41c0-ac22-0a82728e4728", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9466142-c2c9-414f-89a7-1b5b24e4738d", "sighting_of_ref": "indicator--1193e338-4300-46a7-9491-153e00f23e34", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02821b0f-d5bd-47db-a9f6-fa1cec4c9fe4", "sighting_of_ref": "indicator--1193e338-4300-46a7-9491-153e00f23e34", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c26a951-8f92-4d4d-8dbd-851fc1125030", "sighting_of_ref": "indicator--14081ba2-04bd-4d08-8ffe-d3dfe46b0e7e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19704b77-6ee5-43c3-a17e-9f7ef6bb8e6f", "sighting_of_ref": "indicator--7329b22c-b32a-43b8-933a-b96e08a65185", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af80f4b0-44fe-41fc-aee5-eb8d17c05744", "sighting_of_ref": "indicator--44cb2987-383e-403b-b6f0-0a520d3b8d4f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1faf4f2a-74f6-415f-99f7-717f1afc9743", "sighting_of_ref": "indicator--44cb2987-383e-403b-b6f0-0a520d3b8d4f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d384cba7-49e0-4c7b-ac5a-e37d4f4d12e9", "sighting_of_ref": "indicator--44cb2987-383e-403b-b6f0-0a520d3b8d4f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2cf5bc-82a3-46fb-bcda-05994b5863c1", "sighting_of_ref": "indicator--f539a7d5-d257-418f-bb33-99b7d2eec18c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9272a3-f2ab-4e60-aa73-3981cc4482ad", "sighting_of_ref": "indicator--b208e26e-dc47-42a6-8223-4b2d56ff510c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f30cdf1-5dd9-46b5-8645-7cfc6da69e19", "sighting_of_ref": "indicator--b208e26e-dc47-42a6-8223-4b2d56ff510c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc28889-21a0-452e-89ba-4af2629efb8f", "sighting_of_ref": "indicator--f0e5fa5a-a980-418c-a3c8-79167f728aa8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4287291-aa66-440b-9be7-e410f009b4b1", "sighting_of_ref": "indicator--f0e5fa5a-a980-418c-a3c8-79167f728aa8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa10a677-5341-40b3-9b80-57c1efb86365", "sighting_of_ref": "indicator--02fe353f-4cce-4c2d-ad58-c767ac73d5b8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71674a6-fc4d-43e4-b45f-b96fd07c914b", "sighting_of_ref": "indicator--5430ae90-37ac-4c73-83d7-d653f3c9d30d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a92003b-7918-431c-b5fd-c0e59c769ada", "sighting_of_ref": "indicator--5430ae90-37ac-4c73-83d7-d653f3c9d30d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ce7906-f6fe-402b-87d8-ca77a51561b5", "sighting_of_ref": "indicator--5430ae90-37ac-4c73-83d7-d653f3c9d30d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc58d26-3925-4731-af96-418500ca9f1f", "sighting_of_ref": "indicator--b92dc2e7-291e-430d-9a25-e7cddf3acb21", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1847ac25-164c-4348-b4f8-4493befde6ac", "sighting_of_ref": "indicator--ee6f20ab-b129-4228-b421-fdab2cb609b7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4644c9-f25a-4014-b989-1ba3068c6788", "sighting_of_ref": "indicator--ee6f20ab-b129-4228-b421-fdab2cb609b7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb39cc5-70d8-4c0b-a681-1b30632f8e43", "sighting_of_ref": "indicator--ee6f20ab-b129-4228-b421-fdab2cb609b7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3243a1-3489-411f-96ef-f51d2ba09ac5", "sighting_of_ref": "indicator--02de1940-f475-43b8-aaf8-98ff5cf7b5cc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e862aab8-5d63-4f29-90dc-976431118055", "sighting_of_ref": "indicator--02de1940-f475-43b8-aaf8-98ff5cf7b5cc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b2b99c-34c6-4213-bd16-b00e00730238", "sighting_of_ref": "indicator--02de1940-f475-43b8-aaf8-98ff5cf7b5cc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef72bbc-726b-401a-bc49-5a3420fcbadb", "sighting_of_ref": "indicator--d42d0e64-a649-44ee-947b-505973723ca6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746c2ffe-cc1b-4f8a-9a49-f4473c818a6d", "sighting_of_ref": "indicator--d42d0e64-a649-44ee-947b-505973723ca6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a533957e-b8c0-4dec-a8d2-c8e4bd953ae0", "sighting_of_ref": "indicator--d42d0e64-a649-44ee-947b-505973723ca6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b20b757-5ee5-4eb5-a91e-78d39587ae36", "sighting_of_ref": "indicator--58a840a8-f735-4435-a170-708f719bbbd4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3299b319-b27b-4c17-a6a0-176e8b5938e0", "sighting_of_ref": "indicator--58a840a8-f735-4435-a170-708f719bbbd4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9810e46d-44da-451f-8bbc-89be745e2344", "sighting_of_ref": "indicator--58a840a8-f735-4435-a170-708f719bbbd4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2248490-e3bd-4501-89fb-37c22099e43a", "sighting_of_ref": "indicator--92f68649-92f2-400c-b9d1-97eb2d74eb05", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff38026-1ab9-47f5-a668-452454c82a17", "sighting_of_ref": "indicator--92f68649-92f2-400c-b9d1-97eb2d74eb05", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e07861-f177-41e5-8689-e8e1ff1cd492", "sighting_of_ref": "indicator--92f68649-92f2-400c-b9d1-97eb2d74eb05", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87474e88-143b-4da3-9e46-d3011547a2e9", "sighting_of_ref": "indicator--8942475d-b8e1-46ab-839b-9dd874c537db", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3372d186-1a0a-4da4-a192-5e3cabaa1e4c", "sighting_of_ref": "indicator--8942475d-b8e1-46ab-839b-9dd874c537db", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018968fc-ee80-49d7-a6de-30a6b07f297d", "sighting_of_ref": "indicator--8942475d-b8e1-46ab-839b-9dd874c537db", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834d464e-d0bc-47d5-9cdd-524130095bb0", "sighting_of_ref": "indicator--523ce342-1930-47fe-91bb-4c9bf585b05a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1bfe33c-c1ef-442b-90e5-71af9601dd00", "sighting_of_ref": "indicator--523ce342-1930-47fe-91bb-4c9bf585b05a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afc76df-943f-48f1-a22b-59228b561a97", "sighting_of_ref": "indicator--523ce342-1930-47fe-91bb-4c9bf585b05a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf20889-f91e-463d-acd4-482e9d9e1a61", "sighting_of_ref": "indicator--852454dc-d659-4c87-b689-bf329e9af708", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2540d294-da68-4712-9d7d-697e5de1d367", "sighting_of_ref": "indicator--852454dc-d659-4c87-b689-bf329e9af708", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fe7756-a9d9-430e-8cc6-d6f61d03f173", "sighting_of_ref": "indicator--852454dc-d659-4c87-b689-bf329e9af708", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54bf832-57f2-4aaa-a3a2-97e985f58257", "sighting_of_ref": "indicator--a8843027-7af4-41ed-886a-4d2347b29017", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1745bede-5bd1-4f82-ad35-4c86e12ed7d5", "sighting_of_ref": "indicator--a8843027-7af4-41ed-886a-4d2347b29017", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91af38d7-f39b-4a96-8899-d1ff3a7565c5", "sighting_of_ref": "indicator--a8843027-7af4-41ed-886a-4d2347b29017", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4b2398-b48c-4d42-9649-5e1dc6833144", "sighting_of_ref": "indicator--757c8855-5917-478f-ab8b-6e30157519a2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79398bb4-2757-4a34-ae03-f376962a5d49", "sighting_of_ref": "indicator--757c8855-5917-478f-ab8b-6e30157519a2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c889fc2-7e37-4a1b-9537-dcb6409e570c", "sighting_of_ref": "indicator--757c8855-5917-478f-ab8b-6e30157519a2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57358c05-4299-4aac-b8ee-ff54ed4c9904", "sighting_of_ref": "indicator--79344f97-a97c-46c6-ac33-22e9727eadc9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deff4739-bf71-4795-954a-f97aaa678c11", "sighting_of_ref": "indicator--79344f97-a97c-46c6-ac33-22e9727eadc9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960b07d8-ff67-4360-b813-6529bafc9ed6", "sighting_of_ref": "indicator--79344f97-a97c-46c6-ac33-22e9727eadc9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be4ff70-47c8-4b8a-8185-b75df2e9cbbe", "sighting_of_ref": "indicator--5da4b8b5-583e-4098-9576-dbcd0811962f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef2388b-d3ad-405d-bcf3-50447c0bd10b", "sighting_of_ref": "indicator--42dfa98f-2bb6-4e7f-8309-364eae000bcd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770fc227-0bca-4141-8efe-627300de4cbe", "sighting_of_ref": "indicator--42dfa98f-2bb6-4e7f-8309-364eae000bcd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad33ab54-4bb9-4b7d-9b92-e4f035c28018", "sighting_of_ref": "indicator--1b5d93d4-31c4-4dd2-88fc-4f8094dab203", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc70d349-0272-4df8-a40a-0d3451e736f9", "sighting_of_ref": "indicator--d9d78292-055e-41a8-83e4-2c51c1c3b174", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195ab0de-074b-4534-bcea-fd2ff25fe4bf", "sighting_of_ref": "indicator--25aa666e-58ae-4b78-9080-a19b8185463c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faed6d61-32b0-45c1-9d10-e5a4ca833e88", "sighting_of_ref": "indicator--4ddf3af6-0811-4fc1-9de8-b7cce37bc970", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d986b4-b83a-4b38-afb9-84428af8d834", "sighting_of_ref": "indicator--c6ff6ae3-6865-4031-a428-3d4872d5140e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21556c1a-dd85-4051-81b3-7dc053340242", "sighting_of_ref": "indicator--15efc460-6cfb-4e2a-a496-5355717be0f1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236c7d9f-abed-425c-9fab-3af866ec877c", "sighting_of_ref": "indicator--9a4dccb1-8c18-4a56-8288-b7e24e584d42", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795e9708-07c2-4470-81d8-f4c6395c37fe", "sighting_of_ref": "indicator--d64e666b-d661-44d3-8abd-e3239de460c1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fe52fa-b9df-48ff-a5cb-1d17fc281252", "sighting_of_ref": "indicator--d64e666b-d661-44d3-8abd-e3239de460c1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14c2a27-9269-40fa-8a23-78c2e958e3d3", "sighting_of_ref": "indicator--0a6d4cb6-0842-4eb0-87b1-83446e974c59", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165f4f83-6ebe-4ce4-9cf0-fb4b3e129f69", "sighting_of_ref": "indicator--c291fbc2-052e-4a7b-b219-c8d70e82fff9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9372c6-a567-414a-b3f8-24916549d9b4", "sighting_of_ref": "indicator--07f02c48-be2b-4849-82d8-a0d33b5cbb49", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bb22bf-9bed-4b48-9e7f-faa925f52b4d", "sighting_of_ref": "indicator--72cb921c-3961-4b48-a1b1-f145885e7dd6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b765e32-6dfa-4df5-959c-a3a958ba1aa2", "sighting_of_ref": "indicator--72cb921c-3961-4b48-a1b1-f145885e7dd6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f801025-d988-4de6-b2ae-edc450d81d89", "sighting_of_ref": "indicator--72cb921c-3961-4b48-a1b1-f145885e7dd6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e304d1b-8787-4554-ba78-eb669e0c6477", "sighting_of_ref": "indicator--6f87e563-1f82-458d-929c-c1031c0e1600", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0064c3df-3764-4163-940f-fe0c77d712f0", "sighting_of_ref": "indicator--6f87e563-1f82-458d-929c-c1031c0e1600", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7da32a-0f06-4b9f-8967-ee4af2223834", "sighting_of_ref": "indicator--6f87e563-1f82-458d-929c-c1031c0e1600", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a13318a-b377-4ac9-ae3c-6efd9b860e46", "sighting_of_ref": "indicator--60d4c5d0-5d49-412c-acd3-1217a3538c47", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac04c7ca-8dba-45af-b510-8b2bffd7b98c", "sighting_of_ref": "indicator--60d4c5d0-5d49-412c-acd3-1217a3538c47", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a38cc4-de15-45f6-a3c9-4d4c2a673ffe", "sighting_of_ref": "indicator--bacc3aa2-9215-40c1-9dee-37c239ce20ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63481cb8-4806-4ec7-aed1-6232fb470502", "sighting_of_ref": "indicator--96111a3a-c729-4a41-ab2e-692ab78bd2dc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d037cbc7-6535-4037-8ee7-1ef9ed2b73f2", "sighting_of_ref": "indicator--6cf5f336-14a2-493a-8544-23a5ce5d5d0c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166c64c3-e5e8-4273-b38d-654fd36a19ae", "sighting_of_ref": "indicator--463936ea-35a6-41b9-a1a5-84d9bc9676fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85c573f-3632-4f92-9632-fb3c8dd8c329", "sighting_of_ref": "indicator--90ae8bb8-0835-494a-8393-9eda0e05e2a6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9032c309-16f2-48ed-87b8-d02f393f589f", "sighting_of_ref": "indicator--503ce8be-c352-4248-a453-4d7e15e8d4f3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e1063a-bb7e-4ffb-90c2-360b42ca3e23", "sighting_of_ref": "indicator--d30bcbf6-5c6f-4864-b7a5-0653d550ffc5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9cc9fea-267c-4db7-ac99-e822c93ac9b3", "sighting_of_ref": "indicator--d30bcbf6-5c6f-4864-b7a5-0653d550ffc5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59e3e33-286a-442e-aaf8-f1f9c8732959", "sighting_of_ref": "indicator--d30bcbf6-5c6f-4864-b7a5-0653d550ffc5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aef214f-0747-477f-a340-76bc675d4f83", "sighting_of_ref": "indicator--06acddf9-ba97-4a4c-b9bd-8f09ac39883b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c4c0ed-6eb4-48fa-89ef-bb522bd5d541", "sighting_of_ref": "indicator--8b72b904-300f-4ab2-8620-5daa041210b5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41a2d1f-ccb9-46b5-8985-0eca5a41cade", "sighting_of_ref": "indicator--86c039c8-2ac4-4780-a344-d144f58da047", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6e7e79-f143-4bd3-9296-080a424d5556", "sighting_of_ref": "indicator--b03e0df1-d025-4ee9-9414-eb6339fe067b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aca5bd2-5f0e-4751-9b24-45475805b7e2", "sighting_of_ref": "indicator--b03e0df1-d025-4ee9-9414-eb6339fe067b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ec2e58-4e00-4eca-aaff-fb055225ac73", "sighting_of_ref": "indicator--7355d3ed-ba44-4239-a1bc-4693ab3b55f8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f53bb23-4465-4bb0-b5b8-58abbadf4399", "sighting_of_ref": "indicator--012b862a-b87e-4936-9d2e-bfd6f3c15091", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329f75c1-fafa-478c-8292-81124181ac6c", "sighting_of_ref": "indicator--097c7844-b6fe-4409-bab3-4eeedd6ddaf8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cd0f4d-8ec6-411b-a96a-fff10e812b81", "sighting_of_ref": "indicator--a8c04c95-98c9-4ecf-95e0-28e47e18b0ab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0301249f-95c3-408c-9647-fe92bfb5c8cb", "sighting_of_ref": "indicator--a3eecd3e-7735-489e-901f-598d4d959084", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64eda03-20b2-4295-8ec2-b2a377c4861b", "sighting_of_ref": "indicator--5c162bf1-2cc1-454e-b783-3de681e20265", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb6d308-dc51-4387-a56b-95e42cbb8725", "sighting_of_ref": "indicator--243184ff-a651-44fe-bd4d-0ae297c9f49f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b5deaf-98a4-4b2e-a888-31831eb8573b", "sighting_of_ref": "indicator--5f15ad90-a391-4eff-a1f5-b88029275b51", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141b6b27-3596-46e9-9a24-2aef1cff62f4", "sighting_of_ref": "indicator--09494e43-8a2a-4400-9d54-622efddc715a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282b239e-c92d-4d4c-99ec-d6ead1996ee5", "sighting_of_ref": "indicator--9fb22bf6-e446-4960-a642-570b7ff0dc8a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c24fcdd-3876-44c1-bd6c-f0829058d5f9", "sighting_of_ref": "indicator--723c59bb-ea31-4b8e-890d-8ba7cc95ff8c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84739db5-4a75-4775-8f0d-1ab4a09d4216", "sighting_of_ref": "indicator--723c59bb-ea31-4b8e-890d-8ba7cc95ff8c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd93b01-e771-4fc8-ada5-a8ea7427e8f1", "sighting_of_ref": "indicator--723c59bb-ea31-4b8e-890d-8ba7cc95ff8c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881b5225-fcda-4b3a-b2aa-cfb948da6867", "sighting_of_ref": "indicator--351edeeb-fcad-49b5-be7c-88417fcd8427", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29793b1-9310-44e1-976f-ea7925f7a9ba", "sighting_of_ref": "indicator--68976601-83f7-4749-9c57-78b34dd00a9a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193a87dc-7f7d-4f8d-86ef-cc7b55b29f51", "sighting_of_ref": "indicator--7413e9cd-6101-44c4-9571-945acd36a989", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fed2060-28fd-44aa-b9e4-6d042c55c3d6", "sighting_of_ref": "indicator--822eaf04-4d7d-403d-b838-fbba6547557d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fd3469-b544-4757-8dcc-3e1d0033a519", "sighting_of_ref": "indicator--6164dcff-157e-4658-95ab-7df7722f68c7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b33527-8fd1-4212-afff-7de86f4233f6", "sighting_of_ref": "indicator--c4636304-bd8b-4a49-a663-47b1e9246d48", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e999ce-b471-48ac-b159-5911a3368012", "sighting_of_ref": "indicator--c4636304-bd8b-4a49-a663-47b1e9246d48", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c0e386-e4ec-48ca-b7e2-d4bfee72826f", "sighting_of_ref": "indicator--a4bbd42f-50d0-4f0f-bfde-a2a9dc708ca5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e6fc8a-5cac-4ab4-b67e-52ccbc8c1d59", "sighting_of_ref": "indicator--a4bbd42f-50d0-4f0f-bfde-a2a9dc708ca5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c69b52-21dd-40f2-92cf-6722d91709cb", "sighting_of_ref": "indicator--0106ab40-87d8-4e02-bb45-8d79232cbc1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1646f98-efa6-4712-bc39-9e746fd651e5", "sighting_of_ref": "indicator--1078d346-fbf4-4241-89ed-22244647cb2c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf756a2-d2db-4247-ae82-a2031e410b72", "sighting_of_ref": "indicator--1078d346-fbf4-4241-89ed-22244647cb2c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1820f7-3b1d-45a8-b018-a1e7678af9f8", "sighting_of_ref": "indicator--1078d346-fbf4-4241-89ed-22244647cb2c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7df089-3f03-4530-a8ca-d548d0221d0d", "sighting_of_ref": "indicator--1078d346-fbf4-4241-89ed-22244647cb2c", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4eb1e80-2b59-4836-b2c1-a2d27bdb8b3a", "sighting_of_ref": "indicator--a671dcd0-c3a1-41b0-8ad2-b724ef74a6df", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ea1252-00d3-4696-bcb8-149f37348680", "sighting_of_ref": "indicator--a671dcd0-c3a1-41b0-8ad2-b724ef74a6df", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe214d3-4146-4f27-9856-27510aa4f2c5", "sighting_of_ref": "indicator--a671dcd0-c3a1-41b0-8ad2-b724ef74a6df", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164b5c20-1d4e-4080-9761-6bcb01c3e6bd", "sighting_of_ref": "indicator--a671dcd0-c3a1-41b0-8ad2-b724ef74a6df", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e30aabe-164e-4d8e-a245-bd2959c60783", "sighting_of_ref": "indicator--ec21a2c4-40e1-4122-a2a4-d3d8702cfebc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687746d7-99b8-47d3-9a15-a6af33cabd62", "sighting_of_ref": "indicator--ec21a2c4-40e1-4122-a2a4-d3d8702cfebc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55c89d2-b544-4d74-8dc1-54063dc27e88", "sighting_of_ref": "indicator--efa7b163-043b-40c2-aeaf-f75fdefb1d15", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efdc308-7662-4319-94cb-4755f21bf716", "sighting_of_ref": "indicator--d677d9a5-fde8-470a-9ab7-2a2d494c131d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b081e3d6-223e-4766-ac24-5e3f40b0c03a", "sighting_of_ref": "indicator--7398f11a-ed4a-40d8-9b14-8fc808bb8d83", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d59a52-0ce5-4bff-94e1-d351109c7c8e", "sighting_of_ref": "indicator--0aba218c-2155-49a2-9b4f-2554ad31a642", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4617220b-85e6-484f-a0cb-790809eeb07e", "sighting_of_ref": "indicator--03ca859a-ebc5-444f-b131-7f770f14fb26", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f456b8-3bdf-4f25-b691-0359fda05ea4", "sighting_of_ref": "indicator--78408c26-71f8-4fda-8754-65d6d0a13d4e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff010cbb-3dff-4fe9-8017-edd406c85fac", "sighting_of_ref": "indicator--78408c26-71f8-4fda-8754-65d6d0a13d4e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af36fbfa-a88b-483e-8c3d-23a535d898c0", "sighting_of_ref": "indicator--78408c26-71f8-4fda-8754-65d6d0a13d4e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e96b50-036a-48ad-bc6e-37daa0cf61fa", "sighting_of_ref": "indicator--b8aaf7ff-f7d3-44cd-b39a-708476daf83b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74df549-0711-4974-85e9-596ce4d68fb9", "sighting_of_ref": "indicator--b8aaf7ff-f7d3-44cd-b39a-708476daf83b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96e1557-18b6-4001-bca8-96b4c3214e14", "sighting_of_ref": "indicator--960fe3d5-8669-4a10-9e06-c4efcd822791", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e1a916-d909-4535-8b9e-5d2d75ba659b", "sighting_of_ref": "indicator--c5b16ba6-21cb-4bfc-ba4b-0e7cca404273", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f5d864c-e6e4-4abb-b571-d57df4cfc2fc", "sighting_of_ref": "indicator--c5b16ba6-21cb-4bfc-ba4b-0e7cca404273", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4ec35b-1dc9-46f9-a022-665764d563b2", "sighting_of_ref": "indicator--c5b16ba6-21cb-4bfc-ba4b-0e7cca404273", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7868e2-dd8a-422a-91e4-ae14fec6da22", "sighting_of_ref": "indicator--7526ec29-f81a-4553-bb06-a3ca6ed2b6ec", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f623a5-0d75-469f-9559-9452771244cb", "sighting_of_ref": "indicator--3e203a29-6238-4178-ba9a-2e18c5709e39", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253b49d8-bfce-4fcd-89e6-8037e9e8e221", "sighting_of_ref": "indicator--3e203a29-6238-4178-ba9a-2e18c5709e39", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afb36b4-da57-4f77-99d4-42580cfdaca8", "sighting_of_ref": "indicator--14168e9e-97be-4dc6-a631-4a624f104055", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f440a283-db7c-48f3-9bff-c0e3835a1c99", "sighting_of_ref": "indicator--14168e9e-97be-4dc6-a631-4a624f104055", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f3ea72-ceeb-4d8e-b16f-8169ddaf6cd6", "sighting_of_ref": "indicator--14168e9e-97be-4dc6-a631-4a624f104055", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c05c5e3-689a-485c-b9fb-fe2e81eafd36", "sighting_of_ref": "indicator--275649e2-3091-4068-bed1-07896d4a377d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68e4cb9-42b0-400a-bd0e-8751aa1ba902", "sighting_of_ref": "indicator--275649e2-3091-4068-bed1-07896d4a377d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f1f712-f475-46d9-932f-018dbfbaa0c6", "sighting_of_ref": "indicator--a877ca3b-6950-4ee3-9e52-dd29d2168ed5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1399462f-3bba-4fb8-92b0-f4fd36a3e4c0", "sighting_of_ref": "indicator--a877ca3b-6950-4ee3-9e52-dd29d2168ed5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e9b437-ee05-475f-8d10-e3da35d485c9", "sighting_of_ref": "indicator--6da7cf94-5bfc-490b-ae54-ad970092279a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b430be-4654-49f3-915c-b4cd4b880b52", "sighting_of_ref": "indicator--6da7cf94-5bfc-490b-ae54-ad970092279a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1a0a2c-3f57-4adc-99a7-571ccd1edd94", "sighting_of_ref": "indicator--35276183-150d-4a2e-af9a-3ca20a268af2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46982b8a-0bc6-4a86-b7ab-fce43dfc7a93", "sighting_of_ref": "indicator--35276183-150d-4a2e-af9a-3ca20a268af2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ee91f9-d1af-41f5-b1ac-257768670dfb", "sighting_of_ref": "indicator--35276183-150d-4a2e-af9a-3ca20a268af2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340ccd97-ad06-483b-82d9-6f83a3ce373f", "sighting_of_ref": "indicator--8dc7c359-0ff1-4e25-9f61-4cde9813791a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ec0fb2-2100-4f32-a96e-c4745c2a8630", "sighting_of_ref": "indicator--626626d7-fcfa-4736-98a9-a0ee1f61c51d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d84a65-5dd7-4a98-8b9d-abdaf77f1db0", "sighting_of_ref": "indicator--626626d7-fcfa-4736-98a9-a0ee1f61c51d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474eca31-3e72-4a95-9e39-93e30eded0a3", "sighting_of_ref": "indicator--626626d7-fcfa-4736-98a9-a0ee1f61c51d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f3115f-7c0d-4b66-a0f1-5679620cbac4", "sighting_of_ref": "indicator--e94a8b33-4e26-40fb-977d-0cbb5ff6e936", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47d62d8-d209-4722-99e3-af2b847ab159", "sighting_of_ref": "indicator--e94a8b33-4e26-40fb-977d-0cbb5ff6e936", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8100fd2b-c574-4d6e-9ee6-852d969f9479", "sighting_of_ref": "indicator--b7266617-53e6-4a12-8f9f-2bdcc9ab7c21", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e366786-32fd-44d5-9d4e-aed5388f04f7", "sighting_of_ref": "indicator--b7266617-53e6-4a12-8f9f-2bdcc9ab7c21", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5e2b4a-921a-4018-8e45-1d774c28d9db", "sighting_of_ref": "indicator--30b464ba-1ad8-468f-b2a5-f50374628e0d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b5e1ce-2cb0-4d78-8d0c-b600c1dcfdb6", "sighting_of_ref": "indicator--30b464ba-1ad8-468f-b2a5-f50374628e0d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf02bea3-e9fd-4042-b67d-0f4a69de40f9", "sighting_of_ref": "indicator--30b464ba-1ad8-468f-b2a5-f50374628e0d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2f5974-bc46-4b53-9fb3-6114d6910ba3", "sighting_of_ref": "indicator--a1041455-59cc-47d9-80e0-aa278c200bc1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e242ac59-7b86-4c94-a693-dff3c66a2591", "sighting_of_ref": "indicator--a1041455-59cc-47d9-80e0-aa278c200bc1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e71f8a-4462-427b-a759-9a0093658da0", "sighting_of_ref": "indicator--d108598b-0ebc-4952-b0ae-934f76377941", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13055047-5ab3-4f2d-81f0-22457643235c", "sighting_of_ref": "indicator--d108598b-0ebc-4952-b0ae-934f76377941", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1cc0f0e-5e3c-492e-811c-42bd195b4b47", "sighting_of_ref": "indicator--d108598b-0ebc-4952-b0ae-934f76377941", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc276efe-9ad7-4f42-a5df-69eca2d70722", "sighting_of_ref": "indicator--41f9adaf-abea-4465-8f5f-a272fe074656", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9695f3-2beb-440f-81af-d837dba96f3a", "sighting_of_ref": "indicator--41f9adaf-abea-4465-8f5f-a272fe074656", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e9a61f-3613-44ab-a791-6d9384a11cdd", "sighting_of_ref": "indicator--bc13ff62-47e1-4219-963a-19d69ebffea1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6d35c0-2fd9-42bb-83a3-58836b9dc628", "sighting_of_ref": "indicator--bc13ff62-47e1-4219-963a-19d69ebffea1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e63c9c-540e-4329-a104-496631d3614e", "sighting_of_ref": "indicator--bc13ff62-47e1-4219-963a-19d69ebffea1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e9f17e-c822-4bb2-9298-c025853eb709", "sighting_of_ref": "indicator--ac221b88-59a1-4ad5-8b08-bf8bf0195876", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d01a50-c170-4c42-a653-23ac2e4e62ad", "sighting_of_ref": "indicator--ac221b88-59a1-4ad5-8b08-bf8bf0195876", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd68b1d6-3715-4cad-91bb-d11acd7673f3", "sighting_of_ref": "indicator--ac221b88-59a1-4ad5-8b08-bf8bf0195876", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d520a0b-3c5e-4475-a05f-482b35289e2f", "sighting_of_ref": "indicator--74d793ad-ffcc-49ac-a075-74eadcc1dc02", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caed7faf-0b67-461e-b7f0-7319cffb045e", "sighting_of_ref": "indicator--74d793ad-ffcc-49ac-a075-74eadcc1dc02", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408d47eb-3f8f-4369-bad2-52beef894a6e", "sighting_of_ref": "indicator--4b66fa36-eb13-4028-8c9f-4e97746f2253", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e24140c-db4a-4753-8ced-53adcc595491", "sighting_of_ref": "indicator--8860fba0-8703-4789-8032-4af8f29fcc6e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4159b436-eeba-4d91-bb9f-1663cb2eaaae", "sighting_of_ref": "indicator--e46e3c03-f7e1-4ab9-9ab2-78a08e3c3f86", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b1c3ec-caa9-42fb-a702-0defb47baf85", "sighting_of_ref": "indicator--8ce4c947-b232-4098-a71c-73f8f3bd8f44", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1efd16-5c76-4434-83f6-6fcd4ff4402b", "sighting_of_ref": "indicator--69c04fcb-99d4-48bb-af90-baac310e9604", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef06781-e3da-4890-b195-8e63e589ba29", "sighting_of_ref": "indicator--dabf36b8-1eae-4f57-aba2-a0e7a566ee72", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b23b50c-c1da-458c-a04b-347730152f2f", "sighting_of_ref": "indicator--61374c85-42e4-4454-aded-5a7674587105", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee0fca2-45f3-4981-8768-4ba4489d446c", "sighting_of_ref": "indicator--61374c85-42e4-4454-aded-5a7674587105", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4140f6f0-d45c-4ef6-845c-b7020547266c", "sighting_of_ref": "indicator--b9418d3a-2376-4d87-b707-bae89d886e74", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d43b44-2da6-464d-9aed-58c206d6a89d", "sighting_of_ref": "indicator--046b9e6f-c806-40c6-9848-768bdee139ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee13777b-81d8-487a-8c1d-bd3bb754634e", "sighting_of_ref": "indicator--b8f7180a-7e4e-4816-833a-a7999f9c7147", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ff202c-9052-4790-929d-40c36b653245", "sighting_of_ref": "indicator--efc3da04-124d-474c-ad00-a985fab7c846", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd06f41-6572-4756-9a3f-3add07c006d3", "sighting_of_ref": "indicator--15363d3a-2cf6-4230-85d3-d188e62c9666", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac0a48a-e6b3-4dd9-a863-28aac02c11a2", "sighting_of_ref": "indicator--9f3edfd3-ebf8-446b-a488-74addab7bb6e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2087c68-bce3-4f3c-80c5-8c6099b55eb0", "sighting_of_ref": "indicator--9ad9de06-cb62-43a8-9b12-1994cfa9691d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148f7ded-8161-4848-a4dc-7bb6e94b5044", "sighting_of_ref": "indicator--cc904cf0-6f9a-4fbe-a865-25c8747bffd4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262c5206-b58a-4c25-b854-6bc6e01ec4c2", "sighting_of_ref": "indicator--feb9c002-e415-4a4a-ac55-dac2e86b6ec8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb26c9b9-efd6-4704-b45e-2a03b5107812", "sighting_of_ref": "indicator--424794d7-6867-4f08-9319-1be0a852478a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058f1026-2341-494f-b2fb-ee3ade00fcac", "sighting_of_ref": "indicator--af53a0b4-a911-4a67-95f2-27291c5044f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9b27f2-6771-49f9-9ce5-37b2603bbb37", "sighting_of_ref": "indicator--89b4055e-b157-4d1b-9dc3-05a0db9a534c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1c7a21-4406-4f69-980b-46bf9b0b697d", "sighting_of_ref": "indicator--8189fb77-8384-4dec-b76e-b8d3775f995e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2579c8f5-77ba-4ece-b784-d07a8c577c56", "sighting_of_ref": "indicator--f465f43f-5442-49de-a4e5-f8a0d16605ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bef07fc-e9c6-4cbc-a939-ae59435af17f", "sighting_of_ref": "indicator--29684821-b315-45aa-a5bf-7b7504e20307", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978d6922-dd7a-4ae3-a282-1abbe7c6150a", "sighting_of_ref": "indicator--4e043d80-0077-42e3-879f-b97c946395d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eac021a-d895-4a4c-89ce-29dcda4c103f", "sighting_of_ref": "indicator--931e7c1c-cf4a-4c79-a1f2-0ddbfa538684", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069f0cf2-23d7-4e04-a391-12822b5965e0", "sighting_of_ref": "indicator--b5f9043f-31a4-4f11-93cc-8942d5b347f0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c88f9a-c303-4ec6-a9f1-40eb61b8780b", "sighting_of_ref": "indicator--e7bd3311-5103-41d5-9c61-96cb122b9538", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bda8bdc-d414-476a-b8c3-ca23d8d467be", "sighting_of_ref": "indicator--8871a59b-7885-4820-a960-3f7b1bee3e33", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71789dc-f324-45b0-b56b-6516552bebdc", "sighting_of_ref": "indicator--da398643-e770-499b-ab6e-bda3b7f66364", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de4d5a9-1325-4853-a025-25c76a8c9d04", "sighting_of_ref": "indicator--91bdb6f8-5b41-40eb-acc9-62d07056e981", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67702f39-9632-4b4a-a9d3-1927d2aa9afb", "sighting_of_ref": "indicator--310d11c9-aaa5-48d6-bed0-8f8838da3daa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df2c480-638e-40e4-a24c-02ce001f828e", "sighting_of_ref": "indicator--476dc535-fcfc-4d0a-a69b-12f329a75b4a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc91a4b-2ed7-45db-81ed-46b288176a61", "sighting_of_ref": "indicator--43f79ae2-90da-447f-b8c0-118ec65cb35a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09fdede-79c3-4b50-bd9d-d9a0e4f5c39f", "sighting_of_ref": "indicator--8bc55cdd-eef6-4f49-a684-11d38e25f0c2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c278a7eb-5451-47ea-b73f-0dc651d9b836", "sighting_of_ref": "indicator--fb93e60c-c9d5-43ed-99ee-68d01e81508a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011104e7-e771-4469-a0b1-76f77244b670", "sighting_of_ref": "indicator--3f3b1a17-e24e-4a36-8185-f692c218943b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb5b359-2cd0-40a6-8772-d71c14b5724b", "sighting_of_ref": "indicator--0d0c3f31-f65f-4f24-872f-3ecfcf0767ea", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6694aff-a340-4eb8-820e-b220d49a5b62", "sighting_of_ref": "indicator--4ca6e21e-193e-4788-85bd-2d636e2bf6d3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd0c604-d90b-47d9-8c43-5e5b6eb3a819", "sighting_of_ref": "indicator--00298f4c-adc1-48ab-9d25-ce85dd02284a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb72c8dc-67fb-404e-8761-b71c9406b9ef", "sighting_of_ref": "indicator--8bcfce1d-ba51-47cc-8d78-03ac0b263d49", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e8c861-5f62-4045-b9b0-e08abfb23803", "sighting_of_ref": "indicator--e09f5e8c-70a7-43c1-8282-888a1ade4efc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afba9e18-21f6-4133-aeb5-1f2359cad3a9", "sighting_of_ref": "indicator--cf24fb52-e39a-4c19-a1d8-12d0d6368b19", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22059656-190b-4d59-b098-e252d724a89c", "sighting_of_ref": "indicator--cf24fb52-e39a-4c19-a1d8-12d0d6368b19", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12dcc71b-a61d-4106-b794-78b588fe2eaf", "sighting_of_ref": "indicator--cf24fb52-e39a-4c19-a1d8-12d0d6368b19", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45e4025-d6c3-4fd2-aa5c-b8eb24e657da", "sighting_of_ref": "indicator--a498ecbb-2114-4e84-bb23-604f1ae814e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54192c90-9f76-4054-86b8-c86958ebb2cb", "sighting_of_ref": "indicator--0b6d604a-23c4-41c1-b133-56b635f2f712", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b466313-33fa-437b-80b2-8bb0f089d925", "sighting_of_ref": "indicator--9b8a3706-a7f8-49b6-8cde-65b089ae2e28", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82ea275-5647-4ca4-a3b4-282fe972b86e", "sighting_of_ref": "indicator--9b8a3706-a7f8-49b6-8cde-65b089ae2e28", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f91fae-dc84-44ca-b3ae-41305df09f7f", "sighting_of_ref": "indicator--ecace8a0-c4ea-4836-9e15-6476d9e3272a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcdbbe17-dbcf-445b-9a24-85fa7f339387", "sighting_of_ref": "indicator--ecace8a0-c4ea-4836-9e15-6476d9e3272a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36049d27-bf60-40f3-bb86-9e3f41aadaf2", "sighting_of_ref": "indicator--3ebad0f1-a3f8-4070-b991-5318db409aeb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6551198-60c3-49e6-be0d-1ffca3f42f69", "sighting_of_ref": "indicator--3ebad0f1-a3f8-4070-b991-5318db409aeb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88cd380c-fcc8-4bb7-a11d-967216d10892", "sighting_of_ref": "indicator--3ebad0f1-a3f8-4070-b991-5318db409aeb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc721567-c944-449a-ac47-93f552dcf9a0", "sighting_of_ref": "indicator--610f301a-38b3-4e42-834f-05fc4b855451", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6b9b4c-a3f5-4abb-838b-e7a56f266d63", "sighting_of_ref": "indicator--610f301a-38b3-4e42-834f-05fc4b855451", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6399c52d-1895-417c-ba8c-43d0f520816d", "sighting_of_ref": "indicator--610f301a-38b3-4e42-834f-05fc4b855451", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472ad786-35ef-4991-86d0-33d5eb4e6a70", "sighting_of_ref": "indicator--c53ab321-469c-4dc3-88be-ca04678eb9ff", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1103a5a-a61a-422a-9029-cdc9724f9573", "sighting_of_ref": "indicator--2bf1051e-d34b-4338-a2c3-938cee19ceb2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b547744-2af1-40ba-bc41-c032f504871a", "sighting_of_ref": "indicator--431f2236-8b6d-4734-afbc-953dc01d9fb4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb2fda6-a1eb-4817-9291-578ff1d18b7f", "sighting_of_ref": "indicator--3f7eea42-ca18-4663-b6c8-feeb45273dc7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7e34f0-3b23-4bc8-967f-e7c81046a950", "sighting_of_ref": "indicator--f48fb54d-32e6-45b8-abae-8b439d6b2c66", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339251f1-4d11-45a5-8c1b-522be0720f18", "sighting_of_ref": "indicator--b5d6cc38-2c1a-4296-b8dc-8f1f14d17825", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb933a4-93d4-44a2-898b-4f794e3e7bb4", "sighting_of_ref": "indicator--5f3e9d32-3ac7-45d4-8e21-1434cf5f1951", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261bafc5-50ae-4886-be63-91a4d746064b", "sighting_of_ref": "indicator--f2b24976-f3a7-44d6-be37-755d18e08f67", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9521e786-6c14-4a15-bc05-bc05a1100306", "sighting_of_ref": "indicator--5f544c04-d5d5-4b60-9b54-f509a98b6bd9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225ec66f-ae39-4fe5-91c4-20bbf4bdb3e5", "sighting_of_ref": "indicator--6b833c81-2eb3-451c-a076-13d290c90b80", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afef517-990b-4cd7-9300-aa25d522d19d", "sighting_of_ref": "indicator--19dbac51-9d8e-4216-bac3-ee7f8470541d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e9bf1a-984e-4cd9-9b96-c258451b9660", "sighting_of_ref": "indicator--86021518-85fc-475d-b9a3-1cf0387b30bd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80da2a9d-95f0-4ab6-bbef-6745be7cb174", "sighting_of_ref": "indicator--ce0e2fe7-7fae-43e8-945f-be594fe4af68", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fc953a-d63c-4fa8-bf25-e838ac346355", "sighting_of_ref": "indicator--519309af-53b6-4f02-8002-2914a5b0465d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d407bdee-35cf-406b-9dab-a85fbe5a7815", "sighting_of_ref": "indicator--965d7335-6337-46a2-9fbc-65842dfda742", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7f312f-bf01-4c95-90d4-cc8ed0247180", "sighting_of_ref": "indicator--bd0d787e-4cbc-4e62-b9f7-167047998103", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8038fcb6-073b-476a-8120-ac92bb4b3cf5", "sighting_of_ref": "indicator--72ad4c97-6ffc-4fab-b5ac-043090e75aa7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a392eaf-f1ba-45cf-ac92-4ea3ba2d6789", "sighting_of_ref": "indicator--848b338f-88cb-486d-a780-3877781af5b6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d99375-fbd6-4908-9f4b-8b59ec63c392", "sighting_of_ref": "indicator--41e26619-8aaa-4de9-89df-154e38a81753", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef63133-8154-4958-b023-eb96a59feed8", "sighting_of_ref": "indicator--bce95590-e63e-43c5-8923-88e257571b50", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17cb590b-54ce-4b6f-a4d5-bc9e4855888b", "sighting_of_ref": "indicator--8dc096c0-6bf1-4205-a646-5d1228cc1285", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e4e5c1-8913-4dc2-bcba-bad8fa9bfa47", "sighting_of_ref": "indicator--d5919675-fb36-4ec5-b4d4-9ed15d2ea668", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9d97a4-c627-4f67-8205-2954871175be", "sighting_of_ref": "indicator--919e470b-ea89-45a7-9197-349a7bf0e13d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77fbd93-226b-4a9b-a10e-46f1c0940469", "sighting_of_ref": "indicator--f869d03f-d2c2-44ae-b037-3610be556639", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf207cd9-67a8-4db4-a8e1-c90a0bf28065", "sighting_of_ref": "indicator--bd39b2c5-fa37-423e-865d-89488a317d35", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0d0f13-35ae-4c32-b6a5-0acb77cfea4d", "sighting_of_ref": "indicator--7cfd02b9-e911-435a-b2ee-421dfc43bd23", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94dd5c81-9de4-45c5-8204-5fdc1d1e7d8d", "sighting_of_ref": "indicator--7cfd02b9-e911-435a-b2ee-421dfc43bd23", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f89cfd0-bb44-4766-a142-3f55dd4ce9cb", "sighting_of_ref": "indicator--7cfd02b9-e911-435a-b2ee-421dfc43bd23", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120f8dfc-9760-46b0-8809-ccb6cca364da", "sighting_of_ref": "indicator--74028f06-5100-4d6e-a6cf-70a947575020", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5023eccd-eb03-4c51-8a75-e002832bd7c2", "sighting_of_ref": "indicator--74028f06-5100-4d6e-a6cf-70a947575020", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5946a029-0e99-4d65-82c9-497b8fecfdf7", "sighting_of_ref": "indicator--74028f06-5100-4d6e-a6cf-70a947575020", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f45789-b4ce-43cb-a19c-7d3bc55ff94d", "sighting_of_ref": "indicator--ad428e78-3951-4f53-b9ec-31ebdf98be92", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978b97a0-8123-41a7-be82-6dd773e05c13", "sighting_of_ref": "indicator--444eec93-011c-49c6-9ccb-e727c6faee00", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1289cf2-71e0-487a-a17e-fc98736b0085", "sighting_of_ref": "indicator--444eec93-011c-49c6-9ccb-e727c6faee00", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f914c179-c0b7-4bd1-88fb-7cbe80679501", "sighting_of_ref": "indicator--444eec93-011c-49c6-9ccb-e727c6faee00", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dcbe0c6-7a69-4fdc-a355-31cd8977a8a6", "sighting_of_ref": "indicator--1bb9c053-6686-4c74-8e6d-f7cb31cb226d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad0da0c-5868-47bd-bccd-10ec6fbb3a7b", "sighting_of_ref": "indicator--1bb9c053-6686-4c74-8e6d-f7cb31cb226d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aefdaf1-052c-4ad0-9317-2b8ba3a3a155", "sighting_of_ref": "indicator--1bb9c053-6686-4c74-8e6d-f7cb31cb226d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b579c711-d1f1-4d6d-8ac8-e35b4cbeb304", "sighting_of_ref": "indicator--39fded65-d9e3-4f89-af80-43d7e4d9c687", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae385788-1fb1-4ac2-9b69-86f0d3e5142e", "sighting_of_ref": "indicator--9933f7bf-69f8-44f5-a263-5899ec9495f4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3843e2-e119-466d-a57f-e1c927877612", "sighting_of_ref": "indicator--d670e4bf-e297-4db5-9256-c6040752f389", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bebf099-682f-45f5-ba34-f2da50f9a46f", "sighting_of_ref": "indicator--10582f9a-a8a4-4607-bded-27124a7d03a2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5976e7b6-00b3-4439-8971-998a4fef3687", "sighting_of_ref": "indicator--10582f9a-a8a4-4607-bded-27124a7d03a2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996dc591-02d4-4722-8659-8740c1f97d05", "sighting_of_ref": "indicator--0fcf6c4b-5785-49b8-bed9-6084b7454b46", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546c3bd0-20c5-4e50-8b5f-a9f82f97a2f8", "sighting_of_ref": "indicator--a0c418bf-c015-434c-b6b4-5560a51e7c57", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cc4af0-bdfe-4a93-a2f7-4a14448adaa3", "sighting_of_ref": "indicator--9527ea8f-39ee-4973-9e37-c4aa4aaa8ddf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b354cb6-8ccc-4aac-b280-03efa31ce0c4", "sighting_of_ref": "indicator--9527ea8f-39ee-4973-9e37-c4aa4aaa8ddf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d037a21a-aaaf-4b00-b793-40d06a1cfc36", "sighting_of_ref": "indicator--9527ea8f-39ee-4973-9e37-c4aa4aaa8ddf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fbdce1-0659-4c9d-bc03-7a7ad1017acb", "sighting_of_ref": "indicator--9826f40b-ca03-41ef-94cc-490936f04de5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394897de-b091-4087-84ff-162689f3b19c", "sighting_of_ref": "indicator--9826f40b-ca03-41ef-94cc-490936f04de5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4d2ba4-75c7-430e-86fb-9cff91999d66", "sighting_of_ref": "indicator--a71cb2ef-92cd-4155-9d45-b51b23dac1c5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409849a6-d17e-46ee-89ad-162c930e41cf", "sighting_of_ref": "indicator--a71cb2ef-92cd-4155-9d45-b51b23dac1c5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f076cb-0433-4db5-af20-a0cafefac6e0", "sighting_of_ref": "indicator--a71cb2ef-92cd-4155-9d45-b51b23dac1c5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e67d89-2c49-402e-8252-25c3d097c91b", "sighting_of_ref": "indicator--04cfab1a-7635-431b-83aa-ebe6c4c1e354", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47590415-9041-427c-af5f-aa5ff2c23389", "sighting_of_ref": "indicator--44f24f9a-545c-4bce-b85d-a7794b6517cd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--364660f1-175b-41d9-beac-2c9afc2a0974", "sighting_of_ref": "indicator--bcadaa99-ac5e-4966-ba1d-b3a86d892a6c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7e6c85-1391-4161-bfcb-0215ba0e3d1d", "sighting_of_ref": "indicator--60ad7104-ecf0-4d9e-be65-043499ecbfff", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f21f131-da95-4634-962c-1912485be2fd", "sighting_of_ref": "indicator--fa049944-984e-4df6-a0e6-3c9e5f852632", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c1a0d3-42ed-44e1-ad5b-8e0a499a8b0a", "sighting_of_ref": "indicator--2513d7f9-8330-4409-b2a9-b07951c3c804", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42876b65-4543-4bcb-8223-b5990b1ce21c", "sighting_of_ref": "indicator--da65d615-b30e-4308-8d46-948710c1a694", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70045af1-6f49-4f78-9eff-6755493da87a", "sighting_of_ref": "indicator--5bc2f132-a599-48bd-8b25-9624f1366db0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f2fe46-41c6-48ab-ac74-3a296cd3547d", "sighting_of_ref": "indicator--afcd052c-eaa6-49a4-a426-af5761cfbe2c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df54ae90-e339-4795-935d-51d43a0c0b6f", "sighting_of_ref": "indicator--afcd052c-eaa6-49a4-a426-af5761cfbe2c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218e77f7-a0e3-4258-b64b-0360a4837cdc", "sighting_of_ref": "indicator--afcd052c-eaa6-49a4-a426-af5761cfbe2c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6354e94d-a574-498f-b8c4-714262d98aa3", "sighting_of_ref": "indicator--888aa219-cef7-4647-99d5-f0a3dcf4aaa0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7993ce4-b576-453b-a953-b385cedb7073", "sighting_of_ref": "indicator--888aa219-cef7-4647-99d5-f0a3dcf4aaa0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28ae6d2-b65e-4100-905f-704bd4e5bc11", "sighting_of_ref": "indicator--888aa219-cef7-4647-99d5-f0a3dcf4aaa0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe26b58-0d61-4b2d-b430-afd72e29ffb9", "sighting_of_ref": "indicator--c0a87722-8118-4ee7-a18b-6db650d66404", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0acb654-1d10-45bf-9a37-b264adb591c9", "sighting_of_ref": "indicator--c0a87722-8118-4ee7-a18b-6db650d66404", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cad5a29-ae88-4df6-b972-0219d4bda02c", "sighting_of_ref": "indicator--567f36a8-462b-4145-887c-7d33919e3e1f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461e0a06-9ad0-4ad3-ad4e-06cdc6816871", "sighting_of_ref": "indicator--f729a64c-4a51-42da-875d-5410aea1decb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86835907-12ab-41f6-a281-da717cdd6177", "sighting_of_ref": "indicator--359d13bb-64ca-4beb-94c4-97c81e968416", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9471cec3-ccf7-40fe-a375-c9b151e826c5", "sighting_of_ref": "indicator--9cba9c05-a2d6-460b-a3dd-e55db98e0117", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242c5762-cbcf-45ae-b288-9f31baa4cfab", "sighting_of_ref": "indicator--16143dd6-a9c7-412e-b822-82da19ece9be", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65bba7d9-2559-491b-b8a2-57f2b31e95e9", "sighting_of_ref": "indicator--b63817b6-d1f9-41e9-9f68-60a11bca5e44", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb39e3d-d125-4b2d-a581-14fa178de4db", "sighting_of_ref": "indicator--34858672-a870-4b68-88ea-41d03291f2fb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724192ce-0f72-4a2b-baae-07376b0b2dda", "sighting_of_ref": "indicator--0f7752de-e06d-4a38-a1a6-fe7dc99e25d6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86b304e-4e04-4569-a83b-8d3b8c3ac0dd", "sighting_of_ref": "indicator--be2999fd-6865-46b9-a9a9-d7a119b8544f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19736d15-c008-4ee0-9ab8-7b7623b11485", "sighting_of_ref": "indicator--8def3e37-333d-471a-bc93-3154dd8656a2", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fb682b-4df0-4aca-bae1-f7b19da71fc7", "sighting_of_ref": "indicator--24d8166c-435d-4da5-85cd-b8caa1c76b4a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0558a5-e9e5-4c2a-9344-6ef9bf40140d", "sighting_of_ref": "indicator--24d8166c-435d-4da5-85cd-b8caa1c76b4a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c121ba-d2cd-48d3-a101-c86bbbf09a0d", "sighting_of_ref": "indicator--f5d728d4-41bc-4990-b379-6735e2ffad32", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38fe0d6-1296-4ed6-8b74-8b23d8ab4da6", "sighting_of_ref": "indicator--8e349746-ba78-494b-b382-0cda89ed26d0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2fc671-702a-41b7-8a07-e924e5b6592d", "sighting_of_ref": "indicator--d2e1135a-2760-41d7-af54-f6680df0b861", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c553d09-7beb-4ade-b1d5-13a2d820e194", "sighting_of_ref": "indicator--4b57d67c-9eb9-47a3-a8b1-e501fe951a39", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2405b3-c08b-4546-bbb4-fb9b0b841e97", "sighting_of_ref": "indicator--bceba2e1-db40-4ddd-b2f9-acbd6e081a09", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ca481b-a2ef-4b0d-b2b7-426d730ba013", "sighting_of_ref": "indicator--1dd3f8f6-35c0-4f4d-9302-a37fee434216", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5598a7-c25e-4e82-b7f6-353935e11c2e", "sighting_of_ref": "indicator--db0ac1ec-dbc8-4192-87d3-8f08a4802182", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f2839e-a6fd-4235-9806-418ef8b7b060", "sighting_of_ref": "indicator--572b9cb0-161b-4f5e-a4c0-00554e7a457c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6607c797-514f-4431-aae4-0b01c14bb670", "sighting_of_ref": "indicator--2844210e-c726-498a-8497-a1b96777bd90", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ee62d1-7bd7-4c49-bbd0-5c762ca75c21", "sighting_of_ref": "indicator--35ae63e4-3e9b-456e-a6b7-31bac66dae74", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa5587b-8fe3-41ba-bf68-f508a36859fb", "sighting_of_ref": "indicator--e3ad877c-eaca-4761-8eee-f6786dfb2319", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce48657d-e754-4ed9-8b40-f58564863f68", "sighting_of_ref": "indicator--bc3c03f2-39c2-4a4f-b0ec-2b6a9daade4c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2133787-8e51-4e91-8b56-e111dd91a1d8", "sighting_of_ref": "indicator--28d2a43a-495e-473d-8bb2-81fcd9895019", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1243e01c-c276-4cc2-8f14-7ae412fc4896", "sighting_of_ref": "indicator--6c3e4d64-1e7b-4998-acee-117d0b8f8323", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22b44f0-928d-4bf8-b93f-28ca8b064fee", "sighting_of_ref": "indicator--5b48e42f-8cca-4c7f-8b0c-aa12d2470397", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b97ace-9a98-4ad6-ae6b-4732951e1f56", "sighting_of_ref": "indicator--0ef62c44-a304-4529-9c2e-d3d8a8edbed6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ba3979-070b-4900-bd06-d16b479803b5", "sighting_of_ref": "indicator--3eef0530-1eef-41f7-80ce-8e64b8b730ab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f917f3-bc9f-4449-8e4a-18f42181c46f", "sighting_of_ref": "indicator--6118c541-a47c-4bf1-a5d8-4d7fa5f66b74", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ea8b3f-221d-4f92-be5d-b21014d15d5c", "sighting_of_ref": "indicator--469bfd6a-6b95-4072-84d9-2c2a42975297", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b03072e-5306-4c35-8de7-2ccdfb4b4761", "sighting_of_ref": "indicator--57f84919-5b83-48c1-a36e-370c6c578af4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2651914-ce40-4f3b-96d7-c0f44d2ef0fe", "sighting_of_ref": "indicator--92a84824-59af-4ec2-804a-070d269180c1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8153e8-42ab-4139-97ed-334ec30636d1", "sighting_of_ref": "indicator--b32009dc-52eb-4db2-8e84-82490ac487be", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acab0238-f384-4f70-bd78-a68bf2dc87dc", "sighting_of_ref": "indicator--4c782a0c-623e-412c-994f-e2d0c257b600", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c80ca84-ddb6-4b40-a9b5-9415eb393c02", "sighting_of_ref": "indicator--0982eaf9-1cf2-42eb-aa90-a47ea3727443", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4e7cf1-96f7-42cb-924a-8115539e4479", "sighting_of_ref": "indicator--6b1d394d-7851-41f5-ae04-bc249e70b1d1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e842226-2b0f-4a09-9677-c37094a6a26b", "sighting_of_ref": "indicator--0606c224-03a3-455c-9808-952fd3c67796", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591b5617-2242-45bd-8509-3e32ab2dee6e", "sighting_of_ref": "indicator--7cb987d5-ccff-41bb-98aa-63293bfdebdc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56286581-ca11-4481-8c2a-db23c1ed9c93", "sighting_of_ref": "indicator--be7c2f71-4202-497f-a237-86511542addd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e079ab-e96a-4b44-8ccf-6dc856c4a850", "sighting_of_ref": "indicator--5f708294-2a1b-4849-af97-3b0ea2401027", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77446927-7499-40ed-85d8-b20b4f5ae2dd", "sighting_of_ref": "indicator--85030a35-fb84-47f5-9073-f78477dc87f1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253b4211-7437-4888-90c7-6f6280b802de", "sighting_of_ref": "indicator--e6d98474-0052-4fbd-b4d9-77d78e35578b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b211b275-e0bd-4793-af7f-7cd80e48fde2", "sighting_of_ref": "indicator--f86f8ecc-e00f-4dc8-98fd-19552d606342", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ac29d9-018e-4d8c-9f20-651b89aed2d5", "sighting_of_ref": "indicator--2c9fb9de-ea4b-4241-a76d-c141cf591a51", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758a897c-596d-4ad4-80b0-dc6ced784441", "sighting_of_ref": "indicator--be070324-536e-4b93-a2c2-5d3c6aa6e598", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfc010d-9704-408c-a2d8-3e2a91bef7e7", "sighting_of_ref": "indicator--6be0d8d9-9817-4cfa-a864-02ca2c487073", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d863960-ea90-4aa0-ac08-3adbec5f1ab1", "sighting_of_ref": "indicator--5c8767f7-36b9-40a9-9491-8f924a83d43c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e3f9c5-cd61-4e95-9101-d78eff7380d0", "sighting_of_ref": "indicator--a8bc17e1-4039-4876-8991-bde0657a577a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226ffc62-917f-4ed6-9380-d2222216d77c", "sighting_of_ref": "indicator--f6ce49ab-d57b-442a-850e-64d471398d07", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e6ddaa-de64-451e-940e-1baba1c5006f", "sighting_of_ref": "indicator--f87236ba-b5d7-47c4-8eab-4c9774c7e961", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67517e59-64ad-49aa-9222-7312c3b1ae15", "sighting_of_ref": "indicator--1716ea28-1429-4983-bc44-c4db33d6ae70", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34f63fa-0043-403a-9106-2e600133faed", "sighting_of_ref": "indicator--775298cb-d013-470e-9a5c-0029a5622e6d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9e6e0f-7a8e-46d1-aedb-9d476e59b892", "sighting_of_ref": "indicator--e0efac3e-827d-4bf5-be85-9ce18a751ec4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9b31f6-fff2-491e-a730-09804069bc77", "sighting_of_ref": "indicator--f32ee0df-6ad5-4863-9cae-4a73aff9bcaa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f519ef7-46ab-4cf4-a46d-baa2ad28e054", "sighting_of_ref": "indicator--9c76fae7-f647-4a33-851c-8a982e88ee96", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32974ec-059d-49ef-963d-5d1dfacf05c8", "sighting_of_ref": "indicator--eb911958-4d1a-4d83-86c3-cb5764267a21", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d282dad-579e-426a-b57b-b6ff64edbeba", "sighting_of_ref": "indicator--18faaa3d-b295-454e-a3c7-bd4b17df344d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f156ddfd-dac8-4613-a18b-a26f96abb25a", "sighting_of_ref": "indicator--dcc2aaa1-6c2e-4bf1-b2e8-db7820eb05f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf9d7d3-750f-49b6-92da-83105f8a78d7", "sighting_of_ref": "indicator--6e599c5f-42b8-4e94-b6f5-41b64070b5aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c3935d-ed1d-4564-832d-2adc33548c02", "sighting_of_ref": "indicator--f3a80d2a-23ac-47fe-ac2b-833d3d4aa0de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef37121b-2799-4bf1-a766-d8eb32e16fa0", "sighting_of_ref": "indicator--5497f8c9-b188-4758-b545-452f7475275a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c18b80a-d61f-4e54-a00c-5243a529c58a", "sighting_of_ref": "indicator--44714506-9224-4ffa-bde0-fe7615cfe4a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35fe625-849b-4cb2-80a1-dba2b80d29be", "sighting_of_ref": "indicator--0988ece7-921a-4c9d-b4bf-286a95fa2499", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8842c773-1010-4a8a-9174-c5570f864c8d", "sighting_of_ref": "indicator--605a63bc-3f48-4642-968b-e40d0a092691", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8471475-36d7-4fd8-90a2-b60ea0245a8e", "sighting_of_ref": "indicator--399a9768-75df-4c05-a85e-b96bb1d41c48", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117dabd8-99e4-42de-b800-22ceea7b9747", "sighting_of_ref": "indicator--47626fb8-9df9-4ada-8313-fffe41de580f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8792de7e-1e8b-4748-80b2-6e9aa4a85ea2", "sighting_of_ref": "indicator--8c694cf0-35f3-4369-976f-491154ebce99", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a935bfc5-13d3-4060-84a8-3f02982500bb", "sighting_of_ref": "indicator--5a32545c-eb97-48bc-bae3-cced71e460b5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875e0e63-58f9-4802-847e-51868ae78d4b", "sighting_of_ref": "indicator--bad733fb-9438-4092-8e77-0621cd48f597", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8caebe3-5bd8-46c2-aefb-03fe84b8408a", "sighting_of_ref": "indicator--78d8ad93-6418-46ab-b7fb-65f513c17777", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c4a748-68ae-4dc3-b52e-d81a038a3d53", "sighting_of_ref": "indicator--1a38c298-368a-49d4-b48f-b641b22cbce6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83ba47f-9261-4c58-bd57-e183771ed8af", "sighting_of_ref": "indicator--91f8b4df-15db-44e8-b3ac-103d573fbf33", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b49dc57-c0f6-495b-909f-9e452614a4bd", "sighting_of_ref": "indicator--f49c73c9-52a0-4134-a026-b0dd69681ba7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327cda61-263a-4ef3-b495-576ed3570aa2", "sighting_of_ref": "indicator--1ed5e9b5-3920-4cd0-9e10-35061cb68b45", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b441912-e4ca-4bbd-b52e-9a9a56ebfd59", "sighting_of_ref": "indicator--473b4946-7cac-4a0a-8ddc-fbe0e069844e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36781d3-7216-4101-bac1-61bd8867502e", "sighting_of_ref": "indicator--852a24c1-e7f9-479f-a11a-496964f61925", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3266e49b-d471-4aa2-b6a2-eb08131aa97d", "sighting_of_ref": "indicator--dd000319-712c-465d-adee-ba47fd2e6487", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ec52a1-327a-4db3-b4e0-647d2444d005", "sighting_of_ref": "indicator--c08e051b-35aa-427d-a0e2-3f2d64e9d77c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7048df9-ff49-4e17-ad1e-759cb6f89a2a", "sighting_of_ref": "indicator--6a8357e3-0173-4622-8ddb-c5fa53507dd3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63392f8-9efd-4beb-bf15-3f2228f0e701", "sighting_of_ref": "indicator--bfb8e193-8fac-42cc-b9c6-fdd7fdfc754a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b13e901-369d-4cc8-a433-464749373f29", "sighting_of_ref": "indicator--3cbb9607-334a-43ed-98ca-e7dc468e0f42", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96edfa25-5ab0-48cd-a627-7bc58e396409", "sighting_of_ref": "indicator--7ce36277-9c96-4af2-869a-69f61a131b8f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481cbda3-3e01-4b7c-b64c-00e31e6d2687", "sighting_of_ref": "indicator--bb4ee25a-5306-46ec-941c-de683c8c4a42", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3068e1ee-f2f1-45a6-b1bc-3a42eec340ed", "sighting_of_ref": "indicator--aa801c39-f0e7-4d91-a1c5-940662e379b8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b308d38a-0cf4-44d3-9901-4f5572086088", "sighting_of_ref": "indicator--9a484155-47eb-496f-bd23-dc92c87afbfe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef03da9-4cc9-4d13-9c7c-68ad61fb8225", "sighting_of_ref": "indicator--05e3cff0-d12d-4f4a-934d-84b32208549e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d08382-d7ad-4c6d-be28-b3a7231e5c6f", "sighting_of_ref": "indicator--33bbd36c-2752-42fb-87f9-c578962a0faf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22426b6f-0eab-4a64-abf1-131ddaeb9d33", "sighting_of_ref": "indicator--d4632e99-8a17-4a91-bbab-ea48f2926c90", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7f3ddd-8131-4dc6-9d90-0bdf7d5bcc7f", "sighting_of_ref": "indicator--d4632e99-8a17-4a91-bbab-ea48f2926c90", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421c3006-837a-4156-80c7-638b899b1568", "sighting_of_ref": "indicator--82c52c03-473e-4f88-ac3d-cd51b4af1639", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fad49c6-6742-4946-97dd-4f58133083fc", "sighting_of_ref": "indicator--87f857b9-2063-4822-84db-4168d83009e9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6969457-b439-4dc2-a0d9-cffdf9e0ab09", "sighting_of_ref": "indicator--c5a59263-29e4-4267-863f-61cbeab3b250", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6819b475-6e50-45c5-b939-4797793da8fa", "sighting_of_ref": "indicator--ab0297b4-c2fb-4e6b-9dbf-42871f95eaea", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3320c7-f4bd-418f-b8b8-d07ddaac479d", "sighting_of_ref": "indicator--106a3a2f-0b78-4e43-97ed-86577ada2e2f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48dcadda-9020-4810-a2be-362a51e56de3", "sighting_of_ref": "indicator--5db9c3dc-f640-46a2-bd8a-20a9b6667416", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f371d13d-06f2-4f9c-8647-4cf64bae4a66", "sighting_of_ref": "indicator--894aee50-e40e-4d67-9154-5ffbd935315c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc11a38-ca0c-4d83-aa4a-f75c925e8b02", "sighting_of_ref": "indicator--f477240b-5498-4842-a3e8-be16e6be1350", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48bb8745-5a5b-4d9c-96dc-6c59c2a06564", "sighting_of_ref": "indicator--8bddf756-ca9d-4eb3-9ce2-b2853465fd6a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a75d5f-4837-4407-a729-db580b38ee1b", "sighting_of_ref": "indicator--8bddf756-ca9d-4eb3-9ce2-b2853465fd6a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3fa9ba-fdf6-459b-8af6-ae9271a4aa30", "sighting_of_ref": "indicator--8bddf756-ca9d-4eb3-9ce2-b2853465fd6a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a763f8-7e22-4231-8a17-45d9b69b7e8b", "sighting_of_ref": "indicator--bdacfa2f-5d56-425b-b509-d4afe27693e2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ceadf1-9cfc-4656-9c1e-d90203001718", "sighting_of_ref": "indicator--2a46dd95-2600-49b5-97a0-9de7cd763c7f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368dc812-4101-473b-9daa-1f3ca0fcb2db", "sighting_of_ref": "indicator--7a8ffdcb-64c2-4468-9562-f5dfc15b3b5a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0951d19d-e407-4fd6-b196-343adb0f36d0", "sighting_of_ref": "indicator--2b99e318-4200-4ea8-8934-531080d2f610", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c7cbeb-59cb-4548-963c-e06282b61a24", "sighting_of_ref": "indicator--0f628d7b-9a6d-4bc4-a282-ac853a4ae9f0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ee777c-141c-4c7d-99e6-8389e011f090", "sighting_of_ref": "indicator--da0443b6-dd62-4fe9-bc45-b790fbe629bb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d49e66f-d876-40cd-bb81-37d39ab8453d", "sighting_of_ref": "indicator--0bc482d0-fdc0-4f67-9931-265c2615e0c3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd8e7d1-523f-4475-9775-5187ec031a06", "sighting_of_ref": "indicator--850218d6-626e-41dc-b9cb-391fe74750e2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7e353a-a802-417b-afb0-4127d764ef28", "sighting_of_ref": "indicator--850218d6-626e-41dc-b9cb-391fe74750e2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee45a8c-1b01-453d-b477-28b2a2a3ca65", "sighting_of_ref": "indicator--9029096d-668f-48c3-a68e-5ee7797293ef", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa2d102-2d2a-4e0b-b6cd-a5a3d2d2e2c9", "sighting_of_ref": "indicator--9029096d-668f-48c3-a68e-5ee7797293ef", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480e26d0-001d-4d9a-b7c5-553b2d3a6bed", "sighting_of_ref": "indicator--56cc2ed4-58d4-4013-9c23-10e698d48590", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c595f0cb-9d34-4419-b7e4-7f97f54a2ccb", "sighting_of_ref": "indicator--e9782ff5-b792-4934-98fa-c9d01543b42c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20b7996-7d5e-44e7-9af2-c3291df9a1b4", "sighting_of_ref": "indicator--9647aa7e-4644-4376-aad6-621f0cfd0835", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb62bc3c-fd82-4237-a4d0-0cb30296c809", "sighting_of_ref": "indicator--0b467a95-3e7c-4ead-87f0-60f5f7a9182b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d95508b-e93e-4b43-8292-77e513361933", "sighting_of_ref": "indicator--0b467a95-3e7c-4ead-87f0-60f5f7a9182b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a5b0893-8d99-468c-80f7-ad28278a4a24", "sighting_of_ref": "indicator--52448e93-7b02-496c-9719-c98c13ec8b05", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4844f1d-82bb-4f0f-999e-5ea3d4dde905", "sighting_of_ref": "indicator--52448e93-7b02-496c-9719-c98c13ec8b05", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f45292f-e0c5-44a8-bc0a-9723896878f0", "sighting_of_ref": "indicator--f29a86fd-59b0-4674-994f-a6457474fb1d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ecb529-64ff-4140-9816-58773ec46732", "sighting_of_ref": "indicator--f29a86fd-59b0-4674-994f-a6457474fb1d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0d4f3e-28bd-4a69-a065-dc7fa36c4cfc", "sighting_of_ref": "indicator--1c4b64ad-3850-4eb0-b5c1-447236febb74", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d377d6f-d499-4930-957d-4a9ee565f88e", "sighting_of_ref": "indicator--84e19434-03eb-4924-8a2d-939983a6c3f6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41bd99fb-1337-4d34-9bc1-2741e71921c3", "sighting_of_ref": "indicator--84e19434-03eb-4924-8a2d-939983a6c3f6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7ea1ef-5d48-4940-ae5c-80207d72513d", "sighting_of_ref": "indicator--4ac89856-ccb8-4124-909f-b0fd31533ede", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9468fbb8-0f7b-4405-999d-b43080a14645", "sighting_of_ref": "indicator--7991b85e-8331-4770-98c9-962fb7c9c89e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9ac5e7-33df-4556-bd57-fe67e657904f", "sighting_of_ref": "indicator--7991b85e-8331-4770-98c9-962fb7c9c89e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073cb30d-8aca-41e1-8431-636adcf73749", "sighting_of_ref": "indicator--8c6a9a8d-971b-42b8-b18a-0c2b9383e21c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8443474d-8f94-45a4-b50d-a133a03fc656", "sighting_of_ref": "indicator--c497313e-bf8c-46f6-b36e-2fbe1f1800fc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a0f341-42f9-4af5-bdd5-c33cb4aae6b4", "sighting_of_ref": "indicator--05f34144-84eb-4386-a799-fa1a8bf19aea", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab21d56-d614-4230-bba7-289d3b64781b", "sighting_of_ref": "indicator--e35759a9-ab15-4434-9c7f-27e378822d9e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec92872-81c1-4ee6-bd5a-384b408c9737", "sighting_of_ref": "indicator--e35759a9-ab15-4434-9c7f-27e378822d9e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a828f33-ca37-455f-b685-a7ca0f483bf2", "sighting_of_ref": "indicator--6b69cf2b-eb60-4c2e-b953-33868b20222a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb97fa13-6edd-4f53-8110-b1348da9508f", "sighting_of_ref": "indicator--139f380c-c918-4ad7-936d-d1eeb70cec85", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb03fc9-9708-498a-a346-354be54d793e", "sighting_of_ref": "indicator--d9f003f4-9c1b-4696-b7f5-62414a52b065", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0547f57d-f0dd-405a-b254-00a89f3f6608", "sighting_of_ref": "indicator--9543bc36-95ba-4f03-8772-1a7ba0d8b607", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01adcbe7-a778-4266-9a8d-5ff685e15c8b", "sighting_of_ref": "indicator--93d61f80-5af4-44d5-b28d-b6079bc92d70", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603de2cc-d161-42ed-9782-44425c2354a4", "sighting_of_ref": "indicator--93d61f80-5af4-44d5-b28d-b6079bc92d70", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc028e9f-c3b4-4592-9fad-333bc407048d", "sighting_of_ref": "indicator--bc1736ec-cf15-4955-b71c-7fe23914f164", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74c1058-c082-4168-907b-efdba75df186", "sighting_of_ref": "indicator--e6b5be98-f915-4c9b-9618-aed65a352310", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95bf4ef6-ef1a-47d2-bb1e-a8c6a71bdd7f", "sighting_of_ref": "indicator--a746530a-a8ea-44a1-83f7-5280bd173054", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa558ed3-34b8-4e2b-b2db-0f4ab0842c8d", "sighting_of_ref": "indicator--bf9c068c-36d4-4c0b-a112-cf4e0aea2af3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc4a25c-b9fd-4589-a767-b6b9a609e8ea", "sighting_of_ref": "indicator--665a1059-21c7-49e9-8012-afb2b6fe8acc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9075176c-93d8-4d01-b75d-13a23739e469", "sighting_of_ref": "indicator--665a1059-21c7-49e9-8012-afb2b6fe8acc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd63a0a-0497-4ab7-a9cf-c43d17ac2d34", "sighting_of_ref": "indicator--313ba55b-91f4-4ad9-b88d-52bd25808f11", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa983bb8-f35b-4f25-a35d-7a5939413291", "sighting_of_ref": "indicator--8a3eb3a8-403c-4511-844a-259fc77a93f2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5760cb-fc44-4e83-8009-9af04813f2cd", "sighting_of_ref": "indicator--8a3eb3a8-403c-4511-844a-259fc77a93f2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea21a38-7d48-4038-8456-221c50b0ae1b", "sighting_of_ref": "indicator--8a3eb3a8-403c-4511-844a-259fc77a93f2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911191cf-8161-488f-9b2f-43c782276871", "sighting_of_ref": "indicator--86ab1493-a8cc-4a12-806c-f940b6daa750", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459009d4-2322-4a9d-93bd-e4eddbe4d57f", "sighting_of_ref": "indicator--18ca6064-37b5-459f-8fe1-a0b595962633", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6952c04a-52ec-492a-8523-e61fb373cc3e", "sighting_of_ref": "indicator--18ca6064-37b5-459f-8fe1-a0b595962633", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f800d6-0088-4738-93d9-0b3753966943", "sighting_of_ref": "indicator--8ac106da-5feb-455e-bb2c-e44aba9caef5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f22e9b4-8c49-4813-a186-e96505223bd4", "sighting_of_ref": "indicator--4d76b26f-2c68-4ff8-a784-5cdeb2fbd2b1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3cbe45-2e30-4c5f-a403-a787f21e949b", "sighting_of_ref": "indicator--f24b4100-b5dc-4664-872b-50ae36a05b82", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e588207-bb92-415b-97fb-311658e19ff2", "sighting_of_ref": "indicator--38aeebb9-5735-4f46-936d-3d020c462892", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324271cd-b9b6-4cd4-a883-2ed1e6e00e4d", "sighting_of_ref": "indicator--9d83e6a3-64f9-4d44-a84b-6f242fcf2b2c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4969f9-aeea-438c-af97-a82c0f1fe2d6", "sighting_of_ref": "indicator--270d6716-bcd9-42ef-9ad9-afdedfceca76", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11778bee-ac27-44c0-b86d-f3864fa19696", "sighting_of_ref": "indicator--cc8a58a8-c5e1-4709-88c9-2f451055f832", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f751cce-9361-46a0-9026-7728df0a8ce1", "sighting_of_ref": "indicator--cb5b7f9d-ec04-4169-9422-a2920ab531f9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20455c5c-9200-43c6-b8e9-e4cf7384f5c9", "sighting_of_ref": "indicator--9118d2c9-1b46-4200-bc44-3f4c47c03865", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9ecbae-767d-49a9-9279-a3edc26a841e", "sighting_of_ref": "indicator--c04824fa-e636-4b7e-ab80-980177f3d8c8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421c2eef-35d9-4f21-b36e-e5c052c505f4", "sighting_of_ref": "indicator--b14a328f-33f1-45e2-83ec-9bfac365fbb1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d23dc7-e1f9-4c31-b822-72804183b4e5", "sighting_of_ref": "indicator--e4653617-a58b-40e6-9054-e1562f2faa72", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2b4393-51bf-4e05-9fa8-8d0fcc614b42", "sighting_of_ref": "indicator--c546dce3-40b7-4849-bb33-3025784b23c1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f635c4ca-f7fe-4e85-8cf3-bf04071462b4", "sighting_of_ref": "indicator--c546dce3-40b7-4849-bb33-3025784b23c1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d460d4-0c50-43d7-b61a-b97b0ca618eb", "sighting_of_ref": "indicator--ea29f9f3-93e9-434b-a601-024e2433633c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28224caa-01b4-4081-b2b7-36daab1a569a", "sighting_of_ref": "indicator--1d657fc9-4e4e-485e-9676-e295d6ccdd6f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b005a4-4caa-40b5-b8c2-f8a610ac1505", "sighting_of_ref": "indicator--1d657fc9-4e4e-485e-9676-e295d6ccdd6f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54797dcf-7304-4b79-b283-157f990f7b8d", "sighting_of_ref": "indicator--b9d543a6-1b39-487c-b858-838782c280ae", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e6c288-7bb0-4def-a296-45d23674e051", "sighting_of_ref": "indicator--b9d543a6-1b39-487c-b858-838782c280ae", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b3c3bc-6b60-416e-afa9-bf7d2251e483", "sighting_of_ref": "indicator--2b3dc9e7-0376-4fae-a8e8-3872f6348379", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f82ab6-e58b-42f1-a194-fe4a5cc8ed68", "sighting_of_ref": "indicator--d4ca249d-716f-4ad2-8b1a-189410a7c877", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6c7702-2d28-446c-b86e-8409af3beb2a", "sighting_of_ref": "indicator--d4ca249d-716f-4ad2-8b1a-189410a7c877", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fab04f5-90e5-4bf1-9e0a-058e5e79f809", "sighting_of_ref": "indicator--d4ca249d-716f-4ad2-8b1a-189410a7c877", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bfe7aca-bf7b-4295-9b1f-abf6fb3f78c6", "sighting_of_ref": "indicator--8c420f56-ca6c-4657-b4dc-6ce6d78d30a8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c9f977-21db-49c1-b912-69a1bf930462", "sighting_of_ref": "indicator--8c420f56-ca6c-4657-b4dc-6ce6d78d30a8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1ad56e-0d6f-4666-8d67-85dd6cebae73", "sighting_of_ref": "indicator--8c420f56-ca6c-4657-b4dc-6ce6d78d30a8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67616cec-bf93-45b4-a1a5-78df741b49ab", "sighting_of_ref": "indicator--d473de39-a16e-47b4-8875-a03d6e722e0f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2473b48b-3052-4f7d-9baf-1b71b74963cd", "sighting_of_ref": "indicator--d473de39-a16e-47b4-8875-a03d6e722e0f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a83df8-1892-406c-b392-f9f9f9583400", "sighting_of_ref": "indicator--d473de39-a16e-47b4-8875-a03d6e722e0f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4671dbc0-a70f-4ad3-bacb-2ce2d5e8d207", "sighting_of_ref": "indicator--222c2fa9-551e-4fc8-9ac2-e7d6cb4bd833", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29b8a8b-5c9f-47c4-93e3-f21cfd27c20e", "sighting_of_ref": "indicator--222c2fa9-551e-4fc8-9ac2-e7d6cb4bd833", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2bb2215-24aa-4ed1-ad1b-bbd175090969", "sighting_of_ref": "indicator--3362351e-9b64-4c05-8274-a6ae2835d26d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bef32b9-1c8e-4485-8da9-6fa68112f534", "sighting_of_ref": "indicator--028db128-2bf7-4230-af29-f25ff4d6a9da", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bee54a-f92e-4198-ae6c-9d17b62f1746", "sighting_of_ref": "indicator--9fc8c4d4-d9ab-44a0-aaf0-f303622a5ef2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1a1481-82c9-42aa-8754-8d1d3a5d58fc", "sighting_of_ref": "indicator--2cd48615-09eb-4f50-9882-7b1d53edda2b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe537e43-2a66-4496-8b4c-cd6a023e92ad", "sighting_of_ref": "indicator--2cd48615-09eb-4f50-9882-7b1d53edda2b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e03414-377b-472b-bbf3-ef074c62ebb5", "sighting_of_ref": "indicator--f3981989-fdd7-4315-a0b5-b1ce7941816c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733da8d7-3e7f-4474-a405-02f94c829884", "sighting_of_ref": "indicator--60c7ebf2-7105-4eb7-8308-49a6be47f2f3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebe2176-e261-4e09-8574-dd97ba44b9e7", "sighting_of_ref": "indicator--60c7ebf2-7105-4eb7-8308-49a6be47f2f3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc3eb37-00b9-45cc-bf5c-5eb1450c1b23", "sighting_of_ref": "indicator--d46726de-f31c-475f-bf25-5d8f206b886e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9964b05-3f5b-4654-b2da-074f018946df", "sighting_of_ref": "indicator--4676b003-9a6c-46c8-96c6-73ec7bcdb8b4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349e0279-da49-4b3a-9dc3-cc0461d0ada8", "sighting_of_ref": "indicator--4676b003-9a6c-46c8-96c6-73ec7bcdb8b4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c6ad83-1e34-43ee-9c50-c3d68f1c2284", "sighting_of_ref": "indicator--ad7b82d8-5765-42aa-a50f-ec1a7352f587", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3eaee0a-8c41-4655-87fe-92aacc597545", "sighting_of_ref": "indicator--6fdab5db-d880-439d-bad6-0e103803e15e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dda615b-e5d1-4f9d-ab05-4ec0f8079b50", "sighting_of_ref": "indicator--b0da6d0d-90b3-4965-83e6-b2c4ba6cbf77", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563c1a61-50bf-4a0b-9434-cbcd8b6f9b73", "sighting_of_ref": "indicator--1274ecbc-57ba-4f48-bb28-23657c7eac2b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c81aa3d-b21e-4b3c-aeeb-65da7f8fdeb4", "sighting_of_ref": "indicator--1274ecbc-57ba-4f48-bb28-23657c7eac2b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7510a6a-72bd-4283-85e3-339e28c25fbd", "sighting_of_ref": "indicator--d8a59601-99fc-4b7d-a696-8085df3f32aa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d44b9f-68a1-4bd7-a8fa-dc563877bf91", "sighting_of_ref": "indicator--d8a59601-99fc-4b7d-a696-8085df3f32aa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e120c87-b117-433d-80d8-fbaf1a91cacd", "sighting_of_ref": "indicator--d8a59601-99fc-4b7d-a696-8085df3f32aa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f4a029-6610-498a-bab6-15f9acd74ecc", "sighting_of_ref": "indicator--39797c0f-6194-4cdb-bef7-5d2649129b6d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1db2f8-582f-404c-8dbc-b34d7825b0f1", "sighting_of_ref": "indicator--f0ec75ca-d189-440a-acb4-aab10b636ac6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ee11bb-e3a2-46e8-b4ca-a85efdd82c14", "sighting_of_ref": "indicator--f0ec75ca-d189-440a-acb4-aab10b636ac6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51b6149-16c1-4b24-b97e-1074e0f2a7d9", "sighting_of_ref": "indicator--f0ec75ca-d189-440a-acb4-aab10b636ac6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936ae892-a392-4f65-8719-9b5fc3c076ac", "sighting_of_ref": "indicator--4dbe53f4-8b44-4cc7-a5e5-ff31d579d0a1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac621c5-7443-4861-b65c-871a7b9b8948", "sighting_of_ref": "indicator--4dbe53f4-8b44-4cc7-a5e5-ff31d579d0a1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32ea308-1258-40da-b848-3c2b2837d950", "sighting_of_ref": "indicator--bf34848f-49d4-4247-b500-21e3e284e16f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfaa369a-cb98-4e91-aafe-c634788630a9", "sighting_of_ref": "indicator--1006f75d-88e2-42e9-ae01-e7ee3d8b2fab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1951c414-2595-4ecf-a2e5-b83eb786478a", "sighting_of_ref": "indicator--1006f75d-88e2-42e9-ae01-e7ee3d8b2fab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0a3a09-661d-42bd-892b-77c701cdd3c8", "sighting_of_ref": "indicator--1006f75d-88e2-42e9-ae01-e7ee3d8b2fab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199cf964-26a5-40c0-b473-a7bf5ba7f27c", "sighting_of_ref": "indicator--f4b67518-9761-4f73-bf3a-2cb9d4b10868", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47eb3a0b-d4d2-4350-a25f-b07bdeb7da93", "sighting_of_ref": "indicator--f4b67518-9761-4f73-bf3a-2cb9d4b10868", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23caf62-f5fa-4da2-ae30-c485a58a5215", "sighting_of_ref": "indicator--f4b67518-9761-4f73-bf3a-2cb9d4b10868", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe23352-60ec-4290-8fb9-4e4f19da9ecf", "sighting_of_ref": "indicator--34852680-6766-4976-899f-a7cc3971b58a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec76d84-887d-45f8-90fb-00f7922f626b", "sighting_of_ref": "indicator--34852680-6766-4976-899f-a7cc3971b58a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83813bdf-7092-4391-8d27-fe403772ba84", "sighting_of_ref": "indicator--34852680-6766-4976-899f-a7cc3971b58a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee16c14e-238e-4204-83d4-68cca4e2cbba", "sighting_of_ref": "indicator--07ee2a27-63ec-47e0-88d9-14cf3e308460", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb36764-6102-4432-a5e4-aab711b178e9", "sighting_of_ref": "indicator--07ee2a27-63ec-47e0-88d9-14cf3e308460", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2b20d1-41f5-4cb0-934a-730e43fb2171", "sighting_of_ref": "indicator--07ee2a27-63ec-47e0-88d9-14cf3e308460", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6039f8df-026e-4fd6-a230-17deef8f4d1c", "sighting_of_ref": "indicator--5cc8b4c9-3d69-4ffc-a1bb-43a9ff97cf71", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90bae82-5801-4118-812a-2b0c111f8d4e", "sighting_of_ref": "indicator--5cc8b4c9-3d69-4ffc-a1bb-43a9ff97cf71", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9301671a-3e9d-4321-8a1e-317c224d3657", "sighting_of_ref": "indicator--5cc8b4c9-3d69-4ffc-a1bb-43a9ff97cf71", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d257de03-ed2e-45e8-9dda-ab7706989ae8", "sighting_of_ref": "indicator--488a1b02-4005-4820-8030-7139c12bcb48", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b330dc62-502f-4d7e-854c-e5cd99f01ccc", "sighting_of_ref": "indicator--e26c355b-a0d1-490b-b0ee-3bfd622eb296", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cbbddc-6ce2-40e7-a1d6-2f2417104b4a", "sighting_of_ref": "indicator--00698efa-e7d5-4ea3-b37f-fdd75c40176c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5f8c5c-852d-46a2-ac56-fb62761e4012", "sighting_of_ref": "indicator--2e41e098-5656-4bae-97b4-23b1bfcbd5e3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350eb466-c56d-4166-9a98-a8868ac18102", "sighting_of_ref": "indicator--2e41e098-5656-4bae-97b4-23b1bfcbd5e3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e672c4-4561-4edb-89c9-778ba63b2cdb", "sighting_of_ref": "indicator--3e10ec34-2ca8-4dc9-b1e4-2401d6c8e4ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f92fca0-c512-42d7-a3e5-e1119b94acb0", "sighting_of_ref": "indicator--6ae1ef4e-6945-4779-98d1-90090268836e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e080091c-2bbc-4b5b-9e7d-24bef2498e6e", "sighting_of_ref": "indicator--6a607f6c-0161-485d-9cc8-53d845d5aa9e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34812748-c128-4c95-a73b-2a36439d57ec", "sighting_of_ref": "indicator--55cae410-6dc5-4899-b552-6776d3a6945d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19d90f7-b4ff-471e-a8c4-e2924fc98054", "sighting_of_ref": "indicator--31929a5b-3d83-4953-953b-2f8136eb3af0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e83c9c-bd01-4302-a97c-cdce37e0dd94", "sighting_of_ref": "indicator--1c103559-fe9d-4d8d-ba1d-8fa67932ef8e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9f2dca-d96a-4993-9938-6ddcffbd40fe", "sighting_of_ref": "indicator--38b4a8d5-b1cf-4913-a8fc-24b005af00a5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6551dd32-c344-4f81-9599-349cab5d1bc6", "sighting_of_ref": "indicator--d9925d3f-9bac-4bd4-a615-d61432dfcb6e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376c933c-7979-43d8-8573-27a24fa3ac5d", "sighting_of_ref": "indicator--5c82def9-7979-4577-93a7-4f47afb3f3a4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfb7ff3-9843-4afd-90e9-1d6afb9fb10a", "sighting_of_ref": "indicator--922d330e-e6c0-4083-a8ac-a8fe3ae9bfef", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9daa1d19-31ea-47b8-a90c-301afd5d35eb", "sighting_of_ref": "indicator--922d330e-e6c0-4083-a8ac-a8fe3ae9bfef", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d457495-3798-4fed-8cd2-5b5523959e17", "sighting_of_ref": "indicator--e8fd11e7-6514-4740-b20a-2edb44930b43", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1c7c14-d6f8-410a-821a-ef3cf4b79c06", "sighting_of_ref": "indicator--84fcfcb6-dd90-4dd5-8b42-b854930d9340", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0170e9d-0db9-4c63-a8f9-5bd893814ef2", "sighting_of_ref": "indicator--84fcfcb6-dd90-4dd5-8b42-b854930d9340", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2032277f-78ae-4ccc-a615-304d033c6eff", "sighting_of_ref": "indicator--795925b5-e6b2-495f-a1f8-530da90d1b70", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6b9900-221e-4987-bb87-e091e0501236", "sighting_of_ref": "indicator--c427ed8c-d84f-4f93-9599-a47ac210e0a0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51afed3-bc00-42af-bb1a-619e60814e2c", "sighting_of_ref": "indicator--c427ed8c-d84f-4f93-9599-a47ac210e0a0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1fdd3b-1c34-4470-bf67-480f4d3aee4e", "sighting_of_ref": "indicator--c427ed8c-d84f-4f93-9599-a47ac210e0a0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d565a7a-6413-4e5b-acf7-e9c2554c0056", "sighting_of_ref": "indicator--52e1afd8-2328-433b-b9d9-d660c1d27e21", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e66bdb8-ae5c-4a6f-9b2a-3a0159ad1342", "sighting_of_ref": "indicator--8fe8c6be-8c75-42ad-ae35-5f38de94bbd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80edaa94-a442-466c-9e33-589c901544fc", "sighting_of_ref": "indicator--65be12a6-e8b9-448a-b449-17e66fca41c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d47ad9-8c79-4a1d-9379-ca851304886c", "sighting_of_ref": "indicator--4c0370a8-678e-4da5-b829-3396ada150cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9529c6c-2b88-42ac-a5b8-5fbf5cfde009", "sighting_of_ref": "indicator--0c78b055-b9d1-4f59-bbf4-90a04a4def37", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135d4c4f-4100-4ea4-a7d4-48619400a673", "sighting_of_ref": "indicator--fa20d5bc-d9d9-4880-84ff-6eda6dfc37e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1679314a-cc97-4ca3-a177-6a3bbe003d5e", "sighting_of_ref": "indicator--6f2e524e-c700-47fa-8e1b-ca97daa500c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330ecf21-6b46-4b8d-a8ea-fc41843ee37e", "sighting_of_ref": "indicator--8134c9c9-be32-41c6-85ee-17eb8cec66e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03baac48-47a9-413c-a44c-ab7728496cc6", "sighting_of_ref": "indicator--c94a6439-9922-4e44-9a7f-ec8812f798e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70f2f8c-ad3d-4b12-bd27-a9a88f65c477", "sighting_of_ref": "indicator--ed1a1e91-630e-46e6-85a1-7ee993a47194", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc32dadf-f48e-4b16-8c3e-b15369fdef0a", "sighting_of_ref": "indicator--6c40c889-c4d5-4807-a3b0-6ff57377de45", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d917ea9-7801-4d05-9c26-1a9ca6cd0fc5", "sighting_of_ref": "indicator--f34cc094-a8c4-46c9-8be0-5280b63c90b3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72e03da-d15b-4163-88cd-9be090b0d053", "sighting_of_ref": "indicator--746fa124-d81b-4e9b-9ec5-9f707ab8fc61", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9947ea-ea41-4164-8b9d-681fa19f7af4", "sighting_of_ref": "indicator--b4f4a5bf-dbb2-472e-bb68-54becf4149d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3cbbae-c0b8-4659-ad52-333600ace8c1", "sighting_of_ref": "indicator--bcb42b04-a181-4a00-815a-ef5202126b0c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624b5434-b1a0-45e1-943f-375ff5e13e1e", "sighting_of_ref": "indicator--63d9c0fb-0521-49fe-bc83-317f39c18440", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196e975b-cd3f-4ebf-9dbb-c556cdecfa0c", "sighting_of_ref": "indicator--c81b8f86-4cb6-463c-95c7-e929fb140026", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e547557-28f0-4ed4-973b-1ea0b8f97d1e", "sighting_of_ref": "indicator--1d0cf122-9a95-4da7-988d-45a6555265fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00031fc-0cfc-43cd-807e-4b0833adf072", "sighting_of_ref": "indicator--57fc9af6-8b68-4a96-b0c3-6d70e431b1dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b927f51-3603-429e-8ea5-2b72682dc2d0", "sighting_of_ref": "indicator--f42e7314-f8b4-4a6a-abfb-a3ed0990d530", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940ae56f-24d4-4289-8911-de71e69dbea0", "sighting_of_ref": "indicator--659b8daa-c94b-41f3-a230-7ebfb2efd243", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4b2c3a-7805-4e96-b54c-d5ba822278e7", "sighting_of_ref": "indicator--659b8daa-c94b-41f3-a230-7ebfb2efd243", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1562f541-5e53-4fab-9c8f-fd47fef2c927", "sighting_of_ref": "indicator--02c7b056-835a-455f-a7a5-707edc0fba17", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07ce061-4feb-46d8-b81f-244ee188a4bf", "sighting_of_ref": "indicator--02c7b056-835a-455f-a7a5-707edc0fba17", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78da0b70-533a-41a2-998c-429dae849dc2", "sighting_of_ref": "indicator--eebf7a9a-710d-4da9-86e2-1c6b57d21180", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dec85ae-09a4-43da-bbf9-caee1a1fc836", "sighting_of_ref": "indicator--eebf7a9a-710d-4da9-86e2-1c6b57d21180", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad0394d-4f64-40e2-8aad-dae354584cba", "sighting_of_ref": "indicator--eebf7a9a-710d-4da9-86e2-1c6b57d21180", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224020c2-94dd-4512-9953-197665b99a3a", "sighting_of_ref": "indicator--3705de12-44dc-460e-8f97-ca78f874aed3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e28ffd2-a098-4973-a3c3-1677a042326b", "sighting_of_ref": "indicator--3705de12-44dc-460e-8f97-ca78f874aed3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80df0128-9dd0-4a8e-9406-6abe9cf97ca2", "sighting_of_ref": "indicator--fa69413e-6b4b-4c30-ab63-24d0c553e302", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec74f6b-10bf-493a-a7da-74c3e230495e", "sighting_of_ref": "indicator--fa69413e-6b4b-4c30-ab63-24d0c553e302", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3401e2b4-5465-43c1-afc9-42eb586bb9bb", "sighting_of_ref": "indicator--fa69413e-6b4b-4c30-ab63-24d0c553e302", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b7bf1f-93b8-4365-bf57-dafb78ef7c9a", "sighting_of_ref": "indicator--dfffac06-931c-46d8-a0d3-8ca470cb2629", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec71c533-2376-4066-a1f2-d1ac1570fa51", "sighting_of_ref": "indicator--dfffac06-931c-46d8-a0d3-8ca470cb2629", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5113b93-e504-429a-b973-e851fa93ecb7", "sighting_of_ref": "indicator--dfffac06-931c-46d8-a0d3-8ca470cb2629", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acaddf8c-766c-4b3c-a6f3-494d777fb9be", "sighting_of_ref": "indicator--1b0a795c-77b6-439e-babe-d97ca4e706b7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660c7cf4-179c-4d2d-8fa9-273626cd3de4", "sighting_of_ref": "indicator--1b0a795c-77b6-439e-babe-d97ca4e706b7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8c30e2-8f6c-42a2-92dc-fbed008fe1d9", "sighting_of_ref": "indicator--1b0a795c-77b6-439e-babe-d97ca4e706b7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c06ad6-5605-4a9e-882c-81a6db3864cf", "sighting_of_ref": "indicator--3fba0d18-ef59-4079-84a5-08b20a39c600", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87627a7e-9b46-4a2c-82ac-68962fe4c96f", "sighting_of_ref": "indicator--23aa6c8f-a3a3-4827-86f6-97e2de4f1907", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7560a202-fc6c-472a-8c7f-e538e57e7ec1", "sighting_of_ref": "indicator--c01fdd3f-6ee5-4d5e-93d1-b5e3880bca99", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9d4857-146b-4b38-8e36-6ad9b6ebb93a", "sighting_of_ref": "indicator--45629d3a-c67d-47c5-8e5b-d52f93ab9273", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3a3291-b55b-48f0-927f-db0e32704496", "sighting_of_ref": "indicator--e7e74536-35a5-4e97-a22b-8e06d5170268", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d70ef0a-14a3-4247-a44d-f28d5b4801bd", "sighting_of_ref": "indicator--e7e74536-35a5-4e97-a22b-8e06d5170268", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2581c3e6-707f-4336-ae92-d96f828d6437", "sighting_of_ref": "indicator--05d2b083-4bdb-4986-a370-e1f3dcad25dd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c921f46a-8774-4409-ab9b-524e4c9e625a", "sighting_of_ref": "indicator--c77d6514-259b-48c7-acd7-112bdb614d2f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fcc56c-553b-4e45-ad9a-ad29f893092e", "sighting_of_ref": "indicator--72737e6d-afb6-422c-8336-5e093350f771", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a593f137-60c2-4ada-8fca-d4f3f1c6b7ea", "sighting_of_ref": "indicator--dd26942a-1506-4a24-b69d-8c85de4cfe3a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9555fad1-4e55-473e-a971-0a6c4fb91cc3", "sighting_of_ref": "indicator--a5ff166c-9657-4931-b26a-c7e232cd1fc0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86b424c-7723-4838-b18e-48b4e9cfd098", "sighting_of_ref": "indicator--ed332c1f-700b-47cf-a341-194a53b39814", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad9230b-cad6-4963-9b13-dcb96c15e141", "sighting_of_ref": "indicator--ed332c1f-700b-47cf-a341-194a53b39814", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26382663-a7c5-4302-be93-1a59a8bfdf49", "sighting_of_ref": "indicator--4d812993-f50e-4d69-85dc-f1b2f28a614f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321ae4f2-07ba-4a05-bd94-63b9f8e88718", "sighting_of_ref": "indicator--6f9300ab-0e66-4136-98cd-782b61657d93", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998da86b-a9e0-48db-8d2f-834fabbf2cae", "sighting_of_ref": "indicator--6f9300ab-0e66-4136-98cd-782b61657d93", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e55d26f-4cdc-4430-a302-3544fa39fa1b", "sighting_of_ref": "indicator--f8c14e0e-4282-490c-b387-2dd6fd304b10", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f14b545-9b3c-43ae-9d60-b8a6e83ceb18", "sighting_of_ref": "indicator--332b30e2-76a9-464e-b8b5-acbd7c95030b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e18bb45-9550-48e0-a602-199177828695", "sighting_of_ref": "indicator--55fb0774-d78f-4abc-b6cc-8992230120bd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8a3473-2f49-4a78-9c51-dbf5080b030e", "sighting_of_ref": "indicator--a81d7e44-9810-433a-9d37-5bc4aa610ac6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153fb109-262a-4c95-9d2b-13c391e56a0b", "sighting_of_ref": "indicator--c78c7890-4f4a-4a6c-8b9e-520bf23cf03a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9d4704-17a6-4f77-b25a-4140a850dd65", "sighting_of_ref": "indicator--25790f47-ed58-4b7a-9250-4c5cd9019ae8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53972952-a424-4298-b0ac-f94076b93af9", "sighting_of_ref": "indicator--d20cc5ad-3d2a-4315-94d9-113263e62cdf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbf54fa-607e-4b7e-aba4-8bbbcb1afbb7", "sighting_of_ref": "indicator--d20cc5ad-3d2a-4315-94d9-113263e62cdf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73416845-1af1-49e8-ab56-21b9c269ab68", "sighting_of_ref": "indicator--d20cc5ad-3d2a-4315-94d9-113263e62cdf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b18d62-2b2a-48ca-9005-0f006e1e4677", "sighting_of_ref": "indicator--04c7e033-8a5b-4a31-938c-23383633cf91", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1171e247-ac89-4d80-b4a5-7f98bb89ba95", "sighting_of_ref": "indicator--04c7e033-8a5b-4a31-938c-23383633cf91", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f49f52-a823-413e-9d59-b61ff824baf0", "sighting_of_ref": "indicator--029d0590-7c86-4352-9712-e99056aacf8b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb9f98c-f1be-4a1b-9734-e938a91871e3", "sighting_of_ref": "indicator--19889743-3b32-461a-81bc-63f815b1abda", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35819ac-fc39-476f-b4b6-046315638504", "sighting_of_ref": "indicator--3e6c8b81-f235-4966-b427-166904c2c864", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b71371a-4b93-4044-87f2-0727d9a1f585", "sighting_of_ref": "indicator--3b66dcd1-e527-4951-b13a-c4147b7073f8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e51dc8-35f0-4042-bf46-c8e30992ffa5", "sighting_of_ref": "indicator--8939bb71-f17c-4ed3-8a78-2c54f6adaa70", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82af4753-6662-4cad-a44d-2205836fc086", "sighting_of_ref": "indicator--d5de4332-32f6-45e8-990c-6b75cdc064f6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3145ffb6-2acb-40d3-9720-285f838010d4", "sighting_of_ref": "indicator--4784a203-f196-4bee-b2e1-7d16cf4963e4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d5af39-c942-4ce4-8d31-6ec4c92d6ace", "sighting_of_ref": "indicator--e1918695-89dd-43e6-bdb2-aebd746d3453", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e7d360-896a-4879-9fb1-f6e4ab06f058", "sighting_of_ref": "indicator--7a707c3a-453f-4287-9831-8e852ef7a1ac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16ac5c9-d387-439f-8f2f-64effee2ac19", "sighting_of_ref": "indicator--a852be07-969c-4363-b388-4579a5eec403", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be1e56f-f110-412c-a812-ab9bf254c52e", "sighting_of_ref": "indicator--6d1e363a-c2cf-4c22-a1fd-4238a41588b4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff2a690-c7f3-4dab-a00f-495f47625f34", "sighting_of_ref": "indicator--d1ccc79e-a435-4548-870b-3d47d9c8f51e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96908b1b-bba7-42a9-a5e3-48ced15356f5", "sighting_of_ref": "indicator--fdd6951a-a29a-42e5-abce-43a1af9d68c9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40498c16-3e2c-4c54-a2bf-e8376f5b554b", "sighting_of_ref": "indicator--53a350a6-95ba-406e-a57c-22063b2d6188", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55f9733-b566-4788-89f5-c8e2c97521a9", "sighting_of_ref": "indicator--109434aa-b706-4334-8690-aef4de0eae6d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873399c4-f8e8-423a-bb5b-f481adcc941a", "sighting_of_ref": "indicator--260d7eb0-906a-499e-83f2-825f137b2af7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c79c8db-0c18-42cd-8179-f3f3eb665811", "sighting_of_ref": "indicator--260d7eb0-906a-499e-83f2-825f137b2af7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c484cf6-104c-4ceb-9e44-546240245a26", "sighting_of_ref": "indicator--045d1fe7-f53c-4067-8740-471c514c2c72", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdd979e-d6c9-4131-8e03-fc006f574264", "sighting_of_ref": "indicator--045d1fe7-f53c-4067-8740-471c514c2c72", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d75b68e-169b-4bb9-8390-7fa0f6b04842", "sighting_of_ref": "indicator--045d1fe7-f53c-4067-8740-471c514c2c72", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8599c2-9dd4-4f31-bbb3-f03cfc9f2690", "sighting_of_ref": "indicator--a65e3eff-cd41-4774-9288-f0308735852c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a71e9f-de1c-4c78-a43b-a1f0b2a3676b", "sighting_of_ref": "indicator--6e70d879-24ad-469f-9be1-a5891b937d69", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2b27e8-0b79-4bf2-baa9-b40116c0f79b", "sighting_of_ref": "indicator--c59f131d-2a32-4ed1-9545-6a016de27173", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258a8a93-0022-4e79-acf8-cb4429d722d8", "sighting_of_ref": "indicator--f2f94bb5-6540-4283-a359-5c07235d3a49", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2eedee1-9418-4a37-b064-3fbfb0645a5b", "sighting_of_ref": "indicator--f2f94bb5-6540-4283-a359-5c07235d3a49", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b506942-42f2-40b9-b8ba-99b9420cb3c0", "sighting_of_ref": "indicator--f2f94bb5-6540-4283-a359-5c07235d3a49", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5995e9-caa8-4848-b84e-22d4360dce56", "sighting_of_ref": "indicator--5a11c19a-cda3-4e1e-838d-93b1dbdf4bd7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed87cdd-768a-480c-869c-0c30bb092cd1", "sighting_of_ref": "indicator--5a11c19a-cda3-4e1e-838d-93b1dbdf4bd7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627d69e9-d703-4295-8c96-b265050762a2", "sighting_of_ref": "indicator--932c81c2-7e89-4f2d-984b-140ae6a5ac13", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c00295-ef3f-4c44-9cb9-c14ee2a57034", "sighting_of_ref": "indicator--15ede8c5-9006-478b-84bf-8fffaea07189", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42555e78-a0a4-4faf-ad3c-850e3884df18", "sighting_of_ref": "indicator--15ede8c5-9006-478b-84bf-8fffaea07189", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdfad93-c059-44d0-b3cc-e0c460167e44", "sighting_of_ref": "indicator--cb58ddf8-e2ba-4f1a-84b7-850b32d8a38d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9245c4b-a351-4464-bb1d-d7ebac73ec16", "sighting_of_ref": "indicator--ccc69210-8524-4bee-8860-35a3af02058d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76309e87-1e33-4064-926c-331e5e2e8a66", "sighting_of_ref": "indicator--ccc69210-8524-4bee-8860-35a3af02058d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f7ab6c-df20-4a01-a205-e35114fd9fc1", "sighting_of_ref": "indicator--b3d720fe-91ea-4cb8-8ffd-2923efd72841", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e1a7b9-c340-4f33-985f-1a9dec37f133", "sighting_of_ref": "indicator--b3d720fe-91ea-4cb8-8ffd-2923efd72841", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d449bce6-6e41-42a0-b990-ef03d9e99eb2", "sighting_of_ref": "indicator--6432c25d-1ec8-4f54-819b-a7fbdb87e665", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5abeed25-6bfd-40de-8afc-de669f957307", "sighting_of_ref": "indicator--6432c25d-1ec8-4f54-819b-a7fbdb87e665", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd706b6f-b12e-495c-baa8-f6a7641e27ec", "sighting_of_ref": "indicator--6432c25d-1ec8-4f54-819b-a7fbdb87e665", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84760fc0-91c7-4deb-a8a1-e161847504a6", "sighting_of_ref": "indicator--46a85329-dfd8-49e7-a7b6-d7adf8dcf7b7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127606f6-e980-4d4b-9379-e926a531fc34", "sighting_of_ref": "indicator--46a85329-dfd8-49e7-a7b6-d7adf8dcf7b7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5623fcf6-1384-4937-a9a3-9d79f126d77d", "sighting_of_ref": "indicator--46a85329-dfd8-49e7-a7b6-d7adf8dcf7b7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91d023b-fcad-4906-94cc-c2facdd26ce0", "sighting_of_ref": "indicator--48be0f4b-1038-4659-a30f-c96d23201413", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9fbb70-ef5d-4e24-8847-1c4c7242d55a", "sighting_of_ref": "indicator--48be0f4b-1038-4659-a30f-c96d23201413", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2827898-7b2d-4b64-b608-16607aa66b31", "sighting_of_ref": "indicator--90c66e77-d95a-4d37-a874-bbdef222f75e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a982729a-2197-4f36-8d30-5cf8d061a973", "sighting_of_ref": "indicator--70dc4ff8-82e6-4dae-9200-d597931d990e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8f4d9b-b306-4a43-a716-4db4d40fafcd", "sighting_of_ref": "indicator--6c1ef76d-0eed-49b1-b133-c2aec0e9b7fe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41b2219-72d3-428a-88f6-453247a0ff70", "sighting_of_ref": "indicator--6c1ef76d-0eed-49b1-b133-c2aec0e9b7fe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e541de8c-741f-4445-9dac-6621f50d82c1", "sighting_of_ref": "indicator--a29a557e-a911-4cd9-a3f3-d31168a53e07", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9920c5b7-7d3d-4cae-a8d4-28b8c44c9022", "sighting_of_ref": "indicator--a29a557e-a911-4cd9-a3f3-d31168a53e07", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34728c8f-e1eb-42f9-aabb-ab73c7386676", "sighting_of_ref": "indicator--a29a557e-a911-4cd9-a3f3-d31168a53e07", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ed3b29-5e9a-4aec-9aa6-15c8f28c97ca", "sighting_of_ref": "indicator--4f167b66-4e9b-4b9e-bb5b-8f960c81c8ad", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a6adc3-a185-4b27-be0d-c2716f222b2f", "sighting_of_ref": "indicator--40fe5dc9-ee43-4ea4-bd01-11724547f8b5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d72aae-759e-4fd7-9f77-fd0ed661c2b9", "sighting_of_ref": "indicator--a057dadd-3670-43df-adf8-3a112ddcbb1e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5bfafa-0721-450b-bb47-49fdaa3431a1", "sighting_of_ref": "indicator--a057dadd-3670-43df-adf8-3a112ddcbb1e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e52e99e-b0c7-489d-ac1c-f5976213d29f", "sighting_of_ref": "indicator--5fad37ec-73d3-45b4-8087-20c65d395651", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6e5515-ff94-4ba6-ad1e-36b3cddefd09", "sighting_of_ref": "indicator--c0dc1ee3-2e11-4bcc-a5df-dd6fc0e32ae5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2d8b13-f4cd-4ef9-9b8f-2e7ea6cdf919", "sighting_of_ref": "indicator--c0dc1ee3-2e11-4bcc-a5df-dd6fc0e32ae5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df71c2d-f1b3-4b02-a861-f9a113b083c6", "sighting_of_ref": "indicator--f7e091f0-3093-4878-95fe-b4ec81c32ad5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1bd862-bdb7-4010-a97e-1f3dacb7d15f", "sighting_of_ref": "indicator--f7e091f0-3093-4878-95fe-b4ec81c32ad5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69de700-ee87-4a53-a98c-88d96f435b49", "sighting_of_ref": "indicator--f7e091f0-3093-4878-95fe-b4ec81c32ad5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ed185f-bdbe-4bd5-8649-679ff809e24c", "sighting_of_ref": "indicator--36571563-e34c-4115-b997-fabecd5b9ac3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada3982a-2481-4732-87b9-63082f43b98b", "sighting_of_ref": "indicator--36571563-e34c-4115-b997-fabecd5b9ac3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84e038b-6bf4-483b-8823-ecf3cf74a388", "sighting_of_ref": "indicator--36571563-e34c-4115-b997-fabecd5b9ac3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de54b03e-bc69-4460-8848-8e399d1cf85a", "sighting_of_ref": "indicator--3a91a895-fb1b-49f1-872e-0837ce869702", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dcda2e6-1b97-4b5c-ad6d-6e917982adee", "sighting_of_ref": "indicator--3a91a895-fb1b-49f1-872e-0837ce869702", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ef4e73-3984-4547-bdf1-4a9cf446ba15", "sighting_of_ref": "indicator--f6978c67-0e0f-4371-8c1f-8868b8243805", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e906ce14-25b1-4b2b-891b-a5d0c165fdd4", "sighting_of_ref": "indicator--f6978c67-0e0f-4371-8c1f-8868b8243805", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41dd81e2-0fe5-4375-b152-946488566f60", "sighting_of_ref": "indicator--f6978c67-0e0f-4371-8c1f-8868b8243805", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7adddf81-b8be-48ee-b65f-437e613c4952", "sighting_of_ref": "indicator--f6978c67-0e0f-4371-8c1f-8868b8243805", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1a3dc5-45d4-48f9-80ae-b197436ef681", "sighting_of_ref": "indicator--25381a48-21d5-40e7-b542-57a8e2f589da", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bb835c-6b2a-4bda-bff5-a840739f5048", "sighting_of_ref": "indicator--25381a48-21d5-40e7-b542-57a8e2f589da", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd63cae-a1ab-406d-9ddd-eeb3559bb6cd", "sighting_of_ref": "indicator--25381a48-21d5-40e7-b542-57a8e2f589da", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed03f69b-07ca-472b-94c7-b6b83b3d129c", "sighting_of_ref": "indicator--81d676f4-583d-4c45-b4be-89fd64030a5a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50483882-4d41-438e-99e1-3714d89ca4fb", "sighting_of_ref": "indicator--81d676f4-583d-4c45-b4be-89fd64030a5a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cef8943-4a74-468a-aed4-3086547afd66", "sighting_of_ref": "indicator--b0873c8f-8772-48bd-95f1-0eb6978b7f25", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c0cc90-2db1-4fc1-bf7e-5e94613698a7", "sighting_of_ref": "indicator--8a40bde5-4219-4f9d-8a8d-8260559caf30", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2cd9614-66df-43b5-adb4-2dbda62f1554", "sighting_of_ref": "indicator--83717c9f-1c8f-4b73-b023-f78488c9e1bb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7fee80-afaa-4a2f-8b5d-cf75c8dfe9ae", "sighting_of_ref": "indicator--05cfa586-362b-48b1-b959-2b8977985f97", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcede3c-9dea-4bd5-9cd8-3bd542af2e0b", "sighting_of_ref": "indicator--05cfa586-362b-48b1-b959-2b8977985f97", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2b4aca-365a-4330-a2f1-7a84da23b113", "sighting_of_ref": "indicator--e4b2fc06-833d-430a-832e-d783bf2b5248", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453d687f-213e-422b-9773-621993cd778f", "sighting_of_ref": "indicator--885dc8be-4fc4-43ce-a3b1-51db246db4b5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898a2497-22be-4936-97c6-44ddd228d14e", "sighting_of_ref": "indicator--b95e1377-9f2c-4b2e-9d2c-0438ab1023ca", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a629b10-6f73-479c-b150-d93476eaac99", "sighting_of_ref": "indicator--a3cd08d1-7163-4b4f-a4b2-a765b4b24d59", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed390a8a-8bf5-4f27-9dee-eb0ff34ef981", "sighting_of_ref": "indicator--6ec9d2ee-2d56-4beb-ad56-8f946a55a996", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00a932d-f8a5-4fa6-9205-9905dcc41beb", "sighting_of_ref": "indicator--6ec9d2ee-2d56-4beb-ad56-8f946a55a996", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e70553-4e60-4e13-9db5-37425ec4cc44", "sighting_of_ref": "indicator--3efd3d7f-f387-4d64-98f7-e3bc9c2ea85f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62edb481-a101-4e96-a9df-46e9d7fb56ec", "sighting_of_ref": "indicator--dcf234ae-c8d5-4d66-b8fe-50c66226b1a1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfd1da6-b7e7-43fe-9733-c0c35426872e", "sighting_of_ref": "indicator--5257a9fe-084e-4a56-9ede-11d8a767a7a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98849118-6dc2-47b7-821c-a463398011f7", "sighting_of_ref": "indicator--c11db26a-df90-463e-b9a5-ec7239d2eb1c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9967f242-c51e-442f-952f-91b410693665", "sighting_of_ref": "indicator--c11db26a-df90-463e-b9a5-ec7239d2eb1c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7516d64-76e8-4d70-9391-a99b377b6dc7", "sighting_of_ref": "indicator--c11db26a-df90-463e-b9a5-ec7239d2eb1c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640a5693-cb12-47fb-b97e-f8c288c52435", "sighting_of_ref": "indicator--66c867f1-4895-4812-a0b2-80a526f1c6c4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12db2a2d-c391-4e13-aa0b-09dfb59311c9", "sighting_of_ref": "indicator--790a9133-7346-4039-a627-a673ead64bc0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc79bbf4-1f9b-4947-8ca6-44babde63925", "sighting_of_ref": "indicator--27329047-258c-4ce9-94c1-009620806a56", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd920087-7968-4e99-bace-e19c53cfad4c", "sighting_of_ref": "indicator--78bb031d-2dd9-478a-8743-02fc2607d3eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c0ba8d-57a3-4fdd-b32f-279252716161", "sighting_of_ref": "indicator--3a6d01da-a378-4b90-b0d4-3912d8814d0e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93aa681c-aebe-49d5-a18d-50bdcae8e04f", "sighting_of_ref": "indicator--577a09aa-4c5f-4d5d-bb9c-fdee37ff74ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60da1ca5-9278-4f31-b273-cf9e1bb29902", "sighting_of_ref": "indicator--9ae509b5-482b-4151-9701-faac8e3b4ee2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b531e8df-ed6f-446f-b15d-62321753b909", "sighting_of_ref": "indicator--22c99d2f-1877-4abb-91f0-110a6c53f45b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4c9071-c3df-4da2-ac9a-b4fecd87768e", "sighting_of_ref": "indicator--4f31a8af-0851-4b08-8705-2d4b0041529e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36221ec8-2dc2-4083-a702-7f80e378fd54", "sighting_of_ref": "indicator--9fe0bdc2-db52-4b1c-a048-f852cf3bda15", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5baf321d-08fa-42c3-803e-66809f37a78c", "sighting_of_ref": "indicator--9fe0bdc2-db52-4b1c-a048-f852cf3bda15", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae99811-3265-4c79-816d-14f4e568a120", "sighting_of_ref": "indicator--9fe0bdc2-db52-4b1c-a048-f852cf3bda15", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef47356d-bf32-44a8-bd7e-dccdd3cdff54", "sighting_of_ref": "indicator--cc10abea-3e58-4346-a8fd-ac85845c6983", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dba94da-4d39-4f86-ab6d-90f3336b04a3", "sighting_of_ref": "indicator--cc10abea-3e58-4346-a8fd-ac85845c6983", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbf5b79-0fca-4c9a-8bef-f1154df9811c", "sighting_of_ref": "indicator--cc10abea-3e58-4346-a8fd-ac85845c6983", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba9ad5f-d685-482a-89d1-afccce88f222", "sighting_of_ref": "indicator--c4ace237-5e16-41c3-bf30-1cce7eb265ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d92d483-b495-4575-9b86-b67c7310d2a8", "sighting_of_ref": "indicator--b8802208-77a4-439c-8e6e-e6dc9ca4b1c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12044f01-242c-4587-967e-524821f7e870", "sighting_of_ref": "indicator--ace722e2-8071-431e-b80b-248d50c4228b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b08910d-068b-4a60-ad6e-5d5378eee5da", "sighting_of_ref": "indicator--9fdaf78b-756d-40bb-8212-9389332501d3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3844f86-cc84-49ac-b97b-bb29e61deb96", "sighting_of_ref": "indicator--813470dc-7d9e-4832-ae88-657c499c5b98", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3ea4ef-1930-4995-a70e-9c13b863b5ef", "sighting_of_ref": "indicator--63ba1fdd-b0c9-4db9-9ad4-98bf5d8e382e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4762eda8-8d5f-4d1d-8a61-0e1fe4474cf5", "sighting_of_ref": "indicator--2cf65dfa-a888-4fde-bc62-49db55e46ceb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72290e4-c069-495d-8cec-beedea9a241b", "sighting_of_ref": "indicator--9519187e-80d9-4c71-adc2-ca749d869ff9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc0a84f-0567-4a54-83bf-9ec048dadc96", "sighting_of_ref": "indicator--f1d67663-5f8e-4aaf-9e64-9fdf742e4f82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05748993-0898-4d27-91b3-04e4c9d556fc", "sighting_of_ref": "indicator--22d4adec-679d-4b6f-8999-86fef02be052", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc816f3f-5365-4f71-bd33-9cd4e03683b8", "sighting_of_ref": "indicator--e44f7dc5-9b82-4786-8dc0-035537664e47", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb6f167-3e8f-48d2-b6c9-e8cf6d167a63", "sighting_of_ref": "indicator--1eba108a-2004-4ab8-93d2-1674d8e74ae7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9899fa36-829c-4461-b519-f6fefdaad3e9", "sighting_of_ref": "indicator--a07b64ae-4e7c-4272-9fc6-2f70b9bfe181", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1835f67-b2d4-4602-9022-84c15ce91ac6", "sighting_of_ref": "indicator--61dcb61b-1cff-47fe-a19a-607b14f1db26", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f9e26f-5c3a-46b8-9151-423ff0bebacb", "sighting_of_ref": "indicator--22cf6309-559c-4903-8a9a-e9a189075916", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd368246-673d-4be5-bd30-ac3f6161ffb9", "sighting_of_ref": "indicator--18971d9a-5c88-4e7f-a99b-aaba67d06dfc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881205c2-048e-4c1d-9d94-bd3d97cd7558", "sighting_of_ref": "indicator--030357ac-590f-4ac5-ba02-d11e183bd3ae", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257f142d-5f19-46c6-8313-a0d5200d939e", "sighting_of_ref": "indicator--cf82054c-b314-4ff9-a862-e05f78cb5e4b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dca5db2-8383-4af5-8874-eccbf3689017", "sighting_of_ref": "indicator--ea9679c0-b7ea-4d43-a0f1-48180db49ce4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa7f789-5996-4bca-8b07-a795db60d4da", "sighting_of_ref": "indicator--ab5501d2-f1e1-4d3f-8823-1788925d029c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9228cc3e-c748-430e-ace4-53fbeceafd59", "sighting_of_ref": "indicator--b0794061-e9bd-4dbd-8c43-474c37703bfa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a429dcb-b41a-47e6-ad54-bb103219a40c", "sighting_of_ref": "indicator--0cf1dfb8-9f73-4b2a-99b1-810d634b0f75", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f42185-5da1-4dac-b094-b140f6ab269c", "sighting_of_ref": "indicator--0bf4a96f-81e0-499a-9237-a706f647d543", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b72dd36-6a5a-4727-b96d-1cbe039aed88", "sighting_of_ref": "indicator--7465dc10-be41-494d-b450-e2d41c48e6bb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1673bc-a2a7-4a5d-86c3-e1f0247437e5", "sighting_of_ref": "indicator--13b815a7-28b4-4af0-a79c-c954214203c1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336435b4-3f0e-4f76-8df5-ecd3ae6d4a7f", "sighting_of_ref": "indicator--14a01dc4-be78-46f6-bcd4-dd911829325d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e061e723-5e3b-48f2-b182-d49a408d0583", "sighting_of_ref": "indicator--5ed937e8-f8a9-4761-98ed-e61be8dbf27f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3eb3977-2008-4d17-b27f-5f120adc6214", "sighting_of_ref": "indicator--b1edb956-f7bc-4fa6-942e-a2558d677db6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c420286-cced-4f0e-af7c-87eab01b9e79", "sighting_of_ref": "indicator--48e56eb7-0559-4dbc-8cc1-f8af22f959d2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6750ffc-cefd-4719-ad6c-e1ad8aa45387", "sighting_of_ref": "indicator--51408a29-e315-4088-a687-dac28b46e032", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e2467c-31e9-4cd4-a14a-ba1b2056ee17", "sighting_of_ref": "indicator--091fdeb2-46af-48c8-907e-c556d16867f7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad76f12-c874-4028-9151-7229dba16d16", "sighting_of_ref": "indicator--c279b668-bc66-41ae-9b1a-9ad94f4ac310", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75721895-f639-4c4f-90e3-c13e7b66e264", "sighting_of_ref": "indicator--9915f651-f1bc-4e50-8245-1a9672c47665", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2ab547-b1ec-4c81-b741-acfe8bd27412", "sighting_of_ref": "indicator--9c0a7a2b-1305-48d4-b65b-d499448c98ed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c572a4cf-7d61-4f17-ad6c-049dcfcbfde5", "sighting_of_ref": "indicator--8661feb7-ffee-4dec-a916-7fa1b43d1d58", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64dc35b-37a9-41da-832e-bb52502c62f5", "sighting_of_ref": "indicator--a8eda109-7e6c-48e9-8743-d7d3a6a5562d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3351deb-a4f7-4523-a8d2-41f03f378e45", "sighting_of_ref": "indicator--b6a53aa8-963a-46e8-8c35-cbe55ca77160", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01aa70b8-c1a1-44fe-aa04-9dedab28a4b3", "sighting_of_ref": "indicator--77522347-d3a9-4008-8a68-81e1dc4b96da", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c88c4f7-c3f9-4c82-87a3-ed8cecc260f6", "sighting_of_ref": "indicator--6d2433a9-d81d-4aef-b960-cce7a04d6014", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390ccedf-7e0e-4296-9e48-c3cffb140a53", "sighting_of_ref": "indicator--a1c73b3c-c97b-4aac-afc9-3592c910ce66", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41543764-b738-4370-aa44-65d8a3fb7446", "sighting_of_ref": "indicator--6d83d1a7-87ef-4ae9-9e86-06e5182ee419", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ea949e-0a69-42ae-bebb-c903e2d58528", "sighting_of_ref": "indicator--6023a21c-3d90-4ec8-919e-029016ca790c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b747f176-eb74-4d49-9ece-29e52c311ee8", "sighting_of_ref": "indicator--cd651a8c-95eb-4310-9502-ef8f280e7c2b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee538d6b-74ba-4228-a384-bfa7b947e6ee", "sighting_of_ref": "indicator--7d774b11-cd11-44dc-b5da-cde4408f4b93", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1461d8c-3fc1-4af6-b677-6794a2c8fbcb", "sighting_of_ref": "indicator--9b9ebf42-afe8-42f1-8d14-35416e011f30", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0919d3ef-352d-4f43-8e58-e623971059d6", "sighting_of_ref": "indicator--f4b4ac44-9011-4959-aab8-e25e829b7a68", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e7514a-7b0a-4b64-9600-d3b739251d62", "sighting_of_ref": "indicator--f259c4e6-2c4c-41d7-8df9-c9fb0d39c0f5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed9622e-f06d-474c-9ce8-862ed2e8454b", "sighting_of_ref": "indicator--817f08c3-1390-4d28-97bb-6751cc6cdcc6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0362040b-d4f4-4bcb-8166-2a3c082975f4", "sighting_of_ref": "indicator--f2a77441-9e4f-4b18-9508-34e1d72ed453", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63070a75-a7b1-4c36-85c1-585decd59ba0", "sighting_of_ref": "indicator--1df21331-e7f2-49aa-b55a-e18618960d93", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0aac18c-f7a5-4eeb-ad7b-e9eaebcb475f", "sighting_of_ref": "indicator--b5a3e6f0-cf46-481e-bb18-8af5c2d4e768", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2062e9b9-eac4-4ec5-abe6-b3525973d2a3", "sighting_of_ref": "indicator--c1097a91-2093-4d8b-a4a5-f0d179d10fb8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7a9c3a-c75e-4610-ac07-ddd5d18f5810", "sighting_of_ref": "indicator--1f97c45c-08e2-4c43-b83e-5cfaeac46273", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d02e83-505e-477b-947d-1c474ee5ee7e", "sighting_of_ref": "indicator--aa6d3756-5847-4df2-904d-2e02cee5cbc1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48745a66-a265-4b22-acc3-a7ad48384e65", "sighting_of_ref": "indicator--796aab86-1ba6-4a22-8f71-e9ca4a927bc7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef1f1cb-54e8-4c20-8186-c6991befa2bd", "sighting_of_ref": "indicator--1acae0f3-7319-4eea-8f4f-83288e61126b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da899e3-95de-4ff8-b117-ab539d2dfb03", "sighting_of_ref": "indicator--a9ba6bd5-9261-4e93-a9d6-8f56036ac06c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8eb6e4-536c-43eb-8b5d-880a8610dc8a", "sighting_of_ref": "indicator--f3516e66-47f0-418b-94de-757fabd25685", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46627fa5-645b-4338-8c76-0a233f22a673", "sighting_of_ref": "indicator--a45c0e4c-d99f-4140-ae53-8d650818610c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffab122e-3820-4f8b-888b-3d95f1e0f6aa", "sighting_of_ref": "indicator--1e357b7c-fa2a-4a8a-870c-f57212734592", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8726968b-e008-44ef-9e11-5adbf23dac2a", "sighting_of_ref": "indicator--73c94317-faf2-46fd-bc8d-3b0e437053f5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84e26dc-dfe3-4b2c-8235-9a28948aabdc", "sighting_of_ref": "indicator--aa86605e-8f4c-42a4-95d7-499e30b43ef4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f0541a-398e-4f3e-ac88-98c47d10b0ee", "sighting_of_ref": "indicator--3f65b580-1049-476a-8864-a5bd167ff071", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fdf5c5-83fb-4033-90d0-e4e6f5f527ed", "sighting_of_ref": "indicator--3b70a9e6-ac5d-4503-983a-0091f5c703e3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a7bfd1-b1da-426e-a49b-057f38a2e29f", "sighting_of_ref": "indicator--691284cf-ab0e-4717-8bf8-6790933bf51e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab5d17e-b7bb-4163-a8eb-a990c61d9669", "sighting_of_ref": "indicator--67164a53-aadb-40d4-ae47-09fdef160198", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a427ca5f-11b4-4d11-a38e-fb95c6a0508b", "sighting_of_ref": "indicator--e5cb5df0-0274-4cb4-b90f-fe346429b830", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74f47a8-f20d-4124-a989-b0a4860f344a", "sighting_of_ref": "indicator--aa04314f-02f5-48da-b137-0f40124197b3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ddad69-4b03-44b9-a896-5c3c489030cc", "sighting_of_ref": "indicator--7d971489-78de-450a-b62e-249681b0f6b8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b83380e-5b08-49c6-9870-10e956e78dea", "sighting_of_ref": "indicator--995ca612-1d3e-4a5e-86b1-62b5faa1a0c0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387537a4-2ec9-4b4f-857f-a3a9c665a973", "sighting_of_ref": "indicator--35517104-ac65-43a6-beca-68d02ac3c3b9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e67ecc8-3fdf-449f-9f44-08f0235f721f", "sighting_of_ref": "indicator--8a0c0d9c-24b7-4036-9758-6ac64ef58398", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3d0edb-077c-4077-b1eb-1afcf8aad7e6", "sighting_of_ref": "indicator--5cabf244-23e6-461d-a2f5-08a8c8cf02fe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c2c9ad-d7e0-4c25-97bb-03193fb17b12", "sighting_of_ref": "indicator--03fa135e-3a83-4d98-9b82-1fbd70133499", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750fac4a-9e9e-4474-a8dc-39e3624f51b1", "sighting_of_ref": "indicator--d1f43300-2573-4615-98ea-b5732e53495a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f6cb15-be94-4e5d-8813-0554e2cd90af", "sighting_of_ref": "indicator--cc6b75c5-a44a-41f5-9973-d4bf460e10f9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf095fa1-b4a8-434d-82bb-46aee08b65f4", "sighting_of_ref": "indicator--4c6d3f17-948d-47d4-9249-c24cc5208f50", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d895fd86-43ae-479d-85d6-f57c7ef8c8bd", "sighting_of_ref": "indicator--62c029ed-f14d-403c-aacb-806ba671eb56", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0b1b19-8a58-464a-980a-b577ee81e404", "sighting_of_ref": "indicator--5f88f51f-8fac-4d6f-85e0-8fbe43a5a54c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0fb5a1-26ad-4e4b-a5b7-9e2e6a4223d0", "sighting_of_ref": "indicator--dde708dc-6b1c-46a7-98d7-afd02451d5c7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e47edfa-21f6-49fb-9c7b-9849c254adb5", "sighting_of_ref": "indicator--2dfa69d6-528f-4287-801b-ca4dcf42be0c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5282d7-6667-468b-9d47-b574c5226ce6", "sighting_of_ref": "indicator--6d652def-32d0-47f0-9ac1-3edd371e4da8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bdf781e-a018-4b04-9f11-78185d88fdca", "sighting_of_ref": "indicator--c830506f-1f7f-4ef4-8a2a-764c0295bbd4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16708a53-9480-43f2-8efe-e8325bd2ee0d", "sighting_of_ref": "indicator--c23817d8-ebf5-4985-bc02-b2f37e068cec", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a008622a-af55-45e6-ae05-303ab038f8e1", "sighting_of_ref": "indicator--387d938f-d64e-4099-b5f5-327966dc9796", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40c2b1e-11ce-4965-9ce2-e7f355c30202", "sighting_of_ref": "indicator--3d290566-9988-410e-9c91-dc64aced96e5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b277ab0c-e7e4-4c70-8d87-862e6fdd5ac6", "sighting_of_ref": "indicator--1e30fe02-eb97-41b2-82b1-0e07fc8b976a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee50eaae-d274-4e55-9c54-75666d7a9f7a", "sighting_of_ref": "indicator--109118b9-3bb6-45b0-8330-5b3204c11aa9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7eac079-a43e-40b4-a535-2e9a253addf7", "sighting_of_ref": "indicator--ed82d502-f480-401e-b404-2fd0b823e004", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46863f11-703b-4089-8c84-565c357eb8df", "sighting_of_ref": "indicator--43082bc7-e6f4-430d-8f31-f2c69bdb3a73", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59dd3d7e-f70a-407c-8a1a-0a19d81b5d4e", "sighting_of_ref": "indicator--22d92866-9e5a-44e6-8acf-5ef718cc5e7e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49947ee5-c0ed-4451-9f42-2e8ce07f169f", "sighting_of_ref": "indicator--0c5e853e-c27b-4adb-b469-cf138f44c60e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9222c775-89d6-46e9-ae61-f15f9c3524cd", "sighting_of_ref": "indicator--b372f1fd-153b-4bb4-b2e6-25b67f090029", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd6c11a-d26a-4746-ae0c-e49b556bfe32", "sighting_of_ref": "indicator--8ddc219c-9cc1-4bc0-9851-6ba204598cd9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340b6cec-082b-408d-8704-ed21ed3ea4c9", "sighting_of_ref": "indicator--ed9b7026-7046-4a10-aad8-e5d6317b19b3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2fd4b0-dc0d-4867-bd2f-efe1711b35f8", "sighting_of_ref": "indicator--33607715-6007-46ad-a0ab-5a7be22ed125", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757cd83b-5d21-4ee9-83a8-5b7d897cfd6c", "sighting_of_ref": "indicator--07f2f9d6-71a4-4548-b670-ea0f216bbab0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f86e96-3a71-46d7-804a-0a6f67af1600", "sighting_of_ref": "indicator--b28a38c1-7a69-4a49-8bdc-a660d3c3cae6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925d8036-d36f-428e-b876-020f6c4e7331", "sighting_of_ref": "indicator--9f4d4af9-8a46-4ae8-94ed-d0e1b72fd032", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fce83b9-7591-4af9-a1ac-da9e7a259c98", "sighting_of_ref": "indicator--42248e1e-bf12-45b2-9976-fc520f0354b9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf6d82e-5bb8-46d9-98f3-803bebb298f0", "sighting_of_ref": "indicator--f5e4ca0a-1c67-4983-a0be-8b3f24bf97c0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a08aa14-5524-4acf-9fed-e172ffaa5cd3", "sighting_of_ref": "indicator--8f82a2c9-5d3c-4b60-bda5-02dc022dffe4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a118f373-a116-409b-8cad-4d09a3f8c46a", "sighting_of_ref": "indicator--aad8c36b-3e21-4939-8303-223ea2f7217a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d253d5-a872-4ca0-adb6-2654fe04faba", "sighting_of_ref": "indicator--a895f37f-dd33-44ac-95df-112f4f5b6b9d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bf1a60-4689-4595-a996-5f916fad9cd8", "sighting_of_ref": "indicator--69968580-1855-4ec5-a984-8b222ce74f67", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8a9ca9-cc0a-46ed-9902-f1879720c023", "sighting_of_ref": "indicator--061047f2-697f-410f-8d34-82344ebdb872", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1161763d-f95d-4c1f-8fd6-c2eb4b4762f9", "sighting_of_ref": "indicator--f36c4750-c21c-4b3d-9adf-48ac8e6dbe88", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31577b4b-ce7f-4cf5-99c2-5939115ed244", "sighting_of_ref": "indicator--9e26652d-ffa9-4cfc-a906-858794cec246", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7cef48-e51d-4be2-8454-b1a235772713", "sighting_of_ref": "indicator--5f31e3bd-cf5e-43c0-a01f-89525b3dab91", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4555c3-d546-4327-b25c-234b263b2854", "sighting_of_ref": "indicator--eae22f2a-3354-4833-b377-3f766f624d74", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fd556f-415e-44ab-a5d7-c397c8155a06", "sighting_of_ref": "indicator--f6e11142-825f-44f1-90ed-e11213ad90d5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd46c6fd-fd67-459e-ba28-720662c91d85", "sighting_of_ref": "indicator--03add598-d3f4-432e-9a68-0f6abef0482e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e571609f-0f6c-41d0-837c-f83cde148e1b", "sighting_of_ref": "indicator--70e3978e-ce8d-4911-b0be-505bee78733c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda03ddb-7f63-450a-8d16-a8ed5d39bb66", "sighting_of_ref": "indicator--64f8cd83-5b23-4b21-9f39-9a4311374bf1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763cf795-90a6-4455-bcf3-892e609d84b0", "sighting_of_ref": "indicator--8196dfc7-bebb-447d-b262-99129a8a82c9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdeb8b6b-6bcd-49bd-b25b-2e9210d29a71", "sighting_of_ref": "indicator--7bf97d60-2974-4e77-afff-8412a03f049a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbd425c-871b-4d6a-b175-4a5fa8c34c87", "sighting_of_ref": "indicator--b9a01e62-11db-45d2-baf1-d5810d4b2541", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468e9507-cadf-4c2c-baa0-dab51e1e6d63", "sighting_of_ref": "indicator--798030cf-6bc5-43cd-ac7f-a4284d876aed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e183be-558e-4e67-bea4-021522ff7d37", "sighting_of_ref": "indicator--d3262abb-81c7-4920-8762-20409b9a03a2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f85b0c-7da8-43b5-9dbc-e473060a26ea", "sighting_of_ref": "indicator--61fc11a8-8f10-4c5e-a436-9ce299584980", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2f554b-2571-422f-bd70-06e618f5caff", "sighting_of_ref": "indicator--57255c00-c14d-4b3e-ad8a-e6f011af5786", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dcabd2c-5cdd-4e45-ba98-20302e9061b0", "sighting_of_ref": "indicator--813dba59-eec7-4859-a0cc-109c0c0776a6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcc7198-581c-43b8-b07f-ca97b107be26", "sighting_of_ref": "indicator--ca3cb76f-d0c6-405d-8830-08298e3803de", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220b7329-dc77-4d9b-8c3d-50eb21ecba45", "sighting_of_ref": "indicator--0fc712ee-3621-415b-89d0-e7d4d6619623", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e73928-b679-4390-8d7c-d47cc6487396", "sighting_of_ref": "indicator--865a5f72-1d89-40a7-8d21-bb5c716b5221", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a5e0be-1af8-4839-b799-84f575f99a3e", "sighting_of_ref": "indicator--b3c739f0-d97a-49b9-ab76-e3e9b76d850e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ffc561-1fe3-4954-ad29-90a83f3a9985", "sighting_of_ref": "indicator--d122aaa7-ee9b-44a2-8451-fc1e07a91d9b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2643edc2-09ca-4251-bc22-f3c2693c2bb5", "sighting_of_ref": "indicator--c75e27fc-a582-4a9a-b32b-d2c9ae3ed51b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7069e82-518e-41b0-8d6d-114a7da96f53", "sighting_of_ref": "indicator--acc7c65c-6d6a-46e5-874d-07aa21c0f76f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ce6ddf-7917-441e-b499-304cbaa5f891", "sighting_of_ref": "indicator--747e44f5-c49a-4fd5-99a0-4b0c7a478a2b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee13bc6-73a5-4b06-88c4-b023f6491dc7", "sighting_of_ref": "indicator--5d9529a7-29fd-4da7-9004-c96f694ecc18", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4ed3f2-2d64-4c9e-ad0b-81437927c105", "sighting_of_ref": "indicator--a762d245-38ed-4afe-aa02-9fd9a7dbac95", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981f4a78-f191-4f43-9c29-2c88eda16c1c", "sighting_of_ref": "indicator--86bc12a5-31c4-45ec-9cc8-78ffd1da62f2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab9fd59-60a3-4893-92df-dac7a2bae1c1", "sighting_of_ref": "indicator--a096e80b-4bb9-4870-a754-5238fe5bd9b8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7dc0293-0820-457e-b061-bf7ca3796d40", "sighting_of_ref": "indicator--1450cece-accb-4e69-a4b0-071a46fb0db4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77aaceac-1020-475b-a124-a2fbffc4cc27", "sighting_of_ref": "indicator--5307019d-15f6-40ce-ae39-0b6cb21ca945", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a284585-6192-4fc2-963b-ff56640a5b65", "sighting_of_ref": "indicator--0e57db1e-5a43-4f48-88e6-219b45be18bf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446ffd4d-6650-4e7f-b81f-f991c4854e51", "sighting_of_ref": "indicator--29f572e1-39f8-4990-84fe-23dcec2a3252", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9ba9af-9ab0-4362-a736-38a72d3122a4", "sighting_of_ref": "indicator--150f65f1-9e6c-49c5-aea3-74133daa3349", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c3b121-e6dd-430c-926f-f1963e394bdb", "sighting_of_ref": "indicator--8b38693b-76f7-4f8e-b1f8-6fb2198a81c0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb58bac9-d7c0-49dc-8bf3-62d597d141cd", "sighting_of_ref": "indicator--ee41667d-adb4-4221-b0e1-72f0887f52b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67f5e09-9379-4f20-901a-9d7256cd4102", "sighting_of_ref": "indicator--0e8d9809-398e-49d3-89f7-31c66dd63b01", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d9085e-b7df-4497-ac05-30142b27330e", "sighting_of_ref": "indicator--ca321942-fd8c-4c4b-971e-c91d45c8cd3c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b7439d-c16a-4125-a0eb-9c083d0dc876", "sighting_of_ref": "indicator--756b9938-267b-44b7-a072-7606bda293ec", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17935df4-99f8-45d4-a061-c49c4077909c", "sighting_of_ref": "indicator--a059ba63-103d-47ac-9326-c1309829a583", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af8fafa-2b2d-4d6d-8914-0d31a7126004", "sighting_of_ref": "indicator--5a21f99f-77ec-4773-99ea-2cb7acc1ca79", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03df49ff-6c5e-46f5-ab7a-d939242be66b", "sighting_of_ref": "indicator--829547c9-1bd4-45db-9e63-fc64c8465915", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb1a4e5-b651-4585-8deb-bf134ba64350", "sighting_of_ref": "indicator--829547c9-1bd4-45db-9e63-fc64c8465915", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9123938-d19e-4e47-818b-b033a0c64328", "sighting_of_ref": "indicator--829547c9-1bd4-45db-9e63-fc64c8465915", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014d01e5-e49e-40f2-8639-0ff12c5a0d8b", "sighting_of_ref": "indicator--463f2790-7b73-4ac7-915d-4136ef387a61", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae72d6b4-4d6d-4835-8ef0-c03f3e3db852", "sighting_of_ref": "indicator--463f2790-7b73-4ac7-915d-4136ef387a61", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641cd478-3b28-4710-8e0a-a6e853820139", "sighting_of_ref": "indicator--463f2790-7b73-4ac7-915d-4136ef387a61", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756eb43e-337b-42bb-b78c-9c91538c7d10", "sighting_of_ref": "indicator--5977eff2-fad2-4f68-823a-438899b9b3f1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb27ec3-d687-4f48-8781-9b1fa6735e9d", "sighting_of_ref": "indicator--c92d014f-3b44-4785-bcba-a09c9e6eec9a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbfbbff-e3a8-487b-af98-dd0b014517a6", "sighting_of_ref": "indicator--d21e09f4-52c4-43a4-bf4f-8db20273c049", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9259beba-56a4-42fa-a7bf-e121a93c521b", "sighting_of_ref": "indicator--83b9ce40-249d-495f-b048-2fe50cd17a4d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d29c5d5-688a-401d-8bf3-71f590968832", "sighting_of_ref": "indicator--a7ffddd5-c2e6-4950-90dc-99006012bc6a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40eeff49-f4f0-4741-b625-518bf279bf30", "sighting_of_ref": "indicator--fe954bd8-108a-4240-9853-e30f608740d6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797d4a2e-b5cd-45c6-aee9-6e7c2a6b8708", "sighting_of_ref": "indicator--de6d9774-f582-43ee-b1ed-ec9696ca4f78", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d946150-179b-4eed-a69f-9e30945eca33", "sighting_of_ref": "indicator--f1f32fdd-1b3a-41f1-b069-b91f858f1656", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e846b3e2-ad05-468c-92be-ed7db7e62aa4", "sighting_of_ref": "indicator--2ee15bc0-2285-4488-967c-7bbbafa7c083", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ea7830-f448-4b3d-83cb-288912ff40f6", "sighting_of_ref": "indicator--ff905356-9ac4-4413-bceb-290df1e3f1aa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55361b3-a8f6-4216-846a-45bc6b579674", "sighting_of_ref": "indicator--4bff1722-dedc-4b9a-8a9d-6f325690540a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64178fb-a541-45f3-9093-c361749b3fe9", "sighting_of_ref": "indicator--e32c8728-6c1b-481c-861b-91231e3b0c90", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0c8ed6-bac3-44da-9ba2-71e510fb2683", "sighting_of_ref": "indicator--1b5a9eb1-5215-4f9f-952c-79f1fd2f0c7e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d33064-edd1-477e-bf68-989f9c3a6340", "sighting_of_ref": "indicator--a2876dc3-a697-4541-a63d-078f7b3c8244", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399c366e-63d3-484c-8e47-63138572e9c2", "sighting_of_ref": "indicator--da37ed49-b1ef-49bc-a523-3fc7a2b1e09c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7bfb1c-b3cd-4ba5-946e-79db5df8a317", "sighting_of_ref": "indicator--1e2e8c22-c06e-4eeb-937f-99e8688a68b5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc09abbb-4b6d-4f21-b6ef-97b425076494", "sighting_of_ref": "indicator--12b8dcba-f9bc-482b-b696-b1bd1b08b166", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c81532a-be68-4143-a1ee-ce6d96430846", "sighting_of_ref": "indicator--6c839d84-0801-4775-bfea-80aa6f757927", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0a22d3-0998-46b5-a680-c89d2bfd9022", "sighting_of_ref": "indicator--a5516302-2a7a-463a-a59e-019c36c97e40", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718b1649-b0f3-4ccc-98f4-b079cbd36c00", "sighting_of_ref": "indicator--6e612833-158d-4589-90fc-17e4d8b782e6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961a2891-f9b0-4456-a144-3143c65036b3", "sighting_of_ref": "indicator--79723b8c-7182-4eb1-a9cc-23b52164223e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8dcb796-c671-46f7-b427-07aa6f1192f6", "sighting_of_ref": "indicator--785a4492-8986-43f7-bc08-43ae90f1013f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1aa84fd-2c3c-487f-afee-77c22c45e5b6", "sighting_of_ref": "indicator--e25448c3-4efa-4d82-a6a7-3d00ff368a3b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45574f2c-3cd9-480e-90b3-8bc82bf228ba", "sighting_of_ref": "indicator--78266c67-6e84-475b-a654-682eef186ca6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c56f28-b1f7-4a2e-9e5d-bde767182f32", "sighting_of_ref": "indicator--bb69505c-0557-4b6d-84ce-60bd319e4b57", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24d4514-39a0-4330-afe2-57f4c5da253f", "sighting_of_ref": "indicator--582b30f4-768a-4fda-ab8a-573d931b7646", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f947cf-d037-4168-8430-3e501cd0759d", "sighting_of_ref": "indicator--ef975db8-637b-4af3-acc5-11e2f88a4f3c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab6ee6d-eae5-4327-9119-ebaa58cd53dc", "sighting_of_ref": "indicator--0363c632-7deb-4f88-b530-fff08f1da497", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde34545-1132-4518-a08a-f5dd8fd0c482", "sighting_of_ref": "indicator--290b70a3-b1e6-45a7-b164-4f3c72415ec1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306f196b-fdea-484c-a03f-0645896e6435", "sighting_of_ref": "indicator--fe93799d-1a6c-4465-8c5f-c37907898568", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eae5481-977c-41e6-9fef-4b3aa0c5335f", "sighting_of_ref": "indicator--8004aeab-34e3-4604-a4b9-12edff8d00fb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7739a450-b8c9-408b-98da-58f5e934d1e9", "sighting_of_ref": "indicator--9b0122e4-3e05-4e54-b166-73727a2dd0aa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33a2276-1f4d-4b54-bb7b-5a3557a14613", "sighting_of_ref": "indicator--93862034-7219-44cc-8732-b6234f045746", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0588d4-75cf-48f0-92d5-0dc819b21815", "sighting_of_ref": "indicator--7ef61aa2-2551-4db2-aee2-ab7548a0abfe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfed7f0b-c936-4a87-a516-3c8f06b1bb73", "sighting_of_ref": "indicator--c2b7ff72-2465-4af1-9205-6c116b2d70a9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38df1d46-99e9-4ef8-8f09-136317343817", "sighting_of_ref": "indicator--f9f56f8a-2fa4-4ade-8246-768a433edd09", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52bea90e-452c-45fb-a92c-fd5c03e5971b", "sighting_of_ref": "indicator--ed833562-2346-46f9-b76b-0820480eb080", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470e8837-b979-4957-90a9-b55f4e204c80", "sighting_of_ref": "indicator--b3667dc0-594c-4faf-ac24-6649287b3e2a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e356af2-073f-4f29-8d6f-20c30e22b727", "sighting_of_ref": "indicator--86782012-1d1f-4962-8f4d-04f76f9bd374", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112086a8-3a1e-468c-bef2-998e182e3327", "sighting_of_ref": "indicator--6081e279-dfd8-4c1e-bf50-301a4a79cd11", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439b8e8e-d2bd-4827-b438-b14fb648eb92", "sighting_of_ref": "indicator--a9226511-0416-4763-9394-f8485c34acc5", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33b665e-579e-47a6-8d5f-861340e37641", "sighting_of_ref": "indicator--eefae943-91d2-4f2e-9dec-d9a17ba66334", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a94f06-76f3-4090-a200-186d355022bf", "sighting_of_ref": "indicator--f9cde042-db18-4c26-9b59-813255263878", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8308ed3-beb5-43fd-950e-72435f680091", "sighting_of_ref": "indicator--7fdde670-504d-4496-bbcc-83f5587af889", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b08e4b1-f9b0-4456-823a-7425cda8c689", "sighting_of_ref": "indicator--93566a67-f409-403a-a958-5df179731c06", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49610195-b515-4c8a-a360-5ea4782cfe48", "sighting_of_ref": "indicator--6a1b0340-4005-459f-a322-2e9858b955cb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc783a9-8ee2-4e40-bb84-0138221f6a50", "sighting_of_ref": "indicator--fa55aacf-f5cb-431d-ac8f-e05456c014aa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05ba719-7799-4130-b22f-0f701599cf40", "sighting_of_ref": "indicator--fa55aacf-f5cb-431d-ac8f-e05456c014aa", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5d5f51-d707-4e26-8586-fc224b195ef0", "sighting_of_ref": "indicator--c5904dc9-3dc7-4767-a662-09f449f311e3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfe293d-2866-43ee-8eed-d6d684de8dfd", "sighting_of_ref": "indicator--585d4500-760c-497f-96b1-4d33f701265a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6e5a45-2f30-4bd7-82d4-c4b93083e5df", "sighting_of_ref": "indicator--9b0592e5-56d4-46be-a65e-a18febe8aa23", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69cccbe-d40f-4136-a043-f56b9f63fb9f", "sighting_of_ref": "indicator--7ce8f240-6c66-448e-9562-0c3884bdfb06", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9dd270-f5eb-46f9-8415-0a897a037c9f", "sighting_of_ref": "indicator--7ce8f240-6c66-448e-9562-0c3884bdfb06", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12310fb-a617-4fd3-a2a7-adbc2daf9733", "sighting_of_ref": "indicator--7ce8f240-6c66-448e-9562-0c3884bdfb06", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54dff5bf-ca18-48e8-8eed-c76272c168d8", "sighting_of_ref": "indicator--fb451cfb-4dec-45fb-9f8a-7ed427e9f416", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297a7704-1463-4240-aad3-49ac0f1198c5", "sighting_of_ref": "indicator--fb451cfb-4dec-45fb-9f8a-7ed427e9f416", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10414b18-2dc3-48be-96b9-157ab575727c", "sighting_of_ref": "indicator--fb451cfb-4dec-45fb-9f8a-7ed427e9f416", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e059fce-a577-4c4b-ab17-588a2dace2d3", "sighting_of_ref": "indicator--85fb46cd-73e4-4798-afb1-e1b350be70dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3007e555-f0b8-4a62-848c-ab8437c2de2e", "sighting_of_ref": "indicator--87e5d8db-2b40-4e91-951e-ff5205fc569e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab5dd1eb-caa0-4091-b180-a72ea308f28d", "sighting_of_ref": "indicator--cd780b2e-6df6-4c8a-a48b-5bf2e3779571", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592d7fda-a5d6-4bd5-8086-3209b6183b31", "sighting_of_ref": "indicator--bd6b3b69-b4d8-4f4f-8f42-f68a30dbd3ba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab03b36e-db8b-49b2-b33b-e2673b390431", "sighting_of_ref": "indicator--ca1056e9-c70b-4dca-8538-49cb1735653f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d817f17-54d2-46cd-9bca-a6297add8631", "sighting_of_ref": "indicator--ca1056e9-c70b-4dca-8538-49cb1735653f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163e5604-0021-4dc6-a1df-d25983182bed", "sighting_of_ref": "indicator--38644faf-7168-4022-97e4-9aab4cc14dea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134171cc-bb5a-40d4-a0c3-09c5ebc24b0c", "sighting_of_ref": "indicator--6fe43eb5-8eb1-4d18-8b4a-0c622de89446", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f595934-6a1a-4a13-87c2-2df9154aab06", "sighting_of_ref": "indicator--5d1d22d0-f6b1-474b-92d2-ed347685a944", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051e2748-fdd1-4a10-8531-c7a8dc1cdd03", "sighting_of_ref": "indicator--e517379b-2c8e-4b7f-9f0a-f718d2741343", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd6fd22-ac25-4934-9748-90a2dbd2500d", "sighting_of_ref": "indicator--5f87e58b-e834-40d0-9f28-1a99be39dd2f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc9b3cb-09a6-4108-a5f7-d35ac0b4215b", "sighting_of_ref": "indicator--df5024e1-d575-430f-b9e3-abfe5b9af147", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3b91a1-67de-4e22-8667-5403670e8042", "sighting_of_ref": "indicator--df5024e1-d575-430f-b9e3-abfe5b9af147", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24312d2-189f-4063-ab8a-053a51a44879", "sighting_of_ref": "indicator--aa12921b-676b-4f93-a456-af4b37963377", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfcc0950-6aaf-4c6e-aa03-21c073482318", "sighting_of_ref": "indicator--22fbe02d-82e2-4f53-add2-e158276380a1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ba4005-8546-4939-930d-474df49ed07d", "sighting_of_ref": "indicator--22fbe02d-82e2-4f53-add2-e158276380a1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1c1789-f8ff-42fb-8ea8-fd095f29e16a", "sighting_of_ref": "indicator--22fbe02d-82e2-4f53-add2-e158276380a1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae4709c-b24f-42cf-9112-8053b56fa35d", "sighting_of_ref": "indicator--fefc022b-f11c-43cb-aafc-0463b6b7faa9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df74f417-1caa-44fd-bec8-b6bd8591441a", "sighting_of_ref": "indicator--8a3f4c41-dbfc-4090-8674-0e916467901b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75d7300-bf1e-4978-bb8f-5cb4cec23c3a", "sighting_of_ref": "indicator--cd800ca6-0399-48bb-aba4-e1bdfd312312", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cfba75b-c4ae-4c30-b34f-45663f32790c", "sighting_of_ref": "indicator--c31bd3a5-35c0-4cc0-a2f1-147e6e26360f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e269da-12a6-436e-9989-fd7dca1a267c", "sighting_of_ref": "indicator--c29ccd9a-c46b-4b73-bc63-3c419b4f2ef7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e75bbf-610b-49a1-88b1-80f3d45ad241", "sighting_of_ref": "indicator--3c1bc182-bf33-4149-8a7d-007a71be85da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f60e48-7099-4308-bab1-6a7f39a95dba", "sighting_of_ref": "indicator--2bb1878f-9500-42f1-8465-da243816cd81", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0996f11a-0ef1-49ec-a7b6-7d511590d278", "sighting_of_ref": "indicator--1bf8be68-33df-4050-b9d1-f0eb47361992", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6a4329-c18d-4c0d-b6e4-4a5d3b977e75", "sighting_of_ref": "indicator--a75f6023-d5f4-48e4-92ce-be1301a4efc5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1ff42b-9346-4b6a-ac09-44800521b62b", "sighting_of_ref": "indicator--5e5c5733-b42b-4cad-ae2c-16499c77fe91", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02965fda-99ca-40f1-afb3-1724ba41fc4c", "sighting_of_ref": "indicator--5e5c5733-b42b-4cad-ae2c-16499c77fe91", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d54be0e-53be-49fd-bc69-abcd8b99287b", "sighting_of_ref": "indicator--37140848-6699-4753-b16d-e7b6d9caa66d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522e3fc8-3a19-486d-9f13-a094fbc8e67c", "sighting_of_ref": "indicator--37140848-6699-4753-b16d-e7b6d9caa66d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff9ffb1-db29-420e-83d6-ff70a76a2681", "sighting_of_ref": "indicator--a40e3324-4370-41a1-91b0-d361ad67d357", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f9f43e-0059-41c8-88e7-5ec0b40315e7", "sighting_of_ref": "indicator--a40e3324-4370-41a1-91b0-d361ad67d357", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f100f591-0bcb-46d2-ab61-e3f7bbc1b2bc", "sighting_of_ref": "indicator--a40e3324-4370-41a1-91b0-d361ad67d357", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b24660-130d-416d-884c-3a40d59c90e0", "sighting_of_ref": "indicator--7f22c32f-3618-40ab-bdf0-9055effca1f3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6f6608-d338-477e-936c-659aef3c7271", "sighting_of_ref": "indicator--8e63647c-f9eb-4d92-97e1-003b2b98249e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93293309-d9f3-49f6-a38c-aab00ab2fb51", "sighting_of_ref": "indicator--a57d32da-e5e3-4bef-b927-7f5cfd945f38", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3859452-83fa-4742-b847-d07675329020", "sighting_of_ref": "indicator--9d16d382-73a8-46a3-a21c-e45cb604aa03", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060c0917-c8bf-452a-8b99-0bd34b2d379f", "sighting_of_ref": "indicator--b0bfd30d-abd8-493c-b6bb-93a912241164", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b6cf51-7393-4570-943b-be5bb963da4c", "sighting_of_ref": "indicator--282c8ecc-b446-4b9c-b88e-856056ab8b97", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ff5e90-3a6b-4a99-9111-fc07b608c623", "sighting_of_ref": "indicator--13918cdc-506c-4bc6-bd59-d66ee39312ba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb1fac9-df96-4663-bab0-c9d77f762258", "sighting_of_ref": "indicator--eb6ab51a-42bf-4e8e-9a97-b6c8dd113b7e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907529c6-124f-41d7-be9e-aa41b2113ae3", "sighting_of_ref": "indicator--ebf73c3a-c723-482e-beb9-ae60cbfb521d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d487eca-b80f-486b-8054-7250875e684e", "sighting_of_ref": "indicator--6dc9999f-0a5f-4392-8848-7002a6219b16", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929be652-c9d5-4e81-b8a8-3292c072d9df", "sighting_of_ref": "indicator--5ae241c2-122a-4822-a738-e323e6786d3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f03f4c-f9d1-4677-a94a-4baf9d53e270", "sighting_of_ref": "indicator--839f540d-d358-4871-83e1-979d39cda26f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0296034-c6c9-46bc-ba7e-afc5e3e8fc76", "sighting_of_ref": "indicator--e4f1efea-e859-404b-832b-5cf008239ae4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ee47b5-e66e-44a1-b3ce-3aa1bec8f112", "sighting_of_ref": "indicator--a85f3931-8378-4f99-ab7b-87afd55d5ee9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee95eaf7-9956-4970-9821-d80a0faf4d66", "sighting_of_ref": "indicator--a85f3931-8378-4f99-ab7b-87afd55d5ee9", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5455ac-85f8-46c0-9190-abacc5e5c950", "sighting_of_ref": "indicator--f69a4dae-a1f3-4765-a5e2-d20c092c41ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c293e6a2-2e2a-4cf5-b906-b7d08f4a70b6", "sighting_of_ref": "indicator--effa69cf-dcd3-4d49-88a8-480a0b129b72", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09122b59-dd9d-4a60-8fed-ad09be9ac5b7", "sighting_of_ref": "indicator--c7d9fb95-0b77-4c89-ac78-197a8a976738", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d57ee4-919b-4c35-8635-edf5aae1385a", "sighting_of_ref": "indicator--f4e74c64-235b-4584-b433-62e4995bdfa7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7724902d-ccc8-4a12-b3de-cb62358d3424", "sighting_of_ref": "indicator--7ab81e13-a14a-419e-acba-90894ede0b35", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4cc870-5b40-421d-9bb1-bfaf1dbce7c0", "sighting_of_ref": "indicator--5c8e131a-b910-4b4d-a26e-51b25bf3f59d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75f56dd-849d-4552-9b6b-468e89d811fe", "sighting_of_ref": "indicator--71e1e481-bc2f-441e-af24-a2e089e21149", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ceac942-2354-4cf0-b07f-1971979deb6f", "sighting_of_ref": "indicator--127851a2-ddfd-4041-9c75-4bc4aa468f4b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0270862f-037c-4fc0-bea8-9304ad8ece46", "sighting_of_ref": "indicator--127851a2-ddfd-4041-9c75-4bc4aa468f4b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df23ef57-4847-4d6b-b85c-5c986a528f9e", "sighting_of_ref": "indicator--127851a2-ddfd-4041-9c75-4bc4aa468f4b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60dab2dd-1bbe-411f-87e2-7f4fe166229a", "sighting_of_ref": "indicator--c5eecc96-2853-4e93-b68c-9ea6f09c7eac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55dcebfd-d4aa-434c-a7a4-123002ea5b5d", "sighting_of_ref": "indicator--88aa9196-4515-4b47-ac9a-32e0b27c1675", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6ce997-c2eb-4c28-af90-e9f8d9c34bd8", "sighting_of_ref": "indicator--c50e2ef2-bec2-4e23-957b-07e758627ad0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7790160c-0613-43c5-9179-e28afec9678f", "sighting_of_ref": "indicator--6e38a2b3-7cb9-4b57-b9cf-bdf407528d02", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e348fbf8-046f-4758-92bd-05d6e031432d", "sighting_of_ref": "indicator--8f9aeadd-1ac0-4409-8871-66e7afd8f10b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0161e1c-f5dd-4a2a-a306-4d0b9383eed3", "sighting_of_ref": "indicator--3782dec7-4162-4667-bffe-326cbf0baf69", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc2df85-617f-4e3e-9bab-24c594c5b70f", "sighting_of_ref": "indicator--d337cd1f-f53a-4e96-8e8a-c7512a9efd60", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d63c18-a6f5-4ea6-8f0a-d808de0f31ea", "sighting_of_ref": "indicator--693747a0-362f-4c33-bfeb-a514c00dd510", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde425ac-ceb9-4fe6-ad5b-995247d81748", "sighting_of_ref": "indicator--2950bf0a-379e-4c38-ae88-5ada8e505af8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acef28af-2553-4284-b731-d74a4ac31218", "sighting_of_ref": "indicator--27bce278-8ca0-4694-bd25-a34ec25eb905", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e72112-3308-4102-b3b7-dedd9bf6b546", "sighting_of_ref": "indicator--f05bed82-0fcc-4078-91d7-4a0a836d76e5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7be98b-5891-432c-8e9a-752951f98d6c", "sighting_of_ref": "indicator--ca75eb55-7d19-481b-a32c-0d3d0c658d1c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a85602e-835f-4896-8eee-c79dfacd9476", "sighting_of_ref": "indicator--cfa9da3e-1cf3-4b35-ae26-5378270aeacb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275ce502-9480-41b5-826d-34844ad750a2", "sighting_of_ref": "indicator--a10d85eb-8f7a-4d0c-8e56-02814da1bae5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1f0dcd-b382-4323-b086-843d30db8599", "sighting_of_ref": "indicator--e7ee4c1a-1bcd-45a1-872c-89f585d25d5e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e72dc7-fed8-4f12-aaf6-1687c572ebc2", "sighting_of_ref": "indicator--2d71d48e-a613-43bb-aa8b-f05dd8d90f15", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c646c3-3941-4e18-84cd-c299ee7dcc2f", "sighting_of_ref": "indicator--b81911a9-4457-4c68-9121-c033c93c5c5b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8523f7e4-be43-4115-9dbf-ce6d433f03d8", "sighting_of_ref": "indicator--f67f7515-1d55-4fa5-8fd3-e3830999cc8b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66aeef3-233d-4b05-9225-f60d53e338cf", "sighting_of_ref": "indicator--6e123b61-45f9-4312-a9f2-5c52b2fe55a6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43854873-42f3-4450-8b7a-82538f94ebdc", "sighting_of_ref": "indicator--a7882f85-27b3-41a1-9a89-935ece6ea2f6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c111f724-8aad-4245-8ae2-5cbae2bfe474", "sighting_of_ref": "indicator--6e84b28b-ca9e-47d1-adf0-9074c6c76de1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461a0926-a2ff-4186-bb4d-96465985f51a", "sighting_of_ref": "indicator--7be80ce9-9e1d-43a5-866c-25c570c8336d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35953b2-bb2a-4bc6-a3f2-d8c6b21dad97", "sighting_of_ref": "indicator--338ff113-5e7d-4d66-8026-6e33685a1233", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8dd609-c3d1-4ae7-8282-c1f663640280", "sighting_of_ref": "indicator--723a653b-0aa4-4277-b206-014c8503a6f9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d910b1a-7819-4700-b8a6-be7d451df1b7", "sighting_of_ref": "indicator--b8156654-03c0-45e7-b1d5-96553e42d2d0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a11915e-d383-4de0-a1fc-6b8fbf50c5d9", "sighting_of_ref": "indicator--c5de30bd-cf51-489b-a3ca-07977df6b8b4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ba8863-6e50-4826-93b8-f6ca063495a1", "sighting_of_ref": "indicator--198d0687-af73-465c-bb04-b2a5481ab837", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86d53d7-7dc1-4a52-9a01-fa20fc6606bf", "sighting_of_ref": "indicator--724c6636-d0c7-4fab-8615-098dec71ec08", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d2fdc1-ed77-4aff-a894-8686d213bd3e", "sighting_of_ref": "indicator--4909ca99-ce0f-464f-ac0f-33df4432acbf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b744f6-c60b-465f-9d12-76e1baf35ff9", "sighting_of_ref": "indicator--2b6f862b-a94e-41f6-a0e4-8790a1c1db7f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222ac97f-7c82-4783-9e1e-3273ea5fcf93", "sighting_of_ref": "indicator--23237ed5-5f38-4774-b8f6-c15f10745ae6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768f2049-c164-4e4d-aee6-8ea26cb92f46", "sighting_of_ref": "indicator--a2c24383-2b26-43be-a301-d85923e3cceb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ebc1d9-c8f5-484f-892d-d35c75005e76", "sighting_of_ref": "indicator--659049ed-5ee9-444b-a90f-c9c0ad1f3d4d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbaa3846-a09f-4910-bb3b-98573826eb2f", "sighting_of_ref": "indicator--e978e97b-978c-4a9d-a2fa-d4d8161a512a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ebc4da-8c01-4d52-8628-41dd3bd323d6", "sighting_of_ref": "indicator--0d442568-5cbe-4e3e-806e-a9e0217cf723", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356f35d0-9394-4288-b560-ecf0ec18ed94", "sighting_of_ref": "indicator--1e4bc622-e276-4226-8ab4-c8550dcc4aa0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2d86a1-1d69-4003-9e3c-69b7ddb11ecb", "sighting_of_ref": "indicator--912c2c6b-4b69-4331-baed-46a0d80d1c98", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d40527-d6a6-496b-8841-29ca9208108c", "sighting_of_ref": "indicator--6871aafa-8d4a-4e29-8a55-7189b663a860", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61a1e6d-6fd0-42a6-8622-38871a3868a6", "sighting_of_ref": "indicator--f013c7f5-0c1b-4aa2-b909-396fa2308f8c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ffd418-df10-4eaf-939f-51cf708028a3", "sighting_of_ref": "indicator--b74a341e-d521-4773-a6d9-71299bb6446c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9db25f3-0c12-4304-9605-93a9e35abfaa", "sighting_of_ref": "indicator--125ffa8c-74e7-4048-b819-a7597452e303", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e9af5c-5d9b-4c1a-be4a-c0a5320beea7", "sighting_of_ref": "indicator--c1e16947-5750-48e8-9492-92db69ac0212", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f450117d-c4e5-43f8-810a-99d6be40f005", "sighting_of_ref": "indicator--798c8160-822c-47b9-9043-eed8c8a5d628", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33cb6636-2f37-442a-8980-ce5d85dfd592", "sighting_of_ref": "indicator--eb648c1c-e613-437b-a32e-d096e4402195", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b91ba49-e6f6-4895-afa7-ba2857a89568", "sighting_of_ref": "indicator--8f2f06f3-41c8-4131-ac90-2c243e5c1d6f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe1f88c-44f4-45c7-ab6a-32b6d27500d2", "sighting_of_ref": "indicator--8c8bf1fd-3d7f-4d0c-ba38-db06d4ca5f59", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cce18e-fc5d-4b99-8a38-49853a2bfe57", "sighting_of_ref": "indicator--f1ec2fc3-8e89-44b1-9cb9-acf56e3fd500", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b236a93-6c1b-48a9-9afc-891d38de4be4", "sighting_of_ref": "indicator--6e54d83f-3875-4fda-bc92-f7b041a2136a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6730b4-ec59-4fda-8d4d-b53946a02b65", "sighting_of_ref": "indicator--7b184ef6-ea76-4856-958f-16c135471fd9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6960a4-50a4-44e9-be13-36fd6d1e3132", "sighting_of_ref": "indicator--261991e3-ca7b-4668-8950-26e9b45080fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb22de0f-5310-4245-aa81-fce8577932b3", "sighting_of_ref": "indicator--37ac77d6-13bf-40ae-be45-74eb6f46bcee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe416ea6-7f0b-4ec0-bd70-9a7d3aa19a98", "sighting_of_ref": "indicator--e8a88f53-62df-4c87-88b8-9a0bd5c0131a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40234b95-92b8-4f41-b4e8-8b842693c827", "sighting_of_ref": "indicator--438022ed-66ea-4815-b98f-9e4c9331d0a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5758e5fc-cb15-421c-8788-548b6489a856", "sighting_of_ref": "indicator--a8e4e298-d59e-45d6-bd30-acd200b50dbf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b29bfb-064a-46af-bbf6-c57a9e3a8675", "sighting_of_ref": "indicator--76deaaec-dea2-4e6f-8b5f-1668396f8527", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842d7840-9255-4620-bf90-a41a2021285f", "sighting_of_ref": "indicator--bb2831d3-6b81-4b66-9a51-754aabdd5da4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782baeef-dea6-4a4d-a763-55b47bd19374", "sighting_of_ref": "indicator--467b99d9-10d2-4a1f-b727-d5b0b8f352df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32537c15-ee32-4ff9-85b1-7e85ed213370", "sighting_of_ref": "indicator--52ed735a-310f-4494-a21a-81611754ebd3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b012b18-b3e6-4464-bc9f-2e27eca0cbd1", "sighting_of_ref": "indicator--d00aae0d-8641-4bd4-9a42-22da07030629", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b71910-ff6f-4d2a-b10b-8d7487aedeef", "sighting_of_ref": "indicator--33b6d497-bf42-4aa1-8c99-efa8f8cecfee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f677266-ff06-484b-9d00-91bc2557ec5d", "sighting_of_ref": "indicator--11a1a3d7-a6bc-46ef-8fe9-f8ddedfb8ea9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38840748-0144-4b42-9d93-07ef59a64e9a", "sighting_of_ref": "indicator--eb67382e-8918-46cd-a734-2243a9f0e229", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d04101-26ee-4dfc-b673-f2329736461e", "sighting_of_ref": "indicator--6ad59d23-795f-4b3b-938e-6ccd56eebc85", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418d5657-3f16-434b-9c59-9941516a922f", "sighting_of_ref": "indicator--3633d57a-dc8c-4af2-b62b-8e8f951e7005", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68d373e-e80b-41b8-8290-64cf2c32c7db", "sighting_of_ref": "indicator--6ac5d342-b679-4bff-a0c5-32c548c37018", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47c3a88-6b6d-4df1-9b62-0d9633b36959", "sighting_of_ref": "indicator--9ad3f74f-bca6-4f7c-ae3a-e1085a8b98f3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b77655f-3aa1-4f5b-8484-0d839aa53d1b", "sighting_of_ref": "indicator--2cefca30-9ea5-43b5-8d9b-def0bf3a9f3e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33036641-a455-4768-a37c-760b3e8bed9d", "sighting_of_ref": "indicator--2cefca30-9ea5-43b5-8d9b-def0bf3a9f3e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862019b7-42f8-470e-b8de-b9eb7666a18b", "sighting_of_ref": "indicator--357b1a72-6c74-4213-b19e-25158e5c4c83", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70557707-cebf-47cf-a2e2-7e56040ff502", "sighting_of_ref": "indicator--3ae7813b-f658-4bea-a914-63bed68905be", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27febe70-612c-4d7f-87eb-8aa368d90183", "sighting_of_ref": "indicator--58c058e2-9de8-437e-8842-3390f972c05c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c81d3b5-eb08-4b6c-91b9-a0f70a09724a", "sighting_of_ref": "indicator--f5f9d955-2f7c-4fb7-9365-6bd14666b79d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8287b2fe-6c19-4096-b0e5-0af1d35393c0", "sighting_of_ref": "indicator--fa09935e-d8b3-40f7-863c-aab92e1fc202", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9e0b1d-7e2b-4d54-b7c6-5197d09ed845", "sighting_of_ref": "indicator--6f2fc21d-e033-426a-8f43-e2f474b9eff4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5741c51e-03a0-4c3a-b905-f6d796577256", "sighting_of_ref": "indicator--4979b49b-805e-42eb-8be0-df89d022dd1c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643cd22f-4dc7-4857-92c5-12b4df87053e", "sighting_of_ref": "indicator--f64791be-1b77-4c10-b73b-6916d89bfb41", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb8f90e-76ef-436f-bb37-5524976b9cc4", "sighting_of_ref": "indicator--fd374c97-71ad-4a47-9d81-2780c6a74d81", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719a7a19-fe08-4c18-b78a-15427e36dc8a", "sighting_of_ref": "indicator--61971c44-0189-4947-a006-fb656821fe83", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9ec002-7262-49a0-995c-1d6fcc1d963b", "sighting_of_ref": "indicator--170dc00f-93e0-46fa-9115-aaa2b44ffb70", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19150d41-d6dd-43f7-b753-35291c36fd62", "sighting_of_ref": "indicator--4bf57985-7b66-40b5-873e-5db4c4b6c83e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee632606-68a5-4e35-9429-523c27b44430", "sighting_of_ref": "indicator--2c2adda6-de53-4b93-9a4f-3c1379af9076", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c37a82-c130-49f4-a997-c55ecd870d71", "sighting_of_ref": "indicator--d145470a-a5f2-45e4-8e10-a045635974e8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ddeb1c-c1e2-4562-aab5-b9581b8c1b67", "sighting_of_ref": "indicator--c073f6f3-a69a-4a99-898a-37507c4fddaa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3fb38b-44b6-4412-a3b4-584e41ab65b6", "sighting_of_ref": "indicator--5ae993de-1d16-43e9-b174-b1a46d67058b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49e4f54-34ec-4cf0-a1fa-1b0b6641796c", "sighting_of_ref": "indicator--ac2ed324-fd89-45b0-bccc-3b22a0fd931b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849dfdf9-48a2-4b46-a674-8a5710ef8764", "sighting_of_ref": "indicator--da79d12c-766c-4f5b-9bba-04aab42a17d3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a25008-655b-42e5-99bb-79938ebb38a8", "sighting_of_ref": "indicator--6ba17bd3-ae76-466c-ab1f-83c3dc9051e2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dcb8c1d-eb34-45c8-ade7-b91bda52ff55", "sighting_of_ref": "indicator--e8fd263a-2689-4b0b-8d06-119992167524", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d872e973-6b1e-4d00-8af5-06a40235f805", "sighting_of_ref": "indicator--f9f23758-0665-4c18-97f6-0748662f3159", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5caad8d7-7a77-4d44-9f01-d0f68da31785", "sighting_of_ref": "indicator--e2c4f5a8-bca5-422a-813f-d31ab11fa357", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3965050d-a8e8-4608-b746-e8f93497f060", "sighting_of_ref": "indicator--2c179595-17f0-4058-a66c-a27f284e8a35", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f5b1ed-9dd1-477b-a383-963edc3bf03e", "sighting_of_ref": "indicator--d23951d3-6ef6-493f-ab65-2532e7cd9db7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c1f4ac-3ade-471c-b11f-e261abe9f89b", "sighting_of_ref": "indicator--004b8784-a69d-49d8-872c-9b65c8a2794c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a309929-d9be-401a-b95e-4e37db1cea20", "sighting_of_ref": "indicator--f6589cda-9ea8-4a83-859a-de03665aabc1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6719ffbd-73db-4eb5-b85b-e350e29c2d58", "sighting_of_ref": "indicator--46a5d296-1f18-4b9b-bb15-f3b5cdc24f39", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbdbc04-3d22-47a0-a7d1-7221c70a8bd3", "sighting_of_ref": "indicator--d3d15cef-2663-4e84-ae2d-d0b6a43ad82d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d55b70f-66f8-4cfb-8ed6-f6e3cec4dfe3", "sighting_of_ref": "indicator--95fdce6a-1fdd-4517-93ba-ebcd8d700bec", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91fcfde6-6b8a-49f1-80da-ef38a5ec00fa", "sighting_of_ref": "indicator--41c8b4ea-46a6-4a75-9f39-8226e9e0811a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd74009-0ada-441e-8b01-13a712930804", "sighting_of_ref": "indicator--13720424-90aa-454c-a80a-16a9f849c622", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22d54f3-464f-40b2-90c2-a94d629e8df5", "sighting_of_ref": "indicator--60a47f23-0d30-4493-9416-7916ec75b085", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3341efb-0726-4c35-8ca5-391126ff778f", "sighting_of_ref": "indicator--7f71e4d1-b20a-45a1-8785-463035e32c02", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce1299f-184e-4dd9-a55a-907aae76f815", "sighting_of_ref": "indicator--8187f3c2-1816-4106-8a62-f850a24b73a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abfcadb-3415-44db-afdd-5d77ee5609f1", "sighting_of_ref": "indicator--997ab689-bdea-43df-956f-13bdbc975b06", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44e25c9-ea59-48c5-b22f-521338e07b18", "sighting_of_ref": "indicator--8afe6113-0d61-4c49-a0b5-3a1c0a1a0b47", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e18de1-aafc-4331-9674-49e7d36e53d5", "sighting_of_ref": "indicator--c32ceb4c-0484-4da7-9ca3-35498f3514a9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1da339-4f45-4c9f-9065-13c65c114de2", "sighting_of_ref": "indicator--74dee308-4d8a-4c70-9fa7-6ddc61b0b1be", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0857a9bb-5b37-46d8-b7d7-3f3fd6c2307f", "sighting_of_ref": "indicator--3995b5e8-07b2-4df5-9e54-eac98d7e8a44", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c486786-c54f-499b-b368-93fe44a6b559", "sighting_of_ref": "indicator--78a95d15-3b31-439c-9e4a-a3caa1629cc8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb8440d-d6cc-4e47-b5ee-eb017f6c8680", "sighting_of_ref": "indicator--860d5320-aad5-444a-a82c-0e69a1c4b1e9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e295f1-a369-48e9-b28a-1b1b8f95c2bf", "sighting_of_ref": "indicator--e37bbe36-9a68-4a7f-8551-88c6df0326f2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a477e40d-92bf-4305-91c2-9c665670cc4c", "sighting_of_ref": "indicator--53130bdc-afbb-412d-8c97-055c8e0d197f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65134248-a86e-4f0b-88d2-78cd2aea7836", "sighting_of_ref": "indicator--3e828802-ddd8-4141-b65b-e2873162aa65", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32480371-0641-44f6-8d10-3f01438de8ec", "sighting_of_ref": "indicator--415b367b-ae7e-4651-8c9a-225668f207af", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a853d81-d919-4ca5-a114-03120008ee71", "sighting_of_ref": "indicator--a099e6e7-419a-440f-9eeb-abdf5af21b7f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f38206d-bc75-4782-a0b7-5f2502d5d90e", "sighting_of_ref": "indicator--f8428510-3847-42f0-9740-39070c6b45ba", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec49bafa-4af6-412d-8141-312172387352", "sighting_of_ref": "indicator--1a906060-6f7b-4b6f-8fed-72a02aff0400", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98871722-6b3b-47f2-ae62-43e82ab73e88", "sighting_of_ref": "indicator--9e736598-7b4e-4ddc-8856-099e9e8afc55", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9f850f-0df2-4456-a51c-79b764948713", "sighting_of_ref": "indicator--23df29e5-b182-4acd-a987-2bc758973e06", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2aaccd-0715-42b5-8cc1-7535454141f6", "sighting_of_ref": "indicator--4add5573-186b-4f15-a2dd-9b67f7773eef", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fcfdfc-0bec-4dff-8542-14d3a5d78ad6", "sighting_of_ref": "indicator--9461d66a-514a-4605-95f5-b9f8319afacb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970892ab-0c2f-42e6-a364-0159f1a75ccf", "sighting_of_ref": "indicator--018f27c8-8fcb-449c-96e9-bec5c1bb66db", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b654dd-5fbd-41f5-832a-4a52a5b5f9ae", "sighting_of_ref": "indicator--cb880c90-acaa-4b37-8be1-d96f00e48570", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f40f8b-0659-45ed-be08-dac8f3b88d0f", "sighting_of_ref": "indicator--2e8b23c7-65be-46fc-bced-2262678a0708", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46166481-59d0-4857-b5c3-47ac36cc6e43", "sighting_of_ref": "indicator--6aeb11ac-3df8-430c-a62a-a4db4b4e096a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c890140-c742-46d6-bfd2-24ac2a71e9b1", "sighting_of_ref": "indicator--3dcd1555-dafa-4788-b03c-0c3f029c9295", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3018643b-0a4d-4a28-ad37-6524ac69ea68", "sighting_of_ref": "indicator--f7d501bc-d80e-42f6-bd49-5fccb8db4294", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6905becb-c8b0-423f-8f98-37b00a57a8bf", "sighting_of_ref": "indicator--9d9381f7-f847-4444-b3c8-9407fae0daa7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b31720-1931-479b-8e63-3986b7c01eaf", "sighting_of_ref": "indicator--45d77c67-5740-40ca-a6b2-f4dc03b4b555", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc2ff34-05c7-431b-8792-77c49d3d02bd", "sighting_of_ref": "indicator--a0b7ba65-55be-430a-af59-b53f17dbac3f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af14e65-0b33-4be7-8963-379eaca69bb8", "sighting_of_ref": "indicator--caa30b58-6db3-4af9-90ad-3d2a74baf347", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6423775-9b40-4e96-b0e1-e8a68cb6d462", "sighting_of_ref": "indicator--408d5e35-2d1d-4b0a-bfc9-e2082ffd9eed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d57af62-58b3-4926-ba6f-02d0e8e506a8", "sighting_of_ref": "indicator--01facca4-930a-4d80-a316-d65c8d81e0a0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96e136d-659d-4ebf-a06d-68e52a4719eb", "sighting_of_ref": "indicator--e6f55c18-6914-4443-aee4-63bf8760e739", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884a1a11-de39-47da-bb1b-199c0fd0e932", "sighting_of_ref": "indicator--4d81077c-b9b4-45de-a082-0cfa95e1a5b9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e01850-9b4a-48c0-b141-9ebabb22a72b", "sighting_of_ref": "indicator--561f958a-6862-47ad-9abf-66e17ed5c8f5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63052c3-5408-4b28-b1cd-ed05ddae6499", "sighting_of_ref": "indicator--8f192ddf-36b2-4c85-b0c4-91128264d836", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e48c76-9f75-49e8-9e00-cad1537c83d9", "sighting_of_ref": "indicator--a6956985-5039-42d9-a42a-813521dc591e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ba0f62-2ffc-4e55-ace1-7d8c503aea11", "sighting_of_ref": "indicator--b25c06f5-1051-4513-aef0-ef8b506218ab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37631c89-2ffe-4adc-aac0-f56cc189c675", "sighting_of_ref": "indicator--ad2a3d60-dc27-41ef-aaa7-e097d94ec9a2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50d6a21-4d72-4603-ac8e-531e70f46181", "sighting_of_ref": "indicator--75835cc6-372f-4320-bfc6-bb0c2ebf96fa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ff0230-e7aa-4548-b9f8-508c2f0efe89", "sighting_of_ref": "indicator--17f3ddc2-f288-4397-a58d-3bc1c9c9fd8c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30992d56-371d-4f27-b1f4-10487afa8d38", "sighting_of_ref": "indicator--111553c3-c165-40c0-b4c3-db698f35cc99", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9dea8c-6b17-4742-86a0-b26889c044c7", "sighting_of_ref": "indicator--d7313f38-ee94-4b67-a5c5-f8431060491f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c389f8-241c-4df1-8e1b-f189a7384891", "sighting_of_ref": "indicator--9bbe4986-d4ff-4aba-a093-2e4aa686bfa2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebaf87f-d6c0-486e-a1b3-aed854b1f0e4", "sighting_of_ref": "indicator--056cc718-2bba-4b6b-96d6-565136b8ac97", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb967a2-5155-4ced-a395-ba1b1b70710c", "sighting_of_ref": "indicator--23a88c16-cd24-4b92-831f-334c7924b291", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b876253d-f40d-4c4d-8611-d9619ce79a37", "sighting_of_ref": "indicator--7c2f29a5-4a7c-4a08-a15d-b6387e814759", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffaafae4-16ed-4ad8-8701-f6e4c474de7d", "sighting_of_ref": "indicator--0d99352a-b7d0-4623-a9ac-26849984f6fb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95b7f4c-3cc7-4f08-8123-2b59efa232b2", "sighting_of_ref": "indicator--17b2ca3c-b35d-4ec6-a2b2-8374f99d13fd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03baa340-5cfc-401d-b301-e63e99ea34dd", "sighting_of_ref": "indicator--539f71da-e530-40d0-b269-15c02bafd14a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9046619-e03e-42cd-8650-09355a6f08d3", "sighting_of_ref": "indicator--f41d0103-5ac6-47e0-bfa4-3be367105e68", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599edfa4-68d7-47e3-87ac-3ae6ce4d3a9e", "sighting_of_ref": "indicator--278e864d-b9ee-4da3-9a11-e82638c3263c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f44d4e-61cd-49d1-b36e-545e487709f0", "sighting_of_ref": "indicator--c8a3c5d4-7ca4-4ed2-8af8-0295b7f0ef0f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d319903-9253-410f-9852-b65ac1f22513", "sighting_of_ref": "indicator--3dc5bf5a-d441-4efa-99c6-05298a3a2a04", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4252078f-6d2b-477a-8d96-36573619493d", "sighting_of_ref": "indicator--21bd1abc-1960-4b31-89b7-84424de8e84f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56aaadd2-6185-4027-a36f-f7e10c4e9a60", "sighting_of_ref": "indicator--205af7ce-9ec4-416c-af33-37b6332b1f8f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece973f3-fa0e-4ba4-a140-59affa30c29e", "sighting_of_ref": "indicator--845c36fb-8acf-4bad-88d8-21b8a88accaa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5550ced-db23-448e-8292-c8f7cf15bc71", "sighting_of_ref": "indicator--7b6db264-2ba5-4f6d-8c5c-15ac949dc89b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1776fa-ae95-4bbe-9dd9-0a16712eac73", "sighting_of_ref": "indicator--42c88733-1c7b-4e2e-b0ce-999240a55f08", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7bfebe6-55be-45cd-8f36-558b399e980d", "sighting_of_ref": "indicator--d265fa11-c7ef-4048-b77b-7d0141f7b56c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4b68d1-9b9f-49f1-ba49-4cdab9372287", "sighting_of_ref": "indicator--77e3efbd-c518-47c1-bb5f-b088f15c0abe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ff3a83-9bf6-4597-be06-5a7c906f066c", "sighting_of_ref": "indicator--39749ac4-68fd-4a5c-ae8c-1fac18ba7886", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd36c6fd-371a-4d0c-9810-4bc62cac99b1", "sighting_of_ref": "indicator--1188e478-a03e-49ed-8ae2-d4a278732832", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9f6726-40ed-456d-80c3-2b87498b65bc", "sighting_of_ref": "indicator--45b35e71-79be-4d97-a0cd-b500b922afd2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89cd88f-a1b6-448a-808e-fc1e10ddeb40", "sighting_of_ref": "indicator--f220f011-f1f8-438f-82de-73ea2d41df1d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8078c1-cd20-45ae-81a8-2efb632f1ed6", "sighting_of_ref": "indicator--e67f6a38-cc25-4d23-87d0-be76af180049", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce66292-304d-410e-9309-81e1cd839db6", "sighting_of_ref": "indicator--d7667e96-5642-4ea9-878e-bf3121b1085f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e7e750-6e91-4f6a-8601-f8982c3f4e0f", "sighting_of_ref": "indicator--64c75411-8bf8-4354-ad8c-cecc0b9d0e64", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fe47a9-549b-4fd2-801c-77ab56de52b0", "sighting_of_ref": "indicator--55335b29-b974-4224-a3f4-d2ad8fd5ac1e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424035f9-2061-4eef-9d49-3ecde2a1383c", "sighting_of_ref": "indicator--1431a40c-a5b4-4431-bdd0-ded0b1432a9a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e7adbd-9a45-4bce-b586-abb5dd6ea132", "sighting_of_ref": "indicator--af0054bb-ff2d-4f89-a0fd-0bfe46615384", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda56870-7f64-47a9-a4e7-297550c006fb", "sighting_of_ref": "indicator--a483b7b2-32a1-41e0-9655-594a1358e940", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea35901-f8fa-4da5-aafe-e32af42a83fc", "sighting_of_ref": "indicator--271ed4b3-b706-44f0-9e37-7715e3387338", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e280599a-7cca-4cb8-bbe6-37d94d5e6e2c", "sighting_of_ref": "indicator--1ba6e279-5cf1-4ea5-b743-7ffd89e83db3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbecbf0-c663-469c-a50a-10ba746844a3", "sighting_of_ref": "indicator--bf2b12d6-e519-4e4e-916b-b217abb6eee7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbcd2847-05fc-404b-8f67-817dbc0dd79c", "sighting_of_ref": "indicator--c7807ea6-c03a-45bd-a0d6-65b3248168d5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5b48b9-7dc6-44fb-984c-650a6d1f893e", "sighting_of_ref": "indicator--b5017469-9f8d-4f5b-9e4c-4813e06ed0e5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252df814-f082-439d-9ec7-249bcd71c41f", "sighting_of_ref": "indicator--5205fb9c-1fd4-4ab4-940e-0e29b4129c39", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db256037-94f1-4ab6-85fc-c83f4ead069e", "sighting_of_ref": "indicator--9447535d-75a6-432b-9ca7-0a439d71fd49", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f141daab-d1f3-456e-90dd-711ba7493405", "sighting_of_ref": "indicator--edc9003f-3033-4d79-89b6-99e2e9e18041", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9f0aee-3223-41e3-825a-315fe535258c", "sighting_of_ref": "indicator--e037b30b-97ba-4b28-9426-df408b40fb96", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8cccb4-20d9-4a3a-81d0-d9be10396d13", "sighting_of_ref": "indicator--396d4fb8-6596-43ff-b1e7-2335de4fb7b3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a00238-f8eb-4100-aed6-de17e7f37b17", "sighting_of_ref": "indicator--850ec679-9af2-42ff-abce-59abe6aefba2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae6513d-5619-4bec-94c4-52b381d15a5a", "sighting_of_ref": "indicator--3557906b-a0ae-4487-b476-55e55e2e1b6e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c15271a-3a17-4f87-9894-63c3cd81353e", "sighting_of_ref": "indicator--051da828-5263-45f9-a1f0-0607f60d496c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83523f0b-64f9-434e-b7ac-0bf6d28dfac0", "sighting_of_ref": "indicator--f306fb6f-4b42-4a4e-a2d5-9158bc0b8b08", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4d28ec-073e-4f74-b21e-a6d31f62e043", "sighting_of_ref": "indicator--dc05a28a-805e-452d-9ef1-c708429523a0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9489bd5-a166-49f2-a874-d4e62f87abe0", "sighting_of_ref": "indicator--90451f06-1f25-4f45-a040-6f0a39e60655", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a81818-da13-4147-95bf-914b687ce26d", "sighting_of_ref": "indicator--87d5dffe-c707-4d4f-baf6-7dd397037c06", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9980d7-3943-4956-a2f2-08fb308e86af", "sighting_of_ref": "indicator--10716edd-7026-465e-be04-dfa1d1b9cb9f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664f86fe-0a8c-4d4b-ae08-a83bbfb0741f", "sighting_of_ref": "indicator--dad86f33-65aa-43d0-927a-7a92e7662211", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02517701-0bb4-4f4a-9293-e2ab2f66fd1f", "sighting_of_ref": "indicator--f1ac2bc2-eb28-452e-8113-4493e4cd250c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466cc84a-5c73-42f8-a287-ee9af97f7716", "sighting_of_ref": "indicator--12dc9261-a04b-4c70-9a42-5a45c558861d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67adbb2a-6fd4-48db-92e4-2d87b900a2b2", "sighting_of_ref": "indicator--b98d023e-c1bd-4d42-9249-108a863cdfd6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cec87e1-8c26-4130-8f07-bbc8add0898e", "sighting_of_ref": "indicator--dd7b304d-cb56-468f-a9a4-e13458208851", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848d5ef6-ae3a-4e6f-ac9a-11dc86eb2460", "sighting_of_ref": "indicator--ee45bb79-271c-42cf-a0ef-abaa5d90b5bb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2849ea-4468-43c7-85c3-02884a8957ca", "sighting_of_ref": "indicator--5311caf9-1069-4e78-b8f5-4a9e2dcf1a7c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942c9af9-a9ff-4c57-857d-f2d4f6d4cf05", "sighting_of_ref": "indicator--995f6632-940e-44c7-b10c-23b872b27730", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900798a8-7c5b-458a-9fad-86d19646dc7e", "sighting_of_ref": "indicator--68bd084f-bc37-4b0c-bdde-23581be6ed68", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f65f0b-db58-4fb4-aa37-7c4ff7d1d96d", "sighting_of_ref": "indicator--d52b58a9-db90-43d3-bf43-daf102615da6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b718ad4-0124-49c3-91e3-9f91e3ef04cd", "sighting_of_ref": "indicator--18dd03fc-c09d-4621-ac03-6c668e43d663", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21e1600-6c19-46c1-90d6-081f050b6980", "sighting_of_ref": "indicator--a6e55f20-8fd0-4587-9551-7797b5d8b356", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc507f46-9999-4432-b0c1-247b5b671657", "sighting_of_ref": "indicator--d5464d03-e8b7-4538-bdfc-9b07c3d4fa5a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bc236f-e2d2-4839-b0f5-8f693c8ab2fe", "sighting_of_ref": "indicator--9f935d4a-c53f-4627-b1d3-496b4d779f46", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcccf202-3d22-44ed-a052-400c5b5549bf", "sighting_of_ref": "indicator--daf9c213-7769-4fb1-9998-62a4640306db", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5061162a-b576-412d-9c5c-5abf4a6beec1", "sighting_of_ref": "indicator--98f7d326-e81b-4a55-99d4-31e4353ce86e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c12577-a213-4593-af03-418bfc66b93c", "sighting_of_ref": "indicator--3d8dad7a-301c-4191-a8fd-39b8e57d50d6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d930f16b-f85d-42fc-ae41-b5e11b2f947e", "sighting_of_ref": "indicator--1807130d-153e-4b8d-ac85-0b3f3cf15b2c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fefeaf2-bacf-4f33-8df9-67b77a6f7413", "sighting_of_ref": "indicator--b5598fdd-72c6-42de-afc0-2abf5824bfea", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4d9ea4-a66f-4d03-b034-c74302f63076", "sighting_of_ref": "indicator--7d876e22-de43-4824-9b45-0ba4c9ab795a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84748abc-d2b5-4c18-8d66-b81d1b68883d", "sighting_of_ref": "indicator--c89d1611-25d2-411d-8aaf-e04a50ced129", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7735e9f8-478c-4d04-a477-3c03e4888e63", "sighting_of_ref": "indicator--0148565c-932f-45de-9bee-4b0badf86d8a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b5f5fc-ebd9-4134-95dd-3f19f618b6a5", "sighting_of_ref": "indicator--fbd2a58c-dd4e-49f9-8718-b127deea5637", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4180c4-a7b1-4caf-821c-f977badff95d", "sighting_of_ref": "indicator--c73f8c7e-8e1e-40f4-b2ce-795424a69a61", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a968bc-b37a-4579-b779-992250def152", "sighting_of_ref": "indicator--298b2565-8156-46d1-9206-f1165366dd62", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10b250f-29a1-4711-a1fb-5b66db48a975", "sighting_of_ref": "indicator--a535ce1d-84fa-4a00-9166-c99373222824", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ebe17c-b0b8-4aad-a2e4-d1ca0cb357ff", "sighting_of_ref": "indicator--0c869682-a227-45ec-b406-92d66c803684", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a71b3fc-77a4-4403-be70-2303f1b0e04b", "sighting_of_ref": "indicator--bc30e40f-ab79-405e-a9ba-5ce2d4dbfa83", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ec83f2-ba70-4790-84ec-6c01f90a585d", "sighting_of_ref": "indicator--cf1dcf89-dee8-460a-826c-2e5f0eb6a1aa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c628cd8d-db30-4ac3-90f7-a78e33a4a30d", "sighting_of_ref": "indicator--94ce234f-bae2-49d3-bd75-3ec0ceab6dd5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2739498a-c191-4f27-8564-f2a78b09018d", "sighting_of_ref": "indicator--c9bb3f80-2c22-4de7-887e-1bf5be90e0bd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb85d1af-a876-4ae1-aabb-d01d12f174aa", "sighting_of_ref": "indicator--6b522f55-29ff-4be6-9694-965d9dc9270a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78c0e3e-b9d4-4008-8356-e2c4b692c7cf", "sighting_of_ref": "indicator--50f77262-87a5-49c0-b97d-91f30ddd90a1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0e3f84-cf77-4d4a-ba04-c5d572aaccc6", "sighting_of_ref": "indicator--6ec29626-5745-4932-bb6c-38510abc7df4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c3f620-9c53-47a7-8d62-6089b98faa1b", "sighting_of_ref": "indicator--f206bcf7-68af-4475-b37d-e0a4616f8dd8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c07269a-2447-4864-8d3c-609cc05f9be7", "sighting_of_ref": "indicator--2ba41f22-c270-4b50-9c82-4ca868a791bd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806b39d0-14a7-4eaa-bc58-316e1a25170b", "sighting_of_ref": "indicator--f4de6486-253e-4c73-898d-6f4d5f6e0f74", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75aa5d50-e307-4b03-a9c4-f2aa216cdc52", "sighting_of_ref": "indicator--c38e869a-3c45-449c-adcf-19803ac7fabb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91fc20f8-2167-438d-a3f8-121523ba7450", "sighting_of_ref": "indicator--f89a3687-03da-43b4-a135-c69e9b822877", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47194820-115f-4926-82e0-649214be1909", "sighting_of_ref": "indicator--2515e5a7-e712-45c7-986f-bcc6c33c85f0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1cbccd-baf0-4687-b921-77391a4ee6b6", "sighting_of_ref": "indicator--e61b4967-be82-46cb-86b0-6832a93f090d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefc2fc5-61b1-4f7c-99c1-0380cf880e5c", "sighting_of_ref": "indicator--bf93cace-cfed-40b2-8f66-6a92c2e7638d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b060994f-a40e-4712-925b-abeb58354cea", "sighting_of_ref": "indicator--127202d6-4b6e-4bf2-8a2b-db3a94495bae", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8fb8ca-ea71-428b-b2fe-c06d92e8c48e", "sighting_of_ref": "indicator--c8586e75-1aa6-4994-a2ec-12780f21606a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0c0f76-400f-43ea-9232-84cce5cd0ac2", "sighting_of_ref": "indicator--855cabdd-4806-4579-b243-a22669027083", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ac798c-b17b-4750-80af-10d7c73f38ce", "sighting_of_ref": "indicator--455e517b-25b1-4ba2-a40e-c0e89917b9a3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abddd1e-bd92-40fb-98c5-95e65c223ef3", "sighting_of_ref": "indicator--b3a25ede-f786-4610-93b9-49432d82fc4e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c796c88-3996-41be-ba69-5fe7ff9ce50d", "sighting_of_ref": "indicator--7cade21b-d729-473f-b66e-32e201be6d91", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e48af7-bfd6-4e48-92c6-3544bed8979a", "sighting_of_ref": "indicator--6afda620-de3c-4f94-9417-71f63bce6ab3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e121de1d-d67f-4bf3-8562-591df58a1cd4", "sighting_of_ref": "indicator--e8efaf41-1ee9-42ea-a866-785027840896", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9ea51b-8e15-4939-829a-e229c4724510", "sighting_of_ref": "indicator--9a7fca20-0126-45d8-9771-e224715d66f2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4141f48c-5644-4021-841d-602b3d22c49b", "sighting_of_ref": "indicator--08d90473-adf7-400c-b307-f5c863363fef", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac338bf4-d337-4d29-8b74-88d11ede686f", "sighting_of_ref": "indicator--7f0093b2-a9a9-4320-940b-7529bcf6062b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f92c2e-f341-41e2-b0fa-80295aa67ced", "sighting_of_ref": "indicator--f22b938a-9608-40e2-8793-c5dd46f8b476", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58502f5-f2e1-486e-8653-7e7a66cc8784", "sighting_of_ref": "indicator--80fd769f-a27a-4e40-8e1e-cd4d4c7caf7c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cc9f22-a02d-4c34-a3e5-88871546db32", "sighting_of_ref": "indicator--4d62a6f8-cbe1-4f17-83d8-a8213b148bc9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f44ec0-0553-446e-be34-713a0372a165", "sighting_of_ref": "indicator--7679f3a3-b404-4e0a-b475-99010454997c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a19213-dcdc-4f3b-a0a4-2ef1716479a1", "sighting_of_ref": "indicator--1e3e519a-8413-40f3-88a1-88a86b822cf9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9500639-02f3-4670-9501-fc8490bd60ee", "sighting_of_ref": "indicator--cbb02cf5-d7ff-4265-a8cf-9f323bb845f9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d84686c-47cd-4c78-a7c4-debaa1060e06", "sighting_of_ref": "indicator--7d69b17b-526e-4387-80db-c3b869b17280", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def8d360-c096-43e1-b7bb-fb748c115338", "sighting_of_ref": "indicator--04ba7b97-cefe-4774-95f8-c50b6c8cb09a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6e4e30-4c95-4633-9ea6-be5666d23999", "sighting_of_ref": "indicator--48a7812f-f3a7-4018-9bf6-06b41b357afe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfd3c4e-c2ad-4e36-a5c8-56115c1ca671", "sighting_of_ref": "indicator--397a000b-10f1-44bb-9b80-6fbd6ecf9905", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14582258-9be6-41b2-b046-75dae60fbd2b", "sighting_of_ref": "indicator--d5eff047-e8b0-4797-a424-c93f0b95a8d4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9105d4cc-ddbd-47ae-b34c-223ab9d98908", "sighting_of_ref": "indicator--9ec6cc35-8a9f-43d1-87b4-cfe5b056fa9a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02881d2-3508-4ee5-93c8-b19bea578e96", "sighting_of_ref": "indicator--b7f3d61d-fb77-4c17-a2a5-a69e54f2af0e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd9094e-77cb-4c0c-8a43-bfdace9f3bb6", "sighting_of_ref": "indicator--81c1cb7e-238e-48be-839b-7ebb290dc11d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838c63b2-688b-4a35-9f5c-7e0e85a5617c", "sighting_of_ref": "indicator--f2bbd59f-c321-4395-b385-67a2c6ba0bd7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f263c9b-5556-4c05-9493-240f88ceb8d3", "sighting_of_ref": "indicator--2b01ba82-ec23-41b1-9a1c-ddbb9436b2b3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f24203c-9cc0-4ef7-9235-6d459eb4dd31", "sighting_of_ref": "indicator--344b5a4a-face-4c22-bbbb-05fc2d3c12e0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01b05c9-672b-465a-88de-49eb53ae588c", "sighting_of_ref": "indicator--ea7c5723-3cd8-4057-8dd1-60659fc57dc5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d58b36-9103-4372-a137-936dc4bcb9d4", "sighting_of_ref": "indicator--db9e3203-37cb-4c21-bb20-9eaef3d6727a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5fcc5e-a6c6-4832-b529-13f4e63b28b4", "sighting_of_ref": "indicator--8c7d34f9-c2e9-46e9-8355-b5a8da8a1c56", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61699fe0-2406-41d7-89ec-c2347b2c8dec", "sighting_of_ref": "indicator--bc3eae99-eccc-454e-a0d7-3cfb925f1691", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34343883-3be3-4289-a09d-541784e92265", "sighting_of_ref": "indicator--d5a4ca89-add8-4492-8841-1f16d16bc283", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a8f07f-7bb2-41bf-b72b-4113b969674d", "sighting_of_ref": "indicator--972d000a-b55e-42b3-86d7-f2340676b657", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2987bc-e973-4ea2-9a96-9027845904b1", "sighting_of_ref": "indicator--1dc42617-e704-4d6b-bcfc-357e5b25ef3e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1fcfc31-cf77-4fac-9dab-65dba49bcf1d", "sighting_of_ref": "indicator--6cc7daab-c362-4136-bbba-a1f736325129", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c07603-bf91-4e69-b32e-528c4bca3d59", "sighting_of_ref": "indicator--4d88a940-a8bf-4e98-97e4-4cc76f4bc40c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb55d25-482a-4b3a-b620-b7724e8afd94", "sighting_of_ref": "indicator--ca52e65a-f936-457b-aa13-a9cd9c5dc91e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd38f65-87f6-4421-a6e6-6e963e473071", "sighting_of_ref": "indicator--0a3fb823-ac72-49fe-9405-4d09f2d795bf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21257a5f-002c-4cab-82ec-10ddd7154cdf", "sighting_of_ref": "indicator--3ee10383-72ca-4576-94b9-0de8ebd4d34a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8fb390-f00e-4593-aa16-5115582bf37c", "sighting_of_ref": "indicator--fde05a75-7232-4733-bffd-5ea5651511d9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af184144-c36d-4236-91b1-ede5ec810451", "sighting_of_ref": "indicator--1dc00148-463a-4701-bf9d-f6c17179a81f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73be89cd-f523-450f-9276-50277ae66859", "sighting_of_ref": "indicator--900c4ed8-cc5d-43d7-8749-b684edef07bf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ebde87-786a-48bd-97fb-71d5457e97f6", "sighting_of_ref": "indicator--9659368c-0894-4673-b3db-dbccc06c64d7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4062d2bc-8683-458c-9bdd-a75599bf485f", "sighting_of_ref": "indicator--b6ca2bcc-3217-4f24-aad2-e8935960dec8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a664a73-8417-4ad6-b590-7fcdc26aebe2", "sighting_of_ref": "indicator--3032e18f-2e62-4cfd-8cab-7b67fc7389ad", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181d260a-8b87-4f9f-a523-fc2d1d45d23e", "sighting_of_ref": "indicator--dedef178-efe3-4e34-bf36-0e2ba1198b04", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b424c896-6ae9-4c15-bdf4-0da9ca3b7874", "sighting_of_ref": "indicator--4045e589-b84e-4a4e-a44b-ca3d42c8bef4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a2a0e9-a788-4efa-bda6-264ae767af89", "sighting_of_ref": "indicator--e994d4c2-ce01-4958-a7b4-685b95a818e6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d309b4-3a31-4446-890f-9da9f6717452", "sighting_of_ref": "indicator--2705ab73-815e-48f6-ab63-f9b19b398212", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259fabdd-f258-4bfd-b728-7b093e0f08ea", "sighting_of_ref": "indicator--ff984958-8cfd-43fb-8b5c-e38a1f345d24", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e5c97d-5c47-45f2-9040-b07beac8b022", "sighting_of_ref": "indicator--b33b2776-fc65-4dce-8a1d-6902b7bf9ef2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da81a4a-64fb-4444-9a2b-f7e8d3d6d5a8", "sighting_of_ref": "indicator--6ec3be34-cfeb-4b05-aa9f-5c55c63cd93f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2e0f72-99cf-4e60-ad4b-61075558ef25", "sighting_of_ref": "indicator--7520c7f0-f04a-4598-a3d8-f951ed0c9ee5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e00dfe5-8cf8-46d1-aa37-c6dd1a190edd", "sighting_of_ref": "indicator--27a941b3-3e81-472e-90d9-d79399720900", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9a1487-5e5e-4216-bb42-8e95a7515a2e", "sighting_of_ref": "indicator--53fd56f1-5df3-4339-bdcc-33dd2e5a468f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caae1f38-b13e-48c2-b273-8337556a4f44", "sighting_of_ref": "indicator--0add9531-ec0d-4e85-9448-571f25e4aee0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c1e58f-0062-44dd-a68c-027e242bd1bb", "sighting_of_ref": "indicator--89541f6c-36a2-49a3-9e49-c44b7ed867a0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3735ffee-fad8-4518-b3c4-7a00021b3ec7", "sighting_of_ref": "indicator--f3413bd0-e749-4571-b82e-16a397539894", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194fd3c3-4951-48d2-9447-fe26364b8937", "sighting_of_ref": "indicator--05ed6d09-48a0-4f3e-9369-947487e6bcdb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abb50a2-89ea-40ee-a97c-aeb47f75f454", "sighting_of_ref": "indicator--2c653ec9-3f1e-4afb-8279-91b5cb15f254", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e15ad4-0a27-481b-83e6-ab9d29a2c2b1", "sighting_of_ref": "indicator--e996970c-2d5e-43f7-b32c-de5f33f7f4e4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19165d23-eeb4-4b4e-9a78-38511e53c11c", "sighting_of_ref": "indicator--faa7dd01-3487-440c-ace9-66c6189114ed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a183b8-69df-471b-9a03-7fbba6e0ddb8", "sighting_of_ref": "indicator--371cdb3c-2fcb-4538-8446-1f2929b8f9e6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c7f38d-91bc-45ee-97ae-7dc932a1bbca", "sighting_of_ref": "indicator--f98cdd84-cff3-4878-b19f-3967fed2cf9b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fee1a3-3d98-450e-b804-1bfaea404369", "sighting_of_ref": "indicator--0e3fca76-3ec3-463e-a355-cf17bbd5112d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bd74a0-3d56-4216-9487-a559400e68c1", "sighting_of_ref": "indicator--8fa3b280-4229-47ce-8494-acd270871b95", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacbf805-e11e-4aee-b137-fc4eaf62b487", "sighting_of_ref": "indicator--f29b3496-1f81-4100-9d81-02747552036b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbae8991-3564-41d5-8b99-65b5fdf43d64", "sighting_of_ref": "indicator--11b0f416-f152-4117-9862-9d6f5ade2651", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc650d8e-8762-4430-b969-bfbf0c20d0a6", "sighting_of_ref": "indicator--2c46fef7-9695-42f5-8b41-5c8aa89812d3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d95d859-01ed-4ebf-b0af-f11de75fcf76", "sighting_of_ref": "indicator--9ab931a5-0155-4b07-9f83-81474b591816", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7daea67-06ab-4783-abd1-d3b6cacedefc", "sighting_of_ref": "indicator--340fb372-2e94-430e-9051-417e53dbe7b4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299745b9-ffc8-44d3-af60-2856c81356b4", "sighting_of_ref": "indicator--5e768223-09d6-4464-a108-3af05951a7e2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bafabb5c-8c25-43d6-b325-7fba1188df0c", "sighting_of_ref": "indicator--04388393-e4d0-4f86-baee-3defdacaef7b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc071bcc-4cb0-4f01-aaf2-e640af37574a", "sighting_of_ref": "indicator--50c539cb-a8c4-4800-abfe-8c5c3e0b9b71", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4061e2cd-8bf2-462c-b9c1-f0f397448e60", "sighting_of_ref": "indicator--aeee4733-9688-47b1-9687-7cb1d0a0bebe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8adb3ffc-63fe-4f4f-82a1-46d5d0b2cb32", "sighting_of_ref": "indicator--d8adb506-e0d4-4375-a879-e1642f615c2f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536f977a-21e1-4aaa-8dab-0dc3832b1de4", "sighting_of_ref": "indicator--8cb178e2-aabb-443a-9b8a-653ebebd6857", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdaa1a01-786b-435b-966e-60b141519a59", "sighting_of_ref": "indicator--c5fe9f82-73f9-46d3-9b0e-f71f08749830", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6e1cde-5203-4d16-820b-a1e814e81e96", "sighting_of_ref": "indicator--43551eb3-bb4b-4e76-9861-3c5fc1a17a59", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f9ff77-a7d4-42bb-b7b4-e474876dad7e", "sighting_of_ref": "indicator--6491342a-d99f-47fd-8f06-cf0c9f239569", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3aca14-b227-471f-9c22-f90b099fdf5f", "sighting_of_ref": "indicator--ebae3862-5767-4c8f-be66-aeb39adbf762", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c53b9fe-6f31-49cc-a7ce-0d072327c311", "sighting_of_ref": "indicator--a074d8ee-802f-46d6-803e-4e711955865d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a1f417-02dd-43f7-ba25-213d536d0c7e", "sighting_of_ref": "indicator--f829d185-07ea-4287-82a2-bafcaaf748a2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091d4114-41d7-4879-881b-5fed59decac6", "sighting_of_ref": "indicator--63c7c1d5-f5c6-4d39-818e-7b9356b0d835", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0ad6a4-6b1e-49b0-99db-0b8341a8456f", "sighting_of_ref": "indicator--b842a845-00ec-4b3c-b2ce-53611a3025ec", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1157da7b-8868-42dd-bf92-758583d20739", "sighting_of_ref": "indicator--7de71b6f-e9d9-408b-9898-a69c1d882103", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b57d72a-f072-4ec7-bdbf-cb688889371b", "sighting_of_ref": "indicator--86ed64cb-aede-45a9-8e01-208e8a632da1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a154a88-6ca1-481a-8920-f7702669658f", "sighting_of_ref": "indicator--c8e28f11-f975-4d38-84a7-10a402061dc9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73812d65-9043-44ea-b98b-eb1fab6d2ed9", "sighting_of_ref": "indicator--d15461d8-71f8-4320-80d5-4c9c570719fc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5aee3d-ceb1-4094-96b9-f38e050715f3", "sighting_of_ref": "indicator--e846e458-3f91-4ced-b28b-3e761577b902", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c689faf-5b0a-4381-b237-51ad34d08712", "sighting_of_ref": "indicator--05590c5f-6393-465f-83b2-f7845373165c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18eb8183-6634-4046-ac28-4fe5959662f9", "sighting_of_ref": "indicator--7d4f57e1-3c96-41be-b81c-2b1278da70cd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2077f5-8a98-4b4e-b8fe-f04f64f71113", "sighting_of_ref": "indicator--28259927-09e7-4347-aad3-c8cb3b41f74a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61738441-78ca-4ef7-b257-98903bd5043d", "sighting_of_ref": "indicator--3ac0d191-3667-4fd1-b50a-58e92fcef4c2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00f5513-1fb6-4b8b-a122-3d56fec92d61", "sighting_of_ref": "indicator--a11f9261-2a05-4d88-9e70-e46167d02c30", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2dd3dac-c571-4faf-81b9-f56572680a14", "sighting_of_ref": "indicator--b9319623-4c1d-4a21-b0c0-996407c02e82", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3fbd0f-e8b9-4997-938d-b4505d16ffb7", "sighting_of_ref": "indicator--692071ae-ab3c-4a9f-9eee-4d591b7aab56", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa74e102-cdaf-453a-862e-c601338b8b70", "sighting_of_ref": "indicator--cd8a71b0-285d-42b1-a721-05257002f0d1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5478eab-5d74-431d-981c-76f48cdd6d75", "sighting_of_ref": "indicator--20581193-1943-4ee1-82c6-6e1a61d60e24", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2815eb95-65e4-418a-b873-1bb805257aef", "sighting_of_ref": "indicator--6b502b74-90b8-479e-ab06-9aa5884c76d1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a42bed1-13ba-4853-a6c7-8e0d1d96be74", "sighting_of_ref": "indicator--3c797187-0fc7-4b20-9944-b55bf22953d4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d2a37d-dda7-4797-90d1-85767526d05c", "sighting_of_ref": "indicator--34deb946-732c-49ac-8815-7a1d7d5b8c4a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4add3cd-f1e6-43e8-9955-b572440021f3", "sighting_of_ref": "indicator--aa9fcf31-a003-491b-a1d7-13ff64c5163a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3247d42e-02c4-40b0-ab19-38021b7ff979", "sighting_of_ref": "indicator--f8318739-8d67-4989-93ab-59dc7e5792d5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea1caf2-23bf-4cfa-95fd-ff00deec7ec6", "sighting_of_ref": "indicator--454a2865-9aac-4491-bdf8-510af604898b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3bb2e4-1859-4d86-9b69-757420346218", "sighting_of_ref": "indicator--01aaa019-776b-4051-9c0d-7481cbcad863", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff7901b-345a-4974-88e1-91d801fddb77", "sighting_of_ref": "indicator--e57656ef-6d19-431d-8930-1627e713c870", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34708d52-3af0-4356-bb0b-8eb590bf030b", "sighting_of_ref": "indicator--9c82e01b-00fb-4106-a581-16e782ed0c42", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c218aa9a-072c-46f4-aa7f-e7c4f553da8d", "sighting_of_ref": "indicator--55d5681a-5eb3-4e0d-a887-ca5f413e26ab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c0003c-fadb-4782-906f-e50cc8119e6d", "sighting_of_ref": "indicator--d5f95893-a0de-4703-9097-090cce333780", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b95a212-ed4f-4841-a960-afbd85aeaca2", "sighting_of_ref": "indicator--e333a106-3efd-4aaf-aa33-61d1a1594387", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed7c4d4-52ff-4a0f-ba6c-922dba0879de", "sighting_of_ref": "indicator--dd779130-da98-4001-9d10-0938b804730d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff11abe7-f725-464a-8feb-05dced855c2b", "sighting_of_ref": "indicator--109f861d-280b-4f02-b0bb-5ab68b8b8bd6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97fdf339-418b-430f-83b8-dfd1dbd1616e", "sighting_of_ref": "indicator--7cfac5ea-0a20-4246-b361-128de366628e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a2ec7d-463a-43fd-8f80-4901f2f1f20d", "sighting_of_ref": "indicator--63423e77-dbf6-48f2-a4d6-1d846b211de0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a30b94-a01d-4d23-a9cb-612ac6103b31", "sighting_of_ref": "indicator--1068d5f4-a05d-4176-9fe0-1b83ea527765", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aaa6689-8f42-45cb-892e-000f55ca89b1", "sighting_of_ref": "indicator--82fc724a-6012-4602-a2b1-034f759e43a4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e5e969-eaf0-43d2-b60e-97f1db21926b", "sighting_of_ref": "indicator--275a1fc3-858b-4f88-bb1e-0d03939d3fd9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffc5f73-693c-4ad9-8e6d-8eee5c4c6f48", "sighting_of_ref": "indicator--fb5d0d7d-4aa2-485e-9b73-451989fda326", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feab8e76-f660-4d9a-a9f0-6cb38f8f4be5", "sighting_of_ref": "indicator--fe05607c-c35a-48f8-9d36-a6a97016cf84", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efbb008-4c20-4c52-8bf1-7d25a9ac49ae", "sighting_of_ref": "indicator--ba28b0a6-5563-424f-997e-13674942af60", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36551899-0de6-4751-9fa4-2b20dcfaa8da", "sighting_of_ref": "indicator--f9f8e612-c5aa-4160-9a1f-199af4bf15be", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f5a6e0-bdb8-412d-9b46-acccc68afdb0", "sighting_of_ref": "indicator--0e2b5efd-c653-420c-b6b3-b362023268a3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a12bf0-41b2-4d4f-9819-4e4024805f42", "sighting_of_ref": "indicator--a04dc2f1-4750-4253-b1a6-5d786a8d553e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ad5987-e363-47bc-8d36-d5e54d09f6fd", "sighting_of_ref": "indicator--00a45ab1-faa6-461e-8c6c-a38cecaa3738", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdd7585-8acd-4cfd-9d9a-f610613a712d", "sighting_of_ref": "indicator--b456f235-9dbb-4d86-aa21-8f4aca8aa2ba", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995f5d71-5935-4c24-98eb-96668877fc8b", "sighting_of_ref": "indicator--f139f02b-c85f-443f-aef0-0dd02344249b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b903b17-1bd1-419c-bdc1-7640a08436a3", "sighting_of_ref": "indicator--a06b9de9-6b5c-416a-9241-76ec99b1aad4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec121a5-82b3-48cb-81d2-351c0d1983d1", "sighting_of_ref": "indicator--f26f7202-14ec-4815-9539-07bd4d3ec92b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3a9960-c728-4909-a113-6124b599e353", "sighting_of_ref": "indicator--156e4783-0dc9-4e24-bdbd-53466d846e0b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22800f56-529c-4732-b383-8fb21fedeccb", "sighting_of_ref": "indicator--09f38499-1d03-4b08-afe8-81ec39cbc6c2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54718749-cfd0-41c7-8f5e-8c76dc43dc7c", "sighting_of_ref": "indicator--97579d77-2305-413d-9551-7ae0188ff63d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704d3422-a6fd-4093-a27c-165884ce41ef", "sighting_of_ref": "indicator--58ed889a-4334-4d98-bb28-ffa064df7f29", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c9e18c-365e-43c2-8724-faff72cd0dfa", "sighting_of_ref": "indicator--41857de6-a19a-4cf5-b084-04e1abd15557", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583f67cb-5bea-49c2-9244-6082c3f6da73", "sighting_of_ref": "indicator--d2e42ba8-e7c5-40e6-a331-c927abd791ff", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb11779-cc9e-48ed-b785-63a517908f14", "sighting_of_ref": "indicator--758001f2-e9ba-4714-becb-aa8a49fc2620", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6eae4e-bd6e-481f-948c-7fb6547c9b2b", "sighting_of_ref": "indicator--672360e6-ab43-4fc2-9d78-f63ffd707f61", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b02393a-e5b0-44f6-b726-2d855936ede5", "sighting_of_ref": "indicator--1e310ca6-e44d-4557-aa28-dcffe57be826", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20aa6b6d-4155-467b-9e49-b98c484fa321", "sighting_of_ref": "indicator--18c86ec1-2de4-4507-91f8-695d2c72a266", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26dc03af-0aab-4708-92fd-7cf90e6d1759", "sighting_of_ref": "indicator--a64993d7-59d4-4e2b-ad03-0d71d704fa73", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba0b762-97b3-4dc2-a0bf-101ff828d25d", "sighting_of_ref": "indicator--d2ca2d12-82b5-4a1b-acaa-568f80088284", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfd4c4d-edeb-4146-984e-5022f5b3dc33", "sighting_of_ref": "indicator--261e7add-57c5-4423-aa43-d7e4bbd92b97", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848f6335-695b-43ff-9a77-226fbd291ffc", "sighting_of_ref": "indicator--45c351fb-9eab-4745-a4c7-661b593eade2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f10877-4418-4adf-9381-e5fe9dca5e42", "sighting_of_ref": "indicator--13ef4cdf-5008-4a7e-b3e9-5c1d8801c6ef", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9caf05b6-5b47-4852-a980-b44362468707", "sighting_of_ref": "indicator--0677e50a-156a-485d-8f69-be9dc6c46880", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f91b69-706b-4d84-9db8-a8293c2fc332", "sighting_of_ref": "indicator--40a0487f-c5e7-49e2-81eb-ac3a026a055a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd76258-94b6-4160-83b9-2cfb4c7c364b", "sighting_of_ref": "indicator--25be5c02-1b10-474e-9fd1-2415f97f10fd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590a3405-5c26-4b04-ba27-cd84a7b74970", "sighting_of_ref": "indicator--69248e2b-f0a9-4018-9aab-1e4e284fb918", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fe69af-4803-4b51-875a-40e83466db14", "sighting_of_ref": "indicator--1d8bbc8a-a85a-4e1d-945c-a01fd7a565c5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd44aaa-8da9-45da-bc83-011110483430", "sighting_of_ref": "indicator--c4b60779-1b7c-4205-93a2-de1b70731500", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4647eac-df43-4d08-a7cd-e976c1cf8e32", "sighting_of_ref": "indicator--0697c26b-ea2c-4cf6-ae8f-663f4eaf7124", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6337d8eb-f078-4669-a35f-8d402234e445", "sighting_of_ref": "indicator--4ceb4a2b-6695-45be-aa27-cd0b8f6e8dbd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4812f0-0de9-4a64-9199-9f5322439293", "sighting_of_ref": "indicator--c3a017e6-71af-48d1-ba20-912d59ac35de", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01231935-f0a1-44fa-b575-e6f2f7c8f619", "sighting_of_ref": "indicator--24e94680-a31e-4d2f-86b2-c74006700e28", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17132bf2-ed7f-417c-82fd-25c3cccbd74d", "sighting_of_ref": "indicator--ded41125-ac7b-4b03-acc2-3b22f139b0a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a21cc2-b396-4c27-bb6c-a6561444d045", "sighting_of_ref": "indicator--787920c9-899d-473f-8d18-57d0ecb8bb77", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7918a3a-1e7c-4ce2-bc72-5992a9216249", "sighting_of_ref": "indicator--99dc861b-f19e-4ce4-ac50-460e4a30fe4f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67dc72ca-1b09-4c24-9e03-6c903d1f17b3", "sighting_of_ref": "indicator--2a06fdcd-d30d-4745-bded-155fa83fd285", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730a384d-8ab6-41b2-92d3-e51d9a3f5237", "sighting_of_ref": "indicator--85c6c881-e1e9-4639-ad4a-4e9c3241ba66", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b6b537-ab7a-40cd-b3b8-99bb509d5044", "sighting_of_ref": "indicator--62fb5082-2cf6-4d92-934e-2b23a2dc17cf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52391f6d-30a4-4a8e-a7c9-566a99ed2f23", "sighting_of_ref": "indicator--49819e41-da2e-4f9b-80d7-f531f371cdcd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3e25a7-fb66-41d3-8623-810d589417ab", "sighting_of_ref": "indicator--1392e6d4-d4f1-43a4-a3c1-218a4cb611d9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e3a611-b088-4d5b-948a-0ef3e55f5fa8", "sighting_of_ref": "indicator--6e8d7715-e8cc-4467-8879-86dc00041126", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00e452d-26f9-490f-b26f-2bb7a7e6b057", "sighting_of_ref": "indicator--59a2a4ff-c53f-4ae0-a7d4-d48240aa53d8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9284fc1f-f225-41b6-9d1c-14a94b675dc9", "sighting_of_ref": "indicator--5814aa6d-52fb-4012-ad9f-95b522b9d829", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771e14ef-555d-47e3-8d16-ed9d252eb575", "sighting_of_ref": "indicator--6789c6ae-6f97-4773-aa2e-8323da9298d3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5484278-12a1-4182-aca8-ceed36486293", "sighting_of_ref": "indicator--b9443d8a-e170-4d40-9145-fd4fa26c4c1d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762af144-5450-4881-9faf-61f6a67311c3", "sighting_of_ref": "indicator--534f79ad-5226-4739-b46f-a2ee83fdeebf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c35863b-b485-4f6b-a652-715b45fcb478", "sighting_of_ref": "indicator--07173078-35d9-467f-9b29-010927775c6c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59c67f9-5022-49f2-8921-f2e3fc0e2998", "sighting_of_ref": "indicator--34cd2fce-a7cd-4683-b9a4-1b79fde800a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e592ce-70f5-48d6-8447-557ac744fe41", "sighting_of_ref": "indicator--9004bd6b-2c81-48ae-8414-f3779998d43d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3201da-fe3f-4f26-aac9-00c0f0e228d0", "sighting_of_ref": "indicator--f53078ab-9c48-4c5e-a985-c1faca0d56a6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90766945-df7e-454b-abdf-a511d6f7a7a3", "sighting_of_ref": "indicator--98ee36e3-ce20-415a-adb2-3467ff905dc7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaab4d61-fe98-4bd1-a2b1-cfaad32ed241", "sighting_of_ref": "indicator--27cef85b-9eb5-46be-894e-5058ba448281", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7042d5-d1ae-41d8-bea8-b0a504481984", "sighting_of_ref": "indicator--112fa203-dbb0-4187-b327-de7c4b8b1e8d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e2cdac-c451-4f44-afe6-a8a3c0e617c4", "sighting_of_ref": "indicator--47c8a1f3-0ebc-447e-a831-4afe0c09e549", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78afb22-09e0-4db0-957b-1ece480872e2", "sighting_of_ref": "indicator--03f9ae61-14f9-48dd-b4c9-c39d5ffbdf19", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d46286-6a30-40ef-875d-b8c995b77382", "sighting_of_ref": "indicator--1f523d96-8af0-4090-9272-ea94c521b6a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0f44b2-20a3-4d5e-a468-93c5baf0d1e9", "sighting_of_ref": "indicator--9ad15444-43c9-4ee6-b411-c157d0889900", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce12faf6-f226-4971-bc7e-a0690794071f", "sighting_of_ref": "indicator--f1a041d3-e3cc-4941-884f-84eb67d59c11", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fb62aa-b135-4ef2-b9d3-ba16bf3f4b3c", "sighting_of_ref": "indicator--19374f4e-5f52-465e-a87e-63331efdaad0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d477157b-5c89-400e-b941-aafb43db13b7", "sighting_of_ref": "indicator--d296d69d-b1e7-4a07-9276-68916d6a2b82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ff95d1-5f0c-4812-a970-7577a6b349d8", "sighting_of_ref": "indicator--0350d368-901f-47fa-b9b2-4276dbc70157", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ef130a-d549-4f83-942c-8b23a1c0cac2", "sighting_of_ref": "indicator--5dbc9244-b60e-4ab4-a032-09b6a0bbad96", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d770ff-8f83-4e74-a182-32be347d5d66", "sighting_of_ref": "indicator--1d76ab1b-4f0e-4c41-8e37-de7e3f5c2bd8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1df3ad-b0e1-4f61-a4d8-9598b14a9d3a", "sighting_of_ref": "indicator--9c9cd17e-aaad-4786-b662-b6ea48e3e232", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f8d4b9-5c45-4316-ac00-935bb83077d6", "sighting_of_ref": "indicator--3ec07242-d429-4b1a-8d2e-04e4d6264518", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51115a0f-0673-4431-b540-031e2c4a7f10", "sighting_of_ref": "indicator--068be53c-277b-4b46-8e76-4f4ac6d00bd6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba9575b-de21-47c9-892d-39a4ae30234c", "sighting_of_ref": "indicator--068be53c-277b-4b46-8e76-4f4ac6d00bd6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986e2185-f632-4893-a5df-c3db143232c0", "sighting_of_ref": "indicator--f8d668f3-64d5-4af4-bbcf-915dbd01bb5d", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15020236-9b6d-4dee-baa2-783b33576bc5", "sighting_of_ref": "indicator--4149cbc3-f1f0-4cff-85dd-8648ec2ededc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ffd710-29de-4b93-ae60-725a8bb22f00", "sighting_of_ref": "indicator--4149cbc3-f1f0-4cff-85dd-8648ec2ededc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cddc90a4-5070-41bc-be7d-4b9777ccbd06", "sighting_of_ref": "indicator--353c1ed4-df7b-4c01-a0f2-f11228a7af3b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fa52c1-855a-45f1-941f-139436082853", "sighting_of_ref": "indicator--353c1ed4-df7b-4c01-a0f2-f11228a7af3b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c44cd14-3bf8-4c74-b735-4e45de467396", "sighting_of_ref": "indicator--353c1ed4-df7b-4c01-a0f2-f11228a7af3b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a23f28-285e-4971-b11c-3f41a325aa49", "sighting_of_ref": "indicator--bdb3031d-14ad-4e64-aee1-3d1a641d506a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d671a1c8-7f9c-41c0-aff1-c0291b232a5e", "sighting_of_ref": "indicator--bdb3031d-14ad-4e64-aee1-3d1a641d506a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e2d6fa-869b-4375-a81e-9a486e9e00ed", "sighting_of_ref": "indicator--bdb3031d-14ad-4e64-aee1-3d1a641d506a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d4aa88-e1a5-494c-a258-e847027129b0", "sighting_of_ref": "indicator--4aee8fcd-0a3f-4e26-858f-afe2a6f42b44", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7949890-8bd4-4ca8-8082-97707da7b40b", "sighting_of_ref": "indicator--4aee8fcd-0a3f-4e26-858f-afe2a6f42b44", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166c0278-d69c-44dc-8748-72fda07d8651", "sighting_of_ref": "indicator--a85ca7a3-cead-4ef8-b54a-4ecde7f895f6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d587eef3-6ef9-49ba-b6f6-a490013dd136", "sighting_of_ref": "indicator--541dffb4-f4c0-48e5-b9a8-fce3cca74aea", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9856a625-b261-482b-ade4-d841b1c5867e", "sighting_of_ref": "indicator--69f3d2ac-bd70-4b94-9ef5-2f18f6ba16f7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea7c0fe-0c79-4fa3-b129-11aa21c0591f", "sighting_of_ref": "indicator--9e61d32a-dd51-4db4-9d9b-f1e149557d37", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1267d7-1274-4896-9762-92476816a20e", "sighting_of_ref": "indicator--7da4f3a6-d555-4fe3-b1a3-f54d2804cd00", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eec354b-3884-4909-8754-4bfb8b64d8b7", "sighting_of_ref": "indicator--84c835e4-5c66-42fa-a1e6-16096b6d1a84", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41dc918-21c3-4a4a-9224-82eb2b346b3b", "sighting_of_ref": "indicator--aba97597-8449-4bee-b2bc-690abd256146", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175355d7-39b3-4b9f-b8f6-69acd11db82b", "sighting_of_ref": "indicator--7e02aec6-92ef-4462-adcc-373fc94c562e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a647f6-08fa-49e8-a0ef-0d8159b7f6bc", "sighting_of_ref": "indicator--86876ea8-24ff-4f5b-a2cb-0eefcd77cf43", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b49e21-dd6f-46cf-aad9-a628ae7192f5", "sighting_of_ref": "indicator--86876ea8-24ff-4f5b-a2cb-0eefcd77cf43", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92dd9d3-2d3a-478c-8860-111bf4160684", "sighting_of_ref": "indicator--98c9478a-837e-4e60-846e-99ed939d0f66", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e03b7a-b328-4e55-a528-84c14f2a06ac", "sighting_of_ref": "indicator--98c9478a-837e-4e60-846e-99ed939d0f66", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db40502a-9d93-4567-95a3-5f2c2351b616", "sighting_of_ref": "indicator--98c9478a-837e-4e60-846e-99ed939d0f66", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bafdece3-776e-4821-8076-6a3f571a0dfd", "sighting_of_ref": "indicator--93e7a48a-676d-4a17-b56d-17a802154d9a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b460cac-eec1-4dc2-9ce8-3ed30bd67371", "sighting_of_ref": "indicator--bd32c343-a4fb-42d3-bd98-32284987261c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d5a192-b029-460f-9b7e-ee655c62f17b", "sighting_of_ref": "indicator--6a9b7616-590e-4236-816b-897407960dc7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd052a6-778e-4b07-8967-a041017edb52", "sighting_of_ref": "indicator--4c641d2f-6bda-4f2f-9d9a-9f1e4857b767", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79522628-bfa3-46ca-af27-52b35cd4032d", "sighting_of_ref": "indicator--4c641d2f-6bda-4f2f-9d9a-9f1e4857b767", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837d478a-e4f2-4f87-ba17-a2a989b8d6d8", "sighting_of_ref": "indicator--17c84abf-b633-4839-8ffd-b0492faccb6d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdafd494-2970-45de-b026-e68187860e6f", "sighting_of_ref": "indicator--040087b3-3368-4c84-96a9-d192bae266db", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64dd884c-1b2e-4537-af16-1acc8a2ca561", "sighting_of_ref": "indicator--040087b3-3368-4c84-96a9-d192bae266db", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44db950-dc1a-464c-8103-1a54df26f52d", "sighting_of_ref": "indicator--4c30a653-4fea-481f-b08b-8d90256870d6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e2a5b3-54a3-42f4-866a-2a42d88f3ac4", "sighting_of_ref": "indicator--4c30a653-4fea-481f-b08b-8d90256870d6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eeb42cc-329c-46cb-bb5d-456f87c6322b", "sighting_of_ref": "indicator--b630d17a-8bea-4659-8f89-d268bda34779", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae30de6-5299-4567-bf3d-6aaa185d5822", "sighting_of_ref": "indicator--b630d17a-8bea-4659-8f89-d268bda34779", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603165a0-dca2-4e02-9c84-0eafd2a557c0", "sighting_of_ref": "indicator--d18dfa33-2ba3-4b71-b88d-56eb2d247d42", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515a9fab-3f4b-4684-96bc-170056605820", "sighting_of_ref": "indicator--d18dfa33-2ba3-4b71-b88d-56eb2d247d42", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa288a0-86ec-4bee-aa9d-2852c26f21d3", "sighting_of_ref": "indicator--7ce52056-0531-4fe2-9604-ec0b85d3fcb2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cef0e60-ea61-4006-86db-19c78dfad5bb", "sighting_of_ref": "indicator--7ce52056-0531-4fe2-9604-ec0b85d3fcb2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f0b651-0843-437a-a962-40fc6b10ab47", "sighting_of_ref": "indicator--c46a0abd-0218-43e7-bb6a-b611b33c6b8c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df79829-b706-4336-a262-e83cf6f778e0", "sighting_of_ref": "indicator--91a97e0b-8d67-4e74-a14a-431b457b0f6a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336a4754-f60b-4e42-a31f-56c9f15e0e00", "sighting_of_ref": "indicator--f50ad7f1-7b64-4261-ba68-0f6de3737644", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c37634-f49b-444a-a9fe-f2bff50b90d4", "sighting_of_ref": "indicator--f50ad7f1-7b64-4261-ba68-0f6de3737644", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed759568-43c7-466e-82c8-b24997886d43", "sighting_of_ref": "indicator--333f9368-c1c5-47e4-9dad-8590cfebfeae", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d45bf1-fe5a-4fc7-b882-3a7de114f200", "sighting_of_ref": "indicator--333f9368-c1c5-47e4-9dad-8590cfebfeae", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b805f4-a728-4945-a36b-937954ca0bb1", "sighting_of_ref": "indicator--4f085b36-14fa-484e-9992-3add553b6202", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d882387-b03b-47d4-b5d0-b6dfee0fcaa1", "sighting_of_ref": "indicator--db67a760-df7a-42a8-bcb3-385b985f06d7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225eaa3a-ee12-4077-b29b-99f3a02fdceb", "sighting_of_ref": "indicator--f893fc91-c77d-4b81-b4f4-2aadd289635c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef558af-68d0-47f4-b2c6-5140dc62e24f", "sighting_of_ref": "indicator--f2195329-ab52-4794-9d21-60d05f279cb1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6163e2d3-c0f8-4280-adac-fab140d0a7f2", "sighting_of_ref": "indicator--88c51cc3-01cb-4e1b-a130-27cc8d0c7dfb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527f5bbe-9808-481d-9f93-c0931552f0b0", "sighting_of_ref": "indicator--022780c5-d4a7-4486-8590-311ec71d7ecb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ae9618-c945-4c7b-bf04-cb094d5a3ae4", "sighting_of_ref": "indicator--9542fc2e-c63e-4f1d-8304-a4476687e854", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9925700b-2636-400c-b7c3-e501f8bb0d90", "sighting_of_ref": "indicator--f146617e-102b-44db-bc4a-6787893df9f1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0349315-a809-43af-8f11-01c14ba59141", "sighting_of_ref": "indicator--3076630b-8379-4127-a178-f95002c43192", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1a5132-4489-49bc-9feb-f04b548f673a", "sighting_of_ref": "indicator--ccc2dd24-ac24-40f4-9b56-8f36a03c130d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9cf981-f974-4270-9dd9-d0993d2f8a71", "sighting_of_ref": "indicator--688fa6d1-8e7e-456e-8f0f-686fa65ee74d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3d48ce-3387-460e-ab8f-8566ade84462", "sighting_of_ref": "indicator--b8032379-a5be-46e6-8054-bd4caa819836", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818f6de4-9f8a-43b1-bd71-929d4f721dee", "sighting_of_ref": "indicator--03b1b9cf-4530-4f46-ae08-d9ce6f3bf309", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5759e62b-ebed-4475-a099-54b91af0594a", "sighting_of_ref": "indicator--61669914-a216-42fc-ad45-3a2cdddd0b3f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4149ccbd-2402-45e3-9e74-13a08db61704", "sighting_of_ref": "indicator--fa6c8089-4a24-468d-bcef-48a84ce2679d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19da85d5-e6ae-4e38-a255-e20b6f5aa24c", "sighting_of_ref": "indicator--5dbf9581-716c-4575-b0d2-4f6a16290d07", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b20a986-b97b-4f0e-a8f7-4aa64f3aed5b", "sighting_of_ref": "indicator--5dbf9581-716c-4575-b0d2-4f6a16290d07", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a26d405-a830-47d5-9dff-e289dcf27336", "sighting_of_ref": "indicator--c363247d-adbe-44c5-a643-d83d7fd5b5a5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17e5093-ae92-4589-8839-7ad2d4b5512f", "sighting_of_ref": "indicator--c363247d-adbe-44c5-a643-d83d7fd5b5a5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f4e8eb-38e0-4d4d-801f-7149aa32b0b4", "sighting_of_ref": "indicator--c190bf73-1542-4ddc-929b-e3ba00efde5a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095805a1-4454-48e1-ac9b-316699b95e58", "sighting_of_ref": "indicator--c190bf73-1542-4ddc-929b-e3ba00efde5a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44d4de3-be1a-4875-8b01-480d6a0d3230", "sighting_of_ref": "indicator--c190bf73-1542-4ddc-929b-e3ba00efde5a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67dfa04-17c7-444e-8ea5-a7ebe3074d71", "sighting_of_ref": "indicator--86ed9e96-bc9c-455d-84f0-164e4fa62c26", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057b0dff-cc91-443e-ab51-57291180d7cf", "sighting_of_ref": "indicator--86ed9e96-bc9c-455d-84f0-164e4fa62c26", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a81f24-b7a9-4b67-a2b6-dec8eae755f3", "sighting_of_ref": "indicator--86ed9e96-bc9c-455d-84f0-164e4fa62c26", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2060cc0-b9eb-444b-9a43-4400dd84f7cd", "sighting_of_ref": "indicator--0b9a6dcf-66bd-4451-aca0-ef65bdd42e80", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda2ae64-7199-461c-a85f-493af7e59ae5", "sighting_of_ref": "indicator--0b9a6dcf-66bd-4451-aca0-ef65bdd42e80", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b57ff4-5872-4c99-abfc-ef0faaecb93c", "sighting_of_ref": "indicator--0b9a6dcf-66bd-4451-aca0-ef65bdd42e80", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48964bbe-2111-4635-b68a-a191ee66c2e9", "sighting_of_ref": "indicator--d6605f1a-4aea-4731-b2eb-eb25067b471a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c291b69-c192-4f7e-8406-4c35e564af44", "sighting_of_ref": "indicator--d6605f1a-4aea-4731-b2eb-eb25067b471a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14042d35-78e1-433f-83a3-9d5d68890327", "sighting_of_ref": "indicator--d6605f1a-4aea-4731-b2eb-eb25067b471a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195c507f-0784-4a1b-b71a-e9d435e9770d", "sighting_of_ref": "indicator--14e99245-e01b-4be1-ae9e-df109ae8d4b0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a3d592-25b5-404d-a381-45ffadfec55d", "sighting_of_ref": "indicator--14e99245-e01b-4be1-ae9e-df109ae8d4b0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0f95f8-5262-463c-a739-64ce971830ac", "sighting_of_ref": "indicator--db10650f-1150-442b-b723-d52bdc716267", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027f6069-1c56-41ab-9d99-c9144b92906b", "sighting_of_ref": "indicator--db10650f-1150-442b-b723-d52bdc716267", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f84fef-e66e-4377-870a-b239bb803185", "sighting_of_ref": "indicator--db10650f-1150-442b-b723-d52bdc716267", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0173404-8164-4275-8853-36723f2fd676", "sighting_of_ref": "indicator--ae4b2e11-d5b7-404b-a65f-5819d74f171c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c461f3-3b81-48eb-84cf-19080f3ef5ed", "sighting_of_ref": "indicator--ae4b2e11-d5b7-404b-a65f-5819d74f171c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988a3854-cce2-4442-9244-edf0f9ce3d95", "sighting_of_ref": "indicator--a2360898-fc79-4349-9e51-1794b62be0c1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e92274-1e63-4317-9c7d-c3b1ef47630b", "sighting_of_ref": "indicator--a2360898-fc79-4349-9e51-1794b62be0c1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962b605d-3954-40d8-a864-57426b6ee74e", "sighting_of_ref": "indicator--a2360898-fc79-4349-9e51-1794b62be0c1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471b4693-6943-4215-90f9-3908de4b1a2f", "sighting_of_ref": "indicator--a582c067-11bc-49b4-a116-3bd9bd355b0e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d53f4f-e463-4988-9e6a-b7181a4cbefa", "sighting_of_ref": "indicator--a582c067-11bc-49b4-a116-3bd9bd355b0e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ce7aaa-c5ec-4d5a-8b53-1d3cdffa5db5", "sighting_of_ref": "indicator--a582c067-11bc-49b4-a116-3bd9bd355b0e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f245ab45-be7b-443a-a43f-2e0a221289e2", "sighting_of_ref": "indicator--bb96c033-aec3-4d88-9f5b-09cd19a14c73", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd47f1c-421d-4dfa-acb1-4f229a1c848f", "sighting_of_ref": "indicator--bb96c033-aec3-4d88-9f5b-09cd19a14c73", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecace350-1997-4010-9a54-0bad1574b3f9", "sighting_of_ref": "indicator--c2996be8-b9b0-45bb-9938-43aecf33d39c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0cfa44-9004-43df-8faa-fabfa3242f07", "sighting_of_ref": "indicator--c2996be8-b9b0-45bb-9938-43aecf33d39c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8cff398-72e8-40f4-bf94-e83f225f8379", "sighting_of_ref": "indicator--c2996be8-b9b0-45bb-9938-43aecf33d39c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522cc110-88e2-4353-b983-14fa5ef42588", "sighting_of_ref": "indicator--72ada615-688c-4c83-bfbc-147e3f5af844", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a38da9f-e4e1-4046-8756-de953ef84487", "sighting_of_ref": "indicator--72ada615-688c-4c83-bfbc-147e3f5af844", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab64064a-a8e7-4d8b-b4ff-a60f77782666", "sighting_of_ref": "indicator--72ada615-688c-4c83-bfbc-147e3f5af844", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08f576d-f679-42e8-934e-9452c8a132e2", "sighting_of_ref": "indicator--0daf9387-13a4-40d4-81d0-58310c7d672e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d11567-753b-4a2d-b5e0-ae269a4accc8", "sighting_of_ref": "indicator--0daf9387-13a4-40d4-81d0-58310c7d672e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688b585a-c991-4b8e-82c1-6d1b598881d5", "sighting_of_ref": "indicator--e79fc291-2349-4ed4-9cde-350f854fc1fc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c120920-80c6-4d0a-8fab-1530bebeee59", "sighting_of_ref": "indicator--e79fc291-2349-4ed4-9cde-350f854fc1fc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da30989-9580-4039-8b48-61c1e94e82ec", "sighting_of_ref": "indicator--33d44b95-52e1-43f8-9ec0-ee7d20b9dfc4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b8562e-f22c-4737-9c66-979b9e019901", "sighting_of_ref": "indicator--33d44b95-52e1-43f8-9ec0-ee7d20b9dfc4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78173d27-011f-4c5d-83aa-63ced9418128", "sighting_of_ref": "indicator--33d44b95-52e1-43f8-9ec0-ee7d20b9dfc4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9ba5b2-e1f2-43a9-a123-6deb64e8a883", "sighting_of_ref": "indicator--d0c8281c-14b8-402f-a59f-5f67e3b2961b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f43759e-3a95-4d49-bf35-769be9fcaea7", "sighting_of_ref": "indicator--d0c8281c-14b8-402f-a59f-5f67e3b2961b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecc45df-fbca-4a63-a857-15bb5249e712", "sighting_of_ref": "indicator--d0c8281c-14b8-402f-a59f-5f67e3b2961b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7aed919-4e3e-4210-92f8-4fb081e453ef", "sighting_of_ref": "indicator--27da79d6-83d5-4b50-b062-715aef0b16e0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87c4400-249d-4e46-84f5-d7006fe16202", "sighting_of_ref": "indicator--27da79d6-83d5-4b50-b062-715aef0b16e0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f959f739-f0fa-4398-bfde-9a4420d36479", "sighting_of_ref": "indicator--27da79d6-83d5-4b50-b062-715aef0b16e0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552581dc-b78b-49e3-b39e-4f56e0f773c9", "sighting_of_ref": "indicator--ffcbac19-b74a-4fb3-8a6b-3dd36c2ac24f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddcc5232-88d8-4021-bce7-6d291488df56", "sighting_of_ref": "indicator--ffcbac19-b74a-4fb3-8a6b-3dd36c2ac24f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c1316b-3266-480b-a8f2-08501966b4c8", "sighting_of_ref": "indicator--ffcbac19-b74a-4fb3-8a6b-3dd36c2ac24f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb36f9c-fa8a-4ac7-975d-6f27d340c32f", "sighting_of_ref": "indicator--f91b6a58-bfec-4f1a-88dd-3e94c147355b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cf1054-59ca-4c5d-9520-8d4d2df35dbd", "sighting_of_ref": "indicator--f91b6a58-bfec-4f1a-88dd-3e94c147355b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfd26db-c42b-499f-8c17-8aacbe252552", "sighting_of_ref": "indicator--f91b6a58-bfec-4f1a-88dd-3e94c147355b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38373d20-10b4-47bb-a9d9-386d960d4a77", "sighting_of_ref": "indicator--a4ad1a4d-1e67-48ee-bf22-e1443deffb55", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7097edb9-b256-41ff-8e7b-44ea82655d8f", "sighting_of_ref": "indicator--a4ad1a4d-1e67-48ee-bf22-e1443deffb55", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c85810-2518-45bc-bc86-a5920b3575b5", "sighting_of_ref": "indicator--7ec56bf3-2858-43a4-a468-8551dd2681f9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5678fe3c-bbed-4f17-ab19-caa7d0b9a534", "sighting_of_ref": "indicator--55cf923d-37ae-4319-81c1-dbdb2eb680f5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cb6f05-d4f9-4437-bb67-7552a396c7b6", "sighting_of_ref": "indicator--254f70a1-36d3-4a7c-bee9-147a4e786a5e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f77aad4-c678-43bf-ae42-cd0f4fc5bd6c", "sighting_of_ref": "indicator--2462ef63-73b7-4514-9d20-2f11bf9e8f9a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28095c6-b571-4164-97de-8da93f5ef38b", "sighting_of_ref": "indicator--88d4daa8-b4b1-48fd-9f48-cfcef9bbd8dd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46dfea6-878b-42d4-bc5f-d961ef33f74a", "sighting_of_ref": "indicator--e73fdeb8-90b3-472f-9ea2-bc481d0644e9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c8e072-00ac-4083-9864-9fe1a8d8a36c", "sighting_of_ref": "indicator--c4b3c735-6a02-49c0-b22f-ac46308de448", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876868ac-9d69-4c0a-a70d-c1346cd79dd7", "sighting_of_ref": "indicator--a61da36f-9e97-4907-b093-1627742d482d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c645ec-dc1f-4c80-94d9-831dfc08d653", "sighting_of_ref": "indicator--4f73caaa-9e76-4b78-acf7-907ba9987950", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54e12ea-e45a-402c-bf80-cca5025da71e", "sighting_of_ref": "indicator--2375c7b0-d6ad-4712-8f90-59959f7085ed", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3e43e2-2be6-4558-83ba-8fa31cdfa5bd", "sighting_of_ref": "indicator--28dac6d6-24fd-4cfc-8174-c2106a2890f4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f6cd98-b307-49ae-bec2-6ed5f426a732", "sighting_of_ref": "indicator--273fcd9d-7ff0-4a9e-915f-ee205f8235e7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b00f089-7b8c-4ec6-ba9f-5cd9f6385b2a", "sighting_of_ref": "indicator--273fcd9d-7ff0-4a9e-915f-ee205f8235e7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65337feb-af7b-4376-a46c-eb200cf61ffd", "sighting_of_ref": "indicator--60f8a6c8-7ce5-4f6f-9011-3f549f323488", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e33795-67dd-4332-a57d-079cf86421b3", "sighting_of_ref": "indicator--906de05a-6d16-4a5b-a62c-afbf9bcc153c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30e28f2-cae3-49a2-b16b-416ea095f79e", "sighting_of_ref": "indicator--906de05a-6d16-4a5b-a62c-afbf9bcc153c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528e1584-0f5a-4f9f-8cdb-eaaa7768c886", "sighting_of_ref": "indicator--bf25baae-b7ee-4ddc-bcd4-0c69eec665d4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad54881e-6106-4cb1-aa5e-8f134765fd2b", "sighting_of_ref": "indicator--bf25baae-b7ee-4ddc-bcd4-0c69eec665d4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c81b0be-4e6c-4a92-86b3-7e2f89d7d08e", "sighting_of_ref": "indicator--908ecaad-a149-4e1c-ac84-16901ba2ff3b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93226ff0-4abd-48e1-88ee-2fecb63f9dc5", "sighting_of_ref": "indicator--908ecaad-a149-4e1c-ac84-16901ba2ff3b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c979a1-7575-498a-9726-4c5b07da6f47", "sighting_of_ref": "indicator--604b8880-3ec2-444f-bd81-79eff908a84c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e73bb6-df5d-4ab4-9756-c5d7da9c4831", "sighting_of_ref": "indicator--604b8880-3ec2-444f-bd81-79eff908a84c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0579ba3b-5a37-4884-9fd9-5aabd428f71e", "sighting_of_ref": "indicator--516c2394-c99b-402f-b8f1-0feca4b9f8fe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4ce505-b85a-404a-87e8-89aca63cb786", "sighting_of_ref": "indicator--516c2394-c99b-402f-b8f1-0feca4b9f8fe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7423e93-89ac-4e48-b2c2-09b2ea02420f", "sighting_of_ref": "indicator--0e5dbec2-f041-45aa-9037-9284e89074c8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be98cfe-99ae-4b65-8282-61625e50dad1", "sighting_of_ref": "indicator--0e5dbec2-f041-45aa-9037-9284e89074c8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f436e93-9cb1-47fe-8fef-a405ac939bde", "sighting_of_ref": "indicator--a5f903d7-a2fc-4c70-b0eb-b441607535d5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b0a953-b912-4b6d-a0a6-2553294475b8", "sighting_of_ref": "indicator--a5f903d7-a2fc-4c70-b0eb-b441607535d5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a84b9d-2a40-46a1-b882-5a0ec504afde", "sighting_of_ref": "indicator--816211ff-5518-45e4-b507-1ce69eb66c14", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4ee246-09bf-42e6-ac33-2cb9a93252c1", "sighting_of_ref": "indicator--816211ff-5518-45e4-b507-1ce69eb66c14", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1710f6-aa4a-4589-8fd5-4a8de6077dda", "sighting_of_ref": "indicator--f9b5447b-16ef-4e6d-867e-29dcb341ae1e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb19030-a156-4511-a0a3-bc27d3711db0", "sighting_of_ref": "indicator--09d46da6-ab58-4dd3-82ce-0f3ef1d0cc25", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea7789f-8f01-43a0-a32c-a6d203e66382", "sighting_of_ref": "indicator--09d46da6-ab58-4dd3-82ce-0f3ef1d0cc25", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890d1f0b-5455-4a91-9e3f-bffb1dc204b3", "sighting_of_ref": "indicator--c334a2e5-7605-420c-a8ab-dfbefadc7e3a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c9f658-ad99-4766-80b6-59440386207d", "sighting_of_ref": "indicator--c334a2e5-7605-420c-a8ab-dfbefadc7e3a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2990ae-7a4a-4261-9584-2f0ce49b6661", "sighting_of_ref": "indicator--1a8fc571-f1e5-430f-90f2-181b8bce380f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5150c148-0d90-4cff-9a6f-fcf58ca7b6f3", "sighting_of_ref": "indicator--49d7628c-633b-4155-8601-99792b861546", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b690c0a-5da4-4103-ae51-e8de0807b2a5", "sighting_of_ref": "indicator--49d7628c-633b-4155-8601-99792b861546", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801837af-4f0a-4843-889d-57adcd9c4ae0", "sighting_of_ref": "indicator--d0b18973-42c3-4fc6-8aab-6b6f853131b2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0534237-bdb7-43cc-9bea-fd03bd0a2fbf", "sighting_of_ref": "indicator--d0b18973-42c3-4fc6-8aab-6b6f853131b2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c270078-554f-4d5e-b553-03e893d106d6", "sighting_of_ref": "indicator--48e7af6a-2e53-48cd-8ff8-6c0f3ad9bb04", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2dcf3f-0dcc-4a85-ace4-a7319de9f58a", "sighting_of_ref": "indicator--48e7af6a-2e53-48cd-8ff8-6c0f3ad9bb04", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7296887c-71aa-48b4-8511-40ac53a7910e", "sighting_of_ref": "indicator--6cd00430-d8c3-414f-be64-7befe1188b81", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de189df-4b92-4f56-8e62-ec69ae8a1bd3", "sighting_of_ref": "indicator--6cd00430-d8c3-414f-be64-7befe1188b81", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea66159-54c0-4fb2-8e78-f47db01cd34c", "sighting_of_ref": "indicator--64282a5f-b451-4f59-a7de-454a64bf9759", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30fcd2d-2817-4441-bc63-281b26c042e5", "sighting_of_ref": "indicator--64282a5f-b451-4f59-a7de-454a64bf9759", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5996e511-6a6f-4d9a-823c-12e9fbee4b45", "sighting_of_ref": "indicator--e519849e-50c6-4dd5-b490-918c5257f619", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8845ea-1b1a-40da-b192-ea64a8ff48b4", "sighting_of_ref": "indicator--3b656201-7e65-4c4d-b952-a2aeea50381a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd4958a-9490-4617-b8a8-0b9f34a58f54", "sighting_of_ref": "indicator--3b656201-7e65-4c4d-b952-a2aeea50381a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f2ebfd-7899-44a1-840a-6337c193de4c", "sighting_of_ref": "indicator--25440780-d01d-45e0-a5e1-ff925a6ddf50", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497fb62e-f203-4a57-86a5-7a5d61aa32a9", "sighting_of_ref": "indicator--25440780-d01d-45e0-a5e1-ff925a6ddf50", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6b250a-aba1-4789-8072-8db185eb5b02", "sighting_of_ref": "indicator--a34b3d37-7338-4ffb-a5a4-40ae22870411", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b756d71e-1d0f-44ba-b58c-527777aa869b", "sighting_of_ref": "indicator--a34b3d37-7338-4ffb-a5a4-40ae22870411", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0aa9c42-d9e3-4aac-8398-48b57f0cd17f", "sighting_of_ref": "indicator--a35fae7e-64ac-4d94-aee1-4c3c357259ab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5afb358-a562-4d2f-a76c-0d7627725a63", "sighting_of_ref": "indicator--147b9df8-61e2-4f19-8458-ddfdb7a4a696", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524ee9c7-2102-42b2-9216-6a5bfc0a04ae", "sighting_of_ref": "indicator--147b9df8-61e2-4f19-8458-ddfdb7a4a696", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2691a2c-49dc-4ebf-b277-9e5457aae038", "sighting_of_ref": "indicator--7fc41e9c-33cf-4139-8f40-e7f9848387e1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be81ed31-5070-4380-aa1e-05d2308e22cf", "sighting_of_ref": "indicator--7fc41e9c-33cf-4139-8f40-e7f9848387e1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16463d0-81b7-4228-9f8a-a1489b5fd94d", "sighting_of_ref": "indicator--e87630f7-7861-4a28-a07a-956cb9981e0a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67150f2c-d71e-4300-81ed-063f0fd49efb", "sighting_of_ref": "indicator--e87630f7-7861-4a28-a07a-956cb9981e0a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344b4e09-621c-4973-b280-e3e045c0fe5c", "sighting_of_ref": "indicator--3f770658-662c-4edc-8737-1d30e49ae635", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b98488-9166-44c5-bb18-160e19b9415e", "sighting_of_ref": "indicator--3f770658-662c-4edc-8737-1d30e49ae635", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a00848-236a-4096-9c37-465d2bb94951", "sighting_of_ref": "indicator--bf038aa2-86dc-494e-b701-ffda6995b23e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebc29a4-a63d-46f2-92ad-2998603dbd70", "sighting_of_ref": "indicator--bf038aa2-86dc-494e-b701-ffda6995b23e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d077c5-50f5-4f37-8cdb-bc089112ad62", "sighting_of_ref": "indicator--acd4c9e7-b098-4063-96a1-7f0311092b4c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eec989a-bfcd-4fb9-96d0-a234eeb564f5", "sighting_of_ref": "indicator--acd4c9e7-b098-4063-96a1-7f0311092b4c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0427dd-0d8f-4370-8418-ca644a98740c", "sighting_of_ref": "indicator--c7872162-af6c-42a2-9ee6-927b5f67695a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3dd6289-ba42-40c0-8924-18ff4877233a", "sighting_of_ref": "indicator--c7872162-af6c-42a2-9ee6-927b5f67695a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e69a867-2828-426c-9f49-bee173fa3f4c", "sighting_of_ref": "indicator--71cb2a80-8f4e-4e9d-9e89-5b2f516739b1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4b3f67-9aed-400d-b848-845525b77f2d", "sighting_of_ref": "indicator--71cb2a80-8f4e-4e9d-9e89-5b2f516739b1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434de0f8-ec78-4956-9756-d74acd9c229a", "sighting_of_ref": "indicator--35a2a72b-c7ad-4080-a25b-dc3dcc8c778c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6cc1c54-e64a-4ef6-8e5b-566081ae9a1e", "sighting_of_ref": "indicator--35a2a72b-c7ad-4080-a25b-dc3dcc8c778c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c1d0c0-ddcf-4464-8cbb-c845806cae54", "sighting_of_ref": "indicator--4aebf9ab-3b6c-49bf-a3dc-fdb4c2bf0873", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd300ecb-c01a-4a2d-9d24-9bcbb93f0bf3", "sighting_of_ref": "indicator--4aebf9ab-3b6c-49bf-a3dc-fdb4c2bf0873", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50bfd100-16ff-413d-a8f3-954ae8d25f03", "sighting_of_ref": "indicator--86a37076-7291-4f47-8212-3b7f5ba7edab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11329ab0-51ef-4605-8c6f-2aacc652111b", "sighting_of_ref": "indicator--86a37076-7291-4f47-8212-3b7f5ba7edab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38d2e64-2b69-4d31-8fec-65f7fe62e391", "sighting_of_ref": "indicator--e077c68d-64e3-4328-bd86-2b02cb5efd18", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c7c989-7570-47cf-ab2b-b19ed67f7d69", "sighting_of_ref": "indicator--e077c68d-64e3-4328-bd86-2b02cb5efd18", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517f9917-e080-4152-98ce-0db3f889b7b2", "sighting_of_ref": "indicator--cf4c7b85-bce8-4940-8037-75926eb41aeb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef67971b-6a8b-475f-90bb-870740d3319c", "sighting_of_ref": "indicator--cf4c7b85-bce8-4940-8037-75926eb41aeb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea26b4c-1b32-4892-8e86-d13317f8cd85", "sighting_of_ref": "indicator--cf4c7b85-bce8-4940-8037-75926eb41aeb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2caff150-ae68-477a-91d5-1867b2876f0f", "sighting_of_ref": "indicator--a2d02d7e-05f0-4ce4-b2c9-4db793c60f12", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c569b60-cae4-4163-a3e8-b183b56f241b", "sighting_of_ref": "indicator--3a5851a0-a319-47d2-8926-09e66fae110d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8918cacc-f99e-47ae-8716-d7a1eea6963a", "sighting_of_ref": "indicator--fab56f5d-5ec1-468d-a7a8-d4b559843c03", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6eeeee-2e62-43a8-9116-888d58f9519b", "sighting_of_ref": "indicator--02eab1aa-5a28-44fb-857a-2bf2966e538c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15157b2b-c6e1-42b9-9d6b-4b0c6b16d1a0", "sighting_of_ref": "indicator--fcff7d79-d4af-4736-96f5-7228b555c6a8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cffaefc-3596-4b9b-88b4-c286ac62795b", "sighting_of_ref": "indicator--4d975907-8885-4720-b6b0-61916a009b75", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c1759e-105b-4cff-b95d-5421b2e3ba56", "sighting_of_ref": "indicator--5b398bf6-7deb-4c08-8d8f-71bc87439aee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec377db5-d101-4bfa-b1af-a6b9e3062892", "sighting_of_ref": "indicator--a53e0016-b7fd-4303-9efd-adf78a46cfb5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c0a495-19aa-4902-95c3-506b4f963f7f", "sighting_of_ref": "indicator--ff80f7b6-b381-4622-9be2-147f7c7929db", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56bd1812-1646-462b-94c7-b207b41fc52c", "sighting_of_ref": "indicator--ad1f7105-493d-4640-922d-1ac787e5fac3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace519bf-ac0c-4bc1-bc38-0b18878cd7ec", "sighting_of_ref": "indicator--6c914c7a-97ba-4e71-9e25-ab7cc33a7417", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a46fead-b32f-43aa-a739-7b934857e489", "sighting_of_ref": "indicator--92339650-286b-4c08-8cb1-d5c966c8a4b8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8955a2b0-b5c2-474f-893b-39c835368eb7", "sighting_of_ref": "indicator--a737e9b0-fd1f-4346-beed-c15e0a74ac60", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d7e1da-f512-4011-82c8-87456f0587e8", "sighting_of_ref": "indicator--d491f42c-55d3-4953-8e26-5eae8ec2f77e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb09a420-3e21-4457-9c06-b1b6d11e2a15", "sighting_of_ref": "indicator--656720c1-9ddb-4999-9526-5689a3d815d4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2bf3e91-40f9-4e62-bcee-8a158017f123", "sighting_of_ref": "indicator--bb4514b9-cb97-4683-88bf-5330b14ef9c9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d3b084-c022-4d8d-b9b7-4b34a2130b8f", "sighting_of_ref": "indicator--795c6936-a9f3-46db-bcb6-624a10f2f844", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1930a8-44df-4989-b842-345723f4fc74", "sighting_of_ref": "indicator--13d7635a-9ed9-438e-9059-3e7c0269154e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4bd8e3-3106-44ae-af48-ba8137b321df", "sighting_of_ref": "indicator--07229302-ff29-4b75-be3e-2be15ba8624e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef28c6e-a65d-455b-ac41-6e0075b0818a", "sighting_of_ref": "indicator--1d297e58-eff7-4cf5-8cf0-a2b1f894857c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695f260b-8be5-4879-949f-7efa47a52b67", "sighting_of_ref": "indicator--d3cdec0c-cbc7-44de-851e-f3c89283ce48", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d5add4-ea73-49fd-914f-3f23e6d98907", "sighting_of_ref": "indicator--ed3a5dc6-58bf-445f-a2d6-5f9515256925", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a420759-0401-4961-a3a0-b160a7b62055", "sighting_of_ref": "indicator--5e269ad1-7867-4627-837a-631f9cfd3e2e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff2050e-32cd-4d41-94ea-515537ae6841", "sighting_of_ref": "indicator--06c5f990-4f47-4260-a0ce-a5be2a80177a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf7b44b-1bd8-49a3-aebe-a4aa8fcb6a35", "sighting_of_ref": "indicator--0b306fd1-f8ab-4e02-b8a2-5e751166fe00", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4aa122b-e779-4b7b-8ca2-0f10610fde8d", "sighting_of_ref": "indicator--837d9283-44b2-43a8-a17d-19d5560bed7f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f10163-9edd-480b-8806-aa927d319e11", "sighting_of_ref": "indicator--97161ca7-1c72-401d-81d5-334f14e71970", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d87637-9362-4cd3-9b47-ae0c4705764c", "sighting_of_ref": "indicator--b0a16cc1-3241-4f59-bd64-e9a87709d622", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4400e6e-3ca5-4df8-9ba7-cafde98d71d6", "sighting_of_ref": "indicator--10e89a39-f2ef-418f-9f5b-8e51d4dda332", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabc365a-b83b-4601-92b7-7eb3d031c918", "sighting_of_ref": "indicator--b6814d60-e3b6-4ca8-bf09-665f109245f1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e4b5bc-5171-472e-89bc-3777816ecaec", "sighting_of_ref": "indicator--d0bd5271-966a-4035-9163-5bbf42fdf7cc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5d2f4f-7934-4bab-a0ec-18a4284ee85c", "sighting_of_ref": "indicator--139e1fa4-1981-4d81-b0d0-e010d98577d6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e309db7e-45f2-4db8-bbad-547c6d288654", "sighting_of_ref": "indicator--6fc308c1-1d76-4737-9011-90b8fdf8a0e5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab65c39f-d77a-4137-a539-086cd653ee33", "sighting_of_ref": "indicator--467e0f6f-b51a-4b58-925d-defa99f079c2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b4d609-6665-4b4d-b694-e94b63b21264", "sighting_of_ref": "indicator--5ade2f55-6160-4293-8168-3475077f7800", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff037b85-313d-4fb4-99b2-f15c9417d787", "sighting_of_ref": "indicator--959292d3-ef53-45ae-ba2e-822a9c5ef39e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa3ab5d-6c94-4cb3-861a-b38428deb938", "sighting_of_ref": "indicator--b39319c1-fc7e-4ca8-8521-546932d8b96e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323a205c-91b6-4d1f-b460-6998a42f96ab", "sighting_of_ref": "indicator--0738e64e-749b-45fc-86b1-c437eafb89df", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047b8617-e518-4d4d-b5a9-c88f8a2b0093", "sighting_of_ref": "indicator--19d6ca75-6b3e-454b-937f-e288f806ffee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74576d7f-4139-43f3-ac26-f7a1899a8b4d", "sighting_of_ref": "indicator--19d6ca75-6b3e-454b-937f-e288f806ffee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f978ad-1328-42b6-b070-ac400bdf791b", "sighting_of_ref": "indicator--17a2e4be-b4f6-4de8-8235-55a1ceb911a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ca85db-3415-4676-8989-7549a079c44e", "sighting_of_ref": "indicator--579d8a6e-9931-4dbb-8d2a-5188d1a2acaf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c04d32b-757e-4298-81b4-df73fbbf229f", "sighting_of_ref": "indicator--579d8a6e-9931-4dbb-8d2a-5188d1a2acaf", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c4ae37-7e9b-4081-9390-fdd887a30512", "sighting_of_ref": "indicator--39cf4eef-be51-4483-86b0-958c128947fe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a09450f-eee5-4d4e-8a31-d71bd7e25c90", "sighting_of_ref": "indicator--39cf4eef-be51-4483-86b0-958c128947fe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29bb37af-2518-4c53-b0d1-38031be31a3d", "sighting_of_ref": "indicator--39cf4eef-be51-4483-86b0-958c128947fe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76a0747-4ba8-4602-889b-fac88ca08b5b", "sighting_of_ref": "indicator--a98612d6-39b9-4131-bb45-73917b26c27e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e14ed1-c6f0-44e7-a678-ffd9bf84e1d8", "sighting_of_ref": "indicator--e1c35afd-e5c8-4df5-a777-b256ec00ea00", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a90c1db-c261-4efd-a336-ef3a00704ae2", "sighting_of_ref": "indicator--e1c35afd-e5c8-4df5-a777-b256ec00ea00", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae7b45d-762a-489e-9484-2f815de36ac7", "sighting_of_ref": "indicator--e1c35afd-e5c8-4df5-a777-b256ec00ea00", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6497c2e2-f809-4b12-a336-f9c40f833529", "sighting_of_ref": "indicator--51929ee2-e19b-4cd7-a366-675fa2e87af8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ceeb6d9-c409-43b3-b90c-f36e735bb4bb", "sighting_of_ref": "indicator--51929ee2-e19b-4cd7-a366-675fa2e87af8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98024c88-6d44-4ad4-b0b0-9743ec6a1eb4", "sighting_of_ref": "indicator--d5304a2a-3310-43c9-bd54-a95074634be1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0ba8b0-029b-4c9f-96d4-1f62391225b0", "sighting_of_ref": "indicator--b9fdc033-bc87-4164-b03d-cf49b1f7537a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe79ba8-ea63-4f7e-bf37-478a5dea6893", "sighting_of_ref": "indicator--e6365975-ebb9-4b46-92d1-d3410fb3d064", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b06c80-eb2c-4323-a343-9d81a95574c6", "sighting_of_ref": "indicator--e6365975-ebb9-4b46-92d1-d3410fb3d064", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfbab0fe-ce52-4f37-9e21-7c28203b2549", "sighting_of_ref": "indicator--02fdab75-f21b-402e-89cb-923be0d182af", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cf2cec-e881-4104-8749-1e004e3e0102", "sighting_of_ref": "indicator--02fdab75-f21b-402e-89cb-923be0d182af", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab994298-27af-4e2e-9dcc-c93ef724f32e", "sighting_of_ref": "indicator--c8aa53f3-b65c-4ac5-8ac0-52c40528367e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3347d6e-4b74-41f4-916a-94d823718c44", "sighting_of_ref": "indicator--c8aa53f3-b65c-4ac5-8ac0-52c40528367e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecadede0-564b-4b62-88cd-0ce23b53bab0", "sighting_of_ref": "indicator--00424159-716b-4504-b6c8-269b822ade53", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d287ed-8420-42fd-b32d-442f9d6cf180", "sighting_of_ref": "indicator--00424159-716b-4504-b6c8-269b822ade53", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4a75a6-2924-478c-8a97-cc87e80536cc", "sighting_of_ref": "indicator--ba82d826-faf4-4710-92d1-e88461a7bc63", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f1c1b3-db8a-44d6-ad4b-3c172678026e", "sighting_of_ref": "indicator--ba82d826-faf4-4710-92d1-e88461a7bc63", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe89054-ead2-46d3-9eca-15f231aa3df4", "sighting_of_ref": "indicator--3ff974cf-5650-4ee3-bb19-b1b9fb6da826", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe11c78-c30c-4174-b496-1af487a50e29", "sighting_of_ref": "indicator--27d1ba40-a7b4-489f-8479-2ed3934cfbac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f2e9f1-c193-400b-9b23-8fb5bb3df83a", "sighting_of_ref": "indicator--5f1e847d-51ce-447f-a562-6a45f7af443c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e10784-1beb-490a-acbb-6dc17fbbe879", "sighting_of_ref": "indicator--a7a05097-e236-47fd-8c18-b690a1b7703a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f674b31-9d1d-427d-90cc-670e77badfe6", "sighting_of_ref": "indicator--898ea1c1-9b0a-4a0d-8f09-a93f1826649b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae094bf-da5b-42bc-80d5-aa50a43e346d", "sighting_of_ref": "indicator--2de34636-2f50-49e5-96bc-386e919ed4dc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee23817-f234-4f4a-b559-5b4ced35bd4a", "sighting_of_ref": "indicator--2de34636-2f50-49e5-96bc-386e919ed4dc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2577e79-a244-4af8-82a0-67a78d4b2f0a", "sighting_of_ref": "indicator--69f0890f-fe3e-4e00-aaf6-7c41cc528cfd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adebe244-6193-425d-ab0e-b6717c0c1ed5", "sighting_of_ref": "indicator--4ebd07ba-7679-4c96-a248-b77669432b13", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15bb4cf6-fd67-4838-8acd-42612a38e3ce", "sighting_of_ref": "indicator--4ebd07ba-7679-4c96-a248-b77669432b13", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2840cc-df20-4c2e-b46f-20fbc75a3fd6", "sighting_of_ref": "indicator--62b08242-86c0-4327-b68f-fdd2408b9ccb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e17d1bc-221d-46e1-b15b-8940d72cc4dc", "sighting_of_ref": "indicator--8f164ab4-90fa-45b7-93f4-24fd9f8a0918", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51192c53-f678-494d-a3d0-4472f5f6141c", "sighting_of_ref": "indicator--8f164ab4-90fa-45b7-93f4-24fd9f8a0918", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790e530d-c313-490f-9800-29a42c1c1cc9", "sighting_of_ref": "indicator--cda6ba1e-6220-494a-8a97-1bccf4e72e5f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae80b21-a655-4742-95f6-9deb60a0fe57", "sighting_of_ref": "indicator--e6ade11f-d3d7-4fe9-8d8d-d5b321f6e043", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cffdc25-f890-4d36-bb26-d558c4ee8216", "sighting_of_ref": "indicator--2e8657f7-6f2a-46cf-b65b-4ace3c714117", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dace08f2-a2c5-4313-a114-3f4d5718dede", "sighting_of_ref": "indicator--7cf351f2-bc9d-4b3b-b7b7-4f07e75f8e01", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3804aaf4-ce7b-4054-9640-1939a378b46b", "sighting_of_ref": "indicator--f8575bb7-59e0-4d1d-a419-14ba058b7c18", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7add9f6-f40c-4e38-b649-93e10a4e574d", "sighting_of_ref": "indicator--5884b9a4-f355-4983-9f63-8f8e7a7ee0e4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8249da-e383-412a-9bca-a585ad4bb6fe", "sighting_of_ref": "indicator--c417dde6-2b96-4d70-b6ee-c5758b0131a2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb5d645-ad22-43f2-9f16-35ca9c3ea9a8", "sighting_of_ref": "indicator--eb4718cb-bca2-45ff-83b1-7b471ec6adca", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a720ff42-3589-43fc-8a62-be7c5e7df4c8", "sighting_of_ref": "indicator--d8ddd80b-2d19-4d59-84fc-7bf8109ca57e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1be804-235c-43f8-9342-0aeb989e580a", "sighting_of_ref": "indicator--cc760457-5548-4d85-a303-6a12dfe7151d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516dd8c7-c97e-4e0b-bf73-b2c041f7de6d", "sighting_of_ref": "indicator--8b0d8732-000d-4d6f-a836-093ee6099e70", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af31a255-6dbd-4248-9ea3-6ff335e2813c", "sighting_of_ref": "indicator--9a41d5a6-3901-42dc-8b39-7f07d80ba125", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b084a2cd-2b41-4975-ae5c-74b702af824b", "sighting_of_ref": "indicator--00640a16-5f25-4fa3-864f-ec042041f193", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96fdd65c-157a-4367-88e2-781401ed0c89", "sighting_of_ref": "indicator--36df56cd-ace6-485e-beab-ba6465b889f5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265f60c7-eeae-4b7d-914f-4a587dcb7bf6", "sighting_of_ref": "indicator--d98b2041-1356-4793-ac26-af29372452d1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff461135-15a2-4126-bdd4-9243b4f7849a", "sighting_of_ref": "indicator--198d77e3-1ce6-4798-b0d8-35fa97c098f1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488063a5-e410-4457-b1f2-dccd22429c1b", "sighting_of_ref": "indicator--167298b5-f269-469d-91c7-1442261e5b92", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450e74ce-b8b2-4b80-b130-2b8bf9123970", "sighting_of_ref": "indicator--1caa55fa-3f81-42fc-9b1a-59f9e0d8cb8e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4b56ca-d1d6-4ce8-a830-4e3708232c41", "sighting_of_ref": "indicator--97e20140-446a-43ee-a74e-f95331727844", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0897034a-2e69-4e13-ad84-bd9c755f9a46", "sighting_of_ref": "indicator--71d07dc3-02c8-490e-b404-19457c58d93e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02823554-5c31-4f8a-a397-0d96899a7fe4", "sighting_of_ref": "indicator--b7d1a48a-62ef-4c17-b770-3d9e99a5a372", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db27d462-5a9e-4125-a58d-4a69726ea5a3", "sighting_of_ref": "indicator--0c9883b2-8b4c-4ca7-aeb4-c572830dc591", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd4a951-dd72-4f53-bd44-d7993f1d261c", "sighting_of_ref": "indicator--3be51589-b32b-4222-8ed7-b22490bf16da", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f5ea38-b356-42ee-9ba3-2f12e67278f1", "sighting_of_ref": "indicator--cfe1b93f-b9bd-4807-85c2-6efdf5a32b7a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e166070-2b4b-4d1e-adb3-cb0f81b04d29", "sighting_of_ref": "indicator--717307d7-e67d-430c-ae0b-e6ae6ba646ff", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6fb20a-0bb7-4cd1-9456-ff3f823ed963", "sighting_of_ref": "indicator--3edc232e-a7b4-4759-a71a-e8edea76f728", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54745ac-0fce-428b-a1b7-9e690aad8e4a", "sighting_of_ref": "indicator--15a715f8-7783-4945-a211-3782364bc8fa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ab02da-8dfc-4b5c-a830-1452d1684239", "sighting_of_ref": "indicator--66d9d988-684b-4c78-b7f4-6a0969aa3862", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e27c7c-3278-4af0-9f72-f06dfc93789c", "sighting_of_ref": "indicator--afdc89a9-320d-4d10-b259-a186da977ded", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dbdf4e0-d8f8-47f0-a031-22f5cba52de5", "sighting_of_ref": "indicator--1f579218-3e6b-4e40-8f37-acd756be4638", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e830f87f-79e7-4c5f-8a94-f30f4c723fed", "sighting_of_ref": "indicator--12a8a494-6a22-4c8a-b205-415112586981", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf8e8c7-b574-4757-9bbc-33ef62f23707", "sighting_of_ref": "indicator--688747d8-3ff7-4c4a-9f5f-fae5ef331807", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d778316-1612-4e4d-9939-a36bf386dea8", "sighting_of_ref": "indicator--7a858a5a-96b8-4686-9e74-8091bc55036c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c359e323-f15c-42c4-8ffc-ac29c17c2c10", "sighting_of_ref": "indicator--b3af4f1c-71f3-4731-a312-8d0213aa51b0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a47c47-2427-40b5-b976-d95c2cd05dd1", "sighting_of_ref": "indicator--924977c1-e293-4739-8574-46849f8ae39c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c678d8e6-ac24-44bb-9634-05c8ef79c173", "sighting_of_ref": "indicator--9b08958b-f8cf-4a85-a114-0c1fcefc9ffb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56d2fea-ef88-4036-a589-e58067a3c974", "sighting_of_ref": "indicator--52447a9b-daf5-438a-8e99-7a7c8a4c1185", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--178a9a7e-b116-4248-9984-11d612cf0578", "sighting_of_ref": "indicator--17da7b89-3c94-4fe8-ad3d-a372027f7b2a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b82b81-68ba-4960-bce6-34b6542151ad", "sighting_of_ref": "indicator--bd7fa53f-a880-466d-81a8-95d1082c2a07", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ee9172-5b94-4a4d-9d5d-b2944b7266e2", "sighting_of_ref": "indicator--d2fa3dd3-58c8-4676-81e1-5070badfef71", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb569f6-546c-4929-b518-45e38675ee4f", "sighting_of_ref": "indicator--ea8ddec3-bb8b-4664-8ae4-55be021e88b5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4764f64-8d28-4993-8d12-2ccbd66f0ef9", "sighting_of_ref": "indicator--f8a4e1ab-6393-4404-ad24-3a9cd469017e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63643e50-d6cd-4949-abaf-6bc5fa2ea8ee", "sighting_of_ref": "indicator--aa70f06f-689b-4677-99ab-a7f485e46fe2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6070f75-eb42-40a8-a09d-92ce2c90ba45", "sighting_of_ref": "indicator--6974bc6d-15d8-49e4-962b-452bfd15fae2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293a0857-5893-453f-af10-bc7ec342d227", "sighting_of_ref": "indicator--31bc316f-3e6c-49a6-b882-dbd2fa5f5193", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92806e72-99e1-4292-acf5-a53c285e7f80", "sighting_of_ref": "indicator--c56e7137-c206-4423-bcfd-90c9c3e91ae9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb087a6d-1aa3-4892-8811-ac33b23412d0", "sighting_of_ref": "indicator--4b6dcbfc-7dff-4b0f-b1b2-6bbd72b13cd4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d92f1a7-8459-4d5e-b10d-c97f278dbb8d", "sighting_of_ref": "indicator--a9f29435-0400-46ec-8d9e-e660e6bcce6a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c149a595-4471-4cd3-9ce3-9846ccd49f61", "sighting_of_ref": "indicator--d46050a4-3bd5-49b5-8f13-431e6cdae70b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d713cda-6320-4323-a3ed-c1643acb662d", "sighting_of_ref": "indicator--a73d43e9-7454-4e5a-b102-7a356d55b82a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8bbc449-532d-408a-9a8e-e7a224fb232d", "sighting_of_ref": "indicator--6c70ecd4-ccf6-44eb-b30d-2faf5ebf5c08", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cda2f3a-fdf0-4f22-bd5a-8370f5740247", "sighting_of_ref": "indicator--010d446d-0cdb-49d5-b0cf-4a0d4d8adb8f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6faf6f-f284-4a1f-b55f-919492aacede", "sighting_of_ref": "indicator--9c32dfa0-3733-4b68-82b3-6e1428998cd1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635132b5-22eb-4f43-aad0-eda87ab1ceb1", "sighting_of_ref": "indicator--a5a5a085-91c3-4527-907c-0c2e78a676b2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad62a5ad-a24a-4c82-9760-e7fc2b09e5d4", "sighting_of_ref": "indicator--1132a0a1-ad10-4981-8177-b6ba9222c7af", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d0cc03-43d0-4a33-8479-cf1704dcbe6c", "sighting_of_ref": "indicator--24551275-e2f5-41e9-8527-d714b06ae908", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909bc7b2-6884-4d6a-89dd-3d534f0ab48f", "sighting_of_ref": "indicator--bb5fa403-964e-4bb8-aea6-856955646463", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4065f804-c464-48cc-ba0f-a8fcba5a3344", "sighting_of_ref": "indicator--bceb4365-8d25-4b0a-ab65-d6a20afd1e4f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c135f3-9f0c-44d4-b4a3-c5d287c62051", "sighting_of_ref": "indicator--cc123dbc-9ab3-4229-89b0-a10e868a54f5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8270c83-3607-4927-834f-bad7a6fff65a", "sighting_of_ref": "indicator--bac244d5-d02c-43c8-aea5-02ebe520cd68", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf4ce36-3f92-4ea1-b9bd-0be8b1376aa3", "sighting_of_ref": "indicator--c95aeb33-ef1f-4808-8c65-236ec6f07bb0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb66b52e-b246-4c21-b192-7700aa240d4a", "sighting_of_ref": "indicator--9328e74e-9b0c-413e-b881-8c50ea7219c5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8028e2-5bc1-487e-92fc-1df823c1fbf6", "sighting_of_ref": "indicator--4ee0cd81-c371-4fe6-8f21-b2319caaefda", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521f1605-c121-4cb1-b0e1-c72743de3b50", "sighting_of_ref": "indicator--3bee292e-4a1c-41e3-a97e-ab8aacbc6c8c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d1b8e5-f231-4110-b266-348fdbe78647", "sighting_of_ref": "indicator--9019c29b-b46f-4911-aff1-d1399443195a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b75554-39a0-4d94-bc92-192c533cab6a", "sighting_of_ref": "indicator--88d6fc17-2e9e-4e42-8b22-bf9574ec1380", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2025ae-6b0d-495b-a363-37162bc0d417", "sighting_of_ref": "indicator--2f0a4465-d526-4f4d-9b8f-0de8e66a3bf5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57486bc-5484-4ccf-98de-d9d2e1d044db", "sighting_of_ref": "indicator--71016d4c-1c78-471b-b257-765965090156", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310e940f-2ecc-4814-bcdb-b0adedecf88f", "sighting_of_ref": "indicator--2d3eca14-5941-42ac-b5f5-6fcd3e26391b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffeeb3fd-4589-4c8a-a37f-c0ddb88199fa", "sighting_of_ref": "indicator--ee15e545-93c1-4d85-96ca-91a8e1f12761", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb28bfc-20e5-4259-a9b3-6143be5f1b50", "sighting_of_ref": "indicator--556f70dc-3f05-4689-9dab-3ee9591fa51f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34749b84-d2c1-4c40-843d-666385102958", "sighting_of_ref": "indicator--c645e749-fccc-474f-8cdb-a435c4b7dd9f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4363f4f-aa83-4ee2-a3ed-6e69315d8175", "sighting_of_ref": "indicator--5d5ce0bf-92d2-44e3-8042-e1d67c69de25", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d32121b-b330-477b-bf9e-797e5535de65", "sighting_of_ref": "indicator--b609b362-b8cf-44f2-810e-2ebc4251be2d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2118f646-7f38-4d3e-8636-963fee6758e3", "sighting_of_ref": "indicator--108141f1-d765-4173-a446-a01246cbd335", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d75cddc-2296-43a6-b7a0-517c0dc4a9b4", "sighting_of_ref": "indicator--e1be8553-f261-4d7c-9d89-60305d7d2229", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ec6c68-5ab0-4840-a078-120de1b168c7", "sighting_of_ref": "indicator--09f58c21-fa8b-4d50-8dc2-defb5df54850", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa360f8b-962d-4522-968c-a102f60dcba5", "sighting_of_ref": "indicator--8f157e90-ad21-4474-901d-323b26f765a8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2066ee3d-5d59-4982-a6fe-d3de1856c489", "sighting_of_ref": "indicator--3dc4374a-c4f3-4593-b9c2-5113cd764d48", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887a2bce-3382-413b-ae94-907de7b5df72", "sighting_of_ref": "indicator--a0cdd834-2a1f-4263-98f2-7c26daef595d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5309198-bb2b-45cc-a1cb-ed3003c13359", "sighting_of_ref": "indicator--0763161d-360c-4c74-84e2-8ac57bb9b9a6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f713888-2e0b-4c59-921a-6e648069f9a9", "sighting_of_ref": "indicator--150d4edc-fe15-4b27-8970-0608a2cc93d6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d86032-59a5-4ae3-be18-491328768221", "sighting_of_ref": "indicator--ab98901b-35bb-4afc-ae6e-e9410712b453", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6104ff-1bb9-42eb-b4cb-c39461bc5aba", "sighting_of_ref": "indicator--e3755a3f-17b9-4db5-b531-3482bdb86f92", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bf4e10-a710-4fdf-8adb-d207d362037f", "sighting_of_ref": "indicator--68acd535-a19b-4c00-8027-6718368dd916", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f30f90-b10c-4f31-bc81-106b3b74d886", "sighting_of_ref": "indicator--61d64886-5e49-4f62-99c2-466eee463732", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8bc80e-e51e-4218-958d-faaceb68f008", "sighting_of_ref": "indicator--7b0548ae-6684-4456-a3d4-6ad050a185de", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8879bb28-c106-49ce-925b-32f528c4857d", "sighting_of_ref": "indicator--a2511dae-a376-4455-afb5-488b0b648652", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1cded4-e6ca-4799-beea-4367691d17a8", "sighting_of_ref": "indicator--86172b9a-4af7-485b-9080-869d498b63a2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ff258b-49bc-493e-a524-11e743ba8d4f", "sighting_of_ref": "indicator--c277f8cc-d287-47e1-b908-0c7a161554a4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853e49cd-bfee-4414-86e5-386f69379a6d", "sighting_of_ref": "indicator--9809dc6e-6383-416e-a116-fb73e3824972", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9188ee-66dc-459b-9f4a-c4708d012c08", "sighting_of_ref": "indicator--7b42b04c-1dd2-49c3-8e24-23dfcf5866c2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e19211-c049-40e4-bc9b-efa6b1eaae6a", "sighting_of_ref": "indicator--b93c0e83-dd5e-4d8d-ba7e-ee6596bd6823", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbf1d42-8617-44d6-9cbd-e41fc9bb43a3", "sighting_of_ref": "indicator--4aafcc5f-c05d-4137-94e8-c80f21e22020", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212bd6dc-648a-4009-b65d-03a9d81ffdf1", "sighting_of_ref": "indicator--47319c19-884c-4f66-af78-e683acd2ea7f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb64dc03-ff67-414c-8dfc-596f25fecbef", "sighting_of_ref": "indicator--b6399f1f-d1a6-451a-a883-fe5a6d4735f9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b310955f-2233-45e6-9e3e-566fe17b96d0", "sighting_of_ref": "indicator--d6193252-2065-4084-927e-e2350aea2f21", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee5af75-eb2f-4a30-9497-4bb17a5030df", "sighting_of_ref": "indicator--bf1933a2-bd35-48d2-9ae6-956082a996c8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7544f834-dee7-4530-bc9d-22a4cc4e0f8b", "sighting_of_ref": "indicator--674808b2-ef5c-4ce9-94ed-a194298f8be0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ae0f49-4850-496b-8848-c51dfbde180f", "sighting_of_ref": "indicator--0678fccb-b557-4eb6-8fe9-1d83a0dbb2bd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fbe083-87e7-4cce-89d6-42363935b7d4", "sighting_of_ref": "indicator--fc1d8d88-a01f-4244-bc73-1c422f117e62", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bd4cb5-6eb2-4c5f-8506-7c6142d4801a", "sighting_of_ref": "indicator--3f6f555b-19b1-4e11-8c4e-8da09ce83a64", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87bd2466-a9d1-48a8-b94c-5bfbc482d592", "sighting_of_ref": "indicator--c1c14ada-2be1-4814-a23b-1934a4b8b5b8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214ab9d5-6773-45e8-9787-7c44eab44df7", "sighting_of_ref": "indicator--5de182c5-ccf4-4be1-ac01-c71edb0912d1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9995e4ee-d871-4016-b944-56203ace8f80", "sighting_of_ref": "indicator--02775879-5a4c-4912-90db-61c5224af158", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748ce6dd-7f8c-41dd-a34c-3b240a2d8c23", "sighting_of_ref": "indicator--293d38aa-3391-44f9-9c08-8489f42b7a4a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b5260b-89bd-478b-a812-6b5e5f4a0c9e", "sighting_of_ref": "indicator--f97676d7-7265-4ff1-86cf-a1ea50467b69", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3ff69c-48f0-4d4f-8fa5-69f6951432c5", "sighting_of_ref": "indicator--f8a70500-c7bb-459c-9321-fcbba9d6c5b7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40dbf22a-6bd9-48c0-b48b-c2d1087b80f3", "sighting_of_ref": "indicator--3ec58cb7-f2be-4dac-bbc1-9bc6acef5e2c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bca2939-2395-42e1-8014-c84d9864feb3", "sighting_of_ref": "indicator--556b2f98-cf0c-45ca-93bd-2d4ef0d3bee7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d216c10e-59eb-4b2a-9181-ad78292e9c89", "sighting_of_ref": "indicator--9f23c5df-c64d-44e9-b69b-153351f780f8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90eeed37-a0a0-4192-8ffa-be1a950d9476", "sighting_of_ref": "indicator--f3ff3219-b621-4919-b7f1-1d572d98edc6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4528874d-1782-42bf-bc8e-03ddbccd10e6", "sighting_of_ref": "indicator--bc353bd1-23f9-45b2-b3bc-5164cb18ed53", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbf2c80-fc18-4a90-972c-a3aec2822aad", "sighting_of_ref": "indicator--3d228ea2-6229-45cc-8c49-13bf75ad15d7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab62f97-edf1-411f-b52a-a5eff461f4cb", "sighting_of_ref": "indicator--4706289e-24be-4f26-ab83-7c9591f698c1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a027cc26-f580-4d68-b9f1-8ddd83f73d80", "sighting_of_ref": "indicator--096c554f-ca63-40ee-8f15-938f225ee8e4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9adf7d1-6213-44e6-8c41-087d64393016", "sighting_of_ref": "indicator--0188ff66-b7b1-4a07-90bd-67fc16b3a6cd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62850a59-0b32-46f4-b304-800234d458d1", "sighting_of_ref": "indicator--daf94679-3360-491f-8142-25e1bbb01ae5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b794f76c-2a87-4d93-819a-27f1274d9112", "sighting_of_ref": "indicator--48fb8406-3a21-4087-9ec8-1ae251a91bf9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b2ca88-d1ea-4caa-ab78-b8de9d2fcb5b", "sighting_of_ref": "indicator--3ae74843-ce66-423a-9f54-4cd1e5602670", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38b0ac4-42f5-4507-90f0-ca03b17b2772", "sighting_of_ref": "indicator--608cc898-b83e-4c46-a9d9-9f6b9aecdd49", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23274412-088a-4550-b04f-900da93adedf", "sighting_of_ref": "indicator--dcc8d49e-5f08-49c0-9247-e1d78d0b5771", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1c5796-93e8-4233-9bcf-7a863791b8c9", "sighting_of_ref": "indicator--12fbf0ff-32c3-46aa-9cf4-e42e85fa04c8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c10098-9c19-4ba3-b4bc-ce1d4d72924b", "sighting_of_ref": "indicator--c1946bbe-d8be-4ce6-958e-f540f1c26c32", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec564a0f-0aed-4c06-b752-dc6909c9c291", "sighting_of_ref": "indicator--4fe73720-6e41-48f5-9df5-ce76fcc49f17", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b92d69-f6aa-42b5-9923-634439e0c58a", "sighting_of_ref": "indicator--4c61d96b-bad8-4a51-a858-dca1d85aef32", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d95a6a6-e929-4b3b-ba46-abe0a7a5f68a", "sighting_of_ref": "indicator--d0693c8b-9bc8-4136-b4e4-230278abb67c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c730a8-d3fb-4e34-b176-0fe46a6f286d", "sighting_of_ref": "indicator--ec4c671e-b016-43cd-9ec2-c30a4b68482a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac91c3d-3c60-47ca-93b2-5a67c36946ad", "sighting_of_ref": "indicator--e49ad318-755e-4c45-adc5-9116e4c5cfb2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eaee352-2301-4632-901c-31f0b404a797", "sighting_of_ref": "indicator--7018ff3f-dc61-4682-8ef1-3644071745f4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f48dda5-8d26-455b-a40c-21f1c9d44d18", "sighting_of_ref": "indicator--4fc87d8e-1cdb-4f5b-9483-df276a96fd6a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97ef529-8bc4-430e-955b-8876fa87ae04", "sighting_of_ref": "indicator--f5cfc9f1-8c95-47cf-8477-adb124e6a388", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a547e3d9-3bbb-4d47-8734-ada546eb79e9", "sighting_of_ref": "indicator--07ab6836-af2a-4112-8ce0-f45548a08eea", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0496eaf-225d-4747-9ac2-e9106cc62188", "sighting_of_ref": "indicator--f5fc717a-be16-4088-8080-05812152e8be", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54cc4ebc-1bb4-4f44-8e45-df9ca43b3675", "sighting_of_ref": "indicator--07262ee3-f5e4-4745-9768-953f4de5f43f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fd5a04-1702-4288-8ea8-076cdfa92007", "sighting_of_ref": "indicator--16c4929f-2ee1-4eee-adb1-8d1545aa9462", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371920a6-27cd-4407-98ec-770b55d08492", "sighting_of_ref": "indicator--4aa6ef59-5fb2-4695-9c13-c3da1d35c30d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3e7fd6-28f0-42d9-a904-0ac115d248d1", "sighting_of_ref": "indicator--fa5c1773-e5fa-457b-b4f2-ac6774ffa2d4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43db945-f872-4609-b623-d32a2939818c", "sighting_of_ref": "indicator--eaea9bb5-c00a-45d4-a556-a196bb28f770", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ba6497-dda6-4db0-ab1a-137409fb7d2b", "sighting_of_ref": "indicator--8f3dbd5a-8e61-4d51-bf6a-eb00cfedf642", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df888931-0aab-4179-9224-96f79b819c8c", "sighting_of_ref": "indicator--9ff7560a-e84d-40f5-b1a5-4fe48d15e92b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c4ef2f-bc55-481b-bfad-46fc1a47d02f", "sighting_of_ref": "indicator--0e6aa95b-80fe-4570-b84e-f3caab676a3c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a912fcc0-63ea-4a9e-ab93-c2492a210077", "sighting_of_ref": "indicator--0217b007-749f-4226-820c-199b6f2cf285", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e25c87-2858-4e7c-a8f9-38704d374434", "sighting_of_ref": "indicator--6766c4eb-e675-4c5f-a13e-2356c24cecf1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fac7c3-fe92-48b0-a4bb-007fd6dba6d2", "sighting_of_ref": "indicator--4324db73-9925-47e7-947f-e27160d7e972", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15bc4afa-7d26-4150-879a-09fd985fd583", "sighting_of_ref": "indicator--36b77f70-fba1-40aa-8014-cad1a7121855", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3eab9d-19dd-49fe-aa3e-626801aae58f", "sighting_of_ref": "indicator--7fc271cf-d827-49aa-95c4-e0e23b68488d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32544e96-98c7-487e-add8-e07ccf94397d", "sighting_of_ref": "indicator--cfc6202b-a5ca-45d5-801d-8fc7279072b3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23f6899-44be-4af3-8420-fe38b6521caa", "sighting_of_ref": "indicator--1d5b7899-b477-417d-a666-4beee25bdae4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b7c865-1b41-444c-abaf-495f2c2f4605", "sighting_of_ref": "indicator--ee4da25d-9b56-452d-a8e5-b93c69e4d9e1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42019699-c657-4a99-84fa-c6abb4d3a1aa", "sighting_of_ref": "indicator--b6cda26e-1721-4a0b-8b07-4a5cf291a04c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cca1a1e-e202-47c6-9353-2617a87ced07", "sighting_of_ref": "indicator--9e6a5c1e-4111-493b-8b96-871ddb75c427", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714902d0-f966-41f1-b997-22f288a6ac56", "sighting_of_ref": "indicator--0a7808db-7181-4f7d-a28f-15507b5d41b5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d15437-5df1-4e40-9ba4-e19ed710ec2f", "sighting_of_ref": "indicator--3650ac61-fb50-4a95-ac4b-293c6197883a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e841c9-cb2f-4fe2-9f85-48e059fe0614", "sighting_of_ref": "indicator--8b8e2b5d-dcfe-4c73-bf3c-bb7def48aa44", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5948c5da-22c5-4491-b8c6-740f6b8b6ab7", "sighting_of_ref": "indicator--b404dc08-186d-4501-93ff-48b2ef7a305d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37a29f4-2cf0-49c9-b3e5-6b750c5d767c", "sighting_of_ref": "indicator--1b221ba7-a8d1-4f30-a7fd-2148572dee99", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24528bd-a57a-4141-97b1-642583e61273", "sighting_of_ref": "indicator--dcbb6a9e-373e-4f9e-bace-a3ed88b92171", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4b200b-be2b-4461-b856-55d2fe919256", "sighting_of_ref": "indicator--c0e7252d-f514-4f64-b2e4-42989fc64a35", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2654d2-276f-46f0-a196-18c184e9fb5c", "sighting_of_ref": "indicator--7d4b0079-7f91-43d4-bada-640bc91ed2fe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c0247e-e6f5-49f1-b0f8-e519f7ca295a", "sighting_of_ref": "indicator--85c86e38-fa6e-4116-bf46-c8db317171ed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4eb2ac6-0325-4030-a316-d7ed06519ceb", "sighting_of_ref": "indicator--fbc90fa1-6f40-4c0f-ae3c-7925ecd5a0e4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a05d6b-60b3-4695-a41b-fb59b700be5e", "sighting_of_ref": "indicator--c782c4bc-efc5-4bd2-9cc9-c15412c90d0b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2d1c35-8b86-4fbe-a835-2c5c67a1fd36", "sighting_of_ref": "indicator--7ba26a63-cc21-4995-86f6-448201aa3c9b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b1b150-6070-4ab0-b190-b7e52274ccbe", "sighting_of_ref": "indicator--d04765cd-24bd-4dcd-a322-7cc39f8b0a2f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79537d1-a26a-46ad-942c-6c103779073d", "sighting_of_ref": "indicator--8584c9f9-78dd-42b9-b9a9-f7d60d97a9d0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95bd287e-da74-406e-b79d-aceaa90fde40", "sighting_of_ref": "indicator--bae48227-595c-455b-b210-c0b3d643a5b9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f42d0d-11b8-4545-889e-59c00402e45d", "sighting_of_ref": "indicator--083db267-a7a8-47db-a8ab-54399caef5db", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f814a8-b63a-4828-a671-c2cf02ea780f", "sighting_of_ref": "indicator--715b6075-8c62-4099-bc98-a0106685976f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2769fd-3552-4671-ae12-821dddea7cdd", "sighting_of_ref": "indicator--01e1cb39-86c9-44e8-b28c-46e5d9be4bdf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77426d46-918a-4c7f-8c7a-b63b9c9a5742", "sighting_of_ref": "indicator--f846ae02-ce07-4ea6-9550-f076e1ad1620", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9301e4c-480c-4652-a7a1-284e9441e9d4", "sighting_of_ref": "indicator--5c506eb9-e17b-46b7-ad52-7bcdfb53df08", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430bfa9a-c3e4-4cc4-bf4e-5108e14e4851", "sighting_of_ref": "indicator--40330068-8529-45c6-97d9-df0f5250b02e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3680df36-faae-4594-8066-754b54fd468b", "sighting_of_ref": "indicator--e168d4d9-4c98-4ffc-97ef-1d536f487632", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2529d32-36d8-4088-aa5c-c8ff56946cb8", "sighting_of_ref": "indicator--de449b75-f2e4-495e-a966-c66e8487c13b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c164c30-57f8-468f-82e4-1325fc57812d", "sighting_of_ref": "indicator--2a0bca96-cb03-4bf3-82b5-7fd5a2c97d84", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0890df15-b6b1-447b-a001-ed9aa5ceb40e", "sighting_of_ref": "indicator--8e1ac128-6021-49c8-9999-240317fe0bf9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7cbae98-08ee-4300-9ffa-4e47d9a740d3", "sighting_of_ref": "indicator--6be14f20-cec5-4202-8c53-603495004381", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb008804-0c99-4440-a224-d52dbc552110", "sighting_of_ref": "indicator--ce5cb220-6f42-4aa7-a776-b954b9135142", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c8ce72-2f83-4d05-8ef0-9da4a25b3b5e", "sighting_of_ref": "indicator--db8f3281-c02d-4002-a07e-1249273994b6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf217940-ddbf-496b-b475-d87922e8c52b", "sighting_of_ref": "indicator--a5c0cb94-8d6e-4716-941b-0fac57081b73", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4e6a70-774a-49e3-8357-0cca39a39135", "sighting_of_ref": "indicator--0351a557-73a3-45d0-9ecb-34e360303a3b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8663d0-c35d-48e9-a8b3-a79ec724ba06", "sighting_of_ref": "indicator--55b725fc-6288-4485-b4b7-c180f121bb24", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a51759-e6b7-48b1-bfb5-d111b2dc9377", "sighting_of_ref": "indicator--f24219b1-0bee-4977-bc9f-8350dc941736", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c108c3d-cba2-445f-af77-464e07a242fc", "sighting_of_ref": "indicator--b059e85e-0a7a-4c77-85fa-d8c355e7b43f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053d7604-70ac-404c-a84a-990394ebbfc2", "sighting_of_ref": "indicator--29fec213-71ed-4e54-b853-0087d123c21b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aaf28a9-74fd-4d52-9b7f-0c208fd65db0", "sighting_of_ref": "indicator--a85bbe7f-7cec-49d1-aa17-02d09018f6b4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e060bc5d-95b2-41db-850c-8224c2f1806d", "sighting_of_ref": "indicator--03734610-e21a-4746-8e9d-4aea4d6b19a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee309b5-638d-4213-8743-b0ca886cff05", "sighting_of_ref": "indicator--3fc0ebe5-61e4-4730-99c5-8f1fc97886c5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30771c01-384a-42dc-8bee-fdc8b697dadc", "sighting_of_ref": "indicator--3fc0ebe5-61e4-4730-99c5-8f1fc97886c5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47b9533-4ab1-4d35-86fa-8f22a7b93de3", "sighting_of_ref": "indicator--503ad570-8742-4593-abea-e4789a8926e3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45226219-a8f3-479b-9e3c-c6a5fc4c6b28", "sighting_of_ref": "indicator--503ad570-8742-4593-abea-e4789a8926e3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0addc08b-5aaf-44c9-b941-42ac66915828", "sighting_of_ref": "indicator--f931f306-a8b1-432d-85ed-40946f8eee1e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe3ee07-eec2-410d-b837-357e4f3ae898", "sighting_of_ref": "indicator--cd868455-0cd3-4960-be2a-0edd012b8421", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d54ad5-36f7-417e-8b39-5f1f931a469d", "sighting_of_ref": "indicator--cd868455-0cd3-4960-be2a-0edd012b8421", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22bb37c8-c934-4565-9ff2-9b24f922d452", "sighting_of_ref": "indicator--17d3e0c6-6a1c-4acc-ab24-4954959fb28b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbfa479-4c09-4d4f-8277-b4a02e8a07d7", "sighting_of_ref": "indicator--17d3e0c6-6a1c-4acc-ab24-4954959fb28b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7226d0-a0b7-4306-acc0-1f3708cd07b4", "sighting_of_ref": "indicator--07d94c97-a59a-4bd2-80b7-c2f96d729444", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051c61a4-b455-40ae-ad65-a709c4133016", "sighting_of_ref": "indicator--7c242d4e-04de-4d35-a0c4-3383788d228b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb199f1-cd89-4ef3-859a-e929a6e7a8b0", "sighting_of_ref": "indicator--021c4ef5-6390-49b7-b6bd-11d510a088db", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e26cdd6-0f07-430b-a7ea-51dbab892fba", "sighting_of_ref": "indicator--2fe8f657-e00c-4b8d-81fb-05a2fc0bf8e6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eeb82a0-fa19-4145-8a06-bff8c74df21d", "sighting_of_ref": "indicator--14881d05-2693-41f8-bea1-658a9c26baad", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0403e079-8592-4565-8cec-5dc7d1307733", "sighting_of_ref": "indicator--7e276c99-f1a5-4374-823f-e6a9ea082375", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6420e6-5ba5-47c4-916a-9e21a021e03f", "sighting_of_ref": "indicator--53b49dea-46c9-4218-a9a8-e0015c045899", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55204607-44f9-4cf3-a237-53a3e274d991", "sighting_of_ref": "indicator--38fb4720-752d-484a-9b31-3ee51d1b4000", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb1af4b-9f74-43e6-9aab-9c27c6960745", "sighting_of_ref": "indicator--04be1c91-dcae-41d3-a583-d8e19331f3a1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c14c38-05c6-4591-9c17-3a86f63483ac", "sighting_of_ref": "indicator--d6078155-939e-4d52-99e0-14cbba5265de", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63fe75bf-c7fb-487d-8d64-d9c062b77c5c", "sighting_of_ref": "indicator--27bc8b03-ad4f-4ddc-91bc-b5b703f4a04f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8c9497-8993-4a40-a533-437cbbff3a80", "sighting_of_ref": "indicator--34413b80-bdf2-42ad-bd61-ef60d99751a5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbc7fe4-d69e-422f-8e15-fd7996f12203", "sighting_of_ref": "indicator--084be486-4bea-4082-a0fc-f5a40e0e0f31", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5a71ac-deaa-46b4-9f2f-39583e64910f", "sighting_of_ref": "indicator--dcbdfa8c-44e0-4a92-bb75-ee51f8753ce1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3db8432-416d-4e15-8e3d-885f44d0c3c7", "sighting_of_ref": "indicator--dc63a358-4e7f-41aa-a7b5-ef8ccaa03a6c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97893634-5281-4f1e-9fce-82bdb13c07b3", "sighting_of_ref": "indicator--0a068d93-2b44-493e-b9db-179d5b61b3ad", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e02e276-156f-445c-922e-8b0b533ae9fc", "sighting_of_ref": "indicator--3220331e-c204-41c5-8705-a48ef40b9f8b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b04fba-3947-4416-9191-4590cf64bd58", "sighting_of_ref": "indicator--daae0e1d-2393-4668-a0a8-e8e52fca7600", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b4f1ab-5b26-464a-a949-3b840a0a6bbd", "sighting_of_ref": "indicator--e31791f8-db33-4c7d-a84d-75b7813abd90", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b245942a-48a7-4345-af45-4d4e150c66fd", "sighting_of_ref": "indicator--677719ec-f21f-4aa9-ba43-fd7cd1250549", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d475532a-55da-489f-9aa1-88aeeba5ed39", "sighting_of_ref": "indicator--269210a5-428e-4a2f-9053-23e5e28c95dd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33b5910-223e-4cee-bbbe-32958ed81657", "sighting_of_ref": "indicator--d37b205c-7d7e-4966-96fd-fabff4953873", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46cdc615-bb1a-43e6-9bfe-125780264d32", "sighting_of_ref": "indicator--f8b7aec4-8204-4184-9812-575b3e6ded98", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb8764f-3d8f-4151-983b-e54e258d8f8b", "sighting_of_ref": "indicator--bc49cacb-3ddf-4397-b848-581027dcdfb3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d026a272-bd01-4655-8c48-0ba7d5455792", "sighting_of_ref": "indicator--019a9787-c921-4e95-903f-0853d6f28505", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5b06be-3628-4019-9342-609f9f374bf2", "sighting_of_ref": "indicator--5ed7b5c3-11b5-407a-9d44-6ee9ded219f1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b3d3c8-398a-4f13-830c-e7dac3f7dfab", "sighting_of_ref": "indicator--fb686ebf-de4d-409f-8d59-ced83b008664", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b76c0e5-0bb0-419b-b1f9-1fb7129dafe5", "sighting_of_ref": "indicator--125303f1-ef13-4820-a332-2f9224e41c0c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fde118d-60c8-4b42-a664-88830b0a6e4f", "sighting_of_ref": "indicator--9e66d390-648a-4131-aa1e-8b6a3ceabf57", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc6f99b-b66f-4181-ac15-00ecde4f8cbd", "sighting_of_ref": "indicator--02b36a17-4f78-4c79-a6e2-57af98147fb6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d386f9f-0c8b-418a-95c5-2554b1bee71b", "sighting_of_ref": "indicator--7569929f-e37a-410b-8269-7df028401c74", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876d7ed5-c44e-4147-aa29-4ab0776f5106", "sighting_of_ref": "indicator--0774f6c4-4cb7-47cd-a5a9-f299ce8d6f3c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2403afbb-5afe-478c-8c0a-edd13b69fcb8", "sighting_of_ref": "indicator--aa3c457e-ee99-4346-b814-d7e4fa21c06d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bed08c0-f73b-4680-8fd6-081b75221f5e", "sighting_of_ref": "indicator--ca6e0045-2eab-4987-bea9-fe1b89448162", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29246f01-d1ab-4408-8b7e-7315d2e3d7e8", "sighting_of_ref": "indicator--34c86d4b-2df4-4f49-9b4d-98ef9d694b74", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30120e59-5b3b-428a-864a-5a73012e4916", "sighting_of_ref": "indicator--a93fd103-31d9-416b-a423-18ed214faf17", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf9de71-3d56-4f73-8683-9b6938b64807", "sighting_of_ref": "indicator--fcd530ed-2a6b-45b7-abd4-9f5259b5b3a6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c55e86-2ffd-44b4-af7a-5395abb22269", "sighting_of_ref": "indicator--f5de3e26-858f-480e-90b0-091fc78c4c5b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db15ca6d-9325-4a7c-a32b-eeedde9d048b", "sighting_of_ref": "indicator--3bba8859-b4db-4cf2-97b1-d91a3c50200d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d617db6c-b211-46f0-b016-315003a6a8c4", "sighting_of_ref": "indicator--3bba8859-b4db-4cf2-97b1-d91a3c50200d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006e010b-0fd8-45bc-97cc-27ae8f6d039d", "sighting_of_ref": "indicator--d8dc1bab-c81a-4622-88e2-0d5fcb8bd1dd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4038fb3-4117-4dd1-9c33-92fc354d4d4e", "sighting_of_ref": "indicator--d8dc1bab-c81a-4622-88e2-0d5fcb8bd1dd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ba4683-d28d-4faa-a72e-45f716686861", "sighting_of_ref": "indicator--d8dc1bab-c81a-4622-88e2-0d5fcb8bd1dd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed699bb3-9934-43a6-b49f-1be86a2a1ac8", "sighting_of_ref": "indicator--e132fc64-88b0-49fc-9273-fc8769f9b386", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4af967-bd5f-46bd-92e4-d158e1b0595a", "sighting_of_ref": "indicator--e132fc64-88b0-49fc-9273-fc8769f9b386", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9102393-8604-4ca0-8aa4-f7098a3c29b2", "sighting_of_ref": "indicator--e132fc64-88b0-49fc-9273-fc8769f9b386", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7716440-28f8-4d6c-8ff1-bf17847d7161", "sighting_of_ref": "indicator--062e0b8d-8860-4e63-93dd-4a3d62e061df", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f8760d-a8a9-479c-b4ac-b258aa8f287b", "sighting_of_ref": "indicator--062e0b8d-8860-4e63-93dd-4a3d62e061df", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c71c0c-3631-4b7c-a30d-c9d7f8760e0d", "sighting_of_ref": "indicator--062e0b8d-8860-4e63-93dd-4a3d62e061df", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5011264-8ba8-4c90-b938-c6fb70ffacc0", "sighting_of_ref": "indicator--51c25835-ca12-4fa5-b3e9-fbc02e7d800f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f3ed2e-406f-462c-b332-c27a9db374ad", "sighting_of_ref": "indicator--ac9ab6d9-6f40-44de-808d-ae0e063c4450", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d80c26-a899-48bf-9bf3-517e8fc5498f", "sighting_of_ref": "indicator--f7886e45-ec95-4639-b59a-5a7cca38c62f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8e7a5e-6c44-43af-82a3-594409783e03", "sighting_of_ref": "indicator--b930ff11-5f4c-41a5-882d-47ced3e4f1c3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed001791-8400-4e8d-ba90-9a724aec0e36", "sighting_of_ref": "indicator--2a8f4870-2a34-437a-8c68-f5fd2fa30434", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf939227-85f3-4bc8-8c24-8d4a32d9d4d8", "sighting_of_ref": "indicator--dd6e8296-be7c-4731-aa23-1a191b17a4cb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bb5fd8-3beb-4cb6-aec3-1da2acadd85a", "sighting_of_ref": "indicator--dd6e8296-be7c-4731-aa23-1a191b17a4cb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b483dc6d-cda2-423d-98dc-982209640ba4", "sighting_of_ref": "indicator--dd6e8296-be7c-4731-aa23-1a191b17a4cb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91670d2-1540-4b13-a2a0-21f7ecd49755", "sighting_of_ref": "indicator--cea86467-2cc5-4d9d-8417-69d90e9eaeb0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a089cbbb-91d2-4a4c-bfd7-de78f01530f2", "sighting_of_ref": "indicator--cea86467-2cc5-4d9d-8417-69d90e9eaeb0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39979850-6a56-4511-b6e3-9e20d3e2e325", "sighting_of_ref": "indicator--51396f0b-3590-4a84-9445-efbbedd16f8a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23051dc-5f4b-4c3e-b818-1b6b542c7c8f", "sighting_of_ref": "indicator--51396f0b-3590-4a84-9445-efbbedd16f8a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0938050-b094-4c61-9f02-ceef317ef1e2", "sighting_of_ref": "indicator--61af188d-7d51-40b7-824e-836d25d76c69", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be98a65-a4e7-48b2-8b41-6b3361b4fc93", "sighting_of_ref": "indicator--4000d8c9-51b7-4e5d-b0d9-ddce3c9c6b62", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce178ae7-95a3-4595-8af3-c39b643ebf1f", "sighting_of_ref": "indicator--4c9ada51-b2c6-4c3c-8904-9fd022f9dc49", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0145f08a-7b5a-470e-8ea9-ab23e73fa617", "sighting_of_ref": "indicator--2d6af547-578b-4d01-9bae-a32e1a3da939", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e03c153-86ed-48e1-b251-c414c2fdc33a", "sighting_of_ref": "indicator--352bcc90-0463-4c0d-9b8d-ca89e33569ac", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d853649-d6d9-45b1-ad5d-6306638e03b8", "sighting_of_ref": "indicator--df754b90-488b-4fd9-ba46-a2c5af4a1105", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768abd15-c9a9-44cf-b26f-4fa6e9234a7f", "sighting_of_ref": "indicator--df1de191-79dc-475e-9985-f804f1a3dfca", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2bf477e-9448-462e-b364-b06d08972edf", "sighting_of_ref": "indicator--93be0fd1-e850-466c-a7a5-34f0cf77fcc8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883f425b-e169-403c-b7cf-bf85cb35fd41", "sighting_of_ref": "indicator--2de505e6-4150-4880-81e7-d8247471f76c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c268ca4a-e9dc-4b0f-b999-5d8ebe48be47", "sighting_of_ref": "indicator--61342a31-307a-44a5-863e-056c166ff2f2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00fb818-e372-418c-8886-3443f2a9da1a", "sighting_of_ref": "indicator--7c1676c9-6f81-46ad-bd48-31a84cb2e8df", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444a6e45-1bc9-46b8-8013-be903e7ed70c", "sighting_of_ref": "indicator--125958af-a016-4ebc-9386-360062c52a9f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a96475-6bc6-4bb7-ab58-ac1edeb6ee2a", "sighting_of_ref": "indicator--8712d66f-e982-40ff-a868-0245f673186c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ce438b-7ada-4f11-ba3d-047505a490f8", "sighting_of_ref": "indicator--787e46c4-a253-42b4-af71-9f8ef4412c06", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc32cbe5-7449-4632-955e-8e854191f328", "sighting_of_ref": "indicator--4ef675bd-4ee5-431c-ba80-f0943c3e00e2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51b5643-8c89-4259-80f3-90f2c41768c6", "sighting_of_ref": "indicator--a62afc60-7210-4f33-b036-4f1e92db065a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba132789-88dd-42f8-9cd9-9bdae497d599", "sighting_of_ref": "indicator--ec0a22e4-b7c1-4655-9312-0fb028f673a0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858ca9d9-18e4-40d7-95bc-8051b586012f", "sighting_of_ref": "indicator--ec0a22e4-b7c1-4655-9312-0fb028f673a0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af0f1b0-583e-45bc-8363-50f97b4c9652", "sighting_of_ref": "indicator--692a7308-85d4-4920-a272-1e50c2ac2295", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6669c6b2-2d7c-42d8-9bad-efc90e8c3cb6", "sighting_of_ref": "indicator--d4a5f78b-0a35-47a5-bec0-5d32e2a72cba", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da5ed31-8601-4d35-af1f-273632d5f6cf", "sighting_of_ref": "indicator--37fdb0b7-ae7e-4bb8-a8cc-45db6aae21c0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cabebe-fce7-494d-acc9-2555ca0cc8d8", "sighting_of_ref": "indicator--96b71e91-d4f7-4ce3-a4ac-50e44dd805c4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0240b04e-0b4d-430e-b362-f58e4a27b513", "sighting_of_ref": "indicator--71fb4e74-6a98-4a41-9a26-cc2b03c219d7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6982446d-da9c-4523-8904-29f9047e414d", "sighting_of_ref": "indicator--bbf46a22-71aa-4435-9d4f-850e058c5ca3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcccfe2-05d3-4517-bccc-2c2e0ad42f89", "sighting_of_ref": "indicator--27b73e3f-7cac-4fe9-9161-4dd2083d1581", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a615f39b-38ca-413e-8cb1-461e9e81a645", "sighting_of_ref": "indicator--5e54db9a-94c3-48a7-849f-52cf518e3518", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a73d31d-efc6-47cd-aaa0-4f03bee3fd4d", "sighting_of_ref": "indicator--93698e4f-cf0a-4660-bf29-ff3d93a67a43", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db8a845-3a3f-4d79-a7d6-cdada9a15e47", "sighting_of_ref": "indicator--acdc11a1-6a62-4c07-bf27-0f4d15d66e8e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ee36dd-3185-4abc-a668-df79cbd903ac", "sighting_of_ref": "indicator--404139ac-c323-4079-a1ce-9ffc8dc1366d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1822311d-9b64-456d-ad02-eaa0eeb1de63", "sighting_of_ref": "indicator--a7ef3b92-4c11-45f0-a655-6d50f326ad91", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239f07a0-bbe4-4f96-aa72-12653b1a6907", "sighting_of_ref": "indicator--08f09bca-e50a-4e41-ab04-1a673301cf9d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3f3a98-dc82-4b5a-8ae2-718ab385b68c", "sighting_of_ref": "indicator--e88c5371-e1df-4953-a15d-084f6f143b8c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91647616-1470-4cf1-a94b-cc5a24366577", "sighting_of_ref": "indicator--86c90343-cf66-4dae-87ad-37c449035542", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f9d776-9f7b-41cc-b45b-769d5285d905", "sighting_of_ref": "indicator--86c90343-cf66-4dae-87ad-37c449035542", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13220e86-49b0-4f95-ab50-36f792e90d5a", "sighting_of_ref": "indicator--3ec80c04-820d-4e6d-81f5-b2f3176865a3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d4e532-2978-4cae-806f-abf19a3cd4ac", "sighting_of_ref": "indicator--5a362371-6878-4f5f-b229-1f9d392cfb6a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b310781-e1cc-4d02-acf4-b22c8141df82", "sighting_of_ref": "indicator--4535d72d-6803-421e-aaa7-d4b1ad273827", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d8a820-594e-4a65-a611-b036888ff410", "sighting_of_ref": "indicator--887a0c19-ba79-4156-8568-83cd539209e1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8591e75b-b060-4506-894c-f8ba88639521", "sighting_of_ref": "indicator--887a0c19-ba79-4156-8568-83cd539209e1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a443dc40-99cd-4ada-ab99-e5cbbef008cf", "sighting_of_ref": "indicator--51aa3f46-f458-40d3-a2b2-681a31cfdbbf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862c67c0-df57-4b38-9cdc-a462bcc9cbb3", "sighting_of_ref": "indicator--4446ea82-8900-4e0e-8317-9f0a72d993c1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3869627c-190a-4705-9052-23f9dca51c00", "sighting_of_ref": "indicator--4446ea82-8900-4e0e-8317-9f0a72d993c1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a750fff-85cd-4a68-9a32-e6f63465665b", "sighting_of_ref": "indicator--7ec8e021-228e-4540-8ecb-9029f96e0e5e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6246d4f2-6ab6-466b-a050-b28db5e9bdd2", "sighting_of_ref": "indicator--7ec8e021-228e-4540-8ecb-9029f96e0e5e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3017136-15cf-40d8-8670-377aba952ee9", "sighting_of_ref": "indicator--7ec8e021-228e-4540-8ecb-9029f96e0e5e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4314e010-76a1-45e2-8dc1-7678ccd400fb", "sighting_of_ref": "indicator--bcd0f3d1-e250-4866-9b6b-f6dee0866565", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b407fd3-158f-43d3-b43e-bc5f3b5a5d93", "sighting_of_ref": "indicator--4c84bca6-da82-4499-8573-642829a25ef3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae861d2-517b-4ed3-a4e3-6654516d75d6", "sighting_of_ref": "indicator--fff49f4f-0901-455e-879b-d8d1ad1daafd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41806955-cc38-4f0a-b1be-97a1aa0df2b2", "sighting_of_ref": "indicator--fff49f4f-0901-455e-879b-d8d1ad1daafd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d6e766-07d0-4b6b-b747-56ee625c8be1", "sighting_of_ref": "indicator--fff49f4f-0901-455e-879b-d8d1ad1daafd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1d9323-8951-445c-8fa9-525cf7b6099e", "sighting_of_ref": "indicator--125eabd4-e2e1-479a-bc2e-5fc443a7e25d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e757dcf5-2e26-43e7-b628-4ccba63337ba", "sighting_of_ref": "indicator--125eabd4-e2e1-479a-bc2e-5fc443a7e25d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6704e05-016b-4dbf-8148-981d72872a90", "sighting_of_ref": "indicator--8ff012f8-9190-4de3-9611-457bfc5662de", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50329dde-7d7c-4161-98f8-3155338146a4", "sighting_of_ref": "indicator--8ff012f8-9190-4de3-9611-457bfc5662de", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c895f6-0eb5-4312-8164-02f06fe78877", "sighting_of_ref": "indicator--8ff012f8-9190-4de3-9611-457bfc5662de", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518bdb46-f513-4da8-bf19-996cbd1fde28", "sighting_of_ref": "indicator--1a977848-5dc0-46b5-bfb5-7ce984e3204e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c21b6f-a3a9-4856-9b06-fd0a85cc8a8d", "sighting_of_ref": "indicator--1a977848-5dc0-46b5-bfb5-7ce984e3204e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faaecfe7-6040-46d2-b26a-87c1084a182a", "sighting_of_ref": "indicator--9c76a345-0c6e-405e-a97d-11fe8cb1a66c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a79858-1f0c-426b-aac3-d94efc7766aa", "sighting_of_ref": "indicator--9c76a345-0c6e-405e-a97d-11fe8cb1a66c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c33789b-d506-4dab-b414-17b000ba5d9b", "sighting_of_ref": "indicator--fc25d22a-11fc-42af-be35-44a8cc72f4cb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a37b206-ffe2-4129-9162-f244aee68769", "sighting_of_ref": "indicator--fc25d22a-11fc-42af-be35-44a8cc72f4cb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a621675-8659-4f5a-96c8-e904d354bdc5", "sighting_of_ref": "indicator--fc25d22a-11fc-42af-be35-44a8cc72f4cb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422f04e3-d0cc-4aa0-9c1f-a0ab34a39340", "sighting_of_ref": "indicator--d7084a2e-c3d1-4d5c-b4fa-08873e3c817c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06347c7c-db1a-47de-b855-5512b558c98e", "sighting_of_ref": "indicator--d7084a2e-c3d1-4d5c-b4fa-08873e3c817c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb6304a-1aed-4f84-a0cf-3b98c420e033", "sighting_of_ref": "indicator--d361ad81-15cf-4e49-8c9d-450d0e72e697", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75828790-53b1-4576-9bac-667bd1ad0930", "sighting_of_ref": "indicator--d361ad81-15cf-4e49-8c9d-450d0e72e697", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353b664a-57ea-47ef-8813-f6b700d11d29", "sighting_of_ref": "indicator--d361ad81-15cf-4e49-8c9d-450d0e72e697", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d256e428-cf60-4b77-80c0-a4fb859eec4f", "sighting_of_ref": "indicator--559a2d27-e83f-4a21-80de-d529bf9b19e8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f82e6d1-5fc7-4c7e-90fe-8bd47b224276", "sighting_of_ref": "indicator--559a2d27-e83f-4a21-80de-d529bf9b19e8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1302f0-6eb1-4ae8-8ca2-01ac94e0a537", "sighting_of_ref": "indicator--559a2d27-e83f-4a21-80de-d529bf9b19e8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cc6e73-00e5-4399-829d-26f900216cbf", "sighting_of_ref": "indicator--7cb760d6-778e-472b-ab33-34e2efe02e40", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a464d28-1302-4579-b176-5da331342614", "sighting_of_ref": "indicator--7cb760d6-778e-472b-ab33-34e2efe02e40", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a50af05-02b5-4390-8e1a-ca5b73cd91e2", "sighting_of_ref": "indicator--7cb760d6-778e-472b-ab33-34e2efe02e40", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376efe7c-a459-4d5b-8d39-e745ca3df8a7", "sighting_of_ref": "indicator--6ae775e1-c661-4a8e-86d5-279435a045eb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7062d02-b40b-4df2-b20d-dde1dad63e02", "sighting_of_ref": "indicator--6ae775e1-c661-4a8e-86d5-279435a045eb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd6a2ba-08e6-4bc5-8f69-36aad858c7b8", "sighting_of_ref": "indicator--6ae775e1-c661-4a8e-86d5-279435a045eb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f2f40f-5056-48ec-b010-56949c683016", "sighting_of_ref": "indicator--2d1f0ce1-cfb5-4e64-abfd-3cc8e7905fbc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb05aeb-761c-4874-ae31-b44292350dae", "sighting_of_ref": "indicator--2d1f0ce1-cfb5-4e64-abfd-3cc8e7905fbc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998c86c6-e64b-4737-a76c-15312056f236", "sighting_of_ref": "indicator--2d1f0ce1-cfb5-4e64-abfd-3cc8e7905fbc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f539754e-05cf-489e-b652-124cabb9ed76", "sighting_of_ref": "indicator--18e3dcf9-68c1-4922-b175-51c0ac5eed51", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ac206a-b564-4403-ac95-8822c9e71ebf", "sighting_of_ref": "indicator--18e3dcf9-68c1-4922-b175-51c0ac5eed51", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46933e8-3cb0-4fc8-9562-1fee560d46e2", "sighting_of_ref": "indicator--ee1b0808-a6cd-466e-b18c-37e8fee69436", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad9b3f7-0e40-4f39-a1f4-459760eca99c", "sighting_of_ref": "indicator--ee1b0808-a6cd-466e-b18c-37e8fee69436", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7edbeab-f964-4bfb-9455-433095cbf68f", "sighting_of_ref": "indicator--ee1b0808-a6cd-466e-b18c-37e8fee69436", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ff2648-0ec1-4a4b-b119-43c442ab4138", "sighting_of_ref": "indicator--7d655a87-5d43-43f9-8c60-28e0af5f49dc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af8126d-0766-4e05-b8eb-61a71d746c46", "sighting_of_ref": "indicator--7d655a87-5d43-43f9-8c60-28e0af5f49dc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18795571-1433-43d5-8def-1235f40c2308", "sighting_of_ref": "indicator--7d655a87-5d43-43f9-8c60-28e0af5f49dc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b1ff82-c346-44bf-85e8-4253fb54106d", "sighting_of_ref": "indicator--7d601356-3f9e-42a7-a12e-fc0ea82dc6dc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b49604-82b4-4ebc-a43d-a9ff06cfef71", "sighting_of_ref": "indicator--7d601356-3f9e-42a7-a12e-fc0ea82dc6dc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2859cfa7-1530-46b8-a6a1-dc0b5e4728af", "sighting_of_ref": "indicator--281d8dfe-78a1-45dc-97b4-44b94992f218", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a0f1db-a615-4894-b610-f73cd9d3c418", "sighting_of_ref": "indicator--281d8dfe-78a1-45dc-97b4-44b94992f218", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ebda012-8418-4158-8a5e-3b63e4eda141", "sighting_of_ref": "indicator--281d8dfe-78a1-45dc-97b4-44b94992f218", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0803c7a0-69f6-4383-960d-417cb1e1cb7b", "sighting_of_ref": "indicator--edb8437f-4da9-48ef-a866-f11833613ec4", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271c5045-950e-478f-9831-0b3b91d7b567", "sighting_of_ref": "indicator--01695e1b-03b4-4a7e-a5ea-a8e66c268050", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f664cb76-9b25-4f9b-980c-0cb39bb81fe7", "sighting_of_ref": "indicator--01695e1b-03b4-4a7e-a5ea-a8e66c268050", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecdc4962-a171-4232-a4e1-9f2f962328ff", "sighting_of_ref": "indicator--82d548bd-9169-4473-adb7-0dd5002452df", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c21c4a7-7257-43eb-bc9d-ee523adf7ae9", "sighting_of_ref": "indicator--88781e13-2696-456d-99cd-119d3b0f1f9d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6a4b91-2a1b-4e5b-b134-18d34c94cc64", "sighting_of_ref": "indicator--b017a5c3-079b-409c-afd7-75520744d3ba", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82650fc-78d4-40af-ac2e-3ad41594104e", "sighting_of_ref": "indicator--d68fa3cb-b2b1-485a-8a52-453f333d0ba7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d93d93-fdf0-43ac-b6b3-15fc6869cd23", "sighting_of_ref": "indicator--85a47578-2e95-4ddb-9e25-144b5809c4ed", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324d49b9-e850-4b27-8845-7c4a3afe1709", "sighting_of_ref": "indicator--71412b24-b915-470b-8b57-c78e63f328e1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c557ff3-bdd3-4c5e-a80b-8ad66bfff422", "sighting_of_ref": "indicator--71412b24-b915-470b-8b57-c78e63f328e1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8abfc8-8ac6-4439-8f58-1421d3492454", "sighting_of_ref": "indicator--d9af1138-c848-45bb-be69-aca3bf9e7832", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ce9ccc-cde2-4f90-9598-d462ec2998b8", "sighting_of_ref": "indicator--d9af1138-c848-45bb-be69-aca3bf9e7832", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb943537-470d-4ab0-8762-aaa161bf1d6e", "sighting_of_ref": "indicator--6af3caf9-c6a5-4415-9f68-2049a964c610", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29221655-3269-4540-98f6-9e80223bfc81", "sighting_of_ref": "indicator--6af3caf9-c6a5-4415-9f68-2049a964c610", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b9f579-cf1d-40b1-a13a-79a8d7e31031", "sighting_of_ref": "indicator--540915f2-e688-48ad-aa9a-14a3b4628306", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b704a7d-2518-4c68-bd99-528ad4433d9a", "sighting_of_ref": "indicator--540915f2-e688-48ad-aa9a-14a3b4628306", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af003c2-895c-4c88-8217-6996522c6203", "sighting_of_ref": "indicator--3807e86e-12f0-42c4-adda-4b3b02720739", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd9dca5-d231-4617-a0db-499fef59303d", "sighting_of_ref": "indicator--79bd2826-08df-42bd-9518-6b2e3b8148a8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d51773f-fa60-4e57-ad2d-536a250dfd7f", "sighting_of_ref": "indicator--dc8997e8-c07c-49e8-a243-b453ac7ba7cd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcef27bc-8c8d-4ef3-82a8-09bcf8635e92", "sighting_of_ref": "indicator--dc8997e8-c07c-49e8-a243-b453ac7ba7cd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0caeddb4-0cc9-4952-8a6e-5fbb9c515eb2", "sighting_of_ref": "indicator--047fc916-1d9b-4946-b68d-197a2a15c585", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59ba07c-d677-42c5-99a9-2a10ca4a4ddd", "sighting_of_ref": "indicator--047fc916-1d9b-4946-b68d-197a2a15c585", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96f0f32-b93d-428b-bcc1-a271a70d48b0", "sighting_of_ref": "indicator--9eb8af87-431d-445e-a78e-4f4172f34d62", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315d0e18-e88c-4c57-98b6-9f9d888baa53", "sighting_of_ref": "indicator--9eb8af87-431d-445e-a78e-4f4172f34d62", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdadba3-7dac-4f4d-a499-3c04a9719413", "sighting_of_ref": "indicator--891c685b-9c80-4d4e-8bac-f960211517cb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e159e7-45d0-4ce9-bcd7-7c1ce8253b3f", "sighting_of_ref": "indicator--891c685b-9c80-4d4e-8bac-f960211517cb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59431f56-393b-452d-a52e-41831705d208", "sighting_of_ref": "indicator--16ed31f5-9c8c-4305-a759-2ce298c37a73", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d05091-cf5e-4b1e-b866-ad9219d81a0f", "sighting_of_ref": "indicator--16ed31f5-9c8c-4305-a759-2ce298c37a73", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12770f93-8577-4392-8393-838058ea34c7", "sighting_of_ref": "indicator--65ec33ea-1f3c-48d3-86b2-7a3585c82ef8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671d3dc1-4f9c-4db1-9fc3-197951e935d9", "sighting_of_ref": "indicator--65ec33ea-1f3c-48d3-86b2-7a3585c82ef8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7548dd8-2270-4475-ad7e-060046b60167", "sighting_of_ref": "indicator--a123c17b-3291-446c-8084-391a74cbbf9d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3776c8b9-539e-4ef8-8800-ea9b36d9aa8e", "sighting_of_ref": "indicator--a123c17b-3291-446c-8084-391a74cbbf9d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0974f478-b0ce-4a02-af0a-98381ea36a5f", "sighting_of_ref": "indicator--e61414f2-8666-407c-aed9-82b96aa5d552", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb55be0-7e4b-4dbf-b85a-ce37713dec19", "sighting_of_ref": "indicator--e61414f2-8666-407c-aed9-82b96aa5d552", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df97484d-d8cc-4f69-ac22-ac3f7987f9fd", "sighting_of_ref": "indicator--0d3b2ba1-978f-4b59-b8ce-02f9d82d835c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25ee78d-895b-4e21-9be7-329f19349577", "sighting_of_ref": "indicator--0d3b2ba1-978f-4b59-b8ce-02f9d82d835c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b9e762-b087-410a-b68d-26f573798c61", "sighting_of_ref": "indicator--d120ec98-10f0-4c20-9c34-33806f5eb9aa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc47b61-30d3-43a6-ba14-ad2cd61b5664", "sighting_of_ref": "indicator--d120ec98-10f0-4c20-9c34-33806f5eb9aa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f7500c-a404-44c7-8104-52ac74f2f84d", "sighting_of_ref": "indicator--8e09713a-72d0-4394-8a7d-92d26598f067", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123644a1-1a0e-4f92-855e-68b24b457a1a", "sighting_of_ref": "indicator--8e09713a-72d0-4394-8a7d-92d26598f067", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51781eb2-4418-4f5e-92d5-b10ac38a2975", "sighting_of_ref": "indicator--b9cd1613-f2b7-4a96-9349-3c586f2be77f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f44ce24-84a5-4d3a-9887-117e795dd147", "sighting_of_ref": "indicator--b9cd1613-f2b7-4a96-9349-3c586f2be77f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9423531-51c3-42f5-b5f5-bb2d2b87954c", "sighting_of_ref": "indicator--ee0b7d31-cfc5-451c-820e-2fcdaec266e5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2847b60c-0057-4bdd-8acc-72c6052c854a", "sighting_of_ref": "indicator--ee0b7d31-cfc5-451c-820e-2fcdaec266e5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28386b3b-6638-4bbb-8214-890f3b27d090", "sighting_of_ref": "indicator--49a4603b-0b78-4d0f-a8e4-1bfe8fe1bb18", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7cb81de-42d0-4b59-8691-64b95e62a8de", "sighting_of_ref": "indicator--49a4603b-0b78-4d0f-a8e4-1bfe8fe1bb18", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d404298a-7827-4445-8fa5-0aa6d55254a8", "sighting_of_ref": "indicator--f428852a-8858-4ace-a14f-462ec286bedf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae0fdc4d-4777-4f38-8aea-24e2ce3593e6", "sighting_of_ref": "indicator--f428852a-8858-4ace-a14f-462ec286bedf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff8c036-6471-47dc-96ab-e89fedde65f1", "sighting_of_ref": "indicator--70684221-b35a-4cf4-87ee-443593c6a3e3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a526ccf-54b3-49dc-bada-639dbf1b4c8c", "sighting_of_ref": "indicator--70684221-b35a-4cf4-87ee-443593c6a3e3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd605f6-a788-448f-9891-66e96bd1a647", "sighting_of_ref": "indicator--f07442f6-2d99-4b20-b1d4-bf21934d5c16", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404e7165-8ba7-45c6-82b1-548dd21ae712", "sighting_of_ref": "indicator--f07442f6-2d99-4b20-b1d4-bf21934d5c16", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6ef5f4-c059-4e6e-b366-fce39a363cb7", "sighting_of_ref": "indicator--3510f94c-cb2a-46ff-b2d8-c4a0c910a76d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54234ec3-8632-4151-85c9-ec3df171b87f", "sighting_of_ref": "indicator--3510f94c-cb2a-46ff-b2d8-c4a0c910a76d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad4249d-05f6-40ca-86cc-7607f02ad5b9", "sighting_of_ref": "indicator--3aaeb115-b88a-4ac0-9b73-4120b235128c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc2c503-dc6d-46d4-801c-7882a80e9612", "sighting_of_ref": "indicator--3aaeb115-b88a-4ac0-9b73-4120b235128c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10cc71ab-336c-4fc8-b18a-f877697b5ee2", "sighting_of_ref": "indicator--26b210f9-58b1-42b7-b2d1-4cffa57b45fe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c63aac-f370-4abb-83bd-6ffa31b42dd1", "sighting_of_ref": "indicator--26b210f9-58b1-42b7-b2d1-4cffa57b45fe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ca385d-255e-454d-be85-1f7fb40c151f", "sighting_of_ref": "indicator--9bdc4faa-9020-4fd5-a0f3-67b4a62942f1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd194b94-a84f-4ad6-8336-eed579e54890", "sighting_of_ref": "indicator--9bdc4faa-9020-4fd5-a0f3-67b4a62942f1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480f7c7d-ef7e-4126-8a26-acdc303ff971", "sighting_of_ref": "indicator--13b81cf4-6407-4632-9284-7ea4d2b6c8d2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9beca9-8459-4855-af79-04b3d650860a", "sighting_of_ref": "indicator--13b81cf4-6407-4632-9284-7ea4d2b6c8d2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1092ae-8455-401b-8846-5789521ffe4e", "sighting_of_ref": "indicator--dfb77cff-dd9b-4d35-bbdc-83bedb8e37ac", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe1eccb5-35aa-4309-932f-c2032c4343c0", "sighting_of_ref": "indicator--dfb77cff-dd9b-4d35-bbdc-83bedb8e37ac", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6687933a-48d2-448a-9883-72aeaa7a1cf1", "sighting_of_ref": "indicator--28024657-2450-4286-acba-a7e12b31b044", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ba48d0-d38a-431d-9bfb-912ad6304978", "sighting_of_ref": "indicator--28024657-2450-4286-acba-a7e12b31b044", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbe5750-e4bf-4a85-9ab5-ef50b2910627", "sighting_of_ref": "indicator--82e4d35a-f4a2-4626-b51b-f29c93fd69d0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef18fa47-5069-4592-ac7c-733f58324d65", "sighting_of_ref": "indicator--82e4d35a-f4a2-4626-b51b-f29c93fd69d0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44537029-258e-447b-8f30-3421df83c94f", "sighting_of_ref": "indicator--a1a4bfaa-4fdb-46e4-ab0d-ca5132e09ae1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808ac86b-62a1-4f67-9e34-59f568e7be37", "sighting_of_ref": "indicator--a1a4bfaa-4fdb-46e4-ab0d-ca5132e09ae1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb273eb5-d764-4591-88c5-2c5234c47228", "sighting_of_ref": "indicator--1e7f5428-dde2-41a7-8ce8-114059181076", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e070c791-ae13-4de2-9a1d-2f37c193377e", "sighting_of_ref": "indicator--1e7f5428-dde2-41a7-8ce8-114059181076", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1da6a05-4d77-4cb9-971b-47086e7bad28", "sighting_of_ref": "indicator--e4907457-898d-424d-a615-ef70c193b739", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d762eef-8aaf-4abb-9132-c08944054a34", "sighting_of_ref": "indicator--e4907457-898d-424d-a615-ef70c193b739", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506dd577-5af9-44a2-bcb9-396aba84b251", "sighting_of_ref": "indicator--3ad9991b-745c-4ca3-818d-5e2fd5b0fa75", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50329f30-ac2b-4bc3-8cf9-79663998f3cf", "sighting_of_ref": "indicator--3ad9991b-745c-4ca3-818d-5e2fd5b0fa75", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298383ba-3911-40da-a50d-152de5edd1ad", "sighting_of_ref": "indicator--9525eeb3-e2b7-44b7-b631-753a85e5ed11", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b211b9f-b5b2-495e-b9ef-60d1ae33fb3e", "sighting_of_ref": "indicator--28e1c5b1-3738-4cc3-aafd-e6221c4afad1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2c8e52-7811-43b1-ba55-6f96c3e96e48", "sighting_of_ref": "indicator--28e1c5b1-3738-4cc3-aafd-e6221c4afad1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cdb4188-8029-4b44-b806-4a370b17cffe", "sighting_of_ref": "indicator--02e2ae19-8fa6-4071-96a5-e8ef3dc8b966", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9998753-7c5d-44c8-b28b-ac487ce896fc", "sighting_of_ref": "indicator--02e2ae19-8fa6-4071-96a5-e8ef3dc8b966", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c130fbb5-fc80-41f5-9dd4-24ed7fc8e065", "sighting_of_ref": "indicator--0020ce50-7de2-4339-8ee3-8b3ccab811c7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005c3ad4-dc1c-4294-91ae-dde4cb7a6270", "sighting_of_ref": "indicator--0020ce50-7de2-4339-8ee3-8b3ccab811c7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7845c2-1e00-4436-93db-5b0fd8fe33bb", "sighting_of_ref": "indicator--b899d730-8a7a-44d8-b617-15cf4c7a7f92", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cd89bd-a13c-4feb-8ad9-d3761ec42532", "sighting_of_ref": "indicator--b899d730-8a7a-44d8-b617-15cf4c7a7f92", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f4fca3-18a6-4da7-8f2f-bf47cc9ab49d", "sighting_of_ref": "indicator--8972320a-4289-4002-8d40-ebb73035038a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e87f4b9-1d38-43e8-b126-0b79ef56914d", "sighting_of_ref": "indicator--8972320a-4289-4002-8d40-ebb73035038a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5333f959-1529-4dc6-aab9-46f06fb2c592", "sighting_of_ref": "indicator--951ab96a-94c9-4aac-a525-5e21bb01b434", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96aab61d-f682-44a3-bd36-abb78e389279", "sighting_of_ref": "indicator--951ab96a-94c9-4aac-a525-5e21bb01b434", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f081a046-5072-4156-aa1f-2775109ef323", "sighting_of_ref": "indicator--63c6458b-0314-43cc-aa60-c582f74402ba", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b5d749-ffd1-4a2e-b7d0-7455c6e98161", "sighting_of_ref": "indicator--63c6458b-0314-43cc-aa60-c582f74402ba", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620b1adf-4d24-4451-accf-e784e5fef9a8", "sighting_of_ref": "indicator--2f4ae42e-47a8-4cd9-916d-840955e7f195", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff64bc4-f442-4b66-8a81-1f8f2d5cec4b", "sighting_of_ref": "indicator--2f4ae42e-47a8-4cd9-916d-840955e7f195", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c4a59b-e8c8-47dd-ac1b-cd3f98490228", "sighting_of_ref": "indicator--549a9742-3f3d-4c4b-81a9-09a7fd814114", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff2ee95-a95e-4f15-8b4d-50e3ecadea16", "sighting_of_ref": "indicator--549a9742-3f3d-4c4b-81a9-09a7fd814114", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31349198-8069-4c91-a95c-f9975c5fa8c8", "sighting_of_ref": "indicator--55540f54-345b-4c05-8aa0-216b31ce59b8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefe02dd-fa3c-48f4-8c53-4130e70f0459", "sighting_of_ref": "indicator--55540f54-345b-4c05-8aa0-216b31ce59b8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407eed6f-0ed7-4bb5-9629-78b9611bf26a", "sighting_of_ref": "indicator--568f189d-939f-419e-9ce3-fc6629c506a3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b04a7d-b7a0-4490-ada2-3ba6563043d0", "sighting_of_ref": "indicator--568f189d-939f-419e-9ce3-fc6629c506a3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bc6c3b-b310-49a4-a69b-52c695ca8a74", "sighting_of_ref": "indicator--702da781-80a4-4b53-8422-1500eb91409f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28b29ba-4531-43c2-8d62-9371872dd403", "sighting_of_ref": "indicator--702da781-80a4-4b53-8422-1500eb91409f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6cf72a-9513-4b56-80c6-f4ddaf24027e", "sighting_of_ref": "indicator--a1d1964c-6d7b-4efd-ba99-30bb1c4e485a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3660e1-ffe8-4d92-a8d1-9c2148d945e8", "sighting_of_ref": "indicator--a1d1964c-6d7b-4efd-ba99-30bb1c4e485a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b329c42-6592-4103-8a29-95de7e1aef42", "sighting_of_ref": "indicator--f9c4b3d1-3c27-4723-9cc3-7dfc0de85bb5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47677f3-17c6-4165-a6ca-dbd9f8ef29a2", "sighting_of_ref": "indicator--f9c4b3d1-3c27-4723-9cc3-7dfc0de85bb5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e781190d-257d-4b04-9953-bda7e3a801f2", "sighting_of_ref": "indicator--1d7d873a-4c5a-46c3-a9f8-0ebe12779d65", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f73a6c2-9608-45e2-808e-355d058ee709", "sighting_of_ref": "indicator--ca4a8fef-6d66-4be4-b515-f065b7ab4ade", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d0af15-0ad3-4944-8e00-bfb5080410e4", "sighting_of_ref": "indicator--d499d970-396e-42c7-b71a-f0f4be32919e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7cc98c-6603-4e87-a27d-56e3d53585be", "sighting_of_ref": "indicator--d499d970-396e-42c7-b71a-f0f4be32919e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb850c9f-4a00-4084-b95b-beb52e0684be", "sighting_of_ref": "indicator--a14d50f3-8b63-4cf6-b264-ddde8e7f8f0a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f072de-1c54-48c9-850e-d2d02f4721c7", "sighting_of_ref": "indicator--555c90e0-68e0-46fc-b7a6-03e85e0bfc9d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1101a979-0de1-4fbb-9a80-ecba116baa75", "sighting_of_ref": "indicator--41391dc8-6e1a-4fdf-8ab3-6433a08a7a1a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd0fcb4-7d2c-4cb3-a246-13407ca3dfe6", "sighting_of_ref": "indicator--41391dc8-6e1a-4fdf-8ab3-6433a08a7a1a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00244262-8e4a-4ed9-b6c1-5667a0114c50", "sighting_of_ref": "indicator--e942b4b7-d4f6-4b13-8409-435cdaaaaed5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6cbbc5-876b-47ec-ad82-ed7bbae5dfa6", "sighting_of_ref": "indicator--e942b4b7-d4f6-4b13-8409-435cdaaaaed5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efec756-76cd-4c06-8d9d-03620791005a", "sighting_of_ref": "indicator--8d6bef97-0d37-4899-96ec-131613c304d3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa39fa5-ea65-4ade-8c95-affd0b8ce266", "sighting_of_ref": "indicator--8d6bef97-0d37-4899-96ec-131613c304d3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664627d5-29a1-40c2-aa35-72ea86e71526", "sighting_of_ref": "indicator--6a5faa10-0573-4e1c-91b0-26dc08c1a2ea", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44efb17e-5bae-462d-920d-0fb102e6b1fd", "sighting_of_ref": "indicator--6a5faa10-0573-4e1c-91b0-26dc08c1a2ea", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e807d9-1d6d-4489-b2ce-b21eb8320963", "sighting_of_ref": "indicator--573946fb-3acd-40b3-b569-41f2c2837786", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a367ea0-fdf2-4f03-8e6d-ef0e58d20a86", "sighting_of_ref": "indicator--80e6c074-1bba-4f33-b631-59cc3eaaef43", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945cc5e2-853b-4167-a6dd-7a4eaf66f094", "sighting_of_ref": "indicator--6503e8f0-93c4-4cf7-990a-1b9090c2abba", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf808454-604a-494e-b291-704b0cfb5230", "sighting_of_ref": "indicator--6503e8f0-93c4-4cf7-990a-1b9090c2abba", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3247c46b-4cd6-4063-b80a-97b9e7330ffa", "sighting_of_ref": "indicator--30df1d26-5dd3-4af7-b53e-bf2c75d5c681", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a0fdd0-222a-41b2-a2b6-5c02de117046", "sighting_of_ref": "indicator--30df1d26-5dd3-4af7-b53e-bf2c75d5c681", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234053d7-a451-49bc-9a3a-d23c0bb0b56e", "sighting_of_ref": "indicator--e582e073-ea3e-4873-afd1-0d6c2fdaba59", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75794d71-5a74-4bad-9da2-041f3bb7412c", "sighting_of_ref": "indicator--e582e073-ea3e-4873-afd1-0d6c2fdaba59", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8559763-fa8b-4020-97a6-89233c0bacb4", "sighting_of_ref": "indicator--5581875c-91c7-4db1-8bd3-9d975ffde335", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a58653-0978-4136-b53b-3fd890f34638", "sighting_of_ref": "indicator--5581875c-91c7-4db1-8bd3-9d975ffde335", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1707c2cf-e3f1-4c35-9c7c-5865e45f8296", "sighting_of_ref": "indicator--2e58e3f7-00d4-4c5c-aae2-91624e676235", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2e8c49-a3ba-42f3-9ed2-219fcc58b46c", "sighting_of_ref": "indicator--2e58e3f7-00d4-4c5c-aae2-91624e676235", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9a6843-c3ea-46c3-ad7b-00223d535060", "sighting_of_ref": "indicator--eefbddab-0e02-4e8f-8da1-63dd89c4124c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173ec675-28e1-4b21-84f7-51dc26aaf63b", "sighting_of_ref": "indicator--eefbddab-0e02-4e8f-8da1-63dd89c4124c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d132c7-b123-4d21-b14b-e6d21fe8fddb", "sighting_of_ref": "indicator--eb175e9a-c314-47b4-b70e-6214a2f54be2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3b506c-1e73-4423-aba0-c9f75cfad5c1", "sighting_of_ref": "indicator--eb175e9a-c314-47b4-b70e-6214a2f54be2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76ae5ee-79df-49ae-86d8-e683286b4b70", "sighting_of_ref": "indicator--7258c53e-5295-4e58-8c23-1752cfe6394a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe0b25c-e79c-4a13-8db7-1269155ee1a2", "sighting_of_ref": "indicator--7258c53e-5295-4e58-8c23-1752cfe6394a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ad700a-18ea-4520-8594-b13bcef347a2", "sighting_of_ref": "indicator--e81b4014-30b3-4d8c-89f4-1bdaaf6f7362", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df75e0c4-1adb-49c1-9508-78c6f95677e4", "sighting_of_ref": "indicator--e81b4014-30b3-4d8c-89f4-1bdaaf6f7362", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38999db-6b90-47e9-8ebb-03c6bf55fdd6", "sighting_of_ref": "indicator--9a3062e8-1366-4128-8abf-15ca95bfb9b1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552ead25-7ab5-457a-9dca-3e0ce922d0d9", "sighting_of_ref": "indicator--9a3062e8-1366-4128-8abf-15ca95bfb9b1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1858ba9-81db-407d-aa7e-5ba35918a4b2", "sighting_of_ref": "indicator--2ca9fd59-030d-42a4-ab9d-b5cda265e179", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775469aa-80f1-4b06-b96f-0bebbc90d1ef", "sighting_of_ref": "indicator--2ca9fd59-030d-42a4-ab9d-b5cda265e179", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8287d3-d7bc-417f-b1f5-38acd4711b62", "sighting_of_ref": "indicator--ab00f3ed-9d4d-4b7f-a40f-b0f5fec915fa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c6700e-563e-4684-ac82-53e8865ed2b4", "sighting_of_ref": "indicator--6e7bc4f4-191a-4c83-a5c0-1d9afd760c5f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd57aeb-1258-49e4-9978-648e059adf19", "sighting_of_ref": "indicator--6e7bc4f4-191a-4c83-a5c0-1d9afd760c5f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4727afd3-b6ac-4d33-88a6-add44ee284dc", "sighting_of_ref": "indicator--47d46124-1445-498b-bf2b-12ff852b7d09", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e22f091-ad32-4149-8bea-3d831eb3e6c6", "sighting_of_ref": "indicator--47d46124-1445-498b-bf2b-12ff852b7d09", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c079e71d-966d-4068-98c2-a471204f295d", "sighting_of_ref": "indicator--f1280657-0c76-450d-9070-e679d246d2e0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e684de-a80a-4dd2-bd6a-d89732d5b47f", "sighting_of_ref": "indicator--f1280657-0c76-450d-9070-e679d246d2e0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d90b528-60ca-4818-afb4-4e3ce7aa8cd1", "sighting_of_ref": "indicator--23663f93-e27a-4405-a121-a88efa2cfd41", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b1cf22-fc75-4948-878b-36c3c4363039", "sighting_of_ref": "indicator--23663f93-e27a-4405-a121-a88efa2cfd41", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6d8170-f47c-40ea-845d-3c3f76c2b2d4", "sighting_of_ref": "indicator--5c74f320-8ba8-4d34-9189-850cf5147b78", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888fd6b8-60cd-444e-9608-17638f2e0a3e", "sighting_of_ref": "indicator--5c74f320-8ba8-4d34-9189-850cf5147b78", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dde188b-f3cd-4ba7-84f7-17b99dd117da", "sighting_of_ref": "indicator--cd81f3ed-64f2-494f-ad34-4886a1e73957", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e965ac-9339-4f74-825a-c86594ae663b", "sighting_of_ref": "indicator--88d9bb2d-a428-4040-9239-d25b88cf99b2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd042e0f-191f-4239-979f-948f7bcdd927", "sighting_of_ref": "indicator--f5dbaff1-497b-40d0-b3cc-23c2057f0285", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f93057-54f5-4cf2-97eb-2684457a7ace", "sighting_of_ref": "indicator--f5dbaff1-497b-40d0-b3cc-23c2057f0285", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b729d01-9789-4712-950a-85137299eb64", "sighting_of_ref": "indicator--d2ddc254-551e-4330-8a4a-0187b9a2bbeb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a381a155-e6d1-44c1-a12f-d1542d3c50b1", "sighting_of_ref": "indicator--d2ddc254-551e-4330-8a4a-0187b9a2bbeb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9175521b-411d-4f70-9780-7e1dbe7f11dc", "sighting_of_ref": "indicator--b002c5cf-47b4-40ae-811b-dbb6299d191d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006e7d05-f240-4444-9f76-2685f191acea", "sighting_of_ref": "indicator--b002c5cf-47b4-40ae-811b-dbb6299d191d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8095bbb7-e2a5-41c3-aa48-1761861178a9", "sighting_of_ref": "indicator--738cf66b-9763-4bd2-b1cb-082d75dfca86", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d058489b-c1b0-4d0a-9267-8228d2925788", "sighting_of_ref": "indicator--738cf66b-9763-4bd2-b1cb-082d75dfca86", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4ca03d-279d-49c5-a33a-8dc0e79c8468", "sighting_of_ref": "indicator--e5b68ac5-bc65-444b-8d84-62be91af5426", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e173db-585e-4204-9108-131d98c37d32", "sighting_of_ref": "indicator--04052560-9bff-4034-a405-4948c0db1335", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a8b11f-d7a9-4c89-b1d7-e14bbb3b3ec2", "sighting_of_ref": "indicator--83d21094-61ac-4e38-b33d-c2a93a28d905", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f28743-a88d-4fb2-956f-cb95fd09ff4d", "sighting_of_ref": "indicator--83d21094-61ac-4e38-b33d-c2a93a28d905", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31ce70e-548b-4938-b0aa-f60d4095b0da", "sighting_of_ref": "indicator--b59b9394-d124-4fbb-90c2-218fcd01a7fa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b86f97-a7ac-4afb-8bbc-3f813c9b96ed", "sighting_of_ref": "indicator--fdbab814-7621-410b-9c23-b4fd84dfb0b3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458ceb37-b6ca-4a1a-8bf2-9c1d918a14f1", "sighting_of_ref": "indicator--0f36f01c-3a94-4370-81ef-b8f61b082031", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48539f77-ab26-4dc2-b1f0-a361e0387043", "sighting_of_ref": "indicator--4f90446f-ab41-4cc5-863e-6fe65ebdd2ce", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e28e98-8994-4eac-8ca6-ce8aab7282f1", "sighting_of_ref": "indicator--c3816345-7532-4123-98c7-dc5a430c2a89", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0152454f-d567-4138-af4f-cd07f4bcd4db", "sighting_of_ref": "indicator--c3816345-7532-4123-98c7-dc5a430c2a89", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4e0dc2-533f-4b1c-84f0-c155fd7fbda4", "sighting_of_ref": "indicator--2d0e29e6-443f-4a64-9f55-5da9803ea5d1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e450f75-8e9a-4d0e-8347-2a6da10c7ffa", "sighting_of_ref": "indicator--2d0e29e6-443f-4a64-9f55-5da9803ea5d1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6bd8b9-3688-4359-91f4-365a927ade7a", "sighting_of_ref": "indicator--083c8bb2-2cc0-4f1d-b897-ff5503e191d3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77df8d4a-bf36-4944-b199-d369ec432227", "sighting_of_ref": "indicator--083c8bb2-2cc0-4f1d-b897-ff5503e191d3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d03fb85-30d0-4c8c-ab3e-12232901d7a0", "sighting_of_ref": "indicator--b378a08d-ff7b-46ec-9d9c-c4ce30f2aee1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bcfcd4-e22a-4e1b-8892-1759a0ff241d", "sighting_of_ref": "indicator--b378a08d-ff7b-46ec-9d9c-c4ce30f2aee1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab4ba53-f321-4ec0-96a8-689a85b62dfa", "sighting_of_ref": "indicator--b378a08d-ff7b-46ec-9d9c-c4ce30f2aee1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088ac5e9-ea11-4ccd-b103-b5dd7d4be488", "sighting_of_ref": "indicator--ad1b82a2-5670-4e06-8aee-34e62e13bf1d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b38710-9b20-4876-acc4-cd77863ef02d", "sighting_of_ref": "indicator--2451b13d-3835-4e24-a06d-6612e99dbc51", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58dc716f-6e17-42a9-804b-7524d6b3f2ef", "sighting_of_ref": "indicator--16911613-b5b0-4c5c-828a-2085e1576111", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48651f56-2545-4787-8041-3b188054bf86", "sighting_of_ref": "indicator--a5251cb7-f0f9-4343-8597-ce68731e5b02", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbffd4d-eea2-47fd-b4fb-96fc4f296aec", "sighting_of_ref": "indicator--a5251cb7-f0f9-4343-8597-ce68731e5b02", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb63eba-8885-4297-9fe6-53ea64f658c1", "sighting_of_ref": "indicator--a5251cb7-f0f9-4343-8597-ce68731e5b02", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a99c943-f30e-4c1d-b5fd-c49495b96944", "sighting_of_ref": "indicator--24b8e4c2-f3e4-4aaf-b336-2e5adca526f7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64ac7a8-fa68-48b3-81c6-df7b8dd9401a", "sighting_of_ref": "indicator--24b8e4c2-f3e4-4aaf-b336-2e5adca526f7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08052818-51cd-4584-9168-fff53aa38587", "sighting_of_ref": "indicator--b2cf2151-32f4-4a32-bc4a-3614cf3ecdb7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551a28d1-e720-4778-8ae1-d9b80c361f02", "sighting_of_ref": "indicator--b2cf2151-32f4-4a32-bc4a-3614cf3ecdb7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375f7e4e-a8d3-427c-8f10-b260966f2d2b", "sighting_of_ref": "indicator--b2cf2151-32f4-4a32-bc4a-3614cf3ecdb7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625bbb29-1e88-442a-a208-76ce55be0164", "sighting_of_ref": "indicator--f99affc1-a038-4f53-a667-137a003f90b5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff03829-4217-4017-bb0d-805cf32d3cdf", "sighting_of_ref": "indicator--fef8e1fb-5b79-406c-9468-4208479a1802", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c49c174-5148-4237-b0b6-193a2f6406df", "sighting_of_ref": "indicator--fef8e1fb-5b79-406c-9468-4208479a1802", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f1c120-f269-485a-906d-1d6856ab816c", "sighting_of_ref": "indicator--fef8e1fb-5b79-406c-9468-4208479a1802", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3494edf8-b7fd-4f80-9e13-45a18978bb19", "sighting_of_ref": "indicator--b7c38f36-d20f-4f42-b7e0-cdbafc334e10", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c2ef2c-b387-46e2-848c-40e0deb9bb6c", "sighting_of_ref": "indicator--b7c38f36-d20f-4f42-b7e0-cdbafc334e10", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a69a4c-0453-4a35-9b21-ff2bb2d37926", "sighting_of_ref": "indicator--b7c38f36-d20f-4f42-b7e0-cdbafc334e10", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1656832-b2ed-4107-a1bb-0e33d900fc73", "sighting_of_ref": "indicator--f7bef5b9-1ea5-4ba3-94aa-09b420812ce6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98416e79-5d70-41f1-83d6-ae05e3598a41", "sighting_of_ref": "indicator--991d9f20-4a2d-480b-90ed-36615c892974", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbef094-4a18-46fc-9398-cf4d2162615a", "sighting_of_ref": "indicator--e2a49a05-7a8c-49c9-a1bb-eeacb13207dd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9af691b-b122-4032-bac7-2848199120fc", "sighting_of_ref": "indicator--bb77e094-91b0-4f9d-a837-f1bef09c31dc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad89b8d3-3a4e-4ae5-857b-fbdb58062d34", "sighting_of_ref": "indicator--34c22c22-70f1-4e78-998a-d14ac4e99f51", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845c77c6-915a-4f64-9b46-9d7c6f2ea0cf", "sighting_of_ref": "indicator--5a940790-88dc-4e01-990f-85bea6f50704", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a783c5-9fe1-49f9-9417-c94da2302d95", "sighting_of_ref": "indicator--a93271b2-0988-4103-8b16-eb79c180ef8b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cd192c-552e-4db9-a335-bbf3970036d6", "sighting_of_ref": "indicator--3db0d4d6-999f-4f14-8474-3bba58002858", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab7667a-c3e2-47a6-977b-d5513bb6194d", "sighting_of_ref": "indicator--9c603e7a-dcf2-47e1-80aa-ce6fe20d514a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a141b2dd-9f18-43be-92e4-d85ce33a37a3", "sighting_of_ref": "indicator--bafcbcbf-d5e4-4265-aa49-a1099e0e27c3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e77fc61-b3d3-400e-ad1f-43cda528c049", "sighting_of_ref": "indicator--f924e468-eccb-4d37-a98f-1f60648a6f9c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c81d26-a547-4e2f-b92d-a53601ee10b4", "sighting_of_ref": "indicator--ca6ccf2e-84a6-42ad-9670-8d399b536cce", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d1939a-4251-4fdf-ac8b-e0745a7c9990", "sighting_of_ref": "indicator--23be63ff-75b1-4785-a4ba-2b3a6e415c28", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18854f5-0e77-4c65-9138-63523981a519", "sighting_of_ref": "indicator--f06564fa-c0aa-4383-aa61-43edfa01d19c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0412de67-6552-4f04-8e28-c452987c324b", "sighting_of_ref": "indicator--f3bac733-5490-43b7-bf95-8470e3c03619", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6242a605-48ec-4740-8305-f947392358a9", "sighting_of_ref": "indicator--61d251dc-0d95-419d-96f9-0b5bd7565554", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3a9c67-b147-4b1e-ac49-cae054dd50ab", "sighting_of_ref": "indicator--4ee51755-64bf-499b-a723-a7b7b75dbd05", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58a7a48-0764-43a4-a36c-dce4b1b5a404", "sighting_of_ref": "indicator--fd1c6a9d-e420-4969-9dad-4ad36ec5c646", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8508f74-8355-4682-a6cb-7f9bb520196d", "sighting_of_ref": "indicator--8ecc8b56-de02-4c28-887f-593d9b85dd36", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d974f2af-4b57-4ae9-a513-140cfc5cef34", "sighting_of_ref": "indicator--40c615ce-bcdf-43b9-80c9-5260f899bb11", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48bb3936-19f8-4f36-8dfe-124daf701090", "sighting_of_ref": "indicator--779c3ed3-1ff0-4fa5-8394-53706435545a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d7096b-69ee-4939-8f9e-ad2d00220c6e", "sighting_of_ref": "indicator--64f8066d-542d-4e26-80ca-f61dbdd2963d", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef3c6cf-53e6-4320-a531-1d84183019f0", "sighting_of_ref": "indicator--643850cf-133e-4ab1-883d-d7a66632f63b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7fe4ac-1b84-41ee-a2c5-b14f57cd28c5", "sighting_of_ref": "indicator--59a24df4-2795-4b3c-a861-6aac10d030dc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f883c6c8-a90a-40d9-8c32-f113d25d692a", "sighting_of_ref": "indicator--7bde4e0d-dff0-4a05-96ef-3b3a20f29427", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05fb62e1-fff6-4150-b61a-da5364328ac0", "sighting_of_ref": "indicator--e739f423-0c10-4df6-840f-920f6711444e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4250cf-420d-4f43-9bfc-5791fc5770d5", "sighting_of_ref": "indicator--db1ecf6e-964f-4b1d-be8d-3c49e14edf8e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b661f32c-f6c6-458b-b005-2962b3d8fb9a", "sighting_of_ref": "indicator--08812c8c-60f1-40f2-bb8a-6b5292d0b115", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820352b4-3c46-4bb3-8c67-51acf4f137e0", "sighting_of_ref": "indicator--405b911f-c9b0-44a8-9455-5e90b258572f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429c6c87-d72e-4fe1-81b3-58dba3369f17", "sighting_of_ref": "indicator--dc30204b-4c05-4be1-bfa5-5f50074d3c27", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc6fd3b-e05f-408c-a6f6-3e1c016b206a", "sighting_of_ref": "indicator--771daf84-d5f8-4a1d-9223-4198aabcf005", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f997e1-ad6d-4596-98e3-c16ba473b26e", "sighting_of_ref": "indicator--771daf84-d5f8-4a1d-9223-4198aabcf005", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5624822d-bdac-4302-81ce-4ab057ebc34d", "sighting_of_ref": "indicator--610b6821-e1ac-46a3-ad54-4f4c9d99eae5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01b3aa2-fb02-4f50-b7f4-e70691af72e3", "sighting_of_ref": "indicator--610b6821-e1ac-46a3-ad54-4f4c9d99eae5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747417b5-a52b-4a64-ae85-ef86b2de34a0", "sighting_of_ref": "indicator--5ed33ca5-3ecd-4428-a698-d1d30e82e57f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8611c242-830b-4523-8777-b86710562452", "sighting_of_ref": "indicator--cdfd5557-4a36-43ee-b4bc-d3f4070aa314", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb4569d-fe1c-4cbd-86d6-5053ba9e0ff5", "sighting_of_ref": "indicator--416e44fc-556b-4ae1-8523-a4ba36582bcd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276b943e-f72a-49ed-8310-2a3327ca0b93", "sighting_of_ref": "indicator--416e44fc-556b-4ae1-8523-a4ba36582bcd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54af6567-dcb6-4ea6-b6a6-7d90512c198d", "sighting_of_ref": "indicator--df9f5b5a-0e8b-4ee3-8afb-63ec512f3818", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a5bd93-8cc0-4e11-8e39-1e5106063bd7", "sighting_of_ref": "indicator--e0628b07-cb42-4669-a59d-97c2c9320fd1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880d6370-a171-4d54-baa6-0d49778ca78b", "sighting_of_ref": "indicator--3ce35a02-0cc4-4f5e-bfdb-a5a89056c1a5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dadfcfb-489b-42da-9056-f0ecdd23f2e0", "sighting_of_ref": "indicator--287b4556-a28e-4a79-b8bc-b3ec00be35da", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d45f08-eba4-4435-a28c-565a607e4e91", "sighting_of_ref": "indicator--287b4556-a28e-4a79-b8bc-b3ec00be35da", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc8cbff-0548-4ca4-8a34-f3925e47708e", "sighting_of_ref": "indicator--287b4556-a28e-4a79-b8bc-b3ec00be35da", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14462ee-bfe8-4da0-b6cf-e05c5ee9acf1", "sighting_of_ref": "indicator--abc99e9e-2447-42d8-b4d3-38973e52ce5b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb149977-ae03-46c3-955b-85cafab574c5", "sighting_of_ref": "indicator--3ed239b4-328a-4768-869d-5c3d6ff8c984", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d43ed0-a68a-4232-8bfd-f95ac95d3dc7", "sighting_of_ref": "indicator--54e9b950-bc97-4752-9b00-96409264c7a4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a670bda2-e01c-403c-9070-4af50e6f466a", "sighting_of_ref": "indicator--1a1b4f09-be5e-491a-b23e-8c2f6ce956a8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675d873d-fe5e-4dac-875a-fe8370ad8047", "sighting_of_ref": "indicator--1a1b4f09-be5e-491a-b23e-8c2f6ce956a8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c947bb-ae9c-43b7-b881-cb6767e12d55", "sighting_of_ref": "indicator--d8aca8db-d9a5-413e-8ba0-e8aa11a2371c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d800b5-eae6-4bb3-9fe7-d04235ea349d", "sighting_of_ref": "indicator--74699804-d5b2-4c39-8bb0-99d3de147840", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534c2d7f-c02c-4b4c-8b1a-09b17377f79f", "sighting_of_ref": "indicator--e1ca5e56-097a-4674-9f44-26d964e41052", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f8df78-ba81-4b94-88af-6f85ac281709", "sighting_of_ref": "indicator--e1ca5e56-097a-4674-9f44-26d964e41052", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee376d8-c412-44b3-b272-65b4be51c7bd", "sighting_of_ref": "indicator--e1ca5e56-097a-4674-9f44-26d964e41052", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90507518-5232-4645-afda-4c544e53a2a8", "sighting_of_ref": "indicator--ad115976-fbae-45c0-9eb5-2c2a5277ea8c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7461a087-64f1-4eb9-9c17-dbd5f541271f", "sighting_of_ref": "indicator--ad115976-fbae-45c0-9eb5-2c2a5277ea8c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f82e4f9-566e-4b19-88a0-08e252c13959", "sighting_of_ref": "indicator--2fc8ba22-1989-47c4-8865-881292ec147b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6ec893-163e-4a04-8297-b4842c321bc9", "sighting_of_ref": "indicator--30baa8a0-c593-4747-bfb6-951982a1b489", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2ad87f-1a47-4d86-bb8f-550be785280f", "sighting_of_ref": "indicator--30baa8a0-c593-4747-bfb6-951982a1b489", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d501ffa-589c-44ea-b601-61f712d2f49b", "sighting_of_ref": "indicator--30baa8a0-c593-4747-bfb6-951982a1b489", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f230f5e6-67d7-4540-8d1e-0159e681e9f1", "sighting_of_ref": "indicator--1cfbd210-2576-4235-aa7f-a261f3f711fc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888645ac-6e8a-435a-91bc-f9d7d8107116", "sighting_of_ref": "indicator--4a09466c-32c0-4894-a618-b2c9c10aa690", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483798f0-4d19-4f16-b349-e73b23143f5c", "sighting_of_ref": "indicator--dba18bec-b200-42b7-8f8e-6696d8353daf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff06095d-94dc-4f65-887e-6b796a31f4a1", "sighting_of_ref": "indicator--8f15ad6c-6714-41ff-868d-ba9b3c68cef3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9814302-3473-4f90-b019-855b88e67de8", "sighting_of_ref": "indicator--1eb14b0d-7882-4546-b4da-eae7eaaf55ab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93be8818-0ba0-4b10-aa93-86848430c83c", "sighting_of_ref": "indicator--1eb14b0d-7882-4546-b4da-eae7eaaf55ab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad91ae84-a3a7-4dda-be5d-af28088ce492", "sighting_of_ref": "indicator--1eb14b0d-7882-4546-b4da-eae7eaaf55ab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15c7a26-f50b-4c78-996d-9dfa3bdf10bb", "sighting_of_ref": "indicator--97d2a2dd-4d6f-41de-9176-b8435ee2471f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33007e08-29ff-4147-8161-8b1b7852b409", "sighting_of_ref": "indicator--573150a2-4b7b-47dd-abce-b5871401df83", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242b8b12-5236-4702-af80-f47d7b98c1ef", "sighting_of_ref": "indicator--573150a2-4b7b-47dd-abce-b5871401df83", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5993bc03-0047-4780-a596-7c958931f55e", "sighting_of_ref": "indicator--573150a2-4b7b-47dd-abce-b5871401df83", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74da6bad-a4bc-43c9-839a-054ad8aa9937", "sighting_of_ref": "indicator--d09ea946-c7e3-4a7e-88cd-67d51a805d59", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20193d7-c1bd-456c-9a37-e334fa4fcdd8", "sighting_of_ref": "indicator--d09ea946-c7e3-4a7e-88cd-67d51a805d59", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf95728-edb1-46db-926c-1ebfedf27c5d", "sighting_of_ref": "indicator--0bd55055-4280-47e4-9d3b-7900975191d6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd33a18a-3e31-455c-b281-06fbe677975f", "sighting_of_ref": "indicator--2bc8c35b-bce7-47f7-9e2d-c3b3211da137", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b422dc-227a-45e5-8541-0651995f3639", "sighting_of_ref": "indicator--2bc8c35b-bce7-47f7-9e2d-c3b3211da137", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e4fc71-dacd-4871-8a5e-2d5c1444994f", "sighting_of_ref": "indicator--2bc8c35b-bce7-47f7-9e2d-c3b3211da137", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60dece29-ecf8-48fe-b592-33218b581eaf", "sighting_of_ref": "indicator--409f93ef-2ae0-4f1c-8981-17c7713689e5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8b9fb6-e811-494a-83cb-66e2576ad79a", "sighting_of_ref": "indicator--460ff503-01a0-486e-8f18-207b9c6b5cab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c344f2c2-a40c-44fa-9006-bff59863c475", "sighting_of_ref": "indicator--3cb80e45-8d81-4bc0-bb6b-0aa12f6f188c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a916489d-5615-4157-ad06-10c3f0698a76", "sighting_of_ref": "indicator--a268b899-6eb1-4ec0-9953-c0afd4576cd6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab5d0d0-ecc3-4f25-92cd-01a195248e4a", "sighting_of_ref": "indicator--c058ebd3-0908-405d-8d07-ef364f158d1f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8cb965-a0ec-4ce0-a7a6-56edb1dc3421", "sighting_of_ref": "indicator--fc8dbd04-16ef-4279-835f-ef19fc0d4ceb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7eb198d-bea0-4b83-a5cc-ea310c82656d", "sighting_of_ref": "indicator--ff63125a-aada-4bed-ab78-5262239f6ffa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1512f95d-3403-42a7-8026-6a2e76e38f93", "sighting_of_ref": "indicator--c987b608-9e59-44a5-93c8-151e9484dedd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b99b1a2-a6f4-49d4-aae6-74145abf1fb3", "sighting_of_ref": "indicator--784a7a70-1e49-4591-9f49-658335316f9c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871b7406-6171-4a6d-9295-43e41ca59aaa", "sighting_of_ref": "indicator--3a3f5b0b-b521-43fd-af9a-2b5efff14169", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5eebb1-4258-435f-bc82-9ff8f52904ce", "sighting_of_ref": "indicator--bc655676-e4de-4cc6-9d23-704176310a92", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094e7b67-a07b-4f61-adcf-62ec16ea66d7", "sighting_of_ref": "indicator--bbbb01bc-c0fa-4fe6-9237-335f26d3d228", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab153bda-44a0-4ab3-9fc2-09afaf38756a", "sighting_of_ref": "indicator--b5259a25-79e4-4e75-bbce-97040ef10e92", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a989188-cfe3-49b6-831b-d0a3f523bf47", "sighting_of_ref": "indicator--b5259a25-79e4-4e75-bbce-97040ef10e92", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2920df24-d14a-4090-b084-d7c1a39ff46e", "sighting_of_ref": "indicator--a9311a59-5591-4f28-b0b9-07dd97706674", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4549b9fc-46a8-4293-9e40-29cbd8b8199c", "sighting_of_ref": "indicator--30f7b776-6788-45b2-a5ad-4d3a2cdccae2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b518f0d6-06a7-45e9-8073-d75c5947a4fd", "sighting_of_ref": "indicator--30f7b776-6788-45b2-a5ad-4d3a2cdccae2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8957f2-4185-4116-ac89-ed711abf3976", "sighting_of_ref": "indicator--d8b836b4-6756-45b3-a8be-5e8727f93be0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634c304d-fe1d-4112-ad64-92138bc06c44", "sighting_of_ref": "indicator--37e512b2-6e2e-422d-aad5-9662a637d623", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a52c5d-5ef8-4c1d-b5e7-0968177d5069", "sighting_of_ref": "indicator--840e1ec2-35ec-45ee-91a6-99b6ca4db0dc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862e4084-a30b-45ca-be51-495cb6be8a70", "sighting_of_ref": "indicator--8982663b-8632-43c4-87cd-3dcec573cba8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68f2199-bde1-48e4-8b38-ca448fece273", "sighting_of_ref": "indicator--8982663b-8632-43c4-87cd-3dcec573cba8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a256b6-eb8d-44a9-ad05-0eaa094f2bc6", "sighting_of_ref": "indicator--d26f6914-af70-41f3-8f3d-07dadd05e579", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac498fd-4463-44e8-852b-1cf57328a100", "sighting_of_ref": "indicator--d26f6914-af70-41f3-8f3d-07dadd05e579", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5b877d-11bc-4ac2-9b68-5551ed0e87fe", "sighting_of_ref": "indicator--d26f6914-af70-41f3-8f3d-07dadd05e579", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622b7986-abf9-4b09-a420-d06dbb5c17ab", "sighting_of_ref": "indicator--2415b9fa-e7de-4da3-8733-d4ed8aa79e2a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365d8f09-84f6-4a7d-852d-bdd468dc40ad", "sighting_of_ref": "indicator--2415b9fa-e7de-4da3-8733-d4ed8aa79e2a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf789a8-9717-4a1e-a284-273eb138d4a4", "sighting_of_ref": "indicator--af1cdbc3-7b3b-47b4-93a0-591dd8afdb9c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8efb326-de23-4814-9acf-bd31c4cf76fc", "sighting_of_ref": "indicator--450af27a-97ab-4181-9abb-0de40aba018b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425617b8-c4b1-49d0-b669-4f1dd050b8b7", "sighting_of_ref": "indicator--66703c73-ac2e-48ba-87ec-52cacf30fb2f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858d0eff-1233-450b-b5e2-15ef4b269b20", "sighting_of_ref": "indicator--6b334c37-b47b-49bf-8253-054f98863898", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a774787-7fb1-4e6d-bc08-0d4146f87e1a", "sighting_of_ref": "indicator--6b334c37-b47b-49bf-8253-054f98863898", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11d3925-2b82-463f-b69a-f1f29771309f", "sighting_of_ref": "indicator--6b334c37-b47b-49bf-8253-054f98863898", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb420bb-0769-4da6-9a18-6c99e3b653a8", "sighting_of_ref": "indicator--6b334c37-b47b-49bf-8253-054f98863898", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f502059-756f-41e3-90cc-38f264bedc16", "sighting_of_ref": "indicator--b2d735b3-42a2-4322-b5f7-7075c8458151", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab6697c-eca6-4502-8ad4-a500382ea174", "sighting_of_ref": "indicator--66d18fe3-b9b4-4bb6-87c1-1c5e3074ab5d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214f3d6c-f3fd-4514-860a-ca879dfa6e58", "sighting_of_ref": "indicator--66d18fe3-b9b4-4bb6-87c1-1c5e3074ab5d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec8059b-5cc4-4ea9-a608-5790514b36aa", "sighting_of_ref": "indicator--767fd463-7b68-41d0-ab50-5676d21c9c98", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40cb0e5-25f6-4664-b114-9f203f0b1723", "sighting_of_ref": "indicator--767fd463-7b68-41d0-ab50-5676d21c9c98", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62929e76-3644-4310-8f85-7365d7244e5a", "sighting_of_ref": "indicator--767fd463-7b68-41d0-ab50-5676d21c9c98", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368c6306-ee59-4c04-bb1f-502e948536cd", "sighting_of_ref": "indicator--c69b4257-d4df-4c24-875a-d86777bcf45f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba41d9f-bf08-40d7-b48b-88b4ded04862", "sighting_of_ref": "indicator--1b937093-78df-4521-b4d9-61596b77a202", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f66e22f-6c6b-4328-b08b-b57cb292b719", "sighting_of_ref": "indicator--017c9877-560e-4252-9559-3dba1d1fe292", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa841c74-50d3-437e-85aa-42f77280dd5d", "sighting_of_ref": "indicator--017c9877-560e-4252-9559-3dba1d1fe292", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123d7118-f2f1-4efc-8094-29213f7eccb7", "sighting_of_ref": "indicator--017c9877-560e-4252-9559-3dba1d1fe292", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744ee29c-4eab-4ea4-83d7-c65f658567ef", "sighting_of_ref": "indicator--b040439d-0800-4856-ac13-b31c6695aba6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d826fd1-c81c-41bc-bf73-00887ad112cc", "sighting_of_ref": "indicator--f27e3ba2-ed86-412f-91b4-31c050472773", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa7504a-7834-4266-bc7a-51432195c383", "sighting_of_ref": "indicator--f27e3ba2-ed86-412f-91b4-31c050472773", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d46354-862b-4ffa-9287-76ba295baa06", "sighting_of_ref": "indicator--96aa854e-abd4-4fc4-ba99-9e30e8446690", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6873e40-cd03-4492-9a91-d64519ba81c8", "sighting_of_ref": "indicator--96aa854e-abd4-4fc4-ba99-9e30e8446690", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36d1b3d-9f93-4c6b-a5bd-1f59529e5106", "sighting_of_ref": "indicator--96aa854e-abd4-4fc4-ba99-9e30e8446690", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628ddac2-5485-4f12-a616-e0bb0b0a558a", "sighting_of_ref": "indicator--1faefdf8-ea87-49fa-af4d-42ef17c1e570", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9dfdb01-5631-4ddb-8c96-d1c6d52acfaf", "sighting_of_ref": "indicator--4648c958-10ae-43e9-8f7b-cb46a83d7e85", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0aabab-253a-49e2-9cb7-522c2ba01699", "sighting_of_ref": "indicator--4648c958-10ae-43e9-8f7b-cb46a83d7e85", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405f4c21-48a9-49b5-b399-288d51995456", "sighting_of_ref": "indicator--84ab5257-d4cc-4fbc-8658-2423c04d40ba", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d384ab5-f1c5-4f9a-a4a4-e6415eee8268", "sighting_of_ref": "indicator--71ba4f92-63f8-477f-935f-ff341afbee04", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1fb3d9-5db1-4330-a6f3-6733d46c3711", "sighting_of_ref": "indicator--e791dfe3-fedd-4671-ab0e-a6a28008b67a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90487dbd-9342-4658-af8d-c7fb4c1145bb", "sighting_of_ref": "indicator--e791dfe3-fedd-4671-ab0e-a6a28008b67a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b876d6de-398f-43c3-a428-07e73944231b", "sighting_of_ref": "indicator--1eb96b7b-f839-4cc7-a9b6-184a1533d023", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f00759-452e-471b-b434-d4c4a8bd8f29", "sighting_of_ref": "indicator--1c136b8b-60fb-4f3b-a06b-27bb4310af97", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19dcd9ce-4abb-4aa2-85d9-baab9c9b6a07", "sighting_of_ref": "indicator--bdd05522-47c0-45e0-9bba-f8078af2d1ef", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33210cf8-cad0-4ab6-8e27-757ee7565bd7", "sighting_of_ref": "indicator--1d1e6e0e-7a6b-4aa0-97db-45675bf8c2f6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4393655f-a2ed-4465-8331-476525994ffa", "sighting_of_ref": "indicator--1d1e6e0e-7a6b-4aa0-97db-45675bf8c2f6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc6b9c6-74c5-4b5a-a768-9db350c15c28", "sighting_of_ref": "indicator--1d1e6e0e-7a6b-4aa0-97db-45675bf8c2f6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d77b02-e922-4f03-b708-2ccbe507d592", "sighting_of_ref": "indicator--c07000d7-edc7-49dd-b40b-81b95df86588", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254abd2c-a2fd-406b-b85b-0f8a2bf712e6", "sighting_of_ref": "indicator--c07000d7-edc7-49dd-b40b-81b95df86588", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d466e5-b329-49c0-b531-a878264df9c8", "sighting_of_ref": "indicator--06a75f88-2bf1-4408-b0b8-d7dc8e4540e8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c3702c-f634-49c9-8a3d-ee38a4603f7e", "sighting_of_ref": "indicator--06a75f88-2bf1-4408-b0b8-d7dc8e4540e8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acabd9ef-1cdb-4c8c-bfbf-a07fb5a87339", "sighting_of_ref": "indicator--b5883a37-c25c-4030-b297-96382c871d20", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635df5ee-6ebb-4857-8350-ee1803825ecd", "sighting_of_ref": "indicator--3e87df30-116a-46f4-b385-99bbae1e2cf1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67152811-f73a-4a04-8f4e-c3592613bf82", "sighting_of_ref": "indicator--3043b38f-f591-4b3c-b2cc-1f01596f9de2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce8eb31-44a8-422c-a8e6-66ed6d3d4240", "sighting_of_ref": "indicator--75e057e0-fc45-4302-90a6-43abd71cf155", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5d8c8c-7c53-4bd8-b74a-473165bda44d", "sighting_of_ref": "indicator--6582035b-9f76-4941-b0e2-ea827f753b3b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b390cf-ba21-43ad-938c-356a57eeb1c0", "sighting_of_ref": "indicator--6582035b-9f76-4941-b0e2-ea827f753b3b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eeb8f7d-4cf0-4c78-87ee-5cd8457293a6", "sighting_of_ref": "indicator--6582035b-9f76-4941-b0e2-ea827f753b3b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48669ea1-e6ae-40d4-b1cd-d68ca0b55d84", "sighting_of_ref": "indicator--edbf65af-7a03-4d19-9ba7-88efb26d80f7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a825be6-9377-476d-a3f9-5edf65176aa8", "sighting_of_ref": "indicator--edbf65af-7a03-4d19-9ba7-88efb26d80f7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28814593-d214-4a8f-84f8-ab90b240d22d", "sighting_of_ref": "indicator--edbf65af-7a03-4d19-9ba7-88efb26d80f7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28323874-cbba-41aa-9758-e0c8aaee678a", "sighting_of_ref": "indicator--79d73a92-12af-4605-a656-fcbb534223d7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c4cb95-39a5-4818-8f47-355d4196ccb6", "sighting_of_ref": "indicator--79d73a92-12af-4605-a656-fcbb534223d7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973b0a95-f026-4613-8956-24a8495cfabf", "sighting_of_ref": "indicator--459d7fa4-7ea8-4b4e-b8c7-c7285151278a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801bb5a4-d33e-46ce-9d4e-1ac890193073", "sighting_of_ref": "indicator--459d7fa4-7ea8-4b4e-b8c7-c7285151278a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f118da4-aafb-4600-a99d-8de2dfd75ac9", "sighting_of_ref": "indicator--9f40f5ae-3eb0-4d58-8695-68335ad13bd6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013c8c07-8aa8-409f-83a3-3dfca53b7055", "sighting_of_ref": "indicator--8ccbd46a-4ddf-495d-af5a-37387df23e16", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8fad0d-24f6-4983-993e-f0c4dc1b65b7", "sighting_of_ref": "indicator--8ccbd46a-4ddf-495d-af5a-37387df23e16", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592809ec-d66f-46e8-a853-891c13a24de3", "sighting_of_ref": "indicator--c952dd4f-0151-4ed5-afb9-a8e4074ba853", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c256802-2ccb-4bb0-89f4-eb619cda38ce", "sighting_of_ref": "indicator--c952dd4f-0151-4ed5-afb9-a8e4074ba853", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06792a39-ee21-432e-96e4-6576637eba78", "sighting_of_ref": "indicator--026beba1-8a64-48f3-a522-d7e643cb2a48", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbcb2c81-cf34-4376-b8d4-86b59e444aa2", "sighting_of_ref": "indicator--026beba1-8a64-48f3-a522-d7e643cb2a48", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe72ce78-5d0e-41f5-b8f5-00e4063b19c4", "sighting_of_ref": "indicator--d5549a0c-979a-4c56-97cc-d90214d582cb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d872d06-8104-4824-890f-b05955030f5f", "sighting_of_ref": "indicator--cecb3936-2866-44a9-b418-a9c9f86f26dd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e7b12d-9524-4a85-a88f-c7f73e9e8225", "sighting_of_ref": "indicator--cecb3936-2866-44a9-b418-a9c9f86f26dd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec18a45-b1cc-46d9-86de-1566b7094319", "sighting_of_ref": "indicator--0654ec10-4024-4708-a8e5-52a540f5913c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5d6653-2a65-4825-9b07-53846de77803", "sighting_of_ref": "indicator--0654ec10-4024-4708-a8e5-52a540f5913c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6b4708-c61d-4ae9-bfd3-b0b710212a50", "sighting_of_ref": "indicator--0654ec10-4024-4708-a8e5-52a540f5913c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41e6dd2-5a31-4376-949d-32a1986c3f73", "sighting_of_ref": "indicator--a1cd30b7-b011-45f2-84af-789b49ef120e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a07b434-74fe-4504-abef-2e5ebe84da2c", "sighting_of_ref": "indicator--65f87115-f4ee-4154-8515-51071c42e544", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4620d1d5-40e5-4cb8-a353-c44ed0f8e502", "sighting_of_ref": "indicator--65f87115-f4ee-4154-8515-51071c42e544", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7616133-9b33-4043-8477-1fab48368c61", "sighting_of_ref": "indicator--d27ee589-5905-4e06-86c6-9a4f1d3c7302", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d66503d-ebb2-4823-907a-7b87dd8c5cb4", "sighting_of_ref": "indicator--cc5bcb55-7e4b-4349-99f9-043361f3e477", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5e847a-8127-4a30-a1a2-05fcc52b8234", "sighting_of_ref": "indicator--9a2d9f55-6674-45b0-961e-c171c73e4e79", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0068cc2c-c966-48db-80d8-60f3b0eb0b9b", "sighting_of_ref": "indicator--9a2d9f55-6674-45b0-961e-c171c73e4e79", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb1ad19-1692-4574-9de7-b92d2c3f1e8a", "sighting_of_ref": "indicator--9a2d9f55-6674-45b0-961e-c171c73e4e79", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095b8396-d4f9-4ce1-bd58-c6c8c226f616", "sighting_of_ref": "indicator--f1c177fc-c013-4f65-b321-8eb42bfb2cbe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76b26f5-7dc0-49cc-8090-10ea284b9a26", "sighting_of_ref": "indicator--602ce9a0-8520-4399-bd57-2b00ef680766", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf325073-168b-4714-89c6-03832da846ba", "sighting_of_ref": "indicator--6789f021-ffbd-46c1-b710-06affc7eee88", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525f93f3-3a6f-4385-b932-da03961c5958", "sighting_of_ref": "indicator--ee3361d7-1e58-4363-a212-ad4495ead15c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e1c5b1-0090-4f35-bffd-896c95be31be", "sighting_of_ref": "indicator--35a6e08a-489c-45b4-ad35-2c075032c9fd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56121a59-ae04-4365-b1b7-b4a0ae80b08b", "sighting_of_ref": "indicator--1cd8dd03-50cb-44b6-8637-904538fd512c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbd4859-7a7d-440d-b1f7-5050fa887d53", "sighting_of_ref": "indicator--15bf6f07-dd4c-411f-ad14-135f9ab481ec", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb2977d-2252-4061-9e73-353fa758a0cd", "sighting_of_ref": "indicator--53632be8-8703-48e9-9a47-f2799bea2b27", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851aac41-9e0b-4da8-ab68-a031f03e4218", "sighting_of_ref": "indicator--5c0e692a-54be-42cf-b4a0-042370d02570", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ec5a13-c783-4416-b8b6-e271cf93f7a7", "sighting_of_ref": "indicator--3d9c1330-4d84-4cec-9b4f-1daf1a413149", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2541cd9-0f11-4acd-aeff-8ff662ed1a9d", "sighting_of_ref": "indicator--3d9c1330-4d84-4cec-9b4f-1daf1a413149", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a514b11c-01dc-42ea-9015-62677b1bcc00", "sighting_of_ref": "indicator--3d9c1330-4d84-4cec-9b4f-1daf1a413149", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515e0701-5e02-4af3-a498-e7e0392dde6e", "sighting_of_ref": "indicator--b7d72476-bc21-4feb-aaea-18a80f51034d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7313751c-4239-4561-9b57-cf060957dd60", "sighting_of_ref": "indicator--b7d72476-bc21-4feb-aaea-18a80f51034d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81a0c9d-aed0-4477-8d78-8c9cdd57eb0a", "sighting_of_ref": "indicator--b7d72476-bc21-4feb-aaea-18a80f51034d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c3b024-1082-454e-acb1-35f3abf0e079", "sighting_of_ref": "indicator--fb7ede2d-b299-4db9-bfb8-64568ca47193", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7041327-e3c5-4fdb-8678-1c79d06f1f9a", "sighting_of_ref": "indicator--58f7b5d1-efa6-495f-94f2-74e9b6aabdac", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bcfaa6-f7f1-4b0c-bcf8-309945867076", "sighting_of_ref": "indicator--58f7b5d1-efa6-495f-94f2-74e9b6aabdac", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2e63c0-311b-4e9f-943d-0dc927d7d638", "sighting_of_ref": "indicator--2e25759b-ba9b-47ac-80d3-bfd128f78346", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7975599b-de21-425a-bfe6-cbda63edb858", "sighting_of_ref": "indicator--d272cdac-59aa-4ed6-8ddd-732018084c3b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f009664a-7b8f-4ba7-b0b9-970ddaabad91", "sighting_of_ref": "indicator--ebb08da4-3f23-4b64-9198-ce37f3466b85", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0bbdca-ab94-47f9-b3ec-dc25c6009815", "sighting_of_ref": "indicator--ebb08da4-3f23-4b64-9198-ce37f3466b85", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a70dde7-402f-4c81-9dc5-2ad27200c2da", "sighting_of_ref": "indicator--44b15224-a007-4ba1-b2a8-5c322aae0dbf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a285fe-8a67-44f9-987b-2219d0779588", "sighting_of_ref": "indicator--e1960aa4-02d1-47e3-903f-1e4a1502818d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ffd8c2-e67f-445b-b004-97bcf9cdb7b9", "sighting_of_ref": "indicator--e1960aa4-02d1-47e3-903f-1e4a1502818d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea41255d-3c66-4fe7-9b65-560c103868ee", "sighting_of_ref": "indicator--1eb0cf66-8f5a-43f1-9b68-0529ccd87a14", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c832ab-d676-4fbf-806a-a2ec1c312060", "sighting_of_ref": "indicator--1eb0cf66-8f5a-43f1-9b68-0529ccd87a14", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f916f68-0b67-49c2-8578-1e5b93b62eb8", "sighting_of_ref": "indicator--40e4e8f9-e1a1-47c0-9f1c-7294e64e064a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66d42de-50ae-48c7-a42b-39449ed44044", "sighting_of_ref": "indicator--40e4e8f9-e1a1-47c0-9f1c-7294e64e064a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720d260c-346c-41e5-a1df-31c5a00c4d5a", "sighting_of_ref": "indicator--32aa5bf6-d049-4313-818e-ddaaf2840163", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873b5c56-0e0c-4953-8150-5aed9cf35c49", "sighting_of_ref": "indicator--1485f458-b88b-4fb4-bab2-b5312ebaf64a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a66ecd1-73cf-4dc8-8445-78256c5fb691", "sighting_of_ref": "indicator--b4009336-2a49-4a61-95e6-01aca3496e7e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a25d82-7f8b-4f5e-8a83-4f65c378ee19", "sighting_of_ref": "indicator--7b23e5af-b63c-403d-8ef2-4e2c8b2349f4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734daf41-5f08-47d8-95d1-aa0dd3406400", "sighting_of_ref": "indicator--14ff8b08-e5f6-41f4-8fee-9a42733509f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f26abe6-c020-46d9-9d09-3ea3317c0620", "sighting_of_ref": "indicator--14ff8b08-e5f6-41f4-8fee-9a42733509f4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f36e6c8-d9a4-4460-b591-0f9409df8011", "sighting_of_ref": "indicator--14ff8b08-e5f6-41f4-8fee-9a42733509f4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34dfee9d-99a3-4cae-ab93-20139f5f7c8f", "sighting_of_ref": "indicator--f9ee7b66-1ff1-4ff8-9899-9d5321f8b52c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742ec678-e0f3-4ff6-9d64-6e12abcfdad7", "sighting_of_ref": "indicator--f9ee7b66-1ff1-4ff8-9899-9d5321f8b52c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d2b505-adaf-443c-b78d-a27b541ec978", "sighting_of_ref": "indicator--34f8a9ec-ddeb-4c1b-b262-770c6dd57346", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d99e63-609a-4c9f-a280-8aef2b23e0ce", "sighting_of_ref": "indicator--a8e12ff4-0845-4837-8dab-d918cffc19b5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e56df51-d514-4678-9205-9ae94ad1dcb4", "sighting_of_ref": "indicator--a8e12ff4-0845-4837-8dab-d918cffc19b5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e205bc3-389e-4273-bab3-086a30f39d6a", "sighting_of_ref": "indicator--a8e12ff4-0845-4837-8dab-d918cffc19b5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a14025-da1f-4db5-b0e6-a368bd4efc0b", "sighting_of_ref": "indicator--1de9d8ff-4655-418b-98df-94c38f563c58", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacf6424-093d-4356-906c-8c991ab117f8", "sighting_of_ref": "indicator--1de9d8ff-4655-418b-98df-94c38f563c58", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff97f60-1c7a-4e98-9eda-d9611e3aae87", "sighting_of_ref": "indicator--be02795b-737b-4ec1-abc0-80a9d053b1e9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16290d4-ae06-4855-9d65-d318a5fbea4a", "sighting_of_ref": "indicator--be02795b-737b-4ec1-abc0-80a9d053b1e9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ebec68-849b-4c74-94f1-f0e3c56a78ca", "sighting_of_ref": "indicator--b95ccda1-dd7c-4f04-8b7b-6e16c3d7d4af", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f4c638-d378-473e-9fed-a930b0a38088", "sighting_of_ref": "indicator--f6aace3a-8f74-4ee8-b44c-2cd6e2942356", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68fec8aa-6423-4a71-963c-cadf4299755e", "sighting_of_ref": "indicator--f6aace3a-8f74-4ee8-b44c-2cd6e2942356", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbabbca-d70c-4412-b409-97ba1f6ad5c8", "sighting_of_ref": "indicator--f6aace3a-8f74-4ee8-b44c-2cd6e2942356", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2c719c-5d70-4d0b-9799-b9404c919b1b", "sighting_of_ref": "indicator--bea9484b-5b49-4d01-8952-0f45388283bd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e765be36-977b-4237-9ba1-8cd74bfb89a4", "sighting_of_ref": "indicator--bea9484b-5b49-4d01-8952-0f45388283bd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abc7a1e-b3da-4ffa-890e-7a1e019e40c7", "sighting_of_ref": "indicator--bea9484b-5b49-4d01-8952-0f45388283bd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a89cfe-d799-4c87-bc8f-52449fe0478c", "sighting_of_ref": "indicator--3e7fe41a-0623-4708-bce5-4cfbbf861408", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec89c837-1816-44df-b9a0-137029775287", "sighting_of_ref": "indicator--3e7fe41a-0623-4708-bce5-4cfbbf861408", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d9a27b-f7ee-4f43-b95e-8ba7943908f4", "sighting_of_ref": "indicator--3e7fe41a-0623-4708-bce5-4cfbbf861408", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6390b72-1c9e-43fe-abaa-26b2ff4f3d73", "sighting_of_ref": "indicator--9c47d9cf-47ab-4f5c-a8f8-24b12829c090", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b2729b-ced0-44cc-943e-82a6a0847b36", "sighting_of_ref": "indicator--a0029200-d61c-4bf7-b63d-ad0645f78b09", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21d24c1-fdc0-40c2-aaf6-8a7cf7f1d44a", "sighting_of_ref": "indicator--a0029200-d61c-4bf7-b63d-ad0645f78b09", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec791b62-81e1-4083-bb45-7e777726db41", "sighting_of_ref": "indicator--3b683706-f10d-453c-9a9e-235769c13074", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4afc3898-c088-4749-af15-1fd10417e210", "sighting_of_ref": "indicator--3b683706-f10d-453c-9a9e-235769c13074", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0718b6e-3bcd-4785-a7a5-fa583aed9689", "sighting_of_ref": "indicator--dd49c0a3-b7eb-4578-a57f-029efe0f821d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48472ab9-c9c9-42c9-831b-ff5c0e3d8615", "sighting_of_ref": "indicator--19947581-efa6-4f50-9ae4-57bd0955044a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a42a2ca-4a8e-409f-80e9-5b7f122f16a6", "sighting_of_ref": "indicator--19947581-efa6-4f50-9ae4-57bd0955044a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a64c83-6235-4552-8218-0af246836c3f", "sighting_of_ref": "indicator--90879c7f-1045-4594-9b03-a83429f81d5d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95566dd-a5f1-4075-8f21-942b2b39c7c1", "sighting_of_ref": "indicator--90879c7f-1045-4594-9b03-a83429f81d5d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615a40ca-e41b-472a-bb47-304332fe54ae", "sighting_of_ref": "indicator--946f28fc-2b72-4b0b-b101-02fe9f532680", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd6dfee-3bd8-4f3d-ac0d-e528de646514", "sighting_of_ref": "indicator--946f28fc-2b72-4b0b-b101-02fe9f532680", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10975255-4050-4659-857e-f9b102c04c94", "sighting_of_ref": "indicator--7929fe8a-7c13-4c38-92ff-96677728e8ef", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbd7858-456b-4e8c-8592-96f022bdabe4", "sighting_of_ref": "indicator--1b648b75-45a7-4415-a61f-b30548acdbaa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179993fe-0520-44ae-b719-d8cc56ba4b66", "sighting_of_ref": "indicator--bfa13694-2b66-472e-a7a1-a8dcadb79e33", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52630bb-45e1-409f-a675-26e5e2a47fe1", "sighting_of_ref": "indicator--77aecd1c-88d7-46cb-956d-75b5c6b54bf2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ecff10-612c-427b-bfde-77681d5707ba", "sighting_of_ref": "indicator--77aecd1c-88d7-46cb-956d-75b5c6b54bf2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d420b9ec-c78e-4d52-a3fb-b56f5b3a2c40", "sighting_of_ref": "indicator--4631f215-98d2-4aa9-8aca-cea7d3ee22b1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a46e4a-1abc-4886-a5fb-ccff0aa57801", "sighting_of_ref": "indicator--7af7a420-6b39-4d11-848b-1c22a52242f3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0dec410-df3d-4ad5-becb-7b9007d0851f", "sighting_of_ref": "indicator--781119f0-a319-440d-bc17-cddbc9c97ddf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2828259c-9e3f-4ebc-95d5-9f91e5054ec7", "sighting_of_ref": "indicator--72c0736b-050a-4165-bc9d-5c5470ddebad", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2097995-5e15-48a7-8fe9-f9764c7f47f9", "sighting_of_ref": "indicator--2efd01c2-f661-48b6-838d-918451d2e87b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488c8508-a1ed-427e-b2f8-87e3f8a28c10", "sighting_of_ref": "indicator--03bb6bc9-cd93-47f4-ad1e-1892f9a3e03c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4121bf1b-60b3-4415-afb5-ff92c8385092", "sighting_of_ref": "indicator--03bb6bc9-cd93-47f4-ad1e-1892f9a3e03c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b4af41-99a8-4a6d-bfce-fe6f37191483", "sighting_of_ref": "indicator--03bb6bc9-cd93-47f4-ad1e-1892f9a3e03c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d3c40d-e6c6-47fc-9228-f6ebcb26ed76", "sighting_of_ref": "indicator--96ade721-cbd6-4b6b-bc21-75b332b3f49c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e40036-bbbb-4aff-9343-d2e38afdeb26", "sighting_of_ref": "indicator--efa1338e-abe1-4d2d-a055-19c8738ec37f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866b7a66-72d7-47f5-9105-45dcc738b17f", "sighting_of_ref": "indicator--efa1338e-abe1-4d2d-a055-19c8738ec37f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c59dd7d-867b-4190-9598-5e7d5abc146a", "sighting_of_ref": "indicator--be01314a-3d0e-4cb9-86d6-47c14a134cf9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e29db3d-48fd-4eb6-b0be-a45b4c449a94", "sighting_of_ref": "indicator--b4939ff6-11ba-4ab9-b51f-232e82c21f8a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc63e3b5-fbf8-4336-827c-3643afec3970", "sighting_of_ref": "indicator--f0b18cf5-a8cb-4a07-95db-8dceab9c6773", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7a696e-f40b-43cc-b7e1-a340a2672f30", "sighting_of_ref": "indicator--176351cf-cec8-4bb6-965c-32af599e7a4b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b29bc7-1262-459d-b98a-43f855abd9c6", "sighting_of_ref": "indicator--301347bc-2369-44f4-abd3-d585ec797054", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9f5227-5b16-4af5-b615-ce1bdba3dc4c", "sighting_of_ref": "indicator--f502b8f0-e9ac-46e3-b8f4-b323cd0bbd3d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218ad1ef-75b0-4b98-a12a-4ecb8aebc56c", "sighting_of_ref": "indicator--6fc0bfae-a27c-4cb4-946b-444bddb85d47", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80a8610-bc59-469a-af80-cf66abca5382", "sighting_of_ref": "indicator--6fc0bfae-a27c-4cb4-946b-444bddb85d47", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be619461-2cc7-4d92-b641-fbd10a261274", "sighting_of_ref": "indicator--5bd45b38-3817-4dc5-9ef5-43eb7045231e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afef720e-3bcd-408c-b627-0dfabf5054be", "sighting_of_ref": "indicator--b6ea387d-b9fa-41bd-b26b-af2e6cb6bc85", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39bfee18-384f-413e-8463-f61472525fd6", "sighting_of_ref": "indicator--02e70757-cd6f-43b8-be59-dd94fe3d633a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05145edd-bffa-4475-855f-a25b83489db1", "sighting_of_ref": "indicator--cb032004-0a4e-4584-bf25-086fc6e1bbf0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad25ab5-ba23-4007-aac4-3861fa12cc27", "sighting_of_ref": "indicator--295b2464-7740-4008-b1d3-871b855fc0fa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32300ab6-9997-49e5-8c92-6e9ef35c48d0", "sighting_of_ref": "indicator--295b2464-7740-4008-b1d3-871b855fc0fa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fa3472-509c-4a68-979c-7b0452f10448", "sighting_of_ref": "indicator--e7192f76-11d5-48c0-8ca5-42951b17f658", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272e240f-5fe5-459b-a7fe-ae7d49ac1753", "sighting_of_ref": "indicator--e7192f76-11d5-48c0-8ca5-42951b17f658", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e700f0b0-33cb-4244-b947-16bf34dd1be8", "sighting_of_ref": "indicator--311dec46-a591-45d8-a26d-b7a270b6de34", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbf621a-c492-4da7-85d3-cb902ca9f12b", "sighting_of_ref": "indicator--95505713-2d61-4b40-bb05-b9493aa22a77", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad50d92c-5632-4da3-94ca-390fee4b331c", "sighting_of_ref": "indicator--c941bab5-64a3-4222-be71-c371add47d66", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3be64e3-a1c0-4b53-ac84-9bc73a175116", "sighting_of_ref": "indicator--c0ee0c2b-1184-498a-8d52-74b290296530", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd41766f-0e50-40a7-8c2e-66ae2ed1e15c", "sighting_of_ref": "indicator--63e376aa-ccfe-4407-8521-0f9d9662861d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159f4c9c-d349-49fa-998c-a67d96a5b141", "sighting_of_ref": "indicator--c15c6313-6901-4b8c-9078-f5f924291829", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93acb472-c826-4bef-a095-e209eee2aa09", "sighting_of_ref": "indicator--c15c6313-6901-4b8c-9078-f5f924291829", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dd6bf2-9780-4d69-8752-0e7932305d41", "sighting_of_ref": "indicator--12fe50b7-cbb5-4b90-a497-3b232a1df250", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be76868-79fd-4340-bcbf-37bf8be7eeb9", "sighting_of_ref": "indicator--9c371ef7-8bef-4a49-aeb1-554b8f2ae79c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0008cbf-d1d8-4f0e-844d-aee5d7c9d986", "sighting_of_ref": "indicator--44cbfdab-cfb9-4bbe-838f-4dccb0c2ee34", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c94809-aa8e-441a-ba7c-842493f289ee", "sighting_of_ref": "indicator--e3c7fa42-2bc9-4749-a035-c01e077c6d9c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ceff68-fbf5-428f-b30f-135eff1242f7", "sighting_of_ref": "indicator--122af1f9-72fe-4bb0-9123-9c1e54e6dfbc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e229ac0-65c4-40ac-958d-a3c12328f1e5", "sighting_of_ref": "indicator--808d501c-a9da-410c-b98a-3208dc53bdca", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a388587-861d-4311-b513-6b91980f212c", "sighting_of_ref": "indicator--808d501c-a9da-410c-b98a-3208dc53bdca", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c68f7b4-bcd3-4538-860a-c1ab34fe8609", "sighting_of_ref": "indicator--4ca9fd65-9d98-4896-bd9f-433dfd240aa0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945b00c7-cf78-4cdb-b86b-708ce67a20eb", "sighting_of_ref": "indicator--4ca9fd65-9d98-4896-bd9f-433dfd240aa0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7065f750-a259-4733-9a0e-af8b33bf44fd", "sighting_of_ref": "indicator--e4cbb714-6c33-4518-beca-c87198f71e11", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a12303-35a8-4a40-999d-ae48c68ee873", "sighting_of_ref": "indicator--e4cbb714-6c33-4518-beca-c87198f71e11", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87eab5e7-a128-4246-a566-81abcf17c0cc", "sighting_of_ref": "indicator--e4cbb714-6c33-4518-beca-c87198f71e11", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f334d704-6178-48ea-a8b0-f6107f0eaccf", "sighting_of_ref": "indicator--c5d6220a-226f-42b9-b5ab-66b41e1ae316", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59eab918-dcc1-4f0a-8b44-75be3f837c42", "sighting_of_ref": "indicator--16a43dcb-0586-473f-88f5-048a89ed2bf7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878b2cf6-6fef-43a6-b91c-c2b54788353d", "sighting_of_ref": "indicator--cf066418-d827-438e-a8f6-cbeacaa6fcb9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175ea630-0e1f-490b-81d8-0e7e6abc22db", "sighting_of_ref": "indicator--4529055d-dc48-4264-a84d-fd01696b8b80", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa168a3-b4fc-4488-bbbb-9c2c94fb6c52", "sighting_of_ref": "indicator--4529055d-dc48-4264-a84d-fd01696b8b80", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81300026-8ef5-48f8-87db-6f51a9f69780", "sighting_of_ref": "indicator--4529055d-dc48-4264-a84d-fd01696b8b80", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6d52aa-9248-4c76-b326-24851d925013", "sighting_of_ref": "indicator--f9f1c059-f414-420f-8cd0-dfed467c66fa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df37a4de-c0b2-4034-9f48-b7bc9fc73f67", "sighting_of_ref": "indicator--f9f1c059-f414-420f-8cd0-dfed467c66fa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8fd0946-670c-4dad-856e-0af6fb74f6f9", "sighting_of_ref": "indicator--fc0003b0-1c8f-4f87-ad5e-a7169ea53c6c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a0cfa8-526d-461d-85df-37efdedac8aa", "sighting_of_ref": "indicator--fc0003b0-1c8f-4f87-ad5e-a7169ea53c6c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948c0298-6042-49f0-a498-bd7ed8ab5d6b", "sighting_of_ref": "indicator--6dd370e2-d85a-4b7b-aa15-66890900ee5d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f69d2dd-932d-4f4a-8a23-0435b2fa41d7", "sighting_of_ref": "indicator--d7b992aa-e7e0-49e2-a0d9-f6989b891915", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf04c9b3-c4ad-414c-8c3b-aa1d6d8a3bfa", "sighting_of_ref": "indicator--d7b992aa-e7e0-49e2-a0d9-f6989b891915", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18e88c9-b2aa-4add-b9f3-2b023adbe1a6", "sighting_of_ref": "indicator--7b8f4507-ab7a-4db5-a0e4-c4acdf51c752", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1441012-c3cb-4d71-a613-c1d3fe56a2bc", "sighting_of_ref": "indicator--6ec10d62-15d2-4b8f-91d3-2e36a61bd3c2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551070b7-70d1-4440-9e5d-3ab45292d34b", "sighting_of_ref": "indicator--6ec10d62-15d2-4b8f-91d3-2e36a61bd3c2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35919482-af5e-4ca0-9e0a-dcb56a10b488", "sighting_of_ref": "indicator--3e71f60e-b2f4-458c-a91a-3225f30b0ff4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c762c4d-a9b0-4ddb-b7ba-ee9c161aacc8", "sighting_of_ref": "indicator--2637f6fb-f752-4b2c-843c-1b26abd91afe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--badd9e07-c5ea-42cf-bb32-966f265037b8", "sighting_of_ref": "indicator--fe175bd4-db50-4851-b720-993bb823e805", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba34d920-2622-4018-a397-2ac34b7c74a5", "sighting_of_ref": "indicator--fe175bd4-db50-4851-b720-993bb823e805", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9508b1-3eb3-476c-9da5-495578c42dda", "sighting_of_ref": "indicator--fe175bd4-db50-4851-b720-993bb823e805", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ee052e-ecbe-4e2b-8745-57c55c701cc7", "sighting_of_ref": "indicator--1d0094bf-0389-4885-ab18-37b039b95627", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7000b7-73e2-46f3-be30-946c388c5779", "sighting_of_ref": "indicator--cdaa41f9-275c-448e-922c-a945103428fe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9854c6-e5e6-45f7-9479-3716fbf02899", "sighting_of_ref": "indicator--22d8a295-118e-4636-9c06-ca931bf70659", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96d587b-4dd9-42a9-bfc2-471d86d97c1c", "sighting_of_ref": "indicator--233ba7c5-9b64-4d58-8613-f0b8bb31f05c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b927c87c-c717-40f9-b125-e64bf3a5ae78", "sighting_of_ref": "indicator--f567939a-4d49-4ae8-b0dd-173eff28e2e1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970b0de0-1735-4c39-9757-54ff8bb86139", "sighting_of_ref": "indicator--8eacf598-7644-4634-8a36-ab0093857356", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b014660-fd38-40a8-9f69-06e3dc3a9437", "sighting_of_ref": "indicator--b2104b94-5fcc-413c-8437-30f2663407d9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42566c46-b1ac-4249-9550-c8c63804d643", "sighting_of_ref": "indicator--4c3bdc56-8354-45cf-957d-26dfcc57f8d4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685c01fe-9386-4045-bd71-99bc0caa132d", "sighting_of_ref": "indicator--02f4f9a3-8934-41f3-97f2-a8903aacfd08", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3ff91a-600a-4b6d-838d-2d3ac1ff8d81", "sighting_of_ref": "indicator--1589f8ca-0bee-43da-a2c9-5a9833caaaae", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e64c9fe-25f1-467a-b790-79847a2e7a18", "sighting_of_ref": "indicator--bf378e31-549d-494e-b41a-6071730274c5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697a6185-1ab6-462a-857a-10712cf08908", "sighting_of_ref": "indicator--796edc15-f38b-4ecf-93a0-caffbdf71309", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c04f2fc-d9c2-4a39-9869-d2389a5d370b", "sighting_of_ref": "indicator--6365abbb-e117-4629-983b-b8424a3b73c2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d561c26-4ca5-458e-b2dd-38518b2fe668", "sighting_of_ref": "indicator--f0321b78-c885-4052-a9f7-4b6c8f683d01", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e4c281-8c87-4275-b8d6-7e671b7a8401", "sighting_of_ref": "indicator--44b9e417-a728-424b-ad95-e7cb3cbe5456", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd35aa74-fe18-48ef-b117-8ec1eb1e85b0", "sighting_of_ref": "indicator--a60b9c7d-1365-4ba3-bc46-f1a0d8a8bd6a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f358685-ef57-41e4-b63a-86c6daa11000", "sighting_of_ref": "indicator--128b2088-0cbc-44c0-8632-7edcfd32f293", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe57c13d-b140-4322-9f9a-8f00872f1e44", "sighting_of_ref": "indicator--ede2618d-bde6-4d49-b225-01b3554f0e20", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70322e8-1bfc-441f-8d68-c46f591d55a4", "sighting_of_ref": "indicator--23c16e18-2432-4d7a-9955-92543d25e45a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2386d05-9f2c-46fb-a0b7-20e73b0ce31c", "sighting_of_ref": "indicator--775ddda3-c2a1-49b1-b329-35ac2cab48b7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34979f78-0f2d-45b1-8bb4-96e66d92ef28", "sighting_of_ref": "indicator--775ddda3-c2a1-49b1-b329-35ac2cab48b7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f241ae-3036-40d1-84cb-0a3b6d812581", "sighting_of_ref": "indicator--0f5bb490-8a8f-4ad0-a2d7-7b54127a1845", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b869ee-325b-4322-bd89-8e126e6a439f", "sighting_of_ref": "indicator--0f5bb490-8a8f-4ad0-a2d7-7b54127a1845", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14be4e3e-3bdf-47c8-bab6-acd72fb7e432", "sighting_of_ref": "indicator--0f5bb490-8a8f-4ad0-a2d7-7b54127a1845", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00192b1-5881-4934-957e-0c13bcdf8a94", "sighting_of_ref": "indicator--d69f1e36-f008-4e27-8439-af031e03f69e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b81fa95-7aa1-450e-8e08-802b6fb31393", "sighting_of_ref": "indicator--d69f1e36-f008-4e27-8439-af031e03f69e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38348955-1589-422b-9ad4-248d8513ad03", "sighting_of_ref": "indicator--be1cb7dd-bd30-4d0e-82b7-d1105ee31dd0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dbb8ff2-fde2-49f1-972b-376b1319f1fe", "sighting_of_ref": "indicator--be1cb7dd-bd30-4d0e-82b7-d1105ee31dd0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5439ea8f-b99d-4db7-9ac8-5ae119c23389", "sighting_of_ref": "indicator--d5351269-f78f-4d3f-87c1-c19ceaa706bd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9cf928-ac48-4570-8ca0-817f405de3c9", "sighting_of_ref": "indicator--d5351269-f78f-4d3f-87c1-c19ceaa706bd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce33c739-6da0-448b-9942-bfd616297cd4", "sighting_of_ref": "indicator--d5351269-f78f-4d3f-87c1-c19ceaa706bd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a2dfd8-0abe-4df1-95f8-e5c03b1f3155", "sighting_of_ref": "indicator--a835621e-0038-48ad-90b1-33c93a309eb9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81723eb-041b-4f46-ab20-145d66a9756e", "sighting_of_ref": "indicator--a835621e-0038-48ad-90b1-33c93a309eb9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7893e9-bb95-4b44-a950-1d5f3c272c4d", "sighting_of_ref": "indicator--3f671094-7730-4668-9ca2-fdd6c3b0ee76", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ca5561-f027-46f6-9465-2c19d4eefa12", "sighting_of_ref": "indicator--3f671094-7730-4668-9ca2-fdd6c3b0ee76", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56dee97c-a7f7-45c6-bd05-7d7fcf88f396", "sighting_of_ref": "indicator--3f671094-7730-4668-9ca2-fdd6c3b0ee76", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff176904-64a3-406e-8e25-ae6f5c3b53c9", "sighting_of_ref": "indicator--c02e6a7a-080a-47c9-8d2f-4be8859c107b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4ea0e3-99f6-4602-afac-ed177e8456b2", "sighting_of_ref": "indicator--c02e6a7a-080a-47c9-8d2f-4be8859c107b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c9a692-24aa-4009-866f-32be87d2ee52", "sighting_of_ref": "indicator--3fbab4f8-e833-4c8f-baa6-e1c74320eda2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1521aa80-fc82-48fa-88a6-b0719cc6f759", "sighting_of_ref": "indicator--3fbab4f8-e833-4c8f-baa6-e1c74320eda2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b9e741-6100-455c-80b5-ccb6717104b7", "sighting_of_ref": "indicator--86c18644-7890-4d6e-9453-d1ae90069bef", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e54565-3fe9-4b89-b2b0-0e62694b5991", "sighting_of_ref": "indicator--86c18644-7890-4d6e-9453-d1ae90069bef", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793bf532-04f0-491a-bbe3-be5564d89ea8", "sighting_of_ref": "indicator--70253518-7815-4301-b452-e388b6043a19", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0d307b-af8e-4ceb-a7a2-ae4ac596972e", "sighting_of_ref": "indicator--70253518-7815-4301-b452-e388b6043a19", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b540af21-5d72-40c0-9eab-5ded5d2c54af", "sighting_of_ref": "indicator--731d79a7-871b-432b-b7e3-d30f453c44ef", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413cb644-c682-42ef-b674-1783ac80a0a0", "sighting_of_ref": "indicator--731d79a7-871b-432b-b7e3-d30f453c44ef", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cad7b98-05e3-4255-bd2e-fd0bb763a143", "sighting_of_ref": "indicator--731d79a7-871b-432b-b7e3-d30f453c44ef", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4cee899-1f19-4828-b6fb-76c73378c1c7", "sighting_of_ref": "indicator--a0e25fe1-bcf0-4f01-a62a-6cabed5ec60f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf95f50-4ff1-4325-b3e5-4fc2a933adbc", "sighting_of_ref": "indicator--a0e25fe1-bcf0-4f01-a62a-6cabed5ec60f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec09377-b0a2-470d-b9fe-0bc996b6efef", "sighting_of_ref": "indicator--c1f3820d-a87c-4386-8572-3f35613f054b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c8571f-6a31-4a56-8857-36fd9bdf4003", "sighting_of_ref": "indicator--c1f3820d-a87c-4386-8572-3f35613f054b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b939e8-0559-4cb2-a93e-32fed6ad8991", "sighting_of_ref": "indicator--59e8c8b1-8e23-4b11-93a2-ee0f06e6d35c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862f9dd9-81fe-470b-a303-2ff5ee72d54b", "sighting_of_ref": "indicator--59e8c8b1-8e23-4b11-93a2-ee0f06e6d35c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d9794c-3b7a-4f39-b19b-fb96953f2030", "sighting_of_ref": "indicator--59e8c8b1-8e23-4b11-93a2-ee0f06e6d35c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10968d48-1c70-4401-b0f6-9eaf6be57a0b", "sighting_of_ref": "indicator--a8a55d4a-1e5f-48f4-a93b-4b1cd3285ea7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8b02ce-3659-4bd4-9971-bbcb64160722", "sighting_of_ref": "indicator--a8a55d4a-1e5f-48f4-a93b-4b1cd3285ea7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e53256c-90c1-40e6-84c7-cb91c12a9d11", "sighting_of_ref": "indicator--1b7f49d1-f85a-4e19-a40c-52dfb8ec5de7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d5d431-becc-4a74-8dde-6388cd6ceb5b", "sighting_of_ref": "indicator--1b7f49d1-f85a-4e19-a40c-52dfb8ec5de7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36683d4c-f99c-432d-89a1-be7fdaaa45f0", "sighting_of_ref": "indicator--1b7f49d1-f85a-4e19-a40c-52dfb8ec5de7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e259a451-f8dc-4b65-a4a9-7016185b32b3", "sighting_of_ref": "indicator--641b4085-ff34-48d4-8dd7-3705c53da55c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd099ff-26ec-49b8-bacc-6f82a649c2ec", "sighting_of_ref": "indicator--641b4085-ff34-48d4-8dd7-3705c53da55c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e11890-bd95-4c68-a770-a6b2bd3d7f0d", "sighting_of_ref": "indicator--a28d53fd-822c-48d4-845c-6eb24317a5d9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490b25c1-0578-4d9e-8692-f875453ae226", "sighting_of_ref": "indicator--ad920731-11b6-4798-8fba-9c4fd1259076", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e592688-47b9-4624-bf67-a1c267c55b60", "sighting_of_ref": "indicator--d2353219-e113-4a1b-ab04-3d7ae9673f57", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0832c2-97ba-44ce-8246-9f821a6262d8", "sighting_of_ref": "indicator--d2353219-e113-4a1b-ab04-3d7ae9673f57", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555cde10-15c4-4c15-8c66-990019651f04", "sighting_of_ref": "indicator--ea3da112-976f-4acd-8e59-703f91ed19cc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8539dd88-2cfb-413f-bc8e-bf76384ee78f", "sighting_of_ref": "indicator--52408cf6-6525-4a35-8ce0-c73304db900d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28efd9cd-1ef0-4e73-8639-18ce01e43d96", "sighting_of_ref": "indicator--85ca6c7e-c64e-4296-9c68-ae8141311065", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970891a9-879d-4302-8598-36edf2449d0a", "sighting_of_ref": "indicator--c2d79d3d-36f2-455f-971e-743216e1bd59", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8312f4-523d-4f64-80e2-58a2c8531d6a", "sighting_of_ref": "indicator--348fb667-bae9-4ddf-ba1c-77ad464c7118", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f21cb38-c364-4c6d-89fe-671bb5229721", "sighting_of_ref": "indicator--348fb667-bae9-4ddf-ba1c-77ad464c7118", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42aaa5c-0c53-4582-868e-07a8e22fbdd5", "sighting_of_ref": "indicator--f2810a56-2efd-4481-a015-04857985b54f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ba9d87-5ff7-4261-9010-f554dc4efd75", "sighting_of_ref": "indicator--f2810a56-2efd-4481-a015-04857985b54f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6f819f-561f-42e3-9175-f161d5ed5e43", "sighting_of_ref": "indicator--a933739b-23d0-4b44-8ca9-ec33c862ea75", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b36407-5eb2-4491-bb59-de5ea22297c2", "sighting_of_ref": "indicator--b29ff6ab-f2a7-4a63-85ee-7e294a88eca3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce1e599-4e7f-4084-b1a3-3696253dfad0", "sighting_of_ref": "indicator--2febf460-f7b6-4e01-894e-3c0fcd4534b9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de799b1-e509-4b88-8016-32272bfdefec", "sighting_of_ref": "indicator--2febf460-f7b6-4e01-894e-3c0fcd4534b9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe4a573-c2b1-4a08-bd08-69357be3160e", "sighting_of_ref": "indicator--8898e527-9258-4af4-b260-17bc26afd202", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96570fd8-643c-41a8-be35-3418bd820618", "sighting_of_ref": "indicator--6ba617eb-5812-4728-8c77-6353332afe05", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2752a36c-b68b-4dc7-8b86-695f4197f73d", "sighting_of_ref": "indicator--6ba617eb-5812-4728-8c77-6353332afe05", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ddc7a5-48fc-45da-952e-b7622e28ae94", "sighting_of_ref": "indicator--ee6017f6-2f7a-42f9-85d1-04ddc2498729", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb34796-0212-4153-8f79-67bcd071bf0e", "sighting_of_ref": "indicator--474453eb-5c8d-4d6d-8987-89c7a0aa143c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a93117-8ad3-438b-b38f-e876d12273dc", "sighting_of_ref": "indicator--ad5d3752-bb52-4823-bc7e-0a52c09774c7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e005f46d-da09-4463-b500-8d3d27d4cb24", "sighting_of_ref": "indicator--1674943c-535b-4075-b653-d8c2d29c744e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95062ddf-9189-4a17-93ef-e9eb164c1ba6", "sighting_of_ref": "indicator--fdbf65da-b3ba-48ad-8cad-241c400e901c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1c3a16-7d5f-4cc1-b6b7-56366d86acd6", "sighting_of_ref": "indicator--fdbf65da-b3ba-48ad-8cad-241c400e901c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678d62ea-3cce-4719-b5ff-f88e245ba244", "sighting_of_ref": "indicator--a1c84ee7-6a4f-46a7-8628-bf314c2497cd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fef071-5b0b-4a80-ae8c-765c89668357", "sighting_of_ref": "indicator--6f7fd804-0e28-4cce-aec2-a0c9f96b2433", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93ad650-8cb3-48cd-aa91-7a505e54f3a1", "sighting_of_ref": "indicator--703af44c-b8ce-49a2-a695-6d16c0d04fb1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232d1a2c-c856-49e3-b46c-842b9037625f", "sighting_of_ref": "indicator--6acb5c81-5f88-44a9-b776-fd6948d8de6f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e64a6f-4713-46cd-80ff-e4dba9bb52e0", "sighting_of_ref": "indicator--ad36b5e3-9695-4708-bbec-21a2ea99ee16", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0e27f4-b923-464d-bd74-32f849436b5b", "sighting_of_ref": "indicator--c0bea3dc-f481-4b33-8677-28e447b1fdaf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593495f1-e9b6-4ae2-88a3-25045707cfcb", "sighting_of_ref": "indicator--50096945-0724-4d18-9e37-5c7184b878a5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5565f63e-320b-4491-815e-e68f2eafc985", "sighting_of_ref": "indicator--b568d9ad-0385-4851-be80-fb3fe176214d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dcc4d4a-03a2-4029-b5e9-8ac5cb20958f", "sighting_of_ref": "indicator--0ba0a60e-e132-4b0e-aaba-0ce717a44a45", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546cb489-d9cf-4d59-bf04-cc0eead4547b", "sighting_of_ref": "indicator--661fd09d-bbe9-4328-a73c-94155d058bee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2893b307-107a-4432-af0b-cd2a9b8eb2e1", "sighting_of_ref": "indicator--661fd09d-bbe9-4328-a73c-94155d058bee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecdb728-df92-4065-888a-030e354b36c6", "sighting_of_ref": "indicator--7456461d-2a65-403d-ad9f-0a44c10f2246", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f66329-ede9-4e6f-9617-0ad9aa2073f0", "sighting_of_ref": "indicator--7456461d-2a65-403d-ad9f-0a44c10f2246", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0497f9-1521-48c7-9c68-463c7d038dbb", "sighting_of_ref": "indicator--7456461d-2a65-403d-ad9f-0a44c10f2246", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95b4129-9068-4a62-a5f5-cceb0f873d70", "sighting_of_ref": "indicator--7456461d-2a65-403d-ad9f-0a44c10f2246", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59bd001d-57bf-424a-91a9-013086f9e6a5", "sighting_of_ref": "indicator--69710ffa-7e4f-4e84-a61d-c20b8c94527c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6af020-d012-4492-87d5-c8266f5dffd0", "sighting_of_ref": "indicator--4ae6f65e-ee7f-4bc8-aa15-b9b41e43e765", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69417dac-9f18-4c91-ac16-9049dd8ae605", "sighting_of_ref": "indicator--3d23151f-6e69-4fa0-a995-c7091a2c0eb6", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3607471-a237-44ab-b5b1-e34310a49180", "sighting_of_ref": "indicator--dc841144-85d2-4782-afde-98f0779687ed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9269aef1-7964-4401-8129-e9c8f045c4a8", "sighting_of_ref": "indicator--dc841144-85d2-4782-afde-98f0779687ed", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6514fc31-7d2f-4291-9496-c154e1fe66d9", "sighting_of_ref": "indicator--bdfdb5a4-9977-4e0f-a5bd-f73175a6017f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3398da8e-7a8a-4dca-b3bc-fc225a0a33ea", "sighting_of_ref": "indicator--a9d9688b-26f1-4ea8-aa0d-639a5c9641b2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ede4ba8-dd6f-4446-bc22-adb1f44e9a79", "sighting_of_ref": "indicator--64f0d175-5c4a-49f7-a667-039f9106f130", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c51392-b04c-44aa-9400-ed8149a7770d", "sighting_of_ref": "indicator--92e9ecdb-33df-4935-927f-7dd579d0fa2e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f664375-b454-451d-b336-db90e0a791ed", "sighting_of_ref": "indicator--763434c0-4f70-4867-8ca0-6be8a3a4071d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b30906-4dc6-4239-8c93-f94d086e6696", "sighting_of_ref": "indicator--698036b2-15cc-4970-ba7b-9fa0bedbb015", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba18df8-6729-4d4b-986e-47dab1395393", "sighting_of_ref": "indicator--dbff6902-febe-4eab-8333-9ac706dd1452", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411f6c16-5419-4be6-8db6-ce32092d85ca", "sighting_of_ref": "indicator--dbff6902-febe-4eab-8333-9ac706dd1452", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f966c84-09dd-4f5f-93bc-d7208599e34a", "sighting_of_ref": "indicator--b1c5cfed-b65b-49f7-9607-4bdbf7c83a95", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9915fad-351e-4ed2-b806-48899c97591b", "sighting_of_ref": "indicator--355f1e82-7afe-4d4b-92c5-1ecefe3ef5f8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4261aa-4ed3-40cd-8e28-42862ec38a9d", "sighting_of_ref": "indicator--3922edaf-4229-4858-ac48-a1de4718343c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8bbb07-cfb2-4496-84b4-acdba8ee0a2f", "sighting_of_ref": "indicator--45f18702-84d1-41d2-8b6f-e3e72f6f1221", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a1b670-7d0e-45a9-9d27-cd35ff91328d", "sighting_of_ref": "indicator--b9325eca-128b-4d6f-aeb6-2f9f5b8cef16", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e72432-25dd-43f1-9c59-447c4766b09a", "sighting_of_ref": "indicator--61cf4034-653d-4eea-abc0-b08c8605e846", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a99d317-9bac-4360-8a8b-ddba8a0c9116", "sighting_of_ref": "indicator--61cf4034-653d-4eea-abc0-b08c8605e846", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f39758-f442-480d-98b5-9801c8b48f11", "sighting_of_ref": "indicator--e2217fa7-3ce1-4b40-8e4c-5b62afe173da", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d25e42b-7a7d-4da6-a082-047a50b3c390", "sighting_of_ref": "indicator--b6af6ee5-d4f0-4474-983a-d78b416e48dd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0492c97f-3c6a-4f9f-b595-45edda9fd21a", "sighting_of_ref": "indicator--8d05246c-8ca3-4e54-b5c1-df6ef47cc0c0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c795630-839c-4d71-9f30-58a8d94c4ca5", "sighting_of_ref": "indicator--45617822-fea5-495a-9aae-b474e102c6cc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f2d253-06d5-4036-8bde-bdd6ba059a9f", "sighting_of_ref": "indicator--c9df36ee-23c3-42e9-86ff-f308ffe50548", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67ee758-0b25-4e72-899c-6f9a3a5fa7f4", "sighting_of_ref": "indicator--c1cfd068-85f9-410e-9f1c-62add59b1eeb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3049ee30-4e2c-42ad-ad8e-4f4fafa6b6e9", "sighting_of_ref": "indicator--304c1656-4601-4886-b959-780ff2d8093b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cb4353-df32-4c4b-87f5-7501656f9515", "sighting_of_ref": "indicator--772b101a-11a6-4139-8b28-968f4392f8b4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e39d9a0-d073-4a5a-ba1d-52ac0019314a", "sighting_of_ref": "indicator--97a72396-f814-4811-bff7-5b9c12a09ccc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8bbbcd-70ff-4c84-9de5-29e2f4943dce", "sighting_of_ref": "indicator--6c862939-dc97-417b-8887-c3fdd7d9763c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04db0ea-98a3-4519-a3cb-634ca28c32cc", "sighting_of_ref": "indicator--8ba679f4-af85-480a-bf8b-c8695c68f355", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a76a58-a4ab-48bd-8a88-4b7b2d86ae30", "sighting_of_ref": "indicator--616d691f-0a8c-4472-8452-2b6277464cf3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e8095b-c6d6-4e4d-91b3-3d11e6c077ab", "sighting_of_ref": "indicator--616d691f-0a8c-4472-8452-2b6277464cf3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05620f40-d299-494f-9940-e78a14caf7c9", "sighting_of_ref": "indicator--e0e2a975-24e9-40b8-a3a7-5baf725c0dfa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200cfb20-810c-444d-8685-0ccf319f3d0e", "sighting_of_ref": "indicator--92e5fa08-a64e-417c-9ee0-01859f5dbadb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71f8314-ae84-49af-91e4-eded86800f26", "sighting_of_ref": "indicator--e8dbd155-3211-4a41-accc-620b5159df95", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814318bd-dde7-4657-b4eb-13c3790d8799", "sighting_of_ref": "indicator--78e020f4-b92d-4a9c-ab78-bf99d7319043", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b491e2-6fd2-4df9-8e66-128d7897209c", "sighting_of_ref": "indicator--7cff79ad-a40f-4a95-a5ed-ce3471e825d2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe3c380-656b-4c59-a4a4-9b433dd6d167", "sighting_of_ref": "indicator--a5b68de1-5f0d-472d-a7cb-f408f148f38f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2961b9ec-bc9c-4b78-9556-51d38236fdf8", "sighting_of_ref": "indicator--c8da7b1e-de56-49e1-8c81-5e6c21065526", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c0228d-b037-40ab-96a7-516f2826b9e3", "sighting_of_ref": "indicator--4c12cabf-76fb-4c86-bc57-f0b40cd8c7b4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735c09fc-8833-4c62-aecc-095b3365fb26", "sighting_of_ref": "indicator--581b82d3-8401-449b-b970-821287782eeb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad18971-19d0-4edb-af26-7f9b4bb66aea", "sighting_of_ref": "indicator--79a2847b-4b07-4706-8a74-c60ff94cea07", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bce3e6-a0bc-4834-b324-5958c4f870d9", "sighting_of_ref": "indicator--79a2847b-4b07-4706-8a74-c60ff94cea07", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9443fe3b-888e-43b1-9de9-aacc8c76c788", "sighting_of_ref": "indicator--e672f1e5-7b14-4d26-b5b0-d96952183ebf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675d5f84-b56f-48d5-a2a2-94851186c8d7", "sighting_of_ref": "indicator--244eab86-71f4-441a-b368-4625c2c2c881", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67733a0-4e2a-489e-856d-6a2e1c642432", "sighting_of_ref": "indicator--d0eced80-92e1-49b3-9dfc-a040608ef7fd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c74ba28-3df9-410a-9742-2f001c4fe353", "sighting_of_ref": "indicator--8201f48e-e856-496f-be42-7284b2285f4e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f0a619-9a68-4cf5-a1f4-a8a7b6b670e6", "sighting_of_ref": "indicator--8201f48e-e856-496f-be42-7284b2285f4e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2ee9c6-0a8b-4c36-b7f2-52e727e079f4", "sighting_of_ref": "indicator--d255f0a4-581f-456d-87c6-e13c10db062f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073c5b5d-306e-45d0-b7bf-960d419527e9", "sighting_of_ref": "indicator--c656dc14-2ce7-43d6-917b-10ad09edfcc4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06ad7c0-b5b3-49b6-af00-dab3c51d6bde", "sighting_of_ref": "indicator--c656dc14-2ce7-43d6-917b-10ad09edfcc4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66661275-d09a-42b1-abe9-51b07144e235", "sighting_of_ref": "indicator--9df0392d-9419-4f7b-8375-84356460377c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ea3d6b-d5c0-4785-af6a-4da527a0d829", "sighting_of_ref": "indicator--163c0730-13a0-4e95-9aaf-635018133d96", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddfcec4-e71b-4b97-b643-7e61aa2291db", "sighting_of_ref": "indicator--163c0730-13a0-4e95-9aaf-635018133d96", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d3ccba-482b-4e1b-a080-9b4cd4f4341e", "sighting_of_ref": "indicator--dc4decd6-d5a6-440c-8c46-fc15baa8ae95", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db51ed59-1b61-4ad9-8866-7f9149c31e23", "sighting_of_ref": "indicator--d3cad005-e1a8-4451-be81-2f30dab08a61", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9288116-8583-42ea-ae7a-df06f93c56bc", "sighting_of_ref": "indicator--36ddab70-ceab-45c4-a8b0-6f0804c0720a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db235a02-9e45-4798-a1ab-3cad5be16d24", "sighting_of_ref": "indicator--36ddab70-ceab-45c4-a8b0-6f0804c0720a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39ab410-dd27-4291-91b5-adaa88b64a34", "sighting_of_ref": "indicator--4d43360d-5ddb-4e8e-a2cd-e8db6ac1ea93", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e135b8-a0a3-4c79-b93d-c67c5e3b0881", "sighting_of_ref": "indicator--e463cd7e-e67f-461b-9dcf-670ebefcec6a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae540cc-0cc4-4aba-a8e0-9ae650f1e40e", "sighting_of_ref": "indicator--ee2f125b-aa30-4a27-ad1f-513d33182200", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8ca23b-dfcd-45c3-94f8-e46e26d09580", "sighting_of_ref": "indicator--20c297ce-b997-4bad-b9b1-4b87b8051943", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944fa8fe-2430-4be4-ae26-ec37ebdcaf4a", "sighting_of_ref": "indicator--a6047508-7223-41ff-84aa-2d35daba02fa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1398088-1601-4145-a9ec-64e5f871d53f", "sighting_of_ref": "indicator--c6ef832d-a32c-44c9-8cac-c12e0f6f91a6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1ed9eb-7d04-4b5a-b080-68b5a54c6fb3", "sighting_of_ref": "indicator--2b03339a-264f-40e6-862c-6358f6072cbc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa90609-9644-4d90-b319-ca6b27755d85", "sighting_of_ref": "indicator--93fa4fbb-e796-4da8-b7cf-39eef1aa5849", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a330628-efe2-462f-a1a8-ebb145994a4e", "sighting_of_ref": "indicator--e244ed38-02d5-4135-8fb0-b25d7348aebd", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27b7fd5-23e2-48aa-8253-29e3588d9c86", "sighting_of_ref": "indicator--b33a47dc-24d8-4d16-82e4-9b656cd76214", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399e27b8-8afd-43b1-960d-c37a121444ab", "sighting_of_ref": "indicator--82dc44c5-b58c-4237-8198-9ba77b047b6b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55db6e17-f9ca-4593-9aaa-f7bf3b93e8bd", "sighting_of_ref": "indicator--82dc44c5-b58c-4237-8198-9ba77b047b6b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1518aba6-38e0-4b77-9abb-6bb9fe3d1785", "sighting_of_ref": "indicator--92f9369b-01ba-4eee-ab97-9101526c7867", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11350386-61c3-4fce-aadc-b9ea8b203b48", "sighting_of_ref": "indicator--2816d6e5-11c0-4176-9120-4c3ad54d2b98", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49590a6f-ef91-4d8f-9fd6-a82784bfa7fd", "sighting_of_ref": "indicator--2ee1d6fa-396d-4db2-94b0-8abb4fb87484", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbd6a22-4efc-4d9c-b004-25cf1a530b5a", "sighting_of_ref": "indicator--baf1dcf7-cb1c-4754-9a18-abd759c08ded", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae99b00b-b1d7-41f1-95b8-eb0b2f9bcdcb", "sighting_of_ref": "indicator--dd026a7e-7e75-4650-87b7-dfe7dabef839", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d766b5-8394-48be-9248-10b903ca9aa1", "sighting_of_ref": "indicator--967d6cf5-a412-4d58-8dab-5e36bae26174", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08597bc-8aa2-4909-b85b-408a9a07c893", "sighting_of_ref": "indicator--ed6a5ffa-ab60-48b7-8359-517e2a1e02a6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52576448-1367-49f3-b79b-cabe801e9d49", "sighting_of_ref": "indicator--df218ad2-dac5-49a2-8340-1154b1609326", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aca2d28-54de-4098-b265-bf65254d3363", "sighting_of_ref": "indicator--6ad07dbc-0001-48c7-aadc-920fd68b7ad1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa7b91e-e8e6-48b8-ae12-c28abd558205", "sighting_of_ref": "indicator--6ad07dbc-0001-48c7-aadc-920fd68b7ad1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86e2a29-992e-4a4f-b428-202ea24161f2", "sighting_of_ref": "indicator--42523800-fee4-4622-867a-e7544a7f6307", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d9465d-1dff-45e9-bdb2-1e38aec409d1", "sighting_of_ref": "indicator--10b38e08-67e5-4e4f-aa32-58a6b3ed7f89", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab253e5-c14e-44bb-bc4d-d845d58e3ad8", "sighting_of_ref": "indicator--4aca74ce-fa35-4703-bdca-56bdca5373cf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c224c739-9d0f-4ae8-8d55-fff1fa770765", "sighting_of_ref": "indicator--e8481fa6-be99-41df-9fb9-f3b4388db525", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1456637-92f8-4ae5-a2d5-6f610b717027", "sighting_of_ref": "indicator--e8481fa6-be99-41df-9fb9-f3b4388db525", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1f7841-6657-4a57-9776-72ae021e1046", "sighting_of_ref": "indicator--78d6ea04-213f-4b4d-9caa-01ac5f9ebb20", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285da7f2-7312-4ac9-9c1c-fa4c6c4eb05d", "sighting_of_ref": "indicator--749672f9-34ee-422a-bfa2-e70d84b52273", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe02667-0d5d-4ffd-bdaa-0fcb29b368bf", "sighting_of_ref": "indicator--f827f75d-be8f-41b3-b4d5-e00ecc7f6e26", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fc76a3-aa14-436c-a08b-d0125bf0c148", "sighting_of_ref": "indicator--6ed293bd-f8b0-4343-89bb-b6cb39a0a361", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82affe3-8b1e-4474-9781-52cd0ddb9609", "sighting_of_ref": "indicator--f85543a5-c69d-4b58-a158-5d36e1951547", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe962c4b-6289-492f-8d9a-6d18824ba5c0", "sighting_of_ref": "indicator--b4126927-99c8-439f-b816-4fbc6435a033", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5fc972-dc63-4261-b271-2cf8b31add7a", "sighting_of_ref": "indicator--a545dca3-85fe-4395-b50b-592d5c68685a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ba3de8-71db-4be0-a2bd-24c4d7179d3e", "sighting_of_ref": "indicator--7a35eb8e-4b8f-4abc-9759-579286e40b69", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c3c313-7260-420e-8563-56e42342b703", "sighting_of_ref": "indicator--5fd7a26a-b69f-4b5a-a0d2-eb3afb847f42", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799b97cb-caec-475c-871f-4adca23d1baf", "sighting_of_ref": "indicator--dd9acbca-6bdf-408d-8168-674a4a4ee352", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4410a8b7-0a42-4940-983c-dd5541b4b2e9", "sighting_of_ref": "indicator--02f9592d-7dc1-42cb-9320-458fa78550d7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccefd7dc-6afa-4cfa-abc9-e8f5fcb0b154", "sighting_of_ref": "indicator--71b377cb-7cb1-489d-8717-8e23caaf439b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f515c3-98c3-4c78-acb4-623a30231aa3", "sighting_of_ref": "indicator--4df1b46c-3c3a-4405-85bb-c2a0ca0480d2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e391d850-59e8-40d5-a3a2-7f78a89c0b67", "sighting_of_ref": "indicator--24125de1-2fbd-4943-99b3-1446d8f7448d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece7a2a8-8e6b-4c3c-98ae-1ed34d9cb10e", "sighting_of_ref": "indicator--44fb61c7-fea7-4446-8b49-aa87fffeff39", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4b25c5-b4ef-4973-97a8-3ffbfed042b8", "sighting_of_ref": "indicator--44fb61c7-fea7-4446-8b49-aa87fffeff39", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad397a0-cbf6-4e7b-a75c-3a6ec9a26710", "sighting_of_ref": "indicator--44fb61c7-fea7-4446-8b49-aa87fffeff39", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00016121-39b1-42ef-99cb-5262713350a0", "sighting_of_ref": "indicator--604b781d-2d41-4fc4-a8ac-16b74ddbf24f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3176b0fc-9f30-46a5-bd04-65020ed743cf", "sighting_of_ref": "indicator--489eb853-c933-4bd2-b649-7e1f2f3c7532", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d4f4c5-7fe5-4894-8d42-efd843ebe8ef", "sighting_of_ref": "indicator--720c9998-4a61-40e7-ad83-dc645c2dafb0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd6bea5-292a-4cdd-bf35-51db397c2a27", "sighting_of_ref": "indicator--32d8e705-a108-4c68-ba7c-85892f78d359", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e94ba14-182f-457d-9b11-da73d419411e", "sighting_of_ref": "indicator--e290a9e7-f0dc-4f38-81fd-1a227d0a8e50", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c32b920-b8c7-48dd-a696-c6c62a12ddf1", "sighting_of_ref": "indicator--e290a9e7-f0dc-4f38-81fd-1a227d0a8e50", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fb42d8-d4f5-4774-a95f-9149aca43427", "sighting_of_ref": "indicator--169018aa-5ca9-4645-abfb-a87e2adeba01", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a2d7a3-bb28-48b4-bc1e-a840f179d030", "sighting_of_ref": "indicator--7fb16f12-432a-4cbe-aa44-8e380ad4cfe7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f81ae2c-bf24-40d6-a213-3b438b86cfc7", "sighting_of_ref": "indicator--d428560f-88cc-441e-b7ce-e857a9c78fab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43481802-27b0-4018-9dd5-2fec50a9c453", "sighting_of_ref": "indicator--f68d4cfe-0158-4318-9fb0-413cc7ff8de0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c62b95-bd0b-4a26-90f4-d2147d8f62ea", "sighting_of_ref": "indicator--fceed736-a947-4ea1-8b11-e96f3161d845", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a864f584-1a48-420c-9a1e-359eb72fb073", "sighting_of_ref": "indicator--ef206dea-0891-4266-abb3-61d31cc803a3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f7c2f6-c7b7-454f-a5ab-959c072d96e9", "sighting_of_ref": "indicator--1689a6d5-db04-4e43-baf8-7ffe716aff5e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c61ebe4-36e0-4ab7-a2d5-bf2c9722ce6a", "sighting_of_ref": "indicator--cf1adc46-f48b-4739-afb0-4a04080962a6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2c4a24-c694-42ee-9e14-7733a5ddb4ec", "sighting_of_ref": "indicator--e3479e48-6aee-4211-ad28-43a3ef1ace39", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d98fd6-fe6e-447f-9fa4-f57b86d5b521", "sighting_of_ref": "indicator--a5752067-076d-48cb-b2c3-8fc23789ae71", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a60838-cc39-466f-85e1-4bbeed93120c", "sighting_of_ref": "indicator--aa9b36cd-7bf5-410f-a936-3a8502d7744a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3d1c64-05d0-447e-b7a5-f603cc666247", "sighting_of_ref": "indicator--efc0b453-c6db-4b16-a075-0f6d5e15e541", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb00a97-827f-4437-979c-8a638a5ef885", "sighting_of_ref": "indicator--52392f56-75e0-4296-ace0-bae835fa1ee2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b2349f-bb90-4d99-b50a-3a8f7eb4dad6", "sighting_of_ref": "indicator--22eab69e-5595-496f-b5f2-b08c297ac4a2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4a1f93-273a-48a7-997e-5bb8c44313be", "sighting_of_ref": "indicator--fe65c98b-0c05-47c6-901f-6a605c520f7c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613f9b59-9eb6-4a78-a1d8-bd1dfb789644", "sighting_of_ref": "indicator--485efb2c-6c19-492e-a062-cae1a8933975", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752029f2-944e-4989-b3e2-93582d9ff53b", "sighting_of_ref": "indicator--485efb2c-6c19-492e-a062-cae1a8933975", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c955ff-d625-4122-b92a-83d40da2c4d0", "sighting_of_ref": "indicator--2ec67518-be23-4c82-8311-80ed76d9cfac", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1328f53-3e32-456d-bc29-fe68231f9ff2", "sighting_of_ref": "indicator--0e32efb7-b452-4f5e-bd07-c405442b3835", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2787854-909b-4ac4-8d71-2c9bbd3de59f", "sighting_of_ref": "indicator--2267f3ea-9d73-4627-a013-1c1741e27d60", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83944264-ca82-44f8-86b2-c523c19fa948", "sighting_of_ref": "indicator--3d261609-b61a-41bd-a5a5-e1e37d112feb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb58816-4934-47cc-8933-42f92b5f9ecf", "sighting_of_ref": "indicator--c3dbed5d-17a2-45b7-852a-57afee81dd87", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b39055-5066-4a94-84ed-d1994d3455b2", "sighting_of_ref": "indicator--73a73554-1811-4a19-a2e0-6bd554608b9c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd46c8f9-aac9-4611-989a-9fe924e1b1c7", "sighting_of_ref": "indicator--faeacc59-1bb0-4c74-84f7-f2baa23a6d1e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e32d7e-8cd9-4908-93e9-cd439bf2f992", "sighting_of_ref": "indicator--ade28ac2-3ea9-49de-90da-433c2e130b6c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26602d1d-96b4-4280-9fb6-4220c31cbe5c", "sighting_of_ref": "indicator--ade28ac2-3ea9-49de-90da-433c2e130b6c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e364147f-8123-4dbd-818d-99f2cd4e6966", "sighting_of_ref": "indicator--ade28ac2-3ea9-49de-90da-433c2e130b6c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d58941d-f329-4280-a055-a25a4ca445de", "sighting_of_ref": "indicator--5846d141-fc17-4cc9-a58d-b3666a6e453d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8a709d-ed8b-4280-b0aa-effdce91a6e5", "sighting_of_ref": "indicator--f04b426b-9a10-462a-8af1-4b1b0064b3e8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773e5caa-2199-4745-a8ae-9f74b363192f", "sighting_of_ref": "indicator--cb4f12e8-8cba-4b27-9b25-e180888d38fb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5943ddca-63f0-4c69-93e4-cc056484dd05", "sighting_of_ref": "indicator--cb4f12e8-8cba-4b27-9b25-e180888d38fb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d435ddc-882c-4582-b6cd-9be37fb76eea", "sighting_of_ref": "indicator--44ff9244-58ff-4cad-843a-7db780ac7f34", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21a3b82-99ed-4cf7-9ca4-998e2a068659", "sighting_of_ref": "indicator--a6910022-ea10-460b-aa46-246bb0b2cb84", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d43c31-ba38-4a75-ab79-3ec122771c9c", "sighting_of_ref": "indicator--273410eb-209d-4211-9d68-0091723615c9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec20bc81-e056-40ac-95b3-166902b91d85", "sighting_of_ref": "indicator--199317e2-7553-4891-bcfd-64c26f38ebe7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2274ac-1333-4334-ae24-b6342ee8bfa6", "sighting_of_ref": "indicator--2cb6fd1a-e6cf-4264-935d-907e81751813", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17fdb96-88fc-44c2-9425-af7a6b2233a2", "sighting_of_ref": "indicator--ba48934a-6bf6-4d83-b4c4-9bc1c9e38e4a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec4f62f-2bdd-4af0-9b8a-7951587a97ff", "sighting_of_ref": "indicator--ba48934a-6bf6-4d83-b4c4-9bc1c9e38e4a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6dc4e1-a134-45e2-b0a4-570503644be4", "sighting_of_ref": "indicator--6892b09d-acd4-4cac-b805-7cd6fdbf8b06", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02117df-e416-43c9-bfcb-a5da32fa3b74", "sighting_of_ref": "indicator--822a303d-20a1-424a-aa6f-80214166b435", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8145cf5-8db0-4499-9691-9e532eb5dba5", "sighting_of_ref": "indicator--59500fd5-a7c6-47df-883b-087420702195", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d23813-d058-4627-be2f-43b48ce2e887", "sighting_of_ref": "indicator--a02fe5c4-f576-4248-8398-0bcd5f2ca1f2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7342576-81e8-42fa-9e4f-6a6c8654c9af", "sighting_of_ref": "indicator--13cf8e48-1ba1-4940-974f-da13939fdf11", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff2bdd0-8ed7-41ee-a569-048d0bf34c47", "sighting_of_ref": "indicator--885ca75a-0d06-4e18-9b52-4827b87e3e65", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d6daa3-bc55-4d99-9640-8a5d42f13049", "sighting_of_ref": "indicator--1ddcb392-aa8e-4307-b510-ab94fbc08e6d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0725f7-eca0-47cc-912e-16a87d302f4a", "sighting_of_ref": "indicator--999d0383-2ae8-49f5-b371-d3da498257ec", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056e467e-83d3-4024-87d6-3498e5d8d76e", "sighting_of_ref": "indicator--7bcfb214-4c4b-4502-858c-aa0d8bb79df9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df74b1b0-53b3-4f27-86ef-7f140a6cabb2", "sighting_of_ref": "indicator--c435f00c-294c-4bd1-95ea-1327535387f3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862fe1be-561f-4039-91a7-2803e8e8375a", "sighting_of_ref": "indicator--c435f00c-294c-4bd1-95ea-1327535387f3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797f0af7-bb1f-4729-95f1-2260ddb96493", "sighting_of_ref": "indicator--6069b661-a693-42e6-ab7b-ce0f3d9d5b50", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550083df-1343-4bf2-b550-32f1e69414a9", "sighting_of_ref": "indicator--732b167b-f99b-48fd-a840-4209b87619af", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02534c29-1c87-488d-bbdc-26c03cf02f3e", "sighting_of_ref": "indicator--1f3cb5f2-6ef7-4f48-b558-b4f9414b0481", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667cb8ce-36d0-4573-bfc2-91abc08219a9", "sighting_of_ref": "indicator--61b7da8f-6dd0-4580-a30e-823cb9646baa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf13cc3b-7a35-448f-9bb2-064c7da501aa", "sighting_of_ref": "indicator--509da66b-fe63-49a7-9edc-d2715fe3e91e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9aa3af-b516-4f51-87c3-dbd75626250c", "sighting_of_ref": "indicator--5fee2f69-7fb0-4344-8ed1-666c7c4490e7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c61d252-060e-4295-aac0-32c14f65bc1a", "sighting_of_ref": "indicator--ac97babe-90ae-4da8-a0c0-40a66b2b0812", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738bbb89-4ccc-457c-a953-159a1586a786", "sighting_of_ref": "indicator--c229b829-73d0-44bc-8a56-359109a146dc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ea8680-e459-4803-a48d-5bcaa71f79e2", "sighting_of_ref": "indicator--12397275-ea10-4168-b6af-40733e0345ed", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100c958e-078f-451c-a9d4-3785d6873147", "sighting_of_ref": "indicator--0a9aafb7-781b-4e0c-8e46-db163ca95e87", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6816113-cec7-4600-8fdf-f5df25901de8", "sighting_of_ref": "indicator--8257be29-bbff-4624-9e2f-8f59f552b796", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e265bd-3135-45a4-b92d-68562e3d3d3e", "sighting_of_ref": "indicator--279c1f0d-dee3-4ad5-9153-045551d7466e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8174f3a-ac58-421d-bf86-c935b7ab4625", "sighting_of_ref": "indicator--132794bd-cecc-4e49-a9a4-16e0e2b081c3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e72624-c7d3-4420-9dc1-4e84ff1f5e11", "sighting_of_ref": "indicator--12a1a2f8-3b9c-41e6-8eb2-56ccae568554", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70dbd98a-1b4e-41ee-b683-f69920fac6e8", "sighting_of_ref": "indicator--5a97a9f6-e883-4b00-9973-18a42d10a260", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922cb4ba-5d86-4c33-861f-5721850dd5ee", "sighting_of_ref": "indicator--5e0fd868-1d26-4500-b8ca-9b832250bd2c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a16203f-9a80-4031-9b69-3d87dc01ce84", "sighting_of_ref": "indicator--10fa27fb-909c-46fe-b11f-152371375464", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39c567c-3e1b-4c5b-9075-606c9a9cb7c5", "sighting_of_ref": "indicator--053591c5-6440-4410-9483-0c3cae414fc5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4535ce6-04a7-4723-b92d-86400ebdc77c", "sighting_of_ref": "indicator--1dd64b3d-d004-4b70-96b3-1b656b4fe937", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771eb07e-4e07-4183-bd06-5d562704a780", "sighting_of_ref": "indicator--16f50442-7ecc-4779-8ba3-4ca88913d5f5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11143fc6-d3f1-4c49-acd5-ae3a960d8b11", "sighting_of_ref": "indicator--46d8b77f-ab15-4cf5-877a-37573564be32", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5401630-3984-425d-a492-0e3b4b8f31d5", "sighting_of_ref": "indicator--9afcff74-ee53-416d-b8a3-bf4a848d18d4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b3e94e-be9a-4eb5-b0e5-8f92840fa43c", "sighting_of_ref": "indicator--c38c0261-faad-4234-aaf0-f40ae5986583", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ecd9a0-0cbe-4d81-aba1-ced8c2c0919f", "sighting_of_ref": "indicator--b7a8da6a-9597-487b-a644-369a488383df", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189b13f4-dc31-4c98-bda8-655f4a957aa6", "sighting_of_ref": "indicator--5efa97ed-e617-4d48-9515-7f08666856be", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0e76b8-d890-44ec-b545-cc04647281de", "sighting_of_ref": "indicator--c090c314-9bf0-4d34-a4fc-fb991950ba44", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa486ddc-c9e7-4662-8f8f-138396b9372d", "sighting_of_ref": "indicator--bf865e20-4cde-444e-ba47-96d0f1001f3c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba307cb-4c50-424f-85b4-171a835a6d03", "sighting_of_ref": "indicator--65d97a59-aa99-4117-b92a-ebd792afc101", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd65470-78aa-4a75-95a1-55bd92b3794a", "sighting_of_ref": "indicator--b78dcdf2-abf7-40d1-b502-f3d008a94b6b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9855c136-5d1f-47b8-8701-66c6c7658ce6", "sighting_of_ref": "indicator--864fe953-6f16-47c4-8996-c133cf274555", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16fa40e3-e6d5-4b14-91b6-ecb2059faf92", "sighting_of_ref": "indicator--e04b6de4-0bee-4f9b-a1ae-387d8a69c430", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd16787-21ca-42e9-be85-4f4e4e500234", "sighting_of_ref": "indicator--3733e932-8654-4070-8688-2259a49b449e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec454de-43d4-4907-bd48-7d95aa8cca96", "sighting_of_ref": "indicator--847bc4c0-7bef-4e61-9400-4da0bf8d25b9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b3584e-538c-4b9f-9122-eb3c77a2d852", "sighting_of_ref": "indicator--a51aeefb-b4d2-4a1d-b867-93b62463985f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f699ebac-c248-4764-a819-ce3c93fcd821", "sighting_of_ref": "indicator--970fb2bf-b928-49c5-aab0-09a15459bb98", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d379ab-f864-4b28-abba-1dbf8d8d41a3", "sighting_of_ref": "indicator--dcaeda1b-7072-4776-a191-cd4aef803f14", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6324f4-88db-4c69-955a-5559037706bd", "sighting_of_ref": "indicator--0491d95b-8efa-40b9-8393-367b87cf4933", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b34c530-35d7-4d3d-a13f-12b62bbd96a7", "sighting_of_ref": "indicator--43ca95f5-835f-4f7c-8cbc-01d6a79caea6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023846ed-0eb3-480b-a58b-8fe2974a91ee", "sighting_of_ref": "indicator--06860312-e3b5-4fb8-891b-0ae20d2d180c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a270b4-4872-43ea-aab9-fb7289efd489", "sighting_of_ref": "indicator--06860312-e3b5-4fb8-891b-0ae20d2d180c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca2f987-b69f-4b0b-9cbf-6f9f9bdd4556", "sighting_of_ref": "indicator--b3bb7714-a500-4384-849e-977c666c08e1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6e9952-4ac9-43b5-a69c-f5aa66946b68", "sighting_of_ref": "indicator--33e49323-54b2-49f5-b494-bcae50409bf1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefe9716-d355-4d58-8d78-5b50e1062db4", "sighting_of_ref": "indicator--e33e595c-c232-425f-80c3-5f60a58dd8f9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2be29c-c528-4dd5-8a2d-3a1954781c48", "sighting_of_ref": "indicator--ed74f688-d475-411a-8c71-b2a3d4464728", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61740f2d-94b2-4edf-af90-7d685c29cd8c", "sighting_of_ref": "indicator--ed74f688-d475-411a-8c71-b2a3d4464728", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf876869-4603-4b20-b582-8820fab144d3", "sighting_of_ref": "indicator--7f796288-89b7-4acc-913b-a3f7a119a32f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193d22b8-f359-4c24-a315-58503b8bb515", "sighting_of_ref": "indicator--0a87a81a-dfd7-477b-8268-ba985c7e9538", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ed6b07-2648-44ed-a31c-a298e7687281", "sighting_of_ref": "indicator--df55d6bf-1aa6-45ce-9f7b-6326258ee790", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a35e381-b032-427c-b5ef-2d87df452e45", "sighting_of_ref": "indicator--dd580645-7b0d-48dc-a7e8-e5262996ee28", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d8b6d4-dbad-4f8b-87fb-648ae21dcb87", "sighting_of_ref": "indicator--53d82832-135c-4119-8e8e-5dcb2a3ce5c3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aadea96-9710-400b-a571-49bad21ac439", "sighting_of_ref": "indicator--2e5aeb6f-4abb-4a36-bb45-dfb7c6746bce", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ada20b-bcc4-4846-a022-3fd31c55da84", "sighting_of_ref": "indicator--4fa93da9-1652-4116-8671-dac28cd4063e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c060c596-f275-471b-a72c-392b4ecb5148", "sighting_of_ref": "indicator--faa26e64-81ac-4e70-9b78-99ed61664b10", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990ee936-957b-4f55-980b-6dbdbecf1bbf", "sighting_of_ref": "indicator--99647c0b-997a-4603-829e-6d08a1b06eb4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ea08ed-c1a1-4430-9d30-e83cdafb9b53", "sighting_of_ref": "indicator--99647c0b-997a-4603-829e-6d08a1b06eb4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed41bf54-d1c6-477f-a907-2b06fa54a142", "sighting_of_ref": "indicator--78a66fb5-761b-4ccb-9ebd-b18c0778702c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f226b174-50da-4794-a840-eecfbc9bb797", "sighting_of_ref": "indicator--79914878-02bd-4a19-863e-25c4257574db", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25472ad5-aaaa-4594-9700-d58d78fcc192", "sighting_of_ref": "indicator--6fd34231-a05a-4944-b908-e925a6119d90", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f72509-aba7-4d56-9551-900fd5ebb2cb", "sighting_of_ref": "indicator--e60f9a58-8f90-4709-af40-a9e1b5e6a940", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac26141-1a2b-49c4-8cd2-ec392b6346ab", "sighting_of_ref": "indicator--cbe479b5-d10f-44cf-bd9d-ffdb23395eff", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2977273f-406e-41b8-9276-894db54960a5", "sighting_of_ref": "indicator--cbe479b5-d10f-44cf-bd9d-ffdb23395eff", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46d4b2a-2e1f-49ad-99fe-a587137a63b3", "sighting_of_ref": "indicator--a72ff583-b750-420e-87de-6d0e9d41a753", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b546a0-0df5-4610-ac7c-9935fccf2b25", "sighting_of_ref": "indicator--1b7b2235-0c42-4aaa-809d-cf71a0ecd872", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e083a1ad-37c8-45b9-b706-fab8f8745646", "sighting_of_ref": "indicator--7bc0edcf-9cce-4e87-aadb-e45cad32d0d2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af56af40-cf90-45e4-a681-d15ac9df920a", "sighting_of_ref": "indicator--7ac8a406-f7ca-4437-a614-1e7fc4055667", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d35d35-ec1a-49ad-af8d-b7e4d0c23712", "sighting_of_ref": "indicator--ad6ca370-2121-4f58-8f33-a0d6b9d25142", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699c83f1-f3e8-4ee3-8265-42f36f0232ea", "sighting_of_ref": "indicator--f1d7d7a6-96db-44e7-9d75-1f39b477042a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c1dc7c-cf0c-4680-88da-e1354c368ebc", "sighting_of_ref": "indicator--474a46ab-e05a-4f22-9811-797bcc625958", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6934a8-e6fe-4105-9e70-05abd74391ab", "sighting_of_ref": "indicator--6694997e-4ccf-47bb-b8af-2ef1d4db7b59", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dbfd256-8a2b-47d4-a63c-315e5500f5fd", "sighting_of_ref": "indicator--701a7534-57c8-4ac7-a4f3-caa8f57b14c6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc57cd1-e64b-4d2f-9c72-54181c6536c5", "sighting_of_ref": "indicator--8ac5173e-70f8-487e-84ed-b588dcf54446", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c56e6a9-a4e5-4898-9704-26bed0702794", "sighting_of_ref": "indicator--b0e013ee-ff5d-4562-877d-145c6b2ba533", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d5df8e-488d-4748-b536-7a4a9805b624", "sighting_of_ref": "indicator--364e2a0d-f3ac-471c-aec6-22d2706ede3b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d68853f-196f-470d-8039-111506776769", "sighting_of_ref": "indicator--364e2a0d-f3ac-471c-aec6-22d2706ede3b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96793353-89e6-4733-b40a-4df4780e8a6f", "sighting_of_ref": "indicator--657f49b7-f7c6-41ef-8353-987478e10d3d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9dd521-8931-4715-8953-2c2a9191dfca", "sighting_of_ref": "indicator--f5308993-5742-4928-97d2-af1cb0017ef3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4b05a0-1877-4635-aadb-62668ba9a298", "sighting_of_ref": "indicator--e14c02c1-2a86-405b-8b00-96922c2f2df6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43da92f6-965b-4a79-9511-deb448a6c81d", "sighting_of_ref": "indicator--6257dec7-2a7f-4d97-bcf4-31d624662b70", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181cb9c4-f81e-43ac-bb0b-9711456b1c5f", "sighting_of_ref": "indicator--a55ba0c2-01e4-476b-a567-3bdac50b19b1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0c9b1e-63d5-4179-b806-153a489215f5", "sighting_of_ref": "indicator--11145df1-5b29-472c-b28c-9e82b5a1f93d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c377b8c9-2552-4f43-8498-ca1f56d94267", "sighting_of_ref": "indicator--8fd499a2-9230-49da-9198-3a9cb31c0cd9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537b266d-5ac3-493c-8233-b8a23feb7c25", "sighting_of_ref": "indicator--c6edec1c-ef34-4c2e-88cd-624ba062491e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63be7a56-109a-4958-b80e-ceba70235574", "sighting_of_ref": "indicator--80ea7b73-655e-4aa8-81ae-723d9db7b754", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d268a54-905f-43e9-8508-34b2d1958eac", "sighting_of_ref": "indicator--80ea7b73-655e-4aa8-81ae-723d9db7b754", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d414d301-3132-46a4-a4e7-86725a09d0ed", "sighting_of_ref": "indicator--76824b45-e678-41c8-b8cc-c4517390394d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cd811b-e8e9-4617-8dc6-8f3a9ed33c80", "sighting_of_ref": "indicator--adb80d3f-4f05-4434-a399-c2f0beaf40c9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9fe7b7e-e4cc-4516-99cb-0056cf182486", "sighting_of_ref": "indicator--f73365f1-c992-4c9c-a979-8fadba6b3008", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf0b839-9dd4-4fd0-aa58-6880236d084e", "sighting_of_ref": "indicator--a38bc780-201a-40af-9cce-b9209099ee54", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7865333-0e22-473a-b2d8-949bafc941cc", "sighting_of_ref": "indicator--912ff545-906d-473f-a3b9-adbd9c8ca26d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacc2ac2-5633-485e-b877-9e7359505143", "sighting_of_ref": "indicator--0c59f65c-fcd1-4d37-995f-35f0b8fc2180", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3502c6f5-d281-47b1-8563-43b0f09c22dd", "sighting_of_ref": "indicator--84c7c428-ced1-4cd5-a671-e80bb2d199ee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab5e997-a1fc-432f-9510-de2bdc1bba68", "sighting_of_ref": "indicator--0b5ab919-e571-4870-9819-61b54ad8b3a3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0af28ce-c39e-47c3-88e0-1d1e2a2e9166", "sighting_of_ref": "indicator--0b5ab919-e571-4870-9819-61b54ad8b3a3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114be2be-68d4-4d52-9928-cd988ddc6743", "sighting_of_ref": "indicator--a3b35b4f-da19-4b4c-bd69-71deae8f86a0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ba279e-744f-485e-b5da-abf066261508", "sighting_of_ref": "indicator--a3b35b4f-da19-4b4c-bd69-71deae8f86a0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4018c304-1318-46d7-96aa-6e1ae8f7574d", "sighting_of_ref": "indicator--e542bf02-c917-4ded-a453-d489f773e2f0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0906f73-7ff8-41ed-856a-3ff32f8ce797", "sighting_of_ref": "indicator--e542bf02-c917-4ded-a453-d489f773e2f0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff80132-6137-4d30-a158-bc83a857f134", "sighting_of_ref": "indicator--be1207f9-3404-4be4-bf1b-0e0ae8614c3c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb74c65f-703e-4cfa-9c94-90acb0403226", "sighting_of_ref": "indicator--3e9500ce-2d0b-4230-855b-0177a47a8ca5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac8c1204-41d6-4961-8600-a5ddf1103989", "sighting_of_ref": "indicator--b0907a18-3d92-4a16-ba2b-d6613f5a4d11", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f822c950-5f5a-4c35-9ebd-4a39b5903c08", "sighting_of_ref": "indicator--969cca5c-2137-4f39-84ad-8304a3e366b0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e11202-d916-4b47-ab0f-dc4eeaae4d62", "sighting_of_ref": "indicator--252c2cb2-ec56-4b16-b95f-4c3560cabbfd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d312a23-9b83-4af8-b692-f9e173b4a12e", "sighting_of_ref": "indicator--48ff1974-a580-45f5-8703-2467be6a0209", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a02329-6ebf-45d3-800c-0f28e3460766", "sighting_of_ref": "indicator--741951ee-b7af-483c-8feb-1c0e01687959", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3288172-cd56-47a6-ac24-f3f099a1ba95", "sighting_of_ref": "indicator--fc660b96-554d-490a-bcdd-bb30de3c6929", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be941959-a266-415a-a742-d9dc1b6bb470", "sighting_of_ref": "indicator--e5f4d751-adf9-4dc9-bd0c-011ef3a6b4d7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaac7d56-ec4f-4803-9dbd-3066b7458023", "sighting_of_ref": "indicator--5e102712-5efb-4cc3-8c00-2194188f6845", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a7cdd6-ef05-469a-807a-76ccc55df760", "sighting_of_ref": "indicator--07446e97-5159-46a8-89fb-286be81a6312", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3c6de8-077e-4592-a6d2-d22b82c7665c", "sighting_of_ref": "indicator--29fe309a-c22e-4af9-ba9b-90a63cff8c08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bcddfc-f905-4db0-92a0-e83ea86af1b9", "sighting_of_ref": "indicator--922758c6-1544-4e54-af4c-3df1d8a251d5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827371b6-0c16-4ab7-af01-513684de83fa", "sighting_of_ref": "indicator--922758c6-1544-4e54-af4c-3df1d8a251d5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9503e189-5a57-4c8c-9d7b-8f441054fb9d", "sighting_of_ref": "indicator--c04575db-88bb-4175-b2df-ad4ead337b65", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c48ed3-0ec4-4961-8315-58e8644205ee", "sighting_of_ref": "indicator--498ca5a5-142f-407c-8adc-1393412ec768", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7aa457e-a51f-4742-ab39-82559963d047", "sighting_of_ref": "indicator--061c7a1b-20ad-498d-bd60-4582e60b7b52", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057d5134-1516-4ee0-ad5d-9d1327454407", "sighting_of_ref": "indicator--23b9a1fe-17f4-4d71-8c42-bf936206cb2f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6359f4d4-7445-4054-aecd-186a5563d824", "sighting_of_ref": "indicator--eb6ad8e4-56a8-45ca-b13b-f8d55e0e7bc7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a56bc3-9e0f-4464-a049-59fac5beabd0", "sighting_of_ref": "indicator--0f63048f-572d-4986-8f8e-40c28f947ced", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b814add1-8d4b-47d1-a5ff-bcc8258fda47", "sighting_of_ref": "indicator--6f1040ad-610b-4e26-a16f-4f47b7175cfb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3017a74-f89d-465a-a662-5bda06ae6c0d", "sighting_of_ref": "indicator--6f1040ad-610b-4e26-a16f-4f47b7175cfb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8d907a-59ae-48ab-90bc-82029375c21f", "sighting_of_ref": "indicator--64c5d378-799b-4cd6-8878-081caa9e5072", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520056d7-3856-4626-bef0-52b4b865776f", "sighting_of_ref": "indicator--6fae15b7-d318-4a41-b2b4-50ef2fac2734", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2584eac2-9efc-4e6b-a205-100cbb70da47", "sighting_of_ref": "indicator--819d6fa8-c819-406b-83c9-074ee979b794", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5317226-e67e-482d-8a7d-7061dfccc358", "sighting_of_ref": "indicator--7e4afcbc-1d1e-4f70-ab02-7d8a3b990e4b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3462ae89-a72d-487c-9fd8-861b08572102", "sighting_of_ref": "indicator--7e4afcbc-1d1e-4f70-ab02-7d8a3b990e4b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1879d4-1c59-41ad-ace6-01e55998515e", "sighting_of_ref": "indicator--302039ec-109b-4e63-b3a0-0cbf86ec14fc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd22e6b7-3357-4b96-bcd8-fef4461b38bb", "sighting_of_ref": "indicator--a6bbde7b-4f05-43ef-b30a-8e5b3a9edb15", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f51b0f-4841-4a0b-926a-c80f4b5384b8", "sighting_of_ref": "indicator--a6bbde7b-4f05-43ef-b30a-8e5b3a9edb15", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099d92ed-a82e-4a2d-9d32-287c3f88a8c7", "sighting_of_ref": "indicator--6673c9be-e4cf-41c7-b4ea-b1ba9f677cb5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cb0bda-0b30-417e-a836-efa201f92795", "sighting_of_ref": "indicator--9c33935d-c109-4e18-9908-a353b1212af3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ac4993-e79e-43f0-8d43-c0c5a2d69e0f", "sighting_of_ref": "indicator--eac832ea-3c8a-4020-aec0-5c8e594e18f7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7dbf4e-b995-46b7-a7b9-8f1e5fd07f4f", "sighting_of_ref": "indicator--56b821e6-fbec-475b-9dc5-584fba091756", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe8f3b4-cc15-4802-a5aa-7addcd830f8e", "sighting_of_ref": "indicator--524b3e17-ee17-47f8-81a3-3ad32d617a5d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7d2d7a-e66f-40e0-be02-4a1651b2236a", "sighting_of_ref": "indicator--bbfba443-03a5-4616-a530-ebc2d99c6c57", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c46302-9d2b-4ab3-8b88-1994bb851370", "sighting_of_ref": "indicator--b7dc73a7-ce2d-4ba2-ac1c-2da3c8cfa094", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfeb28b6-6fdd-4965-bf02-73a073c00ab0", "sighting_of_ref": "indicator--514dd89a-f2a4-4869-8579-e0a46b60456b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d14194-d4ec-4b09-8e12-586174e5b748", "sighting_of_ref": "indicator--ba4528ff-2d9b-4c64-99f7-903f32deb2a7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba48a9c-96b2-403d-9ebe-97ed5cf95c42", "sighting_of_ref": "indicator--15d2e201-9b59-4ec0-87e5-9f68afe72d77", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453b514f-0d2e-485c-b0c5-3bc296b945f8", "sighting_of_ref": "indicator--5ddee840-6900-4d7a-bc14-cdd01ea41549", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba0b702-30b5-4940-8fce-9448bc6672f5", "sighting_of_ref": "indicator--5ddee840-6900-4d7a-bc14-cdd01ea41549", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22387c2-8580-47cd-905b-5b51599ffa36", "sighting_of_ref": "indicator--b48d3de7-c301-4762-9c69-11a46599275d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70166aaa-3f7b-4d7a-90ff-ba8919316d98", "sighting_of_ref": "indicator--0768fd03-9997-479e-a0dc-09ab71864afc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab372d3-b319-457e-be98-886c8e3e5c50", "sighting_of_ref": "indicator--0768fd03-9997-479e-a0dc-09ab71864afc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be43a9d-5146-4e64-892d-71d1da639e0d", "sighting_of_ref": "indicator--d3976484-6d85-43e8-96a2-6656543dd557", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ead2f6-2faa-4876-8817-533a1dbcb0bf", "sighting_of_ref": "indicator--cd601aa7-79ff-4559-b5ea-78f6bc0d3f62", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64e489f-5956-491e-9192-6e8af5a2eb29", "sighting_of_ref": "indicator--cd601aa7-79ff-4559-b5ea-78f6bc0d3f62", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acba02f6-00f5-4fd9-8e70-342d2ade89ed", "sighting_of_ref": "indicator--eb065179-03e9-4bd9-b6a4-bef210b0f087", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75390ae-fa9b-4409-b483-865305ce55e0", "sighting_of_ref": "indicator--2ec4d065-56c4-4246-b3d2-d8761ffe9973", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab98934-817a-426c-95e4-3da1a9b7917d", "sighting_of_ref": "indicator--d73fa674-2255-497a-bba0-309df4a4e2dc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8b71ee-95ff-4022-b4f6-b76735a39828", "sighting_of_ref": "indicator--9630a66b-805f-40a4-8193-bf0ae59b5333", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd99a23e-4dfc-4a50-ad3c-6f002978d518", "sighting_of_ref": "indicator--6157d5da-d840-4575-a401-5d9034f03b7a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1190ba9-b8bd-4808-b313-8f067bf3f6b1", "sighting_of_ref": "indicator--6157d5da-d840-4575-a401-5d9034f03b7a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9cf363-2b60-4ffb-bfbd-bdf2b5202d26", "sighting_of_ref": "indicator--6157d5da-d840-4575-a401-5d9034f03b7a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6a5d10-76fa-4426-a2d3-8cf7882f9119", "sighting_of_ref": "indicator--57c85b25-d4a3-4b1e-b7ec-940ef161ae48", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8b0336-3738-4d22-aef1-6eade2622b41", "sighting_of_ref": "indicator--27e771ca-cd18-4d90-8fa2-b054ddeab930", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716461e9-71c7-445b-bf81-ea10c0dcb0ff", "sighting_of_ref": "indicator--1013d819-c1c5-417b-8f9f-3b49c4d9dd7e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6613219-6470-41ab-81d2-1b231a5a16d3", "sighting_of_ref": "indicator--f36f2c55-f5bb-4392-8599-02c07a2ddf78", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6029cf79-39fc-4ea1-8138-54f06e7cf913", "sighting_of_ref": "indicator--68907170-cf17-4528-a0f5-33c817762314", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e792c1-69f9-45fa-b130-852924b35ccc", "sighting_of_ref": "indicator--1f9288bd-ff81-4d61-98ed-1f8f754e836c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ee606f-3a79-439f-91e1-e62709242bbd", "sighting_of_ref": "indicator--8e21e05e-871d-4a36-b21d-501ebb67d447", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a578aeb-eb18-4c90-b989-ac8f32733d4a", "sighting_of_ref": "indicator--6179ad31-f8bc-4a5e-8060-77caf13c6210", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4597f68c-7e07-4897-9e53-1a8bf98f8cc7", "sighting_of_ref": "indicator--6179ad31-f8bc-4a5e-8060-77caf13c6210", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d046ea2d-15cf-4112-90cf-9df4c2b3b494", "sighting_of_ref": "indicator--7661f701-2fef-4d6c-bd29-b3ca60d77510", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e6c341-520c-4041-9507-8ff5717fb7bc", "sighting_of_ref": "indicator--4eca5be3-47a6-466a-9599-916dbf28584c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc30b99-669c-4572-ae04-74d73e40bc7b", "sighting_of_ref": "indicator--e47e6044-7a90-46cc-8402-c0de2e4e505b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f19056-4916-43af-9f48-b1fec9e048e0", "sighting_of_ref": "indicator--c9ac4ca8-46e5-4c71-a2fd-b888bf2945b4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a51bbf-ed98-4aa6-a163-1eb98046e52c", "sighting_of_ref": "indicator--9eb4a16a-c8aa-4d2d-afd0-b409efbd398e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099db5c0-c247-4deb-97df-6cee93d8b81f", "sighting_of_ref": "indicator--25beab99-e3d1-485b-b1e0-5b47a6696ce8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4655643-0600-4777-b778-51cdb900fcfb", "sighting_of_ref": "indicator--43324b02-a62f-4f8a-958c-9a8e32a349f6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eaa8c67-ffdb-4eed-b012-c9b9c4534622", "sighting_of_ref": "indicator--a997ac2e-c4a3-4397-b28b-78a6968cc303", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bed567-8202-4941-b7da-9ff63767f48a", "sighting_of_ref": "indicator--72cea7f2-1230-42fa-9950-d5b149813f98", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af96a27a-9619-4b44-90b1-523f9a723ada", "sighting_of_ref": "indicator--72cea7f2-1230-42fa-9950-d5b149813f98", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a2de5f-292a-4bc7-8f9e-5af0003cd859", "sighting_of_ref": "indicator--c8a14558-1b70-44f5-9be3-93fb747a13b5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca03698c-f4d1-4f57-a1bf-f1e47d497e30", "sighting_of_ref": "indicator--c8b37d33-42f1-45f9-8fc4-6bba80fb7fd2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6bf1144-6cb1-4c82-8d9c-fef7fb2d011c", "sighting_of_ref": "indicator--c8b37d33-42f1-45f9-8fc4-6bba80fb7fd2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f126fc89-6788-49bd-9dac-fdc005056eb8", "sighting_of_ref": "indicator--0c6e604a-44b5-4f77-99f8-bf9c880a9a21", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3b2584-0a21-42d1-a0d1-f55d07bc5854", "sighting_of_ref": "indicator--9e5ee8ca-966e-4f69-825a-1b7e89d12a8b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b1a3ad-bb6b-48c9-a016-11e12ffda8eb", "sighting_of_ref": "indicator--86c09ad8-8a34-4e77-b10c-0f26b296c5b1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5501bbb1-5f59-4f49-bf44-bcc2fbed6ff1", "sighting_of_ref": "indicator--513798c4-9436-4291-8824-133684e554a9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aea4f76-6329-4a4b-b952-6083c838633e", "sighting_of_ref": "indicator--fdcf2549-10de-4e21-8ba5-2382e3a231e7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ebc0106-7843-4bfb-8674-ec300375b683", "sighting_of_ref": "indicator--2f6e1a45-ff78-42db-9669-146ee5d52915", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d87270-25ae-421c-a88c-62b5f931fcb0", "sighting_of_ref": "indicator--7ccdf2b5-cd9f-44be-bf63-149cafb9f202", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e88b1c-43fc-47c3-b7ae-1f054cea2ee0", "sighting_of_ref": "indicator--cdf8f4f3-27d0-4186-83d5-9504f10504dc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1595747f-f478-4c83-8810-a8cc30c9531d", "sighting_of_ref": "indicator--0d0433e3-c6ff-44f7-88cb-822cac932a72", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c14d1a-17a9-4010-9526-9df7b3fc0aff", "sighting_of_ref": "indicator--72cdc55a-86ec-4ebf-b17e-2336223280b3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1673cf-32b0-4ec3-804e-8bee15c806aa", "sighting_of_ref": "indicator--d2b89b31-ce87-4650-b4a8-dc924121e08b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13fdfded-03c4-4ef2-8aef-0ddc2ccc87da", "sighting_of_ref": "indicator--d0c1251a-99f7-4eaf-94ec-c56588637b26", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718ec72a-6715-4beb-b69d-edcfd94d6a69", "sighting_of_ref": "indicator--0e66d83c-56ed-495f-8a07-567c35dd9c72", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6432739-524b-48f5-a82d-4a6032b4f992", "sighting_of_ref": "indicator--b3cc5ac2-55d6-4bc9-bb33-b68ab35fc5e9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55cd98b6-c485-4958-a627-bee6c044625d", "sighting_of_ref": "indicator--bb491220-86a4-4946-8b5e-7951190ea8c7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef6c903-7a0b-4463-9faa-2999a8a86d9a", "sighting_of_ref": "indicator--6a307489-5b41-4f4b-b69b-55e44408ca99", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d617f35-d402-4158-9d54-948442d5d860", "sighting_of_ref": "indicator--3b6724dc-3455-4012-9aac-df93b4e78e1f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991fb92c-4656-49b4-b46b-f99568e9fd2f", "sighting_of_ref": "indicator--6c2885e4-36c5-48b7-8190-d1a4ea0c7537", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b506d3f1-c544-4cfb-8e3c-36eef5042bad", "sighting_of_ref": "indicator--313572ae-4567-44dd-bfad-f2145b7774ac", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e34aa5-075a-4f49-a370-8d8c8c989945", "sighting_of_ref": "indicator--ea8ad9bd-5103-4a57-b707-4ecae0dfb810", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887df1bb-99a9-49d0-8457-d5f496a0f1ba", "sighting_of_ref": "indicator--7768875f-9da1-4313-b39b-f49e6dd27e2d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d449292-8f9f-4aea-a4c6-a3ccb0cf5e6d", "sighting_of_ref": "indicator--7e50c2d6-1e51-4314-a2b1-3897d19b1b12", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f80c2d-241f-4212-99ec-3cf51c4a2245", "sighting_of_ref": "indicator--1a2f675c-1520-49be-b2d3-1166ce69e55e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9116e4e-bdaa-4e51-94bb-877070f579f4", "sighting_of_ref": "indicator--1a2f675c-1520-49be-b2d3-1166ce69e55e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35a6b86-30fe-4a5b-8247-340404abd42c", "sighting_of_ref": "indicator--d6b06de5-5d91-4835-ad92-7aa2dcffbbd1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5580ff12-3b54-48e6-ada4-d8a3b8bf8c2b", "sighting_of_ref": "indicator--a85a0d41-5ef5-43de-9b5e-12a628cda946", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f8c761-46e0-45d6-9998-9fc4e8827b1d", "sighting_of_ref": "indicator--a85a0d41-5ef5-43de-9b5e-12a628cda946", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d291f18-60fd-476b-bd8f-15c8f3a44876", "sighting_of_ref": "indicator--0287d9ed-ef4d-41f2-9ddf-63d87e395cde", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02cbc96-b543-4094-b280-03101baee469", "sighting_of_ref": "indicator--4a976be9-cc78-4faa-a9dd-19a4622c6a98", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676959e5-3674-4af9-b37c-57042a1dae10", "sighting_of_ref": "indicator--4ed4d4a3-63ac-44c3-9e18-598defb0418b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80eb9a4-9fa5-4300-aa25-2a8c4337cdc3", "sighting_of_ref": "indicator--4ed4d4a3-63ac-44c3-9e18-598defb0418b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9fd177-d661-4323-99bc-6e343938b503", "sighting_of_ref": "indicator--ea866de1-5826-4a16-854f-230a78c0fd00", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd0fac7-1546-4878-af57-8420b05c34ae", "sighting_of_ref": "indicator--0145c2f1-80f9-4e2a-a7be-f8c1e9b54f7a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187afc34-c1a5-4d38-868c-c64ee93a21b6", "sighting_of_ref": "indicator--e7cb3536-560f-4b5e-94dd-84f6eae6cfa0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a06fbf-65ea-4829-8f3f-7ceb205291cc", "sighting_of_ref": "indicator--5d3900d6-499c-4c4f-90fc-7d9eef069069", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb909406-2faf-43a0-bbf9-c4e9c6c93c9a", "sighting_of_ref": "indicator--3402612e-4580-4766-8732-3f756fcb757a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a77b61-b124-43b9-978b-14d4b629614d", "sighting_of_ref": "indicator--c14b137c-ee97-4335-986b-a04d0274f1fb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98497d3d-9c59-43b5-aaed-cae1b31a1656", "sighting_of_ref": "indicator--1a56fce4-af1d-45a7-bc73-cc5850eb71e0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04983a8-36c2-454b-90f5-3d8ef0454f1d", "sighting_of_ref": "indicator--c06c08fc-613a-4692-87d5-72f672ec1c19", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae4809d-d797-433c-9e12-fb3f3b137bb6", "sighting_of_ref": "indicator--c06c08fc-613a-4692-87d5-72f672ec1c19", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9365eaa-ef10-401a-a45e-fd8c55769bab", "sighting_of_ref": "indicator--c06c08fc-613a-4692-87d5-72f672ec1c19", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff799e0b-3a35-4136-abfa-e6fa18e0a6a1", "sighting_of_ref": "indicator--0ea9898c-d691-494b-8943-75659a4129ac", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6e494a-e716-416c-9857-949c8b1dc963", "sighting_of_ref": "indicator--226d0992-5837-4fb4-bad4-d225939650be", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9199bff5-3ec9-4f11-8cc2-af02cc649409", "sighting_of_ref": "indicator--9b7c5e77-b703-466d-8109-9a58e8844d04", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73b3dfc-ab74-4235-b998-c0c7fbf8805b", "sighting_of_ref": "indicator--73a2da5e-9f51-4f63-b760-38727dbd6a32", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b39a67-4ead-45d5-8860-64b49ba57e5d", "sighting_of_ref": "indicator--a012eb90-9f35-4e88-a934-9c72dacd0fbc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40c58f9-d5e0-4bc8-8b73-f2cfa646c471", "sighting_of_ref": "indicator--ced3058a-85e5-4a51-a9ac-9498b45a9bd6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2930d306-2235-45d1-ae48-e5838d157523", "sighting_of_ref": "indicator--8ccb2cab-9752-43d3-90dd-e8a175ad19bb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35631e1f-0861-4af6-aead-8887b960d275", "sighting_of_ref": "indicator--cde2fc0c-8152-4262-abba-646d44d29523", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa453bf-da3f-4e72-88c9-e2b0b3e94525", "sighting_of_ref": "indicator--632d5c52-e25b-43b4-b89f-e7691afdcc85", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3bbfc78-442e-4c55-b4b9-e3c549602013", "sighting_of_ref": "indicator--797d8ebf-b7c9-4df8-b5da-93d802491d68", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a8cbd8-74da-48a0-80d2-b974b6895f3f", "sighting_of_ref": "indicator--797d8ebf-b7c9-4df8-b5da-93d802491d68", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ece27d-f67b-4893-af33-0c09009bdbc3", "sighting_of_ref": "indicator--12b4c6f7-8634-4262-a960-d84d03babba0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131d7a26-29b0-46da-a0ce-ed7a9c2ced9b", "sighting_of_ref": "indicator--cbd93235-a362-408d-9d76-33e251934efc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f478f1ff-53a6-4bd5-bcba-e4c376dfb760", "sighting_of_ref": "indicator--2dbf77ce-87d8-4ff7-8cbd-c38995311fda", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285caa97-8bb4-47be-993a-193270802fa2", "sighting_of_ref": "indicator--5c0eea7d-68d4-4184-a2d3-9021af1f85cc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f267dd28-8d07-4018-ae8e-76f23462f596", "sighting_of_ref": "indicator--1e0ac750-813b-4ce2-8d43-e59c207feac3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901b4ac1-072e-4aec-b803-625a50c29d96", "sighting_of_ref": "indicator--648067e8-6917-435b-beeb-3735afc264a4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ac639f-2078-4c57-924d-ede7cc24cb86", "sighting_of_ref": "indicator--7c38f2ae-0e50-46b4-9805-8c909c32ffaa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c875d3d6-19b7-4a44-97bc-12ea6fcb6e71", "sighting_of_ref": "indicator--7c38f2ae-0e50-46b4-9805-8c909c32ffaa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a445903-f10a-4271-abfb-a3242923c486", "sighting_of_ref": "indicator--7df40100-d0b6-4fd6-8ec7-fadb7cb52645", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3091e6-3d6c-4f11-9f3a-ab481434e062", "sighting_of_ref": "indicator--7df40100-d0b6-4fd6-8ec7-fadb7cb52645", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44a187c-951b-40d9-8a80-7f11423d238c", "sighting_of_ref": "indicator--2d1c9b5e-31fc-4c8a-a782-a4ca85f445ef", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0e0beb-01be-452f-b5a2-6e602782f610", "sighting_of_ref": "indicator--2d1c9b5e-31fc-4c8a-a782-a4ca85f445ef", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655863aa-71e9-4415-abf0-2713d9218127", "sighting_of_ref": "indicator--45a7c5bf-da80-4aae-b689-1de4dcf466ce", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675eca63-64b2-4d05-87c0-644bb2e538e3", "sighting_of_ref": "indicator--bb19031e-a9ae-4936-8fcc-76b68fad9133", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3b0f3d-d7a2-4f70-b255-33c7c20d01b8", "sighting_of_ref": "indicator--18abe81c-4141-479f-a8f2-fc4b1d357d53", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87fa3aeb-9daa-43f5-994b-49d4f4f8a788", "sighting_of_ref": "indicator--ae1a6dc8-718b-46d7-a0c5-fd7efac0f496", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7251ec0f-5309-4f4a-96f9-b5d977c71d23", "sighting_of_ref": "indicator--ae1a6dc8-718b-46d7-a0c5-fd7efac0f496", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181c86d7-15fd-4b0b-b1fa-288299e1d489", "sighting_of_ref": "indicator--83e80480-63ae-4629-bd0b-ecc704c3ef2e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef9dc10-adb7-447f-8ccd-27789aaa22dc", "sighting_of_ref": "indicator--c0926c13-f5c6-4a31-beda-0eb1fb051b10", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b25417b-f846-4b52-b337-12a3caba4974", "sighting_of_ref": "indicator--1d1e0e3f-14e1-4c58-88c6-01720c8ed182", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd2716b-3870-44a5-a780-5b9fd387a2da", "sighting_of_ref": "indicator--a0902bec-7744-4e35-9ab2-217c715dea6d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8bcca6b-7d89-4af6-8f01-9ff4066e9c5f", "sighting_of_ref": "indicator--006b24b1-817e-4d53-b4ee-9cc18941be60", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848fef25-a7cd-4157-bf78-15efeb7c3061", "sighting_of_ref": "indicator--7844d8ba-e81d-4184-9c95-b49f3e3bc833", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b458d5-561d-4cfc-809b-47f8a31472d1", "sighting_of_ref": "indicator--a288db3c-d729-4704-b0ff-da66af191e04", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080f11dc-ed2e-47a5-a2be-9e4d1c61908f", "sighting_of_ref": "indicator--68f5df92-fd0c-4242-9a03-e606827547fc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6530f733-05a8-4c29-9cdf-028889bbbc8e", "sighting_of_ref": "indicator--deef4c52-be28-4b78-94af-c92b04fbf8df", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd51b94-a398-48aa-96f5-14fcf2a5bd0d", "sighting_of_ref": "indicator--7cedf5b4-f588-44f0-ac8e-bf9bf5b4a90c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a00d90c-826c-4d67-b7e8-9969b07248bc", "sighting_of_ref": "indicator--bdffdfa3-54d0-4ca6-87d5-39e03924874f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb00a25-cce1-4318-b382-1b2a5c562cc7", "sighting_of_ref": "indicator--49ca17fe-ac59-4adb-9982-985b70c4281a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa38fc0-020d-4eb5-83dd-306f024a2bf5", "sighting_of_ref": "indicator--1bb36c26-8301-40a4-9d29-c0f56416875b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7293e7d7-ce2c-490a-9323-b36ed2ac69c6", "sighting_of_ref": "indicator--61063112-6634-4736-b783-90dcd87fce67", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25c86de-4c42-4c48-90e5-f20b63f42b35", "sighting_of_ref": "indicator--9acf633e-800d-4c48-9fc6-c9b44aae9789", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14310e75-265f-45f3-aa0a-ca5b7f2b7ac7", "sighting_of_ref": "indicator--bb5dfee6-5953-4a60-bc0b-7db006ed95d9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811d46ce-c601-49d4-9454-3b7305a1a0fe", "sighting_of_ref": "indicator--3fe8d179-9c52-4fcc-b278-90a36bc52dc3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59bc4bc2-dabe-4523-b042-96055d2a9ee0", "sighting_of_ref": "indicator--8c1401b3-b653-434d-83a3-369cc3fdca3c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9ca8ca-2cae-49d7-86cc-05d55ceca1c8", "sighting_of_ref": "indicator--577d7a7d-97f8-4633-82cb-2ac214ad5705", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba3d90e-4219-4ebb-9c48-9354fd1991d4", "sighting_of_ref": "indicator--577d7a7d-97f8-4633-82cb-2ac214ad5705", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cb3f93-544e-40b8-9261-a5f24e531a82", "sighting_of_ref": "indicator--db6cd88a-a30f-4e99-b43e-8eb20e30d566", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553e7b3b-10ef-4b09-906e-99ec3d8852a5", "sighting_of_ref": "indicator--db6cd88a-a30f-4e99-b43e-8eb20e30d566", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ffbb550-2607-4d6f-88f7-7ab2924be8d7", "sighting_of_ref": "indicator--6cfbfe9e-362e-44ec-831c-c4e8c18f05c4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03abc748-dc12-4692-bc3c-8206ccd3eef7", "sighting_of_ref": "indicator--303dfb9c-a7b3-4fb7-b1e5-341e8278498e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b7df5e-15d6-41b2-a32b-3355e1a2fcc3", "sighting_of_ref": "indicator--198699a3-960c-4858-bf33-0a49191399cb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56060592-5d3a-4ea0-a14b-6e6b04438a5e", "sighting_of_ref": "indicator--391b5cb6-3fd2-4ebe-9301-67f2703a1c90", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6866ec15-3744-43f3-abdd-5e1bef360b46", "sighting_of_ref": "indicator--5b59ed49-8b06-4c8e-a6ee-23608871a47a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc0a2f0-2505-4066-bd5d-73ccdc24c95f", "sighting_of_ref": "indicator--62951726-8101-49e2-b545-fb56c14d64e6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b71141-bb2d-4dd4-9d5b-2ab7cc7a1cbb", "sighting_of_ref": "indicator--cd24cafe-bc07-4762-afa2-11efb0290938", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b483e81-4fae-47b7-b5e0-ff5644825af3", "sighting_of_ref": "indicator--a77ad5dc-472f-447c-a81e-484a56f38c3c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2451902d-c807-4de7-9df8-3acce52f5197", "sighting_of_ref": "indicator--44f1e31c-c6f2-4381-872b-9ba9d86b68b5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50f227e-7528-47cf-a79c-2ee65ae3ea2b", "sighting_of_ref": "indicator--dab8fe3b-c027-4cfe-b59c-8027ea3010d6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b556a78-25bc-4f05-a0e2-5c4e1043aef7", "sighting_of_ref": "indicator--3b5599b9-0ec9-4dd1-b6af-3a52b864035e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--913ed526-40df-4804-8930-7a55d6a4f1b8", "sighting_of_ref": "indicator--3b5599b9-0ec9-4dd1-b6af-3a52b864035e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5634d865-61d8-4f74-a5e5-4ecb7077f5aa", "sighting_of_ref": "indicator--a8fdcd19-3510-406d-9941-a69d553f6fcc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a986c25e-eca5-4d2f-a757-c51421b30e84", "sighting_of_ref": "indicator--5d29b6e0-bdfd-4c7c-a075-af420c4d88a8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0849e7-d8b0-4356-bb3a-082c405e07a2", "sighting_of_ref": "indicator--e52dbeff-5353-4897-ac08-94aa5ab1e891", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351a299a-7a00-4bfb-8a54-dc1e6b471f6a", "sighting_of_ref": "indicator--2adaaecb-8bbf-4420-94da-ba440a2ffdbc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3c394c-ecf4-4941-bacb-d41d260621c1", "sighting_of_ref": "indicator--2adaaecb-8bbf-4420-94da-ba440a2ffdbc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1707f84a-2d53-4d2f-be8a-b6ee2a9cb4df", "sighting_of_ref": "indicator--fb6cdbf1-56ee-4c58-94fc-343ac428c17b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1c688b-be86-4542-9956-3325302eb1ca", "sighting_of_ref": "indicator--6ef5ef77-e404-47b0-8a13-7e5f80bc1e22", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc46468-cc84-478f-ac1b-773a9fb36b84", "sighting_of_ref": "indicator--3e9f015b-923d-44b4-a044-8c0bd8a3891a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8e50e0-aaf2-4b6d-8d8c-7181dfc09964", "sighting_of_ref": "indicator--2e6bda9b-e575-4c30-b850-750fd97bb6f0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1522348-b816-4983-bce0-aafadba26941", "sighting_of_ref": "indicator--915430b5-1aea-4f06-a7d5-7505f53c3524", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c434af2a-7fa4-4c81-a480-3d3c319b5f63", "sighting_of_ref": "indicator--e05de312-5fe1-4843-bb47-0822ed52f578", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c022a9-e5f0-4ab8-8fb2-dc8078362243", "sighting_of_ref": "indicator--8d260993-9f96-4540-8b1f-d6c7bfef4495", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7db7a50-801e-4322-9f28-68b62ceb159d", "sighting_of_ref": "indicator--8d260993-9f96-4540-8b1f-d6c7bfef4495", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d0ba53-5108-424b-9781-d602782122d9", "sighting_of_ref": "indicator--bfa8029f-3ff4-447e-ad88-fdcbd800a33f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4f4c5d-56f7-4c38-a1f9-cc1d280460cf", "sighting_of_ref": "indicator--72af7377-3976-47cd-bbad-c06bcb2f28c5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7639836e-161c-4c42-a2d7-bdaf6f0d4e37", "sighting_of_ref": "indicator--72af7377-3976-47cd-bbad-c06bcb2f28c5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4b00eb-ba62-40b5-9185-832e8ea4a504", "sighting_of_ref": "indicator--6a64a719-6c6c-4f5a-839d-feeff5a36a73", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae461c3-1cff-46fd-b748-c4852b400f57", "sighting_of_ref": "indicator--6a64a719-6c6c-4f5a-839d-feeff5a36a73", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3196ac37-019e-4c4a-b190-ef5405b6f148", "sighting_of_ref": "indicator--fab6ae1e-f1f3-4b08-b1ec-9bb4f4b8e7c1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba7a500-e05b-42be-8b1e-68f775b134ba", "sighting_of_ref": "indicator--364a87c2-1a5f-41bb-be6d-0701bb85fc59", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6b23bb-a568-4d6a-8e41-19d381535c63", "sighting_of_ref": "indicator--5449f3d3-ce87-4d8d-a7c5-3ec07e46d114", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77967b5-ba28-4238-bfb5-1816914e5aca", "sighting_of_ref": "indicator--2f11c641-72a6-4bf0-b36c-7c149841a84e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe26d72-79bc-4e5d-bd14-8c034c8f0c4a", "sighting_of_ref": "indicator--633ca12e-b0f4-43da-922e-7cf280d32449", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c353b7c-d9bc-4efd-97d9-b9b59bb55c30", "sighting_of_ref": "indicator--c0519899-0b2c-4d0d-bbc7-58183bf2cbb2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c850dc-2253-44d7-bdd0-26c261c024ae", "sighting_of_ref": "indicator--5faf6738-14c8-4888-bf4d-405a2ff06e3c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0b44a6-9f8b-4fb0-be89-52b7777cf66c", "sighting_of_ref": "indicator--5faf6738-14c8-4888-bf4d-405a2ff06e3c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3edabd-73e5-4f0a-8664-2424d919c3a1", "sighting_of_ref": "indicator--7c13bcc7-1437-4af4-a0f6-c7d96383e4e0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7064834a-f99c-4a58-92ec-6f3ba6853795", "sighting_of_ref": "indicator--c93a1f10-33ab-4880-8b84-92e1c70c3a81", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5db49be-7f39-4489-98de-95c1bef5cf14", "sighting_of_ref": "indicator--ed7df7ba-943b-460d-a9f5-1614d47932c1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ee5465-a463-4450-892e-924028820cfe", "sighting_of_ref": "indicator--002e0c94-653d-4709-969b-d1930b045461", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa95850e-4c17-4523-a5a7-061d19e0fcca", "sighting_of_ref": "indicator--9c1d9702-70e5-42d7-8ac3-e9744fab658e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417904cb-06e0-4dcd-bf53-a7d49bb798c5", "sighting_of_ref": "indicator--320c1f18-7d00-45ab-8901-fcccf7d26593", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51b0607-3e45-4fe0-9f18-8f4ba283cebd", "sighting_of_ref": "indicator--a32d378b-df82-4451-8a32-386fdfb1817e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692f0b7c-aa82-458a-b585-4c4d71eadbe3", "sighting_of_ref": "indicator--5d9f7580-d19c-4d01-a264-5635d3424d21", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d134a43-1c96-400e-b4ec-19f9f1cece68", "sighting_of_ref": "indicator--d4dbbf7d-1eeb-4d99-a9f1-22d28600a948", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf176a02-114b-40bd-bfe1-bd773a76741d", "sighting_of_ref": "indicator--0dfcf637-179f-40d1-8847-7391690255ed", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14794bd3-6596-404d-904d-3ec54f963bdb", "sighting_of_ref": "indicator--c704cc92-a2b1-4725-adbd-6dfc04db8289", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459bb06e-2038-46ba-a302-f1fde03d77b4", "sighting_of_ref": "indicator--9ca08903-bf67-4d03-9761-4088bb5014f9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9c575f-78dc-4cb0-9ed8-e5f31198f40c", "sighting_of_ref": "indicator--15720a06-8d3a-4df0-9e82-101d8bfd1fd9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6277b8-b87e-4572-8349-756533d66704", "sighting_of_ref": "indicator--d67aeab8-7e97-4761-9411-a93c6706bb80", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12617a1-4a93-4a0a-ab03-3c68b5b91c95", "sighting_of_ref": "indicator--68122561-6cba-4b19-9f87-7214c3c3dd9e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee1ce9f-a264-48b6-b200-eec288b22e08", "sighting_of_ref": "indicator--7d9f52aa-f4a1-4e88-835c-8b67946cbb55", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28745d0f-a081-43c8-8f92-b79f08714ff2", "sighting_of_ref": "indicator--3abf0551-0eeb-4aef-b0b7-40520429c64c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d885a732-76c9-49de-8d8c-7bc276ffbee4", "sighting_of_ref": "indicator--e7cb02a4-09b4-43b2-bd13-774cb344d72b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac70a85-0dc0-46af-bbae-497625105c30", "sighting_of_ref": "indicator--55d0ddb5-914a-403c-bf61-8df6b642a775", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8011a3a3-90a9-4bf8-9577-0f475d128a91", "sighting_of_ref": "indicator--819d680e-4f69-4db8-9165-2e827298b0cd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6fe3c5-c71d-4000-bb39-e3c3b4e4f081", "sighting_of_ref": "indicator--947bb494-9d2a-4117-8159-36233b32f9ec", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b7448f-22c8-43f4-b788-a290c3459606", "sighting_of_ref": "indicator--765ebd17-db19-4b8a-a26d-39633627cec5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07435415-2b6b-4435-816e-3df0c2309777", "sighting_of_ref": "indicator--5167cc2e-cd05-44f8-993f-7c1352874418", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42f5e9f-3237-4de7-ba12-488d4abb4e44", "sighting_of_ref": "indicator--7991d5c3-c7ba-401e-9bd2-ed03ecbfd120", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3e92e2-c925-4f60-8aaa-39cdb94224b4", "sighting_of_ref": "indicator--7ea9d9c3-7bab-4daa-8534-866398f29124", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ea4022-952e-4aa2-a279-41db962dedd0", "sighting_of_ref": "indicator--85150144-4381-43a4-8ae7-60b0f4256cdd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd12235-7657-4287-ac0c-5c1ac9887ea4", "sighting_of_ref": "indicator--d063eea2-210a-41fb-9981-226eb5e26eb1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b169c4-1376-4a70-929f-bac8f4adfaa3", "sighting_of_ref": "indicator--271d1fd3-4998-416e-9f36-d5d2acc6b9c6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77ec7a9-d75a-468d-a06e-65bf10c80973", "sighting_of_ref": "indicator--1e32602e-c32d-4d0a-b170-b405e9f32a52", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e72a63-507a-4ec0-8b2a-3db3cb36c671", "sighting_of_ref": "indicator--f068f029-3983-4be9-a71e-4267d631f857", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e9f36a-5e88-46a9-9277-40e4f77eab1d", "sighting_of_ref": "indicator--719d796e-27e9-4b62-9f8c-a09bb3413e41", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e3ba20-c2cc-409b-8860-be2992afcb2b", "sighting_of_ref": "indicator--c4478041-55fb-41b3-8770-e43f17c5fd95", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48ecf59-9277-4fc6-aa3e-bb24910dc140", "sighting_of_ref": "indicator--c063d2ca-20d5-47e1-b440-f4487126c21a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a225d74-2503-4b90-b9d2-120a472995da", "sighting_of_ref": "indicator--a52ea8db-6ba1-47f3-82b2-26a47f7444cb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ced586a-307b-4860-b396-c4b76a008498", "sighting_of_ref": "indicator--8563324d-6116-4d01-8efb-84f63d3c4b6e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c9c99f-f592-4842-bec3-707edf499101", "sighting_of_ref": "indicator--8a77a9cc-664b-4ccf-8c88-2d0ed3ab8c65", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab25854-a39f-46b0-a2cf-914974a5be64", "sighting_of_ref": "indicator--ded23d3a-71fb-4f1d-bd60-a844bae82eb5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec2d4c5-59e7-4ee6-a547-c867cf4c61a4", "sighting_of_ref": "indicator--149428df-7bf6-493b-8bd5-212e6dea25a5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ecafff-65e1-4593-9b74-8c035499a73f", "sighting_of_ref": "indicator--3133ff2c-a883-4a19-9dac-25ac0faa968a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815f6ef9-e270-4f01-9de4-1767ba393010", "sighting_of_ref": "indicator--b4cba85f-1fe6-4c4e-a704-830f4d732ca3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7c4055-17e7-4831-961a-a1b43ad8ba37", "sighting_of_ref": "indicator--91cb0ee5-5611-4bb9-803b-aa8ac60ebd47", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d23a6b-f5eb-4d4b-9444-a52d9da6ad62", "sighting_of_ref": "indicator--8bf589c3-f1b6-494f-9ac6-2e70f2ed85d5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7302d0-6681-4b6a-97e8-6e5d2a756f25", "sighting_of_ref": "indicator--f0adec20-3f46-47c6-adda-336c8f00a47e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a25503-69a1-453b-968e-8b0806b170ac", "sighting_of_ref": "indicator--86c81532-3f80-469a-b3ea-40a11348b500", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e294ac0d-36d8-402f-91b5-eb4cb2007967", "sighting_of_ref": "indicator--424b5c6c-a006-4c27-8a7d-4830ec53b1a0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02cdf96-c265-47d7-945b-fcbf4fe35a63", "sighting_of_ref": "indicator--49d62e21-825d-41e9-a46a-952511181d4e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632f3c97-a0eb-42bd-af74-7c1a770bebf8", "sighting_of_ref": "indicator--f3d6af4b-b233-4350-a1ff-995667432b77", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14dce21-25b1-4861-a510-9f64c02d0497", "sighting_of_ref": "indicator--84977e33-620a-47d5-9d7b-4fbe2d949bbd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ca3ca9-f7a1-42bd-9d10-da58a5f5a6da", "sighting_of_ref": "indicator--9b635855-8332-44f7-9a2d-d38a7814f198", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21fcd892-e7b8-40b8-8b0a-8cce310338c7", "sighting_of_ref": "indicator--1501bb48-3422-4b3f-9634-e4983b638b7b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4654b6ef-6604-444e-a188-561da24d5802", "sighting_of_ref": "indicator--aea7228f-6fbc-47f5-8a1a-4d79e8f39962", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8a03d6-b0d4-4665-ae8a-76ff3e44c8a1", "sighting_of_ref": "indicator--f90d0f1c-70e6-4117-a2cf-1405a2ed36ee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7a9000-6358-431f-a308-4934432d83e1", "sighting_of_ref": "indicator--255f5811-3717-468d-92b5-947f1d6ca4dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e83420f-9acd-48a4-a612-ec5a3bf04a0a", "sighting_of_ref": "indicator--2d7ce9e4-f2ee-439b-9ae3-0919307d0218", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd78c229-05dc-4b5c-bb00-e097fb9bae39", "sighting_of_ref": "indicator--25627ab3-619f-4ad1-94d8-13fe4f1465d6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787ad26e-4901-438e-b0ca-4ea57118aa36", "sighting_of_ref": "indicator--fd3fff01-8885-410a-8b21-8c4ab2e9b29c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283ce9ac-6f4e-4de3-a67c-37787149a8cc", "sighting_of_ref": "indicator--ac7f11d3-07af-4fd1-8e90-9a1bbb714bbe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17eb16d-fe4b-4b2f-bfb0-97c7e6e7c34f", "sighting_of_ref": "indicator--4343caa3-017f-42ce-9faf-e110d906d5db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7f7d3c-4dc8-4753-9ee4-2b1fdf12b1f0", "sighting_of_ref": "indicator--2b5c81fc-4a15-4380-82cc-fc7cea13e721", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1561c5-b1e0-48e8-b1b9-8b766e070f87", "sighting_of_ref": "indicator--6b66c267-9856-44a9-ab20-d2fae325a51a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3b4f3c-4bb8-4992-9c38-a53365ef0a35", "sighting_of_ref": "indicator--9f1ae11a-e1e4-479d-8a18-e6a04c932df8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1010d97-5fbf-4cb5-a3d0-ec90b2be6880", "sighting_of_ref": "indicator--8ff88165-56b9-4b59-95b2-d9596cb7808d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba48ff8-a551-424d-99cb-387cc6487241", "sighting_of_ref": "indicator--16cfa1d1-6760-4043-9a11-d02a3717ea24", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992ec20d-995d-47dd-a2a3-97f21ee5b42c", "sighting_of_ref": "indicator--255bdf6b-bc78-4dfe-ab54-3df5e2135460", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627c4c28-dac1-483d-abed-7f45d139b3ec", "sighting_of_ref": "indicator--2626cd8d-4f7b-4412-bbda-cee7420b66d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09e8b36-c92f-4fab-adc6-af8669f59195", "sighting_of_ref": "indicator--978d9706-3ed0-461e-a09a-39e83ee89460", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce05f375-1695-4625-bde6-3d7e129d6aeb", "sighting_of_ref": "indicator--eb6dda89-d504-4f29-88e3-68be1e7be80d", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b336c75-0b61-4091-a6fc-d7dd1855e4f2", "sighting_of_ref": "indicator--66eee73b-9fd9-41d6-a124-2523dcd4daf9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43979efa-fb3b-4bc3-9c87-155da76397da", "sighting_of_ref": "indicator--6c57d447-7390-4de5-9ddc-d0fdf89ceaa9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29deca1c-6e9f-4071-a84b-73c426c651a4", "sighting_of_ref": "indicator--0fa3656f-8e5a-4824-a8a9-b0d2fabfa7a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51cdadc3-84db-4054-a693-e0d438fdcb07", "sighting_of_ref": "indicator--aa8a15d4-fc87-41de-9c56-13920152013c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab5cec39-388c-44d4-ae98-b0f6dbec185b", "sighting_of_ref": "indicator--84597d36-b47b-4aac-b0ca-dbfd8ef554ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b7975c-cba8-4558-b323-7d7c5d11e344", "sighting_of_ref": "indicator--f782c314-0d3b-4963-8d36-3ac1ddadd4ba", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87135d06-57e2-4ceb-b658-42d9acf841ce", "sighting_of_ref": "indicator--ed874402-c9c2-4775-8692-228fd4cb2370", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe7a06d-7496-4548-b75d-f0c228f12745", "sighting_of_ref": "indicator--ed874402-c9c2-4775-8692-228fd4cb2370", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dae362c-b188-4c80-bec8-9bfa963851fb", "sighting_of_ref": "indicator--ed874402-c9c2-4775-8692-228fd4cb2370", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6fb0801-39ab-4b6b-be5a-270f1deffed0", "sighting_of_ref": "indicator--4235088c-8e5d-4942-ad99-f5ac2c25af2e", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96007c5e-00ce-412b-9ecd-547d4c41da6a", "sighting_of_ref": "indicator--9d2d0d7d-4ee7-43a6-a9ca-f515729502d4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b076616-e74c-45fd-9573-fb436a5f4e87", "sighting_of_ref": "indicator--c74478e4-84f9-4a08-babc-398f4abed88d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70320972-0910-4822-a5b7-261e719bbba6", "sighting_of_ref": "indicator--41aa63f3-b035-4241-916b-2c7be19ae19c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5669b696-a0ae-42fd-aad5-219d11fb7575", "sighting_of_ref": "indicator--f30110c0-9212-4be9-8aa6-b2a0383676c3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4997f841-111e-4ed9-83b7-b8fb664be360", "sighting_of_ref": "indicator--f30110c0-9212-4be9-8aa6-b2a0383676c3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4736df7-e4d6-458e-af82-4b55dcd11a31", "sighting_of_ref": "indicator--6f6a0d4f-1312-4d0c-b1e8-8efbf998271c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4447e431-4976-46a0-9862-1a648358dab6", "sighting_of_ref": "indicator--6f6a0d4f-1312-4d0c-b1e8-8efbf998271c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99c65c5-5526-4d00-80b8-5433b7429679", "sighting_of_ref": "indicator--ba92406c-60fc-4676-8b14-3686874aea5c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a97450-ad90-46ef-8f4b-27144078468d", "sighting_of_ref": "indicator--0356335a-6721-4b3a-99a1-e78918145a9e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02849bab-a23b-446e-a794-b351cffef1b1", "sighting_of_ref": "indicator--0356335a-6721-4b3a-99a1-e78918145a9e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9f4b66-321d-4d18-ba1a-2e114d1b8142", "sighting_of_ref": "indicator--0356335a-6721-4b3a-99a1-e78918145a9e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ee6091-5986-4dd6-a507-b9571437827d", "sighting_of_ref": "indicator--41c47eee-c929-4dbf-9d50-0539d59c6063", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b1db2e-462e-479c-a3f3-9791f909cb97", "sighting_of_ref": "indicator--b11913e5-175e-4b39-aa6a-a22517092fda", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2f8027-7927-4f6e-a117-3f8b215c3c8d", "sighting_of_ref": "indicator--b11913e5-175e-4b39-aa6a-a22517092fda", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c37a9e0-4541-488b-9c66-1587a6d783cc", "sighting_of_ref": "indicator--c9999e6d-cbf4-4ed6-ad34-92e915649cfa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201949e8-c747-49b3-a29d-e3a448e0ef5a", "sighting_of_ref": "indicator--b4203c49-7444-455a-841e-c120facb8da1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93804c7b-d145-4fe6-8bea-40aaba17be3c", "sighting_of_ref": "indicator--3959d075-e2b5-4114-8144-5befabee62e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ee9306-795a-4657-9e03-17021435c0aa", "sighting_of_ref": "indicator--ecfdfef3-3d22-4656-a538-b8388fde1f08", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0f9756-8722-49cd-a99b-99edf8425083", "sighting_of_ref": "indicator--b0f2052a-f139-4e24-a0ed-79669577432c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7362d145-3042-402c-82cf-d5d81d12ce19", "sighting_of_ref": "indicator--b0f2052a-f139-4e24-a0ed-79669577432c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e74cea1-8aa7-4c0b-abb6-d1cb1f135bf9", "sighting_of_ref": "indicator--b0f2052a-f139-4e24-a0ed-79669577432c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eceaaa5-12d7-4ec9-841b-4f7b883b11b0", "sighting_of_ref": "indicator--c6cfa7e6-701c-4cc0-b1d2-28fff882795e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b16ea8-065e-4f0b-9616-c478fc9b209f", "sighting_of_ref": "indicator--c6cfa7e6-701c-4cc0-b1d2-28fff882795e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6b921a-4fa9-4b36-944d-6c7bf7e18d04", "sighting_of_ref": "indicator--c6cfa7e6-701c-4cc0-b1d2-28fff882795e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4290da5c-2044-497d-bc33-25ae55cc2b71", "sighting_of_ref": "indicator--f7d8aa9f-3133-43de-ad6d-046e8bcdad1d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47eae0f5-0584-44cb-96e1-0460c4a248ec", "sighting_of_ref": "indicator--f7d8aa9f-3133-43de-ad6d-046e8bcdad1d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d5fc68-2eac-4d24-97e1-85984f9ab232", "sighting_of_ref": "indicator--51209b4b-d608-47bd-af74-4a8a6c5566ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b694b1-16d2-47fa-a4f1-61b5f111d5a9", "sighting_of_ref": "indicator--82a1fbb3-705f-4cda-a985-9999c05ee0ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc83e91f-636f-4e79-87b2-e5d23f734f8e", "sighting_of_ref": "indicator--15e311b7-45d3-4725-80ae-09ebddf4aeca", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb9a691-62e3-4daf-84b0-06ebb55c37ef", "sighting_of_ref": "indicator--7c4c7b57-9139-4462-bb73-4d8a1e462563", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62950f51-368a-49eb-a0b9-1835994f5956", "sighting_of_ref": "indicator--b2478834-dbc0-4cf9-bc72-ab2ece9f30a6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9db34c-45da-4203-8ceb-2df11cb909fb", "sighting_of_ref": "indicator--816cf1ab-9c9b-4b60-a6cd-aae5f059a751", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9dfde02-77cd-4957-ba65-fa61547f4065", "sighting_of_ref": "indicator--7623818a-582f-469c-aed2-27ad24e48e57", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a5c4bd-837c-4b80-8573-7e71d22fc847", "sighting_of_ref": "indicator--ee39310e-6e47-4734-97fb-4f1337c4e36e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb70ab82-d896-4faa-bc5a-acbf5f6114c1", "sighting_of_ref": "indicator--ee39310e-6e47-4734-97fb-4f1337c4e36e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930cf026-5bd8-4944-ba87-5620e34f71d3", "sighting_of_ref": "indicator--ee39310e-6e47-4734-97fb-4f1337c4e36e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa63e7b4-f96c-44ee-a38b-eb3327c2213f", "sighting_of_ref": "indicator--42af2fed-55fb-4269-adbf-7d596b2ef3ce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11941c21-9a7c-4a1f-9fae-d648a24f8a37", "sighting_of_ref": "indicator--42af2fed-55fb-4269-adbf-7d596b2ef3ce", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4027114e-78d0-4506-9fea-b90fc98dadd8", "sighting_of_ref": "indicator--42af2fed-55fb-4269-adbf-7d596b2ef3ce", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43231680-5810-4605-ac22-3ab005fb74e9", "sighting_of_ref": "indicator--5a2c2352-824d-4563-9f92-dcd832cdc0d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebe7d08-efa4-4f79-9690-2186074279a1", "sighting_of_ref": "indicator--1db81082-4eb5-429e-bf99-c1c23fce021c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b923510-1f1b-4a99-9452-5723b746cd0f", "sighting_of_ref": "indicator--5fb36428-6345-4b57-951e-18fead2bb60b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7edea04a-8df8-46fc-9693-72aa54a36cb2", "sighting_of_ref": "indicator--f24e8ea3-1283-4c23-b6a3-573163abd06e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977cbb01-e0a0-4df6-9db9-33eb306d7acb", "sighting_of_ref": "indicator--f24e8ea3-1283-4c23-b6a3-573163abd06e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856ce2d8-4e0c-4576-993d-44e2258181d7", "sighting_of_ref": "indicator--faf86fe1-bfea-4ea7-9d0f-924327278d2b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d061722-fbd8-48db-a8df-4fad5d571320", "sighting_of_ref": "indicator--07c9b39f-69f6-4075-b494-5a60ad247901", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0be341-9356-4973-ba81-77c8207ff4d9", "sighting_of_ref": "indicator--07c9b39f-69f6-4075-b494-5a60ad247901", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bb0781-7838-4d53-ac2e-8dc7d2251063", "sighting_of_ref": "indicator--07c9b39f-69f6-4075-b494-5a60ad247901", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e5857e-6c1d-40be-9bb7-893bf76cb552", "sighting_of_ref": "indicator--502655c8-52c9-44f8-82a9-bfe12fb49ec7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3617cec5-aa82-4a0a-842f-578152987fcc", "sighting_of_ref": "indicator--502655c8-52c9-44f8-82a9-bfe12fb49ec7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8869ec9-84f5-4f79-94d2-f4be6e3aea90", "sighting_of_ref": "indicator--9b7172fc-0eed-4e75-97a4-f0c8368d242b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fbe1665-15fd-464e-bb64-8a4aa2f43f16", "sighting_of_ref": "indicator--9b7172fc-0eed-4e75-97a4-f0c8368d242b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a66beb6-187f-40fe-9f6f-5c4675b22f6f", "sighting_of_ref": "indicator--f904d6aa-1357-49b4-984d-97984198f159", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8af3d66-3c6b-4bac-b665-b84325f42002", "sighting_of_ref": "indicator--1c074373-b58f-412d-943d-a6f236534594", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85194d2-034a-4035-bb2d-4d53cfc73657", "sighting_of_ref": "indicator--1c074373-b58f-412d-943d-a6f236534594", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3870559-f77c-48fb-984e-14bd45a3b8a0", "sighting_of_ref": "indicator--1c074373-b58f-412d-943d-a6f236534594", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8beb7fdc-aea0-4d49-8ae6-15b5206d71ce", "sighting_of_ref": "indicator--f2f92133-84db-4eb0-9911-eed586922919", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8170a3e-a0e3-41ab-a022-67177cb78757", "sighting_of_ref": "indicator--f2f92133-84db-4eb0-9911-eed586922919", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5374b1e1-152f-4ace-89ce-709a90f7b11b", "sighting_of_ref": "indicator--3794c54b-5138-4cc4-a9ee-d04c4c723a97", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ddb80a-4f7e-4143-957c-a38366e71f71", "sighting_of_ref": "indicator--b1a63f85-e503-427c-ad9b-44141f17ab19", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ec5a70-2b73-4192-98fd-2fcfa766f5b4", "sighting_of_ref": "indicator--c76a4dde-227b-4431-888d-269f379d41c7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea1bc7f-f833-4080-acc0-9a9f9116b422", "sighting_of_ref": "indicator--812dd3eb-88d8-4837-a0d0-25837de64f0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2814ffe5-c455-4d9d-81ee-07560ff1596e", "sighting_of_ref": "indicator--812dd3eb-88d8-4837-a0d0-25837de64f0b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6bf816-258d-4a28-8d85-15b727109ad1", "sighting_of_ref": "indicator--d2d5e617-286a-4b82-b5d2-7ecac663eab0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e59e8a-8c48-441a-95af-262c77767c71", "sighting_of_ref": "indicator--78bc3531-ee05-432c-9e79-e57b36ba8af7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7f1edd-e28b-44f7-986c-65bb6026c80d", "sighting_of_ref": "indicator--d9558195-b0ef-4ca3-af39-8af85d35a702", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c0be70-8796-4fca-84cc-bcf5a8b7c12f", "sighting_of_ref": "indicator--bb46890f-e80c-4653-92a2-3d9254a51433", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d0e459-ac4d-4de8-82b5-a984e91e871f", "sighting_of_ref": "indicator--c291763b-b692-483a-b336-f70001f06ec2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e090ec3-efe5-47bc-8cce-9d2b49170eba", "sighting_of_ref": "indicator--c291763b-b692-483a-b336-f70001f06ec2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3651df79-a6bf-41f2-b93a-795190271a6f", "sighting_of_ref": "indicator--2a6265c3-bcdf-4a7f-ba29-01eb953dc810", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620df615-df36-4a0e-ab2b-f502b6261784", "sighting_of_ref": "indicator--70cfefba-9808-46c6-9bbf-9bdee88d41f7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008d2bb4-d5b7-4f67-9bad-964fcfa6770d", "sighting_of_ref": "indicator--285a1d31-0105-4b06-b2d7-6c513e4fb080", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad089c6c-0b79-4b4f-83fb-6f7e8d10026e", "sighting_of_ref": "indicator--72446ed4-f860-4e1a-8870-28a26252ccab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4358ee-adae-4a5e-a78e-9f253c97a4a9", "sighting_of_ref": "indicator--9cc11c7c-5339-4b21-93f2-09fa04d390f7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b08f11-f1e2-4752-84e7-03e8de1f1435", "sighting_of_ref": "indicator--cd960499-fe3f-4087-99d9-faf22d6fa371", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6278ed9d-c2d4-4c73-a401-e4fbdf75d284", "sighting_of_ref": "indicator--bc73c7fb-8cf6-4aec-9a01-17c64326c00a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98daa57-f8c3-4ea1-9404-4e431197d5b0", "sighting_of_ref": "indicator--bc73c7fb-8cf6-4aec-9a01-17c64326c00a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b9523e-83f2-4454-91b9-9563031e6c40", "sighting_of_ref": "indicator--050d4f24-f92e-4337-aa00-dc4d92988b7b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d402761-0aee-4dd1-91c6-95aac9fd1b98", "sighting_of_ref": "indicator--050d4f24-f92e-4337-aa00-dc4d92988b7b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db823081-f1b8-48dd-a1ad-246e699d28a0", "sighting_of_ref": "indicator--3a585750-624f-46c6-86f5-37bd8e40776c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11a9150-5313-4e70-9333-a7caaa995bea", "sighting_of_ref": "indicator--d5cedf21-107a-4a55-9aa9-b8bc7a975674", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756b4df7-0b4a-4330-9f91-67329acd48f2", "sighting_of_ref": "indicator--d5cedf21-107a-4a55-9aa9-b8bc7a975674", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e08489-bbd0-46f1-a44e-edbd03c5498f", "sighting_of_ref": "indicator--4604af9a-345b-4a6f-ba9d-5315c7a67c3d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0220e1-8221-43de-8f8c-73110c070a38", "sighting_of_ref": "indicator--4604af9a-345b-4a6f-ba9d-5315c7a67c3d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c319cb0d-188d-45e2-acf7-d5f4825555ee", "sighting_of_ref": "indicator--8440c349-31ed-469a-ac0a-bd0dba0d3d76", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9f308a-679e-44ca-86e9-fe0f8734e7ce", "sighting_of_ref": "indicator--8440c349-31ed-469a-ac0a-bd0dba0d3d76", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05abeaed-8dd2-4f9b-9620-7ab53bed4465", "sighting_of_ref": "indicator--50f04a98-5f94-4264-8180-2a367adcdc80", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ccf2cd-e61d-42e2-a8f8-55a714868ad7", "sighting_of_ref": "indicator--4a2c1e90-d698-46eb-98cd-1d7a9e35e829", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d854f1df-02be-4aa5-a127-dad77285daa9", "sighting_of_ref": "indicator--a6f3f3ed-0962-42e9-8d99-c153f8c089de", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20efde0-824a-4b6e-abcd-77e084b40896", "sighting_of_ref": "indicator--386b8491-853a-49df-b8d3-f9ba4b0133d4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8631cf1d-604d-4697-96a4-e5f41f166b38", "sighting_of_ref": "indicator--b55d42fc-06f1-4ec8-ad79-a7f46e89a285", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfcac93d-13f2-4d20-b28f-6d03eebe5a4b", "sighting_of_ref": "indicator--b55d42fc-06f1-4ec8-ad79-a7f46e89a285", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9cb43cd-56e3-47b9-9842-24a7be73f333", "sighting_of_ref": "indicator--6466718c-99a5-4c83-a2f9-3e5fe42ed0ee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9453d49-1748-48e0-abe8-1b994a10a19a", "sighting_of_ref": "indicator--6466718c-99a5-4c83-a2f9-3e5fe42ed0ee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5da3b8-c5ba-4809-a233-f3dad997a88e", "sighting_of_ref": "indicator--6466718c-99a5-4c83-a2f9-3e5fe42ed0ee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55274369-811d-4120-92f1-40e2481034a0", "sighting_of_ref": "indicator--4dbb814c-584c-4d8a-b851-516bdecdb184", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddf5cb7-8c59-4db7-a3d3-2cba5e2e08c1", "sighting_of_ref": "indicator--4dbb814c-584c-4d8a-b851-516bdecdb184", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794fbebb-63c8-4ca5-b58f-317d62f66403", "sighting_of_ref": "indicator--f910429d-c8ed-4182-b771-76907c340007", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73723d00-7aa5-49d4-a7e0-509ddc7701ab", "sighting_of_ref": "indicator--f910429d-c8ed-4182-b771-76907c340007", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a02380e-3dee-4573-9b61-11405110cb7b", "sighting_of_ref": "indicator--f910429d-c8ed-4182-b771-76907c340007", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193898c1-68e2-483f-b0cf-1e8fa73032a3", "sighting_of_ref": "indicator--380263c4-1841-4931-af21-3fd82e203e01", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59af31d0-1e60-4d3e-801e-4e901d93e8e7", "sighting_of_ref": "indicator--34c2aec0-7613-48b6-9e2f-cbed9aeba4aa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e6b98f-22ea-4e7c-8d72-4dd349b22e2b", "sighting_of_ref": "indicator--34c2aec0-7613-48b6-9e2f-cbed9aeba4aa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa787bd2-9920-4ba5-beca-c3a8aa05b9f2", "sighting_of_ref": "indicator--3dcb27b8-432c-469c-812d-9e4699f8c3d0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e55314-afe1-4d90-b255-8c8d8bac9a9b", "sighting_of_ref": "indicator--3dcb27b8-432c-469c-812d-9e4699f8c3d0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648565f6-cb23-4b78-aa31-f855d042fb26", "sighting_of_ref": "indicator--5a201556-61a3-45f0-abfa-9eaf699cbc07", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6379229-5046-4301-b21b-ea40a6ae0f19", "sighting_of_ref": "indicator--5a201556-61a3-45f0-abfa-9eaf699cbc07", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29742969-b64d-4edf-b9b1-aa2321f59b50", "sighting_of_ref": "indicator--aeb7428b-8502-449d-8ea5-5bd1107162b8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d5645c-936d-4f68-b713-f9c237b6ef1b", "sighting_of_ref": "indicator--aeb7428b-8502-449d-8ea5-5bd1107162b8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ab95d6-c96c-4e60-b85c-157aa0b5a82b", "sighting_of_ref": "indicator--b21f67ba-6f9e-4686-a88a-ac1f4788c8c9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333de8a2-13a7-4f78-b36a-759881f7d87a", "sighting_of_ref": "indicator--b21f67ba-6f9e-4686-a88a-ac1f4788c8c9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d92176c-4884-4d11-837e-fc4a3c94353d", "sighting_of_ref": "indicator--6401a481-aef3-4d76-bd7e-219614651eff", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52df114d-e7c3-4ec6-a990-f3ef3735e66b", "sighting_of_ref": "indicator--6715b9d2-54bf-4e3a-a5eb-64c4a21e9743", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43131f0d-5d78-4bb3-aef8-604d5b9803f1", "sighting_of_ref": "indicator--6715b9d2-54bf-4e3a-a5eb-64c4a21e9743", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ab164a-4ed5-4899-8fba-386cfab60f0f", "sighting_of_ref": "indicator--0fb10f62-08f1-461a-8a0c-28bdcc96f120", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3dc85f7-3e51-4b75-a7c2-9347bf278b20", "sighting_of_ref": "indicator--37fb9117-de83-45b1-b93e-1d8e6176288b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f74fa28-9b3e-4d76-8b76-e82662dc7219", "sighting_of_ref": "indicator--4aa65719-5572-4e57-a746-baa529cff6e0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268c4931-4691-44d0-8fc1-74c7c77a59fe", "sighting_of_ref": "indicator--6a7a2a29-760b-4403-af26-fa72e3784943", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db88fdf-4eab-4eca-8fbc-fcd3eb5a32c6", "sighting_of_ref": "indicator--6a7a2a29-760b-4403-af26-fa72e3784943", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abf4fb5-61c9-422b-be04-bb25f51d9e84", "sighting_of_ref": "indicator--fa862fcf-d5f2-4e4e-ba41-40222c4b052f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8827d578-8be4-4105-a7c2-825d84a85e65", "sighting_of_ref": "indicator--fa862fcf-d5f2-4e4e-ba41-40222c4b052f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77362b1b-f529-476c-8e60-fed61dadb74b", "sighting_of_ref": "indicator--297322d6-81bc-4599-967b-caf01c85212b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa41f59-2230-4936-a089-ad1caa4c00aa", "sighting_of_ref": "indicator--0810c102-54d3-48a3-80b5-093d63a657f9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe37d001-4207-4901-adf7-5e8f128da379", "sighting_of_ref": "indicator--0990979b-d166-4f86-a4b6-9a306a1faf4e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c9ac8f-ff4e-47e8-9aa3-1243b2e860a1", "sighting_of_ref": "indicator--3ebc1ccf-c44c-4c4d-84f2-b68747ae82df", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a65887-3a3e-433f-aec5-537483f00a0a", "sighting_of_ref": "indicator--1d1503b6-96a4-4fb3-a62c-bbbb2a34f431", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4c92bb-409e-48ec-981b-c307af2b061a", "sighting_of_ref": "indicator--1d1503b6-96a4-4fb3-a62c-bbbb2a34f431", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75853c03-599e-441d-bff7-821b9adb377b", "sighting_of_ref": "indicator--d051daf9-e123-4ae4-9aa4-9f3e02cb2ad2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80138d0e-2db6-4ab7-b041-bce481d17227", "sighting_of_ref": "indicator--d051daf9-e123-4ae4-9aa4-9f3e02cb2ad2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0b7210-adec-44fe-9d66-b65e4a1c5f5f", "sighting_of_ref": "indicator--575328d9-17ec-4280-b190-c2486683d17a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e497ec41-1665-4c5e-bbac-b0a1a7031bc2", "sighting_of_ref": "indicator--ce58870c-a44f-433c-9faf-6a6818d72193", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a439a9-848a-41f1-a01b-655c77a95585", "sighting_of_ref": "indicator--ce58870c-a44f-433c-9faf-6a6818d72193", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a082200-deec-4d96-b74a-5e1af0f86f5b", "sighting_of_ref": "indicator--ce58870c-a44f-433c-9faf-6a6818d72193", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eac71ba-0214-4e83-8c0b-4a5688b6d0e4", "sighting_of_ref": "indicator--4efca2d4-75bc-4fdd-85ce-5752e009e655", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8b6177-416f-4f58-9ed6-9b638f8b7400", "sighting_of_ref": "indicator--f056a877-63be-4a76-ad14-d744aaab1f77", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3141759-7cd0-4093-a055-2b2ac20f61bc", "sighting_of_ref": "indicator--4f418f70-9914-4742-8fb4-67de8286b6d6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a43141d-c7eb-4e4c-b787-b6474e44ee99", "sighting_of_ref": "indicator--4f418f70-9914-4742-8fb4-67de8286b6d6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932380d7-b28b-43f0-b2f3-9872fd196ed5", "sighting_of_ref": "indicator--49de6a06-b76f-4c73-b91c-911b19646787", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51bc3fb-0e98-4f7b-889b-e76672cc633d", "sighting_of_ref": "indicator--27a8f0a1-5943-4bf3-899d-36f4eb3bcaf1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cee0274-5db4-47a7-94f2-3e01c89ce99a", "sighting_of_ref": "indicator--b8895690-efae-4446-ae3a-a4912224a0b7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb109fb6-fd0d-404e-83b4-0aebc097c96c", "sighting_of_ref": "indicator--ce2ac814-4361-424f-b971-6132537c8c94", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b718f14-2805-4cb7-b914-d2428a20298a", "sighting_of_ref": "indicator--97c27b07-3e08-4f27-8078-8cda3bdbfc4c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ea81a2-d6af-47b6-84f3-fd00215f9d5c", "sighting_of_ref": "indicator--97c27b07-3e08-4f27-8078-8cda3bdbfc4c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50901d8-9674-4f43-a207-f7e3830ecd8b", "sighting_of_ref": "indicator--73a6be3b-31b4-458b-b98f-8203665d5d0a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4a3285-f951-4d82-9c2c-75cd05f0ec46", "sighting_of_ref": "indicator--49f49cfc-c6dc-4d57-a981-793434b6d1d2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6910e514-c985-40ab-bf92-f1167fbf4fad", "sighting_of_ref": "indicator--0f4ab617-3832-4b11-b395-82d1b06a416f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d11960-b890-4d3f-9e2d-2a9b0a004316", "sighting_of_ref": "indicator--d100713d-e830-49d4-8a34-84a477fa0ec4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4cff89-97ed-478b-8811-b91becf4052b", "sighting_of_ref": "indicator--31fc7291-62db-4626-82fb-cf0eaea390f2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e30a60e-2529-4fa6-add5-68313a3e048c", "sighting_of_ref": "indicator--31fc7291-62db-4626-82fb-cf0eaea390f2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e05bf3-2afa-47c2-bb74-1546e38cc7b0", "sighting_of_ref": "indicator--b288d49d-fde2-440f-849c-49ffde52c7e1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5413bea9-4d29-417a-a2af-f15c0a9e8391", "sighting_of_ref": "indicator--b288d49d-fde2-440f-849c-49ffde52c7e1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491ad952-dcf7-4f50-9364-ccc665f4f62e", "sighting_of_ref": "indicator--b288d49d-fde2-440f-849c-49ffde52c7e1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332b2bd0-615c-416b-8c4f-75b640a05947", "sighting_of_ref": "indicator--0b76fa9f-3f04-4f17-9c08-2bf4ee9b57f9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833f219b-5c56-44ba-ac3f-d6f10146ed61", "sighting_of_ref": "indicator--14d11d78-8a4b-406d-bfb5-d820c35c2b5c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f842b67a-8123-4df7-bdd2-0c4d6e1af0a1", "sighting_of_ref": "indicator--14d11d78-8a4b-406d-bfb5-d820c35c2b5c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62dc0d57-31f3-4a08-b3a4-9bf41403507e", "sighting_of_ref": "indicator--dd92ad8c-1b02-4d85-a6e2-73b599492585", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38db113c-0bcb-4c46-a86f-d0fc783b45ba", "sighting_of_ref": "indicator--dd92ad8c-1b02-4d85-a6e2-73b599492585", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc978a9-e676-4c3c-92d9-e305128118a2", "sighting_of_ref": "indicator--fca3d228-1803-44bd-b953-5e89f301e503", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7138f9a4-5bfd-424d-995c-5e99e51567d1", "sighting_of_ref": "indicator--fca3d228-1803-44bd-b953-5e89f301e503", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16546710-af0e-4b66-8c29-4cc502201103", "sighting_of_ref": "indicator--4ab83643-c81f-4db5-bda8-c1c0d93da11c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c566e03-1c90-4719-ba37-818bb24fe392", "sighting_of_ref": "indicator--96100fa2-4195-4cca-bb30-9c540342fa25", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc02f88-db44-416d-b3bc-89510f2a2fbd", "sighting_of_ref": "indicator--ce6bd065-35dd-4efe-a84c-697b10f84787", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59bd07c-ad7d-4fa6-8692-75b49702a53c", "sighting_of_ref": "indicator--ce6bd065-35dd-4efe-a84c-697b10f84787", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3e5849-1a9f-4380-857d-4c7575351224", "sighting_of_ref": "indicator--33c40805-606b-4ca9-b534-a0d3096da85e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9cb11d1-dac9-41bc-8ecb-269ba3a3bf5f", "sighting_of_ref": "indicator--d09a7043-c99a-43f4-ad08-12148a76d773", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a93911b-a8fd-4f62-879d-d7331ddc3630", "sighting_of_ref": "indicator--d09a7043-c99a-43f4-ad08-12148a76d773", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4289eb4-6eb1-41d6-a872-9168c322f705", "sighting_of_ref": "indicator--f57093ab-0b96-4848-99e0-5cbcf2c54b72", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553a1831-259d-4745-88ed-a637406b2c03", "sighting_of_ref": "indicator--ce57e7c4-4f1c-42ac-bc49-61d198a31b11", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90424695-16eb-4f33-94af-7129b87ae378", "sighting_of_ref": "indicator--ce57e7c4-4f1c-42ac-bc49-61d198a31b11", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcfe91fd-1108-4872-a732-9e898fca782e", "sighting_of_ref": "indicator--ce57e7c4-4f1c-42ac-bc49-61d198a31b11", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e67628-188d-437d-906c-0c02b3a677fb", "sighting_of_ref": "indicator--f3418d4c-8c8b-4fe3-b937-86ea5e4377c7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc4224a-61a9-4698-b177-412fd4923d85", "sighting_of_ref": "indicator--9e747cda-ab86-4659-8ef2-bbb8fec56a22", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ebeb0f-a481-4ea9-8149-c2c8a7cf631f", "sighting_of_ref": "indicator--9e747cda-ab86-4659-8ef2-bbb8fec56a22", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d945bf-8f16-4970-a38f-4e5d8323ea79", "sighting_of_ref": "indicator--ceec25b9-0252-4b14-879f-ff9bd9466755", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6640f5cf-df0c-48f9-af64-d358e1aedf88", "sighting_of_ref": "indicator--4f12136d-344d-4be1-af02-6f714332d878", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312c50b3-1f9d-4433-88dd-05cc203b2c77", "sighting_of_ref": "indicator--63589573-9906-45cf-b35f-9724aca585c3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2b2fc7-a3c7-44ca-9a3c-e598b9f56185", "sighting_of_ref": "indicator--63589573-9906-45cf-b35f-9724aca585c3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d710786c-937a-45db-8940-cb1e9cec04b4", "sighting_of_ref": "indicator--63589573-9906-45cf-b35f-9724aca585c3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5867c77c-1159-40e4-b3f6-01dcd101f7a1", "sighting_of_ref": "indicator--e70022bc-9ec6-42dc-9797-3a090dbff48d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0bbcb4-c673-4991-8803-3e7e6bb227e6", "sighting_of_ref": "indicator--e70022bc-9ec6-42dc-9797-3a090dbff48d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e2f8c0-1c66-405e-be76-717e595ea0a1", "sighting_of_ref": "indicator--e70022bc-9ec6-42dc-9797-3a090dbff48d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90157884-8b15-45c3-912a-2056ed5e991c", "sighting_of_ref": "indicator--481500da-dda0-4c73-a775-7ae270dd2320", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b371c067-b3ef-4227-bb04-7b8b65553a6e", "sighting_of_ref": "indicator--f9aba9c8-f84a-4e96-8e63-295587152749", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcaf2bcb-9fab-4b9c-9157-fd92252b59a6", "sighting_of_ref": "indicator--c8f19ac2-c361-47e0-a66e-040eaabee05f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d1f7f9-b4be-41ca-91d9-7bd13176354f", "sighting_of_ref": "indicator--5e05836c-4f65-4ed2-a234-6458acb57329", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcff11fe-a4a9-4805-a46b-b212d71c8d5d", "sighting_of_ref": "indicator--6443cc98-0ea6-4b78-b001-550410338c42", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc544ebf-8d90-4927-8b63-a2d80470469a", "sighting_of_ref": "indicator--b90f57f2-3978-474d-b2c0-848b58068654", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa55dc9-4898-4097-9cb3-83ae820c2492", "sighting_of_ref": "indicator--b90f57f2-3978-474d-b2c0-848b58068654", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a0f83f-3d45-4dc6-8bcb-ddcceb54855d", "sighting_of_ref": "indicator--9bb21f23-ef4b-4bed-999a-dc977cd21e52", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee8df3e-1aa3-42e1-be09-ab6dd260b6e0", "sighting_of_ref": "indicator--2e17320a-f82c-4e76-a43c-d51cd59bb039", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6343d540-4721-40f7-8ca3-106edbe51d58", "sighting_of_ref": "indicator--2e17320a-f82c-4e76-a43c-d51cd59bb039", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdcb9cf-f3a7-4b22-b077-7c91e9dcfb99", "sighting_of_ref": "indicator--29ed7b7b-fc68-48e8-875a-6f1716e13b2e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9cc42a1-0f24-443b-be70-7841fb8933a6", "sighting_of_ref": "indicator--d501f9db-11bb-4b07-8342-6c02ced30c1f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ad051f-70cd-43eb-a592-cadc4f9f9b0c", "sighting_of_ref": "indicator--08b647ce-9f27-414d-919a-17ae07e3758f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49db1260-f96a-4061-816f-79cc27dffb71", "sighting_of_ref": "indicator--5790962f-7451-4413-b7ab-137f61f38cc5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b31d64-a0d9-4f55-9f0d-675cd9cdc8db", "sighting_of_ref": "indicator--5790962f-7451-4413-b7ab-137f61f38cc5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc837fd-abaf-45b2-bd5c-d7c2dd8eef9a", "sighting_of_ref": "indicator--4230cef7-167d-4c4f-90e2-0f767291ee6d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82f6de2-dc8e-4ddf-bb95-37678f2beb42", "sighting_of_ref": "indicator--4230cef7-167d-4c4f-90e2-0f767291ee6d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4064878b-4299-43dc-82df-99a4b6ce2dbe", "sighting_of_ref": "indicator--ca6c9e07-92c9-4ab4-9f0e-180543096d2f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2799011d-4ffb-4adf-b29b-c0e5907d4a1b", "sighting_of_ref": "indicator--ca6c9e07-92c9-4ab4-9f0e-180543096d2f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e5c0ed-94f5-4cc1-af91-6e10095f2806", "sighting_of_ref": "indicator--61763d91-1982-45b1-9ef5-8d9c31e3c4d4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bcb88a9-679c-4ad5-a03a-f042517e99b5", "sighting_of_ref": "indicator--bdc879e3-1b95-4680-b276-2d46ac6f7b02", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eecbb74a-56df-45be-bb58-12b3d669a9be", "sighting_of_ref": "indicator--18507f0c-d356-4558-9a0c-60820aebe43f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b467fb8-f244-477c-8846-6e75afa51fb7", "sighting_of_ref": "indicator--f34806e5-a4a2-4062-8f47-5fe5c4f0c656", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1922d60f-cc90-41a4-ad79-0a81266acb85", "sighting_of_ref": "indicator--85c5a6ec-b356-4ac7-911b-00294dc21b26", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f2a642-d9ae-4b84-81b9-acde40129494", "sighting_of_ref": "indicator--5c50d691-7060-40eb-bddb-ab274939ffb6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96da4219-ada6-44c0-ae4b-b54570c2179a", "sighting_of_ref": "indicator--e32b36ab-d793-4dd8-b74a-f2789234ac91", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba88a5b-95a7-4fcf-a1d7-90d86a001f67", "sighting_of_ref": "indicator--f1d190a6-53d1-4dbb-96eb-fc27b048ab81", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f58ebc-0923-42f7-bfbd-9f6edce3e5b5", "sighting_of_ref": "indicator--f078f86f-cf32-48f3-8841-5514d865d45a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459932a8-f73f-4803-9df3-a5d793e68645", "sighting_of_ref": "indicator--eae06799-14e4-47da-b307-de9a1f52d888", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae86d4c-c0cd-4a34-8ca9-a695f5a97f11", "sighting_of_ref": "indicator--98607146-b8d6-4642-8800-679f92fd1fa5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d61521-03f5-4ecb-8b37-1343352d5208", "sighting_of_ref": "indicator--9c132a05-225b-48da-9143-17bf1348117e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c5ea09-7369-442c-b2f4-8676a40b8163", "sighting_of_ref": "indicator--9c132a05-225b-48da-9143-17bf1348117e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962399d0-48f4-4f2b-8cd7-70934f4b8068", "sighting_of_ref": "indicator--9c132a05-225b-48da-9143-17bf1348117e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3067f4cc-2ce6-47cd-b8c9-87e4c75f57a8", "sighting_of_ref": "indicator--585a21f4-3f5d-4e95-ac51-77f267b288d8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee315e00-a114-4dae-a51f-6d61c9682496", "sighting_of_ref": "indicator--585a21f4-3f5d-4e95-ac51-77f267b288d8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7738ff55-d09c-4a1a-820b-d1ca7fbb3abf", "sighting_of_ref": "indicator--585a21f4-3f5d-4e95-ac51-77f267b288d8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65690a69-faaf-4189-a53b-5c71a0ba881c", "sighting_of_ref": "indicator--a72a31b9-977f-44d5-9457-64fc23d4c7b2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3261cd07-d708-4d42-9c2b-b478ff1dfefc", "sighting_of_ref": "indicator--a72a31b9-977f-44d5-9457-64fc23d4c7b2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82ba6c8-0d6d-455e-b321-ff0e74bc635b", "sighting_of_ref": "indicator--3912a301-900e-49d0-a518-6ca4effe3ea7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa819c8-2167-4f04-931c-ca85c3cbc2f0", "sighting_of_ref": "indicator--3912a301-900e-49d0-a518-6ca4effe3ea7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315473dd-23b3-486b-904a-1cd4cdb47092", "sighting_of_ref": "indicator--68f117f7-b7b7-4a09-a1e6-228c21789732", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40ac104-dbb3-4fb4-b0e0-40ee98d0d852", "sighting_of_ref": "indicator--68f117f7-b7b7-4a09-a1e6-228c21789732", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86708cc7-2621-43ec-a9c9-ce040009e7b1", "sighting_of_ref": "indicator--a95fbadf-5ced-4a01-ad49-57caac71132b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020e0442-21f3-454e-94d2-1e6851c392a9", "sighting_of_ref": "indicator--1b33b8c2-2417-466d-af33-93658441b499", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba46ce9-8d1b-4b44-bc24-cb819547e403", "sighting_of_ref": "indicator--e87793b2-f284-4492-adec-817072df3007", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59bf1087-71f4-461c-a270-236fc2986296", "sighting_of_ref": "indicator--e87793b2-f284-4492-adec-817072df3007", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d5f7f2-bc64-4a37-9647-06e98ed7ee19", "sighting_of_ref": "indicator--e87793b2-f284-4492-adec-817072df3007", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437732bd-c453-4c5f-badc-eb81044ddcd2", "sighting_of_ref": "indicator--f58aab18-25be-48ac-84a8-c8697b8849f8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3fceae-0f96-4d2e-a0c1-8b77def7fb16", "sighting_of_ref": "indicator--f58aab18-25be-48ac-84a8-c8697b8849f8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635ef3eb-a4b4-4d29-b64f-392ab365bc2b", "sighting_of_ref": "indicator--1390d9a7-c846-4de5-b5e6-ced8493fc607", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23e63e4-6460-44ca-93d3-02f921973ebc", "sighting_of_ref": "indicator--1390d9a7-c846-4de5-b5e6-ced8493fc607", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a833bf-0df9-48ba-8614-b497541fd98f", "sighting_of_ref": "indicator--3e9fed77-895d-4b13-8325-ad80e4ba170b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe31021-0c6d-412c-ad9c-0d7c5aa72f9e", "sighting_of_ref": "indicator--3e9fed77-895d-4b13-8325-ad80e4ba170b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5899d6-f164-487c-8c3c-9cd60df24145", "sighting_of_ref": "indicator--4fd769a3-20ef-4c6b-ac0e-34b6a249d51e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b904655a-3cf7-4a6d-8ed6-d78d14a383c0", "sighting_of_ref": "indicator--4fd769a3-20ef-4c6b-ac0e-34b6a249d51e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0361a967-d4d4-43c5-a98b-bb032f106b7a", "sighting_of_ref": "indicator--2270fd90-73a3-4a1c-af23-8fed67af5d80", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbeb58e4-c3cf-4dc5-a6e8-1fbfdd1fa92f", "sighting_of_ref": "indicator--2270fd90-73a3-4a1c-af23-8fed67af5d80", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4451b9-030e-4c7a-b651-dbebd690c0d0", "sighting_of_ref": "indicator--01902ebf-82a3-48ad-82af-8dbf82bf6940", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7742f10a-03c7-4f95-942a-294d27061c67", "sighting_of_ref": "indicator--53e87462-b915-412a-8c18-bfef0430b04f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b308208f-2618-446e-8dc3-21f0cfe74eae", "sighting_of_ref": "indicator--b187b58a-a78f-4789-8598-b3abb813045b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0eb574-005e-42b3-9f86-4bf2cea09df7", "sighting_of_ref": "indicator--b187b58a-a78f-4789-8598-b3abb813045b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12aabcd6-6eb6-4d72-86df-58e02571de88", "sighting_of_ref": "indicator--8cc2289f-2089-46a4-8984-dba73dac315e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c0d1e8-323f-4c48-8621-8f77414f0bdf", "sighting_of_ref": "indicator--0a43fda1-b08e-4b12-bd75-79cfbde17b10", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f946206-39a9-465f-b2a2-55e62d5bca11", "sighting_of_ref": "indicator--0a43fda1-b08e-4b12-bd75-79cfbde17b10", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce1b415-ce2d-495f-884d-6bed022a0c03", "sighting_of_ref": "indicator--0a43fda1-b08e-4b12-bd75-79cfbde17b10", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ac356b-50da-4d07-a961-cb01b885e35f", "sighting_of_ref": "indicator--71502160-fbcb-4de5-a107-8197e9484678", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73075793-5fd7-4fe2-8303-549253699025", "sighting_of_ref": "indicator--966805b9-bc96-4c91-8a8c-587a6d12f0fe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52187f7-992b-4a69-9d90-c335c4cc1881", "sighting_of_ref": "indicator--7849e050-8705-4c7f-a31b-8345e4c9b910", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e4f1d7-eb92-4816-8567-8eb77dc53010", "sighting_of_ref": "indicator--04ba346a-7abd-461d-85de-afc6dd2bf4c0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd9289a-c315-461c-a945-6bf938c7da14", "sighting_of_ref": "indicator--04ba346a-7abd-461d-85de-afc6dd2bf4c0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e38bd9d-6687-418b-88d6-f59b537797ac", "sighting_of_ref": "indicator--69e7ff95-8880-46a3-bca4-250cfc41185b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa57ff28-d242-4408-b2e6-8a0b897c2bf1", "sighting_of_ref": "indicator--69e7ff95-8880-46a3-bca4-250cfc41185b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcf2f05-41ad-4497-8e94-af910a3bd5fe", "sighting_of_ref": "indicator--17fbb553-6751-4283-8618-b0d5489c68a5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7cc3dc-5b01-4b5c-ab49-beba6576c104", "sighting_of_ref": "indicator--17fbb553-6751-4283-8618-b0d5489c68a5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1768b061-f092-48f8-8d81-a7cac18f3c23", "sighting_of_ref": "indicator--30b08858-d9af-44f6-b2c4-eaf630153e61", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356c7ce9-0a98-450b-b80e-3e71e5e9afb9", "sighting_of_ref": "indicator--b1166bf7-d1f2-4fa6-82fb-4029af026f0c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d52156-fa35-469c-9c4e-d0ea2a2021ff", "sighting_of_ref": "indicator--b1166bf7-d1f2-4fa6-82fb-4029af026f0c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f7d17f-7035-48ba-90e9-e109112600b4", "sighting_of_ref": "indicator--908087b8-cfb7-47b1-8181-9a6026d76719", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6fce8e-ead8-47f5-81c6-3866341949df", "sighting_of_ref": "indicator--908087b8-cfb7-47b1-8181-9a6026d76719", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1501ee-d9ac-4c2b-93f2-e6fa93d8060b", "sighting_of_ref": "indicator--a843f13f-f53a-42b7-8fc5-419d2309a95c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49160b6-0453-479c-94d6-a971d1843308", "sighting_of_ref": "indicator--a843f13f-f53a-42b7-8fc5-419d2309a95c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f923c6b-5163-44ff-85c7-60cf69c9a4be", "sighting_of_ref": "indicator--a843f13f-f53a-42b7-8fc5-419d2309a95c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57792f3b-690f-4cf9-a495-35938f2c7f77", "sighting_of_ref": "indicator--e242bb2a-c6fa-4231-8713-039d6ae16bc6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea02195-a8a5-44c4-8939-4f7a7bf92c55", "sighting_of_ref": "indicator--c0696d37-decf-4ab7-a19e-ca1cf1ebf9f1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0faaf674-ea04-4293-8f8d-8953a330e68d", "sighting_of_ref": "indicator--12501879-8624-419f-ad26-9aa2aa547737", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bedf5a9a-1ced-49da-a88a-f4785d0531f0", "sighting_of_ref": "indicator--12501879-8624-419f-ad26-9aa2aa547737", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19b3cb3-e755-4315-bd22-ae7b02ee1053", "sighting_of_ref": "indicator--973f7143-ab6f-4a9a-bf32-b8df878aeb58", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee133b1-a4f4-44e9-8cd7-030413f48fa2", "sighting_of_ref": "indicator--df89edcd-b5f4-4c9d-b3be-7f512dc6b421", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45a31d6-6fe4-4fc8-a4f6-5a28cc9d8cbd", "sighting_of_ref": "indicator--857648b7-9b97-491e-92db-cb4706717d59", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81cec57-f67e-424f-b277-50097546ad0e", "sighting_of_ref": "indicator--857648b7-9b97-491e-92db-cb4706717d59", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a19081-e94f-4219-ad3a-f349ff50d4d2", "sighting_of_ref": "indicator--2f09be99-6b41-4889-812c-04793a4ab10d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9edc6d-ca47-4007-9519-31a92bf5baff", "sighting_of_ref": "indicator--b1d31f11-c1b6-43ff-83c6-5cc0c422f78f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876351db-8010-4541-8d10-68cd5f05e1f7", "sighting_of_ref": "indicator--b1d31f11-c1b6-43ff-83c6-5cc0c422f78f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c112e7a1-6ded-4b72-aa6f-57bf68cdaaba", "sighting_of_ref": "indicator--ec572263-6eec-476b-8192-6e540b9014e9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a7cd58-e5d2-4f8f-abec-c42071d5ecdf", "sighting_of_ref": "indicator--a15a5704-f541-4847-b2a6-1e1885d454bc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb75403-fd8a-45dc-87a4-a5c25b6ca7b5", "sighting_of_ref": "indicator--a15a5704-f541-4847-b2a6-1e1885d454bc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852b048c-8449-4bbf-a962-f4eb87b7bff9", "sighting_of_ref": "indicator--2103cb7b-6a99-43c7-93ec-01300935f4b3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204c2268-dcc8-430b-bdf4-a89982147afa", "sighting_of_ref": "indicator--2103cb7b-6a99-43c7-93ec-01300935f4b3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3908ff6f-d02b-4604-985b-faf5d68a563d", "sighting_of_ref": "indicator--672b6d61-5631-4bb9-86a8-d73b50bed0c3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d4b89e-a13d-4c01-9fa8-ccf939113f36", "sighting_of_ref": "indicator--dcdd722e-139e-4c0b-b18a-8bcb6c707beb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e496ab58-193e-4c29-87f5-a8c0dca01306", "sighting_of_ref": "indicator--dcdd722e-139e-4c0b-b18a-8bcb6c707beb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec38f38-a41a-492f-9bf7-fe399e204b9d", "sighting_of_ref": "indicator--85a8fef2-a433-4f81-b7f9-f087551a7f5b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce281ce3-c5fc-4fe5-9491-b107533aa62a", "sighting_of_ref": "indicator--e7af0b5f-0bf4-4c3a-b3a9-83e713e1f7ee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09869ba8-9c74-4398-b7c9-0a81110ee142", "sighting_of_ref": "indicator--e7af0b5f-0bf4-4c3a-b3a9-83e713e1f7ee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef0284f-e384-4a72-94ce-64ca6f003703", "sighting_of_ref": "indicator--414f90a8-f698-4416-b4ee-7fcf7a49b203", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf67711f-d62c-41b4-a2d0-b23aee469369", "sighting_of_ref": "indicator--e5806fbd-799f-484d-a030-7542f87313a8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d1143e-918c-45e9-9b34-d18a968a0b44", "sighting_of_ref": "indicator--59539d09-f23a-4b10-aecb-b593634caa33", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74910185-af20-404f-abeb-afc24163706a", "sighting_of_ref": "indicator--095941f3-d937-4fc7-80a3-1fe9b9e5868d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab370298-46fe-470f-a181-7d722e03d581", "sighting_of_ref": "indicator--bb0e0e7a-839b-46f2-b89b-a33b19fe796f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c83902-43be-4c8c-9e17-1cb2c3dc3bda", "sighting_of_ref": "indicator--53cbc558-4548-4e60-980d-1fe405db5a9b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee60a39-9d57-40a9-b7c1-d335e5af6325", "sighting_of_ref": "indicator--53cbc558-4548-4e60-980d-1fe405db5a9b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0727a91f-dc99-49b5-b967-f3ad5cd44ba6", "sighting_of_ref": "indicator--53cbc558-4548-4e60-980d-1fe405db5a9b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edeb129-ed35-4bdb-8dd8-ac6f9ce8b0ea", "sighting_of_ref": "indicator--a3e39901-0cdb-40e5-bc3f-339f3ee9c3bf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9b2cda-91ee-4d6b-8942-d0065460237c", "sighting_of_ref": "indicator--a3e39901-0cdb-40e5-bc3f-339f3ee9c3bf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2caffbfa-4258-44fd-9576-8891457cdd94", "sighting_of_ref": "indicator--97dc6bc9-95e3-4ea1-a9a3-edecf8c21ee1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d9d880-06c5-424c-88c6-c619c9798ed6", "sighting_of_ref": "indicator--10da9044-ee40-4c5e-bdf8-130f6286e1ba", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33fcb0b-ae53-4d84-83ce-c25e283a65e6", "sighting_of_ref": "indicator--917e38f4-25de-44be-bfe3-ede73f4aca12", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f7e13e-30e9-4999-b494-1ccb1e99e6a3", "sighting_of_ref": "indicator--15c573df-79e3-4ea7-b0b7-b802c7c8179d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b836a122-46a0-4d25-b6d9-310fdad36659", "sighting_of_ref": "indicator--3b053755-67cc-4b5d-bc3e-87c4ddeb8487", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3e54a9-8e4a-4e87-a8dc-fcc0587c232d", "sighting_of_ref": "indicator--11715d94-bb53-42f8-80d7-08cf05651ad1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8444b778-6d79-4696-91a5-e0fb5c883f67", "sighting_of_ref": "indicator--4e7a332a-ae75-4b10-a082-63d3d86378bf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a6ac45-3efb-473d-a8dc-6ad477bf0f1d", "sighting_of_ref": "indicator--7fe384ee-d726-4692-856d-ca7d822c7f72", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83258546-2ed3-4e89-ab51-1d8638aa5049", "sighting_of_ref": "indicator--4a00713e-f66f-4585-9ece-6f8e1c0b78c3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68416b64-caf8-4a1c-9d60-1030a87f939b", "sighting_of_ref": "indicator--620a6b08-f6d0-4164-a8f7-a87d4ff24d33", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc40fabc-1e86-4f6c-895c-02afc6fa924d", "sighting_of_ref": "indicator--8b4d7712-55a1-45ef-8980-d904656a12f9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae8d0d1-5b14-4bf1-acde-99d0e13e108f", "sighting_of_ref": "indicator--613c324a-fa66-4d45-ab2f-8a2ac56ea755", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615280d5-ff48-4212-9a5a-cd2e10c45608", "sighting_of_ref": "indicator--613c324a-fa66-4d45-ab2f-8a2ac56ea755", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e216eb3-7bb2-4ade-a9d9-f3e482c400be", "sighting_of_ref": "indicator--613c324a-fa66-4d45-ab2f-8a2ac56ea755", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f6397e-ec8a-4f77-8ff0-a9951aa1c200", "sighting_of_ref": "indicator--33e5bf00-056b-45c4-9649-b2a178d94189", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3830c09f-4640-4ec6-8d13-b2827edba690", "sighting_of_ref": "indicator--bb080ef9-4929-4680-99cb-ee71a57dbc25", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63118f1e-dbad-42cb-9be6-616de2bc28fc", "sighting_of_ref": "indicator--1057a541-4dbd-4358-a189-293a3bc7062c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519693f2-c7e5-47b9-bb42-4eb29b0851a4", "sighting_of_ref": "indicator--69bd8df7-97f9-46a3-b868-b2f679dacd5d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1520af-730c-4d6d-bd81-9a332fada796", "sighting_of_ref": "indicator--d348dde2-0eb8-4cd5-97b0-b59507c4fe1e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ea685f-004b-4cd5-bfb3-66d77b529d36", "sighting_of_ref": "indicator--665c8778-68ca-4ec4-9e2e-926fb1846e5f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb20f15-6b2b-40f7-be92-46408f58605b", "sighting_of_ref": "indicator--1e9ba845-8dd3-4037-a00a-fcbf58af2f70", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1aee4e-7562-4e94-bded-ccb0dd342990", "sighting_of_ref": "indicator--55ab9c62-62c7-4479-a6b9-696925fd0ae1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ec380f-5fed-4f37-a827-7819aeaff39c", "sighting_of_ref": "indicator--2649523e-1607-4a03-a4ff-a36086b8a412", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46e1ae2-a99f-45c2-95cf-574ca9b22292", "sighting_of_ref": "indicator--78124e8f-06b4-4a75-8e56-af11bbd30df1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7fdd81-5be6-495c-bffd-07a096167798", "sighting_of_ref": "indicator--3588a1a3-dec8-46d5-9dbe-3865bea7f8e6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0edb2f17-bc16-40d4-9f03-be24544f13d4", "sighting_of_ref": "indicator--e6684ac2-1790-4545-8df9-5301690c4df3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c469914b-acb1-4da7-8196-97803ec7214d", "sighting_of_ref": "indicator--8a0bd956-d613-48fe-ad16-9b06815019bf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00540fb0-30e8-41de-a22c-33e0a86a1422", "sighting_of_ref": "indicator--c31030ab-ad82-4741-9b47-708edf08e06c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e668158-8875-4321-88e8-41f6548380ca", "sighting_of_ref": "indicator--6e0e1fbd-ab83-4437-be14-940d7d5d731b", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2913e22-9256-49b1-9f5b-f632e6191bfe", "sighting_of_ref": "indicator--664d5645-e1c8-4e23-b375-ff8ab966dfbe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42aff5c-287e-49c5-8579-fc896b5eeafb", "sighting_of_ref": "indicator--9a870c6b-cf74-413d-836f-349e72d7375f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f731dc7f-15cf-44ea-ba23-8cdfe9f16ed0", "sighting_of_ref": "indicator--448b1124-7f3e-42b1-a342-cc82bc424972", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5475a04-b9f6-4d8f-a41a-783023e995a2", "sighting_of_ref": "indicator--1009e6b2-0eed-41f4-ab0a-1bd8bb373b24", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdd9d49-ea18-42dc-9fd1-3616092696ec", "sighting_of_ref": "indicator--0aedfe6e-5be3-4cb5-81fe-e17869e12790", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff0ddcd-6156-450e-b385-347ddfa6b1d5", "sighting_of_ref": "indicator--599b0962-6ca8-4f42-9067-387e5a1d1e3f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d3419c-35a0-45e5-9f6a-d96dd34e943a", "sighting_of_ref": "indicator--599b0962-6ca8-4f42-9067-387e5a1d1e3f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d296a4da-3b1f-43a0-bac7-c70d5923d271", "sighting_of_ref": "indicator--599b0962-6ca8-4f42-9067-387e5a1d1e3f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a5819a-d791-41b7-a29e-d226133c1f62", "sighting_of_ref": "indicator--c0338e4c-7a74-4bbc-808b-86965566afe6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11504e0a-3b8d-4308-a142-b40028b4466d", "sighting_of_ref": "indicator--c0338e4c-7a74-4bbc-808b-86965566afe6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db03a721-992c-49f6-b444-72a54e637727", "sighting_of_ref": "indicator--c0338e4c-7a74-4bbc-808b-86965566afe6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4d715d-a3b7-47c5-b039-63f8c7dc71f1", "sighting_of_ref": "indicator--2efc8432-cdfd-4ecd-9a34-48a04ec5b573", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a5fe8e-23c6-4516-b23d-f8aafd3ca9b3", "sighting_of_ref": "indicator--2efc8432-cdfd-4ecd-9a34-48a04ec5b573", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0bec50-2ed2-417d-a532-b012ada5f461", "sighting_of_ref": "indicator--2efc8432-cdfd-4ecd-9a34-48a04ec5b573", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e1919f-a6ed-471b-81f5-cd9508a22795", "sighting_of_ref": "indicator--319e90e8-99d1-4218-9e70-5df8cff53310", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b25a8e6-d7a8-4477-b81e-450e6f298b40", "sighting_of_ref": "indicator--319e90e8-99d1-4218-9e70-5df8cff53310", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edab4c39-3b03-48dc-8a57-4b69530dda97", "sighting_of_ref": "indicator--319e90e8-99d1-4218-9e70-5df8cff53310", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d56a421-2298-4fda-a1ae-38bdae88b25d", "sighting_of_ref": "indicator--2eb6bf60-3e6b-4b03-a2db-1386704ace44", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2566d2c1-8bb8-468d-927d-80af6d3f6d19", "sighting_of_ref": "indicator--51463fb0-e878-44b3-a09d-c08129092cb5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d706c6ce-74ce-47da-b5b4-6a6c5e77747c", "sighting_of_ref": "indicator--51463fb0-e878-44b3-a09d-c08129092cb5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e22765-0eaf-4d34-94d6-2ff4f898163b", "sighting_of_ref": "indicator--d6d81d2b-e4b7-48a4-80b1-8cf0017a5689", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb16cdcc-3133-46b1-b3b7-b52fd9c74707", "sighting_of_ref": "indicator--bd260765-176b-4de1-a459-4ebd884aa34e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54643849-a481-4ed3-8831-eac8bef7157f", "sighting_of_ref": "indicator--bd260765-176b-4de1-a459-4ebd884aa34e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1521e6-9de6-4f9d-8158-094fa0bcd7ae", "sighting_of_ref": "indicator--dd8181b0-c20a-4eb6-8ce6-234c2b42fa46", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01f69cb-edbf-4318-9e0a-24dd25ce2b2f", "sighting_of_ref": "indicator--1833e2b1-6459-42ac-9a72-23dde3749f8c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f130da14-7b0f-4ac1-9646-67e02c3df5b1", "sighting_of_ref": "indicator--99a8eed7-d290-4c05-a0ed-20009d9890dd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538f11ac-1dc7-4a90-aed3-349028908c80", "sighting_of_ref": "indicator--99a8eed7-d290-4c05-a0ed-20009d9890dd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e58fbe6-a4d8-4991-964b-46c927165903", "sighting_of_ref": "indicator--99a8eed7-d290-4c05-a0ed-20009d9890dd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0df052-f75d-4bb4-aa32-e7fdefaebdd7", "sighting_of_ref": "indicator--1a7997ed-d5a5-41da-91bf-36ee979b2b29", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436ba559-d6f4-4fb1-af94-c7f6cb569d87", "sighting_of_ref": "indicator--f0511974-86d3-4564-8f5f-3e99fb895e04", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e96586f-9564-40c1-9a12-9834c93c1b3b", "sighting_of_ref": "indicator--00a3d829-27af-4af2-bbf1-cc8661ade8a9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466d3c06-44d1-4c2a-8e29-6809c9e07d02", "sighting_of_ref": "indicator--a51abcee-4419-4cde-846b-7e70c1ab85c6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626aa2c9-7f78-4834-92b1-46bc992f65a0", "sighting_of_ref": "indicator--2baf79c0-1174-43d9-8225-c96f7cf2533d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9698522f-df32-4494-a988-8ce1f3460641", "sighting_of_ref": "indicator--2baf79c0-1174-43d9-8225-c96f7cf2533d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2748749-fe4a-452a-a3c6-63f628e8134e", "sighting_of_ref": "indicator--2baf79c0-1174-43d9-8225-c96f7cf2533d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35678da4-fa96-4d5c-95f1-eb7fec25cc09", "sighting_of_ref": "indicator--771bc866-2cfc-4085-b71a-52e1f1452e6c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512fec8b-fe8d-4b98-ba15-128131a0674c", "sighting_of_ref": "indicator--771bc866-2cfc-4085-b71a-52e1f1452e6c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e451bcb7-4f90-42bb-b737-3d12fe5f117d", "sighting_of_ref": "indicator--d8cea6e2-281d-4a37-a423-aeceedb523fc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3de93fd-49a3-4644-a465-451f80df9d96", "sighting_of_ref": "indicator--cf46a27e-8644-41f0-8cc2-34884e2d548f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c21450d-0cd4-4ca2-a395-d8990407eb23", "sighting_of_ref": "indicator--cf46a27e-8644-41f0-8cc2-34884e2d548f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6788ad-a084-4ae2-923a-da4ca4819beb", "sighting_of_ref": "indicator--cf46a27e-8644-41f0-8cc2-34884e2d548f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654cde55-1a59-4579-867b-b66f1f9ffbfe", "sighting_of_ref": "indicator--1bafa5dd-2649-47f3-848a-045e7ad0d8fa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315778e2-02e1-4ccd-bc46-c243e7789305", "sighting_of_ref": "indicator--2f5adc7c-7a31-45bb-a6f9-d5c4209a560f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd343302-a805-4157-8eac-be07ac3d8e3f", "sighting_of_ref": "indicator--9e04a496-dc97-4ad9-858c-bd3d8bff4e57", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e717ba80-b881-46e3-891b-450ccb7da948", "sighting_of_ref": "indicator--6584a1ad-3060-4190-abbd-e23837397a64", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b260ff3-63fd-4e98-b06c-6470244cf045", "sighting_of_ref": "indicator--e20b702d-8b3f-4949-a3fe-5ea6464063e8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d27412-50a5-481a-a895-31de28a2c281", "sighting_of_ref": "indicator--b070d13b-05a6-4014-80c9-317c668754b5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e75236-ef99-4783-a741-4a35ed1ee9e8", "sighting_of_ref": "indicator--cce0df60-c4af-42d3-b04e-2f003de3e921", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97a9309-c4c6-4334-be3d-680674b49dbc", "sighting_of_ref": "indicator--ea2506d8-e0b2-4ed1-be59-7c26c1956d05", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35d4ac8-4519-4121-9a55-98a049cdc1cd", "sighting_of_ref": "indicator--4fbba399-3b6c-4fbd-97fd-926964644e74", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7697946a-8b71-4acb-a097-f843c355b1a1", "sighting_of_ref": "indicator--0eaf07cf-81ad-42e3-b8e4-5691978bc880", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2133c7-645d-40e9-9429-d78b13f45a1d", "sighting_of_ref": "indicator--6fb3c05c-48d1-4a14-9f1a-42eae73316cc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b9af22-8e19-44ec-b89f-00217d32b3b7", "sighting_of_ref": "indicator--9dfa000e-cb36-49d3-884e-0216976d7a5f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fd874f-3414-4310-8838-7e381ae63feb", "sighting_of_ref": "indicator--ddc2dc1a-b8d6-47b4-aa47-84a4e1629d45", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0804ec-609c-4b97-9a34-89990dd08518", "sighting_of_ref": "indicator--de5aca21-9b5f-44e5-aedb-f3637e722637", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0cf660-189d-4216-a81e-a21c469db805", "sighting_of_ref": "indicator--87d214bc-de19-4dfb-a7f0-329a137da42f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c48567-5437-442f-915c-a382c3739ad1", "sighting_of_ref": "indicator--34540d71-55ad-4c66-afbd-8b2d1722f8eb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af6be98-f4e2-4bae-946c-5d256e4aee51", "sighting_of_ref": "indicator--3b5764ed-8e2f-4582-9cd2-a5c16db19c73", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73325b7b-5713-47ef-a4be-a2eb838c0e17", "sighting_of_ref": "indicator--cec62ccd-2e71-47f6-bfd6-729c7be47288", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8798aca-f7aa-4eeb-92d4-76e156d4f1ac", "sighting_of_ref": "indicator--55bc0c92-ccec-43ec-8704-bf0e8b3a2ec7", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67a3f62-5a31-4286-b712-fc8bcc9770e4", "sighting_of_ref": "indicator--ffc99b74-bdad-455a-b9e3-f9f1326c289a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622ee192-2604-410e-af84-d0c1ced2ed48", "sighting_of_ref": "indicator--332934ea-a796-43c4-b27d-bafdc1add710", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70364cbd-ef73-43fb-b236-87738c6b5a85", "sighting_of_ref": "indicator--53c21876-fb64-46b0-ad43-9eff1986b091", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c577c9ed-c3f2-4f11-9ae5-38e968b776a6", "sighting_of_ref": "indicator--abffe604-e677-40a8-807d-6f1828d92a6a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca58fe7-1d1c-4c4d-9be6-5d15083a99af", "sighting_of_ref": "indicator--1626e3b7-ae7c-41d0-96bc-02721c9c641d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70a0748-762b-4272-a848-00c3673c3667", "sighting_of_ref": "indicator--1626e3b7-ae7c-41d0-96bc-02721c9c641d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46738c17-7a14-42bd-b9df-4d2ba36a631a", "sighting_of_ref": "indicator--1626e3b7-ae7c-41d0-96bc-02721c9c641d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a38dd9-a34a-4407-aff1-05dd629a5f1d", "sighting_of_ref": "indicator--e273ddaf-8296-44c8-a793-2f2c35c068ce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa439e1b-eb2f-4886-99fc-d0a652b9e3e4", "sighting_of_ref": "indicator--296b360d-fb74-48a9-b646-fd5d664a8a63", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b96c544-90a1-49d4-821f-aa76d65b8666", "sighting_of_ref": "indicator--9a9711bc-b402-4ba1-9db5-8f86371c2bf3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa3ed41-dd32-407c-8fa7-904f77eaabe6", "sighting_of_ref": "indicator--f2f941ba-d0ab-4630-98a2-25d548635fca", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d757c6da-94fe-4f45-9d51-df7a11492c90", "sighting_of_ref": "indicator--4e8f943d-1317-4605-b2d3-3b9f59ec7ea3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb68795-d7b2-48b9-97bb-7304c62a782a", "sighting_of_ref": "indicator--96dfc251-3360-4dd3-803f-224c1eb27b59", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b18713a-3ff5-47ec-b733-fcf89f2d1232", "sighting_of_ref": "indicator--96dfc251-3360-4dd3-803f-224c1eb27b59", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68275464-e889-42d9-8936-1442a100fbae", "sighting_of_ref": "indicator--96dfc251-3360-4dd3-803f-224c1eb27b59", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e43f17c-48ec-4756-a8c7-f429c4aa91ae", "sighting_of_ref": "indicator--052ae3a1-1adf-40c6-8811-e9c7853ab40b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f7c664-184d-415c-879c-d6e1324aa448", "sighting_of_ref": "indicator--d541101b-d12e-49b4-84aa-d6881a36ae61", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3cd57ca-41ba-465a-b112-42ef05ce60dc", "sighting_of_ref": "indicator--aedb66be-5b76-401e-acb4-f93074fd11fc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef4c60e-62dc-452b-9a13-260930877381", "sighting_of_ref": "indicator--aedb66be-5b76-401e-acb4-f93074fd11fc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d73317-94f5-41c5-84a6-9f1d27263c4c", "sighting_of_ref": "indicator--aedb66be-5b76-401e-acb4-f93074fd11fc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0c8c5b-3e8c-46e1-97c5-c0c7b6214b82", "sighting_of_ref": "indicator--277a414d-0ab9-4656-af2e-6d5494048184", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8eb56af-4303-42d3-8d44-7c12e69a1d49", "sighting_of_ref": "indicator--20411edf-5fbc-4291-a5ed-7f747f2140dd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2740216-77b6-4027-877f-5744bc999f73", "sighting_of_ref": "indicator--f3e21796-5451-438a-84fd-91cc713d888e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d09148-5ef7-4f7b-a4d9-6c93bd59adfb", "sighting_of_ref": "indicator--cedaaa4f-7a46-448e-bf10-66445cc6c3c8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54552a5-41d1-421a-8573-5cc56c0ec9b1", "sighting_of_ref": "indicator--e95f0085-7b19-4ea6-a9a5-761d6e45b891", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1ae8d1-90e0-4621-9978-5ffef43d816b", "sighting_of_ref": "indicator--a53a0b70-63dc-46b2-a3d2-9ae38c8cae10", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865dceb3-1d31-4ed7-9095-50e50e2b9f34", "sighting_of_ref": "indicator--a53a0b70-63dc-46b2-a3d2-9ae38c8cae10", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f208bc-390e-453b-8319-2fccc997b404", "sighting_of_ref": "indicator--a53a0b70-63dc-46b2-a3d2-9ae38c8cae10", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb62d236-ec93-4d6b-89c6-356462d54ffe", "sighting_of_ref": "indicator--6fad1afc-b1bc-46f9-bc6f-0dfcc03083ea", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15b5c60-7500-453e-97c0-4dd68dc08e5f", "sighting_of_ref": "indicator--08827aca-e1af-4222-b317-e8b1b0c3fe44", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6d6250-3fe0-480c-8da7-a33224ac6a12", "sighting_of_ref": "indicator--e65d1d68-ae18-4c8b-9fba-078d01288777", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70482dc5-3d87-4f36-be80-e1a1abefda2f", "sighting_of_ref": "indicator--adb8200d-cf0f-42dc-9f25-59b18efd8d69", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcede543-8fea-4706-9818-7bdca9fc9ac5", "sighting_of_ref": "indicator--2a9b685c-1253-4960-b987-4300bb637de4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30727848-9aa6-4eb3-8cf0-8ca5e9a22d08", "sighting_of_ref": "indicator--123505f6-8d4e-4ddf-9430-b6e77e169d48", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4104618a-c73a-422c-8e43-92a08a751b33", "sighting_of_ref": "indicator--32a1c208-faa6-41f6-b29a-12fdca4d4030", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18ca37a-4505-44f0-b85e-33fbe43d958b", "sighting_of_ref": "indicator--32a1c208-faa6-41f6-b29a-12fdca4d4030", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d781e323-f072-42eb-9cb0-9110085141d1", "sighting_of_ref": "indicator--5c1845bf-edce-48b2-ab6d-8186c3f88ec7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89457c8-d384-46cd-bbd9-d35b7edf5146", "sighting_of_ref": "indicator--02243780-0f3a-43f4-8ae9-07fc69b28ffe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fcea9a-45ed-4170-9727-c6978aa09ca1", "sighting_of_ref": "indicator--628cdf89-8ac3-4629-a096-70b154c81767", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259b2924-a7db-4157-98f0-b6bdeb78d972", "sighting_of_ref": "indicator--5fa3933c-bf01-4ff9-9862-0e66337ae081", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc63a4d2-5890-479e-92f8-56c9f5e794b4", "sighting_of_ref": "indicator--90d6e895-9259-4a77-8817-1302dd72c88e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71bfbb4-f792-46fc-b166-08eae2316d43", "sighting_of_ref": "indicator--da78ea70-5c1d-41ce-b4b1-6a701771aea9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d60f52e-c85c-4c11-972e-502ced5a0277", "sighting_of_ref": "indicator--084aa53c-c448-464d-a7d6-5442afc31150", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c066d794-224d-48d3-b944-ea2fbcd54edc", "sighting_of_ref": "indicator--0c44ff25-561a-4992-aecf-9aae9431f7e2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a934efea-c11b-4d96-91fe-a5c043806596", "sighting_of_ref": "indicator--045915d7-b53c-44eb-92d2-4f663fbcc012", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26230fd0-deb9-4d49-9f6f-1a1eef8e17b8", "sighting_of_ref": "indicator--9d5caafc-cad4-4568-88a7-23643f6951db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058eb88b-b8d1-4306-beb9-28378cf29100", "sighting_of_ref": "indicator--cb9f32b4-2e5a-4f97-911a-a2d993bb237b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d1da87-3f50-4792-9200-99905c90c2a4", "sighting_of_ref": "indicator--9ef0fd4e-a4be-403d-84b2-054489615aad", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0025f49f-902d-4b59-bc54-b077561138b8", "sighting_of_ref": "indicator--9ef0fd4e-a4be-403d-84b2-054489615aad", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c859cc-efc1-4a20-b04d-0ebe214c7095", "sighting_of_ref": "indicator--93491693-2bfe-4fae-8c3d-509dba412f2c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f709df-ee86-4b15-bc6e-284c3a69148b", "sighting_of_ref": "indicator--df7b929b-c4f5-459c-822f-f13453e37d81", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18554361-782a-4e89-b8a8-f910b22b5fb1", "sighting_of_ref": "indicator--b283ca45-7696-428d-b1a3-01b504026f29", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4751dfa7-d9a2-4ed1-b0e9-bd9f4c654a82", "sighting_of_ref": "indicator--b283ca45-7696-428d-b1a3-01b504026f29", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31e73e4-7729-42ba-b8dd-052b094751cd", "sighting_of_ref": "indicator--d873f0ec-fad4-450f-ad77-ba8af52d1111", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c92b7c-2a53-4ec9-8eed-43b363d1bb80", "sighting_of_ref": "indicator--29b1a4f5-433b-4553-9f79-8ceaa9f94f04", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba8769e-97ce-4ebf-b0d9-16fc309b615b", "sighting_of_ref": "indicator--fd2d6d51-5cbc-4cbd-8b04-d0bc3217645d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4994c1-e086-476e-a68d-88704f47c7bb", "sighting_of_ref": "indicator--1a6e6dde-5f71-4d89-888a-74b9a98fe26e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062c90fc-c7a4-473d-94f5-629426158360", "sighting_of_ref": "indicator--18eeb7bd-9e33-437d-a7d9-74f5bede1adf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165f23c0-c2b4-4e4b-bd11-61268a85f5b8", "sighting_of_ref": "indicator--96546ea6-ef65-4985-a395-abacccc6cc31", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed94a0f-0273-42e3-b3f2-705330fe8e45", "sighting_of_ref": "indicator--96546ea6-ef65-4985-a395-abacccc6cc31", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d52256c-d876-4408-abd2-a0e426bfeb77", "sighting_of_ref": "indicator--96546ea6-ef65-4985-a395-abacccc6cc31", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13103f65-2adc-45a9-9ba7-d1519a728057", "sighting_of_ref": "indicator--fde1a190-6b58-4133-b0c7-3d99d9ddfa68", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f0d9ba-3607-4ad5-90a5-416a18162431", "sighting_of_ref": "indicator--fde1a190-6b58-4133-b0c7-3d99d9ddfa68", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf435016-b155-4767-9e59-35e305b2ddf5", "sighting_of_ref": "indicator--bc3188ab-e415-4800-82f2-cace64145d82", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78098ccd-ad2d-497f-8260-f3c4c2f1b25f", "sighting_of_ref": "indicator--bc3188ab-e415-4800-82f2-cace64145d82", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168fc9d0-c0ef-4211-b762-1b3f7f4afacb", "sighting_of_ref": "indicator--083da6a2-8fc4-4e09-bc33-a6f718a235af", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af52569d-8796-4ff8-b4a6-3023b07ce523", "sighting_of_ref": "indicator--b2e381a7-6ad2-4b0b-8423-37d869038910", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eac14ec-cf6e-4830-8407-5eb44c6b7074", "sighting_of_ref": "indicator--144d5c9f-dd21-4dad-9e63-19aaf36f0d96", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405c75fa-1574-4a08-80ff-db4ad2a6e4f2", "sighting_of_ref": "indicator--144d5c9f-dd21-4dad-9e63-19aaf36f0d96", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d204f51-5856-4f16-a242-0f3cd98069ea", "sighting_of_ref": "indicator--1f6e0cb8-2d65-483d-8499-22f5865f767d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5855c40-c66a-4afd-837b-eaeaed6b1fbf", "sighting_of_ref": "indicator--9a28ad2a-01b2-4697-8546-3a0be083d4ad", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b18f17-3690-48a8-981b-d9d8339077a4", "sighting_of_ref": "indicator--9a28ad2a-01b2-4697-8546-3a0be083d4ad", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e44358-156a-4587-b58f-e38253409e24", "sighting_of_ref": "indicator--228f02ca-e558-4f49-b082-1e59f89ddc3c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126da539-11da-4e23-8c4e-9c4d45b35282", "sighting_of_ref": "indicator--bf6aeb31-c46f-491c-9b9e-1106f714a33f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d238a433-cdd3-4acd-8a2c-51380211df22", "sighting_of_ref": "indicator--a8891257-a965-4ffe-8911-4676814923d1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9335e01-ba0f-4332-90b9-6c2577eaa86a", "sighting_of_ref": "indicator--7dd39ede-300b-4ca5-b935-daf41c1259d3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cdf68c6-bf76-4910-b12a-a7a28b88c81c", "sighting_of_ref": "indicator--a159acd1-f170-4e05-9c54-3c40815ee5bd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96577357-68a3-4afc-ac47-1f280183478f", "sighting_of_ref": "indicator--8ec6cbf1-4b89-4de2-a36d-7ff4f41b16be", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f62f18-fc5e-47b9-b159-a784af879edc", "sighting_of_ref": "indicator--5d3cf98f-c2d5-4da3-a2c0-6d32ef850527", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e13264b-740c-4c65-beb4-466b772c495a", "sighting_of_ref": "indicator--a6071d2a-8691-4dce-9a27-91d4fd4e5241", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63118a45-3ecd-4190-b0c2-d9671c0c65ac", "sighting_of_ref": "indicator--69d1f0c0-4461-4531-9172-49e6de78413b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0df869-9101-4fa3-85de-e9f86fe8585e", "sighting_of_ref": "indicator--9c437065-aecf-47aa-a037-5db0573d801e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5801fc6-9edd-4157-8be9-194dd63e3761", "sighting_of_ref": "indicator--9c437065-aecf-47aa-a037-5db0573d801e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df127e1d-b0a8-47eb-ab0a-498d3439a5d3", "sighting_of_ref": "indicator--46a9d405-4cdf-47eb-9839-9abe5429aa6b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06109c2c-2273-4f5d-a766-c11035e82321", "sighting_of_ref": "indicator--46a9d405-4cdf-47eb-9839-9abe5429aa6b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ed4306-66f5-445f-819c-2a2f358bec4d", "sighting_of_ref": "indicator--a93f3224-6503-41a3-a83a-6ff32176f182", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1043a66d-069e-48d6-8f54-adc404332121", "sighting_of_ref": "indicator--bd3e7c81-bb1a-42d9-8c1a-59f8931fbce7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce07072-5d63-4b19-ac18-57299c19c873", "sighting_of_ref": "indicator--bd3e7c81-bb1a-42d9-8c1a-59f8931fbce7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4235f589-4999-4cdf-a99b-1afb9be521f3", "sighting_of_ref": "indicator--bd3e7c81-bb1a-42d9-8c1a-59f8931fbce7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32ee83e-5542-4a9a-aed0-d88f04789d15", "sighting_of_ref": "indicator--be648e8b-20d1-4162-b1b9-7aa931750141", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba5a295-bfd5-48f9-8fca-5e028d62d285", "sighting_of_ref": "indicator--be648e8b-20d1-4162-b1b9-7aa931750141", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b35bbd-ba7f-46af-9c92-3e6fb26605e4", "sighting_of_ref": "indicator--7b49dfc2-677c-4059-92c3-4fd2fcc4599b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6191d74a-6ab3-4e3c-9879-0d7a79b07d97", "sighting_of_ref": "indicator--a13502f5-4a13-497c-a5ec-4a67baa09e13", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9abcef9-78a8-4f99-aaa1-c052556f7625", "sighting_of_ref": "indicator--f02474a3-2001-441d-b1b5-49b30e2598b7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b31b03-32ae-4b3a-826f-92972a6cc34f", "sighting_of_ref": "indicator--fd03cdd1-fc24-4f30-b7c0-20ca2403aed5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a67fe67-b9a1-487f-a984-fa547016b581", "sighting_of_ref": "indicator--5911d455-d0b1-47d6-9b0e-f289366ffa2a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5a43f3-d2a4-49f7-8331-a2aff32efd28", "sighting_of_ref": "indicator--5911d455-d0b1-47d6-9b0e-f289366ffa2a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d4b6d6-c27c-44cf-a59f-3e5b6f4d37fd", "sighting_of_ref": "indicator--a379a6de-e5b4-4c08-ad61-b94f6c632359", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6801551f-d86b-4747-8fb7-d352572adcee", "sighting_of_ref": "indicator--a51b5857-0b84-4151-b8ec-8e6ed012ee18", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2fbc52-8115-4bbf-9fcb-c2c6d4aae0f7", "sighting_of_ref": "indicator--a51b5857-0b84-4151-b8ec-8e6ed012ee18", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18c75f0-689e-42f4-a504-c1c447ec66ad", "sighting_of_ref": "indicator--5d56ce49-9a2a-43f9-9cc1-5e3147d42981", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1905ff-17be-4ca3-8000-6bf6943cbd76", "sighting_of_ref": "indicator--71f3cda8-6a69-4920-8823-61d7ea911ce6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21aae887-9d42-4ca3-91b7-8293cb985078", "sighting_of_ref": "indicator--61ea0518-33d4-456f-bbe6-0535d3cd0ec9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6c1362-c4cd-4013-8df7-0b48adda7152", "sighting_of_ref": "indicator--578e5b6d-30cc-4eec-bff5-572b1af35821", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f08544-d569-47f8-8b86-c7face8db6fe", "sighting_of_ref": "indicator--929ea7fc-e65c-46a9-8e6a-b364564f5216", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86af966-c2c9-4889-a624-b047432fa52d", "sighting_of_ref": "indicator--4f7da2bf-bc38-4bc9-85f4-d5a97cc47f6a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81cac9e3-1901-4c53-bcf6-27dacff713c6", "sighting_of_ref": "indicator--22298b60-3c51-4c36-99a1-2f497fd39c1e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ac0351-ba8a-4302-ae07-b4e78c741673", "sighting_of_ref": "indicator--04ae3256-007a-4efe-9eea-5281d27dc761", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8fe541-0db3-4b27-879a-13f0ceaf7b42", "sighting_of_ref": "indicator--04ae3256-007a-4efe-9eea-5281d27dc761", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b4bd34-e344-4c81-84c6-135ecc9a587d", "sighting_of_ref": "indicator--7a2e3000-fe94-444e-b616-e68171eb291e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77a1ee2-a266-42fb-a18e-5ac5a26e947a", "sighting_of_ref": "indicator--2e22a8e4-ffc9-4f62-bd40-fd6b11361564", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39431f3-714f-45b8-a7de-06b395163836", "sighting_of_ref": "indicator--2e22a8e4-ffc9-4f62-bd40-fd6b11361564", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8665af6-f6e4-4db3-85c4-8404f92a3674", "sighting_of_ref": "indicator--2ec16411-ecd9-4918-bcfd-82f43be11e11", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff360956-a279-4053-ab17-18ced0b6d015", "sighting_of_ref": "indicator--2ec16411-ecd9-4918-bcfd-82f43be11e11", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d68145b-b7f6-4344-92b5-d73a7d93c555", "sighting_of_ref": "indicator--6fb69c92-2d8e-4e19-a1ba-6c3747c7912f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f15157-904d-42aa-a6ab-34fbe7944b2d", "sighting_of_ref": "indicator--89ee262d-514d-485e-b446-ae1ec00e9fa7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030f5a3f-8f9d-4778-9c9f-9e2e98cd50d4", "sighting_of_ref": "indicator--7687cb34-0dbe-4b5d-ae7f-9fbb19ec98f8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89dc336f-8897-461b-9a16-cbe30276ecdf", "sighting_of_ref": "indicator--7687cb34-0dbe-4b5d-ae7f-9fbb19ec98f8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769aaf50-dee6-47ef-ae13-b9318335b181", "sighting_of_ref": "indicator--7687cb34-0dbe-4b5d-ae7f-9fbb19ec98f8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9212a88-c007-4aab-820a-b11a2de396a1", "sighting_of_ref": "indicator--b0bff521-6dcb-45d3-a781-3f78655faa8c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae0f322-c897-4143-aeab-b802f50671fc", "sighting_of_ref": "indicator--b0bff521-6dcb-45d3-a781-3f78655faa8c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c945a21d-4741-400b-8b9b-87cd5da45130", "sighting_of_ref": "indicator--b0bff521-6dcb-45d3-a781-3f78655faa8c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4affff05-df43-4beb-b8e9-76cd1733a072", "sighting_of_ref": "indicator--73cafe6c-5805-49db-940c-fcaa6ab2019a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2434655-d75d-44e7-b989-cb550ca601f5", "sighting_of_ref": "indicator--73cafe6c-5805-49db-940c-fcaa6ab2019a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907abbd5-48b6-4211-b878-5493a485fca6", "sighting_of_ref": "indicator--1efb59ad-1e12-4234-a371-29012a985951", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d62076-e12f-4cd2-9bfd-9bc8e422fbdb", "sighting_of_ref": "indicator--1efb59ad-1e12-4234-a371-29012a985951", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d535e783-90db-4929-b3af-8475b034a5d0", "sighting_of_ref": "indicator--1efb59ad-1e12-4234-a371-29012a985951", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd58e2e-42d4-495b-9740-b402e73a0723", "sighting_of_ref": "indicator--c02e7b71-7143-4f51-a317-ff0df207a1eb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0eb214d-338e-4986-b08a-ad9f068a2d44", "sighting_of_ref": "indicator--a109ac76-4f99-4a82-b5fb-238f283816c7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c69e5ed-32dc-4844-98c3-0f849b49d396", "sighting_of_ref": "indicator--a109ac76-4f99-4a82-b5fb-238f283816c7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856a3bde-109c-46d7-9923-b5a2122e0269", "sighting_of_ref": "indicator--a109ac76-4f99-4a82-b5fb-238f283816c7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9f076c-5ed5-477c-98fa-724eab307201", "sighting_of_ref": "indicator--2b6ea216-152b-46ce-a276-57fae3fb69eb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f75ba38-d684-4305-97be-77646e67f6b2", "sighting_of_ref": "indicator--2b6ea216-152b-46ce-a276-57fae3fb69eb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96acae70-652c-46ed-97bf-0a80ed5d6b9f", "sighting_of_ref": "indicator--be05a9ad-e528-441d-942a-e1be502a49c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba9edbd-1404-4d48-be07-0be32cd96327", "sighting_of_ref": "indicator--d5b0e002-2e0e-4ae4-8cfd-8432cf0a31f7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa099eaf-0f74-45cf-b3cb-d8a3594ca08d", "sighting_of_ref": "indicator--716c0ee4-40e2-40fd-9ccd-7eaadb05175f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c1cb2c-57da-417c-9e93-703225a2baa1", "sighting_of_ref": "indicator--716c0ee4-40e2-40fd-9ccd-7eaadb05175f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369e3bee-c26e-4b96-9c0a-7f847c70ba4f", "sighting_of_ref": "indicator--09fcadbd-f069-4b32-ab2f-a39f5ab77e21", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e2368d-6b70-4284-a6fe-155af3460c0a", "sighting_of_ref": "indicator--09fcadbd-f069-4b32-ab2f-a39f5ab77e21", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1bf1cb-bba2-46f0-b29e-6b2b369ec4a6", "sighting_of_ref": "indicator--2d1e0d5f-9429-4272-aaf6-14a14ece343e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18767d0-b004-4003-8db8-a41c6ad00281", "sighting_of_ref": "indicator--c3569229-eb89-484b-a068-96eb970b89e3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f58e08-a43b-48a8-ae60-6c1842060716", "sighting_of_ref": "indicator--607e6da4-0e10-44b1-9769-7d5d683f3ac0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57691f7-f02e-40a4-9e42-57215b6b20f0", "sighting_of_ref": "indicator--607e6da4-0e10-44b1-9769-7d5d683f3ac0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c65f215-b9a1-48e4-b105-7ef541fd48d5", "sighting_of_ref": "indicator--607e6da4-0e10-44b1-9769-7d5d683f3ac0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4651c2-7df6-46a2-87cd-692e993b0358", "sighting_of_ref": "indicator--e7a89ff5-c5ea-44a6-a15c-df272148fc6c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b48929f-ac79-4afc-91de-13ebae17e7ca", "sighting_of_ref": "indicator--0160cc52-bbbe-496c-b740-55ef025680db", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a08fd0-8662-41ed-b404-6a73142e10b0", "sighting_of_ref": "indicator--0160cc52-bbbe-496c-b740-55ef025680db", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71307889-42b1-44ec-a308-a502177d106d", "sighting_of_ref": "indicator--507a3c7b-5a2e-4b8b-a573-a2ef12bb2763", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c686c28-b88d-48fa-94ad-799d4c970bbd", "sighting_of_ref": "indicator--8e83a98c-0bdf-4488-94ad-0e79303a532e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9433dc6f-c820-4f97-b9ff-0b84640f39c5", "sighting_of_ref": "indicator--8e83a98c-0bdf-4488-94ad-0e79303a532e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8bc299-47c6-4aeb-9f17-b02bdc9dbaec", "sighting_of_ref": "indicator--ae1877a1-1171-400b-a0de-d779edd54bc1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e68559-a1ef-4caf-823e-dff039305e56", "sighting_of_ref": "indicator--ae1877a1-1171-400b-a0de-d779edd54bc1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059173e2-0054-462a-9e1d-8bf0dd869ec7", "sighting_of_ref": "indicator--30f7d285-3e72-4744-b4af-6e157bd26b06", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ef94c1-d900-4967-8030-d708e3979912", "sighting_of_ref": "indicator--d99d03ce-050c-4837-9ed3-f0ed7a162b1b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b15991-a90f-4e30-9543-bb5eefbe70d6", "sighting_of_ref": "indicator--d99d03ce-050c-4837-9ed3-f0ed7a162b1b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba95d14-bc95-44e9-b4ad-47029807d07e", "sighting_of_ref": "indicator--b5d4727f-be13-4e27-ade4-852af79b8bcc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe427de-d9e2-4b9c-a46a-e5c579656477", "sighting_of_ref": "indicator--b5d4727f-be13-4e27-ade4-852af79b8bcc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b844885-9532-4c49-af54-07d6390e7c20", "sighting_of_ref": "indicator--8cdbe4ba-a377-41e6-b04d-44d46e29867f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fae2d46-5fcc-471d-98af-d2e4e375213d", "sighting_of_ref": "indicator--8cdbe4ba-a377-41e6-b04d-44d46e29867f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d23659d-795f-4fe8-bc85-4db5eb399f76", "sighting_of_ref": "indicator--52688796-0740-4d30-9a39-c7d650056435", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b88136-cc63-456b-ac5d-7b90d3dbe9c3", "sighting_of_ref": "indicator--52688796-0740-4d30-9a39-c7d650056435", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa2e0f6-5071-432d-ba95-23f827ffc3cc", "sighting_of_ref": "indicator--52688796-0740-4d30-9a39-c7d650056435", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ca9ed0-5615-4bd5-afa0-c042e963f42a", "sighting_of_ref": "indicator--8c73fdcf-3a52-4dc6-b074-b774021fad02", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549aef3e-ad58-4068-af21-b28937e59a4e", "sighting_of_ref": "indicator--8c73fdcf-3a52-4dc6-b074-b774021fad02", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3867b9c0-e0fe-414e-a1ab-0f85b6ccc4f6", "sighting_of_ref": "indicator--c86a4b6d-81eb-4da9-940e-e4df74ed9f7d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059e137e-a98e-46e9-b5d1-a9e292d00c8d", "sighting_of_ref": "indicator--c86a4b6d-81eb-4da9-940e-e4df74ed9f7d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdd430f-3753-4679-950e-6166759f1878", "sighting_of_ref": "indicator--af0859a9-28f6-4769-904e-88833b55150d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1520a167-d889-4326-832f-9e75a9cafbcc", "sighting_of_ref": "indicator--af0859a9-28f6-4769-904e-88833b55150d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f872821c-2ab2-4961-8c26-7c8af49663cf", "sighting_of_ref": "indicator--76362a67-52a4-49df-a848-5b90df427e73", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7567a9a-ec3b-4f3e-962c-b4ad7a3fb311", "sighting_of_ref": "indicator--76362a67-52a4-49df-a848-5b90df427e73", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0de73bc-6999-4545-a197-c8f75e77d144", "sighting_of_ref": "indicator--492122b7-1461-4896-9b05-3aa412e0c783", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a18e05-feb0-4990-9dbe-a99c93e999f8", "sighting_of_ref": "indicator--ba110675-a7af-49f0-89da-04874b275de4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a77485-5c23-4f8c-b174-052ac0406ba8", "sighting_of_ref": "indicator--ba110675-a7af-49f0-89da-04874b275de4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf017c09-0d3f-447c-adba-ccd5753dd82f", "sighting_of_ref": "indicator--ba110675-a7af-49f0-89da-04874b275de4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66411bec-c3b8-4b73-80fd-dd61874f3d38", "sighting_of_ref": "indicator--5b4b2ea0-ecc1-4053-8ac7-1ba6913ce025", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0c56d2-32e6-4d98-9f0f-37323ef0eb41", "sighting_of_ref": "indicator--5b4b2ea0-ecc1-4053-8ac7-1ba6913ce025", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daeb9e28-4239-4c65-ad28-7af395037c87", "sighting_of_ref": "indicator--5b4b2ea0-ecc1-4053-8ac7-1ba6913ce025", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8da31f0-3a29-4f83-8e67-5f431c661159", "sighting_of_ref": "indicator--e02867f5-d831-49d7-b0a6-f6bdc9be2455", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb8b3f9-c383-4024-b79a-c9170c449fa1", "sighting_of_ref": "indicator--e02867f5-d831-49d7-b0a6-f6bdc9be2455", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f2f5c0-0dd6-4909-b4c9-0b4cd1a5eead", "sighting_of_ref": "indicator--f3998e21-eefc-4953-9b2f-177f6bea4845", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f983f9-70d8-4b4b-8913-a043fe4adfe3", "sighting_of_ref": "indicator--f3998e21-eefc-4953-9b2f-177f6bea4845", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a775fbe-b6d0-4d67-9d86-bc5940647aa1", "sighting_of_ref": "indicator--516167cf-df67-460c-92b7-309bdb356be6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d136ee22-0abe-4e08-bf24-9f2896d3a567", "sighting_of_ref": "indicator--516167cf-df67-460c-92b7-309bdb356be6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d51a64-61e8-43bf-8869-b989320ccf7e", "sighting_of_ref": "indicator--ed2bfd37-3c8a-4b2f-9512-cd8d4742959d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7880bb37-e363-4406-8aac-bda945118e1c", "sighting_of_ref": "indicator--ed2bfd37-3c8a-4b2f-9512-cd8d4742959d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259021fc-409c-46a9-a42a-b656d94fd619", "sighting_of_ref": "indicator--d701e5b1-815f-4dbf-942b-3dac12b966b7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86acaa9-168a-4713-b913-152390cafb91", "sighting_of_ref": "indicator--32ce1942-b972-4d04-ada4-7086b0b37f3e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535dfaf5-5498-4ce0-bee4-a6f2770ee205", "sighting_of_ref": "indicator--32ce1942-b972-4d04-ada4-7086b0b37f3e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7cb6b10-8a54-4513-a2fc-b17581384f77", "sighting_of_ref": "indicator--c1792988-6482-4aee-a80b-42be9f50b57a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f7019c-ab7f-4f78-a9a2-3b288eaae075", "sighting_of_ref": "indicator--c1792988-6482-4aee-a80b-42be9f50b57a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efedc0bd-475b-49cb-b757-ac0df4230d3a", "sighting_of_ref": "indicator--b5eb4af2-ebc8-48c0-8103-ff25cc7dd655", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9566544-418a-4818-b882-fe4993781ba2", "sighting_of_ref": "indicator--b5eb4af2-ebc8-48c0-8103-ff25cc7dd655", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0720ee7d-b9d2-4362-8339-0b0199f19fd7", "sighting_of_ref": "indicator--13fd4851-1169-4ee9-9c52-30175e11a01c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65be457-d55a-4ff6-be43-2d81dadf98b5", "sighting_of_ref": "indicator--13fd4851-1169-4ee9-9c52-30175e11a01c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1911c881-d5af-4eee-b327-5b499fb7328e", "sighting_of_ref": "indicator--4e830151-20ae-467a-b412-dccd39208b24", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2166e67-7033-43e5-8148-f41043b37ce1", "sighting_of_ref": "indicator--4e830151-20ae-467a-b412-dccd39208b24", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2f30c6-b586-4a8f-bde9-ef815a6ed5e4", "sighting_of_ref": "indicator--e0f5b253-fb69-499c-bc07-adf8d2b26003", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16109585-9b63-4a78-aad5-63fdfdaaa031", "sighting_of_ref": "indicator--47d611d2-966f-4f94-a97e-848ed744a152", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d96647-b977-41ef-aaaf-5374f02851d6", "sighting_of_ref": "indicator--e1e2796e-5baa-4b7f-aa5b-9e8610448b85", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc7b4e4-9d51-42d4-afba-cd04aeee624d", "sighting_of_ref": "indicator--e1e2796e-5baa-4b7f-aa5b-9e8610448b85", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1ef781-5edf-4c84-bd40-63538cc3f396", "sighting_of_ref": "indicator--96b83993-17be-4c28-8e65-94f24a955401", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156a4ad4-37cb-47c7-a157-a6c42b1fb44c", "sighting_of_ref": "indicator--96b83993-17be-4c28-8e65-94f24a955401", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e656e2-b90b-49d3-8afc-49a01679ada6", "sighting_of_ref": "indicator--48c83ebb-627d-4265-8f48-ea10fa9d01ce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5e0ea6-ffe1-44a2-9dbd-e1df659ca27d", "sighting_of_ref": "indicator--48c83ebb-627d-4265-8f48-ea10fa9d01ce", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d0c7b2-529b-419c-893d-da041b7794fd", "sighting_of_ref": "indicator--1398e658-0579-408f-9c37-5e967c284e09", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee883f3-a1bc-4019-928c-003fedec8427", "sighting_of_ref": "indicator--f6d85de4-ba5f-4526-b06a-81be1b6b24ae", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741866fd-3b7f-44ae-b2fd-c3fa52d89975", "sighting_of_ref": "indicator--9f845e1b-f1e7-4b6e-9a0d-a29311ebdd0d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea638e39-4c5b-4130-a5f1-45e9c685416e", "sighting_of_ref": "indicator--ee68f622-8eb9-4dd5-9380-22db8aab5344", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d635ef5-5021-4e45-a4eb-eac02f93fb28", "sighting_of_ref": "indicator--ee68f622-8eb9-4dd5-9380-22db8aab5344", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb46746f-cb7c-41ce-b3d7-f6a0bf6b059a", "sighting_of_ref": "indicator--ac3ddcf2-a278-424d-ba7d-35a59bd16fb8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35357a2b-1e90-4375-a487-58f01b963e33", "sighting_of_ref": "indicator--d81cc3d1-c637-49ff-8612-f0185c0ea53e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe84a81-776a-49c8-8224-e3398c368a6a", "sighting_of_ref": "indicator--d81cc3d1-c637-49ff-8612-f0185c0ea53e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3de5a35-f2b2-46b1-b762-27b000c5bb82", "sighting_of_ref": "indicator--7979d362-cc81-4cab-b564-ceece1181d59", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2773622-d9cc-4bcb-a541-b5b98e9fc43e", "sighting_of_ref": "indicator--150f1868-767c-4c2e-afd5-d686f9c08a49", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1622f646-1205-414a-acc6-88f73044e9f3", "sighting_of_ref": "indicator--5316da02-62a2-4f05-8cfc-18651f4d72ba", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e81e696-d25a-4f59-b570-68e2dc8472e6", "sighting_of_ref": "indicator--5316da02-62a2-4f05-8cfc-18651f4d72ba", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f57acd-654c-4c51-bb58-c1f14267d9b8", "sighting_of_ref": "indicator--732dff85-b5cb-40de-8b35-500371206712", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234506cf-5722-4d26-923f-f0dd561efad0", "sighting_of_ref": "indicator--68d0d640-7a0d-447a-8b86-7fbb0ab0965c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7567375c-3e4c-47ca-af3f-222e22c00e8b", "sighting_of_ref": "indicator--55e9574f-e55e-457d-8313-9d7cdac57ded", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa908f2-256c-4af8-96f3-47afa1c28fcd", "sighting_of_ref": "indicator--55e9574f-e55e-457d-8313-9d7cdac57ded", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc7eec5-adb5-405a-96cf-63dd01f7e2df", "sighting_of_ref": "indicator--c4a8ea68-5953-49a9-931e-310f604da876", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3031329f-5a58-4da5-95de-ba89c0b4a104", "sighting_of_ref": "indicator--c4a8ea68-5953-49a9-931e-310f604da876", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4703e4f-bcdf-4f55-83f7-77381075d885", "sighting_of_ref": "indicator--e6b963cd-5f85-4e19-a86e-10e729f272c3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00456cba-39e3-43ba-9696-da9fd4bde1fc", "sighting_of_ref": "indicator--e6b963cd-5f85-4e19-a86e-10e729f272c3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e9cf0b-e558-499e-840f-39606c2b2976", "sighting_of_ref": "indicator--df5df6af-9d23-4003-85c7-10a90fc32797", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70827f65-dfd3-46bc-a34a-d6beaa83a876", "sighting_of_ref": "indicator--cf2610e1-45a2-4309-93cb-2a8901772646", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3882243-8ed7-4fa8-b9a3-a26fdf6d5c72", "sighting_of_ref": "indicator--cf2610e1-45a2-4309-93cb-2a8901772646", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b2dc87-fe94-4952-a307-fa762dfb3d03", "sighting_of_ref": "indicator--3121072b-525c-4607-97fa-8e67c14b0522", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862a89fe-b0a3-4b94-9b58-c2b840cf605b", "sighting_of_ref": "indicator--3121072b-525c-4607-97fa-8e67c14b0522", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c00acc-9a1c-4b6b-9974-bdb5fe641638", "sighting_of_ref": "indicator--404fda82-b503-43d5-b1d0-4be3a2bedab1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9baaa47c-c4cc-4607-955f-e5b7c728e053", "sighting_of_ref": "indicator--3738f7e6-7b0a-4fad-a5b1-45de6ffefea7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0ffc4d-e189-4354-853c-ebcd6c6e182b", "sighting_of_ref": "indicator--122fa5c8-440a-4a4a-beab-80b0bc42289c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebba250-f35d-443a-a140-485e4fcd2236", "sighting_of_ref": "indicator--122fa5c8-440a-4a4a-beab-80b0bc42289c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fbc919-81d7-4f04-b84d-c45f23fff78f", "sighting_of_ref": "indicator--0779afcf-bf23-4961-ba6d-880cb5b05569", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ba5a6a-ad13-4853-bafc-b1545dc160b0", "sighting_of_ref": "indicator--0779afcf-bf23-4961-ba6d-880cb5b05569", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241e2f22-19d7-442b-ae5f-c0a3a70814cf", "sighting_of_ref": "indicator--df9dc150-d6d5-4462-afd4-3496ab2dbc01", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd67f3e1-5a7a-49b5-8737-73ff424542c7", "sighting_of_ref": "indicator--df9dc150-d6d5-4462-afd4-3496ab2dbc01", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9258d8f7-f3af-45ee-985d-9faab6ea73a1", "sighting_of_ref": "indicator--df9dc150-d6d5-4462-afd4-3496ab2dbc01", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a794d6-07ad-441c-b234-997ed8454932", "sighting_of_ref": "indicator--988504b8-9c7a-4865-bc9a-b451f48ff913", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f025d602-f1d1-4a2c-8285-89f6dcfe0e8c", "sighting_of_ref": "indicator--988504b8-9c7a-4865-bc9a-b451f48ff913", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653d4875-0cb3-4035-8f75-90928e24a17a", "sighting_of_ref": "indicator--b692e3f4-6604-4016-b2c3-5df5a6f806db", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4504ce4d-54b1-4274-92f2-600248e68319", "sighting_of_ref": "indicator--3d3a389b-4b98-45ba-b0b1-dafdefee4487", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4d491b-9577-427d-b7e2-37f882dce7d3", "sighting_of_ref": "indicator--3d3a389b-4b98-45ba-b0b1-dafdefee4487", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68bc2a4e-50ed-4bf3-abbc-70fe9388aa77", "sighting_of_ref": "indicator--3d3a389b-4b98-45ba-b0b1-dafdefee4487", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf09c95-4a44-47e4-90a0-f916945bca22", "sighting_of_ref": "indicator--62ddbcd5-9d91-4400-9b56-e62597fb940c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6169e6b-1ade-4730-b5cb-b6677d404cc3", "sighting_of_ref": "indicator--9ee5baa3-ed77-4eff-8332-5c5b24eca92b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696c4bfe-ca87-4649-88b3-ace110595eb4", "sighting_of_ref": "indicator--9ee5baa3-ed77-4eff-8332-5c5b24eca92b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa9c684-9102-4929-bd0f-25cea30e6592", "sighting_of_ref": "indicator--9ee5baa3-ed77-4eff-8332-5c5b24eca92b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bdb893-514e-4924-8486-e9c80514170f", "sighting_of_ref": "indicator--86a0592f-8b54-460f-9c2d-b5ab50583932", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4915b1-314b-46d7-a93a-63479c9044c3", "sighting_of_ref": "indicator--04f288ab-c2a0-47aa-bcbe-de72d7775d1b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faece48d-bf8d-4087-8741-b8a7e5a1ad06", "sighting_of_ref": "indicator--b8280c63-57e1-41a1-ae03-9cbd4b18d945", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603f9dfc-fafc-40df-8623-61e6bcc96383", "sighting_of_ref": "indicator--b8280c63-57e1-41a1-ae03-9cbd4b18d945", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f68ea04-7b6c-43f8-966f-034082df0772", "sighting_of_ref": "indicator--57997b45-ed14-4e17-a5a1-e6c091a852e6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8264a1bd-e2a4-4cb5-9591-a838b1251b05", "sighting_of_ref": "indicator--22862abe-b330-4f69-bf43-12df38dbb787", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99927e9b-94b6-4863-bfda-89832e432703", "sighting_of_ref": "indicator--22862abe-b330-4f69-bf43-12df38dbb787", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edcfd6c-28b1-4dc5-be69-02d22b49c0da", "sighting_of_ref": "indicator--eae75d59-5b4a-4fa7-bacf-0d0d32665f7a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846805b3-cbe7-40e0-8da5-b67ad7d81755", "sighting_of_ref": "indicator--eae75d59-5b4a-4fa7-bacf-0d0d32665f7a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598baaca-2745-49b4-94e1-2cdb6cf9e587", "sighting_of_ref": "indicator--4ddd8071-7a9b-4f92-94ba-26386c64b62c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0cff79-d7c4-49d4-a314-fd6a00dce060", "sighting_of_ref": "indicator--4ddd8071-7a9b-4f92-94ba-26386c64b62c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43dc52d1-7919-4fc8-81a8-5ea785a247e7", "sighting_of_ref": "indicator--e91bcf6d-f659-4135-be0b-826276f0da06", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5724b2e-e9dd-4f56-83b5-7fef4c9b738d", "sighting_of_ref": "indicator--e91bcf6d-f659-4135-be0b-826276f0da06", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b80449-cdfc-4cf3-ac1e-c5c58eeeda04", "sighting_of_ref": "indicator--2c435c58-75a7-414d-b223-74ef74d4bc20", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32d7307-dc7a-43bb-9057-ab8c0326a3f7", "sighting_of_ref": "indicator--59983d56-34bc-48f3-8390-7a52304ddef6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b28646c-ed2d-44e0-b548-5b82962e84d7", "sighting_of_ref": "indicator--03c1c150-aaad-43f1-b479-e9a475b3b4f0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3b033c-463d-4fb1-ba2b-4687b146e6e6", "sighting_of_ref": "indicator--93a5c655-269c-4dd3-8292-b5adc0b4a470", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1963ab-8d89-4a03-9e0a-eb3e51b4e99c", "sighting_of_ref": "indicator--93a5c655-269c-4dd3-8292-b5adc0b4a470", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6628a4d7-e585-4b92-86b3-67b67e492f52", "sighting_of_ref": "indicator--822e2720-4ed6-4ea4-8ade-32f5f7a55501", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c5cb4b-94d6-4ba7-a3dc-9768336ba56c", "sighting_of_ref": "indicator--877729c6-6d84-453b-911e-347a57dad488", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654cad67-8500-4ee1-8fe6-1d12100953a2", "sighting_of_ref": "indicator--877729c6-6d84-453b-911e-347a57dad488", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411096b7-4677-4394-85a5-0033c342db43", "sighting_of_ref": "indicator--877729c6-6d84-453b-911e-347a57dad488", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b775afdb-80c6-4db1-828c-75c01bca12b4", "sighting_of_ref": "indicator--5eb7135e-8c1f-4c9f-be02-b6802e2a6482", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44b75a2-7d50-4261-889a-dfa92dca5aa3", "sighting_of_ref": "indicator--5eb7135e-8c1f-4c9f-be02-b6802e2a6482", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc8a754-a226-4204-a4ec-8f4488fe1110", "sighting_of_ref": "indicator--2d2ab7a5-faf3-4453-b9f1-9c1a20a1b97f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d823d86c-3e9b-4072-80fd-e3090c7e5d28", "sighting_of_ref": "indicator--2d2ab7a5-faf3-4453-b9f1-9c1a20a1b97f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fac5067-634d-4f7b-9435-7aad5e86c76e", "sighting_of_ref": "indicator--2d2ab7a5-faf3-4453-b9f1-9c1a20a1b97f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a7a033-b7aa-4d31-ba03-ec1503dd2c9e", "sighting_of_ref": "indicator--b68934b8-3bba-4fef-8c9e-09d707bd952f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13195839-9c3a-42bf-9c63-a6a984766c0e", "sighting_of_ref": "indicator--beb71ceb-6b7e-4562-b47e-c6edb50b8269", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9123c3-6295-4a24-ad87-7529c837f241", "sighting_of_ref": "indicator--beb71ceb-6b7e-4562-b47e-c6edb50b8269", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5dcf1f-d8d0-4cdb-a4ff-15845b0a6397", "sighting_of_ref": "indicator--c7d1f90f-0ff0-4d67-8ca5-55f2075ef0b0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c4f3f1-ad11-47a3-8d52-9a26f72de5dc", "sighting_of_ref": "indicator--c7d1f90f-0ff0-4d67-8ca5-55f2075ef0b0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab5135d-bd6d-4876-9d19-0c01b5758104", "sighting_of_ref": "indicator--a50d8665-73f2-426b-b0de-5eb5aecde54b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fbba22-7bc7-426e-97b4-d4270ec571c3", "sighting_of_ref": "indicator--f550e545-734c-4c57-bd9d-d68349a35f2e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c1354c-7ea5-4d0e-90c1-cd2eb93ee9f4", "sighting_of_ref": "indicator--f550e545-734c-4c57-bd9d-d68349a35f2e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5853790-80ac-43cb-8663-cc39534a9bd0", "sighting_of_ref": "indicator--278ded78-d2c7-4391-9744-e3d3793661c9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a4258a-45ce-439f-9054-546f28859eec", "sighting_of_ref": "indicator--278ded78-d2c7-4391-9744-e3d3793661c9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90da9450-8a09-48f6-b852-0661c88460bd", "sighting_of_ref": "indicator--ad50f827-3061-4e8f-a14b-179da379e615", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890d1a50-dc2f-474d-9aa9-f0bf4c27661f", "sighting_of_ref": "indicator--ad50f827-3061-4e8f-a14b-179da379e615", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9684b0e2-67dd-4e10-b4b6-db256a19b9de", "sighting_of_ref": "indicator--ff660440-4279-4910-9465-2b152611c841", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c74b702-e913-4376-bc2b-a3cc80dc1931", "sighting_of_ref": "indicator--ff660440-4279-4910-9465-2b152611c841", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2498ebf5-3832-4ccd-a0c9-cb916c8c4f3e", "sighting_of_ref": "indicator--95e609de-fa4d-461c-9716-031c5ee7162a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1491ea8-6727-42e9-8758-dfdc595bd5ac", "sighting_of_ref": "indicator--95e609de-fa4d-461c-9716-031c5ee7162a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c26ca85-ee1d-4429-a1de-2f1b0db7890c", "sighting_of_ref": "indicator--7141f469-b314-4305-b724-d828d58b9491", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a0eb40-17f5-4a13-b412-a200c3e31a9c", "sighting_of_ref": "indicator--9bbecc82-d4e4-4df8-9a23-d06e654618a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa679eb-93c6-4484-93b9-f71ce86d111b", "sighting_of_ref": "indicator--b21a77ba-1396-42f0-a5d7-db41447588ee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6622a642-e1c4-49dd-b4f6-b584128c6ad1", "sighting_of_ref": "indicator--64830d9c-6739-4c6e-b0a6-702ad7c32f00", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f181552-2ff7-49f0-b88e-836060ea19a0", "sighting_of_ref": "indicator--4af3d2f5-1914-4832-a39a-01192bd5890a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af6c22f-25e8-4758-be09-d4d93f15845e", "sighting_of_ref": "indicator--38948c5d-a1d0-449b-bc9c-a456540e1bea", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80ca5f4-f202-42d9-b78f-8e41286f27bf", "sighting_of_ref": "indicator--97279b2b-5ac6-45f6-ba58-f27988c93b01", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e20829-63b5-409c-806e-1c235eb5a0d4", "sighting_of_ref": "indicator--bdb37bbe-e0c3-4401-9929-c4c9ec3d4296", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfcc5796-f0ef-48af-975f-0c16d6e2daee", "sighting_of_ref": "indicator--9ebc1fe9-1841-4d92-a4a9-2ae3c88da8ed", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e278cdc-6443-4eeb-8663-3fb51bab76f9", "sighting_of_ref": "indicator--cfc68db4-4d77-4c85-bd0a-aeddf2b4cdb2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227fc0f7-0658-4304-bd46-59df8accf5d8", "sighting_of_ref": "indicator--a200725b-7d54-4b78-93b5-095ba57ad24b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20eb1ced-196f-4db0-bd1c-25a2884436c2", "sighting_of_ref": "indicator--3a8bf645-3e97-4a88-85fd-7f9572220ca1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bad5448-6f99-4f08-aeef-c161919c22e3", "sighting_of_ref": "indicator--8148f2e8-8fb7-4139-80a5-a5c4de349eb5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b53c9f-fe3c-43bf-91fc-4b1d1904b9ca", "sighting_of_ref": "indicator--98d3c602-4c62-4e2c-8dd2-6f1cdd1158b0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d69cc1-4b76-4dfb-ae30-832e3c91d936", "sighting_of_ref": "indicator--27749653-58aa-4613-b463-63de08c16a41", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2317053a-cc82-4621-aeb8-a79d8d572bb2", "sighting_of_ref": "indicator--ccfd583c-9445-4c15-93c9-343e03b85701", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b782886-c388-4348-bb9e-18d83c91028b", "sighting_of_ref": "indicator--ccfd583c-9445-4c15-93c9-343e03b85701", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cfc534-246d-4cdf-b0d9-be8c40f886e4", "sighting_of_ref": "indicator--f9903446-044f-490d-99aa-e43143cb2910", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fee1d27-aa1e-473d-95a8-a32618410389", "sighting_of_ref": "indicator--936fbefb-b6c8-470d-8dbc-6a57dd149f32", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17633940-8f09-441d-9e04-469dbc4ef60b", "sighting_of_ref": "indicator--96aef7d9-5e5a-4af8-8eb0-c5961c9b2f8f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151eb158-b134-47c4-8baa-1dbcde8ffbd5", "sighting_of_ref": "indicator--41cea369-8554-40dc-a7ba-6bc8e708e27a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6b88c3-274e-4712-95a4-1c191ee65aea", "sighting_of_ref": "indicator--41cea369-8554-40dc-a7ba-6bc8e708e27a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a92aa40-dbc1-4912-af9f-75e30f81d9a7", "sighting_of_ref": "indicator--41cea369-8554-40dc-a7ba-6bc8e708e27a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886156e7-8c32-4875-b75a-b58c35b57d87", "sighting_of_ref": "indicator--a14835cd-f63f-46f3-8b85-0da213bbd438", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f140615-59a7-461d-980b-daf07360adb1", "sighting_of_ref": "indicator--0291d52c-587e-4e3d-a463-14a3f928aa6e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90256fbe-1ecf-4323-ae09-fdeebe1eae85", "sighting_of_ref": "indicator--530cb0c9-e9df-4b1e-adf5-c2022f93cbf7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ab4e88-12c2-4f31-a1d3-f9ddea6a4702", "sighting_of_ref": "indicator--bd90af8b-2baa-45e1-89b1-fb6a6641c6e9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5252b47-660a-4516-bf33-6e70fd6f0c3b", "sighting_of_ref": "indicator--26c5107f-bc75-4a78-af70-a4e25f7d2f60", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e006426-31b6-4557-b49a-ed66ad36c07c", "sighting_of_ref": "indicator--65fa1f9a-819b-4441-b68a-f4d7a952c02d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689abbca-72ad-498c-9912-c5662112d507", "sighting_of_ref": "indicator--0da0d298-de33-4d7e-a450-c34946893e0a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1126430-3374-497b-8755-9120fc3e5a5f", "sighting_of_ref": "indicator--fd59985f-e594-4a9c-8ba4-08f6b64e884a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c8014f-a1d6-4741-a323-e34a3c92a94e", "sighting_of_ref": "indicator--58dc9ba6-254d-4b18-bca0-d55975cdc1f9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529a9841-dd27-45d7-9551-e69c9f2aa8a4", "sighting_of_ref": "indicator--c0ce8a5c-99b7-499c-97c0-27962aae65e2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dafa41b-7d5c-4450-aed6-209d70359de0", "sighting_of_ref": "indicator--a325de6c-7ed5-40b1-b751-571b3fa25d54", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ca7287-1e1e-4042-b0c6-cc49c0775cb5", "sighting_of_ref": "indicator--8d0c19aa-7702-4916-a67a-7840f8dd7884", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f304d800-f615-40da-b9d1-16ed387f2ddd", "sighting_of_ref": "indicator--48b9f06d-4648-4d62-8b1d-4151108cace0", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31b8b30-eb94-4b25-8a4a-2ba06dec1922", "sighting_of_ref": "indicator--446b726c-02df-434a-98ee-96b5ef603bc4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57bc68b-60bb-4a15-b859-2b5971651e40", "sighting_of_ref": "indicator--ac7bdaef-8563-4c60-814f-3b6dce53868b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d163b1-42bf-41b8-8a3a-7223244c521c", "sighting_of_ref": "indicator--3943aa17-b8b2-43e5-b48b-16575a3ad300", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f60d3d8-9d00-436b-8e93-2cb1a35251d9", "sighting_of_ref": "indicator--d8a43507-8ef7-420b-ab10-204cc6fe6495", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338cb7dc-912e-49c7-9a15-f00e8f3e60ad", "sighting_of_ref": "indicator--5779c505-f87c-45b5-a6e9-ce551c07dc96", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019f3f21-b3a3-4cae-ac48-26ca5c70e6fd", "sighting_of_ref": "indicator--5779c505-f87c-45b5-a6e9-ce551c07dc96", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8f605e-6e67-4e0a-a9b6-f012de535a23", "sighting_of_ref": "indicator--3fdbc106-3d97-45f2-89fb-f230677d899a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f81b34-1d00-43e1-b0ff-489a4d030dc0", "sighting_of_ref": "indicator--7ade8ec1-b929-4163-a1f6-67f00e78407b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc50e8b5-22cd-406f-8187-dae401e0ba3e", "sighting_of_ref": "indicator--70fdce42-d0c4-4c50-bf7c-86a273f2ac7f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf08e5f-44c3-403f-94b9-0ac2eff8f0bc", "sighting_of_ref": "indicator--1562e5bc-74f9-4d28-8983-515c7fa9ebda", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d9e8fd-b0ff-4032-8a0f-a9de74b24ee5", "sighting_of_ref": "indicator--cd56db90-8ccc-4951-a798-c0ad70a3e8ff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0601ca12-0395-4f9a-aaef-c5d7a26237a1", "sighting_of_ref": "indicator--dd35bc87-3637-4273-aac8-3ff3028200ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbefce28-882a-4c6a-8438-ed6c356d82d5", "sighting_of_ref": "indicator--b147f9dc-a13f-4e58-b2ce-73707bb9dc00", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc56f373-16e0-46fc-8a85-0352bbce60a0", "sighting_of_ref": "indicator--8567e0cb-133c-459c-9093-97fd8b7e1846", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e27c00-f128-4dba-bc06-49b332e491a5", "sighting_of_ref": "indicator--ef5443e9-6764-4226-8e0f-d94ef70b4ade", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c48b32-2610-4e38-9699-ce997013e64f", "sighting_of_ref": "indicator--4af323c6-53c7-4cb6-bb15-ea5cf7f9e729", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7ddb20-26db-45a7-b29f-994a4cbea414", "sighting_of_ref": "indicator--e425c388-0a6c-49cf-b76d-13d36f5bfc98", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f53044c-433c-4246-a5fe-7f05a7e6f154", "sighting_of_ref": "indicator--d6b789a2-4587-4640-81d4-2e4f66636e13", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a4948c-8bb7-4841-be94-f092d62c25bf", "sighting_of_ref": "indicator--f9a2be58-d612-4ab0-a8ca-6c705d3dc1f4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f26b075-a33b-404d-9fa9-cd579b51488b", "sighting_of_ref": "indicator--9b63fad0-d121-437c-bc0e-55a7dbe0d0c3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed56465c-8dd5-44e7-95d9-d4aaef8b5ef3", "sighting_of_ref": "indicator--1a3b7659-15df-48c5-8704-963787481f23", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7377b4-5d07-4326-bd4e-c5eb0e4422ec", "sighting_of_ref": "indicator--c9633584-235c-4fef-b216-b4856be97ebe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67d1b68-013f-4fad-8124-93c22eac040f", "sighting_of_ref": "indicator--fd333269-1a2d-4f37-b5ed-141e38fdaf5f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fcc6e8-3aaf-4fdb-aa71-33ef99b3e31f", "sighting_of_ref": "indicator--5389f42b-b3c8-4aa9-b809-5069e800fcd3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46de17b8-0e16-49f4-b403-972e6d0eccdb", "sighting_of_ref": "indicator--b56fc32e-42db-40fa-b1cf-9aa58f0c0f1b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c318ab22-c0c3-4833-97a1-6b5fe95f5664", "sighting_of_ref": "indicator--67c31d0a-c082-490d-aeb6-df14ee0574e4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb5d2e6-5dcd-4652-8db3-8e55072450d1", "sighting_of_ref": "indicator--4d39d2f7-9f7e-46f5-9d41-de6800af251b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad72f1c9-9e47-42bc-b5b2-4c782e85e885", "sighting_of_ref": "indicator--baad7858-6339-42eb-9bca-8afd36794f1e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f505c03b-4083-4409-8ac2-a551a7ba5924", "sighting_of_ref": "indicator--1c4702ed-e0f5-46bb-a5be-0df285fbc925", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210cc26d-ee70-42ea-9658-062bea336a59", "sighting_of_ref": "indicator--1c4702ed-e0f5-46bb-a5be-0df285fbc925", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcba794e-386e-41e1-862e-57c176a7227f", "sighting_of_ref": "indicator--5f7603d5-49d1-4be0-953c-a80d17809e94", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f340c5cb-de1f-4d0d-9dd5-4f4e7b3fb157", "sighting_of_ref": "indicator--3b8adfce-b6f3-41de-b66d-4d90805e2769", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25792bb-3cf2-47d3-b79f-b2060e87261a", "sighting_of_ref": "indicator--2c31a38f-cabd-493f-a8d2-15dbda9d8f62", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36374212-6899-4d57-acba-7fe00c0fc211", "sighting_of_ref": "indicator--bc24e6a4-9951-4aeb-b3e5-d6120c40e745", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d26ccb-fc74-4059-8dca-5a99d18ce37c", "sighting_of_ref": "indicator--a30e87cb-a937-4170-bea0-ad7fc41caf5c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e4ac54-b71c-4cc8-befb-cee58c96a995", "sighting_of_ref": "indicator--bd700b46-8d29-4312-bcb1-715ce8b58441", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c1d45f-7903-4fdf-8875-43bee5ba2352", "sighting_of_ref": "indicator--cc60d1ed-9b74-43f7-a673-3e7a6c22c725", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718db186-72b5-4d5a-bcea-d8ceada65c55", "sighting_of_ref": "indicator--ad2bf0ff-cbca-45d6-ba00-dee6eee448cc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35418e27-7b06-4dc9-b349-4df755594583", "sighting_of_ref": "indicator--83f03199-308c-4467-9fc2-35b428ebbf29", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18772ca4-d0e9-4344-a890-3ad2dce20c49", "sighting_of_ref": "indicator--e8b39447-0111-4475-945b-dfe8b7e1dc10", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b760b20-3000-40e8-bfb0-7f6ad1b9dbb9", "sighting_of_ref": "indicator--4a535a87-dc41-4331-b437-f3b3d9306c9d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a809af4b-75b3-41c3-a8dc-5c610d3ea8af", "sighting_of_ref": "indicator--fd466aa8-7305-4e5f-a3db-dee4f7b39b1b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be61e2d-578b-4407-b5f7-4075434a3ee9", "sighting_of_ref": "indicator--9d05b8c7-c739-4a4f-900d-13bd05c3087f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12367e90-cbfa-4968-bef7-2848084f4d06", "sighting_of_ref": "indicator--962fcf38-0622-431f-a863-14cd761fef5d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c47b99-39df-468f-9b2c-8e1cb5bc6d56", "sighting_of_ref": "indicator--cd4da819-5032-43b5-a6d1-4f4d888c548c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff56a33-823b-476a-ad5f-d7120a40227e", "sighting_of_ref": "indicator--cd4da819-5032-43b5-a6d1-4f4d888c548c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c87d7c-ee45-42e3-bf33-89cf9567ecaa", "sighting_of_ref": "indicator--6d3b4c2a-8fb3-4a43-9aff-fc0c8d00c8cd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739c7694-3edd-4097-80f8-7a8123fc0973", "sighting_of_ref": "indicator--86ca8501-16a6-4445-a933-17933b13ca5e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b214899-22b5-4829-ae63-9f80ba900139", "sighting_of_ref": "indicator--86ca8501-16a6-4445-a933-17933b13ca5e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac28b98-77df-4037-980d-7b4a92f7c68d", "sighting_of_ref": "indicator--6713cdf8-dec1-4f1f-b31d-9706f9b99f63", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28aee8ca-21d8-42e2-bd47-4f61dee16092", "sighting_of_ref": "indicator--7c5442c3-7892-4d66-8de5-5c307231ed05", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dab4797-f2f0-4ab8-b813-4859cb84a8f6", "sighting_of_ref": "indicator--09162f33-16c3-4027-8707-3b36dd8b3025", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68fab59-a89e-4bd0-a02a-a9b3879a62c3", "sighting_of_ref": "indicator--ab3b5b90-3912-4bc2-8b52-3e0989440d06", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a666db-0060-4281-ae25-748f783ceb85", "sighting_of_ref": "indicator--a6046ad3-722a-4d41-b5da-b1d8e1bbeef5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d6d707-87e1-4143-b1a6-3c48ba815772", "sighting_of_ref": "indicator--845d7f5b-0dbd-4594-9015-47afb113b565", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef4af4d-458a-4da8-b88d-8c95cb37858a", "sighting_of_ref": "indicator--6843749e-1405-475b-b748-a42730929936", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf783e2-891e-4bfb-a2e8-66cb8d8ce256", "sighting_of_ref": "indicator--5538444f-9418-4f0b-8176-d6f14110434a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b33a7a-aaad-41ea-9fc7-a582f00dd3f8", "sighting_of_ref": "indicator--bbfccb96-ba71-4009-8142-cfdc588d6cdc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4dcf05-d0c3-4634-8da7-9f207c89c98a", "sighting_of_ref": "indicator--7a0c5232-58c4-4f98-9f6d-f95c4e02baee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d23640-96cd-4544-b78b-b4260a113da6", "sighting_of_ref": "indicator--df5d7a7d-261c-428e-96dd-05c19f6a0aaf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfdc30d2-0188-4464-a663-f02deaa3b5ae", "sighting_of_ref": "indicator--4a2e302f-bd63-40f9-b3f7-ebbb38cff0ee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3660bb7b-4594-4d74-b645-5cfd41b2be48", "sighting_of_ref": "indicator--14b2cdcd-0200-4658-b920-5690bc93db9c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bce346-f9c3-4dfe-becf-8d701fb20959", "sighting_of_ref": "indicator--9e7539ad-d864-48d1-be4e-b5fd17abf1aa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412605cc-1934-47b7-9f2e-a4cc82ffda6b", "sighting_of_ref": "indicator--b4084617-23d5-4c3b-b952-c04ac5702d4b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893f72ff-7622-483f-9bdc-b8e54d770446", "sighting_of_ref": "indicator--6442dd42-4519-448a-9860-3e86e42ef162", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9a65a0-d7a4-4f2e-907e-b5f28b4fc251", "sighting_of_ref": "indicator--7346e7d1-8d9a-4463-a1e0-e7116da421da", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd42c13-fcca-4de2-bc3f-619bc16f576c", "sighting_of_ref": "indicator--7346e7d1-8d9a-4463-a1e0-e7116da421da", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b3921b-46f3-462a-a94d-dc6877b7bddd", "sighting_of_ref": "indicator--7346e7d1-8d9a-4463-a1e0-e7116da421da", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5209d71c-b44d-4f66-b6ae-ce3f6b4aed7e", "sighting_of_ref": "indicator--b9d994f9-5808-4d35-98cd-63664398c9ee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2d251f-504c-4178-bde1-bb78e3dcbe51", "sighting_of_ref": "indicator--ec33bcf7-ae4a-48b8-9506-9e17305b3dec", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7fa37df-9d2e-4a37-acf0-44438b1763d8", "sighting_of_ref": "indicator--a54b8901-aa46-4ddf-a3be-6258cc4265ab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc75b23-24ee-45a2-831a-d2d7e7b1a544", "sighting_of_ref": "indicator--a54b8901-aa46-4ddf-a3be-6258cc4265ab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62939a6c-bd59-42bb-bbe0-08408c1a611d", "sighting_of_ref": "indicator--a54b8901-aa46-4ddf-a3be-6258cc4265ab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71e6d2b-d4d7-4a90-9941-23c6fff34043", "sighting_of_ref": "indicator--f8084d6c-20f2-4922-8938-b1372d3e0ae6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a922f2a2-8fc0-4670-962a-3dff76a30494", "sighting_of_ref": "indicator--35cee13d-9f9d-474b-aa9e-73d2df7d0065", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa76b930-a1bc-4d8c-864f-4d33961fc15d", "sighting_of_ref": "indicator--c059575f-9fb8-4801-a164-b027c69fccba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7038b7-5a2e-4865-9fb8-b5325a93faa3", "sighting_of_ref": "indicator--b516ae06-069d-46d7-9ac3-d7e573481e26", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d46951-aa33-4b19-b2af-6a3ed5306d8c", "sighting_of_ref": "indicator--34bb6488-ea93-42ed-b05d-b51ec319349b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a48368-87da-414e-af6b-b1123dc1021c", "sighting_of_ref": "indicator--4ecfd861-7011-403f-9946-a3a127bdcbc2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c91ac6-9809-4d23-9e6b-7ff36c052e7d", "sighting_of_ref": "indicator--4ecfd861-7011-403f-9946-a3a127bdcbc2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72c4854-e96b-400d-89a8-cad82f295767", "sighting_of_ref": "indicator--578d454b-e637-4f5d-a0fa-1380c5e11962", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70617c82-5720-4d19-966a-11964beb14e1", "sighting_of_ref": "indicator--682ac017-9bd0-4463-b5ad-75c3762a0db1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e8d554-b341-4341-a561-c4ae8dac639d", "sighting_of_ref": "indicator--4ef6b3fc-34f9-4444-b0e0-6c9db0cc626c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d45ad1-0968-43ed-bf15-456260964fc9", "sighting_of_ref": "indicator--f425fbfb-708a-4b28-a500-0b8511f61691", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4e9482-0546-4498-bf67-66632a5db191", "sighting_of_ref": "indicator--541ddfff-0257-4a25-900b-7336614edb9a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4314e9b3-5d0d-4d25-81c2-f4572b4ff929", "sighting_of_ref": "indicator--c5d40a82-bf05-4890-b1d9-02ad3b1c0710", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e093dbe-9ae6-4ea5-8a37-f1cc8f09ad38", "sighting_of_ref": "indicator--c5d40a82-bf05-4890-b1d9-02ad3b1c0710", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9de556-16a1-443a-8647-e76c65dc3d29", "sighting_of_ref": "indicator--c5d40a82-bf05-4890-b1d9-02ad3b1c0710", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516e268e-1ee6-4b00-aff4-ee467b7e9863", "sighting_of_ref": "indicator--4cffe236-e783-4625-bab3-8fe7e76e31df", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2491857c-1a27-4e8d-9e5a-5305f97eeb6b", "sighting_of_ref": "indicator--8b721988-73e7-40af-82ef-a6f0d8c0fdb1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a19987d-8ae5-4234-b6aa-b561bb84a4ad", "sighting_of_ref": "indicator--6dca071e-5fa4-491b-be47-fd3d1d57f49c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cff47c2-016c-4b64-8b00-5e89a1ef5ca1", "sighting_of_ref": "indicator--1b186910-e291-4985-809f-25eb183d92ce", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ff11e3-e38f-4eb5-a729-ff50f1f4ba41", "sighting_of_ref": "indicator--6d3c72a0-2b93-449f-9c06-7393ddf9316f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37beaaa0-a905-4d4a-a7c8-46a194f23f39", "sighting_of_ref": "indicator--7df3f938-504b-4513-bf8a-e5283ade00da", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a957921-6821-489b-9a1e-2617712a240d", "sighting_of_ref": "indicator--9d66036c-09c8-4aea-b937-8d5a515631a8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f87879-271e-4836-bff3-1e82352f9929", "sighting_of_ref": "indicator--9d66036c-09c8-4aea-b937-8d5a515631a8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9478048c-3bd4-438b-9dfc-06c53e6b621f", "sighting_of_ref": "indicator--9d66036c-09c8-4aea-b937-8d5a515631a8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a19cd2-9bd5-4cd6-a18f-a8c4a27fc4ba", "sighting_of_ref": "indicator--d1fabcdd-de3e-49b5-a7a8-40c16d201044", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761042a7-3740-4366-bd37-ea9b01be47ef", "sighting_of_ref": "indicator--d1fabcdd-de3e-49b5-a7a8-40c16d201044", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69a1b24-50f7-4aa4-a834-1558e373e20f", "sighting_of_ref": "indicator--d1fabcdd-de3e-49b5-a7a8-40c16d201044", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7faeb89-c3ce-4df5-9b47-ed91e33c7d6f", "sighting_of_ref": "indicator--6d5984e9-6bc9-4627-994e-aeb2618e5f2d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66f008e-3d59-4395-8dbf-83b2da8f544e", "sighting_of_ref": "indicator--b3d49bc4-fbcc-4011-b4bd-408539caf4f0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5906376b-c775-494e-8b31-9c35a2595bcc", "sighting_of_ref": "indicator--cfb77013-8cd5-4907-b70b-861581424d5b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f4d59b-b930-4e59-93bc-3e0a4137e923", "sighting_of_ref": "indicator--cfb77013-8cd5-4907-b70b-861581424d5b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12517ee0-f437-486a-8c13-8db067a6a868", "sighting_of_ref": "indicator--cfb77013-8cd5-4907-b70b-861581424d5b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce9ac72-a90a-4e89-bd62-52334055faf7", "sighting_of_ref": "indicator--41112f32-4da1-47c3-aa29-6602dd59aea6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22270ea3-1ba6-41cc-af73-c7a40d44aae7", "sighting_of_ref": "indicator--41112f32-4da1-47c3-aa29-6602dd59aea6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1764c29-c42c-42df-87a9-f70605e797e1", "sighting_of_ref": "indicator--41112f32-4da1-47c3-aa29-6602dd59aea6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23841e0f-c7b4-4022-9a60-6a97a75d5280", "sighting_of_ref": "indicator--76629cc6-d614-481a-bdbe-9b26e83b5efd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6338b7e7-c4c3-419c-97be-febb55f7f4d0", "sighting_of_ref": "indicator--ee5ab2e4-a9ee-461c-9b4d-9a15e2f376d1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60943325-4245-4761-ab45-ad4fc8b7c788", "sighting_of_ref": "indicator--ee5ab2e4-a9ee-461c-9b4d-9a15e2f376d1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006b56bb-5489-4f33-b504-4c6d79a93e76", "sighting_of_ref": "indicator--6defa6bd-442a-4271-85bb-1e51ba22f2b4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a486b7-f4cf-4d8c-84a6-fe6b7b5dd573", "sighting_of_ref": "indicator--676713a6-8d1c-4ad9-8e4d-a31212892468", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54829314-31e7-4a27-889b-e932c5144fa5", "sighting_of_ref": "indicator--bb241e8a-8350-4975-a1ec-ba0b1c861fd7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0d9f30-0c2a-4e7e-9470-e5af26c1466c", "sighting_of_ref": "indicator--bb241e8a-8350-4975-a1ec-ba0b1c861fd7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32289ab-de05-414d-ad91-31f89820a318", "sighting_of_ref": "indicator--bb241e8a-8350-4975-a1ec-ba0b1c861fd7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e909b00a-deef-42a5-b800-7b52239b6319", "sighting_of_ref": "indicator--5400c8e0-2e41-48fa-8943-47cfa4e382e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ccfede-e668-4e2f-b121-d06670520609", "sighting_of_ref": "indicator--cfd5f2a5-af2a-4e31-93a3-47bac9a473d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6235e3-d16f-464c-ae66-6cd3fdddf6e3", "sighting_of_ref": "indicator--aad538c8-a438-4ba8-9cbe-ad20e445b097", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce687a53-50da-43ae-aa9d-18649c5e5a1d", "sighting_of_ref": "indicator--3c167b4a-b759-445e-ba2a-20a7cb03e1a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f56986c-89c1-4a76-a26d-9dd561dffe66", "sighting_of_ref": "indicator--121dcd09-368d-4736-8cad-394265485a34", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb79e71-e7d8-4175-9728-cdb61b3af6e0", "sighting_of_ref": "indicator--68f8808d-72be-4f20-9f39-dac173835e55", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80c1609-3844-4711-91ef-01da48627168", "sighting_of_ref": "indicator--4834a12b-be5c-46bd-ad8b-c91bcf4bec4d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e958ce-7c88-46f1-867c-600d908260c7", "sighting_of_ref": "indicator--e1583fd6-61d0-492f-86d5-72763aa34e1c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db70a8d-1a05-4370-b529-1e3242ed3915", "sighting_of_ref": "indicator--b7f08ab7-2a1e-4874-8a64-06fa440f2bf9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee09fc08-660f-4748-8831-81bdd274f06f", "sighting_of_ref": "indicator--7d4ac8eb-b502-458f-80d8-18ff0c1146d6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37352e27-ce13-4c02-9653-f84b55d25daf", "sighting_of_ref": "indicator--2d44a7a5-aa30-4216-980e-4aa96e995e9c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77328b3-804f-4d16-bc38-4aa0e800e061", "sighting_of_ref": "indicator--e5377157-2535-4b6b-ae6c-4e37b358eb60", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dde543d-cc99-4425-ad4f-58d9ec52dd93", "sighting_of_ref": "indicator--1f1ad632-99b0-47c6-9e3d-2b13d6f9e6c3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e185cfa4-b118-4d64-a2a7-7ffb3e965772", "sighting_of_ref": "indicator--d909e048-bc04-4021-bc9e-25e57890e5dc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33faabbf-05ce-4662-a38c-fbffd8cc81ca", "sighting_of_ref": "indicator--1c280b23-9fe1-4a09-90e8-557cfcdbbcbc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf872277-6ede-42f0-8ab8-f64a597b76a7", "sighting_of_ref": "indicator--fcf76ed6-6540-46d3-8ac0-2ccb26934431", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f126d2e6-840e-4f97-a472-59f0b6982e4e", "sighting_of_ref": "indicator--ac4028a8-1e90-42f5-bec6-bd4b77e43f08", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1657682d-c7ac-45f3-9c5b-fc29f94ffc69", "sighting_of_ref": "indicator--1d4e8ec3-dc6e-402b-94d3-56900d97a832", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31bf942c-9056-4be9-b879-d9efcce88b84", "sighting_of_ref": "indicator--1d4e8ec3-dc6e-402b-94d3-56900d97a832", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab529f44-17fc-4077-aaa8-03dbcffcd1c3", "sighting_of_ref": "indicator--1d4e8ec3-dc6e-402b-94d3-56900d97a832", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ba3ef4-ea33-4e73-9463-6877af970f71", "sighting_of_ref": "indicator--5a8d5fa4-8718-48ab-b3ab-65400efce7af", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99949b3d-1975-4ca9-9a9d-cd9a074a5165", "sighting_of_ref": "indicator--fbd882af-4041-410d-a42a-e57f7eb116c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389b31c1-1cb9-4efe-a166-3497e00c324d", "sighting_of_ref": "indicator--669d54e5-a083-46d3-b500-835bddcfea10", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92df078c-6cca-40ee-b3a6-27f983213cc6", "sighting_of_ref": "indicator--669d54e5-a083-46d3-b500-835bddcfea10", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f02ec9-cfcd-42a2-9b4a-647a6cd8869e", "sighting_of_ref": "indicator--669d54e5-a083-46d3-b500-835bddcfea10", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fd0df5-99ec-4641-a1a1-9eca7a77e0fc", "sighting_of_ref": "indicator--fa7f4a03-296d-404e-83e1-344e76c57eb5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e4f97d-ecdf-4643-be45-54782fb77b07", "sighting_of_ref": "indicator--fa7f4a03-296d-404e-83e1-344e76c57eb5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e167c5b9-cbdf-4ee7-bd78-68cd10f27a97", "sighting_of_ref": "indicator--fa7f4a03-296d-404e-83e1-344e76c57eb5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93c9106-0fae-4743-ba73-35e37c7f3307", "sighting_of_ref": "indicator--20d48543-0498-48e4-af3f-e51891add9b6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185b08ff-09fa-4df0-8589-cef2e405d598", "sighting_of_ref": "indicator--20d48543-0498-48e4-af3f-e51891add9b6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134f9929-29f4-4046-a6ab-63515a3bdcf6", "sighting_of_ref": "indicator--20d48543-0498-48e4-af3f-e51891add9b6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f26d7e8-d756-4742-b715-e0eb1867b3dc", "sighting_of_ref": "indicator--2b5b7729-89d9-47bb-a4bb-8979e34b2f1e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2965d0-6e1a-4520-a2f5-c78b7e019e8e", "sighting_of_ref": "indicator--5ebee04e-03d4-425d-b6c9-15b156f94bc9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1b36d7-8dd1-4aa7-98ee-35de6498c2ff", "sighting_of_ref": "indicator--f33ea1e2-8a14-4607-a63a-ec1794b4d06e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392ddaaf-fa02-4fe4-8bdd-1ce703d3fc6a", "sighting_of_ref": "indicator--070c01d1-58c9-4578-9cbb-28d47260fbcd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3e213c-1432-45ca-9dae-8d21ed0279b7", "sighting_of_ref": "indicator--070c01d1-58c9-4578-9cbb-28d47260fbcd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18396a85-14da-42f7-a68c-7d1ed3db21b7", "sighting_of_ref": "indicator--43c29989-6b45-4881-a86c-54eff960124c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fb7ce0-c843-4a92-8917-64d969621935", "sighting_of_ref": "indicator--43c29989-6b45-4881-a86c-54eff960124c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c233c1-a376-4b69-b300-7d272d86ef3d", "sighting_of_ref": "indicator--43c29989-6b45-4881-a86c-54eff960124c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4bbc202-3338-4af5-a04b-75e19397c850", "sighting_of_ref": "indicator--4c2447c5-16dd-4929-8294-6659f7b99a42", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fc868e-0f18-4541-b4ed-cda2af52da88", "sighting_of_ref": "indicator--52164281-f6de-400d-bbb7-051ed4a04ac9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebab68a-395f-4709-ade1-51df336b7b6c", "sighting_of_ref": "indicator--6f1bbf0b-02a5-44e7-be1a-8770f111f0f8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30a8a7d-e0e9-4645-8d55-c79a0680e4ca", "sighting_of_ref": "indicator--5831f2a1-1b50-4294-99d1-2911798772b6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32270ae-4027-484b-a2ac-f0dc9161d8d8", "sighting_of_ref": "indicator--8fbec615-52ad-44e6-848b-cee1a011c1d1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d4d49e-83de-4335-8471-ed71314a6eca", "sighting_of_ref": "indicator--16d4a418-65da-4383-8b33-1da06b0a7571", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb01a1f3-1aa7-441f-852f-16497c7a9363", "sighting_of_ref": "indicator--48075ffb-7833-43cb-a508-75d2259701bf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2f2147-a7d6-4ad1-b641-983bb1b05a11", "sighting_of_ref": "indicator--5dd43ac2-1feb-4aff-a789-5d5c7117dab3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89dc5ee-d438-4cdd-b75f-e77e9daf3855", "sighting_of_ref": "indicator--f4c5a2c1-d2d0-4047-b3ff-bbd1fa5ce9a5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af41367a-73b0-4586-b5c6-2b8cd03fe060", "sighting_of_ref": "indicator--a4a97cfc-d7fa-46e3-879c-1442e8530c2b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239fea3f-d26a-415c-9127-5aa11f5a3d94", "sighting_of_ref": "indicator--cfd174ba-ac00-4892-ab08-fa83f4a15165", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ba9280-2c8a-409a-a5b1-957a3ff6b3d7", "sighting_of_ref": "indicator--cf89ad4f-1101-4ca7-a767-10e8a1c5bb69", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63d4a6c-4611-47cf-a5b9-8deae6e20aee", "sighting_of_ref": "indicator--32e5f81c-7983-4e33-83bf-636bc4e2759a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1efe58e-2178-42a2-b1a2-0ae00112ed2e", "sighting_of_ref": "indicator--ef9d6c7e-13d7-49f0-a8cb-33ad0d7773a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f1df6c-71ff-4b96-abeb-43d40852ad17", "sighting_of_ref": "indicator--50c3f9b5-9d81-4252-a1bd-04f657eabaf5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c6971c-7370-4304-9484-c9ce56ff9a0b", "sighting_of_ref": "indicator--50c3f9b5-9d81-4252-a1bd-04f657eabaf5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4082235-69c6-40c8-a6ec-56dd06903e13", "sighting_of_ref": "indicator--8ca6f8ef-0d71-44c5-94f2-9b674a5ecd7a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11a0458-31b0-4fed-bac3-a2f15a95a45c", "sighting_of_ref": "indicator--8ca6f8ef-0d71-44c5-94f2-9b674a5ecd7a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7386479-5bef-4cd9-9e64-94969f27472d", "sighting_of_ref": "indicator--8ca6f8ef-0d71-44c5-94f2-9b674a5ecd7a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1fa8b1-5b72-4878-9486-5a34a70efa54", "sighting_of_ref": "indicator--88604dc2-ab8e-4fa3-9d22-2c37c754bf1e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f556e4-d935-47ba-803f-bb1a95711a58", "sighting_of_ref": "indicator--f07dad04-475a-48bc-8270-0ca1ddb9a42f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a688fa0-bf4a-46f8-a9db-5cc7bd141fba", "sighting_of_ref": "indicator--27a3842b-3a90-4db5-a5e8-af1c104df856", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6522a4c8-f81f-4308-971e-3f22ee9eb037", "sighting_of_ref": "indicator--d45bc8a9-dfac-4f84-b688-0bf472682bd2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c675e1b-5558-4f93-877a-8043bb487a71", "sighting_of_ref": "indicator--a3e598f9-514b-40b8-b798-3099029f5a1b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6374049c-bafa-4fd9-ac76-79e79a2fbb59", "sighting_of_ref": "indicator--84fe2798-e24a-4550-81ad-cf4333ea84e8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bddbb75-178f-4833-87b0-e967da02c3dd", "sighting_of_ref": "indicator--84fe2798-e24a-4550-81ad-cf4333ea84e8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e72863-4b61-44bb-a0f7-2ca860091b99", "sighting_of_ref": "indicator--5c01ab75-ac30-42de-9b6a-d6e7a1d22e5e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17854f46-990b-4285-989b-833c3c49cf19", "sighting_of_ref": "indicator--471d9415-eb4f-4616-9376-c719ab005887", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ca2d9b-9931-42c3-b4df-77f56c0ef24c", "sighting_of_ref": "indicator--3a669f9a-ff02-4b9e-b427-0d959f8901ab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1402698a-f73b-4914-baf3-a5d3f44d2deb", "sighting_of_ref": "indicator--2f9f7ce1-33fd-49b2-a187-9ac70467dc4e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db72b9f-f914-494b-b345-b2de7495e62b", "sighting_of_ref": "indicator--3b62e1f3-a5e6-4fa6-9127-ec61ca9e0c7f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17de7879-f064-4a4e-bf56-04b58768f28d", "sighting_of_ref": "indicator--4c97fb7d-06c3-4e29-bfab-aaf91a6a967a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5f7803-d2e1-42db-a731-1998a324f935", "sighting_of_ref": "indicator--00feead0-6a42-422d-8f43-a6f6fccee0e5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88849050-bc60-43c0-ae47-fb877a65469f", "sighting_of_ref": "indicator--6e046c0d-f259-48c2-968c-8c6b3152f473", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942ee6ce-e6b4-4728-a90f-f9a395b19ecf", "sighting_of_ref": "indicator--659c0b1e-58ce-477b-b2f6-f238a2887dc9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f44b9b-9bfd-4765-b055-c01d784194d1", "sighting_of_ref": "indicator--659c0b1e-58ce-477b-b2f6-f238a2887dc9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11499636-69dd-4561-bd6c-431a3858d058", "sighting_of_ref": "indicator--6e040af7-12f9-462d-b9fb-58ff1efc7fa3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cf6717-b6c8-4707-a110-f04edba782f0", "sighting_of_ref": "indicator--857b1528-c904-4815-b857-b079a6b6edb6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5baafb6b-8c6a-49fe-a831-6ac8523373d6", "sighting_of_ref": "indicator--a8cb5b58-df3a-4d58-92e8-eff15f4c9608", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f058a6e7-0146-4cf0-ae15-ceee39560d9c", "sighting_of_ref": "indicator--ebd61bb8-e625-4acc-8a8c-e9dc9132a73e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf96d85e-0d7d-4055-8b3d-8f8b621eb0c3", "sighting_of_ref": "indicator--a6c95093-c841-4c6a-9479-6242dbe69d3a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91eea162-2f18-4e08-91c3-f38b1399d25e", "sighting_of_ref": "indicator--a1680352-8ee1-447d-bcae-7c3dca5ef6e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9d2b9d-2558-450d-a7b4-035dda5bf850", "sighting_of_ref": "indicator--27d4cdde-9c34-4962-9718-d896b23ebfe3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b8385f-4aa0-478b-ad89-eec501b5a1be", "sighting_of_ref": "indicator--ae1aed70-44e2-425e-b9c5-24a3fc40e59b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f06a637-4046-44d4-a154-ae32bd8eed7a", "sighting_of_ref": "indicator--d22555ef-f381-45e1-b421-4737840dc838", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32c7f73-5338-4c51-9041-514e8a3d8007", "sighting_of_ref": "indicator--d22555ef-f381-45e1-b421-4737840dc838", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d017603-e564-4be4-be92-728186a3b622", "sighting_of_ref": "indicator--a8c3d2a8-e02c-4b4f-8811-fa527c71e39d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770a4ab8-4cfd-49d3-95a2-28aed67d5539", "sighting_of_ref": "indicator--fbd374f0-2a1e-4347-810a-12507d1a718c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9023394-e861-40d9-9919-fa94ad89cd2c", "sighting_of_ref": "indicator--fbd374f0-2a1e-4347-810a-12507d1a718c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149268ed-642e-4e15-9c5f-5c479d283a6b", "sighting_of_ref": "indicator--34a3d531-423e-4a07-a0c9-5027eb3afc99", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1996147-0a29-4db1-8ccb-87ac5574ac9d", "sighting_of_ref": "indicator--389b03a2-fe9a-4d09-926c-a29bd1ccd840", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecbb5d5-1358-4fdb-9cd0-7becf349926f", "sighting_of_ref": "indicator--6f71ecee-5d38-4ca5-b9d7-acbcf2cacca8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fdee338-1726-4974-b915-872c4f84b26b", "sighting_of_ref": "indicator--8b73c63f-24e2-410f-b167-c9fdcf8ed2bc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b250d9-4788-480b-9163-4ed0ebd800ac", "sighting_of_ref": "indicator--a8001011-1c57-4d11-9443-7fc4fd8a359b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e63f0f-cf93-4bbf-957a-a00edda8fc67", "sighting_of_ref": "indicator--5335d5e2-9fb9-4d7b-aece-e091caa67ff8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c1e83d-2661-4aac-ba50-cc96dc508a5f", "sighting_of_ref": "indicator--64e5d878-a421-4fd6-bc24-a7228d303a9e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8816271e-c9e1-40e5-9249-68e86e29e1f8", "sighting_of_ref": "indicator--00c69f45-9c42-4c7b-b543-a553e09f9883", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6450cdcd-d566-4bc5-aa36-0e203de43749", "sighting_of_ref": "indicator--787d00fa-129d-4ed7-84cb-ca899a2afd6d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ad50fe-bea5-46e2-b6d5-a9f77003e285", "sighting_of_ref": "indicator--da0688f7-cb39-419c-939a-012198c04e34", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0f9bdf-be3e-41c4-bc0b-f592a3ec3e89", "sighting_of_ref": "indicator--a22efe91-0f92-4878-b5e7-b2eb5c55d1fa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9122cd-eb02-4c5d-9292-9e8e1a206f45", "sighting_of_ref": "indicator--c2b088b0-928a-4592-adda-3358d98c01ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabadacb-f9f9-442a-82f2-3e82db1eb53d", "sighting_of_ref": "indicator--500cbdfc-9342-4a72-9b2a-d3b25650e822", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0692ba-a1e6-4f19-8b6f-0e6fe02a61de", "sighting_of_ref": "indicator--33f6c06d-ed72-4e84-9d94-00f0ec568d65", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e83cb1-036b-4fc2-bf4f-559e7c340853", "sighting_of_ref": "indicator--33f6c06d-ed72-4e84-9d94-00f0ec568d65", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d336dd43-290b-45fa-9250-1b1d7974ddc4", "sighting_of_ref": "indicator--33f6c06d-ed72-4e84-9d94-00f0ec568d65", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fbce38a-46fb-46e0-88a7-5fb94b726447", "sighting_of_ref": "indicator--5206c717-b096-4f5a-b7df-974864a591e7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132e96c0-e3d9-4189-a751-3fe48770c0be", "sighting_of_ref": "indicator--5206c717-b096-4f5a-b7df-974864a591e7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9927d9ca-3536-48e7-a750-85aa147f6b07", "sighting_of_ref": "indicator--eddae4b2-3015-44f5-b9e6-0ec80bd570e7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8bcd8c-1b1d-4310-ae75-eb693dc3c9f2", "sighting_of_ref": "indicator--eddae4b2-3015-44f5-b9e6-0ec80bd570e7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd13215-d752-4d88-9c69-b64cbef9c951", "sighting_of_ref": "indicator--eddae4b2-3015-44f5-b9e6-0ec80bd570e7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f19f3e-4edf-4a77-a83e-4ed3e3786253", "sighting_of_ref": "indicator--6edc7b79-7f0c-4722-8ea4-b1856041d243", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34d5387-845c-4f87-a63b-16e488efb03b", "sighting_of_ref": "indicator--a432652d-86d6-4313-8372-2e0060951bd3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfae99a8-d695-4dfe-b04c-6e960bc54dbf", "sighting_of_ref": "indicator--f6f9b80b-6c26-4a62-8f09-6b126d2a3d16", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ce7da2-c13c-4b1d-92ed-39045fc19edd", "sighting_of_ref": "indicator--1bf4a338-0e5c-4214-93a0-0fce49e025d0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d6ee8e-3c89-4992-89e7-b7fd72592124", "sighting_of_ref": "indicator--1bf4a338-0e5c-4214-93a0-0fce49e025d0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdc4924-c8e8-409b-bd3b-5f99fdd12db8", "sighting_of_ref": "indicator--a5ae1aa8-58f4-4890-b905-d1f245e13537", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c44d51-d814-4015-90e7-72899764caa7", "sighting_of_ref": "indicator--a5ae1aa8-58f4-4890-b905-d1f245e13537", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5baf764d-d0ce-4095-94b7-4b521e010cc3", "sighting_of_ref": "indicator--80c59c33-9791-47f6-86fe-a0a3c6b3aeaf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d654c21-ebd4-4539-8bd2-ee4fbd8b1063", "sighting_of_ref": "indicator--0d87a6f2-b059-42c9-b874-bd5adb91352e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0510c5d5-31f7-4e9c-935a-ac51aaca1ea5", "sighting_of_ref": "indicator--b0859b30-8d2a-4ee3-b1bc-2be8f509c77c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa3b265-3d9c-4ffa-8918-a7fa1dd5906e", "sighting_of_ref": "indicator--2628bb0d-61d1-479c-a0b9-327c8ed912e0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce787e05-ca9e-478b-a065-83bd988d1fc4", "sighting_of_ref": "indicator--6c5bda23-8f32-49fa-b59c-b005c4f28afe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b739da77-b240-4184-a0b2-87b80296832e", "sighting_of_ref": "indicator--6c5bda23-8f32-49fa-b59c-b005c4f28afe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1700417-fab2-4c4e-a96e-690618ef2934", "sighting_of_ref": "indicator--6c5bda23-8f32-49fa-b59c-b005c4f28afe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89cb5765-2337-478b-bf3e-973d75d23a9e", "sighting_of_ref": "indicator--e1a1c495-825c-41be-8ccd-852905e9d942", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c99a639-c1ee-4ff0-b274-bae2c13c9e09", "sighting_of_ref": "indicator--b48f24f3-eae8-46d0-b469-8923dc6b2ae3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39a8ea3-ed98-4287-b703-2fa30762becc", "sighting_of_ref": "indicator--b48f24f3-eae8-46d0-b469-8923dc6b2ae3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6915bfca-6ede-4250-9d45-c2b4dc215f6d", "sighting_of_ref": "indicator--63df1519-ba3c-4a38-8bb2-1b65edf3c225", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1d4318-2258-4762-b585-df0e6b5b929f", "sighting_of_ref": "indicator--63df1519-ba3c-4a38-8bb2-1b65edf3c225", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ee8e40-e85c-4bfa-adff-a28c14ad75bb", "sighting_of_ref": "indicator--20ae64d6-c2ab-4b7f-a122-a29c486e62cc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5db2f80-9639-4239-89c5-0f69b450ed3a", "sighting_of_ref": "indicator--20ae64d6-c2ab-4b7f-a122-a29c486e62cc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc7f40a-796e-4545-8176-06ea5ef7b9c8", "sighting_of_ref": "indicator--c261ec62-2330-403e-9b24-6496153316f3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210a7bfa-d20f-4186-b204-4e922050f65d", "sighting_of_ref": "indicator--af08fce6-0b1a-4795-9de7-769c0b5e4c06", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8b83e1-2f25-47bc-a67f-bb9f05f6bd08", "sighting_of_ref": "indicator--af08fce6-0b1a-4795-9de7-769c0b5e4c06", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fdc85a-518f-475c-ad93-d8c922d0c2d8", "sighting_of_ref": "indicator--84ac0129-dc1c-4e41-9b08-097bfec659ca", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd76e331-bd2a-41ae-bde9-69713afac9ae", "sighting_of_ref": "indicator--2d36b60e-06e8-48fe-a1c7-b19b5590e648", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8fe7857-e7cf-42c3-97ed-00f8a8ce51ec", "sighting_of_ref": "indicator--aaeb531b-7cd0-4712-924f-aa9d7e1cb2ad", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c196402-1620-480b-a8f2-40f4ec7fe4f8", "sighting_of_ref": "indicator--ac9c308d-0c6c-433e-889a-daff86098ee8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6717b693-5bfc-4981-bbc9-3c03e5360220", "sighting_of_ref": "indicator--ac9c308d-0c6c-433e-889a-daff86098ee8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7058d9d6-3042-4dec-bcad-389eb3a16f13", "sighting_of_ref": "indicator--e589f22f-23f7-45d8-a200-db5bd2b625a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb570b8e-1ff3-43ee-a2a6-09dc5465b241", "sighting_of_ref": "indicator--ea96661e-bea7-4ddf-bbf6-39ac6511246d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64bb037-9dc8-44db-9fa3-9f4544333af2", "sighting_of_ref": "indicator--be498a6f-a580-45a7-b785-8641f314ed02", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbc7507-266c-42c9-8789-4142e4328b1f", "sighting_of_ref": "indicator--be498a6f-a580-45a7-b785-8641f314ed02", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184a1df3-c764-4ab3-812a-0cff6b9d8f1e", "sighting_of_ref": "indicator--7e9657ec-7181-457c-8d0a-40bf0f8bc6b9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96f07e8-e8ed-4207-96c7-8df655e3b587", "sighting_of_ref": "indicator--7e9657ec-7181-457c-8d0a-40bf0f8bc6b9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab4433f-af4d-4f0c-96a5-aa39b005d239", "sighting_of_ref": "indicator--9f9ff773-c163-43e6-bb0d-ec6f66b05ef1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86fe933-1181-4bc3-80f9-fdc3022b77b3", "sighting_of_ref": "indicator--091ef02d-a44b-444b-88ca-67a9de2eec6e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc00455-233c-409b-9cad-fb58a74dd39d", "sighting_of_ref": "indicator--4ce4fac7-8b76-41f5-a097-e5a302d0a2c1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56c7130-6f19-4ee9-abc4-ef7b3c5fdf92", "sighting_of_ref": "indicator--954d0cd0-d2cb-4425-8829-f04d71dc9dd9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bb880c-3423-49fb-8286-be13ffa56af4", "sighting_of_ref": "indicator--954d0cd0-d2cb-4425-8829-f04d71dc9dd9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9168ede-695d-4f3e-b3e2-7c5190d25836", "sighting_of_ref": "indicator--954d0cd0-d2cb-4425-8829-f04d71dc9dd9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdbea895-9936-497f-8a55-8b7c70850265", "sighting_of_ref": "indicator--12d938ab-dd4f-4553-866c-c3f6f949260a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b041a667-7861-4a70-b00f-1f746c92e318", "sighting_of_ref": "indicator--348c268d-336f-405f-ad47-66cdcc122527", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790438f6-da75-432b-a506-8cc8a8462389", "sighting_of_ref": "indicator--348c268d-336f-405f-ad47-66cdcc122527", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e1170e-dec1-4aa9-8491-ef6f719140b6", "sighting_of_ref": "indicator--ed9d9a10-7510-420e-9904-7a2562a1cc99", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90a2ec2-d1a6-4769-9208-ca04d001835b", "sighting_of_ref": "indicator--ed9d9a10-7510-420e-9904-7a2562a1cc99", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a339c8-70c3-413c-9a2d-2a912c340591", "sighting_of_ref": "indicator--760fa9ca-1da5-459a-84d3-c72d713e83b4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c25680-ea98-4e6c-8705-7ed55f37bc4f", "sighting_of_ref": "indicator--760fa9ca-1da5-459a-84d3-c72d713e83b4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5260bcac-403b-4cea-9185-ae65895c5680", "sighting_of_ref": "indicator--3afd8277-413e-4086-9350-468b1a980b78", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c079dea-73f1-44b5-997f-8be0b55de4e8", "sighting_of_ref": "indicator--8ebc5fb1-914d-4d78-8cfc-eb4d7e68ecfb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac47b0f-a19a-4c04-98d1-99b66b96484a", "sighting_of_ref": "indicator--709557f4-0d6e-46d3-8c42-6bec2cce0052", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8d5976-9d9e-4c56-a310-e68a093efce1", "sighting_of_ref": "indicator--6931e102-7789-4bd8-8887-7b7f0a89e525", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7cb37e1-5bc4-40be-adad-dc62622d3e8c", "sighting_of_ref": "indicator--6931e102-7789-4bd8-8887-7b7f0a89e525", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acee5f69-1213-4fba-9ddf-4da11f4fd8fa", "sighting_of_ref": "indicator--6931e102-7789-4bd8-8887-7b7f0a89e525", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dca5eec-fb40-4269-9fb2-646a823166d5", "sighting_of_ref": "indicator--e09a2d0c-5143-46c8-a741-495b32078bca", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ad1b9b-34a6-4553-8e2c-fcb6d69f6609", "sighting_of_ref": "indicator--7b0c33f5-c31c-44ca-bfdb-0bd5b222ed77", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41ebc01-db88-40f6-9744-a7ef618de0ad", "sighting_of_ref": "indicator--7b0c33f5-c31c-44ca-bfdb-0bd5b222ed77", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb11a31-10d1-4ac0-9d4d-b3998026e974", "sighting_of_ref": "indicator--fa48a654-6821-465e-95a5-1c548395f003", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8c9a02-9ccf-40bc-b0ec-0a8b1efd804d", "sighting_of_ref": "indicator--fa48a654-6821-465e-95a5-1c548395f003", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1504262-fe80-4f04-a9cf-fd4e98c95922", "sighting_of_ref": "indicator--fa48a654-6821-465e-95a5-1c548395f003", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ac6cac-3e88-4bba-bd3e-016e08933f2a", "sighting_of_ref": "indicator--8005da45-8283-4166-9755-5a1a69f026f0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b373ef43-8235-4d41-81d9-ad3c37cae050", "sighting_of_ref": "indicator--8005da45-8283-4166-9755-5a1a69f026f0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9efe3f-9d37-4bca-822e-da6119f9d2df", "sighting_of_ref": "indicator--8005da45-8283-4166-9755-5a1a69f026f0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde5c35c-97ec-4419-9cb4-1153a692c473", "sighting_of_ref": "indicator--23894086-4e15-4c3d-ba9d-edd786242ab6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbdbbc0-4e8c-4876-be6c-a318381dc547", "sighting_of_ref": "indicator--6d1e8361-c65d-4501-b84c-358498665d5e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f498ee-3751-4acb-9ee4-14d2d0792e4c", "sighting_of_ref": "indicator--6fa6303a-aa2c-4bc3-8ab2-453f5586e675", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c760e3c-8940-4725-b83d-1fbe90c2a3c4", "sighting_of_ref": "indicator--fdcdb27b-a10f-4526-9f2c-3f4d207c7011", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8113f4c-cb50-4297-9bee-98ac2ffb707b", "sighting_of_ref": "indicator--b39a3197-59c4-492d-b11c-43304610b648", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d489991-658a-4021-a5bc-5585f05dec1b", "sighting_of_ref": "indicator--da63ec99-d3f6-4e7c-a81b-fdc1b0147a0c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847d9eff-25e7-49ad-8a12-ef8937e7e4af", "sighting_of_ref": "indicator--1c158641-cb52-4f8b-baef-f999cf07260e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e9ae59-2de9-432a-80bf-3272b13132ce", "sighting_of_ref": "indicator--4261bdd4-a20e-4190-9735-62a678ef0766", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6036c2c0-93a8-4429-ac88-40bc11e5e53f", "sighting_of_ref": "indicator--4261bdd4-a20e-4190-9735-62a678ef0766", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd691d68-8e8c-41b0-adf8-a45c364bc6fc", "sighting_of_ref": "indicator--d90f6faa-5125-4637-afc6-d23257955e54", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a92d11-cc7c-4bd5-be3b-c6951947af23", "sighting_of_ref": "indicator--17ec8ee7-bbc9-494d-8580-f96b782e0908", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec47a2b-c69e-4f25-8626-0be55c83b363", "sighting_of_ref": "indicator--17ec8ee7-bbc9-494d-8580-f96b782e0908", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df898b86-bbf7-4be2-858a-b730e0f05316", "sighting_of_ref": "indicator--17ec8ee7-bbc9-494d-8580-f96b782e0908", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfca822-9318-4487-b25b-eab16ae8f1c7", "sighting_of_ref": "indicator--c4a27bfe-8077-4a27-b1c2-e9c721105c54", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a66f0f8-0d5c-48e8-a1fa-73d90beda0e6", "sighting_of_ref": "indicator--287ac833-596f-4cea-abcc-5f973aa96899", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142e0bf3-ee1d-411e-86b7-48b29bd7dc59", "sighting_of_ref": "indicator--2894e338-9110-4da0-ad2a-ceaf74b23c92", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39542bce-ad37-4e1c-8252-c86a10f363a1", "sighting_of_ref": "indicator--1e6f5381-7a6d-4aec-9164-fbddedbf3b67", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6853aa22-a0da-443f-bddf-8f5f8b17e3b1", "sighting_of_ref": "indicator--1e6f5381-7a6d-4aec-9164-fbddedbf3b67", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b702b25e-2150-46f0-870f-7af433661621", "sighting_of_ref": "indicator--04751154-99d1-4ff6-9657-71b6bfb32e83", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9fbf13-5202-4ced-8c3c-431cc85034c8", "sighting_of_ref": "indicator--ec9273e0-08b2-474c-ac42-8c5f95a4cc61", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a456cac1-cee3-45e3-a9a0-1c72fb05b689", "sighting_of_ref": "indicator--ab46fb02-5d0e-4233-bab7-cff21ed3eed5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5350366-5ba0-41f1-8c4e-6ed30fb69032", "sighting_of_ref": "indicator--3c1c46be-c96f-43fb-8868-07b6bb74ffa0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4688fc9-59a0-4ec3-813c-9fa3832ebd88", "sighting_of_ref": "indicator--3c1c46be-c96f-43fb-8868-07b6bb74ffa0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85aa9bfc-3bbe-44ef-8120-8b2d50ccaa0b", "sighting_of_ref": "indicator--c9e534f6-3b84-413a-86f8-0d520ce7e987", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7baabd50-b1c1-408a-b323-a3ec404398d5", "sighting_of_ref": "indicator--c9e534f6-3b84-413a-86f8-0d520ce7e987", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d823b31-62c8-4a10-8134-3d3c975b54d9", "sighting_of_ref": "indicator--193a7be2-69d7-4a54-9595-988c57e0aa46", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662e0679-0229-4de3-bc12-52bba236e67c", "sighting_of_ref": "indicator--4625a267-e97a-4cf1-8a85-bece37e5cb6e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f98bd56-8431-4e8f-8633-d81455abc233", "sighting_of_ref": "indicator--d963cf5d-af2d-46f3-a16d-9a3e61c14a8e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e81fd0d-b1bf-4ae7-9995-e53a2201631a", "sighting_of_ref": "indicator--d963cf5d-af2d-46f3-a16d-9a3e61c14a8e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ec89eb-13cb-4a49-9ea7-facd4a74f4b5", "sighting_of_ref": "indicator--d963cf5d-af2d-46f3-a16d-9a3e61c14a8e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64461cea-6f1e-4936-912f-9ac7eef5a622", "sighting_of_ref": "indicator--af0b1172-2357-4839-be10-34b8557c6214", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa08f3d-7f71-41d6-b299-59842a844c3f", "sighting_of_ref": "indicator--104a3f1d-6594-4708-91be-346c475fa90c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02930991-f12b-4fc3-b208-73243bf8615a", "sighting_of_ref": "indicator--104a3f1d-6594-4708-91be-346c475fa90c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e728b7e-d9e5-4383-98f2-b6371e36a685", "sighting_of_ref": "indicator--fbaca125-a093-44ed-8a15-139a96d169a9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33767440-b90e-4ccc-b784-6dabc3e652e2", "sighting_of_ref": "indicator--ef20a906-dc1c-4a0b-8c18-803b9541e409", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d789046c-9ab6-459b-ae88-2a9ae00794b2", "sighting_of_ref": "indicator--03728f99-dfae-4639-8f29-2ebd151d962e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8806442b-a957-466d-bbc9-72b09962c942", "sighting_of_ref": "indicator--c41661b8-4c41-4cba-9351-2d30a8439f2a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5910e71b-6c79-48f6-84f0-e87b53c5ebfe", "sighting_of_ref": "indicator--c41661b8-4c41-4cba-9351-2d30a8439f2a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597bf9e1-40e0-4065-a5c4-b87b44cf50a9", "sighting_of_ref": "indicator--c27b6851-a661-4835-a70a-1b79b5682be7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c43c22a-f501-49db-ba0f-0cf280e6a216", "sighting_of_ref": "indicator--f00c6adc-e228-45db-8092-f01f466012b4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bac0711-ae75-4f00-960b-36a6987fc060", "sighting_of_ref": "indicator--dfeb8db4-cdab-41e1-904b-634a11e5bf3b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395c5b22-0170-4ac5-93e5-75745096dbbb", "sighting_of_ref": "indicator--dfeb8db4-cdab-41e1-904b-634a11e5bf3b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fe2d3b-8945-46f9-bb69-b0ed387355c9", "sighting_of_ref": "indicator--7844f9dc-1424-49de-b421-ff100ab0c616", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60dc89a-7b10-4603-91bc-60941c72f444", "sighting_of_ref": "indicator--6341971d-6a36-4f25-b96f-7c5156754437", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1eca4d-11e9-4e5e-9174-d97368e6b0d5", "sighting_of_ref": "indicator--6341971d-6a36-4f25-b96f-7c5156754437", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731fe207-41d2-4453-bae4-0fd407e9a228", "sighting_of_ref": "indicator--e38fad28-28b2-4a52-b747-9e8e9403adbf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b0fcd5-69a8-411d-a1ce-ee57c1761283", "sighting_of_ref": "indicator--11f90a26-6506-4931-bde3-c0bb905f80eb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c7950a-afa1-43ec-b472-6d4e7b461f57", "sighting_of_ref": "indicator--11f90a26-6506-4931-bde3-c0bb905f80eb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806d4a3d-29f3-4f22-a062-d4acba41afd9", "sighting_of_ref": "indicator--1902cea7-c691-4bd0-a163-8eb0fa5bde52", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db6647b-b1ba-44af-a591-d7d09a915988", "sighting_of_ref": "indicator--7e800bdb-e625-4004-8d7c-c5b62720b947", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8131735e-e720-4a37-bf31-2fdb24fbc41d", "sighting_of_ref": "indicator--7e800bdb-e625-4004-8d7c-c5b62720b947", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a999112-84fb-48c0-8061-567ffad58a2e", "sighting_of_ref": "indicator--cc7ce845-299c-497f-a3d7-96058dd3224f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2500d5-5a92-43df-9398-6f34ec454e9b", "sighting_of_ref": "indicator--cc7ce845-299c-497f-a3d7-96058dd3224f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c5cb6c-a100-4d0f-b1c4-5c2c48d1198e", "sighting_of_ref": "indicator--cc7ce845-299c-497f-a3d7-96058dd3224f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694dc01a-c8c5-46d7-b42c-0ffe2c1db505", "sighting_of_ref": "indicator--e54bfb34-07b3-4cba-b3dc-2e2164630fbf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01aa5a59-ef3d-43ec-a216-8a612625074d", "sighting_of_ref": "indicator--520e1e4e-e2dc-4507-beb8-c3e8ba8c30c8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0506fc5-6264-4d4a-9725-c5f36e0cd845", "sighting_of_ref": "indicator--d3e07842-6f8c-41ca-997d-f73bca23e359", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f54cad-e48d-40bb-9550-36fc201f9be1", "sighting_of_ref": "indicator--d3e07842-6f8c-41ca-997d-f73bca23e359", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6c692a-3f3c-474d-933d-6823b230a290", "sighting_of_ref": "indicator--d81b0a8e-766e-4ba0-95eb-7d2f72679212", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76dd9d3-1fdc-4f54-b21e-f72b18c2838d", "sighting_of_ref": "indicator--8b95e6e8-70cb-4e60-9a4c-45ec5622207d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7695ebfa-cb55-4b5f-8eb3-249bc74b051f", "sighting_of_ref": "indicator--03d88593-03f9-47d6-a7a0-3a81825b3bfb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fceba2b9-61f0-420f-9ec7-e61a9657f1b1", "sighting_of_ref": "indicator--a7a5cbce-e7da-43e4-a399-500ef20162b8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26bada0-a97b-401c-8b45-54de417988b0", "sighting_of_ref": "indicator--a7a5cbce-e7da-43e4-a399-500ef20162b8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2bcb0a-ff0a-4d18-8d1a-3abfbe413ee9", "sighting_of_ref": "indicator--82daccd9-0c8d-47da-adbf-919330489e84", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c58c9a-1dd1-4149-bc6d-ef482d76aa97", "sighting_of_ref": "indicator--82daccd9-0c8d-47da-adbf-919330489e84", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78266b8-f7a6-497d-a548-e84df46bb014", "sighting_of_ref": "indicator--16dc3ddf-6d3e-45c5-9452-cfa2a8b3be71", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae092aa1-91b0-4d1e-8ba4-1dc6115e195c", "sighting_of_ref": "indicator--c159c962-61da-4187-9205-7cff4af04551", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc70ece-e44f-4f85-b281-4f6dd7ffaf18", "sighting_of_ref": "indicator--0063d842-adf6-4bf9-9e53-3f12c3a7c82e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4c8234-1a20-4fe1-bdc8-36c834d3fc67", "sighting_of_ref": "indicator--c92b271d-fd7d-40c8-9d20-5f6a1a9bd46c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c574b175-969e-4595-91f0-a5a8424f0b85", "sighting_of_ref": "indicator--9a564030-38ca-47a3-8b27-8667c1d30e1a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612cddb0-3f1f-4c35-9168-76b7efdbc37e", "sighting_of_ref": "indicator--46d29df3-97f8-4b51-8afd-dbc45a4a91b0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea70dd5-7788-4595-a4a8-b5af85169fb9", "sighting_of_ref": "indicator--7afb2684-f02a-4827-bb40-b64d4ea457a6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9ef599-1cea-480c-902d-58481b29e662", "sighting_of_ref": "indicator--7716c011-6a8a-4c0c-a89d-15a2241b1eae", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ee4f41-2dc2-4bca-923f-770ad668dd2d", "sighting_of_ref": "indicator--f5a654fc-03f7-4a24-a4ad-de02a5a3a9b8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b3d6f4-c376-4352-8fef-22ef0df4a150", "sighting_of_ref": "indicator--f5a654fc-03f7-4a24-a4ad-de02a5a3a9b8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ba213e-1eab-47a8-9136-10e56cf7d8f2", "sighting_of_ref": "indicator--10569888-3fa4-4ec3-be83-81e057060e20", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1c6e72-4fbe-4705-bcd7-215a2003a873", "sighting_of_ref": "indicator--10569888-3fa4-4ec3-be83-81e057060e20", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa89c0ab-0924-4edf-b011-73f1aba90e98", "sighting_of_ref": "indicator--03540422-a0e5-41c7-a8fa-ae5e6debaa98", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06567e0c-34de-4cba-b151-78ef09eb72e9", "sighting_of_ref": "indicator--73c4b52b-2ff8-4585-bc20-d74b391d195f", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d507f99-7f98-40e5-af66-b8a42e5acb03", "sighting_of_ref": "indicator--b8846cbc-2ccd-4baf-baa9-c525e962342b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368df17c-7e1d-4cc9-afd5-697db3a77c9b", "sighting_of_ref": "indicator--7ab41794-aa6a-4bf8-ac9d-aa35eea9a070", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81122044-1560-42a4-92aa-82d19b7ff2a4", "sighting_of_ref": "indicator--750c7ce6-519b-45f5-97a6-c75cba662c51", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1257ac-4ceb-42f6-8bf8-474a41383101", "sighting_of_ref": "indicator--2cb989e4-02f3-4b57-bdc0-93e48733c7ff", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17a69ca-f47c-4f59-a0a7-06d626f4034b", "sighting_of_ref": "indicator--2cb989e4-02f3-4b57-bdc0-93e48733c7ff", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5d6f2c-f539-48a6-9d41-c3dd99f687a6", "sighting_of_ref": "indicator--59108bcf-f1f4-44f3-8286-01041cfb3b02", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b986cc7a-184c-415c-a3e5-7d161f891e3d", "sighting_of_ref": "indicator--708dad8d-b4c5-4385-95e9-de565a4674c4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940b3f47-0393-4052-99b5-ff8d6ce63bf5", "sighting_of_ref": "indicator--fd32ee03-440d-40e8-9fe5-450643fda3ff", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c6def0-fc4e-4251-a974-d6e18a79c3a3", "sighting_of_ref": "indicator--fd32ee03-440d-40e8-9fe5-450643fda3ff", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c6320f-c368-4abf-9fd2-9825d672b78f", "sighting_of_ref": "indicator--77da802e-1753-4f2d-8f4b-4a77715994a5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49fb364-7583-46f3-8a4f-02be4aea766b", "sighting_of_ref": "indicator--77da802e-1753-4f2d-8f4b-4a77715994a5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaffed12-5864-44a3-940d-ba005e0b1558", "sighting_of_ref": "indicator--bf1e9946-8c49-401c-80d4-f58952a22b29", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd81e2b-6e97-4d92-99fa-0e032e75856e", "sighting_of_ref": "indicator--d91dee79-f869-4080-9d75-462bf0430336", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f42ddc-a4ed-4826-8c9c-4850ad83e96b", "sighting_of_ref": "indicator--52f0fd57-b4fc-447e-977c-798c224cab98", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46cd13c-c51a-45db-9fc0-5ecde2f7b3dc", "sighting_of_ref": "indicator--52f0fd57-b4fc-447e-977c-798c224cab98", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c1908f-487d-4866-be7c-ecf7fdd848bb", "sighting_of_ref": "indicator--99b01af7-57f6-42a7-b839-bd3c134aac3c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4daafbd-e924-41ce-8f57-99e374caeac1", "sighting_of_ref": "indicator--c9e71e79-d484-49c2-b223-5c12fae7224f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb5041f-1f52-4495-b192-f6191b2c1fd2", "sighting_of_ref": "indicator--b5e1d021-3c27-4d9c-ac83-0fe512c3bdb7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea28c4e-d039-42a5-b7aa-122236f80e66", "sighting_of_ref": "indicator--7485790d-fb6f-4ff3-9f09-a57032dd6e99", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c416fa90-bd8a-41e8-b2f6-382d45e8e5e8", "sighting_of_ref": "indicator--e9b0e448-7904-4190-8787-d9c406002d23", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e855c0-0ccc-4495-9e48-e629c82fe8c0", "sighting_of_ref": "indicator--546d80f4-0322-4de8-a3b0-7139082b22d5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14447ed-53bb-4d93-bbd9-65d55ae7a4b7", "sighting_of_ref": "indicator--c135f2fb-e2cd-4518-8796-0b4ad05d131c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85e2a1f-a911-4502-b15f-a4700f48aa50", "sighting_of_ref": "indicator--58cfa979-2f27-4cbd-be91-ed8b897c728d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d789eb53-81a5-47f6-b6ef-25e2dc77a0e6", "sighting_of_ref": "indicator--58cfa979-2f27-4cbd-be91-ed8b897c728d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb1eafd-3873-47ad-946e-0a383909b9cf", "sighting_of_ref": "indicator--86fa948c-952e-44e5-8919-3bb930e23453", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802b12b8-d2e7-4583-89dc-af22999c385c", "sighting_of_ref": "indicator--dc2892d0-2c23-4ce3-984d-738457aea123", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c8f946-ede2-4d4d-b6f6-db180bec90c9", "sighting_of_ref": "indicator--dc2892d0-2c23-4ce3-984d-738457aea123", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae5e22c-7ffd-497e-89ac-7b02814db9ca", "sighting_of_ref": "indicator--348cec58-d331-4425-94bc-96f6596129d5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9577193f-477d-4054-85be-ca5f4d62492a", "sighting_of_ref": "indicator--147da42c-8bdd-4736-8d87-b4c4c6ba4e0a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a031646-0955-4037-92d2-fbc10ad632ce", "sighting_of_ref": "indicator--0faa3560-9eee-41e0-b558-37634fd3b69e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f69b8a3-9434-415c-b791-f6f3c782b4c4", "sighting_of_ref": "indicator--c4c0cd07-2103-4d98-8051-d1c2b47ee585", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d36bc3-fbe3-4e6f-9ba9-9c57288336e0", "sighting_of_ref": "indicator--01dfb482-63ad-4d8a-b260-2de408efcf16", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33264a0-e0fb-4c66-80db-40df53b0ba3c", "sighting_of_ref": "indicator--01dfb482-63ad-4d8a-b260-2de408efcf16", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c737ce9-c01b-4a37-984b-f393b20c9a9f", "sighting_of_ref": "indicator--b9b9f5e0-8fcd-4e15-986d-efc559c36a1b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e172dfbf-6cb4-4b74-a8c2-410b05fb935f", "sighting_of_ref": "indicator--7594577b-802e-4903-b745-c8d3acb9188f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c36ee0e-8343-499d-b787-635a9355ce69", "sighting_of_ref": "indicator--7594577b-802e-4903-b745-c8d3acb9188f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ed0156-8c44-42b2-b77b-ad9f72142a9e", "sighting_of_ref": "indicator--7594577b-802e-4903-b745-c8d3acb9188f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f236a00-03f7-4417-9ab6-c2d40e93f3b3", "sighting_of_ref": "indicator--5046fbaa-9062-4aeb-87a2-267c726a5329", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2314622-0c61-496c-8678-ab2588d1ad99", "sighting_of_ref": "indicator--5046fbaa-9062-4aeb-87a2-267c726a5329", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a2d149-0dd9-4915-965c-f1929124ceba", "sighting_of_ref": "indicator--adf71839-7aa3-429a-93f8-ff6ce3635827", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfbf4dd2-ee40-4e8d-aa3a-b514edea36fa", "sighting_of_ref": "indicator--875c8152-860e-4875-bfef-f80ef48ec252", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c832fc-9cfd-40aa-86dc-1764c1a7569c", "sighting_of_ref": "indicator--875c8152-860e-4875-bfef-f80ef48ec252", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c00b75d-c74b-44e9-b105-5f21e4f66f3e", "sighting_of_ref": "indicator--875c8152-860e-4875-bfef-f80ef48ec252", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1729f0d-5302-452e-aeb6-2225258dd34f", "sighting_of_ref": "indicator--7fa6b456-4e1d-4065-9703-7d5f7c4d6fc7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d8e31c-6181-425a-a560-638adcc43311", "sighting_of_ref": "indicator--6fc122f8-651d-43d8-bfd7-a9ef6c0183f4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f56182-d52f-42d5-b05c-c0d18bf1e2a4", "sighting_of_ref": "indicator--6fc122f8-651d-43d8-bfd7-a9ef6c0183f4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c6a783-487a-429d-a0e3-03d01ba928d0", "sighting_of_ref": "indicator--964420ce-d015-4d8a-9ce3-b3096f063aa5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c50c934-8792-49a2-8d77-d681b5bc46fc", "sighting_of_ref": "indicator--95f32f95-4188-4e94-b851-3f58cecfd1b9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99eac139-c3a3-4e1e-9490-c27ba6e13f02", "sighting_of_ref": "indicator--95f32f95-4188-4e94-b851-3f58cecfd1b9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcc2786-d9da-4a10-9ef9-395b112b8364", "sighting_of_ref": "indicator--95f32f95-4188-4e94-b851-3f58cecfd1b9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4afa19c9-de1d-47f3-8636-d0d2a504f0cf", "sighting_of_ref": "indicator--76b1c791-9e5d-4741-a66b-3419e1ce1eb9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67dfa292-2397-4cac-8377-42ebf77683a3", "sighting_of_ref": "indicator--82a52af5-8673-4f30-9d71-7fc2afec4288", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a301a939-ccef-417f-9d52-ed8baeba4f5c", "sighting_of_ref": "indicator--82a52af5-8673-4f30-9d71-7fc2afec4288", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46c1218-248e-4fd1-ae63-ef1375e430b6", "sighting_of_ref": "indicator--2cd79797-a156-46f9-b198-e5df7a418cd7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8b1b00-23d4-47e0-b28d-bc14dc615de0", "sighting_of_ref": "indicator--4e39ea10-2e63-4989-b71d-6222a4c0fd4c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad79abd3-39f0-43ca-8cde-57b5f9ff622c", "sighting_of_ref": "indicator--aca9b34b-70df-45a2-a8d1-894a479287bc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7532ae0-e9e0-447e-9bc1-8ec741f179a2", "sighting_of_ref": "indicator--52cce5fe-38a3-465d-9c43-ecea8ec67281", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aadb941a-54ea-42ba-97c3-92d089e155f8", "sighting_of_ref": "indicator--7ac4fb0e-9329-45fe-9f12-ff2c863428d6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abbfc974-314d-407a-a188-db8a4688f0e9", "sighting_of_ref": "indicator--3c8bf4b7-6b69-4ae7-b069-343e9f6c5ced", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ffbf566-2c56-4a34-ab07-5b948a6e7e21", "sighting_of_ref": "indicator--3c8bf4b7-6b69-4ae7-b069-343e9f6c5ced", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089a93d2-a108-49a4-9b7f-a3fa1443e78a", "sighting_of_ref": "indicator--e77af6ce-994f-485c-a444-5be3d533aa2b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730aae16-c84a-4632-b048-388468c49978", "sighting_of_ref": "indicator--1b5b889f-e91a-4b09-9be4-38df87842869", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea88fd4f-7f80-40bd-b2d2-2bd7e4870e42", "sighting_of_ref": "indicator--473cede5-826b-4cc5-ad82-056846738045", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c293174e-98bd-48cd-baf0-8fe1a9f9da3a", "sighting_of_ref": "indicator--473cede5-826b-4cc5-ad82-056846738045", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89fc694-ec69-466d-82ec-0badb2ab0500", "sighting_of_ref": "indicator--6b597f1e-cef9-469f-8fde-0d01452f035b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735820f0-209e-4735-942d-e741e32b216b", "sighting_of_ref": "indicator--36866f9d-8ff7-4b23-a788-1e5765c7fc78", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae657f1-bfe1-42ff-99af-4b42a3694aba", "sighting_of_ref": "indicator--36866f9d-8ff7-4b23-a788-1e5765c7fc78", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8db7ef-4c16-44de-b619-89504276549b", "sighting_of_ref": "indicator--7bbec021-1a35-45cb-b534-b14c377245aa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f094b387-36b9-4394-9ca0-1af4351ea4ca", "sighting_of_ref": "indicator--409e324b-c7b0-4846-b9bd-e50713d7fad5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ebdfc0d-4ee5-420b-97b5-158d98e7ad4e", "sighting_of_ref": "indicator--7f1ce4b7-8bed-4627-962e-e4e116e4877b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c4412d-e6ce-46d8-8692-ae0b7da8492e", "sighting_of_ref": "indicator--7f1ce4b7-8bed-4627-962e-e4e116e4877b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9617565-395d-457e-bd29-3cc35fb90a28", "sighting_of_ref": "indicator--7f1ce4b7-8bed-4627-962e-e4e116e4877b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedcf2b0-3a0c-4843-93c9-744e82ec2fbb", "sighting_of_ref": "indicator--958d3fdf-d3c1-49fa-9529-c73150e08328", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72abacd-da15-4eaa-abd7-364963b756a6", "sighting_of_ref": "indicator--958d3fdf-d3c1-49fa-9529-c73150e08328", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17d1b5c-bdea-4df7-9932-d56ba6834f1e", "sighting_of_ref": "indicator--958d3fdf-d3c1-49fa-9529-c73150e08328", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4de1bd-c72d-4b66-bfb2-efa746a1375f", "sighting_of_ref": "indicator--e31f8c76-0632-4fc1-84d7-13726dbbf109", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d260618b-7986-4599-8204-078fc5f6f013", "sighting_of_ref": "indicator--1cdc8e37-a5a8-46f6-8e3d-206a9e2f44a9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5704a1b9-0fcc-48dd-b4b1-9a71420f66ce", "sighting_of_ref": "indicator--1cdc8e37-a5a8-46f6-8e3d-206a9e2f44a9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbf74c1-3f3a-4285-bddd-1ba51838a485", "sighting_of_ref": "indicator--5f94e9a4-bb51-450e-a665-779f2a08a369", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c55c76c-811b-4d2b-91ea-9577c20f1543", "sighting_of_ref": "indicator--91e1f5c9-73cf-419a-960d-d8b1c240789b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc23eb3-176c-414e-bc02-dea08a6ffe56", "sighting_of_ref": "indicator--91e1f5c9-73cf-419a-960d-d8b1c240789b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99eb1be6-1dea-4d9d-89d6-ffa48e99e2c1", "sighting_of_ref": "indicator--c1739129-b083-4a3d-8349-20206b2b8d55", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddee007d-14ac-4adc-970c-00d8250c5b20", "sighting_of_ref": "indicator--b4f84bc1-4c07-4406-8266-218298e88034", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f2b122-7c7c-4b19-be6b-75fa1efd0153", "sighting_of_ref": "indicator--b4f84bc1-4c07-4406-8266-218298e88034", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf486c84-6e4a-440c-94db-f1ba64e795c4", "sighting_of_ref": "indicator--b0d5a347-6f9c-4548-9fb0-bdc42f5304d4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2cbcb5-ba9d-4d0c-8dee-c4db5fffe496", "sighting_of_ref": "indicator--6c3a9723-a8dc-4360-a465-d5c9363981f0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9905fbf7-8ceb-404c-a195-151bcccd34cc", "sighting_of_ref": "indicator--6c3a9723-a8dc-4360-a465-d5c9363981f0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ce7058-d4a1-41f8-b8ad-da151dc598e9", "sighting_of_ref": "indicator--bf4ca924-f2ff-4444-a2fc-ef6bae359ce9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b30369-0f41-403e-97b1-1ee9ff5e0441", "sighting_of_ref": "indicator--bf4ca924-f2ff-4444-a2fc-ef6bae359ce9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242a5a38-2fa5-44a0-bbc3-3eabe9b41b59", "sighting_of_ref": "indicator--824aeb42-1306-4092-a5df-ff808e12341e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a101148f-5002-4f81-b48d-12166e623fa0", "sighting_of_ref": "indicator--824aeb42-1306-4092-a5df-ff808e12341e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f17bf9-57d3-4fda-a93b-d275df9d76de", "sighting_of_ref": "indicator--824aeb42-1306-4092-a5df-ff808e12341e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1437b751-0cd4-4e57-81c6-805e9727796b", "sighting_of_ref": "indicator--3c18227f-fb5a-46d7-a04f-d44ebc864d85", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683b6ac5-0467-43d6-bfd0-0f6664d812fd", "sighting_of_ref": "indicator--b8019434-85ae-4532-b36a-5bf727fb30b2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec791627-46ac-430e-b66c-7aa649ebe2ff", "sighting_of_ref": "indicator--f5e42b3b-6b3a-4304-a198-67a7cec9807f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25da4373-84ed-4675-9db7-414f4bc08932", "sighting_of_ref": "indicator--f5e42b3b-6b3a-4304-a198-67a7cec9807f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7aa4c6-3b3e-47e0-afc5-4a0c6170244f", "sighting_of_ref": "indicator--f5e42b3b-6b3a-4304-a198-67a7cec9807f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf61756-b5a6-4f8e-ba23-0a652ce971c3", "sighting_of_ref": "indicator--61e7f715-43c9-4c43-a817-5d37b2b72774", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912e6b96-4725-4a12-8eda-44b81fa8171f", "sighting_of_ref": "indicator--61e7f715-43c9-4c43-a817-5d37b2b72774", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0879fd82-1a9c-415f-991a-a518fb61e04b", "sighting_of_ref": "indicator--61e7f715-43c9-4c43-a817-5d37b2b72774", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76028dd5-bf42-4e1a-85db-ca86251e259e", "sighting_of_ref": "indicator--cebb70ab-b66c-46db-ac1c-6c4c521ece81", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5184c6ae-1c88-4c63-ac6c-243e69698103", "sighting_of_ref": "indicator--cebb70ab-b66c-46db-ac1c-6c4c521ece81", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d69b9c-c869-46ca-ab9c-542615735571", "sighting_of_ref": "indicator--1fcfec8e-68b5-4823-865c-8fc5bcd70aec", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10cfd955-fb75-4ff0-a7e4-e327e3fed11b", "sighting_of_ref": "indicator--1fcfec8e-68b5-4823-865c-8fc5bcd70aec", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38639e5e-ef99-4eec-b1f5-962e1ae615c4", "sighting_of_ref": "indicator--f6d864bf-4a6a-4810-bbf8-d48e19f032cf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e714e49-2356-4048-a0b1-96c62902154a", "sighting_of_ref": "indicator--f6d864bf-4a6a-4810-bbf8-d48e19f032cf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f919b846-ea89-4a07-85d5-b83f05b00176", "sighting_of_ref": "indicator--4f52b19b-c485-48c8-9521-dbc3cd053f84", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497eea7d-dfcd-4dc1-a86c-a132f7e89269", "sighting_of_ref": "indicator--4f52b19b-c485-48c8-9521-dbc3cd053f84", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a58830-8e9a-4ee8-bf7c-3fe156cbd31b", "sighting_of_ref": "indicator--4f52b19b-c485-48c8-9521-dbc3cd053f84", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008602d9-2600-49b3-ba29-7452896df194", "sighting_of_ref": "indicator--8a79bf65-409c-466a-934d-eea16a02c494", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2703d7-d72b-46ee-8b1b-b33207061779", "sighting_of_ref": "indicator--b8894dd9-b9d6-4081-929c-3184913aa91a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ca565d-2648-438b-8046-129ddef9bab4", "sighting_of_ref": "indicator--b8894dd9-b9d6-4081-929c-3184913aa91a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea60d045-5c8f-4623-8cf4-e16b1f49cc15", "sighting_of_ref": "indicator--a41b4f42-0224-4fb0-b129-eb5ae8213180", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec015ff-ee51-4861-b7c8-e07055fd82ca", "sighting_of_ref": "indicator--dedd4f7d-bc7d-4842-bea8-e8c7791a1256", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4b2573-9d7b-45ce-9fc9-0dee22a04b78", "sighting_of_ref": "indicator--dedd4f7d-bc7d-4842-bea8-e8c7791a1256", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dbc3f6d-1f95-4104-bd61-6b7a91b4ee5e", "sighting_of_ref": "indicator--dedd4f7d-bc7d-4842-bea8-e8c7791a1256", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c67345b-340e-45b6-b80f-0fed6c97058f", "sighting_of_ref": "indicator--3a05d954-c71c-418e-8bad-230fda4011e3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe19f3f-03b8-465a-ac18-43bebed4135c", "sighting_of_ref": "indicator--3a05d954-c71c-418e-8bad-230fda4011e3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4af1f73-b212-49cf-ba0a-534c9f7b5fbc", "sighting_of_ref": "indicator--f517f021-35d8-4213-adc1-54c81a7c01d0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b29352-1b52-4c3d-9dfa-434cdef33c0f", "sighting_of_ref": "indicator--0d50487d-ebe5-4476-8599-29908642f737", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4007e9ce-28c1-48cd-bc15-c5dd8e8b4b40", "sighting_of_ref": "indicator--45226b18-7d47-4c91-a92f-24e8647b9df8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33882f3b-8452-48b7-b7ad-9ae6e3d3f182", "sighting_of_ref": "indicator--451728ed-2d75-47db-82f0-d1d48928ed4d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a20773-7300-4f31-9d11-db5719fecafe", "sighting_of_ref": "indicator--451728ed-2d75-47db-82f0-d1d48928ed4d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e61bf7-8936-4598-ad49-5db5539af053", "sighting_of_ref": "indicator--ee83f056-bcc1-48fe-bead-a2e5a1110e6f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7803468e-42b8-49a2-b4a9-0bf3fc5d68c5", "sighting_of_ref": "indicator--b4446847-c0c9-44a2-82bd-dfc3a0440f1f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451d9421-8fe6-4eab-a249-53bce4f8511c", "sighting_of_ref": "indicator--b4446847-c0c9-44a2-82bd-dfc3a0440f1f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df08487b-970c-415b-b802-9f5baabfa9a0", "sighting_of_ref": "indicator--e74bc09e-1ab4-485e-bcc1-8ea3c5b28f58", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c106bd-4937-45b0-af8c-9e1c186317ce", "sighting_of_ref": "indicator--e74bc09e-1ab4-485e-bcc1-8ea3c5b28f58", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bac6c8f-b30e-4bb0-9008-4b08ea8ce844", "sighting_of_ref": "indicator--4027f838-6997-44be-aaa8-75ddd21a91a3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb48e2d-62f2-40d4-8e39-46d76fbb5add", "sighting_of_ref": "indicator--4027f838-6997-44be-aaa8-75ddd21a91a3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56fd71cc-8c8b-43ed-b49c-bcdf3f67aa58", "sighting_of_ref": "indicator--4027f838-6997-44be-aaa8-75ddd21a91a3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f87867-7e86-469f-add6-c959bcb43131", "sighting_of_ref": "indicator--d33a5b05-3ebf-4dab-98ff-89ec2f282ccb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1897a1-d26c-4a9a-9b93-50afac74fbc2", "sighting_of_ref": "indicator--814ffde6-5301-4fa5-9d3f-67e8f41c7676", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b609342-ff2e-4664-a6dd-52ea5ee79fa6", "sighting_of_ref": "indicator--3fb7a303-77db-412c-812c-4e0ce7a551cc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7d6b43-5f0d-4000-82cf-6154bef94229", "sighting_of_ref": "indicator--3fb7a303-77db-412c-812c-4e0ce7a551cc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9498b473-9760-4bec-b1c6-caec216ddb67", "sighting_of_ref": "indicator--e0624faf-c6fa-40d2-adf1-7c2ff6966edc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cdbc147-dcdd-4324-a27a-e54fcca43d03", "sighting_of_ref": "indicator--12171e4f-0e7a-46be-b2f5-204290205d4e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6669ad44-1723-4121-8209-671ec0e08878", "sighting_of_ref": "indicator--12171e4f-0e7a-46be-b2f5-204290205d4e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f594056-76ac-4562-a468-21b41b4656cb", "sighting_of_ref": "indicator--f3eb4d4c-1cbd-43e4-9c5b-bb81322e1a84", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6615c5d-cd97-49d3-8794-74d96b3cb895", "sighting_of_ref": "indicator--84030ed4-a25b-4694-bdfa-b6bc1931eb3e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22684479-e17c-4807-8ee3-199af2fcdae2", "sighting_of_ref": "indicator--84030ed4-a25b-4694-bdfa-b6bc1931eb3e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d3994e-2c84-4993-af1e-7580e54ea038", "sighting_of_ref": "indicator--7e165d9a-7ed0-4d0a-8bd6-8c5f9e61f369", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb846bc3-f02a-4308-8dc0-035e1336c956", "sighting_of_ref": "indicator--e2898a60-3e4d-493e-8705-bac0f43cb09e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c204f54-1f4f-4204-88ef-95d76bd9e709", "sighting_of_ref": "indicator--f8107069-deb7-4a28-a935-9f21fbb57c2b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734cc261-fc7f-4f81-817e-cd004e0205ed", "sighting_of_ref": "indicator--f8107069-deb7-4a28-a935-9f21fbb57c2b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a02828-96ba-41c7-9340-23ef9687b5ba", "sighting_of_ref": "indicator--f8107069-deb7-4a28-a935-9f21fbb57c2b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb9d701-ff0a-4c09-b2bf-f85d4a55c95a", "sighting_of_ref": "indicator--37eea0be-2b55-413a-8b43-52a6a1171668", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edf3305-3386-4709-b381-2c8cfefb88c1", "sighting_of_ref": "indicator--37eea0be-2b55-413a-8b43-52a6a1171668", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97fec25b-b41b-43a4-8943-477cba9c3972", "sighting_of_ref": "indicator--850ea200-2869-4af3-b21c-835379beb577", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729b47b8-88a3-4f67-9e0a-9a811a1af6e8", "sighting_of_ref": "indicator--850ea200-2869-4af3-b21c-835379beb577", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0d4da5-a275-422c-8166-b08033528c82", "sighting_of_ref": "indicator--850ea200-2869-4af3-b21c-835379beb577", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06537d3d-ad20-4eb2-a753-2f4692114bcc", "sighting_of_ref": "indicator--69207973-5d5e-48e7-9d21-ae92407e517c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fb7242-6007-4208-bfaa-82b4b2003bb7", "sighting_of_ref": "indicator--69207973-5d5e-48e7-9d21-ae92407e517c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94dbaee6-4b90-4447-899f-fc68269ccb95", "sighting_of_ref": "indicator--281e0582-485e-4ebc-8e06-d582b3b4b41e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4691c36-71fb-480e-8117-0b0c68ac79b0", "sighting_of_ref": "indicator--281e0582-485e-4ebc-8e06-d582b3b4b41e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9629a63-951c-4cdb-b2c3-cf352deb88bc", "sighting_of_ref": "indicator--281e0582-485e-4ebc-8e06-d582b3b4b41e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16310edc-a177-4814-86e2-a42d71b0e1c5", "sighting_of_ref": "indicator--64ff7810-8b58-47f7-b18e-d272a184f15a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2734dcc9-cd7d-4919-ac83-1d832f446f03", "sighting_of_ref": "indicator--64ff7810-8b58-47f7-b18e-d272a184f15a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9210e2a1-aa03-4733-9ae6-ec6a9501abe3", "sighting_of_ref": "indicator--bcaa5380-26a1-479f-abef-a658b7a89b1d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f85a4f3-0834-42a1-b7e2-7334111ef188", "sighting_of_ref": "indicator--bcaa5380-26a1-479f-abef-a658b7a89b1d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c89aca-b68d-4359-8b3e-20c48f672e5a", "sighting_of_ref": "indicator--07ec59c6-77d4-46df-bc00-b2d0b7637769", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eebbf4c-a9e4-429b-bb34-8af8267991e8", "sighting_of_ref": "indicator--07ec59c6-77d4-46df-bc00-b2d0b7637769", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f6bdb9-dc08-4490-922f-788fc1d5bdbb", "sighting_of_ref": "indicator--e5dbaf18-4b17-4d5d-a3d9-a8f92cbbad3d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c281a1-5dba-49ce-8a20-a27ee520f207", "sighting_of_ref": "indicator--483090eb-5326-441a-aa1a-b4449233f79f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3ef6b5-1de3-429c-bee9-dd71190b4ce6", "sighting_of_ref": "indicator--9f4f39bc-4291-4afd-942c-b56e3bc7666f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5234265e-2d74-48b9-b56b-d06f1eb6c2f5", "sighting_of_ref": "indicator--397c3bc2-7e32-4880-9edd-dc7ff9db17ff", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99dd45e-3f08-4d61-8ad0-74c0327bdd0d", "sighting_of_ref": "indicator--4b056956-86e3-4de2-a75d-4354f0dcade3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da869ca-7648-44c6-97ac-a015f3dcd61b", "sighting_of_ref": "indicator--4b056956-86e3-4de2-a75d-4354f0dcade3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f7a107-53b7-4d84-a2d2-556644544f66", "sighting_of_ref": "indicator--d3969688-7ae2-4a8b-a9c5-697b7e06dbc2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4cc15f-1b75-46ad-981f-d99a4e5ec94d", "sighting_of_ref": "indicator--22b6d7ca-d16d-4073-81c9-7199ee60064b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a374ef-ce5f-4f28-babd-50a880966e3b", "sighting_of_ref": "indicator--6acc29e4-2a5c-4c26-98b7-dff92e395798", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5221cefd-db08-4582-9aef-afe44ed5d952", "sighting_of_ref": "indicator--6acc29e4-2a5c-4c26-98b7-dff92e395798", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e837092-8301-46e6-82e6-954a423d7235", "sighting_of_ref": "indicator--dc4fc8a0-a1cf-4f19-8a7e-b3ecd156370f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c449545-3729-445f-94e6-73c1734dc381", "sighting_of_ref": "indicator--92fb9eca-108d-43cd-8004-242318ff50d1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bf46f4-6b86-4f12-a385-749e53e85046", "sighting_of_ref": "indicator--92fb9eca-108d-43cd-8004-242318ff50d1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc6c260-659c-4098-b33b-b82fb33e2c46", "sighting_of_ref": "indicator--7f8edd49-e21b-4fdc-be62-39b49e6198b2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67699e81-7401-4244-be6c-af6559116c1e", "sighting_of_ref": "indicator--7f8edd49-e21b-4fdc-be62-39b49e6198b2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f36e89-73b0-4a36-ba8b-ae31d1153848", "sighting_of_ref": "indicator--6e6d95b5-c70b-4672-979b-c94e1c0299f9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799030d4-8e3a-4bbf-907a-6038c479c886", "sighting_of_ref": "indicator--6e6d95b5-c70b-4672-979b-c94e1c0299f9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3f28a2-e707-4e7b-bdee-c09c50dfd579", "sighting_of_ref": "indicator--6e48e354-decd-4dd1-8de8-171504314c6d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd7c32f-1ed4-437c-bc98-5ee4e445f5b5", "sighting_of_ref": "indicator--a32a29e2-ee38-45ac-9eff-39c90a72828f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6d6b47-decd-489c-8980-d571ae890052", "sighting_of_ref": "indicator--a32a29e2-ee38-45ac-9eff-39c90a72828f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74460eb9-9367-4be5-8da5-f1d3d49d6831", "sighting_of_ref": "indicator--13d058d0-cdf4-4531-9e18-4f48e4eaad10", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5746bef5-d7cf-4f0b-8667-d6a6d73b9092", "sighting_of_ref": "indicator--f0cc926a-39fc-438e-8d0d-589f92a5400e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d35eb90-864d-4722-8ce4-fe974c054e1c", "sighting_of_ref": "indicator--f0cc926a-39fc-438e-8d0d-589f92a5400e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0150b3c-62c2-446c-9158-afd795f10120", "sighting_of_ref": "indicator--12e7b4f4-fbd4-4847-80aa-318351686df5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f1473c-ebbe-4e53-9605-bf17b6b7018c", "sighting_of_ref": "indicator--94d543da-0f24-4f9c-af01-86cc5003f09c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d8dd48-3848-456e-9c72-a10bc8be0fb6", "sighting_of_ref": "indicator--8cf3a010-c504-486e-b6fd-cc85f8683c19", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f5e796-d6d0-4eea-85e3-d536a57b41cb", "sighting_of_ref": "indicator--8cf3a010-c504-486e-b6fd-cc85f8683c19", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f5fcb2-86a4-404f-ae11-329a816f1282", "sighting_of_ref": "indicator--89aa05dd-db94-4334-a9af-30d6c2790389", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a0b2e5-3741-4cd8-b479-6d86c6e1b00b", "sighting_of_ref": "indicator--89aa05dd-db94-4334-a9af-30d6c2790389", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6cefe6-2b0b-4642-ba38-73e3ed3cb69a", "sighting_of_ref": "indicator--79bbb7ca-94ca-480b-be3a-e00931113589", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e82257-fd20-4ab8-b5d0-f5ee7bb9a758", "sighting_of_ref": "indicator--0a00a10d-98f0-4e99-8e20-de8609c9a569", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc008cca-cd7e-48e6-9653-bf9bfde3fe63", "sighting_of_ref": "indicator--4369389c-1abf-4f80-a81f-a9dde084d321", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0543d9d1-5b8c-4147-9835-d207d714e924", "sighting_of_ref": "indicator--7bcad3d0-508f-4084-8602-b7c3b57554a8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7db451-7180-4f8b-9432-41e4901a9659", "sighting_of_ref": "indicator--523f4dcb-1517-42e0-9b3d-cab508383f73", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20488e9d-ef5e-41d0-8e28-dbca0fbe0801", "sighting_of_ref": "indicator--a339ccf4-1d36-4a7f-be29-6106fb86e0be", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141da1e3-780b-49f4-935e-7620ff9c72ef", "sighting_of_ref": "indicator--a339ccf4-1d36-4a7f-be29-6106fb86e0be", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ce7de7-690d-4193-86ae-7fe08f2e9de5", "sighting_of_ref": "indicator--17f1ad47-bd6a-4084-ab0d-8c8e69c35862", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3747f844-fe2b-4305-9ac0-4b4015a96ba8", "sighting_of_ref": "indicator--17f1ad47-bd6a-4084-ab0d-8c8e69c35862", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8959fe7f-3921-48bd-9fc5-b68e35dea020", "sighting_of_ref": "indicator--2209c9df-f8ab-401d-9a68-a730273f85a1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbacda5d-b8a4-4a6e-a7f7-d6b92c2257a1", "sighting_of_ref": "indicator--2209c9df-f8ab-401d-9a68-a730273f85a1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45be05c-c735-4201-9892-76c67210de3e", "sighting_of_ref": "indicator--1d1a781f-7e64-4b8c-8945-436694593c40", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d206980b-dfd8-4f91-94b6-b270ba624ded", "sighting_of_ref": "indicator--1d1a781f-7e64-4b8c-8945-436694593c40", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27c8520-d043-416f-b35c-e088b7742436", "sighting_of_ref": "indicator--c94b453d-0a22-4366-9bb2-33620bd14170", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb86f9a3-f8e8-4b85-971e-1710eb79ad0d", "sighting_of_ref": "indicator--e7318584-d414-48be-a0fd-d5b128e80c4f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9e7f8a-434a-4ac4-af4d-02f95c5a9a68", "sighting_of_ref": "indicator--052e7a3b-4c26-439d-ac68-e8ba74caf0da", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3772cde0-4f50-48a5-a5bb-c87923ece91b", "sighting_of_ref": "indicator--20618cc5-e53c-4b23-8602-592bb19ec66b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09ef737-8632-4eea-9ced-49c65be24bcb", "sighting_of_ref": "indicator--dbf2e73a-1e44-4f87-8a3c-a6eb7d5d587b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d79e0e-ef3b-4ccc-bc7b-7ddb4ca327c1", "sighting_of_ref": "indicator--2b0e8b01-1ff0-40b7-b0e1-146060dba8c7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40a199e-1857-4474-9a8c-c70d51cc0174", "sighting_of_ref": "indicator--5beb2452-b12a-4b27-9c63-fc74843bfec3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68293bd1-b29b-4c01-bb82-d63490fd4846", "sighting_of_ref": "indicator--16a07fed-0064-446e-9f00-ee413c44d253", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b7c6c4-d031-47e5-a8f5-7edd3563fee0", "sighting_of_ref": "indicator--fe317b18-59be-4fc5-a9bb-cc97a983ad85", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b4890e-342f-47a2-b3ab-81c6e25b3e0e", "sighting_of_ref": "indicator--f075cd6f-0b5c-4f37-a908-c8a45b9e8c67", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9c6d6a-09eb-4a50-9ce4-3f042a17e0af", "sighting_of_ref": "indicator--f075cd6f-0b5c-4f37-a908-c8a45b9e8c67", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8551076-6380-4013-a9fa-0cd1c6d48f0b", "sighting_of_ref": "indicator--907efbcc-d9c4-4512-9304-3575332c9622", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f5044f-3e18-434b-84fc-d7db242bf725", "sighting_of_ref": "indicator--907efbcc-d9c4-4512-9304-3575332c9622", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5d71ac-f9eb-4d60-af22-709b586ae9bc", "sighting_of_ref": "indicator--28eed2a6-7ad8-4efc-949b-68a18021d2f3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18c0df6-6d77-4d08-82f9-6eff3440effc", "sighting_of_ref": "indicator--e8fa19d9-075d-4cd2-be3c-479ab07154c3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3662a23b-da55-4145-8111-0cd05445f210", "sighting_of_ref": "indicator--e8fa19d9-075d-4cd2-be3c-479ab07154c3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa385223-b5d2-40a7-bf7f-66da8c3148ff", "sighting_of_ref": "indicator--7e0b09ef-4795-411f-abea-b09e8df022f1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5514a9-d57e-4d40-bd16-83af24b005b6", "sighting_of_ref": "indicator--7e0b09ef-4795-411f-abea-b09e8df022f1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bd3036-a56f-46d4-8d41-a768a43a1442", "sighting_of_ref": "indicator--7e0b09ef-4795-411f-abea-b09e8df022f1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4503682c-1e38-4b26-9f8b-237432de9186", "sighting_of_ref": "indicator--2f6a61a8-ab61-40e6-bca5-b7abed163904", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f26d475-10a9-4e4c-baea-00d656f3be50", "sighting_of_ref": "indicator--4760877a-acb5-4e54-ba1d-6b298cc426c1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadfb9cc-d3d6-4270-a51a-76e992488339", "sighting_of_ref": "indicator--4760877a-acb5-4e54-ba1d-6b298cc426c1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc9574e-090a-446f-b5c5-3dae32b96f9a", "sighting_of_ref": "indicator--2845ecac-825d-45c1-81f3-2301d99dcf90", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa4b8f2-1ef1-4884-b095-a4764ec88254", "sighting_of_ref": "indicator--2845ecac-825d-45c1-81f3-2301d99dcf90", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9c1cb0-879d-44f9-9703-9f627fd11f25", "sighting_of_ref": "indicator--5c346e5f-3cce-46f8-9a53-ee73eea21d40", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b982bd-687f-4157-8498-2673036b87a3", "sighting_of_ref": "indicator--c974505d-6f46-4941-8cc8-c357b4e13a33", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e06c377-7348-437a-acd9-cf7975d094c2", "sighting_of_ref": "indicator--c974505d-6f46-4941-8cc8-c357b4e13a33", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef48cf39-23a3-4f53-992b-06f3824e333a", "sighting_of_ref": "indicator--e9f3a36f-047e-40cd-8c7b-2c64b666b2a8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70aea215-6c6d-4d0d-9ff4-f239145493ff", "sighting_of_ref": "indicator--4d084256-847f-42d3-9a66-cf65a05ee4ab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12fe2fbb-077d-4496-9711-78049d8875de", "sighting_of_ref": "indicator--f5db485f-a6d0-4775-82e5-d7323030933e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dabcf6cf-1852-4583-9f79-be1d2f93b41c", "sighting_of_ref": "indicator--18401edc-7b86-419f-9dad-469b41ea9aab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56687997-f2d5-4195-89b5-78f88e546eb6", "sighting_of_ref": "indicator--18401edc-7b86-419f-9dad-469b41ea9aab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6e1700-b016-4b17-b9f4-27e686d5f10c", "sighting_of_ref": "indicator--6e8fa392-c918-4e61-b5fc-cd416245e5c6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5369b0f-c7c1-4b5a-b7fe-8c9c9ca84b77", "sighting_of_ref": "indicator--21222601-6fe5-4f83-bd8e-969305c74272", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5aa47cb-976d-4c2a-896c-f8fc96ebc82e", "sighting_of_ref": "indicator--42533508-08db-41c4-8db3-4533ac283f78", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab7b81a-8fa4-4c6e-a9ea-d7cb2851fc3a", "sighting_of_ref": "indicator--0a314939-0c09-4247-8af5-52c424b99a27", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e4ee22-e32b-4362-95e9-ecc02d45941a", "sighting_of_ref": "indicator--0a314939-0c09-4247-8af5-52c424b99a27", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2f91eb-9a76-41f8-ba80-325740a0d7e2", "sighting_of_ref": "indicator--01b8a2e5-b767-469e-a645-5cfa28191256", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c76c0e-f301-4e5f-84b0-7420bea300c1", "sighting_of_ref": "indicator--01b8a2e5-b767-469e-a645-5cfa28191256", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e78541b-dd03-4b22-a42b-2b476b3b281f", "sighting_of_ref": "indicator--2e178e0a-4870-4d3e-93f4-2caa1053b91d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd088861-0295-458c-9278-927888852ce0", "sighting_of_ref": "indicator--2e178e0a-4870-4d3e-93f4-2caa1053b91d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817f7829-c45f-4018-8f59-dfaf09ae42d9", "sighting_of_ref": "indicator--f3ed9989-b808-4922-864c-86bbb000f1f6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb6e1a6-8a5b-4d8d-9889-7d3e26e8d945", "sighting_of_ref": "indicator--b90f5a43-c209-479d-a918-96e00854e21a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe521ce-9c88-4513-bd4a-5df17c9b4616", "sighting_of_ref": "indicator--1fa9a7d4-e4e6-41c8-98b7-d042f39f1e97", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58f4e72-4464-4287-96f0-7ad3dbc2047b", "sighting_of_ref": "indicator--1fa9a7d4-e4e6-41c8-98b7-d042f39f1e97", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed8e46e-7b4c-4da1-8f19-be70394bfa21", "sighting_of_ref": "indicator--cce62c1b-3532-4a37-9e9b-b3731e19ecc8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd58339-af7e-475e-a2b3-3943f7022162", "sighting_of_ref": "indicator--cce62c1b-3532-4a37-9e9b-b3731e19ecc8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb52c8a-5aaa-4a77-aa45-7ba62c860445", "sighting_of_ref": "indicator--cce62c1b-3532-4a37-9e9b-b3731e19ecc8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4a0486-621e-4b77-a05e-e399851fa823", "sighting_of_ref": "indicator--e1da02dc-edf3-41c4-8c15-10dee69eb3de", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610e4b1e-405b-423b-a2b9-874beaded4b4", "sighting_of_ref": "indicator--145b94d6-a883-4473-9ba5-13a642a858fd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8282da40-4707-49af-a624-e983e2741bf4", "sighting_of_ref": "indicator--8f46a5c8-8fe9-4e5f-b132-3e7064daa88a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5c7c07-8ad2-455f-997c-8561cf3f604b", "sighting_of_ref": "indicator--d405e310-ae93-4144-85dd-91bff00cd423", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7850ee45-c32c-4126-9ebd-36c357948dc5", "sighting_of_ref": "indicator--16c49c1f-3c5e-4a13-8a94-10295442d207", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed74562-6999-43a4-a358-f5e026955737", "sighting_of_ref": "indicator--1c0c7c04-691a-4e18-8f9d-5291b7adfeaf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11cfb48e-2dea-4d15-9e43-8a18e492d936", "sighting_of_ref": "indicator--c221dd8b-a4a5-418a-bd19-307bb7488732", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8e47be-4673-4c3f-9e96-d978fea275f3", "sighting_of_ref": "indicator--c221dd8b-a4a5-418a-bd19-307bb7488732", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828bcb4f-3a3f-4e54-9b51-f2f57d4f67c3", "sighting_of_ref": "indicator--9f3615fe-49d7-498c-a399-267cfb0590cf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f0ffad-541c-40f3-a8bc-5f79164a6f63", "sighting_of_ref": "indicator--261e2701-f4ff-4711-8dc8-4c520530d181", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af19a9c1-ec44-404a-89c4-4d3c92b35a20", "sighting_of_ref": "indicator--261e2701-f4ff-4711-8dc8-4c520530d181", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f4b1cf-2a6b-495f-b248-3ad64c3d10aa", "sighting_of_ref": "indicator--7315d00d-c1a4-415c-b089-4e775e2dfe65", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f4a01e-e814-4b3e-8529-555e37cf0a4e", "sighting_of_ref": "indicator--884466c8-e0f4-40fc-8717-84e1c13efc2e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ece963-4d4d-40d2-a786-abdb76770988", "sighting_of_ref": "indicator--e9bef60f-f06c-4889-a2af-6713e0d77b19", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e113422d-ae0c-4a0a-a509-fc637d206ea7", "sighting_of_ref": "indicator--76668746-b252-41f7-ba88-9847a44b6bb7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683f42bb-966e-49de-b8fc-880d230f4df4", "sighting_of_ref": "indicator--bcdf51b9-0662-402e-afb0-a902052fc69a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3152ec12-d579-42c0-83eb-b529564c50ce", "sighting_of_ref": "indicator--bcdf51b9-0662-402e-afb0-a902052fc69a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8989d49b-f68f-4939-b261-8beb11450c77", "sighting_of_ref": "indicator--cbdebf56-7f16-4ff9-bf70-42461af5aae4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95f37a2-9ec1-41c2-87cf-49e8c88cd552", "sighting_of_ref": "indicator--cbdebf56-7f16-4ff9-bf70-42461af5aae4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa99d91-25e7-44ce-9144-f10e6682c354", "sighting_of_ref": "indicator--e4f0dfd4-7ad4-4c37-8ada-4dea6bcc7b6c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c870146-2c52-4ae8-9067-436dc29a3bc7", "sighting_of_ref": "indicator--e4f0dfd4-7ad4-4c37-8ada-4dea6bcc7b6c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4619b861-fb4a-4468-a237-2c05ea0762ac", "sighting_of_ref": "indicator--65b0f550-433a-4bf4-827f-a927b1c65185", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c9440a-51da-454d-9f37-0d9e716bb43c", "sighting_of_ref": "indicator--65b0f550-433a-4bf4-827f-a927b1c65185", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7547e838-8278-4c49-93c3-57de9f1bada5", "sighting_of_ref": "indicator--60e79183-537f-417c-8587-02b8b74c6e64", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc4a42f-5372-433e-8572-e052e85b55df", "sighting_of_ref": "indicator--60e79183-537f-417c-8587-02b8b74c6e64", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36da0aaf-1152-4af2-8484-deed7d126734", "sighting_of_ref": "indicator--b6b92733-c2a7-4197-8fb0-60d26350f6f0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96a6493-9927-4689-bc99-9ddf7afb18af", "sighting_of_ref": "indicator--b6b92733-c2a7-4197-8fb0-60d26350f6f0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0827d7d-b844-41f4-9fe6-3e09a0c6bef5", "sighting_of_ref": "indicator--a6d9556a-368c-4859-abde-ce117f5c857e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d437d6-e4b2-499e-824a-c81907c066e9", "sighting_of_ref": "indicator--a6d9556a-368c-4859-abde-ce117f5c857e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c715ab0-ea6c-437c-9ce6-f59f6940708e", "sighting_of_ref": "indicator--5fa3a95d-de65-408d-a1ea-ebd9c6798ce6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a06569d-d702-4fef-b566-f82c4070c362", "sighting_of_ref": "indicator--f9738c99-b340-4f89-a750-b090fcb9212f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8740ab5-8580-4d89-b531-00a062263a2d", "sighting_of_ref": "indicator--210ea0ee-f927-4b4d-a124-92258f8271f3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4018b93a-4e74-44db-9653-fc551fda721d", "sighting_of_ref": "indicator--5d1c8d67-b9a5-4213-ad43-c270a42e84a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b8618e-d857-430a-a11c-87260154de48", "sighting_of_ref": "indicator--5d1c8d67-b9a5-4213-ad43-c270a42e84a7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8f106e-d97a-433e-a9e8-ad8035f2a1cf", "sighting_of_ref": "indicator--d3e1d36a-27c4-4695-8459-261053333b7b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dff0086-fe99-4a9f-bcc0-36826b79fdcf", "sighting_of_ref": "indicator--d3e1d36a-27c4-4695-8459-261053333b7b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229fb8db-6ac8-42e6-90cd-e84cc38fbe09", "sighting_of_ref": "indicator--ad7debdc-477e-4ca4-8b30-d540f37b8f58", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c8cb5a-39d0-4caf-aaad-944bc80de824", "sighting_of_ref": "indicator--c5e80057-4cc8-45b9-80e5-e5202a1e6cf4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b8ead7-8f5b-4ee0-80f2-8166986064ec", "sighting_of_ref": "indicator--c5e80057-4cc8-45b9-80e5-e5202a1e6cf4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61260c5-3536-4d16-b258-d8f078b10dca", "sighting_of_ref": "indicator--6ead6657-b536-41b8-bc63-580588a42c24", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f528172-6fcf-4152-bc9a-37fa192f0075", "sighting_of_ref": "indicator--6ead6657-b536-41b8-bc63-580588a42c24", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479e9b1f-bf96-4295-ad0c-079ee30b5070", "sighting_of_ref": "indicator--d9243489-cddf-479a-af4b-1b58aec80ad2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af698c5f-013e-4da0-bb19-e8ca3e806f5b", "sighting_of_ref": "indicator--66bc1372-01b5-4dc3-9518-0f244d3271e2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0393b738-91fd-40fa-bb3a-6fdd181c062e", "sighting_of_ref": "indicator--66f0c74f-e17f-4dfd-a7eb-d67253bdea93", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2556788-0460-48cb-8386-543536dd82aa", "sighting_of_ref": "indicator--773a5e90-17e3-4714-8165-cf00e868153e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd57235-ee3f-4899-8df7-da4f9ced0cda", "sighting_of_ref": "indicator--773a5e90-17e3-4714-8165-cf00e868153e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb11a7ff-3a1b-431e-9080-3209f145a8f0", "sighting_of_ref": "indicator--326da7a2-eea2-47d7-8609-a0571baea744", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2c06bf-0f89-40f3-9189-b818d662fb90", "sighting_of_ref": "indicator--7a4ff379-16a0-4a60-a513-a9ef3c722d60", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9ea869-2a66-42f3-8efa-a14e0833d492", "sighting_of_ref": "indicator--7a4ff379-16a0-4a60-a513-a9ef3c722d60", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5eb070c-632a-4712-9c5b-c5b7391c4266", "sighting_of_ref": "indicator--812babc4-42b2-4c18-987e-10d20578d4e7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c6c6c3-4aeb-45f6-ad83-ef8bd8bd6959", "sighting_of_ref": "indicator--812babc4-42b2-4c18-987e-10d20578d4e7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8242429-0199-49a8-94a0-4df18326901e", "sighting_of_ref": "indicator--c5f4955c-8df7-484f-9525-938fb2261f07", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471616c4-c5db-464f-bfaf-3b77bf932b66", "sighting_of_ref": "indicator--5a87c8cb-083c-4bef-a5b9-756f8a5b87b3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340fa315-d6a9-4f0d-8696-dd45f2ed3ba6", "sighting_of_ref": "indicator--95fe5888-0411-4a50-a9c6-3b55dacd9cf3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a184ef4-db33-4c6e-b02c-198600d1160b", "sighting_of_ref": "indicator--95fe5888-0411-4a50-a9c6-3b55dacd9cf3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497047c0-cf79-4d63-9ab8-f22aa3039735", "sighting_of_ref": "indicator--95fe5888-0411-4a50-a9c6-3b55dacd9cf3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49142e74-ca0f-4c32-82f0-19882d7202fb", "sighting_of_ref": "indicator--0da0185e-5b0f-4e4b-b577-af4934e31e01", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eda51e4-83c5-4b9b-a479-6c8fe181e0bb", "sighting_of_ref": "indicator--0da0185e-5b0f-4e4b-b577-af4934e31e01", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd022d4a-0c54-4257-881d-0eff34820462", "sighting_of_ref": "indicator--0da0185e-5b0f-4e4b-b577-af4934e31e01", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910d13ca-5da7-4d31-bc97-814fb5f844a4", "sighting_of_ref": "indicator--7bbd3497-3771-40e1-a7cd-6ce916330c85", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66743261-533a-4d5f-aec1-943e81027e5c", "sighting_of_ref": "indicator--7bbd3497-3771-40e1-a7cd-6ce916330c85", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a5bb81-e0f3-4c6d-a1b3-29f8ce6450b3", "sighting_of_ref": "indicator--ac1c931b-018c-4c88-a237-f71f61831f24", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aebe5d35-c7da-480b-a17b-2f7aba95158d", "sighting_of_ref": "indicator--ac1c931b-018c-4c88-a237-f71f61831f24", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299926bd-92e4-442c-b8f0-01d6368c6d54", "sighting_of_ref": "indicator--6ac706e9-ee43-47f9-a2cb-0b6ce6016c6a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62460122-12ab-41df-b6eb-d2d2ccc9f0a9", "sighting_of_ref": "indicator--6ac706e9-ee43-47f9-a2cb-0b6ce6016c6a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f842ccce-1481-4c30-907e-0521e5eb2c65", "sighting_of_ref": "indicator--003010be-6499-413b-9b71-57b9e8d41862", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d87e2a-0dc7-4715-b9a8-3fb8cc6d376a", "sighting_of_ref": "indicator--003010be-6499-413b-9b71-57b9e8d41862", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d498648d-b9b0-4b0a-b5cb-ba6e17c3fc82", "sighting_of_ref": "indicator--003010be-6499-413b-9b71-57b9e8d41862", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58d3ebe-c622-49b0-a16b-73f8089f8d71", "sighting_of_ref": "indicator--a637b4bf-26f0-4f51-addf-a2405d6cee3a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce8849b-25c0-4d1c-a586-511ecaf17ad6", "sighting_of_ref": "indicator--a637b4bf-26f0-4f51-addf-a2405d6cee3a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b605e3-8cf9-4386-93eb-88a6428423a8", "sighting_of_ref": "indicator--1a5df659-bcf6-4739-a5b8-0dde1ad63fb5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa52140c-7e3a-4548-b77c-6e15d1f7ff59", "sighting_of_ref": "indicator--1a5df659-bcf6-4739-a5b8-0dde1ad63fb5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d40dad9-fbb4-48bb-81a4-291414078d5a", "sighting_of_ref": "indicator--1a5df659-bcf6-4739-a5b8-0dde1ad63fb5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d1533d-39a4-448b-bd87-7da22dd9af5f", "sighting_of_ref": "indicator--3ec01457-1eff-4f86-8521-6fe669171e84", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15367034-3379-4c42-a195-ecf700159250", "sighting_of_ref": "indicator--2c4f3f5d-4d5d-41a0-a088-472b3d3ff482", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a14ceb-1c8b-4401-be1e-4c89805b980b", "sighting_of_ref": "indicator--2c4f3f5d-4d5d-41a0-a088-472b3d3ff482", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42fafc2-36c0-4692-a134-c7ef8834a1c7", "sighting_of_ref": "indicator--6f6426ff-96af-4592-99b9-1933818e636f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75797796-5bf1-414c-be4d-32bb01936bf3", "sighting_of_ref": "indicator--c491ed85-262a-4bdd-b136-1d041463edeb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4032a51-a9a6-4bbb-b476-fb36a32cf5a6", "sighting_of_ref": "indicator--838309e5-4dad-407e-a382-642093f24766", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4a222a-da0e-47be-a106-daf6dad46a59", "sighting_of_ref": "indicator--10f00965-dbae-467b-b9fa-e21ce64a01f7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67c65f0-49c4-4b75-8945-7d4093a2acdd", "sighting_of_ref": "indicator--7988ff76-49c3-4284-a316-9b6eebd7ebce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9babc21-717e-4360-ac39-b2ada447f7f4", "sighting_of_ref": "indicator--7988ff76-49c3-4284-a316-9b6eebd7ebce", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fdf0ad5-1a7a-4ced-96c6-98d5a1e1dc92", "sighting_of_ref": "indicator--bbf3f529-6539-4fc0-ba85-263f95935f83", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3263f3-9e78-4c2d-bd12-932184bd5edc", "sighting_of_ref": "indicator--bbf3f529-6539-4fc0-ba85-263f95935f83", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f478d25c-cf7d-4cb1-b56d-bd9f5f832545", "sighting_of_ref": "indicator--0bbf4eb8-d5d9-4e6c-b550-1f0375e53c93", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4659b151-c7e4-42a8-9a2d-8aa618fcb17d", "sighting_of_ref": "indicator--0bbf4eb8-d5d9-4e6c-b550-1f0375e53c93", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a595afd4-3436-4ece-ba0b-3e340ec7e4e1", "sighting_of_ref": "indicator--a3b2fc92-48ca-452a-9f4b-a2b309479579", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dfd898d-486b-4a6e-b26f-6c3b5f5fe8b3", "sighting_of_ref": "indicator--a3b2fc92-48ca-452a-9f4b-a2b309479579", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f1bd95-8318-4eb9-97ea-046b316ad7f6", "sighting_of_ref": "indicator--42e9393e-f1d0-45a9-be7d-e2ba995cb118", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f22425-ccfa-40d8-b7d1-5054b8ec5946", "sighting_of_ref": "indicator--42e9393e-f1d0-45a9-be7d-e2ba995cb118", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f8594a-3f02-4118-9fb3-7f5a0ab304a4", "sighting_of_ref": "indicator--5d176bd5-0285-4498-8e59-dde4308c9640", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76bc052b-cb88-43c5-abfe-5af9ab152c8e", "sighting_of_ref": "indicator--5d176bd5-0285-4498-8e59-dde4308c9640", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe433b41-7315-4b68-9421-20cb74230114", "sighting_of_ref": "indicator--f4bdcac4-f4ab-4596-98b3-fc0d6b8eff36", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def0c082-8f75-4927-ba6a-be9a221735cd", "sighting_of_ref": "indicator--f4bdcac4-f4ab-4596-98b3-fc0d6b8eff36", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a140995a-fc08-4dca-8c09-839837601365", "sighting_of_ref": "indicator--3fd17fa6-2f32-4a5f-b503-292adc4ee402", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b58728-8663-4a74-aab8-4fbcc8db6452", "sighting_of_ref": "indicator--3fd17fa6-2f32-4a5f-b503-292adc4ee402", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a0da66-395b-45ab-a8c8-8cd4398ba7aa", "sighting_of_ref": "indicator--0fb7eef0-69f1-48aa-b05a-5513bf45ab12", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f8c716-9515-4e65-a2a7-4d3477463082", "sighting_of_ref": "indicator--0fb7eef0-69f1-48aa-b05a-5513bf45ab12", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0d133e-a4d5-4837-9e9f-cfd9c9cfeed6", "sighting_of_ref": "indicator--a0622511-f544-406b-ae9f-53d8b4fde6b7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a08ae96-db1e-44c5-96b7-5982b92cf4e4", "sighting_of_ref": "indicator--a0622511-f544-406b-ae9f-53d8b4fde6b7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84aa0cfe-10dc-49ac-b242-2a0dba601f44", "sighting_of_ref": "indicator--5475a657-8aed-43d3-8a75-432cb6d80020", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e7df4c-970f-46dc-9956-0fef6ffc47e1", "sighting_of_ref": "indicator--5475a657-8aed-43d3-8a75-432cb6d80020", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36724d8-e06c-41e6-9e82-e6b61021151e", "sighting_of_ref": "indicator--cbf67d2a-7b66-492f-8e5b-5db8dee5eaa5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1600ffb-9443-4a80-8d39-83b994d419e8", "sighting_of_ref": "indicator--6bcddf4a-5df0-4760-81ef-0b8ecf87611c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a25948-5169-4bef-8546-85b49a5397d2", "sighting_of_ref": "indicator--338f8e02-ccd0-44d5-9576-6696c8ecb748", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302239f5-0bb0-4fb8-b138-e75322a66aab", "sighting_of_ref": "indicator--ebcd0838-5591-4286-8a59-7dfd0e492a2d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ca73a6-04e9-4d73-bbe3-7734d74b13c3", "sighting_of_ref": "indicator--5668a2fe-d2e7-4245-a09e-16c90dd1fd4c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b8165f-8140-47dd-bae7-6c3241bd38ee", "sighting_of_ref": "indicator--03848ab6-109a-4a0f-aca0-8a5a95856e09", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf6ece9-259b-45c6-b351-f7bb140bb01a", "sighting_of_ref": "indicator--dee7c0b2-72fa-4f6f-87f4-1114a80aa26b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcf323d-854a-475d-880e-bc3855ac4564", "sighting_of_ref": "indicator--dee7c0b2-72fa-4f6f-87f4-1114a80aa26b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16c352f-e10f-400b-b67c-307a782515be", "sighting_of_ref": "indicator--fa9c5cdb-3a76-4c59-bc41-d0670edb4551", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c60ac7-21b9-4700-9cd5-3d4b12bbbae4", "sighting_of_ref": "indicator--2754ea8d-21d4-49d4-a4a9-9e1dfc0c827c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8aa96fa-dd6c-45c9-8119-00d0f269ed32", "sighting_of_ref": "indicator--2754ea8d-21d4-49d4-a4a9-9e1dfc0c827c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e4d4d9-0e1e-41b6-bff3-c5ddde30f781", "sighting_of_ref": "indicator--67af980d-623a-4ff1-b66a-bb35682dae39", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5d682a-58b5-4982-b609-7bfce4fd65af", "sighting_of_ref": "indicator--67af980d-623a-4ff1-b66a-bb35682dae39", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb415e07-193d-4f37-8c1e-fd74d00eb724", "sighting_of_ref": "indicator--b817d263-1558-4a31-b551-c2deea36eecb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0c7618-800e-4e19-8d03-b3e02d79f703", "sighting_of_ref": "indicator--b817d263-1558-4a31-b551-c2deea36eecb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29d0692-b04b-413d-9bb0-bcb5a43f4a2b", "sighting_of_ref": "indicator--d452a175-5a77-4271-8b0f-c4db966e461e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27150dc1-459c-4593-8364-2dbcc6705f96", "sighting_of_ref": "indicator--ccc2a43e-e4c5-49c1-8236-db0406e1beb4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dce4c5e-2d0b-4b8e-ac20-7465aec8b074", "sighting_of_ref": "indicator--c29258dc-bb9a-441e-8519-bce2649b6a8f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734d415b-5034-48fc-83de-c51b4663c2f2", "sighting_of_ref": "indicator--bfb73933-442d-4cb8-b0c5-58b0b94b5073", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8757ea1c-834d-4556-bcf2-4fc8e182c0c4", "sighting_of_ref": "indicator--bfb73933-442d-4cb8-b0c5-58b0b94b5073", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a54d6ca-c31e-44b5-8fb7-def76f977efa", "sighting_of_ref": "indicator--f8445737-2740-46f3-8903-6f4a2e308b15", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b029973-ef47-4bac-bfa6-41fb63cdacdb", "sighting_of_ref": "indicator--f8445737-2740-46f3-8903-6f4a2e308b15", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e551a1bd-fe18-474c-ac5a-f8ab3b6ca016", "sighting_of_ref": "indicator--d679b365-76be-4f40-8e16-853c6d5bb682", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7901ecf1-ebbe-4b4d-9ab6-cd1745f02d7f", "sighting_of_ref": "indicator--d679b365-76be-4f40-8e16-853c6d5bb682", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2d54eb-8e09-4096-8e02-d969a12cf8d8", "sighting_of_ref": "indicator--65a5aee8-6419-45a0-913f-f5b57658de5a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140bd0bf-9614-4d1e-90b8-d56b750f4197", "sighting_of_ref": "indicator--3b929a52-030d-4b8b-87bb-c594d01fd609", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c265cbc-2393-4c3d-a307-0a68dfd039b1", "sighting_of_ref": "indicator--46b1b9ea-b2d0-4d19-a6dc-45937df27f1d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b157f4-f06f-4ff9-a7ae-51346ea46589", "sighting_of_ref": "indicator--d4d4dbf4-d955-4ad2-aa3f-3b7087c06b22", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef2a07c-39a3-4005-9389-c2e2064395cf", "sighting_of_ref": "indicator--43094739-aa66-491f-917f-e0cebc686ae5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d940c7b8-8800-4348-8330-5a3bac734df4", "sighting_of_ref": "indicator--30e5d843-542d-4cda-8d0a-5275d6b2eab0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5816ac-44e0-4cb6-92a9-757d33124172", "sighting_of_ref": "indicator--30e5d843-542d-4cda-8d0a-5275d6b2eab0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bae1bb-ee33-4a34-be80-fc44e341d93f", "sighting_of_ref": "indicator--9f0b3845-87b5-42b7-809b-0f3a94b74c78", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d428517-3b28-46fa-a140-1cfd745ae631", "sighting_of_ref": "indicator--9f0b3845-87b5-42b7-809b-0f3a94b74c78", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8cb128-0be1-4f88-9b87-f058b4dc8de8", "sighting_of_ref": "indicator--2ed34ed4-9707-416a-b11a-469b5459e11c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2889cf14-b149-421e-808f-c6992df7602d", "sighting_of_ref": "indicator--2ed34ed4-9707-416a-b11a-469b5459e11c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec1154b-bc6e-47d0-b81e-ed54436d3ca6", "sighting_of_ref": "indicator--2ed34ed4-9707-416a-b11a-469b5459e11c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25315ae2-1213-483e-9809-11f237b97dc7", "sighting_of_ref": "indicator--590ed080-7c12-4fdf-b2d4-5f9116a2fc82", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafdc8f5-597e-4c37-abb4-49e9ad91d7c3", "sighting_of_ref": "indicator--590ed080-7c12-4fdf-b2d4-5f9116a2fc82", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae89e14-3927-4124-a6d8-9ce01a3dadb6", "sighting_of_ref": "indicator--763844db-7a3f-408a-96ee-3379e40bde2a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b060b1-a8e2-492b-9278-3649e4b2d3e3", "sighting_of_ref": "indicator--763844db-7a3f-408a-96ee-3379e40bde2a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8cb69a-ed01-4257-be24-1893342fd503", "sighting_of_ref": "indicator--06883354-edf6-43d0-a02e-869aed023914", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0df7aaf-19cf-477e-b26f-1a845ec4a8aa", "sighting_of_ref": "indicator--06883354-edf6-43d0-a02e-869aed023914", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd62518-120a-4d9a-8a9a-ded43c71d4e1", "sighting_of_ref": "indicator--4f02c064-220c-419b-9981-371e20f84c5c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c4eeff-9e13-42c3-9e7d-cc2612aa10bc", "sighting_of_ref": "indicator--4f02c064-220c-419b-9981-371e20f84c5c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13336fea-ca43-4e26-a762-1a00ba2a1548", "sighting_of_ref": "indicator--1b784cb9-fe72-407e-8ba3-ca64d19927a5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4b09e7-62af-42b9-a22d-44009abb2387", "sighting_of_ref": "indicator--88d463d5-5821-400c-a1dd-7ab757a1e3ef", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7cc34e-4458-4597-905c-7b21555ef1d1", "sighting_of_ref": "indicator--7a0891f7-9d37-4390-b505-fea2997de3a6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061d053b-8431-4b43-9c7b-a4785fa6667c", "sighting_of_ref": "indicator--9abc48f2-0451-41ac-b067-99e474fa2618", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd793d9-d19f-40be-86e6-3ff4af386bce", "sighting_of_ref": "indicator--faed46b7-d754-43ae-b920-8c15f4505615", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a5eac0-3c29-4ad2-a41d-574b30c54ebc", "sighting_of_ref": "indicator--faed46b7-d754-43ae-b920-8c15f4505615", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6655ed84-b367-40b6-b0bb-4e373282f1b2", "sighting_of_ref": "indicator--ad5ef4ac-3288-4753-a8dd-776dde1fd96b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71648bc2-2fa3-4c0f-8d67-5d3dccd275db", "sighting_of_ref": "indicator--a5d364a6-2318-4eda-9b26-e0cedfd3447a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d881f40-616e-437d-a668-f385cd80f3e9", "sighting_of_ref": "indicator--a5d364a6-2318-4eda-9b26-e0cedfd3447a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591dc66f-a5ef-46ba-9873-8ab041444d67", "sighting_of_ref": "indicator--cc00ca68-f304-4283-8a26-18bf7460a0b4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ff2e5c-37d9-4cc8-bca9-909ecbd114d0", "sighting_of_ref": "indicator--cc00ca68-f304-4283-8a26-18bf7460a0b4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf244616-ee33-4faf-93cc-710a40e0128d", "sighting_of_ref": "indicator--e88cbc49-601c-4362-b640-4c07bee09185", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ecf4291-2d03-40e4-930a-0d96ce63c4a3", "sighting_of_ref": "indicator--e88cbc49-601c-4362-b640-4c07bee09185", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091b39cb-0b5b-4870-a046-6a068425dc09", "sighting_of_ref": "indicator--ec804a93-7621-43fe-a731-2ab0a44a1435", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d937f1a-adb2-4afd-931a-348839f37a2b", "sighting_of_ref": "indicator--ec804a93-7621-43fe-a731-2ab0a44a1435", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee227c3-c7d3-4e92-abbc-e6b972dc4994", "sighting_of_ref": "indicator--6e2624e2-6b8c-4c46-b2cc-b08c87e69e25", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a20c496-9248-47cc-b458-a42c11e5bf5a", "sighting_of_ref": "indicator--60310052-6394-4d43-8a58-adae362744d0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515d6872-c8f9-49c0-9e00-4fff033ccfb9", "sighting_of_ref": "indicator--60310052-6394-4d43-8a58-adae362744d0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abc5e82-b9a6-4555-a615-969883133a17", "sighting_of_ref": "indicator--60310052-6394-4d43-8a58-adae362744d0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12912daa-fa3a-4bb1-9050-7c36f1c5f63c", "sighting_of_ref": "indicator--e7eff689-d55f-499e-a790-eaff74f3ea51", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550dbd57-87df-41fb-a531-41a779f5243c", "sighting_of_ref": "indicator--5a121325-4672-4712-8daf-7d6db308535e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb182aa9-fcbd-44d0-a51e-ca767d9c1eca", "sighting_of_ref": "indicator--5a121325-4672-4712-8daf-7d6db308535e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1eaf38c-c3a0-4044-98a2-c0845df8978b", "sighting_of_ref": "indicator--caa21cd3-084d-4a3d-9cd6-d86c0dea21a0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f26342-1075-4006-8cba-80906b560601", "sighting_of_ref": "indicator--caa21cd3-084d-4a3d-9cd6-d86c0dea21a0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b44929f-f692-4f86-81c1-93bc58e4f94c", "sighting_of_ref": "indicator--d17af847-ccf9-4ab8-a7b6-c7c0a026a6e4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6390dd-402d-42fc-a6e9-cc2f151b5e1a", "sighting_of_ref": "indicator--2fe223a0-6716-4530-8c8e-7fb6cfe527b7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8d12e7-1618-4a41-8f09-3147b8fd0656", "sighting_of_ref": "indicator--2fe223a0-6716-4530-8c8e-7fb6cfe527b7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9500b7-5ddb-4cfd-be32-d88628f681b9", "sighting_of_ref": "indicator--ad971628-767b-4666-a659-94cb29a3538b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9aca702-656b-44ab-bbf7-f45864a874ff", "sighting_of_ref": "indicator--31c83d09-b626-4389-8df2-626af5ef0666", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1aca31-fab3-45c4-bbf4-a47222d7f21e", "sighting_of_ref": "indicator--31c83d09-b626-4389-8df2-626af5ef0666", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59763a0-2981-40fc-bb63-6c3ae4d9021f", "sighting_of_ref": "indicator--883da01f-6f02-4e98-a710-f063d8f74453", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d473580-c7d7-4a21-8452-12f7c70f015e", "sighting_of_ref": "indicator--a4adf6b6-72dd-4e50-b3f5-727f1633f390", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7886d7e0-c572-4d08-9f02-12ef5f7b52eb", "sighting_of_ref": "indicator--0273089c-028e-401a-b230-ea6a5b194e3f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53472da9-031b-42ae-ac2c-8e7e3b7d8e55", "sighting_of_ref": "indicator--b0fc1a8a-a9a7-4097-b97e-1c0c73fb62a8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8f6ce7-f5d8-4108-8987-f9417199354d", "sighting_of_ref": "indicator--b0fc1a8a-a9a7-4097-b97e-1c0c73fb62a8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be41d0e-8e9d-4669-8091-875b2e41b051", "sighting_of_ref": "indicator--bd5a5af0-0b6a-486f-945a-0819943c9213", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d2d722-5e67-4dd5-ace0-38e90430d1d3", "sighting_of_ref": "indicator--bd5a5af0-0b6a-486f-945a-0819943c9213", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d696e7-bbb6-415b-8df3-3e7e4d072e1a", "sighting_of_ref": "indicator--51b2af93-dff6-4fe7-9ad7-aada30bb597b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e51f3c7-933e-49b3-b754-7649c7961980", "sighting_of_ref": "indicator--51b2af93-dff6-4fe7-9ad7-aada30bb597b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57fcbf3-4a7f-4c4c-8005-59a3f8856f3d", "sighting_of_ref": "indicator--17904935-7ccd-4b91-b26d-a31350e28125", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394636e5-ddc2-4b82-8961-4b748054827e", "sighting_of_ref": "indicator--efbfd188-f31b-480a-a922-055d11cb2f4e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b9220b-1c3f-4e1d-b363-714bbd01848f", "sighting_of_ref": "indicator--9a7a8f4d-6d97-4d49-bd7c-5bcacb662edf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df504749-4e57-49b9-ac1c-1ddc5b076691", "sighting_of_ref": "indicator--3d0d946a-d738-4313-8698-08ba6052298c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd63540-5ac6-45c8-83af-8099f324c6f5", "sighting_of_ref": "indicator--3d0d946a-d738-4313-8698-08ba6052298c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11ade15-0f54-4eee-99ba-101f770e33a8", "sighting_of_ref": "indicator--b04a3250-4cac-4002-83d6-fab2fdaebc84", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c243e8-8c23-409a-ae33-42036d8a38e3", "sighting_of_ref": "indicator--7039fb0d-85c6-414b-ae72-8b61c92169c7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464646a4-708c-41d5-ac60-91bcd10a34c3", "sighting_of_ref": "indicator--7039fb0d-85c6-414b-ae72-8b61c92169c7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e90a7e-546f-4e1f-a10c-d8a09e18686b", "sighting_of_ref": "indicator--c0bfa08c-18a2-4d40-b92b-809af278694b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002ebb30-a770-4df2-8f98-1ac97f764310", "sighting_of_ref": "indicator--c0bfa08c-18a2-4d40-b92b-809af278694b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18571e5-d37c-4de8-bdd0-0dba90d6cb4b", "sighting_of_ref": "indicator--0f956b4a-1451-4fe3-b737-ec6e52a38e28", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3f2bd4-7a9a-444f-814d-566466149e39", "sighting_of_ref": "indicator--accba0ea-6089-44b2-a67b-44595301ef27", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ed44c2-7126-4364-b3ec-d0f321d946a1", "sighting_of_ref": "indicator--0aba6d3e-e03a-4bdb-bef5-c881a553fd53", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f807965-96f1-4d80-8cf7-3028aee80b46", "sighting_of_ref": "indicator--0aba6d3e-e03a-4bdb-bef5-c881a553fd53", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a366ec6-5353-4a5a-be15-001e0f7dfdcc", "sighting_of_ref": "indicator--0aba6d3e-e03a-4bdb-bef5-c881a553fd53", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a46243-7d5e-44c4-838b-63c0e6b1a8af", "sighting_of_ref": "indicator--cedfe58a-a1bd-4cb4-a58e-6b25abe1aba5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc20e93-5fe9-4186-93e1-bb4ce6f513b5", "sighting_of_ref": "indicator--cedfe58a-a1bd-4cb4-a58e-6b25abe1aba5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca5c75a-3fc5-4336-b415-d3b6ac4990ef", "sighting_of_ref": "indicator--f3921859-1c3c-4194-a4af-70c6210e0b8c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b5de5e-d872-4017-92f8-b96cf28ccd2a", "sighting_of_ref": "indicator--47beb4f9-4755-4098-97ee-960d92fdd79c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8daeb1-cca2-40ea-a3a4-b79ff9d5929c", "sighting_of_ref": "indicator--d025bbaa-54c9-4fdb-b8ff-2cac7a2b4930", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4087ec-14ef-422f-98d3-45eab0347b59", "sighting_of_ref": "indicator--d025bbaa-54c9-4fdb-b8ff-2cac7a2b4930", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2a89ab-e96d-4b0e-99ee-8ac45fecd669", "sighting_of_ref": "indicator--e32456bb-3271-4e50-af6d-9a5cbb4c11fb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5ecb3b-24e9-4671-8eca-490569c32b6b", "sighting_of_ref": "indicator--e32456bb-3271-4e50-af6d-9a5cbb4c11fb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96380884-95ed-4a76-a941-54919dcffd9a", "sighting_of_ref": "indicator--d263bf58-3e02-4269-aa36-eb920e085f14", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a26e96e-5bcf-4ace-b5d8-d93f56ca27a4", "sighting_of_ref": "indicator--95b082fb-7bac-485c-841c-e480806fa69c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626ed135-1734-4fdc-bbab-4aa691e795d2", "sighting_of_ref": "indicator--29f98e21-969e-4d15-b5f9-9670ecdb76c5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a223deb-c365-4420-936f-3beaa8fbe2d7", "sighting_of_ref": "indicator--29f98e21-969e-4d15-b5f9-9670ecdb76c5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88e32cf-480a-4efe-98e2-e4320185374a", "sighting_of_ref": "indicator--2d25b969-04e3-4fdd-9b39-2e09827c7c71", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5212dc6f-0839-4322-90d3-291f367e19d7", "sighting_of_ref": "indicator--2d25b969-04e3-4fdd-9b39-2e09827c7c71", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6d38e1-afab-4ad1-bcd4-d74a558be608", "sighting_of_ref": "indicator--84ed7a38-4c2c-43e6-aa8b-cf801d541256", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f8800b-5905-4d95-a149-249931178d7a", "sighting_of_ref": "indicator--84ed7a38-4c2c-43e6-aa8b-cf801d541256", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74bc7a7d-9b74-4a99-9d30-de8c44895319", "sighting_of_ref": "indicator--84ed7a38-4c2c-43e6-aa8b-cf801d541256", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f701e7c9-25f3-40c2-9438-83d57dc4d0e7", "sighting_of_ref": "indicator--c76b46f8-6940-414d-94bb-cc0771107104", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d355c10a-fa97-42dd-835e-139af4817191", "sighting_of_ref": "indicator--bb7ce6ce-1dc8-4aaf-867c-d7c3809cd8e3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc57f6c2-15c8-4704-a41c-beb2efcff6b0", "sighting_of_ref": "indicator--bb7ce6ce-1dc8-4aaf-867c-d7c3809cd8e3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7fcf93-d053-490a-b0fa-7af35a733d0d", "sighting_of_ref": "indicator--bb7ce6ce-1dc8-4aaf-867c-d7c3809cd8e3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0866f0cc-ef63-4f77-a3a9-9cc281d2d5f0", "sighting_of_ref": "indicator--a9be9cf2-8ba0-417e-8d9e-2e42e1ed4886", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74509010-3019-4367-8e06-b20a3b47322e", "sighting_of_ref": "indicator--bc8c1aa7-045d-4c8f-9094-8ab1e852fbce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838c47bb-2ef8-406c-8213-daa11e6f9d5d", "sighting_of_ref": "indicator--bc8c1aa7-045d-4c8f-9094-8ab1e852fbce", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc894d4-a736-497b-9cd7-aa2ad939985c", "sighting_of_ref": "indicator--a9c6eb2e-a563-4008-b3f3-fce2010a4d96", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905610df-3a5c-466b-afdf-45698082cd8b", "sighting_of_ref": "indicator--a9c6eb2e-a563-4008-b3f3-fce2010a4d96", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2d313f-3ea4-4d9e-b0e0-0dbbc17620fd", "sighting_of_ref": "indicator--884d955b-b051-41a4-8ed5-33d973d6c0c6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec32637-d8d0-4414-b39f-5bd2b7fac5a0", "sighting_of_ref": "indicator--884d955b-b051-41a4-8ed5-33d973d6c0c6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804e44bb-89b5-4aa9-99b3-fc9f5525b92d", "sighting_of_ref": "indicator--884d955b-b051-41a4-8ed5-33d973d6c0c6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9cd8c96-9eeb-41a9-9ccc-9a3b7159d1de", "sighting_of_ref": "indicator--39c10820-9dcf-4a71-b9cf-79c8ec6565ee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cdb2d44-e99c-4f1b-b975-6a0eaadc2466", "sighting_of_ref": "indicator--39c10820-9dcf-4a71-b9cf-79c8ec6565ee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415a0a74-5e88-44e3-b254-ed5b2e2378e8", "sighting_of_ref": "indicator--39c10820-9dcf-4a71-b9cf-79c8ec6565ee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0a8098-5ed6-4845-b326-2539f5af422f", "sighting_of_ref": "indicator--b69b3a1a-8379-40c3-902c-b1337ef1a432", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6027a2e9-a5aa-43a5-b2f2-01ba47d13b70", "sighting_of_ref": "indicator--b69b3a1a-8379-40c3-902c-b1337ef1a432", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132434e8-88a3-4f64-bb19-4591c8724e96", "sighting_of_ref": "indicator--72e9410a-5b25-4f3f-beed-ef00ee089b9e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215e6202-941c-49fa-9a95-afa9b6dfe898", "sighting_of_ref": "indicator--010d1c3c-5155-4891-ab73-d41f2e2a31be", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f029fd-97dc-4e69-8109-21b5df02a505", "sighting_of_ref": "indicator--010d1c3c-5155-4891-ab73-d41f2e2a31be", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8ccf21-7a98-473a-bcec-0da1567f84b5", "sighting_of_ref": "indicator--010d1c3c-5155-4891-ab73-d41f2e2a31be", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a1fcd8-68b6-492e-b4ee-8589033c9efc", "sighting_of_ref": "indicator--90b71c86-733d-416e-9c02-afdc652653ea", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae97a15-dcd8-472e-91ab-5c5e0eda55a2", "sighting_of_ref": "indicator--36d3ab6a-bee4-443c-8d72-b767593f1e13", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ded4d9-7664-485e-a9b4-6709abda0b43", "sighting_of_ref": "indicator--36d3ab6a-bee4-443c-8d72-b767593f1e13", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9346f8-5067-40e5-b4a6-d5204476f9be", "sighting_of_ref": "indicator--36d3ab6a-bee4-443c-8d72-b767593f1e13", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4dcd13-47e8-4d09-ba18-0c5a80a53486", "sighting_of_ref": "indicator--48fceca6-12ae-4aa1-accc-579098b35945", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7291abec-d4e2-4235-9336-2080979902d7", "sighting_of_ref": "indicator--f89e24a4-b369-425e-bc5f-01aeceae759e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7914c17e-96a0-451a-8099-d28b21eb6620", "sighting_of_ref": "indicator--a5255603-e5d4-49f3-954f-e5d23ab1525a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aefb390-ca78-4f9b-a043-8894feddef6b", "sighting_of_ref": "indicator--a5255603-e5d4-49f3-954f-e5d23ab1525a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7380e3b-96a3-4322-b6e8-ba335a7db4e9", "sighting_of_ref": "indicator--a5255603-e5d4-49f3-954f-e5d23ab1525a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de08d7b-1ff8-4054-b03f-430092c88d6a", "sighting_of_ref": "indicator--446ee71e-a3a1-4847-801d-d46e6693b369", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13da341e-514f-457b-b04c-4e7d4cd09d45", "sighting_of_ref": "indicator--66e8559a-47b1-4be9-9923-0917b38efab1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0382ed67-8157-4878-bd70-ab1fefdc4392", "sighting_of_ref": "indicator--cdeeb7c0-f662-4607-bab5-a5c9c4fa5672", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f416895f-aea4-4223-b09d-e73ae42eabf6", "sighting_of_ref": "indicator--cdeeb7c0-f662-4607-bab5-a5c9c4fa5672", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f472d7e-82ae-48aa-a34f-ddbbbf65e894", "sighting_of_ref": "indicator--ad451fbd-e464-4980-ba47-099646d01bcc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09219ef-f52a-40a8-9ddd-eb6bd181e41c", "sighting_of_ref": "indicator--78e9bdde-90ac-4abf-8013-44621d54056b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4143920-299e-43c0-92b4-070ff264755f", "sighting_of_ref": "indicator--78e9bdde-90ac-4abf-8013-44621d54056b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc7a928-0183-4663-b310-d36a930fd76a", "sighting_of_ref": "indicator--78e9bdde-90ac-4abf-8013-44621d54056b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb58fd65-c2ad-494d-b136-192157fe3276", "sighting_of_ref": "indicator--d9950947-1e64-4dc7-b490-af24a774d207", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d41ef0-b265-4748-a2d7-ed9cd1cc76bc", "sighting_of_ref": "indicator--3427b3c6-6f21-4be6-87f0-cfb536f75d6e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e523fa29-2092-4a4c-a3a0-953efe008f86", "sighting_of_ref": "indicator--3427b3c6-6f21-4be6-87f0-cfb536f75d6e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea155c0e-fef0-4e9c-8552-b11f3d97e7bb", "sighting_of_ref": "indicator--ddec6102-f881-4181-b4a1-01e87f0323a5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0821a65c-39c0-493b-9029-5dee8d93095a", "sighting_of_ref": "indicator--e402db57-9a2d-4b1c-992e-1cf562048434", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bcbd8b7-a664-44f3-a2b0-fcd7f2b2bb4c", "sighting_of_ref": "indicator--10bc408f-a812-4f02-a807-5a8ef58ce3e1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9548976b-e19b-4a66-aace-bd61e2b92d23", "sighting_of_ref": "indicator--10bc408f-a812-4f02-a807-5a8ef58ce3e1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01e1a1c-57fe-49d4-8e46-30c3c9e8a138", "sighting_of_ref": "indicator--10bc408f-a812-4f02-a807-5a8ef58ce3e1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999627ff-4bcc-40eb-a917-2136b0b0e1f5", "sighting_of_ref": "indicator--c79aba9a-861c-4798-b6e4-7cb3d71f5a30", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a4ae7d-8ea4-4e5b-8f96-d978971c416a", "sighting_of_ref": "indicator--03c9ec08-8c4b-4d09-a974-9c7086f9cd45", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9f42ef-92d4-4c6c-b46e-98b868624ad7", "sighting_of_ref": "indicator--03c9ec08-8c4b-4d09-a974-9c7086f9cd45", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4fd55c-a560-4759-860a-cd372f0cbd00", "sighting_of_ref": "indicator--4e7a4e5f-ab85-447f-a5af-7061ebb21e53", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07676782-4800-4df0-b90d-46f182e16023", "sighting_of_ref": "indicator--4e7a4e5f-ab85-447f-a5af-7061ebb21e53", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcefab3d-e898-49f2-ae93-4494a345be27", "sighting_of_ref": "indicator--a66eda70-79fd-47e8-a48a-2bb350509905", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28cc824-3329-4901-add6-bc6fde9b16a7", "sighting_of_ref": "indicator--dcc13145-16b5-42e1-9c5c-e3440a5d6790", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69347837-3e5d-4f94-b854-5ca59c55ef74", "sighting_of_ref": "indicator--239ffe38-b065-443a-8f5a-84e2a91602e0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326e23f6-f6d0-441f-8599-b65ed0a85634", "sighting_of_ref": "indicator--c4ac6a80-e839-462d-b3e3-c5fafda112f6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9855c37f-db6a-47cd-885a-2b9fa6942937", "sighting_of_ref": "indicator--a95ecf3a-ff4a-4f54-b632-edcf3d732ea2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6599bc18-4ab0-4749-8a13-2ed460d1745d", "sighting_of_ref": "indicator--a95ecf3a-ff4a-4f54-b632-edcf3d732ea2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4bc7ad-5926-426b-879e-1dfb63d45eda", "sighting_of_ref": "indicator--e19eeab1-8716-4d10-ab35-2b6cbff914b8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65d1142-7035-43ff-b301-1d3ab1d0d0bf", "sighting_of_ref": "indicator--e19eeab1-8716-4d10-ab35-2b6cbff914b8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d135b9-9917-46b0-bfc4-a635cdb2ca59", "sighting_of_ref": "indicator--66e84884-96b1-45fe-8c40-39b505444652", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ad6360-7585-4689-a61b-e627f51aa371", "sighting_of_ref": "indicator--85227189-d5e2-49df-84fb-8803653f602e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc92d40-ce12-460a-a018-074e69c06d8f", "sighting_of_ref": "indicator--85227189-d5e2-49df-84fb-8803653f602e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f46603-21a3-432d-bf34-a29aa8c60bd2", "sighting_of_ref": "indicator--85227189-d5e2-49df-84fb-8803653f602e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9184053-5a51-405b-8586-ced405a86a06", "sighting_of_ref": "indicator--ee2c912e-88b2-4e1b-9079-9527ca232b74", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e734d127-407a-470f-8c26-835c36e950b1", "sighting_of_ref": "indicator--51e719ba-7160-43c9-84f4-5234917caf28", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0a6d3d-90d7-4796-9e06-2b4e4a61bfa0", "sighting_of_ref": "indicator--51e719ba-7160-43c9-84f4-5234917caf28", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc5767b-86d2-4af8-93aa-179c27feb2ea", "sighting_of_ref": "indicator--835c6e0c-6fe8-499e-86d6-896b03a6260b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12910b62-47c0-4877-98ac-acb028acfd35", "sighting_of_ref": "indicator--835c6e0c-6fe8-499e-86d6-896b03a6260b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed03155-38d2-4fc9-a5df-e4b6131ec74c", "sighting_of_ref": "indicator--2330de53-2e81-4337-8d1e-e66fb5638fea", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e665a9e5-a5be-4789-990d-1b8b5ba66cf5", "sighting_of_ref": "indicator--c1f6d29c-34b9-40b8-9c08-afb333cc0e66", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1c2a66-6db4-45dd-8365-13a9e35f17b5", "sighting_of_ref": "indicator--c1f6d29c-34b9-40b8-9c08-afb333cc0e66", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9aad53-38ce-4d90-a882-b1a64a40e58a", "sighting_of_ref": "indicator--5e2a9255-3ca1-4f47-94f2-2bbcf7744d8c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01fbb90-d6f9-4120-bb71-c2ae168544c3", "sighting_of_ref": "indicator--4946c05f-8124-4fd4-b687-fa6d93b37aac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee1b9c3-aab4-437a-b587-b6f9a14faaab", "sighting_of_ref": "indicator--4946c05f-8124-4fd4-b687-fa6d93b37aac", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2161f378-c101-4bcf-b030-dac1f57bd75a", "sighting_of_ref": "indicator--ba0f6198-536c-42bd-8896-a237d89d6a8c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac93ac53-0866-4e99-a5e4-26907db07e0a", "sighting_of_ref": "indicator--ba0f6198-536c-42bd-8896-a237d89d6a8c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b9b3ba-8641-4df8-a3aa-357dc5b1529c", "sighting_of_ref": "indicator--ba0f6198-536c-42bd-8896-a237d89d6a8c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9adcbf85-06df-44d2-bfa4-ebe5aaccb7ba", "sighting_of_ref": "indicator--c2fd28d2-b374-4cd6-bb34-55b313912d58", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbc3b9a-d555-4776-8cae-ddb2aa12ead4", "sighting_of_ref": "indicator--9f395fed-3cde-429b-a0d4-a811b3415296", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04fec255-b274-43c0-9b49-3a9355c853f2", "sighting_of_ref": "indicator--9f395fed-3cde-429b-a0d4-a811b3415296", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff5e65b-98a8-4695-b9fc-d4496869cebb", "sighting_of_ref": "indicator--9f395fed-3cde-429b-a0d4-a811b3415296", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38b6fa3-cb8b-46ce-8a38-7e67a95796ca", "sighting_of_ref": "indicator--5a05e739-374c-4664-89db-b14afc8739d6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf115f6-9a62-4853-a3a7-fdf4b410978f", "sighting_of_ref": "indicator--5a05e739-374c-4664-89db-b14afc8739d6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5793bcc8-bbfd-4939-bb02-9d37e0764bb4", "sighting_of_ref": "indicator--7b5851b8-0eae-4a78-bdf4-78b746c26ef2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a229f50-12b1-4113-8676-bc1cb2fa9f68", "sighting_of_ref": "indicator--4a2094d3-341b-4a58-8c5c-37042df0303b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c0dfa1-ab30-48c9-9262-be41f206887b", "sighting_of_ref": "indicator--4a2094d3-341b-4a58-8c5c-37042df0303b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5bcc1b-3636-4ff5-a255-7ec4493946fb", "sighting_of_ref": "indicator--43c8d7eb-4086-4523-9f3d-d008d57e1b83", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7343374-fa9b-4102-b241-79e46577195a", "sighting_of_ref": "indicator--0d761736-dce7-4893-a20d-1832caee7101", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a18c12-7549-4f26-81ec-1302a83f6cde", "sighting_of_ref": "indicator--0d761736-dce7-4893-a20d-1832caee7101", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af412c09-7770-439b-8de5-ca1703da44b1", "sighting_of_ref": "indicator--b6229b6c-04e0-4016-9f31-5560261b4fde", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1734d1a8-a9db-48f1-808e-b2bdfcd38c4d", "sighting_of_ref": "indicator--07ee30ce-26af-4e3c-aec7-3a3415e3016d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ad9154-354e-4d8b-bed8-255e2248119e", "sighting_of_ref": "indicator--07ee30ce-26af-4e3c-aec7-3a3415e3016d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be366380-6427-4739-b009-47b274dd794d", "sighting_of_ref": "indicator--374b2fcf-9800-4ae6-82f3-a010d93ec0f2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcd02a4-ddf2-4686-95a8-8e256be1b089", "sighting_of_ref": "indicator--ce63d52f-ea57-4cdc-8a7c-d8d9666f61ff", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db07c178-74d2-43f9-b0f9-83dab9ccd05a", "sighting_of_ref": "indicator--d709b9b7-8334-404d-b778-900c4c125cb6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570bf919-76f0-4dbb-a0df-663931600445", "sighting_of_ref": "indicator--d709b9b7-8334-404d-b778-900c4c125cb6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ff3e3c-dcdc-4f1e-a02a-3a200cefd788", "sighting_of_ref": "indicator--25531140-7eff-4b20-96d5-89b7e0914a36", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a1448e-cdf1-4b80-8011-0b7eb9ca30a7", "sighting_of_ref": "indicator--7e40c605-a6b7-4bf8-b7b9-fdc16745bbc4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aebcfd0-3fb4-488d-b1d4-7dac28b7743c", "sighting_of_ref": "indicator--7e40c605-a6b7-4bf8-b7b9-fdc16745bbc4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea7e5c4-7df3-4a84-b364-f32f3d5d6aeb", "sighting_of_ref": "indicator--3183be9f-31da-4494-abcc-c9dbeb31e815", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab1ab9c-b0eb-4571-a7f6-2d85b9f21a01", "sighting_of_ref": "indicator--3183be9f-31da-4494-abcc-c9dbeb31e815", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5fdfa3-cc0f-442d-b763-ec40e17c4e87", "sighting_of_ref": "indicator--b9a69287-7629-495b-9d6a-fff87328d84d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649924ac-fe8b-4b3a-9a67-c3b26ecdf736", "sighting_of_ref": "indicator--b9a69287-7629-495b-9d6a-fff87328d84d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8c2309-6748-4dae-b48e-1b5773eb7142", "sighting_of_ref": "indicator--699c6c86-1982-4aa4-bad1-1af66ffeb5af", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6836e0f5-e8e0-4a14-90ea-c4361a6d9902", "sighting_of_ref": "indicator--0f1bb3ba-6d21-4893-88bb-d11ea74519a6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73423dda-e844-4469-8835-a11c78451b53", "sighting_of_ref": "indicator--759c6869-81c3-4113-ae69-bc83c8df28d8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27204abd-499d-48b3-a5b2-712dda5cc4a8", "sighting_of_ref": "indicator--74267652-7431-43b5-b945-97cd4d8c8a3a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28190be-5dac-4229-b56b-a2176c4d2e36", "sighting_of_ref": "indicator--c8968539-3d96-4ecf-b518-3ed02d2e70dc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9558d07d-f4eb-4511-a4c8-2d54dc12159b", "sighting_of_ref": "indicator--c8968539-3d96-4ecf-b518-3ed02d2e70dc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e0abdb-9dda-4729-943e-c0bf7d90bd64", "sighting_of_ref": "indicator--125948a1-f5c5-47f8-820b-9231787ae421", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f713f65-af3e-4d11-addf-fd89f5a13f26", "sighting_of_ref": "indicator--b6480a27-176e-4325-bf4b-09d139af86ff", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a790da-9361-47b9-8086-7b0ab2982a37", "sighting_of_ref": "indicator--9807b73f-0ad6-4b6e-ac2d-d6f6fe4daa46", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34829f62-1c39-4b96-9f93-a0df6b8b1bb9", "sighting_of_ref": "indicator--d25b4c37-b750-43c9-8c68-7aa04d34ccc6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d752556-4ba9-4c20-9f12-61b73c818447", "sighting_of_ref": "indicator--d25b4c37-b750-43c9-8c68-7aa04d34ccc6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00cf227f-f25d-4dbf-a1fc-42bea9b12a2f", "sighting_of_ref": "indicator--327b1fb1-6ee0-47a0-9b04-c5ddeb4dc7fe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7281aa6-87fd-4589-9c73-92b7b3e9c0fa", "sighting_of_ref": "indicator--7dc2ae45-e6fe-4651-bb85-7bc7ca357315", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81bd99e9-ad85-444b-a92b-60cdef525fd1", "sighting_of_ref": "indicator--7dc2ae45-e6fe-4651-bb85-7bc7ca357315", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22742ae3-9e34-4446-a7a0-f00f7995e13d", "sighting_of_ref": "indicator--7dc2ae45-e6fe-4651-bb85-7bc7ca357315", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c990f4-8094-429b-b6fa-5f12e64b07d8", "sighting_of_ref": "indicator--dbafa1d0-7a89-4533-bfec-0bb0b30cd370", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47cd2ed5-f0e4-4f2a-95d9-dc1518c7d06a", "sighting_of_ref": "indicator--dbafa1d0-7a89-4533-bfec-0bb0b30cd370", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b22443-73cd-41d5-8bc2-d408abae6fcd", "sighting_of_ref": "indicator--c72e4282-7b6a-47eb-8a8b-26f7ae563cdf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53a0e15-ee58-437d-ba4c-acc36b0d6329", "sighting_of_ref": "indicator--c72e4282-7b6a-47eb-8a8b-26f7ae563cdf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5013c3b-e4a4-4db0-b966-3bf848819250", "sighting_of_ref": "indicator--36f923a0-45af-405b-bda8-2c0da7ea6aca", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c25d37-0fb0-4d27-a88a-4974913a34f5", "sighting_of_ref": "indicator--4618b693-4788-4668-9f36-83e904d04ef4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30199d15-aa06-45a8-a1ed-6359b6642dc2", "sighting_of_ref": "indicator--4618b693-4788-4668-9f36-83e904d04ef4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e848e143-31f3-469f-95e3-654fe823f6ba", "sighting_of_ref": "indicator--92bd9f4f-77c7-4ebb-aa21-4ad01881cb26", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14fa62b-9cbd-4e94-b37b-c5cfddbc9eff", "sighting_of_ref": "indicator--84fcc857-320f-4166-9813-5fc577953a4a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cd86ef-0956-46ec-abd4-0797a4e1d3a3", "sighting_of_ref": "indicator--84fcc857-320f-4166-9813-5fc577953a4a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e1b0c1-81c1-4db3-893b-4abeb059ea44", "sighting_of_ref": "indicator--9539aa15-c597-489d-b505-f8572d90d269", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a745bf19-a4e0-42cc-879c-8e42dd04561a", "sighting_of_ref": "indicator--77336ef9-c5fe-4a6a-971c-1850221145cd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa9fb9d-ffd2-4e54-b27c-709e29382db2", "sighting_of_ref": "indicator--e24acb1b-676c-45d3-9e3e-1d9c79ec1e35", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff7645e-0c87-4e74-bd32-20f526b2e05d", "sighting_of_ref": "indicator--e24acb1b-676c-45d3-9e3e-1d9c79ec1e35", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a7409d-acec-4693-ba0b-45ecfa052bc2", "sighting_of_ref": "indicator--de75e311-3fed-4771-97ca-d9582e682677", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33136f1d-10f5-4e7e-ac1b-9a57ab60ffd2", "sighting_of_ref": "indicator--de75e311-3fed-4771-97ca-d9582e682677", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7dce2a9-c7ef-4700-834d-9e997c6283e8", "sighting_of_ref": "indicator--5ff2c4e7-8008-4021-8ec1-6ec06d62924b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69381b4-45b9-4a6b-ad17-b916bef10b14", "sighting_of_ref": "indicator--3d0887c0-05f7-4fe3-a9ac-f4e2c2ea15de", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfdac224-85cb-44fa-b795-ae4b1f4f81a1", "sighting_of_ref": "indicator--79816fb9-1721-4882-8779-f01e40c98ce2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ae4b10-7889-4788-96f9-0598360cdfdf", "sighting_of_ref": "indicator--dfb0d790-79f1-4a4a-942e-8a6b3fb736ab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138a1f95-0bcd-44c3-88b5-07c18c7f2534", "sighting_of_ref": "indicator--4d9f42f5-4ad0-4025-8319-3522f253e124", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea91962-3940-40a9-8d0d-f9197b4e8524", "sighting_of_ref": "indicator--71cba46c-8b40-4f26-bc81-e2c3a9f22a51", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a59061-91c5-4e2b-b1df-6e1df6540a5f", "sighting_of_ref": "indicator--c94ea23d-2109-43f9-aec2-a0ad37c4f400", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb767158-456e-4610-8209-3d8ec683e6df", "sighting_of_ref": "indicator--c94ea23d-2109-43f9-aec2-a0ad37c4f400", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ddf80f9-f71e-4560-adb4-94a375bb5420", "sighting_of_ref": "indicator--062f3267-8ac4-47dc-b00b-cfce6ac76d9b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33daf723-feb6-44f1-a683-71478834827d", "sighting_of_ref": "indicator--062f3267-8ac4-47dc-b00b-cfce6ac76d9b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798e4b23-f82c-406b-8127-a77ba9fab284", "sighting_of_ref": "indicator--88c5f81d-83ad-4453-b677-676e7dfc36f7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbc4b0e-ea2a-437d-a821-f149b980dfbf", "sighting_of_ref": "indicator--88c5f81d-83ad-4453-b677-676e7dfc36f7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8ceb5f-721f-4d48-9fec-27e58c0d5ea3", "sighting_of_ref": "indicator--63572c17-887f-489c-ae28-6b3a930097d3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3249bf4a-979d-4e1a-a98b-69f28d92759c", "sighting_of_ref": "indicator--63572c17-887f-489c-ae28-6b3a930097d3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8309ff-1fd9-47c9-ba51-f42256315bab", "sighting_of_ref": "indicator--63572c17-887f-489c-ae28-6b3a930097d3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c627fe22-142f-4bdc-8f0f-46c0e370f1d5", "sighting_of_ref": "indicator--db70fc08-a9be-4235-8412-199b728c2a5f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243b9b85-ea8c-4720-a28e-a71475cdd18f", "sighting_of_ref": "indicator--db70fc08-a9be-4235-8412-199b728c2a5f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05207b8-0218-49d8-9030-d341d5ef562c", "sighting_of_ref": "indicator--a5e2bee5-c3ba-414c-b49b-37dc128459c7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611dddfc-9697-4e21-be66-a85dbd756937", "sighting_of_ref": "indicator--98596cc9-c3e4-4abe-b31d-9a5a96e8ae2e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797d384e-da60-4d75-97fe-64026271466e", "sighting_of_ref": "indicator--00b4b5d6-5d4b-4869-aa65-caa28e75055d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea08a34d-ffc1-4dde-aebf-aab852ff5d95", "sighting_of_ref": "indicator--76fee752-f694-4c3a-bb23-1075d31b5f8c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a41713-5b2a-401f-b8bd-e12edd0f7768", "sighting_of_ref": "indicator--3456f856-bdda-4951-b714-d4c30675be17", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75286120-ff73-4107-a933-81d1f9308e04", "sighting_of_ref": "indicator--2b915758-f98a-4579-a1fb-4cab5500bd3e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1073ccb-a2ab-4761-84a8-6e43c6d89e42", "sighting_of_ref": "indicator--2b915758-f98a-4579-a1fb-4cab5500bd3e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54b8278-1400-40bb-8755-09c488845e3c", "sighting_of_ref": "indicator--77ff4c60-a2bb-44d5-a944-07bc62f73afb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82804ce-7bb4-43e8-8cae-58bd64e6e235", "sighting_of_ref": "indicator--b0dfb6ff-e512-41bb-8a54-dc00cc94647c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47d5990-f241-4427-b2c5-3349174e6935", "sighting_of_ref": "indicator--209cef79-877b-4288-9928-9380377441e3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f13ec2-6066-47fe-9afc-e846e0fbde15", "sighting_of_ref": "indicator--209cef79-877b-4288-9928-9380377441e3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37e1217-c1fc-4fb8-aac8-33c97de3c0f2", "sighting_of_ref": "indicator--f6371457-8185-4dde-8449-3eae13063f11", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975c251f-dadc-41d4-93ff-997a5f79b5af", "sighting_of_ref": "indicator--f6371457-8185-4dde-8449-3eae13063f11", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d5c53b-f127-4a94-b199-5e27caab879e", "sighting_of_ref": "indicator--f6371457-8185-4dde-8449-3eae13063f11", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b39f88-9250-43ed-9b96-45b263e182fc", "sighting_of_ref": "indicator--18af9dbc-56b7-4286-9132-b33b846aae5b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e69e281-fbdf-490e-afdb-a4320c43dd35", "sighting_of_ref": "indicator--cd6b7836-2ff2-415a-8ab8-d27254366129", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354c240f-5d95-4029-bc75-679ef3ded2fb", "sighting_of_ref": "indicator--cd6b7836-2ff2-415a-8ab8-d27254366129", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a711d6-3a6d-4cb3-9c33-5070f751e471", "sighting_of_ref": "indicator--bb2de44a-e623-4dc8-b201-91603b116779", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe41450a-98fe-436c-a68d-58a569549483", "sighting_of_ref": "indicator--bb2de44a-e623-4dc8-b201-91603b116779", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ad2c61-9e11-4b2b-97ed-68cc19341fb4", "sighting_of_ref": "indicator--7f7b8ef2-013f-4240-bbde-9739b05f7bb3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0753000-1d76-4ac7-9f09-ae504b450724", "sighting_of_ref": "indicator--484397eb-a7a9-455c-b8f1-5fa30ef524a5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b01f32-9da7-49d5-a349-56658bb1a474", "sighting_of_ref": "indicator--ca2ba974-a98c-487b-82ec-ae20b1281a2a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95714594-c093-4b9d-aa6a-46727b60887d", "sighting_of_ref": "indicator--ca2ba974-a98c-487b-82ec-ae20b1281a2a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693a05a6-58f6-4026-a30f-e3c24db9bc9e", "sighting_of_ref": "indicator--ca2ba974-a98c-487b-82ec-ae20b1281a2a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4320cafd-c1e8-416c-b579-363484fe48bc", "sighting_of_ref": "indicator--748585cb-dc39-4307-8ed7-75992ab7a37f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fec3cb3-a53b-419f-ace3-ca7266a9ffe5", "sighting_of_ref": "indicator--748585cb-dc39-4307-8ed7-75992ab7a37f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf611ac-8dd0-4174-aba3-b3bd1fbb0909", "sighting_of_ref": "indicator--05e2840a-1b81-4e3b-92d3-25842d83cf3b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a22311-b728-4fe1-9ab4-84abc7e2d7a5", "sighting_of_ref": "indicator--05e2840a-1b81-4e3b-92d3-25842d83cf3b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b732a88f-9a05-4c65-8df9-b20d570116e4", "sighting_of_ref": "indicator--a69c4116-4b32-408d-936c-e244dc3f90bb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5591bb-1475-4aba-836c-af2cc03fc43c", "sighting_of_ref": "indicator--a69c4116-4b32-408d-936c-e244dc3f90bb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbb1e79-30fe-4a02-addf-1724ac362ff0", "sighting_of_ref": "indicator--54838aaa-dd1c-4c97-90e6-cbb3e116c2f4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbba05d-9728-4934-b8fc-13e59c45de66", "sighting_of_ref": "indicator--b9e2d93d-1515-4cf6-9064-90cace885ed2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d66d220-069c-4202-96b1-28f512e45dd5", "sighting_of_ref": "indicator--b9e2d93d-1515-4cf6-9064-90cace885ed2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9341eb61-3cf2-4d06-a567-1a755c3c066f", "sighting_of_ref": "indicator--e5db80cc-0a92-42e3-9077-f2e62ca2e3cd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91c7b44-1f82-4725-a9f1-6f474f2746ef", "sighting_of_ref": "indicator--e5db80cc-0a92-42e3-9077-f2e62ca2e3cd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8caa5ab8-e4a6-4acd-bb69-3bbafb91b392", "sighting_of_ref": "indicator--e5db80cc-0a92-42e3-9077-f2e62ca2e3cd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1482fdc8-6465-443d-8973-28670442b5b7", "sighting_of_ref": "indicator--5becafe0-6a14-4249-8776-e7bde3bf7b58", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d8b262-139e-44e7-a98a-6d3492fd4847", "sighting_of_ref": "indicator--4543e214-9094-4a6e-9497-6f1f0196c4b1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b3af1d-f7af-44f4-9a6a-8feabda5cb09", "sighting_of_ref": "indicator--4543e214-9094-4a6e-9497-6f1f0196c4b1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70772180-2da6-4dc9-b8ad-249651667a38", "sighting_of_ref": "indicator--f8066783-68dc-43c3-b32a-9af16fa8837b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776c1f95-b3a3-410b-bc85-e0c94c158167", "sighting_of_ref": "indicator--c768bf6a-4c4a-4eab-9fc2-0337df5af794", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9097a7b-6ade-4565-b8c2-163fbc8aa549", "sighting_of_ref": "indicator--5712ccb8-36d4-40a7-82ae-98ddfc8af245", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24658b49-2563-4dfe-bf11-278e0f901699", "sighting_of_ref": "indicator--014c4d77-96e5-46b2-b6c0-05d1cfa92f15", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2b63fa-9435-499d-9a01-1f11478c22c8", "sighting_of_ref": "indicator--014c4d77-96e5-46b2-b6c0-05d1cfa92f15", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d89c272-3f75-424e-bda4-ff0d61e8f770", "sighting_of_ref": "indicator--75d7851e-75a5-4426-830a-56d94a3f9384", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92daf679-b5a2-4d52-8a2b-fd12fcc120aa", "sighting_of_ref": "indicator--75d7851e-75a5-4426-830a-56d94a3f9384", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58302e54-dbb0-4031-8342-4dce534fab36", "sighting_of_ref": "indicator--d500653e-48d3-4c59-b7c2-ef979b4bb5ec", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938a34ce-cda2-40d8-99af-aa6b939e6076", "sighting_of_ref": "indicator--ff06489f-58f0-4224-9042-64b1864476c4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8a8f4e-834a-45c5-bd9e-18c9183e0686", "sighting_of_ref": "indicator--ff06489f-58f0-4224-9042-64b1864476c4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62273d58-128c-44b6-82e5-05eb22a1b69e", "sighting_of_ref": "indicator--ff06489f-58f0-4224-9042-64b1864476c4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611adbec-e700-43ca-b14f-34b013322ad3", "sighting_of_ref": "indicator--1742fcb5-6035-42c8-8eb7-d39e48e95514", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b5f9b9-dccd-47b7-8552-c9e82182c767", "sighting_of_ref": "indicator--f506aa94-8a10-4ec2-9901-be88bc13699e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7076036f-8ac8-41ef-8696-430b541ea1da", "sighting_of_ref": "indicator--f506aa94-8a10-4ec2-9901-be88bc13699e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c677e358-87d7-4425-9ace-42988af4614d", "sighting_of_ref": "indicator--0d77d853-d037-4c80-bc80-3c22889ec30c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15bc32fa-a494-48dd-adc5-a02b8883665e", "sighting_of_ref": "indicator--0d77d853-d037-4c80-bc80-3c22889ec30c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b30094-3dd8-4248-81ee-cd766aa2dade", "sighting_of_ref": "indicator--f1de9315-f04d-418d-ad44-2a3ff8bf962f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cde601a-3084-40fe-bb29-b3d34986a32c", "sighting_of_ref": "indicator--b22f410b-e772-4477-93d5-91b69cda45ec", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eed6c4e-8604-4eda-8272-000acf85a7d4", "sighting_of_ref": "indicator--b22f410b-e772-4477-93d5-91b69cda45ec", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f743067-0df4-4e36-afd5-ebed024a5f89", "sighting_of_ref": "indicator--c254257a-1080-47c7-b71e-8d3b870c1b0a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d63844-1aa1-4d27-bc62-d65e6b200598", "sighting_of_ref": "indicator--c254257a-1080-47c7-b71e-8d3b870c1b0a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f6f094-eec1-4456-8c01-6dead16109d7", "sighting_of_ref": "indicator--c254257a-1080-47c7-b71e-8d3b870c1b0a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414df842-bf5e-4c29-a4f7-8cd9369e1e7b", "sighting_of_ref": "indicator--4b1159d7-516f-440f-8866-1b57ec17e748", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96a1d44-ee65-407a-ba77-2a9b1e91ed21", "sighting_of_ref": "indicator--31907180-4d72-4945-9e0b-f1efae54f121", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca7a516-6619-4ead-921f-12d4bdb9f02a", "sighting_of_ref": "indicator--1a06db81-96ed-4509-a81e-c2439ae777df", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb47b3e-5e8c-4989-a77f-c5d4c88081a2", "sighting_of_ref": "indicator--659ad974-baa5-4670-9397-545209978e93", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845242e7-8f95-4589-bbb3-5df0e0ac1310", "sighting_of_ref": "indicator--659ad974-baa5-4670-9397-545209978e93", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d121d007-5a80-439f-a941-d69bb8ba7134", "sighting_of_ref": "indicator--a2f08cca-0891-456c-b8e8-507251ca3aa8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dbe530a-73f1-4f25-b6cb-fa2bfa73bac7", "sighting_of_ref": "indicator--fa41e30f-3cd8-42b1-aa30-f1ebd417df46", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b3516e-367e-46d8-954c-934cd2a7ba08", "sighting_of_ref": "indicator--fa41e30f-3cd8-42b1-aa30-f1ebd417df46", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd7f961-15c8-4b47-8f72-5fe6620e2bee", "sighting_of_ref": "indicator--6e8f8d94-b206-4885-bc08-20b024f3469d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c449e34-569a-473e-abc5-7bd26bbeb06b", "sighting_of_ref": "indicator--6e8f8d94-b206-4885-bc08-20b024f3469d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe28fa8-5742-4462-99dc-f3eaa0d6f559", "sighting_of_ref": "indicator--7bf78136-3a5a-4806-9d57-6d631420546f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aad9eb0-8fc6-4ffb-bf26-37852a1236fe", "sighting_of_ref": "indicator--7bf78136-3a5a-4806-9d57-6d631420546f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1a80fc-f389-4e0c-bb63-804fa037e701", "sighting_of_ref": "indicator--7bf78136-3a5a-4806-9d57-6d631420546f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac21e78-cd82-46bf-b54b-825d762e6f17", "sighting_of_ref": "indicator--92ec8756-5b04-4c44-a3f0-c33bff8e63e8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5a8bb2-e4fa-4e4a-a099-3cbfe0613f5d", "sighting_of_ref": "indicator--92ec8756-5b04-4c44-a3f0-c33bff8e63e8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aba3e3b-a8c8-4896-9a26-343df509a68d", "sighting_of_ref": "indicator--54e3a7f5-d993-4dcc-b368-03fd41488a76", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59caa2f-9002-4502-86d0-9613fb525660", "sighting_of_ref": "indicator--54e3a7f5-d993-4dcc-b368-03fd41488a76", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bad78f8-01d5-40f5-9f6d-38c94b27ac43", "sighting_of_ref": "indicator--abc7de49-74e2-40c5-af5f-6b6579be6943", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013e20fc-c80a-4a4c-acba-0d42cb6e4b86", "sighting_of_ref": "indicator--75bc0715-ae19-4ed4-920d-ceb5f02df4ee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e90d71-7488-40e5-b241-f90fb65d4903", "sighting_of_ref": "indicator--75bc0715-ae19-4ed4-920d-ceb5f02df4ee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f6826c-83f0-4c31-9686-bc79af760ac1", "sighting_of_ref": "indicator--b979edfe-f517-424e-ae09-79c2352313dd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedc45e2-8fba-4784-babe-78e0f2227846", "sighting_of_ref": "indicator--ced28a9b-406e-4168-91f9-51cb401c30e8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa6d7e6-26bf-44be-b67e-489f5ff4eecf", "sighting_of_ref": "indicator--ced28a9b-406e-4168-91f9-51cb401c30e8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451e9885-881c-4dae-9baf-44007c46a566", "sighting_of_ref": "indicator--74abe4ea-cbb1-41fd-9a6a-23819562bf5f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfe7bae-03ec-4022-9370-5cd32f54892a", "sighting_of_ref": "indicator--8e3a1e4e-f9d8-4b76-9a33-0478263d2ba3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9265acf7-f411-4f7a-98c2-c413634d5575", "sighting_of_ref": "indicator--8e3a1e4e-f9d8-4b76-9a33-0478263d2ba3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42db134-8714-4dc3-981f-223bcec567c6", "sighting_of_ref": "indicator--48453ffd-3193-46f7-bc2c-175a6f24aec2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c265db61-cf0d-49f7-a459-486ad20dbeef", "sighting_of_ref": "indicator--6bd591c1-14ba-4bc3-af07-18d4af33282a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--147f1808-3f61-4caf-b7a6-aea8750115b2", "sighting_of_ref": "indicator--6bd591c1-14ba-4bc3-af07-18d4af33282a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0103d6-697b-495e-b390-6e5829d6388d", "sighting_of_ref": "indicator--6bd591c1-14ba-4bc3-af07-18d4af33282a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb3e3ca-4124-43a0-8d01-b5827ecc9edb", "sighting_of_ref": "indicator--70f3de77-c0dd-4a33-9338-a153d5316667", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b0e2b4-21bc-4641-9d59-816b20a55708", "sighting_of_ref": "indicator--70f3de77-c0dd-4a33-9338-a153d5316667", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f53294-ffe2-4da5-ac3f-f73e53cb24ef", "sighting_of_ref": "indicator--70f3de77-c0dd-4a33-9338-a153d5316667", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc921a2-ba49-4da3-a5b1-4e186097ebf0", "sighting_of_ref": "indicator--623c010a-9e45-4a1c-8686-1ce41f701c51", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1abdc7f-bd15-4f72-b307-b8b8f81b9b7a", "sighting_of_ref": "indicator--60773fbc-87ed-4294-8f8e-ff4ca1b432ed", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59adacda-d2ad-44a3-8f73-bb6642b1dfa5", "sighting_of_ref": "indicator--65318ce5-4fd8-48e9-819f-1b9cc6f26fbe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acd3b0d-f5d2-4546-bd11-7e42540cace5", "sighting_of_ref": "indicator--65318ce5-4fd8-48e9-819f-1b9cc6f26fbe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90ceffa-b451-41f0-86bf-3a2ef6459a9f", "sighting_of_ref": "indicator--bf343046-9662-47f6-a140-e6c6716624d3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966cf674-ec7c-42d5-bcf4-01a69dc4c5cd", "sighting_of_ref": "indicator--bf343046-9662-47f6-a140-e6c6716624d3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184b5ee4-1129-44c6-80c2-2d1645946770", "sighting_of_ref": "indicator--3c53d74c-36d4-41cd-ab74-b249ac6e34bb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a284624a-2bfb-4073-a52e-214edbc10b3a", "sighting_of_ref": "indicator--3c53d74c-36d4-41cd-ab74-b249ac6e34bb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e09fac5-b7c6-45c7-aeb2-0b5bf8cc20cc", "sighting_of_ref": "indicator--50f4638a-02d3-4fae-8213-7c0ea9d75c84", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b7aa87-7f56-4c69-82dc-a571ab44bcdb", "sighting_of_ref": "indicator--2c251faf-fc7c-452b-94dd-78fe9f4edd7e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169963b3-8186-4d0c-a113-191bb859f09e", "sighting_of_ref": "indicator--7b45351b-b6f8-41fa-965f-cceef07ad9d6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eec8591-ec9c-446b-b6bd-7a510fcd54e4", "sighting_of_ref": "indicator--7b45351b-b6f8-41fa-965f-cceef07ad9d6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02eeeb1-427a-43ec-aa3f-e6869575ada5", "sighting_of_ref": "indicator--8c740b42-73bc-4b6e-b196-c1eb5c18e2e3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed88c6d5-8306-402a-a0f4-beaa22e4cb36", "sighting_of_ref": "indicator--8c740b42-73bc-4b6e-b196-c1eb5c18e2e3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a8f3e8-4dbd-4f53-95bb-dd99107d3952", "sighting_of_ref": "indicator--8c740b42-73bc-4b6e-b196-c1eb5c18e2e3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c49f1b0-c0b2-4fb5-9f7d-d5aa35cea10f", "sighting_of_ref": "indicator--67f5d091-4f16-4376-9788-80fa61a6af8a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dee3246-1dca-493c-a760-0dba09b70486", "sighting_of_ref": "indicator--ff308f9f-05a7-4409-8a0c-ff95a80da6c6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5210f7-4d53-4dd6-aaae-cc8d600edfd4", "sighting_of_ref": "indicator--57c45b40-a32c-4de3-9a68-6cd27af3ffb5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05216aea-6c6e-4067-80f6-bcb960ef428a", "sighting_of_ref": "indicator--7d88c6ef-8304-4a41-9731-dee123ec7164", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820dcfbd-a172-4c5c-9d39-3409d9a7ea3f", "sighting_of_ref": "indicator--3f4695e6-db95-417c-be93-ac14cd66227f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdad69bb-3f5b-44c6-8da8-2e03dc10356f", "sighting_of_ref": "indicator--3f4695e6-db95-417c-be93-ac14cd66227f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fdcfdf1-6ab9-4f5f-9508-1cf8ada84c8a", "sighting_of_ref": "indicator--2558ea2d-1476-4dcd-a1b9-9c87e5322be5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbea4b6f-10ec-476a-9e79-3aa30dcc21ef", "sighting_of_ref": "indicator--814b603e-9f34-4387-8178-8eeb0a957e94", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8d5dc2-140c-422f-8fda-0f510595ea32", "sighting_of_ref": "indicator--814b603e-9f34-4387-8178-8eeb0a957e94", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9302ccc3-a47e-40c1-8d3e-a6894b1eef54", "sighting_of_ref": "indicator--814b603e-9f34-4387-8178-8eeb0a957e94", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8c6ef8-1b3f-4ce1-b6b3-0ae252bfe5d4", "sighting_of_ref": "indicator--e1a828d8-da54-4088-9f6f-4382b0fd41e8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5983147-187b-4bdc-a3e3-aebde0be5ab6", "sighting_of_ref": "indicator--a164bd0c-5e0f-407b-b1b6-6ea8e1567656", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c60d597-0658-44b8-9389-112224a90385", "sighting_of_ref": "indicator--a164bd0c-5e0f-407b-b1b6-6ea8e1567656", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7da369c-e864-4178-a534-e7fce9a5a1a0", "sighting_of_ref": "indicator--a164bd0c-5e0f-407b-b1b6-6ea8e1567656", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d233b33c-2bd1-405e-aeac-bad069bd1adc", "sighting_of_ref": "indicator--e19517e5-aefd-4a58-83c0-b30de46e2df0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a466cb-9dfd-4bbb-bfe2-667ab0d7086e", "sighting_of_ref": "indicator--9c9bb7d9-d12b-40c3-ab9c-faa4b3b7ec31", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2695f5cd-8e5c-4372-884e-161011034431", "sighting_of_ref": "indicator--8fb5f33b-2800-47a1-a656-ca3bf2e73d1b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be10f20b-b18a-4a07-a96c-398c40eb923b", "sighting_of_ref": "indicator--d9fbb591-5554-48e6-9286-c862aa41888f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1259275e-1f44-4467-951a-ae7d509bb2b2", "sighting_of_ref": "indicator--1857b404-0489-468d-a153-934847713138", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d655e163-8d69-4b45-9faf-8165133b1b73", "sighting_of_ref": "indicator--935cc626-f528-4207-ab14-81e443142d74", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d162a600-efba-40a8-8ef8-b6b5013fd651", "sighting_of_ref": "indicator--ee69be46-16ff-4596-804d-64ca145edc42", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10bf15d9-3e64-4aef-8bcc-c5af19e1bb3c", "sighting_of_ref": "indicator--1e2c5368-5690-4aa6-a4fe-3479ec292434", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e60c43-efef-47c5-9757-5800063e39b9", "sighting_of_ref": "indicator--1e2c5368-5690-4aa6-a4fe-3479ec292434", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3485bc1-6c68-469a-ad2b-b5a499b63265", "sighting_of_ref": "indicator--1e2c5368-5690-4aa6-a4fe-3479ec292434", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fdaec39-e9be-4859-9648-2b24cd6b5d5c", "sighting_of_ref": "indicator--957d5014-634b-4db0-9630-52044ffd1e04", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958db619-c4da-4a11-b22b-b3de3b53cf9b", "sighting_of_ref": "indicator--f30c8eea-b9a4-4db7-bed5-fda30ffd0a13", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539bb03e-cc80-4a72-9f09-5a65ecfdad37", "sighting_of_ref": "indicator--f30c8eea-b9a4-4db7-bed5-fda30ffd0a13", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0e0118-5c63-47c5-a465-b978edb4cf4f", "sighting_of_ref": "indicator--9fa5af2a-805b-45f8-ad69-b196f383a910", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72edc0d5-a212-4e50-a905-8d9e2c1ec432", "sighting_of_ref": "indicator--4bad58fe-8858-4e42-8390-5dff8265b7f3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd8bb15-7885-4e58-b300-c746c0794704", "sighting_of_ref": "indicator--4bad58fe-8858-4e42-8390-5dff8265b7f3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c75a1b9-ca3f-45b1-b111-22d97f20e78c", "sighting_of_ref": "indicator--d5a525ff-30a6-4b53-821d-6f16dcd3acdc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318e4d13-275a-46a0-92dd-03fc29b0cd42", "sighting_of_ref": "indicator--d5a525ff-30a6-4b53-821d-6f16dcd3acdc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b50ce2-53c4-43cb-b26a-ccec699abf82", "sighting_of_ref": "indicator--03991148-f9b8-4ba8-981c-5028ee40bdff", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e51c58-4018-45b8-b8ce-dff983e6de57", "sighting_of_ref": "indicator--0475bd7f-6617-4419-ae57-2b523f056f11", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c2112f-1c33-429e-8792-6d18831213e2", "sighting_of_ref": "indicator--0475bd7f-6617-4419-ae57-2b523f056f11", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0aaccc7-faf9-4ca5-af1b-0846dfe63f53", "sighting_of_ref": "indicator--0475bd7f-6617-4419-ae57-2b523f056f11", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e797f869-6af6-41c0-a939-ade00c32fa2c", "sighting_of_ref": "indicator--11f72199-e3fb-43c7-9f1b-0e275652f017", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5814f8c8-da1c-4786-93ca-f1f2c4cd6524", "sighting_of_ref": "indicator--11f72199-e3fb-43c7-9f1b-0e275652f017", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e41a91-6766-4261-8275-1e21eba2b091", "sighting_of_ref": "indicator--11f72199-e3fb-43c7-9f1b-0e275652f017", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09998c5-8b61-460b-8f0c-3430cd51ea52", "sighting_of_ref": "indicator--3db7b4e5-4e88-43cd-8727-3661aabea560", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634a5d21-2041-4959-89a6-7015e3886786", "sighting_of_ref": "indicator--69320c99-2bae-4930-a53e-6058eccf3cff", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34af9e2-7da0-47f1-be24-84c38d327faf", "sighting_of_ref": "indicator--fc416f39-892d-4617-8996-94f64616c353", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2e86f5-81aa-43ec-99b5-066793047c98", "sighting_of_ref": "indicator--734e7e87-5195-4fcf-84c5-e0e3c44d51ad", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b62c404-5e69-4a97-a5eb-1c6faf6e1d1d", "sighting_of_ref": "indicator--734e7e87-5195-4fcf-84c5-e0e3c44d51ad", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98068dbf-86a7-4f49-b7ea-975e7361e7c0", "sighting_of_ref": "indicator--4147bb5d-0354-45ed-a064-5d0abd61c7a6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5946da61-8cd7-4507-aefd-41794b563bf2", "sighting_of_ref": "indicator--4147bb5d-0354-45ed-a064-5d0abd61c7a6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c03695e-6346-488a-bc6f-463166160948", "sighting_of_ref": "indicator--4147bb5d-0354-45ed-a064-5d0abd61c7a6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b2ad81-e7da-4358-b1b3-d78bfe199232", "sighting_of_ref": "indicator--2d455d16-42e1-4ba6-83de-fbc750b0a52f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b100a5c5-2f03-4cae-ab63-0d3583733d58", "sighting_of_ref": "indicator--2d455d16-42e1-4ba6-83de-fbc750b0a52f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c19715-5f35-4b5b-a085-ad73f3dbd16c", "sighting_of_ref": "indicator--2d455d16-42e1-4ba6-83de-fbc750b0a52f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239a184b-c4e6-4ecc-bd82-6e898c7ee095", "sighting_of_ref": "indicator--6c906a05-b60d-4fd1-83c4-bcff23aaf5a7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476efaec-fa13-4acb-a8ff-0e3f0b822915", "sighting_of_ref": "indicator--6c906a05-b60d-4fd1-83c4-bcff23aaf5a7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99bfd50-a0a4-49eb-918e-c64c6016042f", "sighting_of_ref": "indicator--2bef19e0-2c3e-461e-99ed-a63407b75068", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5384495f-393d-4e74-8ac0-dbeed4879664", "sighting_of_ref": "indicator--2bef19e0-2c3e-461e-99ed-a63407b75068", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0590d58-b6e7-4df2-adc7-beeaff27f958", "sighting_of_ref": "indicator--360c7855-acb2-4a50-8d28-ecb72a9d9f0f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38484d70-b9bb-49d3-900b-a76ba4155e2b", "sighting_of_ref": "indicator--360c7855-acb2-4a50-8d28-ecb72a9d9f0f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5877f72e-1d01-4ed4-bf36-d0214a6bcdcf", "sighting_of_ref": "indicator--90d6b61a-181d-45c2-b451-5c72ba001f60", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879b4202-9df3-42f1-b11e-5d4e91252825", "sighting_of_ref": "indicator--4d641eac-9539-4626-b20e-6ecf194bcd05", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0939b6-bb38-4193-b118-176bffb35828", "sighting_of_ref": "indicator--1896aa69-ff0c-497b-b8af-8cb09c82318b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabd02b7-8d4a-4ecc-a386-8e8c0229614c", "sighting_of_ref": "indicator--2a6b643c-d084-4088-8cf5-4d5170acae72", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3cf698-1e09-490c-9a59-fbbbb38845a2", "sighting_of_ref": "indicator--751bfc77-7147-41ae-95c6-486ff2df9a9a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f727b18-1414-477f-80e5-4c45428e27b8", "sighting_of_ref": "indicator--902b0ccc-c1b6-4b18-8a7c-2b1a85595134", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87153f00-7e55-482d-9c62-cb46fa6d063a", "sighting_of_ref": "indicator--fbe8cc80-240d-457d-9155-aea240cc5b4b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d252d1f-5fc3-40de-b09f-bc05a70af261", "sighting_of_ref": "indicator--e4084415-1e7b-47c1-9699-4c559d096f1f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9731d1be-5b64-428a-a7ad-9a0918776359", "sighting_of_ref": "indicator--d39b83c5-ba1c-4ec8-b2bf-ca70c3fde175", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96a9a06-ea98-4310-8ad8-0c7a45d9a1d2", "sighting_of_ref": "indicator--9274ab28-70e2-4d1a-acf8-2eae170377de", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fbaa81-376f-4431-b78b-93c05e5d73c8", "sighting_of_ref": "indicator--a2279892-f94c-4350-9e90-9a0b12d96f99", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bb731e-ea69-48aa-ab2b-4a63b98490e4", "sighting_of_ref": "indicator--8dfa5243-51e2-40bd-b230-4d548ee1da82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b93e406-4448-4ca1-81de-b59ac0bc7d12", "sighting_of_ref": "indicator--47d00a42-d879-47d5-9d35-db4e8adeba03", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0af0a2-a5e7-4aa7-94e7-52714c662d09", "sighting_of_ref": "indicator--25441971-06f1-448e-9171-052c9e482670", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d395da54-fed5-4347-8e87-b1e6595bf414", "sighting_of_ref": "indicator--edda9f4c-55fe-4225-b122-e312b9ea8b93", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241cf902-57d0-481c-a9cd-6164144d35ba", "sighting_of_ref": "indicator--1f3ae017-0e15-4dbc-9671-d3421b49b740", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eba73ec-89b5-4c0a-a297-04b715de9269", "sighting_of_ref": "indicator--f8c35ef2-d2df-4e46-a0bf-3d4c5339f924", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcc0dd9-c27f-4a1f-a725-f895cb587497", "sighting_of_ref": "indicator--fcc032f3-4f2b-454f-9643-5e4828c073a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c090a56-6642-4349-a94a-6c19ad225a60", "sighting_of_ref": "indicator--545ab5db-44ca-487d-b96b-ed9f639448aa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cba14f-99ed-403c-ae5f-dd4194cee45a", "sighting_of_ref": "indicator--36dcbde2-c9f0-46cb-af4a-5f613545641b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889c87ba-5d39-4477-8c6c-b5468e8127a5", "sighting_of_ref": "indicator--de3937a4-6e9b-47b3-91b2-37843ec770b8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ac6b97-2a77-44a6-a372-ef46be79b1cb", "sighting_of_ref": "indicator--75118d24-406a-44fd-8243-8680f2b3a3b1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d106bb0-3ed6-46ad-a853-e7b6f9feb1e9", "sighting_of_ref": "indicator--75118d24-406a-44fd-8243-8680f2b3a3b1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1cac124-3596-474c-9afd-17cf13f5ba90", "sighting_of_ref": "indicator--75118d24-406a-44fd-8243-8680f2b3a3b1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a82a82-1a8e-47d6-b958-745d80c3e050", "sighting_of_ref": "indicator--e1cf27cb-1495-4bc3-9789-4ffd325e541f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111e38cb-7093-4af6-b96b-76f027f07b03", "sighting_of_ref": "indicator--e1cf27cb-1495-4bc3-9789-4ffd325e541f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc1d37a-6b6c-4115-a586-d08737266a33", "sighting_of_ref": "indicator--ecb4dba8-5eb0-47cf-adac-da8d99825361", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a09e9a5-bff6-4274-9e20-37e576444d37", "sighting_of_ref": "indicator--5ee1ad08-126d-4fb9-adcd-1bae70e2a332", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8bc94a6-baba-48a6-ab8c-8276d2df529b", "sighting_of_ref": "indicator--5ee1ad08-126d-4fb9-adcd-1bae70e2a332", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd44792c-07df-44e6-a5b4-4ae677d69d39", "sighting_of_ref": "indicator--5a8d9252-0942-4d8e-85bb-5441528183aa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b59a5e-6917-4776-abce-0981f40cb500", "sighting_of_ref": "indicator--e4ddba79-7591-4652-b2cf-ace52ba17ccc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd441de0-b163-4554-b7e4-bcb3ac420a4a", "sighting_of_ref": "indicator--e4ddba79-7591-4652-b2cf-ace52ba17ccc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfe8eee-4b69-4e40-ad48-92c9a6d308e5", "sighting_of_ref": "indicator--958cd815-f6c9-4e3b-84f7-b3ba9eb1529f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42370c2e-0e93-439a-8eb5-a93eab8893fd", "sighting_of_ref": "indicator--8a874044-500c-4b47-a37e-a73466b72256", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e223750b-cde3-4a28-a3ce-f9643689552b", "sighting_of_ref": "indicator--a8117ce4-ad7f-4f1d-b698-ac63ac31e2dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b258b1a4-6a21-48f9-9cee-6333a241877d", "sighting_of_ref": "indicator--c25763a2-fdad-47b6-8b08-ed814e3d674a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfec9e0-0201-4081-bfe6-acad8949b89b", "sighting_of_ref": "indicator--72b47bbd-a7d3-4438-bf55-3e86d3db9c21", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50ea365-fb2b-4d25-bc70-6dd802314285", "sighting_of_ref": "indicator--5e3a7219-fdf4-410e-b093-19accce3ef80", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfa60fc-ae0d-4726-aa0a-d067b7991b63", "sighting_of_ref": "indicator--84840c7d-bd32-4615-a13d-88fe9894a906", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e7aa0e-1897-4ed9-98dc-c2f958e76f0b", "sighting_of_ref": "indicator--6693bfd2-1b3b-4402-a555-57e4a5a726bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41399b46-278d-4a75-aa7a-49c60980f61d", "sighting_of_ref": "indicator--e0f38c35-ca4e-4ddb-950a-66d4172c77d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea2de56-de8a-448d-a822-d80094fa8029", "sighting_of_ref": "indicator--4f0f127b-5165-4bd5-aa39-9c37e40e1607", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462d6a5c-583e-4098-9661-f84a4fcd1d34", "sighting_of_ref": "indicator--4f0f127b-5165-4bd5-aa39-9c37e40e1607", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e29d86-6de9-4902-a1b1-7a0da50e8d27", "sighting_of_ref": "indicator--4f0f127b-5165-4bd5-aa39-9c37e40e1607", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542de6b1-53c7-4689-b8f6-003638fc1762", "sighting_of_ref": "indicator--dee5a664-a85c-4e04-b66b-20b30b010859", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc5dff0-d7ed-497a-935d-fd22a2f99cbe", "sighting_of_ref": "indicator--b945464a-5a7a-43a4-ba5e-760fe5f502d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44eb3695-363e-4f1a-a76e-16aa7fd354ac", "sighting_of_ref": "indicator--4afb26d8-e021-4d7e-b869-6379f2d4a1b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51733072-894b-4ad8-818e-0031b8686c6e", "sighting_of_ref": "indicator--d936bf3a-ce0b-421c-b646-3637c062db18", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67de30e-bfbf-483a-9475-b33725c5a013", "sighting_of_ref": "indicator--27d48fe6-9904-4405-a7e1-5b79ea9aca2f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fda49d4-477c-4e67-b398-dc8728667dd9", "sighting_of_ref": "indicator--a9c41d68-0c30-4c46-93e8-470fa9f1150c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da5bea1-e1ee-4603-8466-f5f2af4323ef", "sighting_of_ref": "indicator--6dfc12f0-df33-4bee-80e9-18f1c22c8060", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a1ec37-cab3-46a7-928e-4bd434a054df", "sighting_of_ref": "indicator--346c81f1-0f54-45b1-b7c1-b455e4a5083c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aade9f2a-1548-4956-a410-93d3167cc0af", "sighting_of_ref": "indicator--7313466e-c43a-4148-b4c4-c395d82ec038", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e781ed9c-b07f-4962-a486-9497a2f91ba0", "sighting_of_ref": "indicator--0433bc7d-3528-4d08-8a90-a00a32814a6d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e864a879-06a0-4365-8c69-e7ae35276501", "sighting_of_ref": "indicator--4eac8591-0d41-40b8-a6bc-f6ed6b26f255", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84582daa-4c5f-431a-8085-4c8c26b50fc8", "sighting_of_ref": "indicator--4eac8591-0d41-40b8-a6bc-f6ed6b26f255", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9932d080-0ef7-4243-9285-b2e2cd53dfcf", "sighting_of_ref": "indicator--4eac8591-0d41-40b8-a6bc-f6ed6b26f255", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794260fd-3c12-42d7-8472-f1a4fb69b400", "sighting_of_ref": "indicator--3e766b24-a8e8-42d4-b0ee-8639180ecc7b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b783c5-bca6-4ec7-93cc-838e25a9c695", "sighting_of_ref": "indicator--0cdc542a-b8f1-432d-83ea-78c70dcf34e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddece0e5-a5de-4166-9b3e-8e400ad2cf95", "sighting_of_ref": "indicator--2828a1d0-eea6-4b62-9bd5-0e3e83846f3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf0fe25-df45-4738-93ce-5e286dc6862f", "sighting_of_ref": "indicator--866919de-ea30-4d42-9992-82192e1a3134", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2e70fa-26bd-4d1b-a86c-573a9e209806", "sighting_of_ref": "indicator--88745e0a-c63f-46eb-8525-53748e91bcde", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2976058-1456-4d26-9082-119b89ed7227", "sighting_of_ref": "indicator--be9a6bba-17be-4fee-8ca6-e343730a8a90", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a65d804-613c-40e1-b14d-9656ba22e486", "sighting_of_ref": "indicator--ed4069e3-55a8-48df-b512-556f6378da89", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e65f8e-9116-4428-b738-b6f4a8b6b4ae", "sighting_of_ref": "indicator--680b5c23-e37a-4056-a343-87196c92115e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be96b5bc-32d4-4ebc-b8f6-1b357a7f2466", "sighting_of_ref": "indicator--60c19687-cf0a-4cb3-807c-245f7189cbac", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e579c565-e9e8-4887-9011-7d3b8e67e0a0", "sighting_of_ref": "indicator--60c19687-cf0a-4cb3-807c-245f7189cbac", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeabf447-7c8e-46e4-ae4b-391647042fff", "sighting_of_ref": "indicator--4b70d224-92cd-4187-8ff1-87eafe2bfd2b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e68e8ff-636c-4236-bec5-c6d9faf818b9", "sighting_of_ref": "indicator--d558c41e-52a3-4be8-8e15-1bd2ba0354f4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3002cf34-4c63-4815-856e-b79d8fe2198e", "sighting_of_ref": "indicator--d558c41e-52a3-4be8-8e15-1bd2ba0354f4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2322bf25-6495-496a-a659-a3eb43707e49", "sighting_of_ref": "indicator--adf550d8-c580-4ce8-b6ad-cbd0a04b448d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385f0d47-efed-4f15-8078-01117326db0d", "sighting_of_ref": "indicator--adf550d8-c580-4ce8-b6ad-cbd0a04b448d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff59b08a-9ac1-4abb-8ab0-1f3ba330f6e8", "sighting_of_ref": "indicator--71e60825-0fc6-4522-a25f-230ef3e7755f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5fff13e-5356-4206-8e5d-a661ffc7226e", "sighting_of_ref": "indicator--0c33c4ff-f4a0-44fc-b6fb-fb550967afd7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52906935-c38d-4d26-b52a-95a0a782cc3f", "sighting_of_ref": "indicator--cefcd620-ca02-4716-ba01-7cca3d418800", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75240479-09f3-4477-8e87-57aab27348a3", "sighting_of_ref": "indicator--248a88c6-5707-4d5e-8227-7e9b38b8f14a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa53b73-9031-46c3-9ca5-a08276f39646", "sighting_of_ref": "indicator--1cf18d1d-f49b-4518-b9f6-631071250efe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f638fb-a7fc-4cdd-a93f-8bb496166866", "sighting_of_ref": "indicator--0c9ff5eb-657e-4788-8394-388d731dbe2c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb6a48a-5c06-4dad-908c-2e5a31a17ead", "sighting_of_ref": "indicator--b9bb1ffb-819c-4e6c-b71e-72dc6ec481f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99bbdb1-cb4f-49e5-8beb-de533be3b1ca", "sighting_of_ref": "indicator--20f9c647-acf9-44d1-afc9-157a992e7dbf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac0a5e0-9419-4a28-94ca-02b58785e3a9", "sighting_of_ref": "indicator--5de1f835-094b-4061-b680-113c03b1ba75", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18aa3849-cd68-4612-a648-27e3e9a14f7f", "sighting_of_ref": "indicator--973eaa86-2212-4258-baa2-168ccf65fbae", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181614f4-35ce-42d4-92e8-339f02ae22a0", "sighting_of_ref": "indicator--e347fd8b-7352-4cc5-9849-544da465d019", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514a50db-fe31-40a1-9038-8a2535cadd68", "sighting_of_ref": "indicator--6c6d01f6-3242-4750-83db-58e22e591401", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c190f134-d810-42ce-8bcb-caae3ae669e4", "sighting_of_ref": "indicator--3ec8a4d5-8460-4152-9e95-c4ed5682953e", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba00a21e-aa1c-478d-a3ce-bf202ce5a001", "sighting_of_ref": "indicator--bc1072b8-31eb-4150-91ed-10b9764b4a67", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c42bfe-80b8-4242-a03d-9b68992beb69", "sighting_of_ref": "indicator--bc1072b8-31eb-4150-91ed-10b9764b4a67", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59bf88cd-e4cf-4ae0-adcc-a27b55d57e64", "sighting_of_ref": "indicator--d57b7100-bc96-44a8-a27d-b4806706c969", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213060c5-b369-4221-84e5-732f40ca3331", "sighting_of_ref": "indicator--47891171-f2af-42cc-9558-c02512671066", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265059f2-e8c2-4dbd-8ccb-2a7d3f9a8941", "sighting_of_ref": "indicator--fc804396-f8eb-4334-afd1-e0bef69ebcbe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012b849f-8d3a-4834-b723-bed0a2e371ae", "sighting_of_ref": "indicator--b32d8c32-369a-4ca9-b9ce-5ca1dbd5a472", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba25cf8-79f1-4251-b331-b60a6bc971d9", "sighting_of_ref": "indicator--d0f5dd34-1a13-41ee-a2e7-1604268efb13", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79059d8-057f-4e70-8278-8ae45dcac2ce", "sighting_of_ref": "indicator--8506f17f-4645-4d0e-bb43-c77c8206a5fb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d555d878-49fe-432e-843e-2ec6a888222a", "sighting_of_ref": "indicator--2c942190-4a3d-4570-8b8f-caa8ddd2664e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6d0705-d855-429f-8295-c4f0d30d1979", "sighting_of_ref": "indicator--87ca6e0b-42b0-49f1-86d9-e15c7d98b3c7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77ab1c6-efe7-4b6a-82d8-e8eae8e5b237", "sighting_of_ref": "indicator--6f377582-10ae-4f42-b444-5a8bc02c0013", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62cb180b-9f41-4f7e-a496-f8f6027f2d3e", "sighting_of_ref": "indicator--3e1cd944-c8c4-48aa-af51-65f6ea26e6d9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ff50ec-ea06-43e8-81d5-357619a28405", "sighting_of_ref": "indicator--45ace3c6-a17b-4f5c-a742-29026fd2185d", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774dd10f-614b-4145-a0b4-e0695860a060", "sighting_of_ref": "indicator--8a1d7f6c-09b1-499f-a834-03555cacc6bf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22aa215d-82f9-498d-80a7-40e5f4a0b63a", "sighting_of_ref": "indicator--4f690ee9-dc7d-4627-b356-69651d1f23e1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf36a1e3-a5b1-4a7d-8727-bc8c7d1cb8e7", "sighting_of_ref": "indicator--57a226ed-4e81-42de-bbd0-029a49f4ce2d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b75500d-91ed-4599-af21-2b37cc1722da", "sighting_of_ref": "indicator--3f3246aa-e4b1-47a5-9929-db669e82a4ee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16f342e-20b0-434e-a477-0dc48c0923ba", "sighting_of_ref": "indicator--a6afd0a9-18e6-430a-b321-7317e55d7e07", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccb150d-5108-4b42-a653-9aaaba84dd1e", "sighting_of_ref": "indicator--e971276b-3b4d-4792-b438-c05d4735f9e1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58216073-bb19-4a57-8c98-0f8b0bf536df", "sighting_of_ref": "indicator--6be6833c-bd23-4e5c-bcd7-ca6e3590338e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9015de68-adfd-44b8-858f-b661e724da4b", "sighting_of_ref": "indicator--44f6f4e6-68b3-4479-a3b7-052cb424f454", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e121fe-e32d-47cc-98b7-462e55fa70db", "sighting_of_ref": "indicator--63447e6a-8726-4653-ba5e-803ff80bf658", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276e97d4-b2fe-4b55-8868-399bfdeffd7d", "sighting_of_ref": "indicator--63447e6a-8726-4653-ba5e-803ff80bf658", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0b6c4d-893c-479a-bfba-ec57a88166e2", "sighting_of_ref": "indicator--cde0432f-cad7-4978-8e49-1abeb041d832", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4776937c-7e2f-4e59-9044-7211a60726a5", "sighting_of_ref": "indicator--14679b22-02ee-4e99-ac0c-79cdf89077a8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df830685-8053-4d85-9b5e-5940f0fc3ed5", "sighting_of_ref": "indicator--9ef1a21f-14a3-4dd2-a5c6-da5b52ef4b55", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b80b40f-2a51-4a88-b095-48966c2222d7", "sighting_of_ref": "indicator--9ef1a21f-14a3-4dd2-a5c6-da5b52ef4b55", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca5fb8b-49d3-41ca-acad-c2a72e872baa", "sighting_of_ref": "indicator--bededbee-8adb-44f8-9181-696587741c5b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757d934f-8e33-471f-b5ba-718c90284ba0", "sighting_of_ref": "indicator--4008ad7f-0efd-49fb-85df-ad5a4b321db3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa99ecd5-ceb1-4f6b-848d-24e81126d10e", "sighting_of_ref": "indicator--d45b42f8-e109-4568-a969-105c850484ee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9b1aaa-c008-4421-b08d-8af0359cafe2", "sighting_of_ref": "indicator--0614aaa3-dc41-48bd-b655-9ba22a8969be", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194ebdf4-c24f-41fa-8597-593dcab59672", "sighting_of_ref": "indicator--0614aaa3-dc41-48bd-b655-9ba22a8969be", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd1c727-c809-4973-bfde-2118898d8399", "sighting_of_ref": "indicator--5e9a87f5-13a0-4399-88a3-d4fe3aba1c72", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd22fe71-a758-4212-a2e7-676bb90683a1", "sighting_of_ref": "indicator--166da3cc-0b4b-4baf-a13a-0020d5621568", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecdb683f-c215-40f9-a91c-464a52aa6784", "sighting_of_ref": "indicator--a652ff2e-bb33-4d15-bdec-48614a17f863", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf77c2f-8e3b-437b-a21a-4cdfcc928c50", "sighting_of_ref": "indicator--97a5acf9-dda9-43fb-8800-7ca2b9166ad2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82be286-ab99-4562-ac13-b3ddcb00fa19", "sighting_of_ref": "indicator--97a5acf9-dda9-43fb-8800-7ca2b9166ad2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0532060-3497-4641-a5ef-7046698796c7", "sighting_of_ref": "indicator--6fd9742d-b1a2-4582-97f0-cb513870c2e1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a3c681-59bd-445d-aaf3-a5214f549712", "sighting_of_ref": "indicator--5fa38f70-3ce7-4832-8191-61bfc3c498ed", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05cd2eaf-deb6-4b00-831e-7da89901478e", "sighting_of_ref": "indicator--0611291f-d28f-421c-8df5-2c6832c52123", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5c8ec8-bf9b-46c3-baf3-6cfc0f1a5443", "sighting_of_ref": "indicator--d72079db-6ee2-4e1a-908a-d845f3cde612", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5d3be8-7430-455e-8588-96ebbfae266c", "sighting_of_ref": "indicator--008e1672-c39a-49e5-969d-89ca3e7b45a5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06687403-5991-4edb-91bf-d68253bf56c7", "sighting_of_ref": "indicator--008e1672-c39a-49e5-969d-89ca3e7b45a5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d729f2b2-d84c-4126-8016-ef570961bdd0", "sighting_of_ref": "indicator--19ba7dcc-5cec-4fbc-8508-d84b21569736", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384f23fb-e3b4-483e-b1d5-c5637472315e", "sighting_of_ref": "indicator--8c8055d3-378c-41fa-bc32-39092b15663a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0987f0-f817-4963-9146-4f92e0a6b5a3", "sighting_of_ref": "indicator--1ac78507-4cad-48cf-9c26-fab47094c5d1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d221d8db-022f-4811-b0b7-92a72b49c2c9", "sighting_of_ref": "indicator--f9825a16-bb68-4994-9319-9fa50ada8ce6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f1b38a-9b0d-42c6-bb5d-c56f8b369807", "sighting_of_ref": "indicator--67f345c1-fe33-4718-8cf8-84c58d9090a2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ed99f7-f61f-41b7-b652-96d1afd26e11", "sighting_of_ref": "indicator--666f6f4a-54b2-45c1-9073-9688c8d316df", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527ddb74-2bd2-412b-af55-4181bccac23c", "sighting_of_ref": "indicator--f7d6862e-6d81-4516-b40e-574a084cd5ac", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d56a2a3-fd9a-49e9-9486-97af445c0e8c", "sighting_of_ref": "indicator--ced0b29d-ac2f-4d60-b035-009360af0b56", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab2b9f7-d2e8-4f09-b572-ba66dbbacc64", "sighting_of_ref": "indicator--a7e242d1-92b0-4da0-81c6-5580c3a361af", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c2400e-1245-49a0-b9cc-48a0dd850f8a", "sighting_of_ref": "indicator--0bdc6d0e-69e8-4b5e-a575-949ae4aa69e6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f332be-413b-449a-9bf2-380da8d2b1a2", "sighting_of_ref": "indicator--2ea7a60b-a329-4436-bc86-aff59fad993b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa4fe5b-2183-4d70-88be-bdf818a9fe12", "sighting_of_ref": "indicator--92518217-2418-4fea-a0c9-eb41200349a2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63a76fc-ea4b-4ebd-be36-86a8d76b69b6", "sighting_of_ref": "indicator--316b9c77-3086-4ef7-8a51-207b910aef02", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8bbfbb-ebd8-4cf1-aca8-5f9197c7536c", "sighting_of_ref": "indicator--419aa38d-9746-4713-86e9-28d27220b0f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61df2c4-a156-44c9-a46b-30fab6701fec", "sighting_of_ref": "indicator--6feaa9d7-0233-49f7-b29d-e7cf7b47047e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e34ec93-ea37-44a8-a9b3-fd984e41d647", "sighting_of_ref": "indicator--f500af47-9cde-407e-9a6c-74cdad731cc7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5785b1a3-a656-47d7-9563-7914975269b5", "sighting_of_ref": "indicator--a152cca7-2f55-42a9-ad18-c7536c2f6dbe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ec8b6e-74db-47e7-b36d-faf83763707a", "sighting_of_ref": "indicator--e7b75c56-0f35-4798-9bfe-933cb9236311", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2a6133-3e4c-43a4-850f-567c6e40cd06", "sighting_of_ref": "indicator--5ed46633-b630-439d-8439-b34d9bb72113", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b843a13d-000f-4d7e-9609-78f450f6cf01", "sighting_of_ref": "indicator--3ef599fa-7e55-490d-beaf-d69386749ff9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55637080-a1a5-4347-a73e-32d1b1d5cbb0", "sighting_of_ref": "indicator--b271579c-ed56-4343-bbac-42d791bc95a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35872303-c2b9-49ba-adac-24c11d2dd145", "sighting_of_ref": "indicator--36afb8cf-125b-4715-945d-de83e6e94566", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07aa0e6e-a53b-4fb4-a327-e8cc57ed5549", "sighting_of_ref": "indicator--a9b81027-4928-426d-9c67-e5fce9b2298b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60905732-7897-4545-b1ab-1308ab24f9f2", "sighting_of_ref": "indicator--4b4cb797-9c9f-4b77-9090-9f7469c38fd6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00ddc74-d037-4a3f-aa95-a37d6dec1057", "sighting_of_ref": "indicator--2385a682-9a68-4ee1-bfba-644e206496a1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b5e01f-013d-4ba8-b2ea-991d3d041fc3", "sighting_of_ref": "indicator--e7cb87fb-3ba4-47d9-862b-abc22f547b0b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e40357-f86c-4c0a-81b7-022c1bc8d7aa", "sighting_of_ref": "indicator--755e0a1c-8529-45f2-b08e-ae3578312b5b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5d594d-c4ae-4865-a1cf-b41dd68c15ff", "sighting_of_ref": "indicator--755e0a1c-8529-45f2-b08e-ae3578312b5b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c925cddd-a9b2-4d3a-8a66-f984c425c1d9", "sighting_of_ref": "indicator--3c1ce025-3a61-4e9b-8a53-b138f239376d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6067361a-eba5-446e-bcf5-288bb5f093de", "sighting_of_ref": "indicator--84d4c0fa-3b1d-4e75-81b2-077254b459e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1934813e-6a0b-40cb-8409-2a34d78c2de9", "sighting_of_ref": "indicator--78809d16-5e9b-4247-8bcc-49a336ca3931", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6801b416-842d-4f75-8dd2-26fd8ae71743", "sighting_of_ref": "indicator--1da11e11-5bb2-4d7c-802f-30eb03691052", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ebb95fa-0bf9-4cb1-88f4-f403e419c2d9", "sighting_of_ref": "indicator--34b9dcfe-2054-4bea-8d0b-1081c07a2880", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bebae4e-eda6-4514-b62a-09485447f2a6", "sighting_of_ref": "indicator--34b9dcfe-2054-4bea-8d0b-1081c07a2880", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcadcf24-7413-4d65-a6ca-93cccc4cc6e9", "sighting_of_ref": "indicator--34b9dcfe-2054-4bea-8d0b-1081c07a2880", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ade7c7-e23a-404f-9c38-1ecdce052dcd", "sighting_of_ref": "indicator--a151a16b-0e19-412f-aa59-b223c89b1bee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20a6506-317e-46a1-be20-dce9b4a137e8", "sighting_of_ref": "indicator--df71cab6-daf1-4016-a9c6-1ed15ce1a7ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4960c1e1-ebe2-4c52-b9ed-08bf6a651c93", "sighting_of_ref": "indicator--cf40f7c5-72ff-43c6-817b-a9abb9f8c9b4", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148706ef-78dc-4c15-aa16-f608fa24c191", "sighting_of_ref": "indicator--31620303-ebd6-42ed-a180-e14d70ced96f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8435ae58-060f-4700-a6c2-91d789384c5e", "sighting_of_ref": "indicator--8013f188-d4fe-4ae8-8525-63f0dad01d30", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b01d509-cdd8-4619-bcc7-c270d203bcf9", "sighting_of_ref": "indicator--55c4ffe9-8a14-4bbb-8862-623f066337f4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395a6205-c150-4912-9485-54de28f6bec4", "sighting_of_ref": "indicator--1f0f6c94-4aab-4dbb-9277-740d592d6ed4", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584aa1d1-9bb3-42e2-87a9-71d1160ccc8b", "sighting_of_ref": "indicator--87371b8c-fb5c-4eb0-ae27-177837a2d0b0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82a7a9d-c854-440f-b5a4-342e7bdc951b", "sighting_of_ref": "indicator--54db7a9e-f39e-469e-b666-7ab1cf174203", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f8c064-08fb-43d8-915a-d3b1a1098a63", "sighting_of_ref": "indicator--54db7a9e-f39e-469e-b666-7ab1cf174203", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab0b757-5b90-40bb-ab96-bf7650731166", "sighting_of_ref": "indicator--88df9962-8ff0-4910-8b07-67fd0ee7b22a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad5ee8d-258a-4f6c-8e35-75155e422d29", "sighting_of_ref": "indicator--61f04a9d-c7b0-4b7e-87f0-e9c69bd3a361", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3461b5-dfcc-487d-b358-8d53f32772e9", "sighting_of_ref": "indicator--98b73082-0978-464d-9cba-735a045993b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0830ded-bdcc-4b08-8fc3-f7fa8348b26a", "sighting_of_ref": "indicator--238030fd-fc28-4299-8a20-76151c698b33", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc15174-35a1-488d-acf5-32100ed10cd4", "sighting_of_ref": "indicator--f0b04be0-c16a-4e3d-8b10-99f9fce59f3b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309d2139-ff3e-4e44-a3b4-44cf7fc82e6b", "sighting_of_ref": "indicator--72fbef29-3eff-476b-98fe-95dd40b0b183", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2570dc-9362-43d0-9b7e-d110d74ab528", "sighting_of_ref": "indicator--dc16e006-5cd9-4c40-8ebd-92468efd1c64", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e0d28b-7059-4ecc-aba1-4e0b5b92de5d", "sighting_of_ref": "indicator--80ef4914-ef53-4d0d-bbea-b6d0be8c7a43", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b23496-f763-49e1-bb4b-497e6fbab252", "sighting_of_ref": "indicator--0c1700b4-4926-4654-9ecc-1c4387265f8e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b368bac6-fb94-4d5f-a560-6de30fa1c197", "sighting_of_ref": "indicator--d957bfa0-c963-4a1a-9380-95e8ba37b93e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7df393f-242b-4ca7-891a-52b97dcd8699", "sighting_of_ref": "indicator--ab53b2c9-8973-4c1e-a683-da47f6df774d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b486923d-2809-4db7-a535-9545780ba06b", "sighting_of_ref": "indicator--e060e7b6-7a16-4281-b7d7-83fed68861d6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb00003-74a3-4b26-b6c9-81d060168241", "sighting_of_ref": "indicator--18f43b79-19f9-4201-b9c3-c6df8b458b4b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006653cc-531b-4753-b700-aac12c9d0264", "sighting_of_ref": "indicator--e64c57e2-dd0a-44ed-bef6-7cb647ae20d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b715fa98-e7cc-4225-a1b9-d60885285c24", "sighting_of_ref": "indicator--2072b7d4-e721-417d-b860-0d48779defe1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d93126c-38af-47fc-93bd-28e4efc07b0e", "sighting_of_ref": "indicator--d8f0294a-5cc9-4b2d-beb0-9bc0e6edaf1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ac0cf3-8701-48d1-94f0-618d78f9aaa1", "sighting_of_ref": "indicator--7f335909-af5b-49f0-98ba-a0b329456675", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5388aef-a683-4d7c-9bd3-71baf8f4a31a", "sighting_of_ref": "indicator--da893870-0fbe-41d6-847c-127b428a311c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4174991b-fd8b-43ad-aa54-98f3ec77465b", "sighting_of_ref": "indicator--ebd1e80c-fa34-4ecb-81ac-d0da2d26f62a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aba3ebb-81ec-4a1c-a35c-6f24ad363f45", "sighting_of_ref": "indicator--15e2b37f-01e0-4e48-9f8a-110d546c4c41", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2caaebb0-a746-4a82-ad1e-581c82748393", "sighting_of_ref": "indicator--c3679537-d1fa-4d3d-984d-e2a26fd928ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd894a9c-bb84-483c-a013-7238024a4450", "sighting_of_ref": "indicator--24b78810-1298-4401-9b4d-0a13b47da28f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446a7b0d-5208-4bcd-8c73-fe5daaa8f58a", "sighting_of_ref": "indicator--57ac50d7-f299-4376-950d-86d657ef6c17", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6bbf00-227a-482a-9244-a63786d13ef9", "sighting_of_ref": "indicator--0e9d482c-fe15-4aad-9fa5-9432800cb17c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3487f1-6994-4b4a-aec6-1cc92ab6a8fb", "sighting_of_ref": "indicator--bb569262-56cb-4aa9-98ca-a80fc2447297", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412b30e9-c185-4875-91b7-4ca4521f6ae2", "sighting_of_ref": "indicator--310dd68f-16bd-486f-9d8b-3c27d786382c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58187d96-8178-46d0-a330-8a74d01612a7", "sighting_of_ref": "indicator--bed69723-30ff-47f1-b1ae-abdec652b810", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee8f889-fbc9-4b60-bfb4-7d87807be74e", "sighting_of_ref": "indicator--ede8e0d7-7214-4a65-9ec3-9b0ad7bd1526", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939e3404-768a-4c42-919c-10351f01648b", "sighting_of_ref": "indicator--1b8f365f-809d-4f46-924a-b703265bc335", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989340e8-3c6e-42cf-b5ca-a39f934e232c", "sighting_of_ref": "indicator--d0628158-2d90-41c3-af06-16aa22e9c0db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48216c8-5aaa-44d4-8438-aecf68bc868a", "sighting_of_ref": "indicator--7d76fc27-8942-4c2d-a225-dc12916cf9a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfe2861-18b3-4d6a-951e-712ca10451a2", "sighting_of_ref": "indicator--cfd7fc1b-b104-4e3a-bbee-fe83f8fb946d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d818b8cc-b4c5-4af7-8cc0-5951d7365360", "sighting_of_ref": "indicator--19b1b985-a69f-4065-a2cb-842526e7fc77", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b8302f-b722-48ad-a11a-44f13a2ba82b", "sighting_of_ref": "indicator--27db239a-1630-49bf-91b3-effced5ec221", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316acef0-f8fa-4692-93d0-2d7895ede69d", "sighting_of_ref": "indicator--4e38e368-1b05-4816-80b7-d11aad09ca52", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21db4714-e385-4f0f-8ffa-c3cb261d52c3", "sighting_of_ref": "indicator--db86febd-29fa-4400-bf53-a5a3d3ec60b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2727a875-3c48-42bd-bda2-39fa92cfe66b", "sighting_of_ref": "indicator--a75addcb-befc-4166-a1d2-932328318182", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e77cad-d328-4271-86b2-f44d9dad8bc3", "sighting_of_ref": "indicator--49c4d74b-e6d5-40e7-b175-2726e9c4780d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c1bd69-59e2-42bc-968c-2791aa923e25", "sighting_of_ref": "indicator--953fe88e-a3c8-4aa8-a5ba-72829cf646b5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e6fec7-432e-419d-88ed-733bd77c8727", "sighting_of_ref": "indicator--e927c2e1-c0e0-4d95-8ea4-1e2c0d98c3c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb7ff95-617a-498d-9c61-8fa1fbcf741c", "sighting_of_ref": "indicator--7485015d-5e84-45fc-b1a5-d9a49313da25", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48cb9261-665c-40b6-875d-f416d9476319", "sighting_of_ref": "indicator--a15c7fe7-7508-49c9-8431-0bffe3ff8ff9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f91302-8c96-44f9-9061-5b8e9d2a3682", "sighting_of_ref": "indicator--0c2da826-4d1a-4128-abe4-2dcd13258c7b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c8bf3f-c596-445a-8915-09985008ac60", "sighting_of_ref": "indicator--122d40fc-ab0b-40c1-b7d5-8a3aebb01684", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31341a50-e267-4e5c-8167-d84a2a7ec200", "sighting_of_ref": "indicator--961bb070-1c56-48aa-98c3-b613bf0fd740", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1155430a-b694-406e-8f39-5ebfca15b087", "sighting_of_ref": "indicator--bf684240-4f32-43ca-b0e1-d7825a8276b0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce269769-148b-4fc1-b556-2219e271884e", "sighting_of_ref": "indicator--25432dac-9d2e-40d4-983b-7a75a20c255b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fbc1d0-0085-40e0-a3c8-4062afc5d414", "sighting_of_ref": "indicator--44151539-a65f-41d2-8a36-47038cc6c805", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45569e1-d467-4ba6-aeb9-384cb43967f6", "sighting_of_ref": "indicator--1b4ae49f-3d9c-4276-989f-ae3dc99948bc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68ebf9c-3271-4d94-852c-32f006c939b8", "sighting_of_ref": "indicator--44889f26-d9dd-492d-8bbd-bdc4d9e9b89d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d29944-2f20-4396-be07-c6966856bde8", "sighting_of_ref": "indicator--b34365e9-902f-4994-a054-d44f3d863bde", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d631d49-ff13-43ea-99f6-8503f68463cb", "sighting_of_ref": "indicator--0558fe3f-2382-424f-b07b-da321bce0a7d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc19a00-143a-4c64-a1a7-09d97e1be0f5", "sighting_of_ref": "indicator--ee690ed2-49c7-4e39-8dc8-2648f99c54d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a197c86b-cf11-4ac5-87d6-7e82749a8bc7", "sighting_of_ref": "indicator--0e9cdcb2-b9aa-45e3-9a12-dfa16ae2640b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98406bd3-04bb-46ec-b9eb-e46471064c12", "sighting_of_ref": "indicator--4aecd8e6-eb3b-4b30-ad1d-53d8fc933ece", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62920d9-8763-4996-998e-14ed14170b5d", "sighting_of_ref": "indicator--f060106e-dc59-4639-8139-c7b7714cf6c7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4bcb91-981a-469d-9228-410e2086fd9c", "sighting_of_ref": "indicator--c80c426a-6dae-4eb6-8f81-11a4494b03ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d793e7e3-af21-4998-b16c-0f96bb3a0d08", "sighting_of_ref": "indicator--0ef5e5f0-e4b1-4dfe-963e-09cd6711480c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53cedeb-c299-4662-8f8f-52ed58b6b2cd", "sighting_of_ref": "indicator--5871910c-5e19-46b8-8c25-507527873197", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d9f6de-c392-424d-acd1-d52d4b0b5a65", "sighting_of_ref": "indicator--3febf9a3-5797-490f-8ecd-a55c24b3d508", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f989dc-3401-43d6-9bf4-234620fc9d5e", "sighting_of_ref": "indicator--fd7256c3-f4d5-493a-b592-7a0e50be4197", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917460b7-83c6-4c97-987f-e758b10d13b5", "sighting_of_ref": "indicator--805d07a7-5824-4459-ad29-964e3fc2e153", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5b238e-5f94-4538-a319-2e90796b552e", "sighting_of_ref": "indicator--1cd43614-4df5-42ac-8956-498cf5c7e0a0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534d0eee-8fbf-4038-b07c-0bacb3b0f1f1", "sighting_of_ref": "indicator--4a8c4929-354b-4871-abfe-08480c37cebb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1f760d-bc80-4935-8ab1-6be2ec118f98", "sighting_of_ref": "indicator--b553ec9c-7661-4a9e-8435-1a773583ac4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b34e20-8106-4173-872c-621adabc97a7", "sighting_of_ref": "indicator--bda30015-8b8a-40d2-9929-779dbce029ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f4dd56-1cdc-4ee8-bb05-995bd6d6fa36", "sighting_of_ref": "indicator--f2bb10f7-9c68-45a7-aa28-075c895a6ed0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80fd3fa-fc5e-4341-96f4-0f4d6198f411", "sighting_of_ref": "indicator--5dc782b3-1327-4db5-9602-54a69000eff4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746ef517-9026-4ed2-bcdd-83eb03b8bb9e", "sighting_of_ref": "indicator--d880a489-91cf-4e56-95bc-67362050d00c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63eb3308-2632-48a2-8946-a2a0560c62e8", "sighting_of_ref": "indicator--923ad396-616d-4e69-b3de-d9845c579e6d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb96718-9d0a-4f09-b964-03d6b8979b7d", "sighting_of_ref": "indicator--b75b8c48-26f9-4640-9418-a7cffebc1103", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefcbaf8-fac5-45bf-823d-15de3303cdfa", "sighting_of_ref": "indicator--b730352e-a9c0-44e2-8d87-847da8334f43", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cd49f4-1968-4f4e-9010-d145231f05bd", "sighting_of_ref": "indicator--84d601d9-f67f-483f-b848-f9e4bcf6c352", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90bd42a7-869a-4604-a572-725612a97acf", "sighting_of_ref": "indicator--f71fa33b-1a69-43b9-88a8-b6c3ce66a079", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99bb542-0ecc-4a36-93ca-c332f279b59d", "sighting_of_ref": "indicator--2c156c24-f1e3-49d2-b435-48452e7e1d48", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cedbee80-fcd9-4a87-bf47-a20d9240853e", "sighting_of_ref": "indicator--937f2eab-9c83-4625-ad9f-e7fe0aa29e54", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ab59e9-4fea-4f43-b707-516bd86ecb53", "sighting_of_ref": "indicator--fa47a35a-cb6c-4ed2-95be-8e8868238589", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5dfdf2-a02c-41e8-9fda-b1ce725d3167", "sighting_of_ref": "indicator--0731053d-4be8-492a-b347-9a1c7b7e8a97", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc716de-e9b6-45a0-ab03-c9eff583f644", "sighting_of_ref": "indicator--d3d8ca78-c17b-463a-92d5-401b2d005d56", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afffd827-aaca-467c-9cf8-cd287cb6394c", "sighting_of_ref": "indicator--7b3498a0-5a33-435c-ad7b-19dceb0794a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9670952f-c0bb-4d23-bfa7-9fca6c2d00dc", "sighting_of_ref": "indicator--138d1234-9937-4935-af1b-0b3ac418f79b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4edc4ef-463a-4ca7-9a7e-3b6bcb394005", "sighting_of_ref": "indicator--b914c8fd-f497-4cea-925d-56643ea679df", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f99de3-9327-4046-bc50-e4b9f7d62b75", "sighting_of_ref": "indicator--4b7550d5-fd2c-4182-9818-9813c37841b2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05abaae3-5032-4808-9ca9-104b3666ed4c", "sighting_of_ref": "indicator--2cd9e9e1-2559-4c0a-a5d4-469870a04723", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e43813c-af46-43df-85a9-5c34636a8d96", "sighting_of_ref": "indicator--729a9798-d302-4b8f-a59c-8123dcf116d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e34b0a-dec0-497e-a422-c97953974823", "sighting_of_ref": "indicator--3f292338-8f1a-427d-9380-9e77011b75cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1afa7c5-13b5-4141-bf76-41105dc64418", "sighting_of_ref": "indicator--b470c649-0489-4311-b224-7bd4808abd1d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb388e2-7169-4fb0-89e6-f67d484b24d0", "sighting_of_ref": "indicator--575594af-bacf-4228-8218-09b5cd5dfe82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54b8e09-ce02-4670-8e7f-1746d05f7ebb", "sighting_of_ref": "indicator--fb06778d-ab5e-4719-ae2b-50daac0d32d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804ad381-7550-47df-beae-f5e34792ee7c", "sighting_of_ref": "indicator--53c811b5-0862-450c-89c5-7b608805bef4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e1f6a7-88c6-4f9d-abe4-ece6d25861ed", "sighting_of_ref": "indicator--06d707ee-c745-4633-9543-59bfd3eff36a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2fd242b-6ab0-42cc-8656-04b98709536f", "sighting_of_ref": "indicator--5be96d97-829e-42c2-a279-35384d6cf959", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96fc6374-d1df-4d82-9388-4e445dc2a188", "sighting_of_ref": "indicator--b5fdccb4-21cb-4644-8d23-ad270c0562ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69950b1a-f5f9-4203-8e57-aedd35b8c070", "sighting_of_ref": "indicator--2eb1528b-7456-43be-aff3-797884a70dba", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da79658d-b5f4-4828-a419-634645419400", "sighting_of_ref": "indicator--7e609687-506b-4fa4-a452-685393d9af83", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d4c8a0-043f-4638-8c7e-248bfbf82213", "sighting_of_ref": "indicator--52d1062d-cac3-473b-9339-ec4debbbcf53", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef398e3-33c0-4992-a96c-56e6d2ef9951", "sighting_of_ref": "indicator--69b2cc71-2d95-40f7-909f-ce0a69f0ce44", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a48e26a-40c5-4fc8-8884-c04a6f50414e", "sighting_of_ref": "indicator--c7bf58f3-29a2-412d-90cb-b92c1b43a90a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e26963d-e229-422c-b600-f7c7303bc9db", "sighting_of_ref": "indicator--849f9b49-c678-4c7f-b5b4-0b6f42c6e445", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d92f84-fb2d-4016-86ff-ed2d7a47d0b0", "sighting_of_ref": "indicator--ce5d8f7a-4017-47c0-bd08-e713f674afac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c082373-2a9c-49a0-b72a-9b558c366ac9", "sighting_of_ref": "indicator--c98505f4-56f4-4e33-be6d-7dbe26414547", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbc42e9-f073-4449-8095-2d64e8d4445c", "sighting_of_ref": "indicator--1825de84-9bf5-4b08-8430-5115498c04a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff6ffb8-ac32-44fa-8d41-6d69016cdbbf", "sighting_of_ref": "indicator--7c64b155-64eb-4ca5-88c8-dfd5f4018390", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09f0de0-5412-4770-ac80-14e740701e02", "sighting_of_ref": "indicator--8d0908b2-8016-449a-b555-145b3b185ea3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c5f9b1-b689-45c0-8ec1-dc7de5550078", "sighting_of_ref": "indicator--73bdb07e-4ad1-4951-a3c2-d59c470791a7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae55356-73c2-45e4-b698-3d7100d7cb05", "sighting_of_ref": "indicator--64c3474e-f9c3-496d-be9f-89e44c469772", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3bfb70-f4f7-411a-b03f-6b7d0275aeec", "sighting_of_ref": "indicator--3487aa02-f897-4674-b102-385adce56f12", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba53fb61-d154-49b4-9e20-b54a2964c97f", "sighting_of_ref": "indicator--5ea2084e-22d6-4586-b3fc-ca3925ec3b1f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f5388f-a922-4f56-992c-2507da184ce2", "sighting_of_ref": "indicator--0f255d5c-a719-4188-add2-c39c745a695e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b17f313-9530-4d90-a6da-43d9fa69b9d2", "sighting_of_ref": "indicator--0897a58d-5976-4772-8589-05c843327172", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c54843-6952-4f1f-ad4e-c2f13c26f791", "sighting_of_ref": "indicator--0897a58d-5976-4772-8589-05c843327172", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cba4e86-c7e6-4a36-a2bf-533cca623868", "sighting_of_ref": "indicator--946c17d5-73b2-40fa-85e2-1e910d6fae8a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb26ab44-e231-49fd-ad0f-44dd924b97aa", "sighting_of_ref": "indicator--556fa01f-ff6c-4920-b174-9377783bb36a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ce0f50-4882-4432-b11e-01082c80e221", "sighting_of_ref": "indicator--11f27518-8aee-4c69-b36f-010c168d6590", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eacb58b-fadc-4766-a5a0-00351606701b", "sighting_of_ref": "indicator--9bf242d9-5d46-47b5-90ac-38ccce1c15fb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1141cd0c-efa1-4392-a509-3a2d627034f8", "sighting_of_ref": "indicator--ecaa6a96-8437-45da-af33-8dc9c0d407b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e489bc3-42dc-4505-8124-2d80b6805f84", "sighting_of_ref": "indicator--70ab1a63-d855-416e-93ce-1b4991858bbe", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb62dfdc-9aa7-486f-b464-0d5cb775ca5b", "sighting_of_ref": "indicator--6e50f738-0a6f-4155-afcb-b9ab0491e82c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952bba3e-bff4-4d80-b056-534f1beeca31", "sighting_of_ref": "indicator--6e50f738-0a6f-4155-afcb-b9ab0491e82c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f6c688-7509-46a7-8b77-de38e7548397", "sighting_of_ref": "indicator--bfb56982-0f7c-4d0d-b52b-16c4c80d082a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98a4ec1-cb1f-4b68-be12-c5ce046909bc", "sighting_of_ref": "indicator--22d9dc28-b534-4826-8079-90d427d45df8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39ef90b-3fab-4323-be6b-d0f2ef4971a4", "sighting_of_ref": "indicator--07014264-3468-43ae-a1ca-215b28c55ab6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610c2909-85d5-4b3c-a4e0-ee02ec686caf", "sighting_of_ref": "indicator--e428acdc-2704-40bf-ba7a-5092c370c79f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a9d1b1-8991-4c14-a458-1932c0673282", "sighting_of_ref": "indicator--a004bdd8-7475-4bdc-91a4-e45df5b7dcf2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227a9598-7bd7-4090-839d-e5278bc1434b", "sighting_of_ref": "indicator--84579621-70a1-495f-8f39-a9c130a3ccad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23a9bad-dd26-4cca-a78f-d87a319eaa43", "sighting_of_ref": "indicator--ec9c24b8-d0ca-485f-aa1a-c1ede61ded09", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7190413f-2c07-4017-be7a-fd46afdf37a8", "sighting_of_ref": "indicator--40ba9bac-ad40-4d08-b384-b7f4e037417a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ecdfb5c-85c6-4612-8e8a-238694872be5", "sighting_of_ref": "indicator--93b28108-3f24-496d-a363-ec1dc2539158", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612e52b9-de95-4dea-94b9-2351aa3a56c6", "sighting_of_ref": "indicator--fff561d2-3e1d-42d9-ab88-e0e0cdc2bf08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32fcaae-bbba-490d-b0fe-b8ddc6588aba", "sighting_of_ref": "indicator--aa047420-59af-4c14-ac3e-08645cddef4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc620a2-8f31-4af3-8547-153566d64438", "sighting_of_ref": "indicator--12b76155-e96d-4405-8bc0-513f84b0cdd6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306feacf-0c94-42f4-9599-c376e44b1ec2", "sighting_of_ref": "indicator--80172f23-5ebc-4be0-99df-c8463e098fcf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136253cf-2451-49a7-a468-6a35a6e63b67", "sighting_of_ref": "indicator--37c07c2d-be27-4830-baf8-5b47a16599a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3212bcb-ca9a-47e6-b23e-4971214c9333", "sighting_of_ref": "indicator--2ff6e3d6-f171-4468-a197-0dc3b2dbc746", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c84c69e-bb09-49a6-a284-559fc33f908f", "sighting_of_ref": "indicator--805a4d11-a678-40bb-9106-880f40803056", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3481e2bd-1190-45cb-b977-35b7ebff21dc", "sighting_of_ref": "indicator--867729e8-f7ac-41a8-b53d-df3e22c38af3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53bc16f7-0a07-43b4-98dc-63b88549fa37", "sighting_of_ref": "indicator--31f381e9-765b-48e6-a16f-a9f64c2fb2bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af71dc6-d0b4-4a9e-a0bc-6874298b8e62", "sighting_of_ref": "indicator--5e7c5591-9c20-4bf5-8070-9894943cc8d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8666b7-e8b9-4ae0-8ce3-7c68d35bc93c", "sighting_of_ref": "indicator--a1933d12-9b37-4ac5-827a-772da617f675", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e41035-730c-4cd8-8d12-f0eee3335bff", "sighting_of_ref": "indicator--b31bf0da-1d6b-46f6-9bcb-ef9c69847513", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ff2949-06f7-4295-ab5b-4a50a05c29ba", "sighting_of_ref": "indicator--507cb97b-3635-40c8-af8c-001b99793bc9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4fd0bd2-8d98-4b76-a52f-f4a71d9dc1cf", "sighting_of_ref": "indicator--db7346d1-ca0e-427b-9c3c-b45f94302b09", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e6c388-6078-495d-a917-db0dbdcdc479", "sighting_of_ref": "indicator--4f2cd460-4281-4f86-b6fd-7620adf521b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cda3700-17a4-4b01-b6bb-e0e26d464104", "sighting_of_ref": "indicator--87651d8b-d882-4cd9-a267-1147223faec1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3955d341-0d83-4fbd-ab67-be58b7d3e676", "sighting_of_ref": "indicator--a2057bde-3bd8-4dbd-accd-b6175ddd0150", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c3f215-dc2b-4619-84c3-186d8effdda6", "sighting_of_ref": "indicator--ae785fe2-d198-47a8-8ddc-b59b7060777b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97663c0f-bfbb-4dd4-a8b7-309250ccdd2e", "sighting_of_ref": "indicator--9e0af2cf-dd1d-4b91-a58a-992237fc6ba7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ef213b-829c-4634-b7d2-36c91695273e", "sighting_of_ref": "indicator--85d0f8e1-e482-4fdb-bc39-c8157e21945e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2114353d-fb4e-4b66-9e13-3d2d4a2d4338", "sighting_of_ref": "indicator--4de88c84-c12d-4c50-8553-81bb8d566eef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d511df-d9de-485b-acbb-9f69ca918b06", "sighting_of_ref": "indicator--73c052fa-a38b-4a60-bc38-4e3c3df533b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8ef2f9-95ea-4f3b-b0f2-c19b95c74004", "sighting_of_ref": "indicator--2c222442-404d-46a9-81e4-96253279ead8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31531393-5ded-4b15-90de-2fc18595da83", "sighting_of_ref": "indicator--04f66458-97af-43a0-91b8-259e4b4e8519", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f206d249-cfd8-4948-96d2-d7d330877fc5", "sighting_of_ref": "indicator--bc040b2a-a0e0-4a71-8e41-4381bcfb4b91", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed9cfe8-87f1-4052-8f09-bae3bae2cbab", "sighting_of_ref": "indicator--ccf0c7ce-afe0-4ecb-b7b6-8dc2ae84e9a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a055a2-610e-4a65-be44-5bce0d6dd44e", "sighting_of_ref": "indicator--5e1aebcb-5dc3-49c3-8355-9f531edf7cab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c257f86-d67c-4dd0-a31d-e19db366a5e1", "sighting_of_ref": "indicator--89fcfe02-f026-407e-ab47-3f325a63be1e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef16389d-a5fe-4548-b9bf-29fa6a907f76", "sighting_of_ref": "indicator--815c6bbc-ef24-49c2-8b9d-cf6f642c1e45", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80783af0-1f1a-42db-8024-db3a48124ccc", "sighting_of_ref": "indicator--cf32b534-d717-498a-ab2e-b4577c592539", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d03554-df6e-4d70-b6e4-5504acd6cea3", "sighting_of_ref": "indicator--42633a75-1642-491b-96be-1de711a66fe7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e626944e-38b4-4b70-8157-de8fae33b13e", "sighting_of_ref": "indicator--1ee5f11e-3d87-4a18-85a1-ebd624d063c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc91ed4-0f0c-47a3-b91c-962e5a5b2160", "sighting_of_ref": "indicator--09bf4d31-e3df-4d69-890f-6e52c95b6e68", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98ef707-72ec-44c9-ae1c-137e86521340", "sighting_of_ref": "indicator--cf8b79f8-8cdb-4017-8564-0b719c0220a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dadfe6e-04bd-46ba-8697-5c76d77b5e45", "sighting_of_ref": "indicator--f3b035df-2e47-4e44-a950-ec9f9c8fb7e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6767598-329e-4513-9f4e-49414b6e623c", "sighting_of_ref": "indicator--314e911e-5ad6-48f3-8967-c2f856c34e32", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21035d25-79d5-45d3-8a0d-fb8579e0e166", "sighting_of_ref": "indicator--855721cc-f1c3-451a-bdc4-ea3d73331320", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b230b8ee-d5b2-4285-bb9a-6152c538c5c2", "sighting_of_ref": "indicator--b93c0f1b-3691-4a01-b58c-a2a7552b8715", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990b0ca9-a62c-4fe8-bf16-8d0218e31305", "sighting_of_ref": "indicator--e5fada3f-b1f6-4cda-a60a-fccfe15d3f2d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41cf6e3b-8954-4a86-befd-582d756ce2bf", "sighting_of_ref": "indicator--0274a504-6d53-467a-85db-249dfbf9b735", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad4f31a-123c-4bd6-a934-23d724e46902", "sighting_of_ref": "indicator--edeb712a-7e37-4026-9202-062fcfeaa081", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425c39f4-409a-46ca-af54-fe759b90b9b3", "sighting_of_ref": "indicator--d98a97f4-80d6-47b9-8423-59e4ef58fd83", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2bf66b-c650-420f-be2c-37e75b212ff1", "sighting_of_ref": "indicator--cf868f2e-744d-4ab0-8749-304769a5f202", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf674c9-5dba-4400-8cd9-0c8ee85c60de", "sighting_of_ref": "indicator--3825187a-4cdb-473d-b2d3-65c1a7a04b38", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f216dc4-9272-4e3b-9a5e-0c3b3ff168f8", "sighting_of_ref": "indicator--f5bee4c9-7afa-41b4-b2fc-f28a2df253d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e35279-a2bd-4124-a814-f675e7236abf", "sighting_of_ref": "indicator--a45e75c8-0d9a-446e-ace3-07bc14466bdf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d904d8f5-e144-4304-adfa-b75dba82e736", "sighting_of_ref": "indicator--73ff5d27-b587-47f0-b1f8-e84f9d9f53b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5a82fe-d083-46e7-be6d-180f8c46e55b", "sighting_of_ref": "indicator--f5cfbfce-91be-4dcf-9ce1-8674b63d9f04", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a670aa1f-85eb-499b-bf40-035725b4afd8", "sighting_of_ref": "indicator--5ecd9f9d-f494-40d0-9ed2-946ef68a2023", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05aa4b2b-219b-412e-9ad0-d593746594aa", "sighting_of_ref": "indicator--d31b5b93-a354-4c85-8139-275feb42515f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074efb32-57de-4610-b536-3ea1e38b2962", "sighting_of_ref": "indicator--ab76b1b0-592e-4e24-8219-40a37cdc41a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c6ab54-1dc0-416f-91d4-b7ba1d286626", "sighting_of_ref": "indicator--ad5fff8e-e6ad-47b1-8d42-c3998d540d46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a3083e-0994-49a7-a7b4-35f848a03798", "sighting_of_ref": "indicator--3b0b3846-ae1d-483b-910f-65b451d8d427", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3d2e80-2560-4d96-aee5-44aa63bba675", "sighting_of_ref": "indicator--ccd5f39b-6ad7-4a86-9e02-7088611acb93", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fead8f8-2cd4-485a-ad75-7424c3c36b8f", "sighting_of_ref": "indicator--cabe2b17-7ccf-47fd-accb-7b44334df51e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f3b027-477d-4e3f-a4a7-a7d6ad7928c2", "sighting_of_ref": "indicator--5d68d8a2-89a3-4e0c-a1b0-52989525fe67", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00800c72-931c-432b-9825-5ee75aba1550", "sighting_of_ref": "indicator--d8175213-5f80-46d3-b4be-713c40e7a665", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d0bfcd-4372-421c-a99c-eff27edfc776", "sighting_of_ref": "indicator--33b00872-57ed-4259-a69a-0a8d375b3e49", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1892dd37-04ec-4fa1-a5a9-c937d5abaff4", "sighting_of_ref": "indicator--9dc8e255-d2ef-484a-8fd4-0492145f406c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e493fe-fea1-47b4-8f0c-08384989ceb0", "sighting_of_ref": "indicator--78b4e2ed-304b-428f-861b-82b89d3db592", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a60b3aa-902d-4b2d-8819-bb58429a0616", "sighting_of_ref": "indicator--f317dfca-19b0-41e1-b539-af73c5850807", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8703104-d81c-4036-89f3-f311de9c317d", "sighting_of_ref": "indicator--03d31b7d-d58c-484b-b2bc-9eb1eda2e122", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9c1e77-75c9-40b9-9b41-fb4dec145da3", "sighting_of_ref": "indicator--2477bb61-fae2-4366-941e-912d250eb87f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3cf62c-ccf6-4312-95d2-9d843860ad36", "sighting_of_ref": "indicator--8d37d54e-6b14-487b-9e03-4828761b056c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd29b4ac-05e7-45fb-b7cf-0e104c81db49", "sighting_of_ref": "indicator--6496bd9e-f140-485f-9b1d-4ea746337b87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95452c74-4376-49f3-9617-5dd8734b8e0d", "sighting_of_ref": "indicator--680e58ed-a4ba-4a63-ae89-2a3af98865ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad67484e-fd95-4f54-8eff-1cdbefc24cdc", "sighting_of_ref": "indicator--b2513639-5f8e-4e73-a8dd-27ed14bee029", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4410c0fe-ea28-4723-82a7-9ffb02ff403e", "sighting_of_ref": "indicator--1a3b779d-b8ce-4ead-bca2-d077f572d314", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e3ac4d-37c3-426d-b065-e57c64719e48", "sighting_of_ref": "indicator--f1b5f966-36cf-4805-b82d-ef5dc040a445", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167da9b9-9789-4f22-a9b9-b3dab3179f49", "sighting_of_ref": "indicator--bca17241-1244-4460-a6b0-a45d09025a74", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e004fb9e-d044-40df-be3a-abd11302ce9d", "sighting_of_ref": "indicator--10118243-4093-4175-94ff-d41089849d53", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919ca807-ba07-4bcb-8608-8788acb2cb3e", "sighting_of_ref": "indicator--5188dbee-cef0-4d0a-ba7b-010394c5f198", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3a8872-af4e-46e2-a9cd-03bb40413a6c", "sighting_of_ref": "indicator--e3816578-b93c-4308-aa77-21fa838fed4d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683e2a33-9c18-4142-94e3-d5a6b785b634", "sighting_of_ref": "indicator--9423ae4e-5dc6-4911-a488-f864d83aeaf9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e3b475-837f-4754-ae6e-ce0b8e4cc3b7", "sighting_of_ref": "indicator--bccf40d8-1cdc-4a65-b092-6c1a843d1998", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28289698-9252-4857-bd76-715a76d93a85", "sighting_of_ref": "indicator--6a9cc7bf-7698-4647-8285-82ab4e3787ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb821efc-374d-4469-b3e9-57098dda333d", "sighting_of_ref": "indicator--34c9143f-6727-4cd7-9eca-f63857556ddb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b440a77-689f-4535-94c4-e7ba21b99f5d", "sighting_of_ref": "indicator--a7a0a5be-a7d0-4959-b65f-196aa4fb7757", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd72650-ed14-4601-886b-1aadb8e130ff", "sighting_of_ref": "indicator--77e63472-34c5-45fe-b268-f4f60c762906", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b4c520-a45d-4575-a0fc-f4394e59e455", "sighting_of_ref": "indicator--205a40fb-c113-4064-a6f8-7ef2003ef01e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2683e0b6-a27f-4878-b5a1-553b1aa93196", "sighting_of_ref": "indicator--f9db71f5-9740-4ce1-b24f-130caa423b19", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6aa574-360c-4e8d-878d-8eb6b4986521", "sighting_of_ref": "indicator--6254572a-b609-4b71-9491-352b80917304", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86282eb8-9453-4a5a-8afd-b8222bfb81ea", "sighting_of_ref": "indicator--5378cf00-5d9c-4305-85ec-9b2baab2f510", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5a05ce-fb16-45dd-94b9-2a42990055a8", "sighting_of_ref": "indicator--6d1852bc-14d0-44fa-8ae4-15bb4a120722", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0dff069-2253-475f-bbc8-5e64a8342d76", "sighting_of_ref": "indicator--02fd2d74-78bb-48bc-999b-85ba584e1a1c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d66e5e0-3357-47f0-b795-8e8bee4859b3", "sighting_of_ref": "indicator--00a32e59-a67e-4106-aa34-1a80f3f528d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2d519f-f9e3-4770-a651-2e30e2703e2e", "sighting_of_ref": "indicator--0e79c1a2-edce-43a4-8340-255d481a45aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4106baef-a987-41f0-850c-8406f2252626", "sighting_of_ref": "indicator--da8a5dcf-9866-4a71-9fcd-99b89d323b24", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423164ae-a8b0-47c7-96d8-51197fb7850d", "sighting_of_ref": "indicator--601ac7a8-5bd7-410c-8c69-8ecc7d4c192c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e83076-c406-4a02-b582-bfe84be668a1", "sighting_of_ref": "indicator--165caf33-6af5-4504-aaa0-3dfd7a69efd9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db1682f-edeb-442f-a379-8326e84261b8", "sighting_of_ref": "indicator--ef27084f-06b4-4730-831e-2f37ed798a56", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eec59e6-1ba5-4646-9bc3-70ac4533473a", "sighting_of_ref": "indicator--ac51fefa-5ed6-402c-89e5-f79afc000417", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0118b4bc-dd80-49a9-b950-d32bac846673", "sighting_of_ref": "indicator--02d31dee-9e89-4642-af71-f5b260caf09e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c49977-603d-442b-80c9-7197678f23e8", "sighting_of_ref": "indicator--a15ecfbd-2b14-4b01-9823-5a290f4c651f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d84f60-8fff-45ec-8430-999c0b09c0aa", "sighting_of_ref": "indicator--57b5e740-b01d-4e1e-8ba1-4ef55da1ab4c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3019f2d1-8f32-42ab-ae2f-b8515b32e2f4", "sighting_of_ref": "indicator--cd475e7b-ef4b-4888-9758-f41873b20ac4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56446d7a-8308-48c5-97b8-58ff7cda96de", "sighting_of_ref": "indicator--08eb3906-2463-4084-81bd-fc2b01c4b322", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17e7120-c3fd-421d-86f2-3493036d63e6", "sighting_of_ref": "indicator--9ef9bbff-74ab-4e00-a4ae-5b837f91bd82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e06016-4aac-4b5b-8a0b-991e28538148", "sighting_of_ref": "indicator--fad024a2-2eb0-4b38-84e8-1ac89042e3e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85e5e9d-c6ff-47b0-87b1-f3300219154a", "sighting_of_ref": "indicator--ebdb3cd4-6887-443b-abfe-9ae90ee6e2c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c51c9088-74d1-4270-af48-c70013ce6268", "sighting_of_ref": "indicator--7bbbbca8-18c6-49c1-819a-e35eb9e966ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc107e1e-ea94-4015-a13d-766065cc8de3", "sighting_of_ref": "indicator--af81dea1-828d-4dd0-8c84-1764a4aa116e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065b2cb7-9be3-45c9-851e-1c2a8fc46276", "sighting_of_ref": "indicator--64184dfd-0d7f-4b72-a81f-cc164e8d86b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e1a2bb-e1a2-478b-b0a2-4c17388b6aba", "sighting_of_ref": "indicator--3a9b3310-c973-4a00-86b4-c3a6c2c328bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6301f5-13bc-467d-af04-57784a6d5945", "sighting_of_ref": "indicator--ced40692-4866-4886-af5a-df29d306a58b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdbbbc3-4f5e-40aa-910c-d49b212f48d8", "sighting_of_ref": "indicator--9b43997e-9ef4-4e50-bfbd-4a439b7127d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d1b930-b3cd-43f8-aee6-3b84eb5e6e2e", "sighting_of_ref": "indicator--b7ab2d24-7b90-4368-9c97-a8e9244ae3ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedcb55d-c870-4a0c-aa71-33fd6734be75", "sighting_of_ref": "indicator--d297dce5-4195-4a9e-b7c1-7ed2bb69d8f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6f70fe-7c9a-4027-815e-4981e576de0b", "sighting_of_ref": "indicator--2e6f5044-ee0f-4dd7-97c0-bf4d13252479", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca03c0c3-291a-4a78-8b9e-8890e69959fc", "sighting_of_ref": "indicator--87bd34ec-b95f-4835-a3f2-20d2086072cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf86b2d-31e9-49c3-966b-5df2cb86b5e8", "sighting_of_ref": "indicator--0d3294ff-547e-4646-acad-24f70dc7eaff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70dcd857-c983-4289-b4c5-a602177d05d1", "sighting_of_ref": "indicator--47165850-a8b5-4e27-b8fb-4df3e6b088ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c69b04-ee78-476b-bf86-5d5d61262965", "sighting_of_ref": "indicator--f96ec133-efe2-49da-8487-8e0f0e516012", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47452574-c15f-4fb9-9e8b-0c88a6b8e5b4", "sighting_of_ref": "indicator--727b963e-1ee9-4b7e-89f5-536590ddf403", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab451d6-637c-4c21-a5c5-7fc92bc17d86", "sighting_of_ref": "indicator--3e5861b0-787a-4cb1-99d9-f5095df418c4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79623403-3d6e-4a13-9a1b-633af6389da1", "sighting_of_ref": "indicator--58a1a39d-2d45-4c87-9090-6b9a76da0e1d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85282b5a-5ce4-4cb5-bc2d-95e37465bb33", "sighting_of_ref": "indicator--904ac9c9-4b82-4989-95d8-5a83dfb30e08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c442bd-b88d-4c98-9222-69460d4e2592", "sighting_of_ref": "indicator--cd273dbe-0aa8-4f46-9157-1f7bf5bfb29a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a6f1a4-6b8f-4fed-bccf-3a23b195365b", "sighting_of_ref": "indicator--5cffbd42-c3a7-471e-8477-fbf3f402760b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f3079f-7f36-4f49-9406-b43c6fb14bb5", "sighting_of_ref": "indicator--69f49fa2-5a30-4608-9a56-206aa563cf66", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a65f99b-0786-4b12-8998-daa109dc3d0a", "sighting_of_ref": "indicator--098e12ea-650d-432f-87aa-c4a74b5560f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe48e78-eeea-40b9-9574-58a419b081f3", "sighting_of_ref": "indicator--08348802-bfd1-47e1-bb1c-80522fbfa229", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae036be-c616-45d8-aee6-71c7ee97f670", "sighting_of_ref": "indicator--f4c623af-f826-4cbf-aa04-45de45796544", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2bc0fd-2ca5-424d-98c1-34fdf550d1a3", "sighting_of_ref": "indicator--8cd9b8ff-2cb8-4780-bba5-360bdd8e8b5e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea03b0ad-ccb1-4ed0-8cea-47b29ac24879", "sighting_of_ref": "indicator--f99def63-2c97-4b0e-b906-c2c061596a8b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2e7c8d-1886-4473-98ef-091f161536cb", "sighting_of_ref": "indicator--85731c13-c83d-4e5a-80ce-cd7e1b4cadd1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd33aab-72d0-4de3-97f6-ec4ed29cf042", "sighting_of_ref": "indicator--28bef902-2e8c-42be-9a97-4a69690992c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1760dca-c6fe-4b05-a7e8-c23426117c60", "sighting_of_ref": "indicator--8d28a2d6-c7f0-4874-b7a1-8e549753943d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0006d6c-2c9d-4f03-a440-327e22a3bba7", "sighting_of_ref": "indicator--ab9d90bd-44be-4f2c-b4f3-a2f750e0a074", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c6c84e-3501-4ecc-9372-83a959ac50f3", "sighting_of_ref": "indicator--082b0e4a-57df-405c-bc2b-1928446d90ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64299d85-5592-431b-92ab-cfc75a69374f", "sighting_of_ref": "indicator--2a963f4c-9912-4737-acc6-406f189abe8e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6948a9-2f59-4625-8378-73b223679e17", "sighting_of_ref": "indicator--9c481328-daf2-4630-b854-1168172e81ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ad86a5-2836-40bc-b209-c41f51e50c2e", "sighting_of_ref": "indicator--09b8173a-5e69-4963-8d77-6d0ad25d2e0d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90992cb9-f74a-4767-8aaa-bc518f1fd284", "sighting_of_ref": "indicator--9fe6164c-4954-4e73-a249-ad7451f55195", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c64267c-1912-465a-8ae7-bb55e5d48ba0", "sighting_of_ref": "indicator--7e9f0887-c088-441f-8978-8ad3664747ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1271ce20-51a6-46fd-925e-f08bbbb747b5", "sighting_of_ref": "indicator--cc606ae7-afdf-441e-9797-7ac8f1fddd34", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38360e32-9e05-477a-a8a7-456a0e93aca8", "sighting_of_ref": "indicator--6a76fc69-dd56-4163-b685-80b31fc37bd3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e968ebfd-bbea-4882-a97a-16e6940e5320", "sighting_of_ref": "indicator--bd4d255d-596c-49b5-9110-8ff6d2d556c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451800e3-98dd-4831-a557-3aa305269674", "sighting_of_ref": "indicator--8b221a0a-6f3d-4e9c-ae82-6b2eafcfc81b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9375a5-0699-49eb-a6e2-e28b36890ca7", "sighting_of_ref": "indicator--313eb5a7-4c6f-4a2d-863e-4247f87ffdfd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b5d793-0a47-42b5-aadb-f325a98306ea", "sighting_of_ref": "indicator--6760ff6f-2658-443b-ba06-a8eff6036af7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55484d1-cbc9-40b7-b3d2-5b28ffb0b55a", "sighting_of_ref": "indicator--bedf6a0d-6d62-4b0a-acb4-1409d13acfda", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1b9269-3de8-4835-a4b4-c9cb327d40ab", "sighting_of_ref": "indicator--229b8769-cb1d-4349-aef8-884c7caadcc9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5f8ea4-06c1-4af0-961d-551d8e0e2c40", "sighting_of_ref": "indicator--0a2594f2-013a-4fd9-88b5-27daaa3abeb2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47623571-6d87-410f-9df8-08a767843318", "sighting_of_ref": "indicator--a745b9da-ac36-4480-8e5e-17d6a0dd1782", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9429d82-1a69-456d-96c8-ac38aa58468a", "sighting_of_ref": "indicator--24246575-1a4d-46bd-82e0-d76131266dc1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae41d9d-1e13-45ee-9a27-7f3ac9747f53", "sighting_of_ref": "indicator--037f4e9e-0a5d-4bdc-bfca-bffd119aac5e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362ac04a-c7f4-4da6-862d-996fa5ffe01f", "sighting_of_ref": "indicator--18ef5ac0-452e-4377-bc6c-1d95429f9023", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff06c080-586b-4f75-9dcc-3ef37fef6a22", "sighting_of_ref": "indicator--990a0711-ccb2-402b-b087-e466e25e485e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe4f1e5-8ac6-4676-aad1-a0aee8e399f8", "sighting_of_ref": "indicator--2c93d410-7567-4649-8f1a-3f91cb5657df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19093ce0-b9a6-4c90-8e34-d34eba002cf3", "sighting_of_ref": "indicator--a2a59c6d-1e47-47b1-8fa6-c1a1840bd94b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8340799a-6d98-4d22-8284-9e262ad4976d", "sighting_of_ref": "indicator--aec39042-5095-433e-b580-440bd96ab428", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc9c704-59e9-4948-80e0-3889718ae443", "sighting_of_ref": "indicator--253e12ca-886f-4b2b-bd46-52a865d280a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9f07b1-4a82-4b73-a41f-d8bf5d5ae7d7", "sighting_of_ref": "indicator--e1c0900a-e2ba-4000-b3d9-21f33da1b179", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad752d1b-4e0c-4e49-be9a-95f037cd200e", "sighting_of_ref": "indicator--ec16e627-81f5-4f5e-9a07-55f448559e00", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b0c837-0850-49ed-a326-a12bc08469eb", "sighting_of_ref": "indicator--eb2418f2-2333-4343-bb01-79a1cea7d517", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ead01d-16ef-452f-a282-0c710fbc1e59", "sighting_of_ref": "indicator--baf63e9c-1a90-4d27-b6bd-f0913686c48f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7237106b-a609-4655-879d-776d8a5c6133", "sighting_of_ref": "indicator--cc9bcdb3-49b0-4057-9639-37016dd59bdd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3c0687-bacb-4abf-a709-f8cb8118ac0d", "sighting_of_ref": "indicator--28fe301e-6a2d-4d8d-b34a-8793cfdda589", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97d6cb9-eda9-407e-97b9-13fc7ca32079", "sighting_of_ref": "indicator--9b4bf99a-b32f-4957-9734-c99345f62b7b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b97e41a-88f8-4b90-88c9-b0fe82237285", "sighting_of_ref": "indicator--9d3851da-7c9d-4767-b772-4c9bddfa4eec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bad2db2-30c5-4fd4-9fd1-5c669d503dbd", "sighting_of_ref": "indicator--a3517d01-ece9-4266-9503-034ecfd1e8b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6eabe5-9088-4ce0-972a-cce76e169ef7", "sighting_of_ref": "indicator--e30549d8-7d0b-4512-8ec6-9d90a8f5cf88", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9380bb2-18ea-4839-a9c5-804125697365", "sighting_of_ref": "indicator--1a517e5c-db7c-4bd6-9f49-20629cc14424", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255f3d12-fd0d-46d6-89f5-2445c5b9dbe3", "sighting_of_ref": "indicator--779eb370-70e2-422b-a5b9-7e14f9557c6d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be3975d-46ac-4851-9b4c-2f47fec6e423", "sighting_of_ref": "indicator--c26881c5-23e4-4607-af37-15f6c6636538", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e64c9b5-ad97-4b0f-8fd6-84ac872664a0", "sighting_of_ref": "indicator--26c4d4fe-c1ad-45d1-bca9-42b92fb31018", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd4c4a1-a057-42d2-8b3c-771e3e2e8789", "sighting_of_ref": "indicator--353f34e7-e13e-4951-97b8-f12a8975550b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9978d93d-8ae2-4f5d-b255-63262710a719", "sighting_of_ref": "indicator--b658d9f5-eb1b-4b0d-b79e-545089cb1491", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4c4c8e-0f54-4c0b-814d-8e17f23c0b10", "sighting_of_ref": "indicator--7cc6ce30-499b-4f54-9b44-6d81c3065cfe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3beb3f8-1d78-4588-be6c-65bf279329ab", "sighting_of_ref": "indicator--72129269-2a37-40d8-8859-44f8230894f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6acd723-f16b-4f1e-ac2f-f86ea04f653e", "sighting_of_ref": "indicator--8a448c63-8fa4-42de-9c0b-847992bb0962", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4be10a-f0a4-4fa0-bfd9-3fa9b982f20e", "sighting_of_ref": "indicator--ed23ccfd-4503-404d-b5cf-ef4ea79e825c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c5e883-3f44-4a8b-9e02-6de061675ee8", "sighting_of_ref": "indicator--f7865453-f974-4fb3-83d6-c0b29e96e5d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8545a06e-e55a-4a3b-8cac-52873fa77725", "sighting_of_ref": "indicator--86787d01-8f9a-4e2a-ab8c-c6e536bacbc7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01886a32-f55d-46a8-b272-2ed90288c255", "sighting_of_ref": "indicator--6f3ae87d-f152-4081-8a56-2427588e4521", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6befaf-106f-491f-813a-cfe1d7fca05a", "sighting_of_ref": "indicator--9dacfee8-3bad-4feb-9129-94804249f584", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b366066d-72cd-47df-9615-567d320edf3b", "sighting_of_ref": "indicator--ecabe129-8860-44a9-b7ab-2311d6a65a76", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f19b74-cb4f-4578-92a2-a47dd7ff72e3", "sighting_of_ref": "indicator--9aac942c-a210-4fd1-ba46-bce31554514e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e03af4-8278-4d1c-970a-b17d7e725f42", "sighting_of_ref": "indicator--f18ec98b-4222-47f5-b003-6e89c3f1d377", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7f1c8a-5556-4d62-8d19-b7214f539abc", "sighting_of_ref": "indicator--8d8f5355-76b3-4328-87e2-3b1446e2a4e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602e3b5d-1a7e-4e92-9b31-1432ca96f12d", "sighting_of_ref": "indicator--5198f7c0-8fc9-4719-ad20-73fa7f832aa0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbfe289-113f-47a6-b8c4-59f5325bf461", "sighting_of_ref": "indicator--6dd89098-b493-4178-90a8-5259f45ffbbe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d10c2bd-4201-4c9f-aff3-61e3fb16c52f", "sighting_of_ref": "indicator--be8f1ac6-4290-4a47-998f-1950073a4934", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e53c3c-d518-4f8b-959c-a1cdf17f8ad7", "sighting_of_ref": "indicator--0974147b-62dc-4d2f-bd0c-b56c35127582", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a799ccc-2c8b-46de-b1c8-38c32e2fb106", "sighting_of_ref": "indicator--f077f3dc-6dbc-4eb4-8f95-7e40542fdb6a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7ce6e3-d43b-4efc-97af-5926eda312b8", "sighting_of_ref": "indicator--a8d64e8c-32dc-4e2a-9523-69da7becc26d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba38d653-7f9a-4db0-8deb-dd09bbea2828", "sighting_of_ref": "indicator--398b651e-1beb-4268-a58d-7d4e263269fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b32595b-c74b-401c-9765-974059a6138d", "sighting_of_ref": "indicator--f8c216a5-edaf-4857-a97b-4ed8e77043af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb019b1-3675-4f97-892e-b81d9982f597", "sighting_of_ref": "indicator--e5c70b28-09a7-4683-8baf-e71bd4b6fb3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4641abb-39f8-4c39-ae94-6fc3959e9a64", "sighting_of_ref": "indicator--392f583e-6724-4bd3-b4a6-e4fc0ffff8b3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172822ed-dab6-42b9-8994-9a7d76969763", "sighting_of_ref": "indicator--8917b49a-4180-4004-8261-e9ba807b7807", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4998d0b-e5ea-4d82-946e-6a7f280fa0d1", "sighting_of_ref": "indicator--e9dc3522-ff84-4823-9a06-fb39d986d410", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2eaca9-3988-4e00-97c9-a855c361a351", "sighting_of_ref": "indicator--d2b0eb47-090a-4a06-a42c-d574db17de9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0222e9-49ae-45e1-88cf-492afed433ac", "sighting_of_ref": "indicator--ab6b5efb-d732-41c1-a231-19e237223484", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ddc880a-bae2-4b93-9307-e5cd54b85c0c", "sighting_of_ref": "indicator--e7ae02f5-d56f-463d-9654-78eca357271d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21e1e35-51d7-492e-9392-b2f46855b235", "sighting_of_ref": "indicator--d3ea383c-a0bb-4895-80bf-b529601b344d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc644cb5-aca1-4f01-be3a-3ee673ac073b", "sighting_of_ref": "indicator--02bd8752-c75a-43ce-8c16-b026b456da7b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89cf5761-1432-4afb-add4-11f501617078", "sighting_of_ref": "indicator--aa39b4e7-2276-468f-a652-e363bd904959", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccaa3777-51c8-430c-80c9-1bb93ccd7860", "sighting_of_ref": "indicator--3ad61450-47b7-4643-87ea-3e5b93c912ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae7ac2a-8c19-4e80-b598-35fc642c81e3", "sighting_of_ref": "indicator--939704a5-27f2-4d64-b51b-8b41e50ea6e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609171ac-82f8-4116-a860-ecef7b56fc26", "sighting_of_ref": "indicator--ae57b460-ca16-49cb-b188-9b2a5df74c05", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4fa55e-cb9f-4e21-8ef7-cc4e78458c30", "sighting_of_ref": "indicator--5c60bb4f-ec33-4e28-b5d4-1570df3ffc08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faeba1ca-b20f-40f2-ae23-3d1b41023171", "sighting_of_ref": "indicator--b3353956-3907-49d2-bf5c-3849fcf5e2e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3efd259-940a-4db8-8718-27ae3ee63636", "sighting_of_ref": "indicator--16425c8e-b024-4bc8-ae8c-fd0926c9926c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a28c8a5-e46d-4ac2-8639-405e1bfd9593", "sighting_of_ref": "indicator--9a11b389-57d4-454e-924c-803cea2ea58c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709b7b63-a3ac-48de-98b3-2ae555168d80", "sighting_of_ref": "indicator--721d27ca-b721-4833-a55f-3947d325f05a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6326b1-1833-4def-a38a-f08ed03aa75f", "sighting_of_ref": "indicator--757a3c0c-2766-42f4-a76e-d699064d3b52", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542249fb-eb50-42dc-9e6d-f62c6e494213", "sighting_of_ref": "indicator--b62373d9-2b3a-4ffd-ad89-3743db2e5063", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbfcb03-5222-4cf9-bbf9-3b313da40b61", "sighting_of_ref": "indicator--65c95464-3b42-4d60-b483-7d3c4e92eecc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792b8f4d-1304-4432-8e3e-99497b46886f", "sighting_of_ref": "indicator--c77a0246-b0f4-4197-abe2-dd92fc312bde", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593e44a0-f3a3-4f08-9e27-f5d382e28072", "sighting_of_ref": "indicator--17294975-9208-4234-a6cc-74ed67e47b67", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adaf0d1b-c624-49c3-9726-27af59940f85", "sighting_of_ref": "indicator--f813506f-aabc-41a8-8e02-dcf6ba6f670d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ecfacc-6016-4e66-9e5a-f0b574edcb55", "sighting_of_ref": "indicator--0a18a797-689e-4316-9697-e51e1baf1927", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f470822c-30dc-4311-9436-22f25cc23822", "sighting_of_ref": "indicator--aa2c7a86-4cd6-4f81-b18b-101e454024ba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07d90b4-1824-4421-87a9-deeb5af5ab18", "sighting_of_ref": "indicator--55df8953-de21-48b3-8234-662b085e4997", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf700096-b5d9-446d-9278-1cff22a19eec", "sighting_of_ref": "indicator--66d4b501-f956-4409-9617-e87ddaeb1b44", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65664ae-3bfd-41ed-adf2-9e013e375443", "sighting_of_ref": "indicator--b9e315c2-5dd0-4f78-90a0-fc0144d2ab5e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e382f30-9358-4e74-a284-4df9a31ca6e4", "sighting_of_ref": "indicator--6d2b8bf9-aef6-48f8-97e4-e40f473436ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0292f1fa-d272-4187-b78b-2eb875dec5f1", "sighting_of_ref": "indicator--1c1238ca-fe25-4d5b-9845-3db37eb195d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41add90d-d189-4874-913f-3a80cf4f0e87", "sighting_of_ref": "indicator--bfb1ec88-2457-4868-9760-59638372ab24", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15503008-1680-43bc-ba51-6aea04d33ada", "sighting_of_ref": "indicator--d64f77d8-7926-4ffa-a455-01af3d20fe6a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca9d0ee-cbb4-41f6-a442-53bbc231d37e", "sighting_of_ref": "indicator--4aaf891e-6c18-4be3-b4e5-3852f0705f50", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b710379d-6b5a-41b5-9ad5-b6af0d997b3e", "sighting_of_ref": "indicator--3d66e986-4b6e-40c6-b0de-83a227522040", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114cc98e-7699-4da6-8257-0f6e1f694135", "sighting_of_ref": "indicator--9099e51c-1631-4c6f-a0fb-b40a7a97b97c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb54124-a84d-4f4b-9c61-c3e8cc4afd12", "sighting_of_ref": "indicator--3dcfd9ab-6025-4753-b155-e6a409b3eef4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d9e759-4829-442d-97b7-817dc7f01a08", "sighting_of_ref": "indicator--d2aa4bb3-7a8c-4eb4-8e1a-f34e1933deb4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8711ce-de48-4498-9d26-874e734106ab", "sighting_of_ref": "indicator--1292ab8d-e112-4ecc-adb1-583df4aaac58", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2375857-ec78-428b-b328-f4caf1f49d83", "sighting_of_ref": "indicator--5aed645d-ff81-4fee-93b3-a859c8d67e18", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315e5bbc-73bf-40a2-992a-35d20365accd", "sighting_of_ref": "indicator--f204e048-542c-404e-97e7-d3ab0cba470d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2af48c-645e-4e74-8fe8-6300791b7ed0", "sighting_of_ref": "indicator--7736dc8a-f8df-420c-99ef-5e4e6efc698b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2497176-13a5-48bd-bd64-c0562c8725c7", "sighting_of_ref": "indicator--74cbbbd0-c0a3-4694-96b9-cbed112b8ff7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4ac741-a219-46b2-8f62-6ddd4b269a32", "sighting_of_ref": "indicator--cfd3ba8b-ff76-4c20-8c75-8255fa5013b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1aab13-a076-4dba-ad97-c4877d3f9c9f", "sighting_of_ref": "indicator--4d17b8c3-1383-4338-b830-4408bd1392e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a797159-bb69-4ebc-848e-9820c271bab8", "sighting_of_ref": "indicator--3ec11789-a6bb-4941-bab2-c763d61b7802", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24aa9d9c-ed72-4f74-94da-67ee1de4f458", "sighting_of_ref": "indicator--f3610551-d7f9-49af-b16d-488f4389131f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b6de9a-4974-4841-8522-cf5d0084b3cc", "sighting_of_ref": "indicator--2703fddb-906f-4a66-8e8f-9a2f4d12b0c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889ef5aa-8b9a-40fe-8fde-9a123aa4e400", "sighting_of_ref": "indicator--2fa8cd75-7912-4728-8e4e-e0948f544dc8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7a8171-cf4a-46fe-8d7f-47bab7e5d235", "sighting_of_ref": "indicator--9afa080e-9a6d-445c-a7f3-00a2b92a8879", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6daa3d-2c23-40f7-befa-1fd384de5bb9", "sighting_of_ref": "indicator--a2443753-1d34-45cb-aec1-4fc34c7803ff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685c2753-77b1-4b21-90cb-1314e70e2457", "sighting_of_ref": "indicator--b070aa67-1502-4eca-b6b1-36e401f5c442", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf84ef3-c4b6-4c54-843c-da7b88b7b4c3", "sighting_of_ref": "indicator--e2ab97a3-cee7-4256-bd0c-3b4730d70838", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5362e77-e9cb-47f2-a7a3-8ebfd2de6db8", "sighting_of_ref": "indicator--c34a8724-b6d1-4627-8ec4-b6067f5f77b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd0571c-f4b0-493a-9c4a-86bef307ef14", "sighting_of_ref": "indicator--5cc9002d-17dd-4906-bbe2-ba9b8f2b2bb2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e42a35-a782-4fec-8f6f-47cd7e6fccd2", "sighting_of_ref": "indicator--f8aa3f92-5f72-4edb-9788-993a9228d1e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e61eba3-0fee-47e0-8d39-e7c5c482e306", "sighting_of_ref": "indicator--1d4b3bfe-9c91-4d94-aff9-5687537911ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367a7b6f-d42a-4f49-9eac-039f28cefc27", "sighting_of_ref": "indicator--f25fae42-f786-41b3-9e8c-4a7a21c08f2d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3beee5cd-bc35-47b3-ba53-3e0bcc5f50cf", "sighting_of_ref": "indicator--316ebda7-713c-4321-80fe-84b8f4bc2308", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4dfef6-c7e4-4881-a2f5-2271d3cbca4e", "sighting_of_ref": "indicator--52a0e805-c814-4ff8-aa35-c2cd2abdc9fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62b6e22-f638-43ba-bdaf-2567746c60b4", "sighting_of_ref": "indicator--aac61df8-d253-493a-980f-6bb62a72c966", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef3e398-2bcb-4893-a996-3cfa32c3d5b3", "sighting_of_ref": "indicator--470e58c0-dab2-49ba-a8a3-cf8075ffb272", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fa3333-f73c-4cf6-899a-b8516c729681", "sighting_of_ref": "indicator--95f49482-9b0b-4457-a8d6-bb4d9fd37775", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e49abf8-3130-491f-8171-637068bc2ee9", "sighting_of_ref": "indicator--cb9a5cfb-2c7f-4fef-ae1a-e2900ae606b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be3ba6f-8519-4725-89a8-2efb36c113da", "sighting_of_ref": "indicator--4d62f430-eb16-4a1a-86c0-784ff45de508", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a126c0-ceca-4034-a354-a3fe2d5026b8", "sighting_of_ref": "indicator--a4146ccf-7177-4923-a5a7-200694396e00", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f9e64e-f532-4db1-876a-3c3855f0213a", "sighting_of_ref": "indicator--cc932a8f-2bc2-4061-9931-333121937b51", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d88e6b-590d-4d1c-9250-320e292bc0e0", "sighting_of_ref": "indicator--d265deb5-0d40-4cd1-8645-1f0f577862a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d277c7a-e7be-4566-9595-37841af15f56", "sighting_of_ref": "indicator--19e4f092-d5a1-49c6-9173-f12d39480383", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c68248-2016-4108-9c4b-59df9aaf3ffb", "sighting_of_ref": "indicator--010661a5-7249-449c-bbc7-01ea3ecc5cfb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c45ad2-0eb2-4905-b847-5144e547fb35", "sighting_of_ref": "indicator--eda98169-0a14-4401-86fb-44935baf2a22", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16562595-e29d-408b-83e2-3746ec7a15c0", "sighting_of_ref": "indicator--58178032-6d95-40c0-998f-cf0a032255bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f2db8d-ede7-47f0-8eff-bc794e2c776f", "sighting_of_ref": "indicator--880f6ae7-42e5-46ec-9399-aa829e69e2ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b8bb11-d9be-442c-9b7e-6199d634a16b", "sighting_of_ref": "indicator--b8b4e08b-2f0b-41b7-9cf1-8f6ee72173eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf577b0b-19a6-40d0-beae-a6506d5ccfb5", "sighting_of_ref": "indicator--f697aa19-e002-4c19-bda7-4798cd42641b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521b57b0-9b8b-4790-9801-ba2b053111f5", "sighting_of_ref": "indicator--c9901aa3-42e5-47a4-a53e-6fd3c58805a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449f3ef1-91a0-43b6-b67d-2c3873935836", "sighting_of_ref": "indicator--694fab60-08b1-4fc4-b174-d1b93a944ad5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2748ef8e-633a-456c-85c8-e358e7c9653b", "sighting_of_ref": "indicator--08fef350-2a40-499f-b8c1-104ec2bb9396", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5961b2c1-98c1-4f69-bb7a-6f63986e7dfd", "sighting_of_ref": "indicator--28dd96f8-a488-4441-9ab1-74d39c3a2a20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a1d7b2-d568-4a9b-a07f-1819cd735a76", "sighting_of_ref": "indicator--2d6063ef-3a52-4a9f-9111-7aa8b62ce8bf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf27acb-8958-4f0d-9ef1-4aedd15453d9", "sighting_of_ref": "indicator--73f96f7c-d054-465b-b11a-2615f442ace2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecab6ab7-20ac-4861-8707-ec23a2e0b0f5", "sighting_of_ref": "indicator--29115d31-0244-46f7-9bdc-03f5da1e1587", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--913281c9-4036-4c75-b654-bdaff44488b6", "sighting_of_ref": "indicator--b87f04a9-5178-4f2c-bda2-4bc4b34b1a5b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e933e3-9379-4933-adf0-e2baba600164", "sighting_of_ref": "indicator--d5b39a0c-77d8-4957-927f-2fb275cf3f63", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c39fd0a-c7e6-4e94-8a8a-8bddf8aa90be", "sighting_of_ref": "indicator--20bb2a57-d0b9-4266-b8d9-7ab30973d067", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768c7f08-d82c-439e-acbe-abaf570f4b89", "sighting_of_ref": "indicator--251745f7-b594-40aa-a3d8-d2dab9291c57", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee749ee-711e-4814-9ca6-84eef39f7f7e", "sighting_of_ref": "indicator--7ee3426b-5872-4828-920e-53a1370586c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07fbbaf-658b-4766-af8b-a5eae1f0401f", "sighting_of_ref": "indicator--280ee275-2902-4ca4-9c09-89cad1feec71", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0de9c4-1e8d-4f47-ab53-5c06d7f9b421", "sighting_of_ref": "indicator--74c4ba52-4567-4501-9fa2-f740ae524a1d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c00a511-2576-424c-9c0a-830f9034e3b4", "sighting_of_ref": "indicator--c59388c8-7aff-400b-9e30-80fb9bd7d21f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51301dc-5b8d-4477-9282-789b11017a35", "sighting_of_ref": "indicator--03e78daf-7bb1-4cd3-849b-228fc8c480b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf74938-e9f7-4133-9d89-575f4d5e5e3e", "sighting_of_ref": "indicator--b60c47ff-cfd8-40ca-894a-76844bc470b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afa8ed3-ab06-46ae-af23-2aed78378783", "sighting_of_ref": "indicator--bf3c46ce-cdf9-45e6-aed9-b476238931fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f86dc4-a323-4821-8243-c3ddc9612bae", "sighting_of_ref": "indicator--aa3e609e-1f4f-4a89-a6a6-6c4cfd2d0fce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76486a83-4f77-4843-87eb-7365b60d9beb", "sighting_of_ref": "indicator--662866b5-24d2-4db6-95a6-43890a702b7e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16223c48-5873-4d18-99cc-2b2ce23f2570", "sighting_of_ref": "indicator--7d0258a9-2d47-42de-9b70-87cfd398be63", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3000080-20dc-4474-a083-2bc4dac8e392", "sighting_of_ref": "indicator--59d91b36-f276-42ff-b04d-14b87094c314", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6bff79-462c-451a-8e43-bba2a9cf88b3", "sighting_of_ref": "indicator--f8a83a6f-e27c-43bf-8e7d-c65495461f6f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3ce28c-de64-4b05-a2bf-fae72041e6f7", "sighting_of_ref": "indicator--c44114cb-b698-4ae3-9e13-47a795edbbb2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2c5375-8003-4455-9319-1a92d5e1c687", "sighting_of_ref": "indicator--e3eab580-4d68-4fe9-886e-a08fbc577e08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b2a2cd-123f-4893-9544-59e5190a37ed", "sighting_of_ref": "indicator--aad8ed84-72fb-4020-85a5-f0f07f87a897", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--402af08f-6849-4298-9bdb-9ad8fb90ba67", "sighting_of_ref": "indicator--666d4dc9-08c8-4555-b861-bd54010fc4d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9cc2ad-c27c-4488-9437-ff63921c1300", "sighting_of_ref": "indicator--54cc12ae-9d25-4da9-8bb8-b933817cd207", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cd1d4a-87ec-4ab9-a0b7-054917e310f2", "sighting_of_ref": "indicator--1f7d0c30-4e8b-4a69-b73c-fce5fe9c4d32", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa797a54-06d1-48a0-9db7-c4ba74c76296", "sighting_of_ref": "indicator--2bfab701-dac0-4c3a-b128-d2c82ba33c1a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a7cbe5-c525-440a-9a7a-60feef386630", "sighting_of_ref": "indicator--07ab415d-582d-47df-ad3d-d1040b5319b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e609f4-62a7-43f0-a40d-a0297efcf1ac", "sighting_of_ref": "indicator--b95f4f77-4299-43ad-98e3-11be4a14db4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d25d8f-e643-4198-bb25-fbeebdd900db", "sighting_of_ref": "indicator--e25b67c6-445a-45e1-96f0-9bb79ca714e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8ae839-29f1-4ccd-8524-34fcca5696ec", "sighting_of_ref": "indicator--080fb160-0026-45fa-bb09-e4f914b79017", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28de7469-1c83-4067-9c4c-bbe483536038", "sighting_of_ref": "indicator--a9c231f7-2e11-48ec-aa6c-786dfa2cfbc6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8507b69-f37b-4010-8c35-43e813f7b5d0", "sighting_of_ref": "indicator--3b2bbbe2-df34-4615-9dbc-d9970b526286", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011280b5-7ba1-425d-9199-6ebb449d3160", "sighting_of_ref": "indicator--0b3391db-2df8-4723-9e77-7f7c7adab80f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8085991-351d-41c0-9c06-191feb674f88", "sighting_of_ref": "indicator--31f17c27-bd41-4b13-a8e1-5df32eaeeb6c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe07e33-fdee-49cd-8264-d55f58492a02", "sighting_of_ref": "indicator--9d238e8f-0fa6-43de-9001-cfadc1e5f64c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52c72dc-c0cf-4430-b93c-61b962634a48", "sighting_of_ref": "indicator--b9f4c464-e338-4d37-8523-a3710bd6c98e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993ce7f5-ceb9-4617-9610-c44ddc080c92", "sighting_of_ref": "indicator--3710bb96-9721-4325-b02d-d2da7014372b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd85ac9c-c10a-4f12-80aa-e4ff5bd5a621", "sighting_of_ref": "indicator--91d6d22a-e66e-4c3c-9604-b848fb99cc2c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2f7263-bd51-48f2-ae90-0062b29857d1", "sighting_of_ref": "indicator--c1415d03-2777-40aa-be86-966141a6340f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ce1a0c-4796-4b64-86a2-af7f7e8592c8", "sighting_of_ref": "indicator--14721b44-c299-4c02-ab6b-15630144bd49", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa61487c-0d88-4645-b7f5-1dd58c9c433a", "sighting_of_ref": "indicator--17b6d63e-273d-40cc-96de-5855783d216b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67099ec9-c93f-43e0-b567-f0edc1f0e959", "sighting_of_ref": "indicator--dc0c9c3c-a7b2-48d4-b40d-7f95bf7ea743", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dab1b43-307d-45b3-b460-7cea0a322db7", "sighting_of_ref": "indicator--83563404-0d7d-4c4e-9032-64e2e9ecb941", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f322db-d713-4c85-a141-1fd9500d83db", "sighting_of_ref": "indicator--af8a3aad-d22f-4839-85e3-2b9ab1c48267", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb1165d-3c8d-4c95-8b49-63155e2b3c25", "sighting_of_ref": "indicator--c485a265-8954-4472-a767-262b34d1e86c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f650a508-7dac-45bc-8329-0e5aed4af58d", "sighting_of_ref": "indicator--78eaa56e-8a7c-4734-8940-96d448cb079c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edfe789b-ecc6-4f56-9064-05b486f6fd31", "sighting_of_ref": "indicator--e1b40d3a-a3d8-463b-aaf4-c1a4367c8538", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72be1fc4-4282-4fdd-b9e0-565d2dbf8805", "sighting_of_ref": "indicator--0a467e87-bbad-4526-b189-f9c22e3f6d78", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ae369f-9c22-4751-9528-a5ccfdcfda11", "sighting_of_ref": "indicator--e97bd89f-ec84-49f5-8b90-b2299830bf46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b2dd8e-04e5-4422-8ea9-9397b7d71688", "sighting_of_ref": "indicator--a1ffdeba-83f4-44f2-8b2e-76c81021690a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44e99ab-9125-4638-995e-00988c60da4b", "sighting_of_ref": "indicator--e4ddbdd6-9fd3-44bc-9667-93e0289be1c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e2d9ab-963f-4850-93b4-7a87600d28d0", "sighting_of_ref": "indicator--ba091890-6407-4167-bcd7-483d70c6d6ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e128709c-9e24-43c9-93b8-a21fbd760b9f", "sighting_of_ref": "indicator--1930cf3d-d8f6-47b7-94ef-0599806e7214", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24417407-41b0-4cf6-8744-6231e44e691b", "sighting_of_ref": "indicator--b0850c37-7048-4a2d-8e96-2086e7c4478a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8b1a01-902f-46f3-8f50-60cb4b68d68b", "sighting_of_ref": "indicator--5e1dd6bc-64ef-47cd-98d8-9aea4bf9770f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e744dba3-d22b-4a8c-86d1-c9016d59818b", "sighting_of_ref": "indicator--a772a100-a194-4a54-8433-3c9a060bb499", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94133581-ed37-48bc-9428-66ac5fe01147", "sighting_of_ref": "indicator--14f4c067-7b1e-448f-ba5a-d9d9713c225c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12550c3-52b7-42e2-bd56-25880576ee52", "sighting_of_ref": "indicator--0acb550c-2736-48da-ab10-37e3db9e3d1a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13c40fe-5e3a-48c3-8821-ddddb5c919da", "sighting_of_ref": "indicator--0215cca4-fc9d-4a84-b131-667475cc0a85", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e67702-2d0b-4310-953d-18bb16e01c9a", "sighting_of_ref": "indicator--d46f749e-939d-4f63-b8e5-287acd20d232", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ff9dd3-563a-4406-b5e9-225857ced3cb", "sighting_of_ref": "indicator--4b00d2be-414c-4a92-b0c1-2126c32fda45", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e13d04-37fc-4502-b499-b78031bc0a53", "sighting_of_ref": "indicator--dc77c1fb-93b4-4064-9fd7-01bb33329fde", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0d7c15-a77e-4269-a9f8-fb85942ee6eb", "sighting_of_ref": "indicator--d4334a55-1cb4-42b3-9950-e5186be7394c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb3716b-90e3-4a27-b010-d24aa3496d97", "sighting_of_ref": "indicator--2a219022-54d6-4260-b2fd-d4179cf08b0f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad061ffe-6362-4446-82b9-81a2d262e358", "sighting_of_ref": "indicator--5a9cb10f-37ea-4dbe-916f-e82605770592", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26b8b76-2628-4497-b679-cff7a0c158cf", "sighting_of_ref": "indicator--6a11774f-3f57-4573-ae01-ac7c3a9ec5e2", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b336a3-ac6e-4215-ba10-f16749b4bbae", "sighting_of_ref": "indicator--05d00f6a-87e9-4b64-a60c-e9a52d01b18b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c007eba3-86c0-40c6-a512-5958c10f3762", "sighting_of_ref": "indicator--05d00f6a-87e9-4b64-a60c-e9a52d01b18b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc10966-b4c1-47b5-b457-6a58d669e4d3", "sighting_of_ref": "indicator--05d00f6a-87e9-4b64-a60c-e9a52d01b18b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdea248-8dee-4d55-8e11-12f11a8b6e99", "sighting_of_ref": "indicator--3afda2fe-82bc-4ed1-84e7-e5f931196499", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7872a4c8-f742-4b20-8b0e-6a8c6fe9285b", "sighting_of_ref": "indicator--20969077-339a-472b-b709-2ab0361ec300", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbfd79e-18fd-4e3b-be2a-4d6dff10f6fc", "sighting_of_ref": "indicator--20969077-339a-472b-b709-2ab0361ec300", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85971d0-66f2-46c5-9c44-8f79c12232f8", "sighting_of_ref": "indicator--20969077-339a-472b-b709-2ab0361ec300", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b59a710-18d9-4480-a56a-522b12903b69", "sighting_of_ref": "indicator--90173437-a288-42e9-88fb-0d6975eaccf6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2b51e1-a804-45b7-becc-1828f0f71e16", "sighting_of_ref": "indicator--90173437-a288-42e9-88fb-0d6975eaccf6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df41a25-5542-45d8-ae17-36869701e570", "sighting_of_ref": "indicator--90173437-a288-42e9-88fb-0d6975eaccf6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1977904d-adf0-4fbf-b851-8267212af02f", "sighting_of_ref": "indicator--7656ffed-fa85-493e-935e-f30c393bf68b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84d87a4-e74e-4c6d-a711-53d2b0a91feb", "sighting_of_ref": "indicator--11c16f30-83ff-4e1f-8f13-36b952c2c5d9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0179f8d5-17c9-4125-b13b-c95614e9d7d2", "sighting_of_ref": "indicator--9c717356-4c46-428c-aea6-5f1e4b5315e3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c7bdda-fe33-41f0-87d9-e15164df1cb9", "sighting_of_ref": "indicator--421383a3-1a1b-4342-889f-54535122e4a5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b5fbcc-a0ba-46e3-8e55-8d47806b3fba", "sighting_of_ref": "indicator--28847166-33bb-4ba7-894e-d65b46089c9e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65ed04e-ea81-46c7-8330-6cb4e907d53d", "sighting_of_ref": "indicator--806dd37a-1bab-42c6-b299-c44e918ea5ca", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf2dce6-2840-47df-81ea-474f1665627e", "sighting_of_ref": "indicator--0818937c-536c-4f76-8cf4-ed60dc44129e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c29d470-f3ea-463a-82eb-99cf85797783", "sighting_of_ref": "indicator--347e0162-6b4a-4fb4-9386-a929f2386f6f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04eb4a07-c0fb-4849-9a89-3d81e4cbfa03", "sighting_of_ref": "indicator--7ab04ba5-f21e-4e13-9d34-1577a9033530", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879251e4-eac4-404a-914d-b672246e5a59", "sighting_of_ref": "indicator--f0af283d-3ba4-4441-9cb1-6c82683264c9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096c3a25-22f3-491d-a3c8-1460a2a393c9", "sighting_of_ref": "indicator--da4b1b20-1394-43f4-b401-ffa0a3d27cb6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd415e3-6ebc-4fd2-924a-be46bdb54bbb", "sighting_of_ref": "indicator--661e983f-ac43-478b-9844-3c3a15f0675f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda09f0d-e75a-4702-844d-e1b375806858", "sighting_of_ref": "indicator--23845a3d-3d40-4b19-a5d0-d0c8195bb8ba", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bab936-3074-405e-bdfd-92f183c58c0a", "sighting_of_ref": "indicator--6900f5fc-f32a-4e8b-8d44-23f7de464f0d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494a0836-291f-4835-9ada-834b519f7392", "sighting_of_ref": "indicator--7fc3f085-ecdf-4650-81c6-b5bdd832a7ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2fa4a1-3b20-434c-ba70-29323e89f102", "sighting_of_ref": "indicator--6c81b8c3-4588-44b6-8049-c75439eb47f5", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334d4f99-4e77-4b79-84ed-11c2eba6def3", "sighting_of_ref": "indicator--77042f2b-06c7-4973-997f-88abbc79aa58", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54b695d-db29-438d-8fe6-217f8d553d2d", "sighting_of_ref": "indicator--c7988bb6-534a-4589-85b7-4322e34939b2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebeb349-eaa5-4169-8612-98861964df52", "sighting_of_ref": "indicator--ad063ad9-92b6-46d0-8211-2c301b9e549f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46dbbbe6-e6ac-48b3-9953-b64532081df1", "sighting_of_ref": "indicator--b645c12f-150e-48e1-825f-119c7457e5d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48edae40-516a-4934-ba7e-27312e958bbe", "sighting_of_ref": "indicator--17d9abc1-17d6-45f1-a588-d896d7077788", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413f62f2-97da-4b0b-a4bf-1871e71ae598", "sighting_of_ref": "indicator--17d9abc1-17d6-45f1-a588-d896d7077788", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9ce115-5a92-4308-84a7-f754ea6b2e87", "sighting_of_ref": "indicator--2a59acc2-5787-4e80-98eb-956f1b6b1a22", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd66627d-df54-4548-8f4c-e42bd1a8ffa6", "sighting_of_ref": "indicator--2a59acc2-5787-4e80-98eb-956f1b6b1a22", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c5f1ca-490a-4b42-be51-c143dedc0452", "sighting_of_ref": "indicator--2a59acc2-5787-4e80-98eb-956f1b6b1a22", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc4ef63-49ab-4d8b-be28-4cd827463ec8", "sighting_of_ref": "indicator--d6de49b3-b25f-435e-953f-2d1ccd40f7dd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b77dc61-4b4a-4cd4-bc3e-e92addc8fc40", "sighting_of_ref": "indicator--d6de49b3-b25f-435e-953f-2d1ccd40f7dd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f92cec3-c745-4ca0-b5af-fd700997eda1", "sighting_of_ref": "indicator--d6de49b3-b25f-435e-953f-2d1ccd40f7dd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ff0d5a-2fb5-4e76-ac9d-3860677bd61a", "sighting_of_ref": "indicator--0e1483fd-bc25-4f7d-9d3c-a43d85d8d05f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635a28e4-317c-44ff-99d3-17b536c902f4", "sighting_of_ref": "indicator--343a620a-afb0-4941-accb-2622a78da301", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75342f6-f1c0-4c87-b21c-976afa91da34", "sighting_of_ref": "indicator--343a620a-afb0-4941-accb-2622a78da301", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cafe3d2-d542-4c5f-9424-45ff664be3a7", "sighting_of_ref": "indicator--343a620a-afb0-4941-accb-2622a78da301", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4959001-927f-4dff-8280-de67e2d927e2", "sighting_of_ref": "indicator--42f98a4a-6a88-4fde-92b8-84117206aa14", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1472d99-12bc-4ad4-b0e0-76bb4ee61d51", "sighting_of_ref": "indicator--42f98a4a-6a88-4fde-92b8-84117206aa14", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d3648a-dca4-4688-98a6-fc532fee268b", "sighting_of_ref": "indicator--9ca138a9-8343-428d-b7a2-53dcb1057f8d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f477d85-6653-494c-9aa9-4fe437dae98c", "sighting_of_ref": "indicator--5cc8511c-c87e-4653-9d7d-08c5af0534e5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bb76f9-088e-4e37-a087-86285c76ad8b", "sighting_of_ref": "indicator--cf52395e-25f0-450e-86b1-656b6f005b50", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59841ca8-16b0-4b01-b970-2f3578335719", "sighting_of_ref": "indicator--cf52395e-25f0-450e-86b1-656b6f005b50", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e661ad0c-32aa-4ca0-a6af-4d2db1f8d736", "sighting_of_ref": "indicator--cf52395e-25f0-450e-86b1-656b6f005b50", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ad75e8-cb26-4ff3-b7ee-0603d3a49861", "sighting_of_ref": "indicator--d3c92879-6e2d-4551-ab03-3143f8b09223", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62e7d80-c712-4bb4-9560-421b2909449e", "sighting_of_ref": "indicator--d3c92879-6e2d-4551-ab03-3143f8b09223", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99831a14-6642-4c07-b0d8-a7d8b0fa4ed6", "sighting_of_ref": "indicator--d3c92879-6e2d-4551-ab03-3143f8b09223", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5892bfa7-b603-4364-a030-146ba94a8f92", "sighting_of_ref": "indicator--50abf3e4-7076-410b-8cf1-d4d70299db38", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d5bcbc-5562-460c-9732-7eb625f67aab", "sighting_of_ref": "indicator--50abf3e4-7076-410b-8cf1-d4d70299db38", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626b21ed-18cf-44d1-95ef-041fffec8853", "sighting_of_ref": "indicator--c6071c26-003b-47cd-ac61-cf64dc916645", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e05357-5cd7-44f5-a8f5-837205728431", "sighting_of_ref": "indicator--c6071c26-003b-47cd-ac61-cf64dc916645", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61e04f2-b070-4d6d-988c-ee9e312418c2", "sighting_of_ref": "indicator--c6071c26-003b-47cd-ac61-cf64dc916645", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6e6de6-e40a-4657-893a-487e5e04ca8b", "sighting_of_ref": "indicator--a0798b49-6152-4862-9fad-fdfd841ce906", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87a9cdb-cf48-4c6c-988a-6c8beb4e5254", "sighting_of_ref": "indicator--a0798b49-6152-4862-9fad-fdfd841ce906", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58a33fc-bfc7-4c95-b78a-cc1f8e1d8d3f", "sighting_of_ref": "indicator--a0798b49-6152-4862-9fad-fdfd841ce906", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d096475e-d9be-40d9-aaa9-79de8a96eb87", "sighting_of_ref": "indicator--d372ec67-13fe-4b74-8faf-048908832850", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694c669c-0e53-47b8-8917-44be8630bfdb", "sighting_of_ref": "indicator--d372ec67-13fe-4b74-8faf-048908832850", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1579581d-9abe-46f5-8e6a-0f664b6d228f", "sighting_of_ref": "indicator--d372ec67-13fe-4b74-8faf-048908832850", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce13b2f-5025-4f1f-afba-c81401a2dd00", "sighting_of_ref": "indicator--768018c0-e956-42c1-9627-1e887f0041a8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78106a6-5637-4d22-956f-800c94e1387e", "sighting_of_ref": "indicator--768018c0-e956-42c1-9627-1e887f0041a8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d70188-25c9-40ad-a325-d5c315e17f95", "sighting_of_ref": "indicator--0c16d91c-b738-4b02-a321-b7bb4f7c75d4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d098755-535c-4158-9165-060d34901b0d", "sighting_of_ref": "indicator--0c16d91c-b738-4b02-a321-b7bb4f7c75d4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab38e05-dedc-4a7b-954a-30573e76b5a1", "sighting_of_ref": "indicator--0c16d91c-b738-4b02-a321-b7bb4f7c75d4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6bd0bd6-6c91-4e0e-8afa-6871ad0bc74f", "sighting_of_ref": "indicator--9a27ff2d-75de-4e99-9715-039aee39bcfa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282b13b5-f552-423f-be37-d3d45ddf4f17", "sighting_of_ref": "indicator--9a27ff2d-75de-4e99-9715-039aee39bcfa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82488530-b04b-44ba-8efe-874f169c33a6", "sighting_of_ref": "indicator--9a27ff2d-75de-4e99-9715-039aee39bcfa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e37fffc-c53c-4f84-b4c8-5556bb7ff53d", "sighting_of_ref": "indicator--607d30fd-1bc1-417f-9265-7f307e1ef869", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8739f2f-3f29-44ea-b086-6ee3d55eb0a6", "sighting_of_ref": "indicator--607d30fd-1bc1-417f-9265-7f307e1ef869", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb1b98a-4d80-4f2e-b43b-386f1d319a8b", "sighting_of_ref": "indicator--607d30fd-1bc1-417f-9265-7f307e1ef869", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5308d299-53df-4a4a-b71a-b2ad903dcaa2", "sighting_of_ref": "indicator--9b8ba4c9-e008-454e-944b-aaf689395a33", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d92455-d81e-4543-adb1-b38bfdd21743", "sighting_of_ref": "indicator--9b8ba4c9-e008-454e-944b-aaf689395a33", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d87b2f3-17c2-4b64-90a3-56bc0f852bab", "sighting_of_ref": "indicator--9b8ba4c9-e008-454e-944b-aaf689395a33", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0486d3-e19e-4b8f-bfe1-14c666091056", "sighting_of_ref": "indicator--84713680-a1ec-4327-ba1c-07c006b0b31b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977e6df2-e98c-45e3-9eca-f53b594dabe7", "sighting_of_ref": "indicator--84713680-a1ec-4327-ba1c-07c006b0b31b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e3ba31-d8f0-402f-a3e0-e21eb52882f2", "sighting_of_ref": "indicator--84713680-a1ec-4327-ba1c-07c006b0b31b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16fa4c09-7a8e-483a-bcdb-cf6f3a328018", "sighting_of_ref": "indicator--f4805cca-7361-4a56-8cd6-a5f58b2fe99b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7147a49a-9d37-4599-bce7-f8861fe0fffc", "sighting_of_ref": "indicator--f4805cca-7361-4a56-8cd6-a5f58b2fe99b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa575d97-dbd4-4fdc-b1ec-d0ba476a9587", "sighting_of_ref": "indicator--f4805cca-7361-4a56-8cd6-a5f58b2fe99b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7164d4a-b949-401a-9cfa-0f5fc26923a5", "sighting_of_ref": "indicator--04bed743-8ee5-4c6d-8637-f1d213049e65", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f865e623-e31b-414e-bdbc-893da7ad1c77", "sighting_of_ref": "indicator--7c71ff4c-7966-44a3-b01e-8e5893e15784", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b92d264-4551-47cb-a8f5-badafe9650dd", "sighting_of_ref": "indicator--7c71ff4c-7966-44a3-b01e-8e5893e15784", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8018c4ff-dc2b-4860-97d4-6926f433e171", "sighting_of_ref": "indicator--7c71ff4c-7966-44a3-b01e-8e5893e15784", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d3fbd2-238f-4139-8227-37bd8d2add11", "sighting_of_ref": "indicator--7c71ff4c-7966-44a3-b01e-8e5893e15784", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2fbbe9-ab67-4250-9cdf-f2344555fefa", "sighting_of_ref": "indicator--de425306-201d-45a9-8e43-c4e10cfe6877", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82399ce-f202-42b2-8d46-2962bbfea83b", "sighting_of_ref": "indicator--de425306-201d-45a9-8e43-c4e10cfe6877", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f08bffd-9ee9-413a-8f5f-05585dfb9ecb", "sighting_of_ref": "indicator--de425306-201d-45a9-8e43-c4e10cfe6877", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23739f49-5336-49c6-8481-19aaa8a9429b", "sighting_of_ref": "indicator--de425306-201d-45a9-8e43-c4e10cfe6877", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f781d152-a126-4936-bf64-e265c3272384", "sighting_of_ref": "indicator--293e370a-df13-4d9e-88d8-1278df625f6f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d38d2cf-1680-4710-a7dd-f7f1639b1f12", "sighting_of_ref": "indicator--293e370a-df13-4d9e-88d8-1278df625f6f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2965e9c2-ddfb-4566-af7e-8b97f3a73702", "sighting_of_ref": "indicator--293e370a-df13-4d9e-88d8-1278df625f6f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f5ff4c-f641-4f57-a4e8-94059a1ac227", "sighting_of_ref": "indicator--293e370a-df13-4d9e-88d8-1278df625f6f", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e0e214-7ffa-4571-ba54-2f5b1b304ad9", "sighting_of_ref": "indicator--17b6e377-801f-474f-aeb1-5c0dd4be95d7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284b3aae-9f0f-4ea1-8ad0-e32216923588", "sighting_of_ref": "indicator--17b6e377-801f-474f-aeb1-5c0dd4be95d7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3383862d-07a0-42be-bfe2-14c7bfdf912f", "sighting_of_ref": "indicator--17b6e377-801f-474f-aeb1-5c0dd4be95d7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3329a3e0-dc3f-41d5-85de-bb079ca31db8", "sighting_of_ref": "indicator--17b6e377-801f-474f-aeb1-5c0dd4be95d7", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c8a4b3-c79c-4da8-b70c-cecf4b7db96e", "sighting_of_ref": "indicator--84485cf4-7f2b-4341-9307-951b70e393c8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed77cec-60fb-42b3-b24b-39cb243113e9", "sighting_of_ref": "indicator--84485cf4-7f2b-4341-9307-951b70e393c8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b692ef68-2257-490f-b0e0-8f60fcced65b", "sighting_of_ref": "indicator--84485cf4-7f2b-4341-9307-951b70e393c8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c783266-9580-4d62-b837-8e354c45847e", "sighting_of_ref": "indicator--84485cf4-7f2b-4341-9307-951b70e393c8", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d85c81-edb5-4b03-9636-13ee15c9989f", "sighting_of_ref": "indicator--34f9dab8-ab67-4e9e-950c-30efd4448bd8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427dbda5-0f0c-4261-88a2-8bc267ba3f35", "sighting_of_ref": "indicator--34f9dab8-ab67-4e9e-950c-30efd4448bd8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae39cd3-d5f5-4850-b5f5-bcd9f07de4bb", "sighting_of_ref": "indicator--34f9dab8-ab67-4e9e-950c-30efd4448bd8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64eba6d-4640-478a-bdaa-98c967561000", "sighting_of_ref": "indicator--34f9dab8-ab67-4e9e-950c-30efd4448bd8", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0772bdaa-0b95-4dc7-9fc6-cf5d665ac6eb", "sighting_of_ref": "indicator--99b88c5d-5a12-4071-ac1c-b207861d7f50", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3486e646-d192-4088-9386-30e324ada274", "sighting_of_ref": "indicator--ed40c934-724a-4df8-827a-72129bfef6bc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a444b88-f3fa-4d5f-9927-cbb1f7632461", "sighting_of_ref": "indicator--ed40c934-724a-4df8-827a-72129bfef6bc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a95ee0-5905-42ca-a244-d9a167059a94", "sighting_of_ref": "indicator--ed40c934-724a-4df8-827a-72129bfef6bc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03af96a9-d4a8-4313-ad0d-54e2391953c1", "sighting_of_ref": "indicator--aa2b6a32-ddbc-4386-b2eb-4864192415b0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8937899b-c0b8-48d3-98a7-8328bad29044", "sighting_of_ref": "indicator--aa2b6a32-ddbc-4386-b2eb-4864192415b0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e16866-d0a5-4efc-a93e-5cd1dc3b280d", "sighting_of_ref": "indicator--aa2b6a32-ddbc-4386-b2eb-4864192415b0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11117710-8e50-41f0-915f-02836d5b3f25", "sighting_of_ref": "indicator--df5b5f7e-f126-4be0-bd9b-8005f527eb46", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32b2a36-235c-43e8-9727-42b8a7aa0e0e", "sighting_of_ref": "indicator--80ae4544-816b-44c0-bcd7-9bb2a005cdf6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918d454f-d3f4-410f-85f4-ab6df7574f55", "sighting_of_ref": "indicator--80ae4544-816b-44c0-bcd7-9bb2a005cdf6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e28db0-b0a2-4ec1-a26a-09c737982620", "sighting_of_ref": "indicator--baf99b49-5fb8-4760-af85-d84019b5152d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49c29a1-0d99-437b-b099-1a25238c7310", "sighting_of_ref": "indicator--baf99b49-5fb8-4760-af85-d84019b5152d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8edf74-92b4-4845-bd08-07bc5dd98e9b", "sighting_of_ref": "indicator--baf99b49-5fb8-4760-af85-d84019b5152d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4072b437-cd28-4766-bc6d-f96a95108567", "sighting_of_ref": "indicator--43e82451-2546-47e7-a031-0a538301407e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1eba44-92fb-4d48-8580-a89fa08d852a", "sighting_of_ref": "indicator--77a23625-dc20-4fc4-a947-98c09d5d6543", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73155417-05c3-4098-b3df-9eba9a55c9fc", "sighting_of_ref": "indicator--77a23625-dc20-4fc4-a947-98c09d5d6543", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e08de7-1099-4b09-979d-6bc35686bee4", "sighting_of_ref": "indicator--43b999dd-3097-4882-913f-fe46eefd7895", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cfa1dc-18f3-4d4f-b368-3f0f8203aef4", "sighting_of_ref": "indicator--43b999dd-3097-4882-913f-fe46eefd7895", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7b547a-a407-4c60-b54a-ad13a6f14afd", "sighting_of_ref": "indicator--15e319fb-9a9e-436b-bbfa-838ae42ec051", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7deba69b-7ae2-4322-a910-0875e40dbb33", "sighting_of_ref": "indicator--15e319fb-9a9e-436b-bbfa-838ae42ec051", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a24a8fa-9351-4080-927c-15741fdedf24", "sighting_of_ref": "indicator--15e319fb-9a9e-436b-bbfa-838ae42ec051", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56a12b6-a3d3-46e2-95ba-8a333ab73919", "sighting_of_ref": "indicator--8e8c54e6-daa9-40be-9f0e-bd8c0a2471f7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2b84a7-7aa1-44be-bf2d-ea35d53ada05", "sighting_of_ref": "indicator--8e8c54e6-daa9-40be-9f0e-bd8c0a2471f7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb3cb2e-8086-42e2-809a-640f0e3e0933", "sighting_of_ref": "indicator--8e8c54e6-daa9-40be-9f0e-bd8c0a2471f7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f25b1c-4caf-4df9-8a56-6076f71a1349", "sighting_of_ref": "indicator--11c5ac7e-64b7-4edd-8f28-dea0da5a1112", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a7f72c-fc8f-4141-a081-c68cf53c77bc", "sighting_of_ref": "indicator--6eba771f-d589-4cb1-9fc9-991c72c2fe7a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e61ab2b-d633-462c-b976-0ee15ae83417", "sighting_of_ref": "indicator--23f3ecbb-1603-41c0-999f-98275113d0f4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b2d548-9d94-4a9c-9246-fe76f634348b", "sighting_of_ref": "indicator--beeacc2d-a8a0-4f1e-8a65-6b96c3643c05", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75b5c3f-9152-4ab0-bea7-7f47583bb7b9", "sighting_of_ref": "indicator--6ceea255-e71d-4e89-b4dd-089171188807", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5586e814-f4f8-4a2e-a8be-19e2ad5bafb2", "sighting_of_ref": "indicator--fc166a82-54ff-4659-9482-fca8677c8ecd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15cc5c31-f4f2-4b88-beef-dfb8448e3421", "sighting_of_ref": "indicator--07e27f61-38fd-401e-8a31-d1bd303555a3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0daca4e5-cb06-46e1-8cbf-9acc8937b0a1", "sighting_of_ref": "indicator--3615dab0-fdb5-4444-8014-7bd6328faf3e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbd06cd-499d-46ac-b523-4f9e6225327b", "sighting_of_ref": "indicator--aaa627cd-837e-4297-86bd-f5669ccdd664", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd752492-dd59-47b5-ac42-ab7706daf1b7", "sighting_of_ref": "indicator--ea15ea43-ee13-4ffb-b254-bb762cf81a55", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51dc215d-2b36-4c26-b47e-e6daed0e49d5", "sighting_of_ref": "indicator--da809ca1-300e-4710-a0a3-54240171a759", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d944208-aaf2-45ea-b472-9e144ad0fe74", "sighting_of_ref": "indicator--da809ca1-300e-4710-a0a3-54240171a759", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ab74d8-25db-42ca-8248-c753331b8e7d", "sighting_of_ref": "indicator--afd6c454-38c5-4f8d-a2cd-2fe6e781cb26", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145469a1-873b-4859-b5ca-479b07f91b41", "sighting_of_ref": "indicator--2330bf43-daa0-4082-872f-0e8f993a9e93", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5043ac93-66c0-47fc-a8fe-bb7e2507559f", "sighting_of_ref": "indicator--2330bf43-daa0-4082-872f-0e8f993a9e93", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3465ca7-f7e6-486b-8738-0a0b9e9cf2eb", "sighting_of_ref": "indicator--2ce11960-39b3-4433-9d51-603152c2457d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b18d33-71b1-4738-a9a5-d46858cd4624", "sighting_of_ref": "indicator--ab6f3e88-6435-43f4-b591-ba3b7c2c5eeb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750cd0d3-4d12-4998-b14d-d4efa5f6221c", "sighting_of_ref": "indicator--036fb372-0ecc-41d8-b394-4d00ba56dc4c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa587d6-2d41-48fe-b2f0-79c11366139a", "sighting_of_ref": "indicator--81231a67-1d67-4fe9-b509-b538a5586968", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d870a8-8464-4f0b-aac0-c232a8f722cc", "sighting_of_ref": "indicator--22d04c48-dd09-482f-8010-e74dd16c5e17", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104765cd-c2de-4e7c-b512-e7ef6135ddb2", "sighting_of_ref": "indicator--4f311395-0988-4b22-913b-1884ebafd298", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6386ff90-6c77-4c38-b5be-cd9bbdf8b90d", "sighting_of_ref": "indicator--bc8c121d-d1c2-447a-b34c-0aa6255a2df7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04640de-bacc-4a18-be81-2fdaf24c717c", "sighting_of_ref": "indicator--814ba05b-c460-4c66-9bf2-4fbe437a330a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a689fa-331d-49fb-886c-0c9ec32a2a9b", "sighting_of_ref": "indicator--e7d2575f-fb75-4fb5-a64c-ab4eab4a5722", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfce501-375b-4466-9741-842dfe7d18e0", "sighting_of_ref": "indicator--af26d49c-6a22-40a6-aefc-cfb0e0ac8387", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0ee23b-9ef6-41df-9733-9cc3a47e7b25", "sighting_of_ref": "indicator--d2673314-45f4-4441-895d-a3c1159ffc36", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cea24ef-c5cf-49b5-98d8-d5930e856d0d", "sighting_of_ref": "indicator--1f2da26b-c097-49ed-aff7-4ee42399d86d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf13179-a958-4b9b-8299-58f093bc0695", "sighting_of_ref": "indicator--e38e1d4b-236d-47f3-a020-7e5c2d2c116a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cab9d35-94a2-488c-9c8f-f1cff8030da3", "sighting_of_ref": "indicator--f8283357-9882-4043-a444-9f69ed413d48", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bac965b-6a7c-458c-9a89-061e7bb3d593", "sighting_of_ref": "indicator--f8283357-9882-4043-a444-9f69ed413d48", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28622d33-4175-44da-b766-d91dd402735d", "sighting_of_ref": "indicator--a8462cc9-95c3-42eb-adae-aa515266aafa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a56e0b-fd95-42a0-9d61-80fdda1a00f5", "sighting_of_ref": "indicator--bfcd5e94-b718-46d6-b296-50fa6a3168e2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57ccbdc-d118-4c4f-b31a-898d91c8724a", "sighting_of_ref": "indicator--ea0207e4-dd89-4cda-825a-167f71ecbb5d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8078339e-7398-404c-8549-f0d55e2d5a4d", "sighting_of_ref": "indicator--16881ee6-581b-474f-8ba6-f264f5316eb2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c082229-5c1c-4c8a-b1b9-61db029a7235", "sighting_of_ref": "indicator--11ad060e-3a97-4b56-bf29-6bba45f73887", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e91447-571f-4922-9d34-fb30e3d860da", "sighting_of_ref": "indicator--bee7de7f-5d19-4cd5-b236-e04696f98e82", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1066a0d6-c895-44ae-b6c7-dafecce85d9e", "sighting_of_ref": "indicator--f04ec321-4176-48b9-bb61-c546d7783bb5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac96ebd-7025-4109-8df1-47534b36bb48", "sighting_of_ref": "indicator--d21cfbd2-795e-4dff-b11f-71bd174b9529", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1419cd9d-b5a4-4403-a8ef-b833505620c1", "sighting_of_ref": "indicator--a1082908-fb5e-4be1-8a12-771f93f2a413", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e79df6-4b2e-4123-8fef-1717289463a1", "sighting_of_ref": "indicator--8995899f-0718-4a7d-9560-a548486b34bb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6213f8-1e90-4d19-b455-4462c41afe7d", "sighting_of_ref": "indicator--8995899f-0718-4a7d-9560-a548486b34bb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234213e8-46df-4235-93a4-74f80f56e000", "sighting_of_ref": "indicator--cdd47949-5a27-40ce-abe1-42f611b3a3e1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87fc1ba-ba14-4f6c-96e4-a926c8763c44", "sighting_of_ref": "indicator--00ce89c2-3259-4def-a120-8a24c28f6f91", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7044a50-198b-42af-b9d3-6d5a51ebea70", "sighting_of_ref": "indicator--e929c1a3-68c9-4299-a1e8-8a586291e397", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0952d1-eb61-4308-94ee-2e17e926ff8c", "sighting_of_ref": "indicator--5062fa21-6f1c-491d-a8c2-c80cd0e02165", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a045d6-4b12-41dc-898d-065444848421", "sighting_of_ref": "indicator--e4be0724-7f52-4eaa-bb91-d4ba5a4d9872", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e7a4bd-20f4-4dff-bcf6-bbc3247edca0", "sighting_of_ref": "indicator--1932b6db-debf-46fb-a6b3-161de716efc0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfabf8a5-eff4-4181-a2a6-d96be3f7b8af", "sighting_of_ref": "indicator--1932b6db-debf-46fb-a6b3-161de716efc0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ded7a9-1a7e-4c9c-8cc1-d9c7dda23c85", "sighting_of_ref": "indicator--38e305f0-5aeb-4c72-b6d5-b9fd145e915f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c19a8e7-5010-4f7a-9784-8a059e91e95e", "sighting_of_ref": "indicator--38e305f0-5aeb-4c72-b6d5-b9fd145e915f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7614f14c-3742-408d-b025-9b43d3bf592a", "sighting_of_ref": "indicator--38e305f0-5aeb-4c72-b6d5-b9fd145e915f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f097968-0dd2-4190-a20c-b65727ba2a35", "sighting_of_ref": "indicator--8219dad1-38d3-48b1-a3df-612980080f9b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70348bd-3145-4c75-a1ee-243703e8e3a6", "sighting_of_ref": "indicator--8219dad1-38d3-48b1-a3df-612980080f9b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf8ebb2-7cf3-4f25-9751-08c0bedc10fd", "sighting_of_ref": "indicator--2469143d-c543-4ffe-98b9-6b264b46bc77", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b61d0b6-1a79-4aee-a3ff-06d2440ea20b", "sighting_of_ref": "indicator--2469143d-c543-4ffe-98b9-6b264b46bc77", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ce98bc-13e1-4fba-aa99-7b753ae0b930", "sighting_of_ref": "indicator--970ae834-6fe7-46d0-b065-ba438666f449", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a77b467-5723-479d-acc2-87bc03bc4ea9", "sighting_of_ref": "indicator--65778357-dea6-4d54-a994-e256c15e1207", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a748803-6ada-476b-91d0-59061fd2aee6", "sighting_of_ref": "indicator--020cd1d2-53c7-4c6b-a2dd-838ffe66bf2d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21daf746-9c3d-409a-a060-ad156f48627c", "sighting_of_ref": "indicator--2adecd16-3079-4a5a-ba91-be3005ed67b7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42ee1fe-2da6-4846-b9d5-4093d4cb88db", "sighting_of_ref": "indicator--2adecd16-3079-4a5a-ba91-be3005ed67b7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35992452-0dac-453a-b138-9f6882cb1e74", "sighting_of_ref": "indicator--b3863960-c047-4a2f-b41a-3ca594e07361", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db9a986-3020-4533-ab7c-d9547424ddd5", "sighting_of_ref": "indicator--b3863960-c047-4a2f-b41a-3ca594e07361", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98cd82e-1ad8-4251-8596-f1a1fc418b5e", "sighting_of_ref": "indicator--b3863960-c047-4a2f-b41a-3ca594e07361", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b86983e-5f85-4e05-9e34-4793a9fe64a4", "sighting_of_ref": "indicator--b3aafeeb-3322-455e-947b-a5a63849ccfa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981466bf-6786-4385-aa8f-5374de564dd9", "sighting_of_ref": "indicator--a7269b8c-52aa-4e29-917d-af624d83cc2d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d8b2f5-404d-433b-a04f-cac14ba1e3b1", "sighting_of_ref": "indicator--be78e6ac-f76d-4fee-8070-50dc783d48c7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fe2ffd-ad19-4c30-ae1c-a76cbb87a2bb", "sighting_of_ref": "indicator--d4355ced-ea5b-4ac5-9907-6ce9f37f35c9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52bc1108-883c-4417-bd04-f778434cdce4", "sighting_of_ref": "indicator--b2f73ccf-d300-4138-9df2-ebf3ea21097f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac9ba4e-e57b-4a8a-a721-c858091633a1", "sighting_of_ref": "indicator--72e2bf59-e692-44ae-9039-cd2f0b73ff2c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e93b8dd-1946-4f87-a753-38ac7ad0dcc0", "sighting_of_ref": "indicator--72e2bf59-e692-44ae-9039-cd2f0b73ff2c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5fdcba-767f-4068-adaa-8484b1db7655", "sighting_of_ref": "indicator--72e2bf59-e692-44ae-9039-cd2f0b73ff2c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f09b9f6-d09d-4097-8fdd-942293c3b172", "sighting_of_ref": "indicator--76b59d25-e9e1-4de3-a5be-b9aedb4d128b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18741ad-3e87-41b4-a908-0b26530b27b7", "sighting_of_ref": "indicator--76b59d25-e9e1-4de3-a5be-b9aedb4d128b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab9109a-5456-4731-ab7a-79b74b9639d7", "sighting_of_ref": "indicator--2eb47f07-75b3-43fd-8e7c-c7059bb87363", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc89b10-8917-4433-9ee9-0d99885bde06", "sighting_of_ref": "indicator--2eb47f07-75b3-43fd-8e7c-c7059bb87363", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a820407f-6e16-4bda-9719-ca5cd58b3b2e", "sighting_of_ref": "indicator--61ff1665-bb8e-42dd-b5f3-b4c33d732a21", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca16e66-dead-412d-a0b4-d4159fdeb265", "sighting_of_ref": "indicator--30eb439c-6926-450e-9e15-992f00ff4996", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83c836d-e74d-4c1f-a0c9-4776567c65cc", "sighting_of_ref": "indicator--82d369c6-bddf-4c6f-b83a-95c4f4c72bf6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c60c23-0653-4a4b-a51a-644cca32ca07", "sighting_of_ref": "indicator--b88c9298-01f1-4d0d-a45d-b8059159f9a9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f7d679-57e5-45a2-9f5c-91243c4dd102", "sighting_of_ref": "indicator--b88c9298-01f1-4d0d-a45d-b8059159f9a9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e42db18-7199-44c7-b480-9323435efc92", "sighting_of_ref": "indicator--6ba05daf-5b87-49fb-8de2-3f29124057f4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575d69fa-0111-47d9-bcea-dd04a3b7a25e", "sighting_of_ref": "indicator--fc6044d7-4324-4393-ba53-eb8d284a1ca9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da932ac8-b983-4532-870d-addd397a8fc4", "sighting_of_ref": "indicator--4e5daf08-1a96-4aae-8fed-3161b2625e51", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e26b0e4-7b46-4964-8910-b2b506e5f260", "sighting_of_ref": "indicator--2b83a4ee-0153-478c-9c36-60e1bbbd4c0a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b203e8-eaf4-4d8e-bf7d-6baebe22d003", "sighting_of_ref": "indicator--147421cb-fe5d-4b00-af25-de688bbb4863", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d480285-4812-40d1-98e8-975a9ebbe53c", "sighting_of_ref": "indicator--a39f909b-685f-4c87-ab64-13c54e42def2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ab6b03-9c94-48a2-ae15-4ca77b7e5f2b", "sighting_of_ref": "indicator--173a2966-0bef-4f8e-aca0-22d877b6067a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d61cc5f-4318-41ad-9ad5-1328751dea08", "sighting_of_ref": "indicator--a0e0f057-f8f8-4a1e-b6a5-acfbd2da7b73", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c1ba3c-1953-4aea-a3a1-49d958ec77c7", "sighting_of_ref": "indicator--af4efbba-1ed1-4c79-8161-fd4ad7fe13d6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489cdfe4-e010-4763-8c62-1649ea467311", "sighting_of_ref": "indicator--5059b0e4-bf66-4409-8d39-e4701b4ab207", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2cef849-288d-40c5-8c3f-326903569647", "sighting_of_ref": "indicator--b474b16a-f7ed-4989-ba46-b5f22b6384c4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bab6f61-c302-4bd9-8f8b-fadb302230ce", "sighting_of_ref": "indicator--e2749783-13ef-4fa2-b060-72146ac77106", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc603d4a-ff71-4f46-b522-a451e4c66ce5", "sighting_of_ref": "indicator--b18555f3-5c5e-4b1a-a701-0539c79b2342", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8079236-6c52-4a8e-80db-50f60ee585c1", "sighting_of_ref": "indicator--3a54fad2-df6e-4ed9-99a2-0622a717f132", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aadbe64d-666c-47cc-9e59-261c7618099b", "sighting_of_ref": "indicator--2de111b2-bef3-4b27-af3d-62f2309c8278", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a701c89f-291e-4440-81dc-7f7cae28b367", "sighting_of_ref": "indicator--8cdea345-8a8d-4f08-ab34-df021a958360", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715370c7-0549-4655-acfd-052ddea27478", "sighting_of_ref": "indicator--4bb2d75f-9e94-4c24-abbc-d936b4edbffc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5245f97f-7ce3-4501-8b12-bffc22a55966", "sighting_of_ref": "indicator--4bb2d75f-9e94-4c24-abbc-d936b4edbffc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6675e9a0-b81a-456a-9631-bb65e07ee5dd", "sighting_of_ref": "indicator--323382f6-66f5-4e5f-ae37-05b8e95af8bb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40414a6d-5f1b-4d77-a7cd-a3dbd4b07b94", "sighting_of_ref": "indicator--0e7da97f-fa11-449b-909e-e10f1fbb1bb2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2204fdb-d3d3-4f0d-b2a0-32a7677fd640", "sighting_of_ref": "indicator--b5129638-f065-4ba4-ae28-591dd4ec4e92", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201d2ea3-d424-4b3e-be5c-3f718dab8503", "sighting_of_ref": "indicator--b5129638-f065-4ba4-ae28-591dd4ec4e92", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac4243b-7c7b-4a5e-b2f5-63a71b82f1bd", "sighting_of_ref": "indicator--7ac55358-627e-473a-8d68-c3e412fe7e88", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0772f459-5f1b-4fee-8610-9ce82e6432d3", "sighting_of_ref": "indicator--7ac55358-627e-473a-8d68-c3e412fe7e88", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1aafa7-53ab-4df6-a134-121a522547fa", "sighting_of_ref": "indicator--7ac55358-627e-473a-8d68-c3e412fe7e88", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620b8745-cfac-4a2b-9a0f-8dd4f41d6fa9", "sighting_of_ref": "indicator--25ee9690-d801-4415-990d-846e26942a38", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9303cb5d-a7a8-4729-8ad3-225d6a639651", "sighting_of_ref": "indicator--25ee9690-d801-4415-990d-846e26942a38", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849456cb-6e17-473f-ad72-a668ba92f64d", "sighting_of_ref": "indicator--82e1c76a-91a6-4dcc-897d-5a44bef14a16", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5445b9-08e5-4963-a21d-5ebad42aa691", "sighting_of_ref": "indicator--82e1c76a-91a6-4dcc-897d-5a44bef14a16", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec17a16-6918-42f8-8d64-eede177541c0", "sighting_of_ref": "indicator--88b8b8dd-7179-450d-bb29-caaaa7fccf24", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b600d90-c4e2-482f-8cc5-c54162c94c5c", "sighting_of_ref": "indicator--3e003333-722a-429d-a926-be5b34b12802", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3362372-7aeb-4d46-91c7-a6671663760f", "sighting_of_ref": "indicator--3e003333-722a-429d-a926-be5b34b12802", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a520db2d-fe59-4f68-b641-26eee591c26f", "sighting_of_ref": "indicator--3e003333-722a-429d-a926-be5b34b12802", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b933b8-6d3c-43e1-8ee7-c2758ead8553", "sighting_of_ref": "indicator--4f04a2ce-748e-488c-b933-2fd61b2272f7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86540829-837d-4595-8682-d7ac019fab36", "sighting_of_ref": "indicator--4f04a2ce-748e-488c-b933-2fd61b2272f7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b74cc46-0bc5-4e5f-9ffd-404365afe061", "sighting_of_ref": "indicator--4f04a2ce-748e-488c-b933-2fd61b2272f7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44cdd08c-6f99-4c79-86bb-02b7b2702fe4", "sighting_of_ref": "indicator--6982bdd8-36f2-4740-9c7d-81aa2b89b04b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--178008e0-7306-40a5-b540-d9c35aab3785", "sighting_of_ref": "indicator--6982bdd8-36f2-4740-9c7d-81aa2b89b04b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0d2d1f-797c-49ec-904d-392f22529a05", "sighting_of_ref": "indicator--6982bdd8-36f2-4740-9c7d-81aa2b89b04b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee244f5-a398-4fbe-b58e-57c49bb34fdf", "sighting_of_ref": "indicator--ebd5fb65-2fe7-4d54-a84a-a8f5edb4376d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07cfa35b-7c10-45c2-bcfb-0b972955f0e0", "sighting_of_ref": "indicator--ebd5fb65-2fe7-4d54-a84a-a8f5edb4376d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884c17e9-ee02-4094-b1cf-175dbf56a73f", "sighting_of_ref": "indicator--ebd5fb65-2fe7-4d54-a84a-a8f5edb4376d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6361b69-3b5a-479f-8ab5-f5d2a53118da", "sighting_of_ref": "indicator--2fc8372e-1036-4a48-979d-6afcc77979d2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d0ae73-bea2-42b4-93f3-12d61fcea1d2", "sighting_of_ref": "indicator--2fc8372e-1036-4a48-979d-6afcc77979d2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8f73bd-c8a7-4039-b3a7-a8f2caaf8239", "sighting_of_ref": "indicator--028df97c-22cd-4b8c-b6b5-456b7ede2860", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9bec372-3922-4473-bddd-c0f39c6054cb", "sighting_of_ref": "indicator--028df97c-22cd-4b8c-b6b5-456b7ede2860", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156334f8-5b80-44ae-8e9d-9288f18a0bb0", "sighting_of_ref": "indicator--028df97c-22cd-4b8c-b6b5-456b7ede2860", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4815fc3e-134d-42af-a01e-9685c354176c", "sighting_of_ref": "indicator--b9cb82fb-1f28-455a-885d-8440d335ba6e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0366df-9c48-40d5-b6b5-0f4330a320f3", "sighting_of_ref": "indicator--b9cb82fb-1f28-455a-885d-8440d335ba6e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffe5064-df15-4a40-92a1-128a43b15d7f", "sighting_of_ref": "indicator--b9cb82fb-1f28-455a-885d-8440d335ba6e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d03a3bd-b974-40cd-be0d-8ef3c72a4a17", "sighting_of_ref": "indicator--263ee880-307e-4f89-b389-a6a3921224ce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c90b30-b346-47b7-83b2-751eadd80d0a", "sighting_of_ref": "indicator--263ee880-307e-4f89-b389-a6a3921224ce", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ea1bc7-69d3-4854-b131-fc278dc0b73f", "sighting_of_ref": "indicator--263ee880-307e-4f89-b389-a6a3921224ce", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a37cd71-6766-4777-bb56-495cbf0b9480", "sighting_of_ref": "indicator--b8e696e7-8e87-43ce-95b8-dddcb70be8cd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ab05c7-a4d5-4c88-9f9d-a1427bd51ad3", "sighting_of_ref": "indicator--b8e696e7-8e87-43ce-95b8-dddcb70be8cd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a6d9ec-427a-4e99-b645-8b77abeec5a4", "sighting_of_ref": "indicator--b8e696e7-8e87-43ce-95b8-dddcb70be8cd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f317d20-624a-4b37-881c-83d4ea55ffef", "sighting_of_ref": "indicator--06d5a91c-e09c-44cb-9976-c469ad23617e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3811a03-656d-42ce-b4f7-20d1591ec4e2", "sighting_of_ref": "indicator--06d5a91c-e09c-44cb-9976-c469ad23617e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0488aa-ce78-40a2-981d-662cf5f6ec00", "sighting_of_ref": "indicator--7874b053-9741-470c-bcd4-79a71af905d1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6775084c-31c4-4a33-a0b0-ae5738cc17a0", "sighting_of_ref": "indicator--7874b053-9741-470c-bcd4-79a71af905d1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd12f97-b173-404d-9427-cbd2f550192f", "sighting_of_ref": "indicator--f88dd5e8-8619-4359-82ec-887865316297", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db24f37-59ef-4fcd-9ad7-02693d3bfbae", "sighting_of_ref": "indicator--f88dd5e8-8619-4359-82ec-887865316297", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7929bffe-e435-4eed-8cc9-807419f815a7", "sighting_of_ref": "indicator--f88dd5e8-8619-4359-82ec-887865316297", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d62640-8ff6-4406-b105-923110e2ae0a", "sighting_of_ref": "indicator--cb45dedd-3731-4214-ae78-ebb8bfd94ae0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7157cb7d-44de-4baa-92d8-4ae40d772028", "sighting_of_ref": "indicator--cb45dedd-3731-4214-ae78-ebb8bfd94ae0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf92d164-2866-4c14-91ed-069ec1eeed64", "sighting_of_ref": "indicator--cb45dedd-3731-4214-ae78-ebb8bfd94ae0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ed01c4-5724-4f07-8852-4e0d3c67ead4", "sighting_of_ref": "indicator--8e50075c-8617-45c6-afd4-6f4a523694e8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6787d18f-8df2-45c3-bfdd-25a3cfa31560", "sighting_of_ref": "indicator--209834bd-60f8-4349-9f70-3fb1bdde1703", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f34da0-7d6e-4b09-9690-d8889ad8e482", "sighting_of_ref": "indicator--209834bd-60f8-4349-9f70-3fb1bdde1703", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a15f88-1e81-48f9-8098-42e1ce150c9b", "sighting_of_ref": "indicator--171ce74c-a94a-4612-8b40-f62d5842aa62", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b223c59b-1368-48ff-9e5b-025321b0d9de", "sighting_of_ref": "indicator--171ce74c-a94a-4612-8b40-f62d5842aa62", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fbc219-4e2d-4e7d-ba95-1cb9f8fcc9cd", "sighting_of_ref": "indicator--44e827ef-763b-4ac8-90b9-ee6008ed5a8b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18cf418-0df0-460f-bc91-0ef4aa40fe4d", "sighting_of_ref": "indicator--76942c43-0e9b-442d-b688-06d1623c87c6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921db6db-4adf-4c22-a1bb-57ac2d12f90a", "sighting_of_ref": "indicator--9a94668f-130f-4a83-aa2a-7ea61be269d6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd40f3f8-87e2-4718-aa1b-ad8723360507", "sighting_of_ref": "indicator--84139952-dc64-492b-9862-03eb89732af2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc328fb-be20-4d0f-8d3f-74dbcc4d58ce", "sighting_of_ref": "indicator--cfbaff81-546b-4db2-868a-a74963e111f4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99a980e-c6cd-4e3e-9df0-57d39d935bf3", "sighting_of_ref": "indicator--3615c213-0960-40d9-a081-80f0447ef651", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e7cf5c-0706-4e02-8f2f-2471fa0e6206", "sighting_of_ref": "indicator--91b16e31-f534-49a4-85f9-9b107c0ecf46", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d3325b-e5db-41f6-8f2e-f253fd3683ac", "sighting_of_ref": "indicator--052df2d7-17d8-4703-b876-fdd61e0decad", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d09b11-359b-4fb1-a229-d289cbe8115c", "sighting_of_ref": "indicator--052df2d7-17d8-4703-b876-fdd61e0decad", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b318796f-4d4c-40c4-b45e-dd95ae278796", "sighting_of_ref": "indicator--052df2d7-17d8-4703-b876-fdd61e0decad", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d2f40d-8b73-43b7-bf88-cdee192ee11f", "sighting_of_ref": "indicator--052df2d7-17d8-4703-b876-fdd61e0decad", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9429b0-a11c-4334-ab00-280b0e9b3e5c", "sighting_of_ref": "indicator--adf10aea-9d0c-45ac-bf40-0920c12fa6bc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3faae967-72f2-401c-963e-d33d35abd998", "sighting_of_ref": "indicator--d56634d9-464b-49a5-8522-d38848b5b642", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbaa0df9-7ce1-4150-8485-ba0fc431bb4c", "sighting_of_ref": "indicator--3af68b80-d759-4093-bac6-e1cebd7e6340", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a5f718-a2ed-452a-a5a3-0c5a28ec21c9", "sighting_of_ref": "indicator--dcf77e87-ce47-47c2-b76e-5d57b4fc69be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c980ce-8bd7-4e1b-8ba7-17659071d0c5", "sighting_of_ref": "indicator--13f400c0-0046-4bb9-acd5-3efab57495d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34601479-1eca-4016-8610-c6c37002bbb0", "sighting_of_ref": "indicator--7aaf3713-76c7-4abb-85d7-8fd24d9ac920", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1afb963c-e27a-47fb-b73f-ac47e8299273", "sighting_of_ref": "indicator--7aaf3713-76c7-4abb-85d7-8fd24d9ac920", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e49974-ab53-49f1-8483-16965f6335ad", "sighting_of_ref": "indicator--e2cb0597-4786-4400-a2a3-bef4d2b2df00", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c24e168-f09e-4446-8aa6-494c5d0fbe32", "sighting_of_ref": "indicator--4206da68-011e-4340-82db-b74a2159cb25", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fa9f2f-3284-46fc-83cf-9f1a1ca2471d", "sighting_of_ref": "indicator--f1933f61-77dc-4bc9-a606-84ff0207a2aa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c381ac54-6db9-4182-be1f-e55077d31fc7", "sighting_of_ref": "indicator--e8686d71-2f5e-4dde-93ad-f52544b05241", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c032c06b-2391-401c-a826-0095210b0fa7", "sighting_of_ref": "indicator--23351e6d-a808-4e5f-855d-de03847da417", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e482cd01-351b-46be-aa5b-4de4bf6267b6", "sighting_of_ref": "indicator--23351e6d-a808-4e5f-855d-de03847da417", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d921af24-bddc-4629-aa06-601f63ab6547", "sighting_of_ref": "indicator--23351e6d-a808-4e5f-855d-de03847da417", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5f331d-0993-4bbf-a05d-61424bf44564", "sighting_of_ref": "indicator--2429a865-f1d8-41d8-a0dc-6f14120eca05", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542cf12c-4a87-479e-b32b-97b8bd4f0407", "sighting_of_ref": "indicator--2429a865-f1d8-41d8-a0dc-6f14120eca05", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32cbf8f-b9d9-41dd-9aa3-a3ca4129823f", "sighting_of_ref": "indicator--2429a865-f1d8-41d8-a0dc-6f14120eca05", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e95492b-3844-4f44-b3bb-71679c74c4fd", "sighting_of_ref": "indicator--bab2fbc6-ac50-40fa-99e6-6640d19996f0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8dfb7ce-4899-41d5-b112-e1f8638defaa", "sighting_of_ref": "indicator--bab2fbc6-ac50-40fa-99e6-6640d19996f0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f137e632-6f09-4f10-bebd-5db7ecf896c3", "sighting_of_ref": "indicator--6c37297a-35f8-4796-a29b-71ccfe78d5b3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d230369-a7ac-4a32-96a6-045e9a17fa1b", "sighting_of_ref": "indicator--6c37297a-35f8-4796-a29b-71ccfe78d5b3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33058371-4c62-48e7-ad3f-b40408484ccb", "sighting_of_ref": "indicator--6c37297a-35f8-4796-a29b-71ccfe78d5b3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45dd3d12-8fbb-43a5-805f-cf5fc5458e3e", "sighting_of_ref": "indicator--7ce2bbc3-99f1-4f9e-a8b0-19fa0a206857", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f446ff37-3310-4ef6-ad13-107ca0adcf5e", "sighting_of_ref": "indicator--7084cb87-4868-446b-bb2f-432be234bc7f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaefe72d-1b03-4dba-b293-60a64f844c31", "sighting_of_ref": "indicator--6cba1f7e-c181-46c9-82a3-f92537dedbac", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f797bf06-f563-4f0b-a5a6-69c109755204", "sighting_of_ref": "indicator--7c2112d8-2152-43f2-b73f-cfc06509819e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b172e6-d9a5-4498-975e-b79b2e79148a", "sighting_of_ref": "indicator--a1e31b3d-cd47-4af7-b343-5f66ee529236", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2efd5b-7580-49ec-b5e9-3a91905fbf82", "sighting_of_ref": "indicator--a1e31b3d-cd47-4af7-b343-5f66ee529236", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6559c667-a16b-4673-a1a0-1562eae4663d", "sighting_of_ref": "indicator--a1e31b3d-cd47-4af7-b343-5f66ee529236", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c2924f-f9de-4963-9fb7-f7491c105b96", "sighting_of_ref": "indicator--f1229970-2083-4bc0-8fa4-e04567385261", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdc0296-b8ba-4059-b319-73b6c7e98fc8", "sighting_of_ref": "indicator--f1229970-2083-4bc0-8fa4-e04567385261", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6eff9f0-4e44-4925-ae7c-e13f528cfe02", "sighting_of_ref": "indicator--f1229970-2083-4bc0-8fa4-e04567385261", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4293f34-9325-49a8-8c8b-9875db6c9087", "sighting_of_ref": "indicator--dd97b53d-61c5-45f3-9cbe-d1ab9cb1e79e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a025ad08-58ee-4340-ad5f-5e365b251e34", "sighting_of_ref": "indicator--dd97b53d-61c5-45f3-9cbe-d1ab9cb1e79e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3076a86f-9aa4-4393-8240-6fa4f6cfe3cd", "sighting_of_ref": "indicator--dd97b53d-61c5-45f3-9cbe-d1ab9cb1e79e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c96ea1e-485a-4409-b83c-4d6b1c29bc9a", "sighting_of_ref": "indicator--c6f09240-dcce-49ca-9721-1ab9fc80deea", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d1b7e7-5a79-4c94-96a0-77b98c422624", "sighting_of_ref": "indicator--c6f09240-dcce-49ca-9721-1ab9fc80deea", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23c25b9-695f-4a0e-a484-95da87d5ac4b", "sighting_of_ref": "indicator--f525d1da-86c5-40d3-8d14-6b6b8fe19011", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ffdfd3-0b17-4dc1-b13c-7c84da437504", "sighting_of_ref": "indicator--f525d1da-86c5-40d3-8d14-6b6b8fe19011", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90bd9028-3ffb-429d-97db-729da3d19526", "sighting_of_ref": "indicator--f525d1da-86c5-40d3-8d14-6b6b8fe19011", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa04acb-22d9-4200-b657-0b39de8787fe", "sighting_of_ref": "indicator--5aad4fbf-8252-4133-9551-10882b48e25e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210744a5-3b9f-4fcf-8f15-b1d67487ca3a", "sighting_of_ref": "indicator--350e3708-2b3b-4074-a71e-d6032ca350da", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72502b16-d45d-44fb-ad79-514bf3db4727", "sighting_of_ref": "indicator--cbafb9a9-5b38-4b5a-8762-fa48a5fa7f3f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee3a30d-0bb7-4a61-9ca0-749667d11f23", "sighting_of_ref": "indicator--cbafb9a9-5b38-4b5a-8762-fa48a5fa7f3f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee826c42-df60-472d-9e54-fb01954ef001", "sighting_of_ref": "indicator--cbafb9a9-5b38-4b5a-8762-fa48a5fa7f3f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69c7b4d-4ff0-4a60-9a4a-7a2a42cf5a02", "sighting_of_ref": "indicator--63bcb9df-e55a-48d0-9bb7-eb696dc8c569", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512a8c11-cef5-46ab-b509-89423d49cc81", "sighting_of_ref": "indicator--7ca0c78c-0c2d-4082-b74e-3b70526fac3c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90829af6-259f-4681-8b20-b8930f144ec6", "sighting_of_ref": "indicator--8e2c4566-5452-495f-8783-50b541f5e566", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0254cd-60c0-4857-b481-395622ef4f36", "sighting_of_ref": "indicator--df8b90ea-066d-4971-a623-05d4ab391e18", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4fd8b51-189b-4d53-bbc7-6f08911f0d5c", "sighting_of_ref": "indicator--d0b794c3-0f62-402b-8b5c-1d2fc7389750", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d42c3a-4c93-41aa-a4cd-6292995324bc", "sighting_of_ref": "indicator--d0b794c3-0f62-402b-8b5c-1d2fc7389750", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c16f531-8330-45d3-850e-0bfb4719eb69", "sighting_of_ref": "indicator--d0b794c3-0f62-402b-8b5c-1d2fc7389750", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68cf0937-b9be-45de-9302-e6ca6685e984", "sighting_of_ref": "indicator--58bd70c9-3c4b-41c5-9776-0d28d79c09fc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb8c548-bcd2-460f-ba06-abe03d3eef37", "sighting_of_ref": "indicator--86ab577f-2892-4475-bf87-cae2cf52ee63", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1147354a-85ab-4c57-bc9f-0ef4480c23d5", "sighting_of_ref": "indicator--9493a34c-ecc7-49ec-8151-38ffc5724788", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3475751-2e8f-46d7-ad6f-7d6935dab38e", "sighting_of_ref": "indicator--9493a34c-ecc7-49ec-8151-38ffc5724788", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbb5a90-688d-40a5-bca2-5b15ed8c4c9e", "sighting_of_ref": "indicator--9493a34c-ecc7-49ec-8151-38ffc5724788", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2f20ad-f288-4a6f-9d22-f841246ee00d", "sighting_of_ref": "indicator--3cab0076-d6b8-4016-bb05-7b138fc2df24", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d00f4d6-94d4-4552-a115-2f3edc8d61ba", "sighting_of_ref": "indicator--823cafa3-1d9c-4086-b8d9-55fb387db4a8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0914ce4f-315a-4291-b700-d27dd4d299f0", "sighting_of_ref": "indicator--823cafa3-1d9c-4086-b8d9-55fb387db4a8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a436929b-e96b-4ca8-a4fe-0599864d7065", "sighting_of_ref": "indicator--23787c43-14b3-44c5-a586-4e8e4f74423c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46677744-e1d5-4055-a6ca-158a80f211af", "sighting_of_ref": "indicator--bfb63f08-641b-4617-8c5e-d2dad06238da", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0b8189-1fd3-4bfc-a620-5fffff746bd3", "sighting_of_ref": "indicator--0695aef3-0b52-4b44-b0a6-d6b0ec19bee1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182401cc-0cb0-4016-9a28-108ee90b5524", "sighting_of_ref": "indicator--5930df90-7edc-4940-9fc9-528761f4b252", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac88e798-2ac8-4e34-a439-597976f7e6d7", "sighting_of_ref": "indicator--ce390f30-5eea-4e3c-815d-47fc536e38c4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c95395-1844-441b-8e51-302eeebe1b66", "sighting_of_ref": "indicator--ca90d5b0-22a5-4413-97cc-b23219fdaa25", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ae8294-311f-4c75-a036-d6d6590739c7", "sighting_of_ref": "indicator--ca90d5b0-22a5-4413-97cc-b23219fdaa25", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc662f4f-7c37-4bb7-b102-425aa4d9fefa", "sighting_of_ref": "indicator--ca90d5b0-22a5-4413-97cc-b23219fdaa25", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0424aaba-1063-4641-a697-8a31ec04a51f", "sighting_of_ref": "indicator--64571acf-daba-4cb8-9351-5957715d91c1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd394b3-eb1b-49c2-a0b9-c7f6fbfa1c2d", "sighting_of_ref": "indicator--d427365f-dd60-4310-bf0a-e6e78957ddda", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f025dd-f2dc-4931-baa3-f32c39364bc2", "sighting_of_ref": "indicator--d427365f-dd60-4310-bf0a-e6e78957ddda", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787cde68-7fab-4743-a7e3-f2a3803fc8f3", "sighting_of_ref": "indicator--d427365f-dd60-4310-bf0a-e6e78957ddda", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31290113-b51a-4cb4-879d-7c0dc1f1a285", "sighting_of_ref": "indicator--4f8f1e4f-dfae-4908-a0c6-f68467544eaa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b507b9-c52a-4fab-9e0d-683fd1940c16", "sighting_of_ref": "indicator--2d5e8513-f232-4150-b05b-9630be60ccc2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea5e744-bcb6-4f1d-9664-7e03fe619b1c", "sighting_of_ref": "indicator--2d5e8513-f232-4150-b05b-9630be60ccc2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fea41ff-b4c8-4c54-8caa-ea1e19a0a40c", "sighting_of_ref": "indicator--599001c0-bffa-4020-899f-f412cbb94e4a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859d6911-6bb7-40b7-9810-70fa004ee52a", "sighting_of_ref": "indicator--76429bd8-b52c-4bfb-af5f-7c9f10455d73", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326e9f25-5512-41c8-8a32-04de8c77fda8", "sighting_of_ref": "indicator--76429bd8-b52c-4bfb-af5f-7c9f10455d73", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7598b871-3dac-4991-b4f8-bd596b87cc3f", "sighting_of_ref": "indicator--76429bd8-b52c-4bfb-af5f-7c9f10455d73", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3fb119-698c-47cc-b72a-8de142cb7c9c", "sighting_of_ref": "indicator--a29e6807-79ba-4afa-86a9-675eeb1bff08", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58b089c-8010-4b9b-b98f-8e662fd04e16", "sighting_of_ref": "indicator--b8dd5da2-44b3-4180-b934-396b0da30af5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503d5fd3-2b40-49ca-bf3f-ccd653ba3260", "sighting_of_ref": "indicator--434a8307-4e1d-4133-8632-b7a8929bf366", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f7ebb6-4ccd-44f3-ad23-6a25f2dc63d6", "sighting_of_ref": "indicator--8de4d40a-13df-43f3-90ed-f1918d38d21f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706b5411-c0f5-484c-8dd1-369b6f49a553", "sighting_of_ref": "indicator--da81bac2-694f-4b37-b311-95d1d814fd39", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05377cf-f547-47ac-87a1-e0d8b1bb89dd", "sighting_of_ref": "indicator--f3e31e54-381a-4b49-8ffe-a31c46ff1fc0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44692131-60e3-423b-8e3b-6844e73c6ae4", "sighting_of_ref": "indicator--e2938df1-63a8-49e7-a852-4156dc429ba5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09231972-7d17-4cbe-9122-318496c0cb5d", "sighting_of_ref": "indicator--a13e290e-b75d-4559-accf-beb1a1f72bda", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd4a74d-9802-48a3-9bb3-eb10ab2da8eb", "sighting_of_ref": "indicator--c24c7e52-9afc-479f-b3e5-1ba2fc38cfd6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f95479-4603-4935-bd7e-506416007eec", "sighting_of_ref": "indicator--b63b1073-2d41-4fdf-bf78-f1d941098d28", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ea3f3d-040f-4857-ba0b-b11cd75fcfd0", "sighting_of_ref": "indicator--b63b1073-2d41-4fdf-bf78-f1d941098d28", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365bfc47-11a6-4fa5-83c9-2ba4b7c5ce73", "sighting_of_ref": "indicator--b331c753-de6d-4159-9281-a35edd44fa5a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4806b6e2-ae98-48ce-a651-1f699aaa5215", "sighting_of_ref": "indicator--b331c753-de6d-4159-9281-a35edd44fa5a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21c8039-34ab-4569-9b01-253f3ea7b553", "sighting_of_ref": "indicator--b331c753-de6d-4159-9281-a35edd44fa5a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1e263e-64a2-4253-b9e1-c93831a9b39f", "sighting_of_ref": "indicator--9271ece5-06e1-49cc-be15-bbdd9e70a090", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97948b2a-3236-492f-93bf-f0a445ad9827", "sighting_of_ref": "indicator--9948b2b3-1f4d-4f0d-8704-7aab432b5bc3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a720855-4d0f-441f-bf13-b52675e60882", "sighting_of_ref": "indicator--cad2cc2f-7d73-49ed-8d58-572bb587f928", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c9e26d-2803-4153-8acc-7828ea0465b7", "sighting_of_ref": "indicator--cad2cc2f-7d73-49ed-8d58-572bb587f928", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f8457e-f63f-4787-a9e4-856f87443572", "sighting_of_ref": "indicator--f40a0e0c-a24c-46dd-afab-3c513982a7fe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c9ac72-b4be-4091-94da-5ac5e1747d1e", "sighting_of_ref": "indicator--f40a0e0c-a24c-46dd-afab-3c513982a7fe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d402c598-39a9-4505-800e-f79913c7efa0", "sighting_of_ref": "indicator--4369ac93-9aac-455e-9517-0bb7b101a074", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62bf76d0-3371-4af5-a50d-2d708bd8acd2", "sighting_of_ref": "indicator--c4e73295-2499-4501-a071-8ae7e1a74c1c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2782a79f-38d3-467d-9164-5ae57260b688", "sighting_of_ref": "indicator--ff2d9f75-685c-4dc6-83b0-9d48e250bedf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37353ad-0a60-4e74-9821-d4bd8742d587", "sighting_of_ref": "indicator--ff2d9f75-685c-4dc6-83b0-9d48e250bedf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c2c303-76fc-4ad0-84fb-384d55730b93", "sighting_of_ref": "indicator--6ad5521c-5c3d-4cfc-9040-f003ab854fa1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d473730a-d068-45e6-9fb7-82d8ba1343bb", "sighting_of_ref": "indicator--cdf5c7db-df9e-4eb2-8a70-8d40b70d9c63", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e679a8-cc7f-4e08-a869-0d2540377d07", "sighting_of_ref": "indicator--59b60b31-0bf4-4f55-9a53-7e1441f7096a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b7efba-2e43-4b31-9ed8-d01b886e72b5", "sighting_of_ref": "indicator--59b60b31-0bf4-4f55-9a53-7e1441f7096a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cb367e-df77-46c7-b71d-4c49749e27a9", "sighting_of_ref": "indicator--a0e91447-500d-484c-a884-f68126e15c2c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8f946b-a86c-4839-89ad-1cb0ee9cc27a", "sighting_of_ref": "indicator--98b79c4a-8132-4d2c-b58e-5584fb2e7040", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7056d12d-9f37-41e8-b6c7-9a208c1caa89", "sighting_of_ref": "indicator--8e5f2756-82e3-4159-8886-2f775db6976b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15951ed5-69f1-48e9-aca4-78841c33fb3e", "sighting_of_ref": "indicator--8e5f2756-82e3-4159-8886-2f775db6976b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73473c93-c2eb-40a9-af57-95c6d5bbf950", "sighting_of_ref": "indicator--2f948c29-309f-4fec-b6d4-8c7f8159c55c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d742ad54-0976-46cc-ae22-9f3a74021103", "sighting_of_ref": "indicator--2a18c648-1856-4ec5-9608-50208bd0ec4b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4af0a4e-e7a9-4933-98a5-d55c343cc0e2", "sighting_of_ref": "indicator--fe960cbd-824c-451b-b0f3-b7b03aa61ef5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138df075-d6d6-4c80-bda7-12088673c006", "sighting_of_ref": "indicator--fe960cbd-824c-451b-b0f3-b7b03aa61ef5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee239e88-3252-456b-a2e1-deec8410e929", "sighting_of_ref": "indicator--8fcef7ad-40af-44ef-9cfe-ab2b09d51a4c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50af0b50-1a0b-43b1-9c30-1a3d5044c338", "sighting_of_ref": "indicator--8fcef7ad-40af-44ef-9cfe-ab2b09d51a4c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6a3ce6-d262-41a7-b620-7c890dd0da95", "sighting_of_ref": "indicator--8fcef7ad-40af-44ef-9cfe-ab2b09d51a4c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c47e50-5938-4837-a8ac-d1b391db9d11", "sighting_of_ref": "indicator--9cb1cc98-de9b-40a7-b22b-75c0a850a58a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80898aa4-9eae-429f-aaf5-70920c2549c6", "sighting_of_ref": "indicator--9cb1cc98-de9b-40a7-b22b-75c0a850a58a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5707750-7e05-4606-a852-b85d8cb981a1", "sighting_of_ref": "indicator--9cb1cc98-de9b-40a7-b22b-75c0a850a58a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5487bf-368e-4bdb-a2d7-006cb44620b9", "sighting_of_ref": "indicator--8561e317-f30a-491e-b5e2-2f19e7d79080", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700341d0-7f1c-4681-bfb1-3a9429bfffe2", "sighting_of_ref": "indicator--8561e317-f30a-491e-b5e2-2f19e7d79080", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686f36db-8f27-45dc-84e5-1389cf2852b8", "sighting_of_ref": "indicator--8561e317-f30a-491e-b5e2-2f19e7d79080", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6016ec44-eb9b-47c6-822d-927ed4f2c20e", "sighting_of_ref": "indicator--64a375c1-1f2b-4497-aed5-19af663ce798", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9fceae-839b-4f74-b7c6-03b9a0f0c25b", "sighting_of_ref": "indicator--64a375c1-1f2b-4497-aed5-19af663ce798", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2edd3d64-1f54-4456-ab3a-492321cacda7", "sighting_of_ref": "indicator--64a375c1-1f2b-4497-aed5-19af663ce798", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af7f20a-9903-47f4-be4a-cd3b85fc08a8", "sighting_of_ref": "indicator--76a67a14-649e-4cf9-9c4b-f9a8dac941a1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658421b4-22fc-4ff9-bdfb-406c3ed39e68", "sighting_of_ref": "indicator--c8c5c430-dd7b-423e-b34d-696bf5733ca9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7e30a6-4e9b-4f26-842e-19a37c9be60b", "sighting_of_ref": "indicator--c8c5c430-dd7b-423e-b34d-696bf5733ca9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e57bff-c4e2-4233-aaf9-519daee6902e", "sighting_of_ref": "indicator--c8c5c430-dd7b-423e-b34d-696bf5733ca9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2ac5b3-2655-4ffa-a4af-8439e6901b82", "sighting_of_ref": "indicator--9e6eb819-0488-4fba-9b7b-c97a920cad66", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c093d3-8f44-4880-b2b4-a786b00735f9", "sighting_of_ref": "indicator--9e6eb819-0488-4fba-9b7b-c97a920cad66", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5c0c6c-4a8b-4bbc-b9b3-613f80622efd", "sighting_of_ref": "indicator--289b8e6e-9023-49ef-a408-be244f74ba2b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85e72c2-819a-43f4-9087-a7d184fad809", "sighting_of_ref": "indicator--5abe9a42-fa4e-4b91-808f-1003f63bd590", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b921556-b953-44bf-8f9d-ae73fde76c0f", "sighting_of_ref": "indicator--5abe9a42-fa4e-4b91-808f-1003f63bd590", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbd7124-3c5e-497b-a51d-9cf33fd45d4f", "sighting_of_ref": "indicator--5abe9a42-fa4e-4b91-808f-1003f63bd590", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada82a6c-0a85-42b3-b0ef-d6120ff4f112", "sighting_of_ref": "indicator--b04377c2-1bdb-474b-8cef-80c7c730bc3b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97f4e49-6cb0-4628-95cc-c9528638d18f", "sighting_of_ref": "indicator--b04377c2-1bdb-474b-8cef-80c7c730bc3b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a640e3f-243d-4326-9887-e1d14a3c62bb", "sighting_of_ref": "indicator--b04377c2-1bdb-474b-8cef-80c7c730bc3b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ae9608-20dc-4f3c-b0fb-2cb9c8f2d12e", "sighting_of_ref": "indicator--fbe463fd-32d4-4ab1-929d-6ea063e460af", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64a7b87-8332-458f-939f-945507630494", "sighting_of_ref": "indicator--fbe463fd-32d4-4ab1-929d-6ea063e460af", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e25da88-657b-4c2d-ad65-9755fdc8b772", "sighting_of_ref": "indicator--fbe463fd-32d4-4ab1-929d-6ea063e460af", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8e27fb-0c2b-4cba-86f6-a24149718a72", "sighting_of_ref": "indicator--58f57667-1e54-4044-a03c-24d9093160cd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa50607-26ce-4d36-b94a-5bba499f0cc5", "sighting_of_ref": "indicator--58f57667-1e54-4044-a03c-24d9093160cd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1349cbb7-c680-4bf9-9c8f-998060f44054", "sighting_of_ref": "indicator--58f57667-1e54-4044-a03c-24d9093160cd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4c4c47-dc89-468d-8941-27b59f003b8f", "sighting_of_ref": "indicator--b6ea5b05-6b04-4365-b82a-fdc5b29a9fe1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05392c0-f079-427b-9ff4-7f45e6aa0e3a", "sighting_of_ref": "indicator--b6ea5b05-6b04-4365-b82a-fdc5b29a9fe1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ada876a-ea14-484b-afda-201fabfe610f", "sighting_of_ref": "indicator--b6ea5b05-6b04-4365-b82a-fdc5b29a9fe1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5681bc4f-0a0a-413c-a47a-738a876356da", "sighting_of_ref": "indicator--4acbdce8-ec65-415f-a663-b00556532c9f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f907da-416d-4589-aedc-97d36e4b1048", "sighting_of_ref": "indicator--4acbdce8-ec65-415f-a663-b00556532c9f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bfdc814-8888-4bdd-a2d1-102570b235cc", "sighting_of_ref": "indicator--4acbdce8-ec65-415f-a663-b00556532c9f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ed3799-5a48-4772-9e15-1049c6c33b42", "sighting_of_ref": "indicator--71295a1e-ac97-4ea2-80af-e9f1e7b6a764", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7b8b86-1f32-4f06-b250-c8e7102b90c8", "sighting_of_ref": "indicator--eb7f566e-9741-4a98-8f84-be0f25097be1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5198f6dc-9a42-491f-a0ad-23fa62c5f4d6", "sighting_of_ref": "indicator--eb7f566e-9741-4a98-8f84-be0f25097be1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f65fe2b-f5ff-4567-a9ad-c9bee23321ec", "sighting_of_ref": "indicator--eb7f566e-9741-4a98-8f84-be0f25097be1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f60d9d-a4e9-4995-8b04-3102ef2e6519", "sighting_of_ref": "indicator--d7c61c55-5e14-4ed5-a11f-a398af32ecf1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ac7f6e-a10c-4cc4-b8ed-c7040c6debf2", "sighting_of_ref": "indicator--e2f47d4d-6a17-463c-934e-fe77bc048def", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9893a10c-761d-47f6-9e38-d0dc2d2948ef", "sighting_of_ref": "indicator--c609aec6-3d30-4a74-a50e-e42dfc6f5a1a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a970201-b238-45c6-b21e-36986e8b1a70", "sighting_of_ref": "indicator--99804968-b30a-41a1-88b5-dd857a804cfc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f70d8cf-285b-49f2-911e-94b355ff7883", "sighting_of_ref": "indicator--93edac06-31d8-4ddf-ba61-c9e02afb7f45", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5564a40a-a89d-4935-990f-27f84ab44acc", "sighting_of_ref": "indicator--93edac06-31d8-4ddf-ba61-c9e02afb7f45", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820ee897-da18-4f0a-a992-945ddd22f780", "sighting_of_ref": "indicator--1df9ae88-b98b-4d53-a36d-dd34d7e946ba", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f768f47-dcb2-4e05-8353-0290d9ddd9c4", "sighting_of_ref": "indicator--1df9ae88-b98b-4d53-a36d-dd34d7e946ba", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2295fda0-77d1-4408-ae8a-3938f2ebc9d0", "sighting_of_ref": "indicator--1df9ae88-b98b-4d53-a36d-dd34d7e946ba", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6687a494-980c-49ef-b89a-79414b0debeb", "sighting_of_ref": "indicator--9184d722-7cb9-47ab-a0ab-114a3fdfb66d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d37629-3e94-41da-b3a0-a4a972fcaafb", "sighting_of_ref": "indicator--9184d722-7cb9-47ab-a0ab-114a3fdfb66d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd83994-a5d9-4a99-bf2d-e5adc59d1243", "sighting_of_ref": "indicator--9184d722-7cb9-47ab-a0ab-114a3fdfb66d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeedc66d-203b-4c72-b214-208432d92277", "sighting_of_ref": "indicator--e2c29313-c6ec-44ad-adf9-050792275dc6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b175c142-8b46-4b3a-af21-8219933af925", "sighting_of_ref": "indicator--f3dc188c-bac4-4c2f-af75-837e0c075e71", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a7d872-0355-4d8f-93ac-f1a289086885", "sighting_of_ref": "indicator--026d3f69-a5ec-475c-901b-0ef85fb38ef5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2734a2ad-254b-4e23-9f28-600cceb1b4e5", "sighting_of_ref": "indicator--026d3f69-a5ec-475c-901b-0ef85fb38ef5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb2b594-9aa4-4619-89d1-3f32950bd016", "sighting_of_ref": "indicator--8cadcb96-077b-422e-8858-0ff75a46db74", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd87ca0-595c-43bf-8594-fd16c725daf3", "sighting_of_ref": "indicator--9cfb6810-9833-4244-b3c7-c133f65396e2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19b5cd2-9eee-4ab3-bafc-9a84e73a6dae", "sighting_of_ref": "indicator--9cfb6810-9833-4244-b3c7-c133f65396e2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0faa87-9830-4158-9a23-36f2b2a4ed34", "sighting_of_ref": "indicator--9cfb6810-9833-4244-b3c7-c133f65396e2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ddaec7-59cb-45ee-94f3-94d4309391a8", "sighting_of_ref": "indicator--50107b9e-b316-40dd-85e0-751b04b52926", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07be8d60-1d7f-49b3-8488-29e8be596055", "sighting_of_ref": "indicator--b0fb7d0b-aec8-4e1a-babc-76f0efceeae6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3683812-8a18-4ec8-b63a-ac43cb789411", "sighting_of_ref": "indicator--d73acea3-ef1b-4f92-a63f-2d09f36a102e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3793b8c6-a6b8-4da0-97f4-905d9054c95c", "sighting_of_ref": "indicator--27827f94-3dea-49df-921f-a628c493b41c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839a06fa-84bc-4c38-8670-be1bf45063a0", "sighting_of_ref": "indicator--b0a4374e-097a-4107-8c41-d19095f859c3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df94fb5-bceb-4bef-a53c-b47713bf49f8", "sighting_of_ref": "indicator--60cabf39-f1e1-4b3d-92a4-eb07eefb3c28", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c036fc42-bd0c-4bf6-8606-45caf20f5d7d", "sighting_of_ref": "indicator--60cabf39-f1e1-4b3d-92a4-eb07eefb3c28", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd40a6d-69ed-429b-9671-7bf3e3305805", "sighting_of_ref": "indicator--60cabf39-f1e1-4b3d-92a4-eb07eefb3c28", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49f1f82-2f7d-4963-b8ca-7b28642e18ef", "sighting_of_ref": "indicator--898ab323-a842-4d99-a23c-e1ed5adb5ff6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12162213-307c-4286-adc9-f4e1a5c2becc", "sighting_of_ref": "indicator--898ab323-a842-4d99-a23c-e1ed5adb5ff6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e7fa92-4768-48c8-a0f6-fbe3f3a957ae", "sighting_of_ref": "indicator--898ab323-a842-4d99-a23c-e1ed5adb5ff6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70ee5d9-3004-4853-85d3-0d1eaf104f3e", "sighting_of_ref": "indicator--c486557c-1484-4e34-acd7-0cb5275cfc13", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1551ea-46ff-4d1d-9abe-07a7ca1a3c0c", "sighting_of_ref": "indicator--c486557c-1484-4e34-acd7-0cb5275cfc13", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ee6b6d-34ae-49f1-92b5-18243c5fddb6", "sighting_of_ref": "indicator--c486557c-1484-4e34-acd7-0cb5275cfc13", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675ff35c-aa05-4cd0-8bb0-3ba9ade5040b", "sighting_of_ref": "indicator--22e7ad04-f46f-4e56-bfe6-eaaff0a27257", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921ed870-bf47-48a4-bc4a-8a2dd86caf84", "sighting_of_ref": "indicator--3d5145d5-5e5b-4079-be77-08fb4afeb473", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2383c05f-44a3-464f-8986-6494f7e1336b", "sighting_of_ref": "indicator--3d5145d5-5e5b-4079-be77-08fb4afeb473", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5885b60b-b155-4bba-91c7-271ad840b1af", "sighting_of_ref": "indicator--3b3941ff-52a8-457f-a7f2-a9d0d26c1578", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2494171-1a95-4dad-aee4-39da9f552b4d", "sighting_of_ref": "indicator--fcf9f973-8a0a-41f2-9f79-c1670f03a7ea", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737392da-17a3-496c-98f4-0a96716a0c21", "sighting_of_ref": "indicator--228c9014-f61a-464e-8575-0615cffdf3f8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21782b34-a886-43d3-a80b-48ce372de3f0", "sighting_of_ref": "indicator--228c9014-f61a-464e-8575-0615cffdf3f8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793bab12-67cf-443e-b2e0-0fa6e88754aa", "sighting_of_ref": "indicator--9fe132de-2032-4356-a1d1-c1e6e8461f95", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8114639a-b637-406c-b8ba-f6121a42f502", "sighting_of_ref": "indicator--d0a8f5dc-0067-408c-b82e-67521d28f0f9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ffa8fe-f420-4bc1-9fb9-9a1edccfafae", "sighting_of_ref": "indicator--41bbef76-d764-48f4-a2c8-c40fdf131ad3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1493e876-83b1-43e8-a128-7b0241923003", "sighting_of_ref": "indicator--7e453ac2-e07f-450c-9c7a-8865e4b88345", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65cd5662-417a-495f-9c94-f022fb3ed88b", "sighting_of_ref": "indicator--7e453ac2-e07f-450c-9c7a-8865e4b88345", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255cf436-f7c0-46c1-9ed0-7b1430d43491", "sighting_of_ref": "indicator--7e453ac2-e07f-450c-9c7a-8865e4b88345", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbac13bf-82a7-42fd-aa57-6b29206da530", "sighting_of_ref": "indicator--d44ef0b2-e71f-4497-813f-9e67b36fb360", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2247cd5-a540-42f2-9cae-3cf82d40b5b1", "sighting_of_ref": "indicator--12974b3d-9714-4e6c-9c87-5d58941abbfa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed30b9ac-0c5b-4643-abff-a5aebd5257a8", "sighting_of_ref": "indicator--695decc1-c9ab-4a52-8cbe-361a4a5f7111", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab09dfcd-2079-4e2d-92bc-fda3fe495b7d", "sighting_of_ref": "indicator--7cf07cfa-3a72-4277-9e67-9f568f8679d8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4722cf-27b3-4662-a88d-b77e3a642945", "sighting_of_ref": "indicator--7cf07cfa-3a72-4277-9e67-9f568f8679d8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f6425a-aaba-4f8d-99c2-81902ad507d7", "sighting_of_ref": "indicator--9f112b5d-8fba-42ec-873b-88470986ae26", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929892a9-a9cc-44e0-8a33-345bb1064b55", "sighting_of_ref": "indicator--9f112b5d-8fba-42ec-873b-88470986ae26", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d73ea20-adcf-4e3d-a531-27a1f8400c59", "sighting_of_ref": "indicator--9f112b5d-8fba-42ec-873b-88470986ae26", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09c0192-7568-4274-8738-4d6a4c132c8c", "sighting_of_ref": "indicator--9ff7e632-4642-4217-88f9-8197e5de352b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbedc57-9c76-47b5-9da1-c875a69faa35", "sighting_of_ref": "indicator--9ff7e632-4642-4217-88f9-8197e5de352b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2812b271-90d6-46ab-b05e-8d6be220f89c", "sighting_of_ref": "indicator--9ff7e632-4642-4217-88f9-8197e5de352b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6048994a-bc7e-4108-b106-fd09e6e3e7ac", "sighting_of_ref": "indicator--8aa23508-746e-4c5d-9085-0cd43e6cd7de", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3d1668-3ffd-40c9-82a8-3190bf39cb22", "sighting_of_ref": "indicator--8aa23508-746e-4c5d-9085-0cd43e6cd7de", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c1b5c6-951b-4f16-918a-901f3defa550", "sighting_of_ref": "indicator--8aa23508-746e-4c5d-9085-0cd43e6cd7de", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9689c8c-44cb-48c4-8b78-47ec7813f290", "sighting_of_ref": "indicator--49f17951-ad7e-4fda-a7de-9fcf5c68aa5c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddefcd5e-e39a-4fb7-b451-852d5cf9548e", "sighting_of_ref": "indicator--49f17951-ad7e-4fda-a7de-9fcf5c68aa5c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fab1f8d-0f43-4290-bc71-f5335b696731", "sighting_of_ref": "indicator--303e29fa-258b-480b-a671-80a122b400b6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df723c89-126c-4c98-b164-8c93a64c411e", "sighting_of_ref": "indicator--303e29fa-258b-480b-a671-80a122b400b6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8120ddc6-b729-4fb3-a349-bc4f9fbb3585", "sighting_of_ref": "indicator--9f7a46e3-0700-48fd-ac1a-2964705a0b3d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9097d16-faec-4250-ba0b-8785b6ff717c", "sighting_of_ref": "indicator--9f7a46e3-0700-48fd-ac1a-2964705a0b3d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffcb18cb-27a3-4f0c-80d9-c573a3d4b93b", "sighting_of_ref": "indicator--053f67b7-4e4b-42e9-907d-61a478795d75", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fa2a1f-095f-4e86-bfa5-fad07feea50a", "sighting_of_ref": "indicator--2f22703b-4c9a-4b92-b6dc-30b89f20e60b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5fc16d-e8be-477d-ba9c-c52bf1c9f46f", "sighting_of_ref": "indicator--2f22703b-4c9a-4b92-b6dc-30b89f20e60b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8275f92-de0e-4ff5-8508-e45180bd5d68", "sighting_of_ref": "indicator--a28c8f4b-6092-43da-a2e9-b6f5ea95a9de", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac3a2f9-e81f-4e40-802d-e2a3ce26b893", "sighting_of_ref": "indicator--a28c8f4b-6092-43da-a2e9-b6f5ea95a9de", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42522cd3-c4f6-4bab-8725-735fd6c5230e", "sighting_of_ref": "indicator--9e028562-965a-4858-9a28-4f205f757ffb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b009cf-a86c-4647-9df2-851a7b596eeb", "sighting_of_ref": "indicator--9e028562-965a-4858-9a28-4f205f757ffb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6641fd0-1ec2-4326-a287-2324b6621355", "sighting_of_ref": "indicator--22a7ec07-835e-4292-9059-971888641fb4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542ce828-ba6b-49f9-937c-a21da9e7344b", "sighting_of_ref": "indicator--29e44d4d-96d2-47ef-a836-0af13ac40d78", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d8ade8-d4c2-4d1b-b0c0-00081fa1014c", "sighting_of_ref": "indicator--6d8422b0-dd65-4d02-af0d-9587247cdb70", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ebd35e-ba1e-407c-b3f3-214939b912c9", "sighting_of_ref": "indicator--6d8422b0-dd65-4d02-af0d-9587247cdb70", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66609d98-0bfe-4c31-b559-cc8d6027cdf5", "sighting_of_ref": "indicator--c2d6e8b4-beb6-4f78-8d66-cd5719b19d5c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08070608-b7ba-49b0-80c6-b29c12985053", "sighting_of_ref": "indicator--c2d6e8b4-beb6-4f78-8d66-cd5719b19d5c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a5b6a1-b236-49eb-a074-1a3a57595453", "sighting_of_ref": "indicator--c2d6e8b4-beb6-4f78-8d66-cd5719b19d5c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62bd43e5-6ac3-4a51-adc2-b0cb0e1182f1", "sighting_of_ref": "indicator--edda75cd-b872-4fd9-94bd-d7b2759d949f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716193ec-ea5e-4415-802a-a89be1c1b1bb", "sighting_of_ref": "indicator--edda75cd-b872-4fd9-94bd-d7b2759d949f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428760f9-5fa1-4deb-91eb-8f43c5b6adf8", "sighting_of_ref": "indicator--4b6d1d80-9f44-48f8-a340-ccf32cf24386", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6016c2-c7cb-475d-8e73-916c840b1d48", "sighting_of_ref": "indicator--ecec6042-f9c9-4fa0-8d34-64320e605384", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508a69f2-6edd-4205-bd4a-26133d578435", "sighting_of_ref": "indicator--ecec6042-f9c9-4fa0-8d34-64320e605384", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e2361f-3850-46be-9c23-f4d6f182cbeb", "sighting_of_ref": "indicator--ecec6042-f9c9-4fa0-8d34-64320e605384", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03bd4ce0-0e68-4260-8081-17262007fbcd", "sighting_of_ref": "indicator--972afb35-7749-44cd-ab85-9ba6d2d30149", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5ebb2a-7f25-4dc8-9a1a-5ea1f4da45b4", "sighting_of_ref": "indicator--972afb35-7749-44cd-ab85-9ba6d2d30149", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce9d078-174e-48d2-a309-7ae84297ebff", "sighting_of_ref": "indicator--972afb35-7749-44cd-ab85-9ba6d2d30149", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04fb03c8-0493-4ffd-b836-e2e5b82c20cf", "sighting_of_ref": "indicator--bdd77add-ee3c-4daa-a71a-535a1384acd3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777605e9-c96a-4b0b-87ab-0b0f257175ee", "sighting_of_ref": "indicator--bdd77add-ee3c-4daa-a71a-535a1384acd3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f1875e-d23c-43ca-b4e9-cb14514ef04b", "sighting_of_ref": "indicator--09ba5022-0ad0-4174-94ac-62ba009c8ce5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe6afd7-2202-49da-aea3-3eb8399c6c14", "sighting_of_ref": "indicator--ccabde46-b04c-48ca-ba1e-990b7aeff5b0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cbbd19-1da3-41b1-9229-35b2690d55e0", "sighting_of_ref": "indicator--88c53933-d8e9-441d-beac-6f480890f663", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235f28d3-80fc-4748-8729-4d39c6c87ce2", "sighting_of_ref": "indicator--81bc9ccb-d636-448b-bc43-00394edf6fea", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6945265-fd45-4c65-8ea4-ab22dbd95d1f", "sighting_of_ref": "indicator--6cb89f0c-fd2c-4e54-ac35-d143773ff478", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67087f55-f2d3-4339-88c5-4f8dae1ccab6", "sighting_of_ref": "indicator--6cb89f0c-fd2c-4e54-ac35-d143773ff478", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be83eaa6-be52-47c8-b761-a35f26ad339e", "sighting_of_ref": "indicator--05d9010a-6883-4bd2-8fb7-38a3ce5ec792", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87bc8da-859a-48da-b81f-e4bc5627bf41", "sighting_of_ref": "indicator--57208f59-0433-454e-b24d-ceff6e41488f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90dfa731-10fa-4acb-b689-35829c0755a0", "sighting_of_ref": "indicator--57208f59-0433-454e-b24d-ceff6e41488f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351aee38-e219-4cf8-968f-b77a96269ab4", "sighting_of_ref": "indicator--57208f59-0433-454e-b24d-ceff6e41488f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f32dc9e-b660-4247-801b-bbae2494d982", "sighting_of_ref": "indicator--c102dccf-c132-43cc-828b-59aa1bb38618", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15aca15-0bc8-4c2b-9e8c-3dabb1012f12", "sighting_of_ref": "indicator--beefcd42-dd15-4471-909d-f4279c03ab29", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828cc6e9-f1aa-4fc6-a84a-51a40d6ae6b7", "sighting_of_ref": "indicator--007784c1-1254-40c4-a8be-ba5134e293e7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c46e8bf-3345-47ae-8b38-ab85a81ed3bf", "sighting_of_ref": "indicator--007784c1-1254-40c4-a8be-ba5134e293e7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805ff522-ada8-44b0-bfa7-2dec3d7cab8d", "sighting_of_ref": "indicator--fd7dfc4d-6108-47d6-97f4-471b34b3b972", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd67c3a8-c324-4791-a8dc-34d6aa7c6b12", "sighting_of_ref": "indicator--fd7dfc4d-6108-47d6-97f4-471b34b3b972", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e2567b-70de-4b57-a3f3-4f3519664841", "sighting_of_ref": "indicator--6af2183c-06c0-40dc-9b8d-450e57820516", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0409ea5-4bda-44de-a23c-06ecda94d7b6", "sighting_of_ref": "indicator--234bf012-1b4b-4add-882a-89649991fcad", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4f1d1c-15bc-4f84-be12-e8223ca1c4a7", "sighting_of_ref": "indicator--a7fbddeb-afdb-430a-9e08-f762d9c56e92", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1eeafe2-5e24-4bdb-8f21-631f610dcd13", "sighting_of_ref": "indicator--a7fbddeb-afdb-430a-9e08-f762d9c56e92", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0290440b-ceae-4bc6-9808-d79d350fa77d", "sighting_of_ref": "indicator--a7fbddeb-afdb-430a-9e08-f762d9c56e92", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e3aa67-a4cf-41a5-9bc2-4d642757aa0d", "sighting_of_ref": "indicator--314ce383-b127-461e-adf2-04cbb0d4eff4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037137b1-af04-43c5-b07d-c6a4fc57a11d", "sighting_of_ref": "indicator--314ce383-b127-461e-adf2-04cbb0d4eff4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ddf123-d5b8-466e-8a96-b0caaebc901c", "sighting_of_ref": "indicator--29f1860c-9faa-459a-a893-e02ecf0516ec", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29616519-996d-44f2-88ef-7cf6d1bf0ff5", "sighting_of_ref": "indicator--29f1860c-9faa-459a-a893-e02ecf0516ec", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a776ada5-8ccc-4b51-81dd-d362b21a4f56", "sighting_of_ref": "indicator--29f1860c-9faa-459a-a893-e02ecf0516ec", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c72e15-68c4-48e8-b210-347ba821c4a0", "sighting_of_ref": "indicator--66f32902-5c61-452e-9427-3eeab7cabb27", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa88a21-9c44-4eea-9405-32957b526d8a", "sighting_of_ref": "indicator--66f32902-5c61-452e-9427-3eeab7cabb27", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c94649-c5c9-4fba-a44d-5ff7a2326b52", "sighting_of_ref": "indicator--66f32902-5c61-452e-9427-3eeab7cabb27", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d576046c-81c7-49ec-b291-092574cfb306", "sighting_of_ref": "indicator--7120dfcc-0aaf-4ea2-92fd-4ad57398bc72", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0209cc-400d-41b8-b247-68c30dfab3ae", "sighting_of_ref": "indicator--7120dfcc-0aaf-4ea2-92fd-4ad57398bc72", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c44245b-458e-4443-954b-9f167ebc7b3c", "sighting_of_ref": "indicator--7120dfcc-0aaf-4ea2-92fd-4ad57398bc72", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7831ce4e-29f2-44be-b0ff-cef8490ded97", "sighting_of_ref": "indicator--2be5b6d1-f9bb-46fc-9d68-e99a17b54261", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672f3698-bd74-4a69-b55b-9d150a69b9e0", "sighting_of_ref": "indicator--2be5b6d1-f9bb-46fc-9d68-e99a17b54261", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c6426d-1acc-4a5d-8c60-4dc2ad9dffcd", "sighting_of_ref": "indicator--c27991f3-f6a4-4f38-8ac4-cf0d992d5f18", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f29bf7a-a460-4628-8be2-a2121130d2a3", "sighting_of_ref": "indicator--95e2deb7-76eb-4b2e-a1c4-d35846e5dcb7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9b2928-e4db-4d50-93dd-d6dc5938cbbd", "sighting_of_ref": "indicator--95e2deb7-76eb-4b2e-a1c4-d35846e5dcb7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c4c95e-00d8-48da-aa7c-fcaa53199626", "sighting_of_ref": "indicator--42e59cc5-e941-4746-b166-e944100b868e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bf7c07-aaa8-4017-a8f7-ed2029887695", "sighting_of_ref": "indicator--42e59cc5-e941-4746-b166-e944100b868e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35113486-b57b-4925-aafa-2a75f54ef33e", "sighting_of_ref": "indicator--e7580d68-365d-4a23-a81e-45a900a1883b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8332de6a-276f-4ad5-b564-ca74d496a8b7", "sighting_of_ref": "indicator--440aecdc-a3a5-4713-a687-a3272c65566a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa0d4df-4c8d-4fad-96c0-034bf57881df", "sighting_of_ref": "indicator--49a7bde7-92fd-42b2-910e-3fb2c63cedaa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db326f24-cb35-429d-b6fc-0ca68d71e930", "sighting_of_ref": "indicator--bb91f3c2-da43-415c-8279-f9f486b14669", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564eb52f-9a35-4b92-b0fb-8c96d3de44d2", "sighting_of_ref": "indicator--2a65e363-2e9b-4a37-a298-aa7d70b42f8f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf870d3b-18e7-466d-8750-4cc096af45c6", "sighting_of_ref": "indicator--7fa83746-dbae-4f30-8d22-455128ed08f3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8c8bea-d840-46d7-8ead-708dc6b7d8ab", "sighting_of_ref": "indicator--b2d091ff-ebbd-481d-8107-4756f88bece9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a814f0-4af6-4e58-83b9-1f587f57bba1", "sighting_of_ref": "indicator--21d31f94-f3fb-4537-b1b2-41bde300d3da", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d98e15-2c9b-4ed5-a76b-6eba4381bda9", "sighting_of_ref": "indicator--bd82679d-21bc-4851-95b2-ea8369f62e40", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33202e8-1347-40f7-869a-1d267d8a087e", "sighting_of_ref": "indicator--6cd17505-5f49-4070-8f1f-ed5ca4d9f306", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860fd1a2-03ff-4a9d-8003-022b865eaba8", "sighting_of_ref": "indicator--90bcc446-7131-4e70-be4f-298bb72b6af1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c65ef1-a8e0-428f-b9ff-0c64b00017d5", "sighting_of_ref": "indicator--94dc89f5-6f6c-432b-8071-52f230a77a94", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2766b132-0fd6-48bc-8d1c-aab4c60ef31a", "sighting_of_ref": "indicator--20117569-4992-49de-9c07-e0ddeb443c06", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d9bbdc-7a2b-4f25-9b0f-f8be0e250c1f", "sighting_of_ref": "indicator--2e8986f4-24d1-4b30-a949-f184686b468c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8643e81b-3e58-4787-b891-01181c731f8c", "sighting_of_ref": "indicator--3b0b9060-4157-4306-b737-59e81e6d767c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401565f5-a2c8-4851-ad18-4b958ae488ce", "sighting_of_ref": "indicator--51d0f08a-6515-4168-98f9-cff19b1fdc81", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7746ec7f-9e84-4ab6-bb5a-f28839ae574e", "sighting_of_ref": "indicator--069cc2a9-ac4c-4e4f-bf7e-3a48f93c0f6a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153d6ee9-a6e9-4da8-af2d-9d113075f492", "sighting_of_ref": "indicator--1d945ab1-971a-4815-aeaf-91f3f562398e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2011a9c-8ed1-4dbe-ba7a-b5dee4a7c04c", "sighting_of_ref": "indicator--21a00b4e-d09e-44ef-b2aa-6cfe342c29e7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef94552-7456-486d-8bde-0e7814111905", "sighting_of_ref": "indicator--f2a1996b-8a97-48b4-99a0-359efba021f7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283e868b-55f6-4e59-acae-b6fe3f8a564d", "sighting_of_ref": "indicator--9ab4fc32-9578-4336-a9b3-e83d2eef0b8c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2addff6b-e513-478b-b977-a69952095298", "sighting_of_ref": "indicator--9b75c9d5-cc3a-4c74-9001-9dd8d89def82", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e657181-eaaa-4862-af69-62d7c6186197", "sighting_of_ref": "indicator--b51757bf-f9a5-487e-9250-f412e9cd5ed4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5897c2b1-5c35-4ad5-8b76-e71bc4952716", "sighting_of_ref": "indicator--9cbb2a0e-7e7a-410e-9425-4b23921ffcfd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2138e1ec-7e53-4cdb-b252-8479ce981efc", "sighting_of_ref": "indicator--380eb8eb-a35f-41dd-8b37-d8b4f1617b9e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9783beee-9f14-4e99-b78d-3ae60b728054", "sighting_of_ref": "indicator--1e66f171-b013-46d5-b8fa-7d0b31cbd355", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156f272d-f057-4f25-a7b0-6060924989ea", "sighting_of_ref": "indicator--9e4e89de-4c85-424a-a84b-2dc7c5866436", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e2941d-8bdd-4169-b72c-d5f4b288c3ca", "sighting_of_ref": "indicator--a9531b0d-fb3d-4d37-adc4-f3fd2ceb1441", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46eaa8e4-ae08-49ea-9e61-bc379ed701f7", "sighting_of_ref": "indicator--0b82afbb-380e-42b6-9a0f-c6bd1475b588", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58228c56-5d4d-47d0-847a-4d7150ae8c8b", "sighting_of_ref": "indicator--58732fe6-78ea-48e7-ad35-da2d068f6626", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71e8cd9-8fe7-4a37-97fe-e754320ac583", "sighting_of_ref": "indicator--adf8149d-ed50-42f5-95a8-35206b5687b4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e655b3-a2ab-45fc-83ae-e10eea0fd95c", "sighting_of_ref": "indicator--68ea4fa7-68e6-42ff-8f1e-d4b4f28f0837", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da8d528-cdb1-4cf0-9ee6-bff500bfa9df", "sighting_of_ref": "indicator--318ebd97-6728-4551-9353-6b5c07c91307", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca6b2a1-0a74-45bd-8aa0-14362ee27647", "sighting_of_ref": "indicator--36744b47-7a5a-4395-b75a-0ec37b1f1b48", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4326c6-8395-4970-bb9d-a20972e730a4", "sighting_of_ref": "indicator--5784b8ba-4821-49fa-95be-d36d9fee083b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332af314-4322-439a-b4c6-907b05dd0d62", "sighting_of_ref": "indicator--3f2bedf6-579d-4d40-b07a-727cd2c4b378", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5c8be0-507e-41c6-bd5b-161f67f57c07", "sighting_of_ref": "indicator--cb6eeba3-55d0-49c9-a860-4726aa8234be", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9497cb7-1b8d-4160-a934-44e39d8205a4", "sighting_of_ref": "indicator--fef94fe1-75f6-41e5-a870-52ec392a6f65", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92357ac-1e77-4ba0-83a2-a0001cbd1dfe", "sighting_of_ref": "indicator--2bdca70e-9100-48ad-8760-fc292431f2a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb5c467-fad9-4287-988a-24b2f0f0d3c1", "sighting_of_ref": "indicator--d51e9ee0-b1de-4758-a30f-8f7b2b08f56d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9a9f04-1a66-4576-a40a-89a66e1d1393", "sighting_of_ref": "indicator--de179bb1-9165-4fad-9037-40f5a7926807", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32123da5-ae08-44de-bbc6-4b9846bd2e1d", "sighting_of_ref": "indicator--b0a61d24-ab8e-48df-8693-ce35df7d3786", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ea8f20-62ca-40a7-a2be-eda78eb28020", "sighting_of_ref": "indicator--7c3fc7c7-111e-48a5-b6de-3425fc12b725", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10bc7440-9097-428d-a003-cbfa9b249a2f", "sighting_of_ref": "indicator--74e3ae16-10cc-4e45-acb9-e3711a1e040c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d9db5b-0927-4f15-8ec8-44aa2e3be9d6", "sighting_of_ref": "indicator--72c3b21a-5f64-42a9-a4e0-f447054252e9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9efe401-3b92-4c29-b511-c20ec20791cd", "sighting_of_ref": "indicator--91d94da2-10e4-4db2-8897-00c92f324674", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61edab88-ac23-4c9d-83e4-76d44c332561", "sighting_of_ref": "indicator--f2a169c3-8401-4b2b-9f52-df53d312d5ed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2f8262-bd13-4f39-a5d7-026af2f833d1", "sighting_of_ref": "indicator--602a4d31-6b2f-4814-b73b-9b74fa34cdf4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28b3ded-51fd-4480-af30-126a643a4306", "sighting_of_ref": "indicator--517e52a0-47eb-4ed0-8257-9b5b378e003c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c01d1ff-ab3d-455a-85be-0c4254315447", "sighting_of_ref": "indicator--8dcac68a-219b-4c6b-ad46-a2f55f170f7b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b878f756-3ffc-4f49-82b7-9fcef9a58236", "sighting_of_ref": "indicator--29298456-74b2-4980-98db-c09b57d31d9e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb48a02b-cd54-492d-aa5e-d2c0f3441c5f", "sighting_of_ref": "indicator--6406d083-5b9a-44ba-b82a-693679e03572", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3996f8c8-bd58-4ec9-8772-1f4613c0d56b", "sighting_of_ref": "indicator--803c5585-a4f7-41d7-8313-fc55b694bb48", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d99bf0b-7f92-43c4-8761-0089d4a8c45e", "sighting_of_ref": "indicator--ae94fc17-1cbf-4da6-a8b8-03d4c4dc4f78", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd4470b-adc4-4730-b88e-45c3680d146d", "sighting_of_ref": "indicator--374adc34-016d-4c9f-998a-6f34401958aa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfaaec0a-13ed-4726-b922-7943d36b0f94", "sighting_of_ref": "indicator--6c66ff2a-0bf2-4337-b8aa-71676f0428e5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df06600-a3b6-4ae6-8056-baacfacdb8fd", "sighting_of_ref": "indicator--0f004a65-a0e3-4c60-a874-9df54208d816", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e19cfc-695f-46f7-951c-a3de6b7a35ec", "sighting_of_ref": "indicator--07b7d258-4c85-414c-9fbe-0ece1e2740b5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f7ed7e-d2fa-486f-8e3e-78d23b2a5e89", "sighting_of_ref": "indicator--b064ee39-b09e-49ea-ac86-30832bea3b46", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6cc4b5-41b2-4324-8035-87704a1d9f1c", "sighting_of_ref": "indicator--a398f9e1-9f9e-404d-a4c5-e6ba3661d88e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a6db82-b148-4d04-8f59-add6ebb86181", "sighting_of_ref": "indicator--d2a748f5-ed87-4198-9f92-bc47bce189c8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d682b5-950a-4bbd-b2eb-fc22e6ed1322", "sighting_of_ref": "indicator--717f1fa9-0d7c-44f2-90d5-00201ce09eb7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9c26c1-d861-4ee0-9d23-a85fb9896a53", "sighting_of_ref": "indicator--66702827-fd28-4916-853c-91c3ebb22034", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a86230-6f30-4c7e-9573-11b000bde522", "sighting_of_ref": "indicator--3da5ce69-72a6-4c81-a5b0-10ca25249973", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8a2409-77e5-4cbc-829c-199d3580070d", "sighting_of_ref": "indicator--4528aeae-64f7-4284-a185-40c6c1802313", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00927741-2a1b-4cc0-97e7-4148752de9a0", "sighting_of_ref": "indicator--fa223d99-3e83-4d88-9bcf-ab60a64f913c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9df16a-95ae-4daf-94ed-381c67ac50a4", "sighting_of_ref": "indicator--d98e6a5f-9f7e-4f44-8069-874ab5fad537", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09d85a8-c485-403c-88b2-0def789b6818", "sighting_of_ref": "indicator--c8c18c71-4556-4316-87b8-eff7fd6004ad", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b9f891-34ae-438f-a2a4-1d31556bf803", "sighting_of_ref": "indicator--671af8d6-f0aa-41a0-a6b0-23d2e4aca766", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db6190e-14a2-45ab-8bc6-36c6d2282cfa", "sighting_of_ref": "indicator--5feb5d22-ee69-42ef-8be3-3f09c703fc07", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f914cb-4ee4-4e63-a943-4d4b1fe68f5b", "sighting_of_ref": "indicator--16627aaa-1341-4d80-93fc-32da27f796aa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a1bdfc-76ea-4383-93b8-b3a75a4b8c38", "sighting_of_ref": "indicator--dc813b8d-3c3b-4ae2-b3ac-034630c20057", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45add462-2a23-41f4-a116-f6227d25ab22", "sighting_of_ref": "indicator--282c87ed-f3af-46f7-b376-9be4580bf831", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1508aa-be28-4296-921b-5ad9acb8153c", "sighting_of_ref": "indicator--6f6be580-5b22-461d-88e9-f4fde1053536", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe282917-f002-45db-b4e4-9cfbe86e1a2c", "sighting_of_ref": "indicator--760ba4bf-b98a-491f-96a6-0a526110f735", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3549253b-f69d-44e3-92cb-b830fafcad01", "sighting_of_ref": "indicator--924ff8a2-3166-44c6-95b3-44ea9bfd3e7e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82957d9d-aab5-465d-a80e-24670f4682f6", "sighting_of_ref": "indicator--09a0d293-b19c-4dc5-920c-c7ac62d3e00b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ae9a15-53be-4bbd-8b10-80d510458b7d", "sighting_of_ref": "indicator--6f9d1553-c667-48b3-9f04-2e5621dba37c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01f0253-fbba-47cd-a0ad-6baa66b37637", "sighting_of_ref": "indicator--36131a0f-0a6a-42f3-bce5-ec649ffbeadc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad20f042-f216-41a3-b6b2-a98974da8c19", "sighting_of_ref": "indicator--69c36095-4c9c-430e-a5b3-0da17e7ba1b9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c656c1d5-d040-446a-b8a1-93bb269ac401", "sighting_of_ref": "indicator--c5c672e1-a9fb-4cfa-9471-17abf74d925a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5558bde-6a50-465d-8955-449ae89c8ca2", "sighting_of_ref": "indicator--ab07dc5e-98ce-4a2c-9fd0-20456ae8a77f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb8f947-c9a2-4be6-9ab7-1aefbe1deb50", "sighting_of_ref": "indicator--2dd52161-836a-4f19-871b-09b16332e58e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06670d3d-7182-44d1-95f3-f02b3efaa166", "sighting_of_ref": "indicator--1ceb8a3b-0663-408a-9c6f-d199d60ed00f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d10198-0bbc-4a9a-9eb6-0b7d46fb50e5", "sighting_of_ref": "indicator--5bc5740b-4151-419e-865c-57e5dc0542b8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67809811-fd4e-4719-8d33-73cf5b850513", "sighting_of_ref": "indicator--d9c7b931-96de-4f39-b12c-da084cc71321", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c32243-1a79-4a84-b86f-08b02b7b5058", "sighting_of_ref": "indicator--0291d0fa-0696-4f23-b788-81f49293e6f5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e2b728-e6a8-4c36-a869-747f1c5abd76", "sighting_of_ref": "indicator--2481eea6-11ac-441b-8903-4bb02ef07dc3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9bb3b7-4349-467c-8c68-41ffaa637b46", "sighting_of_ref": "indicator--ab9d5f3a-7c22-46f1-925d-22ebc739fc2d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3cc1e1-19a0-4cf0-9b3a-f3add274fa2d", "sighting_of_ref": "indicator--b5f51f66-961b-47f4-8138-a116e723e16b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfecc90d-8656-4a49-abe9-bd27162bdb84", "sighting_of_ref": "indicator--9f59508d-28d0-4b87-a98d-dad76f96b223", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a0d687-0f0d-4ebf-9166-d4a0b06ae4e1", "sighting_of_ref": "indicator--94337ddb-a489-4c5d-8196-3fd295a9cef1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8f23ab-83b4-4ed8-9719-42eec63a851d", "sighting_of_ref": "indicator--5a58bdf9-2b23-4c53-bb2f-3e990b198963", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61707d1c-ee24-4cdd-8c4d-50316baad2da", "sighting_of_ref": "indicator--32beca00-0305-4cf5-bf62-c32f52832362", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e25fb9-9212-4a72-8970-bbfe9d957d51", "sighting_of_ref": "indicator--55851dc9-46c5-43ac-9060-355ed9d4dd2c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d8e0a0-172a-47ae-a9fd-56161bb8143d", "sighting_of_ref": "indicator--0784f3c7-05e3-436b-bcf3-86ea806c2209", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c38b41-e275-485a-a42f-46009a42015f", "sighting_of_ref": "indicator--b54e9a45-7415-4318-a8f5-42de2bcc254f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562cd484-31f3-4ef0-b3ec-e8c6a5eccf2b", "sighting_of_ref": "indicator--8ad0d138-a77c-4d02-9b4e-c3499f1c793e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e11204e-19b1-4bdf-973a-847d1fc6a900", "sighting_of_ref": "indicator--8d770081-f3a2-4e60-b0a7-ecf6c7a2a7c2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b9173c-7a5f-4966-88a9-752ea78d187b", "sighting_of_ref": "indicator--36c0510f-f0dc-4905-841e-6af4496269e0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e35b02-55fb-4df0-b9ce-77725d30bc7b", "sighting_of_ref": "indicator--b5dcaa14-7a0b-4b61-a5a3-adbd840c8575", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b5f647-ec2b-4f6f-b990-97d26965d95b", "sighting_of_ref": "indicator--3214b613-3fae-453b-bffc-c237cd34a82f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd35205a-99e3-41ee-a21d-53cc8afe8215", "sighting_of_ref": "indicator--cbec5abe-9bff-4d7c-9e7f-534d6d635220", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8620f4b-e962-4bcf-b0dd-242a8dd47fc8", "sighting_of_ref": "indicator--d31cf78b-70e0-467c-bb57-e0e36117665d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35de5b68-3a29-44fd-95cd-7b44f9c16ddf", "sighting_of_ref": "indicator--fe51c723-4556-4bc7-acac-20f7fb1cf07f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888c5c41-fa44-47c2-a5d1-bb881fbc01cd", "sighting_of_ref": "indicator--c23393d5-e4e6-430e-b59e-281e7556c827", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c9f0a4-baae-4f1a-8503-5c350a4dfff9", "sighting_of_ref": "indicator--72cde115-3126-4b39-bf15-cf83cc40f6e5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5b6b59-7f5c-4770-9537-937a144e2423", "sighting_of_ref": "indicator--e7866a56-0c4d-4602-83cb-21de956c487d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86662e2-7797-4582-95ec-b063ac2a791b", "sighting_of_ref": "indicator--916391a2-78a4-4627-8bd2-485504e25374", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9be61e-7a13-499f-b480-8f708030c049", "sighting_of_ref": "indicator--8ca52f7b-63ea-42f8-bd4b-bbf6417747d0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b22a47-d653-456b-a484-551a0f649e49", "sighting_of_ref": "indicator--6b4380d9-a69b-4f29-88b1-406b9b2a9853", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635c85df-edf4-48a1-8218-2ed0ad0e8c3e", "sighting_of_ref": "indicator--5c22024f-37a9-40f9-a6d1-a00c859d0112", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2014395a-ce50-48f6-a9d9-e5e6989a1ea8", "sighting_of_ref": "indicator--510ff8d6-17d8-4524-b12d-d23322aab38a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed1f380-7273-422e-8a2d-158404c141c4", "sighting_of_ref": "indicator--54265dba-017f-4290-99f9-039a1cca161a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32ba83e-a586-462a-8476-9bfcbafe1ad2", "sighting_of_ref": "indicator--2c21353c-366c-4b59-a734-6e89d5b5f742", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4140e0a4-6c1a-4da8-b00d-5c16f1bd87c4", "sighting_of_ref": "indicator--a5ece907-6e0e-40dc-87d5-2ce52a77afd2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b574b4-d5ab-4c18-a4bd-42073227fd8a", "sighting_of_ref": "indicator--fd9bf758-6689-42e5-801a-d257bd674375", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a04a632-b87e-4d07-bb52-b4b7c5b0658d", "sighting_of_ref": "indicator--4a15b28d-fb22-4d62-a6d8-d59efb32043e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4babf1-f239-43a0-93e9-42dc5ce19c04", "sighting_of_ref": "indicator--e8558b70-a422-4cac-a6ca-cc57f7762922", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4441e5ab-83a7-47fc-be2f-50a6db613d55", "sighting_of_ref": "indicator--808f32e6-aeee-45bf-b53c-9f326fac4091", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f9314c-a53d-4c19-b934-c80006686239", "sighting_of_ref": "indicator--d40a91fb-a92b-443a-912b-1d8f19d390c2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbca6d5-5b95-4d7b-9c36-30a477b67938", "sighting_of_ref": "indicator--e7e72aa4-ad59-42d2-b720-35a7025e980c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553cb63c-b52c-4323-83cc-3fe8ec691874", "sighting_of_ref": "indicator--45a7e308-24ef-4faf-a40d-e7dca1004b7e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09f9110-916e-47a0-94c5-b9587beda603", "sighting_of_ref": "indicator--e3a30104-564f-4dc9-bc01-fb7adf8c6bdc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e824617c-ccd1-49e1-9890-9af5084019ed", "sighting_of_ref": "indicator--e3a30104-564f-4dc9-bc01-fb7adf8c6bdc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8163fb-19f9-48dc-a821-e957123ea284", "sighting_of_ref": "indicator--9a932421-0c8c-4670-8626-f727cda25c71", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2fd5064-4925-4b04-92ef-9a9961e614f1", "sighting_of_ref": "indicator--72d201fe-f685-4cb8-9707-a666623a4f3f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1887fb-9be9-4a66-a0f6-586b2c4a5526", "sighting_of_ref": "indicator--95742da9-61f7-4a2f-8c2b-1d676de43065", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b067e9c-0eb9-42d3-9c02-8758a58fe5fb", "sighting_of_ref": "indicator--06162299-90b2-4053-b28f-52187e2b36c8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8bbfdc-0ca5-4012-9a6e-512889466474", "sighting_of_ref": "indicator--6921ce4b-924d-491a-9117-995fbe547139", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768b7a48-12ee-43eb-8562-278ec523417c", "sighting_of_ref": "indicator--c85c3113-3d8b-433e-b59a-80f1a32a0908", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3c5690-3b59-418e-ad65-855e0cb88eea", "sighting_of_ref": "indicator--ccaa8063-3f35-4812-85ea-8c9fa5f5f22e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713b72ee-9ca4-4844-843a-6f932b2f5fd1", "sighting_of_ref": "indicator--8fbfa843-8522-4c31-9017-628dedf20221", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2b4220-4aac-4b0a-ba8e-9bd61fd3d4da", "sighting_of_ref": "indicator--c428eb9e-dcf5-4129-8c8d-60672e54deeb", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ece009-a904-4d9e-b730-1b720806889e", "sighting_of_ref": "indicator--4b9f8096-f60d-43fc-b900-00b57e57c9ec", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea4a95f-f2a7-40fe-8653-e7866698df08", "sighting_of_ref": "indicator--28728fef-90d8-4d67-b8d8-71aa8c4f9bb3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f6606b-a40f-4900-a8bd-9a488b414c48", "sighting_of_ref": "indicator--5b09f82e-8f94-4e7d-989d-a3b545b8e6d6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f33259-3bc9-42d2-981b-91f390ea7a1b", "sighting_of_ref": "indicator--fda6a6c6-3da3-4183-b946-6f3261f9a96b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f28f56c-a093-43b2-8b9b-5aabffe6e261", "sighting_of_ref": "indicator--78fa487b-d564-40ba-95c0-2cc8bc6f24ad", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c306d7d-5935-4f03-9cbc-7182c14282f0", "sighting_of_ref": "indicator--f2d2c0f4-3514-4cb6-8962-2faedef7c348", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f87d3a-ca0f-42cd-bacc-d05673be4956", "sighting_of_ref": "indicator--b717a2c6-e314-496a-a58f-7025b4795970", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6fa07d-585c-4c39-a879-c666740e2ef4", "sighting_of_ref": "indicator--b717a2c6-e314-496a-a58f-7025b4795970", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e8013a-8ecb-4e13-b483-3ee05c630456", "sighting_of_ref": "indicator--46bd851d-3be8-49f2-a6ed-b6d9c8572ed9", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab4d35e-ec2c-4d83-8bb8-79fa55aa0065", "sighting_of_ref": "indicator--fe2b326d-8837-4c7d-b79f-d94320e71d47", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3801ff-3844-4945-a8dd-64e46ab83187", "sighting_of_ref": "indicator--fe2b326d-8837-4c7d-b79f-d94320e71d47", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ff019a-a26c-4654-9416-bffd9a8b547d", "sighting_of_ref": "indicator--651efa44-0e0b-4de7-96b6-4e4a3277facb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80090db1-ef59-4340-81cf-ebc782acf001", "sighting_of_ref": "indicator--8d2cee81-f8ef-474d-8412-c1b96d9fad11", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d834af7-a177-4c11-b633-e13425c276ec", "sighting_of_ref": "indicator--8d2cee81-f8ef-474d-8412-c1b96d9fad11", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3e31c2-ceeb-415c-b34d-d90a5c742797", "sighting_of_ref": "indicator--8d2cee81-f8ef-474d-8412-c1b96d9fad11", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf04cbb5-325a-453f-8512-a169dcabd516", "sighting_of_ref": "indicator--7b4c0f7e-85c9-4658-b4f9-b7ca050520ea", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c0b4cd-adf3-45c1-aa64-81b05b9e65ac", "sighting_of_ref": "indicator--99778f30-5efd-44e2-b254-4cef60324ead", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fc66f8-5f94-4c30-a096-7af76bf5c189", "sighting_of_ref": "indicator--b33f465e-c845-4b9c-8742-62a2a5619b8e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0091389d-1f0f-43de-a7e1-200bbc742e1b", "sighting_of_ref": "indicator--40d0d58e-9dce-41be-a1fd-4dd21f6eb5ce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f66d9d-0a4d-4131-bc6b-b0fbf1edc0ea", "sighting_of_ref": "indicator--40d0d58e-9dce-41be-a1fd-4dd21f6eb5ce", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bdca937-3cf4-4cc8-bc34-54da451c1f94", "sighting_of_ref": "indicator--4e3df726-4f15-477a-93d6-30058a644ac7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e966acc2-b98f-442d-bf7a-b7de88caaefe", "sighting_of_ref": "indicator--4e3df726-4f15-477a-93d6-30058a644ac7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f69fc39-6e1e-42ad-9607-ccb581f5d37b", "sighting_of_ref": "indicator--e960ecff-6aa5-4e02-bab1-287ff79ea624", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2589926a-1737-4108-a97d-68c69cd8a531", "sighting_of_ref": "indicator--ddbcd659-b02a-4d0f-b9bc-3efe33365f3a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d7f047-6aa1-4d47-9e8d-842c3f121aae", "sighting_of_ref": "indicator--9248f9cf-4129-4096-81f9-8c855def1919", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59946354-ceef-4711-b967-0fc0eba3bbd6", "sighting_of_ref": "indicator--b18053e1-cc53-449a-b6a0-d5da4df551f6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8ea671-a711-423c-98bf-a3d77863206e", "sighting_of_ref": "indicator--89e44fee-31d9-4e54-99a4-45227a4c074a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b920baaa-380e-412c-8428-23aa196e06c1", "sighting_of_ref": "indicator--d9462002-61ba-474c-9a75-508b082d7a61", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de7ef3c-5524-4293-a665-22f3960392ec", "sighting_of_ref": "indicator--b08eb209-a966-42bc-bf3f-e2a8b4a8d647", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08cada8-b0d6-432b-b008-fd0b37d8ff40", "sighting_of_ref": "indicator--e6e1687d-886d-404a-aecc-c4a8b5142e09", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c2a8ce-b044-46e7-8f76-08a0912b5a4f", "sighting_of_ref": "indicator--28cbc23c-804f-44bf-9171-ca72679a3bec", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70256fc-d95e-4115-8c74-8564904a0a22", "sighting_of_ref": "indicator--95f05ab2-7f2c-45bb-9f1e-93ac5e5f0de8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e959f56-6339-4e4a-a650-f4f484f0eab9", "sighting_of_ref": "indicator--94b6afdf-bfa3-4303-bbe8-2e9be5a8da37", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e04270c-3a00-4ad0-a3c8-8dcb620331df", "sighting_of_ref": "indicator--9615bf46-e011-4210-8662-28ae134c481e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac125280-1a72-419f-b30f-08231d702b87", "sighting_of_ref": "indicator--1e015610-ac95-4d56-b177-b93c8553dde8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba7d17b-d0aa-4345-aade-cbcb52482f5a", "sighting_of_ref": "indicator--e6f92b64-1417-40c0-838e-7ca374c1d630", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962bebdc-b9e3-4ebb-8ba1-112a14d8eebe", "sighting_of_ref": "indicator--8d9008ae-c298-4e42-99a5-499323e122dc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca69dfd3-15a4-48ad-819f-84717bde0e7e", "sighting_of_ref": "indicator--6b61418c-d4b1-4936-a90d-3ad704b3719f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd02ccd-43db-4985-8867-221506c37d7a", "sighting_of_ref": "indicator--cefc86a4-2d91-439c-805f-aa1e366dc372", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfd4b40-7518-4ee7-adc7-4cf1c369c537", "sighting_of_ref": "indicator--46ca4554-d114-45a9-85c9-ace90d5d848a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f436a4-e3bf-49d4-8bac-e3c87ecb7d31", "sighting_of_ref": "indicator--d857c61c-9fd3-4bf1-ab11-f2bf866678df", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f95e715-0b2b-4428-a16e-410ea1ac8a32", "sighting_of_ref": "indicator--d857c61c-9fd3-4bf1-ab11-f2bf866678df", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed1efaa-6045-45b8-b589-50af95477f2f", "sighting_of_ref": "indicator--e0636a2b-be2a-4a8e-8d65-3980f45c795f", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9db694-7949-4cf2-9e9e-916eba10ec00", "sighting_of_ref": "indicator--ceabbd6f-70dc-4a0f-a8ee-ef5f72053bf8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca5baac-a244-4945-aa68-65f2f7794c31", "sighting_of_ref": "indicator--22560fba-bd86-431e-a19b-12fb0ae97ce4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef60b2ed-d198-4c25-9245-4a74d971403f", "sighting_of_ref": "indicator--ae3c6d3a-a2dc-4e1f-87b9-d957cc3a50a4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da416cb-9f0c-4baa-adf8-2191519e365d", "sighting_of_ref": "indicator--e882a21e-1b62-400f-8da4-6fd48c7773e6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3d744c-5fc6-439b-8d35-74fe034cf758", "sighting_of_ref": "indicator--e882a21e-1b62-400f-8da4-6fd48c7773e6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc72b7d6-1b1c-43d0-91a4-b0603f0a2d35", "sighting_of_ref": "indicator--645b8922-12e5-4279-bdcf-a6a7d3174728", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f88eb3-81cb-4b5a-9b53-b423abe7f0e2", "sighting_of_ref": "indicator--965eabeb-204d-48fd-b0f4-23bcbecf3ec0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896b0f5c-82c7-428f-825c-e1760db5cb7d", "sighting_of_ref": "indicator--8cc89fe7-b429-40e6-823e-ffbb7f40b4f5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b415cf-5da1-471f-a03a-a08a2399cfde", "sighting_of_ref": "indicator--b65e14f6-22ef-4f79-a27c-e42fe42b06d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a175c15-d03b-45a6-bb61-79c954e3de56", "sighting_of_ref": "indicator--ecbbb700-8f06-4476-a315-ece74d7d71a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3873db9-a51a-4c6d-bcd2-b20f7c6e36e9", "sighting_of_ref": "indicator--6a0b81fe-1bf7-4382-998a-d76994f3c04d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90384667-8ed4-434a-a42e-f2c34d4b8023", "sighting_of_ref": "indicator--5667520e-c1ee-45c7-b355-16881947cbbe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a38020-8b33-4bcc-9e22-82eecf7619b1", "sighting_of_ref": "indicator--b43207cb-ed62-427b-97b6-acb08865fe7b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe75b439-0144-4312-9615-e8116cdf24cc", "sighting_of_ref": "indicator--deaf8312-7654-4f74-a457-f179c54a54de", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d265923-5cfe-420d-a378-26a372e85a72", "sighting_of_ref": "indicator--98e50f51-0708-43ed-8cd3-66cc84afbed9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0cc992b-ba88-4d01-9d2e-4a1a90620841", "sighting_of_ref": "indicator--a144403c-bbc2-4958-8ef9-0e26cd5e9610", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457a5f38-81d7-4e6a-adc1-50e6292f7314", "sighting_of_ref": "indicator--29d2d9fc-3506-43e6-8e03-cd9405e29476", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ac0f4a-adc9-439d-8bc7-4b5db21042c7", "sighting_of_ref": "indicator--22ee51d0-51ed-40db-8578-f3e0c3b8a3e9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfda414b-3905-4472-b9b4-3432837fa10a", "sighting_of_ref": "indicator--a596d524-9a3d-4c28-b6f9-21145d5ee64a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f8d88d-c2b8-4239-a856-aa7c75e8d9d2", "sighting_of_ref": "indicator--f02b4523-30b2-4e65-a69b-e8ebc0e4af8f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888246ec-6bda-43c6-87ec-2306d87c0aaa", "sighting_of_ref": "indicator--116ae1e6-92e8-4f23-9cf4-4ae5e495c55a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f0d23e-0f95-47cc-8ee5-abc048c6bc05", "sighting_of_ref": "indicator--97c6788a-cc5d-4ce0-bf22-eda6726f8148", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acb5fdf-e430-44e9-a90f-e236ca778599", "sighting_of_ref": "indicator--15ea176c-522a-4b88-bb7e-b741ba2a5c60", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a78554-6873-4c94-a834-e8c0ea975cc9", "sighting_of_ref": "indicator--76654b50-18e9-47a9-9bb4-8be694363db3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd27137-e332-408b-8f4e-b486d07273bc", "sighting_of_ref": "indicator--d35971ad-d0c2-47dc-a548-d1bc78e93846", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1481c1-6267-4269-8341-c2a8fe24f35a", "sighting_of_ref": "indicator--ff49a463-c587-4983-9af6-4012b1a4461e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bf8bfb-389c-4d4c-b694-99aed6cab22b", "sighting_of_ref": "indicator--d4d95e3b-60cf-419d-b91e-d21b08589922", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c609ab84-cd48-4c06-94da-d573e350d355", "sighting_of_ref": "indicator--0ab91855-8caa-4991-92e3-1d4533468e49", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadcca73-7c57-461e-b620-a55a49743c62", "sighting_of_ref": "indicator--883a1500-8416-49f2-a53e-97e56323a64d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282d6ced-b982-4a2d-a83a-974e59c5de43", "sighting_of_ref": "indicator--31894472-e5c4-4cf8-856f-2621de01ce96", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3741e3d-ea03-401d-8727-840a310f4a05", "sighting_of_ref": "indicator--1f0c2b3b-c17e-4543-98d6-324e93fa435a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdd7eca-d2bd-486e-88c7-7c085ca649ab", "sighting_of_ref": "indicator--f95c12b8-d1e3-4232-8ec6-9ed96b4e41b1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23c85ef-13d3-4766-9839-f629ead24fa1", "sighting_of_ref": "indicator--289aa12c-d665-41b3-8963-e452ec63d413", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d41af7b-ab1a-4024-9e10-e652faefa443", "sighting_of_ref": "indicator--41b950b4-d827-4170-a139-45cfe5d53bc8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20803f18-59d8-4a3d-bb56-162b275fc97d", "sighting_of_ref": "indicator--b6fea710-625e-4724-948e-f37dcafca9d2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86dd565-2040-4920-9896-fa5b261f085d", "sighting_of_ref": "indicator--c7fde12a-5b7c-4a12-8ce8-e1a1b67c6cb6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7fd3577-f08b-490b-80ef-eed08c867aef", "sighting_of_ref": "indicator--9cfad533-560f-4f65-837a-a64f9b8d9e98", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422a5ff5-d001-4135-8409-8b61b8b42c44", "sighting_of_ref": "indicator--65e5c4aa-83b5-4b56-b153-7ed8df7a08f1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074ff019-d56c-4a54-a246-a18a3873a334", "sighting_of_ref": "indicator--aa1d7e58-d6fe-4ebf-9dd8-740e105fe297", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49ea768-4d6c-4b9c-b75c-1b46722907f7", "sighting_of_ref": "indicator--a08ecdf6-f579-4028-83e8-33ac163c7e20", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71032a77-4ce6-423d-8d76-e0187207ed60", "sighting_of_ref": "indicator--860795af-22e9-4f23-bf14-b7d7b7ee92f9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20a4a70-5d38-4668-ae46-f945b7b52583", "sighting_of_ref": "indicator--500f9141-7ba5-4300-9086-8b18dceb0882", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc83e7e3-236d-4dc2-8110-5ae7c082ac8c", "sighting_of_ref": "indicator--1216405c-af6a-4afb-b050-6a7a96eb3798", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1307e75e-48a8-45ba-82d4-8ab08ef6ebbd", "sighting_of_ref": "indicator--c5489396-d5eb-46ae-b466-8dc1363cb66a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ccd693-f8c4-42d0-a662-2a399eed7317", "sighting_of_ref": "indicator--d65a2a18-5fc5-44d6-bc57-aff8ccb6b2cc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c40b3a7-b4d1-4587-8c99-1650c0afff01", "sighting_of_ref": "indicator--13e4f096-a73f-484f-a14c-59748a080040", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50eaa2f1-b380-417c-abee-bc2175974321", "sighting_of_ref": "indicator--3f998673-90ec-4b7c-ac5c-4097b6614d2a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05bbcec-cac7-4365-b286-d64a5a9219e8", "sighting_of_ref": "indicator--071f16ee-4008-4bad-baf8-4529ae91b6fa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98b90c6-ab72-49ee-bef2-2194695c6460", "sighting_of_ref": "indicator--aa9719fd-9ce9-4773-b8c9-6ad40a317229", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2806f60a-6a28-41ec-99b4-81b714412fcd", "sighting_of_ref": "indicator--d661cece-3e18-4abf-b91a-dbabd4a71bce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1941857f-7926-4f1f-a9a9-2c823f7721d0", "sighting_of_ref": "indicator--d661cece-3e18-4abf-b91a-dbabd4a71bce", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02352199-c69c-4a46-a71a-691cab39ce34", "sighting_of_ref": "indicator--2fad7027-0c80-448b-9298-5916aa0ff337", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde79ac7-a47d-400d-abfc-e0e8ad8d41eb", "sighting_of_ref": "indicator--633478b6-ecfe-4961-b4cb-6c45116ddce1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2765a89c-4d73-4dcf-bdfd-a7b8d18c3d73", "sighting_of_ref": "indicator--633478b6-ecfe-4961-b4cb-6c45116ddce1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3707f9d9-27a0-4859-a087-66d3a31eb5fb", "sighting_of_ref": "indicator--eedc0bab-aac5-451a-9243-c116a2d4979d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e03773-c073-4188-82da-e2751e930aa1", "sighting_of_ref": "indicator--9dc9598a-0a76-4b4d-84fa-c886a1472f80", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0960b726-6269-497e-b4ab-ca3bc2c7798c", "sighting_of_ref": "indicator--6c562def-736c-48d7-a8d2-b40312fbe97e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bfe1ce7-d52f-40d4-a182-40718f68ccdf", "sighting_of_ref": "indicator--f1416370-36f9-422a-a539-8b4082966ef1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b9b8ac-3155-42c5-8f67-aa67ee51b3ea", "sighting_of_ref": "indicator--37f4fe56-72fd-4262-b6d1-218dac83789f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aecf1c53-bcbe-4404-8cd6-4bd14bc1957d", "sighting_of_ref": "indicator--560b3fd0-206b-4f3c-95a3-37a335fb852d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2acf5b8-6ce7-4d29-8b1c-410d9ae8b63e", "sighting_of_ref": "indicator--f7e8250c-6632-47ac-b89b-747911f999e9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc4a2b4-84a6-49f8-8ca8-c57b7ca382f2", "sighting_of_ref": "indicator--bc565490-4e44-4f76-af6f-bf89b7469eeb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc7a526-bf0f-42ab-b667-8f7e9435e8d1", "sighting_of_ref": "indicator--d229ffe4-0263-4267-ac4d-d367444e5ae7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e4f3b6-45d0-4f4a-b8e6-b6b7ce72c859", "sighting_of_ref": "indicator--ed59e21a-43d2-497d-a6ca-41584f751fc7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbbe6a4-a2a4-48d8-91a1-770e798ab1d8", "sighting_of_ref": "indicator--44c53091-8c9c-4519-8cb2-3e2c093dfb90", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36149d5d-1733-470c-aa2a-8696d950c599", "sighting_of_ref": "indicator--41c69d86-db22-47ed-aede-7d71214f071c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f512fd98-bd6e-45c4-95b7-625d0eef6c63", "sighting_of_ref": "indicator--b4e29ec1-ff31-424a-a19d-8a719ced1688", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d882bc49-ec59-45eb-a8c6-f276a964a0c4", "sighting_of_ref": "indicator--4f387908-e122-4e70-9dd5-009d3fd75ce0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b345d18e-3001-4474-852e-d07d4a4864ed", "sighting_of_ref": "indicator--d45c5de1-a190-4b8a-b6cf-ee738048aec4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f02047-53a8-4e0f-b453-3108ded4e788", "sighting_of_ref": "indicator--3a6cd5e0-31f0-4a7f-8521-c9e5c36b23e6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4621c005-8f80-4a68-b9a3-32e6b51335e5", "sighting_of_ref": "indicator--dc70c192-a900-451c-a75c-889002264dd5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8523412f-c559-4f44-98c2-18510ef92ba2", "sighting_of_ref": "indicator--78de6128-063d-4d22-828c-90b1e52d8a15", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c08136b-a5a4-4280-a9e0-278a5695dfba", "sighting_of_ref": "indicator--e1b210a0-71ba-4761-9ec1-f93e70fde1c3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ebcc50-f6c4-4541-9a0b-7ca622b01cec", "sighting_of_ref": "indicator--9d86b9cd-1f0d-47b7-a966-416c740ede70", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29338d0-babb-4698-9dc5-74b1ff5d2cd9", "sighting_of_ref": "indicator--3965ec14-1937-44f5-9b25-3c2a654ef631", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75bec91f-0d25-4eda-a1d9-b03b5ca2a32a", "sighting_of_ref": "indicator--8b792f3a-824e-4fc1-9f66-77b03ad6783a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d741e57d-fc30-45f0-9fac-43b3f1e72326", "sighting_of_ref": "indicator--342e77aa-d9ae-498c-b649-4d388ac2b38a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ba3468-b251-421e-a5c6-2a7529e919ad", "sighting_of_ref": "indicator--7e28a39f-0fc1-4c53-b43a-380f2af80a66", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8e46b0-def7-4575-a83b-8192c25dc505", "sighting_of_ref": "indicator--59577ca7-766b-46ea-ac4f-8d6311b2ce5a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a548674-364a-43d3-bc09-7b60ed216320", "sighting_of_ref": "indicator--3181ec47-6cea-4d9b-88f2-235411d5da2a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7e4250-357d-4cd5-8897-04099e23a36d", "sighting_of_ref": "indicator--c1869226-bc43-4320-a511-d5f5807ebf09", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ca5e1d-125e-459e-bedb-598cf0149974", "sighting_of_ref": "indicator--df90ff46-0839-4239-8952-40c5945b355b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3984e3d5-f3ca-478c-925a-23df99aff89a", "sighting_of_ref": "indicator--26c060c1-453d-4765-a416-023f07e34d8c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5048cc9-852a-4f07-ba5d-b5dbe889f590", "sighting_of_ref": "indicator--26c060c1-453d-4765-a416-023f07e34d8c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eab134e-f550-47b8-a86b-d61891fb982a", "sighting_of_ref": "indicator--fd6256cc-282f-459f-9601-7164bc7fe604", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b264d4cb-9981-4c56-beae-0eacc9961fd5", "sighting_of_ref": "indicator--1aac9325-8b3f-4ccc-a533-137cbb886947", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319fc3ea-96a3-409b-8619-bc12d6871770", "sighting_of_ref": "indicator--a8ac8c0b-b2ca-46a8-ad28-9e37b04cbd76", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7da43b4-34e1-4402-9d89-7f6793c9e7ca", "sighting_of_ref": "indicator--7462ebd1-e1a4-46fa-b61a-789500cb650e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9226b3bd-bcd6-4a59-8333-40c2d4e58289", "sighting_of_ref": "indicator--320451e5-5460-447e-a674-75b10c24a628", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c126bb-80bb-475c-8601-62164edf02eb", "sighting_of_ref": "indicator--7c29f8f0-45f5-4ab2-ad05-15a14e1b8c7a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189c5828-a762-4019-8a92-aa13768e9424", "sighting_of_ref": "indicator--28f476f3-721c-4a14-bafb-2a81d5f3841d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576e64cc-7141-42cf-b8e4-b5273f6eaadc", "sighting_of_ref": "indicator--a9f72b7c-0cdf-47af-b9d4-bc32a5667a94", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e228b74-4421-42c3-b046-fd96e750e974", "sighting_of_ref": "indicator--e1fb96df-bbdd-48ef-9b84-8155b159a5ec", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c0c0f2-a7ab-44b3-b99a-fdda68983413", "sighting_of_ref": "indicator--2240438a-d6fa-4225-a6ba-68be302a9d52", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c65a3fc-0a53-42e4-a620-8aa6c1ff0866", "sighting_of_ref": "indicator--deca9300-d386-48b2-ae71-0cb19ad2479f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8992dc47-7962-460b-b02b-f90a8d36e9dc", "sighting_of_ref": "indicator--63930653-5289-4449-9fa5-4449bf871bb3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fd175d-3228-4b10-99e0-9765baaa56e1", "sighting_of_ref": "indicator--d94e2a43-e2dd-4799-9066-dc5d38dd9107", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9845251-a37a-4fb2-b66c-78aca64f053f", "sighting_of_ref": "indicator--9b9fd96f-6174-438f-a0d3-7de1c8229b47", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091295f9-1be9-483e-8a34-aac3dce88641", "sighting_of_ref": "indicator--d8a95be1-cd0c-4906-9c6a-fac306d8cba7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85813167-75cb-41c3-a4c9-776561f227e6", "sighting_of_ref": "indicator--6692fe43-e153-4e3e-a2d9-33a7785e3e5e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93c7301-fcd6-45a9-a4b3-ea43972e096d", "sighting_of_ref": "indicator--ed71bf98-5b4a-4372-b01e-ee4f4a11f4ce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c3e535-d787-40a8-aaca-927af7826cb3", "sighting_of_ref": "indicator--a1c3748f-9df3-4410-8e89-5aee6d3a4ae2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3219e234-2db7-4dbf-857f-5aac88a726bd", "sighting_of_ref": "indicator--e217c910-d7d8-439e-8fb8-491d230b5032", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0394c378-6010-41bd-a037-c73b4827fc7c", "sighting_of_ref": "indicator--61e64700-a50b-4cb9-b89a-c014f457e2e5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1b74e7-6447-49a4-a773-f8817fd86507", "sighting_of_ref": "indicator--3755f7b9-1452-44e5-b3eb-7be8d393ac9d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed15562-bbb8-4b2a-b979-617eef022c1a", "sighting_of_ref": "indicator--35ac48a1-2d50-4e52-b56a-22ae41edb938", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565ef39e-506c-4498-887b-a6dd2ebde919", "sighting_of_ref": "indicator--79400052-b470-4722-9a1f-f6f927066a4c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ffb3105-8c0b-47b1-b4ea-4aaa75587ead", "sighting_of_ref": "indicator--79400052-b470-4722-9a1f-f6f927066a4c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--badc8503-f15c-4892-a450-0c4007ece6e8", "sighting_of_ref": "indicator--0ea95600-10f2-48c4-9eff-49d6c7af05a7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e541729-ca9f-48aa-8722-3a5e90737efd", "sighting_of_ref": "indicator--44a95e6b-d2c8-4ae5-8cfe-a0bf11038171", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e397ada-5ff9-4520-8181-c1094ad4f697", "sighting_of_ref": "indicator--893b3c01-a057-4fc4-ab7e-284c2ceee8af", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4074f4ee-f6fa-40f0-b9a3-249364707cfa", "sighting_of_ref": "indicator--03ce2ba4-a453-41f7-96d3-b8487f5fad2e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a4560c-f925-4ad9-90f7-d729d3bb1779", "sighting_of_ref": "indicator--f9cbf8e8-0cc7-46a5-822d-3875bfd01e6f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0f9fae-99c8-4c81-a527-ccefcd4676ad", "sighting_of_ref": "indicator--0de2a6dd-6cc3-43f2-a869-2e1bde8e054e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed85e3c-b3bb-46ef-a167-594ed6c9217f", "sighting_of_ref": "indicator--3ccf86ee-9488-40ab-9345-b0bf254ab6e4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf4b877-c61f-41e9-bb98-69b289cf1c53", "sighting_of_ref": "indicator--68f9bb2d-4d44-468b-8406-c2c4a6d0a925", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35fc1f9d-29e8-4d16-b744-fe7d99c6305d", "sighting_of_ref": "indicator--c171de8e-db22-40af-b0c9-9b7b9777ceca", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f23b30c-ae8a-4ac2-8f72-6a0575b3f1dd", "sighting_of_ref": "indicator--7533c0ed-22f8-4c08-ae42-3ef8db93fd71", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931ce469-7e72-4fbf-89cc-1ceb3ac6d776", "sighting_of_ref": "indicator--7533c0ed-22f8-4c08-ae42-3ef8db93fd71", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee631fc-236e-4c3a-837e-8f368e45adc8", "sighting_of_ref": "indicator--0ca11d23-648c-4369-8b91-cadd2ff65bee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd88cfa5-49e7-4205-85c5-9324a02da826", "sighting_of_ref": "indicator--3ca9c6ec-e84f-445d-acec-e2379655989e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b18791-0896-48e2-ae7f-a99fe99bf272", "sighting_of_ref": "indicator--926eb348-9181-486d-b7f1-a8ec945c82c9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a8aedc-a12e-4eb0-8332-4a6eb902e121", "sighting_of_ref": "indicator--5d49a79f-b395-4eee-a834-752f172851e6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542fb095-6cd6-4823-ae0c-6681f04e61e1", "sighting_of_ref": "indicator--06cd4874-05c4-46ab-9087-aa2a665c5926", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f86e4d2-8f5b-4741-84e4-3f40ef107f4d", "sighting_of_ref": "indicator--9b8ed264-3282-43da-b603-ab3492768d2b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a94844-e582-4f14-aeab-d1c349cd4044", "sighting_of_ref": "indicator--91eb0f8a-819c-4951-b729-38c6b383c41b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce4a833-cc54-448d-aeb9-535fafba01aa", "sighting_of_ref": "indicator--3e4b6b5e-9c3c-4cd3-be92-d8a795bcf1a9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31adf04b-c1cb-401c-9530-3cb790056a17", "sighting_of_ref": "indicator--04fedbb7-af31-483f-9d6d-e298ed239177", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b9474d-7d3f-434d-baad-7bc90186a4eb", "sighting_of_ref": "indicator--9dab0d0c-befa-4fda-8c23-9fd9c3f20509", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd444de8-49af-4d88-bcac-83c289bcf9e6", "sighting_of_ref": "indicator--237cdb98-5b85-4f9c-b671-493c3dcdab71", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca131e86-8d1c-4628-9378-ce9a0b388f4b", "sighting_of_ref": "indicator--4916addb-0d30-4113-9a73-f29c25411419", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227f302b-af55-493e-b90a-9c5ca7d53440", "sighting_of_ref": "indicator--5d19e3cb-3778-488b-8021-0293892a5bb4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d741144f-e900-4bf1-80fd-e92308512124", "sighting_of_ref": "indicator--5c9c0110-fad4-403b-b220-1571e8929726", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e62746-aace-40fb-b969-f323e0dc6620", "sighting_of_ref": "indicator--7d4181db-da12-48a0-967a-d3df843971f4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1be271-0df6-46fa-beb8-c443aadcef6e", "sighting_of_ref": "indicator--02474d9b-5e37-4558-b717-659f54d409c0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3bf149a-23bc-4136-8b1a-2f103ab33623", "sighting_of_ref": "indicator--f2e54f47-e547-42b0-be91-b08f61b88c72", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7483c506-a750-4465-8465-e01f0727ddae", "sighting_of_ref": "indicator--a37855b9-8361-4f1a-98cb-77f510bd81ed", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85c0ab6-269a-4bc7-9e7e-75e433f0efa5", "sighting_of_ref": "indicator--90c4f687-8386-4068-8bc1-94cfd5209ed4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c6baaf-41e5-497f-b38c-e6c7f4c36536", "sighting_of_ref": "indicator--3b0c3eb4-710e-412c-986d-77f6d776c233", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b278232-1ba0-4240-8cdd-eaafd54a98b0", "sighting_of_ref": "indicator--8c202ddc-1a79-4cd5-a4b5-9ec7c74b90d1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921e9864-332e-4c14-bb36-21a5753fa575", "sighting_of_ref": "indicator--00a16432-9a8b-4399-9f1f-8ed76e41675c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05647b95-27ba-4549-88bf-f5ac7f50cfc2", "sighting_of_ref": "indicator--7a415da7-5ff6-4d41-9d76-ed51bc3965a8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3224c08b-5f07-4ffd-b874-20566db26b0d", "sighting_of_ref": "indicator--2f9a5a47-de97-4a25-9e65-1d78259f9a83", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7297fb86-d724-41cf-9ebe-50ac38cb30de", "sighting_of_ref": "indicator--eddb7102-8bd5-4e84-aa1a-07cc5ce9a4ac", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74764f5-5f0e-4678-b73b-77f10823db90", "sighting_of_ref": "indicator--eddb7102-8bd5-4e84-aa1a-07cc5ce9a4ac", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b993864-128b-4ac9-abed-2fb6be8d5027", "sighting_of_ref": "indicator--73d25a39-e9cc-4f06-a491-303108e36c12", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de02b6b-ed68-47e9-b988-cc89ff97d982", "sighting_of_ref": "indicator--3c9f5f85-19c4-4219-a8ea-48cdbcd705c1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb583a24-155b-43f2-b048-bb01814b8387", "sighting_of_ref": "indicator--895926eb-2ece-479c-a8d3-41b191ff8b6a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42021c54-1920-4f12-8f46-f2634269d79c", "sighting_of_ref": "indicator--3a893093-425b-4b15-abc4-13876d19e61e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41fc2c43-d0a7-4ad4-b8e4-6d1e93b2ce9a", "sighting_of_ref": "indicator--b0a1e63e-f5e5-49c1-b004-a034025115e9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deee4b7a-8236-42dd-a115-f80b59204467", "sighting_of_ref": "indicator--d4da1d78-a4a5-4d4c-93fb-2c4b4185d422", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d011251-c231-42f6-9a7e-23847ababa1a", "sighting_of_ref": "indicator--b409d2ed-9d37-495e-9335-3099244f4fba", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32da8ea9-8bea-4cab-92b6-ab459b392136", "sighting_of_ref": "indicator--3a368048-102f-4df2-8802-a29304d2dfca", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ced871-3738-46d9-8e6f-9e0119372887", "sighting_of_ref": "indicator--1207aa33-900f-44c1-94c3-9e5dbd7dc2a1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42807b7b-cb3e-4573-a0e6-7a8233514c37", "sighting_of_ref": "indicator--d356f95d-2a50-42bb-a9dc-d62efbe4d849", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689a9e50-aa48-4eb4-90c6-79cdf4b7daad", "sighting_of_ref": "indicator--d356f95d-2a50-42bb-a9dc-d62efbe4d849", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a66da1-fe19-41bd-8300-55ab88545790", "sighting_of_ref": "indicator--c5094649-499b-4e66-aaa7-56343f8e3001", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1fa17fd-3a8b-467d-bfb1-aa0914dc503e", "sighting_of_ref": "indicator--3f06ae9f-6a03-4c92-aa44-5b8e645d6f45", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a328d532-00b6-4b1e-8dc7-c34df2833f3a", "sighting_of_ref": "indicator--7e0b2bda-8d11-4027-9a1d-9412320545e6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5862c26c-79e6-415a-a4db-2bbff04204ed", "sighting_of_ref": "indicator--00d97db5-5e72-4110-8abf-b0290cac7458", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031eb0a7-eb79-41b6-a33a-f4c882042c3b", "sighting_of_ref": "indicator--529ed9e2-0ad5-4902-8cc5-cb55c00d0cf4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709e74ad-37c6-4a76-a210-2036bd963354", "sighting_of_ref": "indicator--f25baf87-d552-4f53-8140-89ec020b2ed2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ba2fac-c94a-4540-953c-e83fbcd20e89", "sighting_of_ref": "indicator--14da53b0-94a8-48d3-9bef-a6e6f1df05a5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9259d5ff-c722-41cf-95a9-0c43d8ce2cb6", "sighting_of_ref": "indicator--a3038c3c-adcb-4988-a8c4-942c478560aa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00bc26c-3c3d-4c19-84c6-22bb33e1db4e", "sighting_of_ref": "indicator--3eac5ff9-9a02-46b6-8d5d-e577102f5c86", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e456f16-4d11-4167-adbd-ff6a028019c0", "sighting_of_ref": "indicator--feaa3b2b-50d1-4851-8e20-1c8c416b132b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6545db05-103b-44c8-808c-2735cfcb3ef3", "sighting_of_ref": "indicator--8a410b66-1c9c-4d25-a663-6b649aa80748", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d122ecd-eba5-4963-a37c-3806fccf3b25", "sighting_of_ref": "indicator--8086ef11-ff7a-43c9-b45f-57693eabbe1c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076c10c8-0d18-4b31-a0e9-d3024fbbe439", "sighting_of_ref": "indicator--33d7c1e2-725f-4c2f-928b-cf80ab8e2cbc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670b172d-53a8-455d-bfaa-81e7ac0907ec", "sighting_of_ref": "indicator--6793e9da-f2ce-446a-a3be-148fd8d20989", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f035a2d-f2f0-4a52-91a8-930f7467e602", "sighting_of_ref": "indicator--db984cb9-a39b-4613-8e70-a6b4506c7643", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae80c68-d3b9-4fbe-9505-190755ec5445", "sighting_of_ref": "indicator--7f8bfbd7-d041-4a87-83d5-569c2e0bc109", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49c11a5-3e7d-4ae9-94fb-f9308a57e1f3", "sighting_of_ref": "indicator--a77ff3ee-73fc-48f2-9531-562ff3a15a6c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c3f7b7-c6ad-4391-a520-9ab8192d1d79", "sighting_of_ref": "indicator--b6548b1a-8f1d-4922-8ccb-6310df8a979c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c43150-fc95-466e-94d1-c925fccf3756", "sighting_of_ref": "indicator--8b360549-ce41-4674-8b44-52931282adc1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43f5870-a1fc-48b9-93c6-0d54581f1020", "sighting_of_ref": "indicator--5f24fa0d-5646-4c8d-a84f-f5137eed7870", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ae2054-95e6-424b-a969-34d7574e4b6f", "sighting_of_ref": "indicator--e46bb239-bd45-43fa-aade-1300973f2079", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e8015c-5f8d-47f9-bac7-3d119b0d5be1", "sighting_of_ref": "indicator--00b83cbd-f971-4b2c-89d9-cbab9af00b07", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdbe648-a9b8-4ee0-9868-495d52ccdf11", "sighting_of_ref": "indicator--0a91e6f3-c09f-449c-b11e-1b2b9cdedab2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ae8aeb-665a-4b52-8abe-df5caf09adf5", "sighting_of_ref": "indicator--b68c00ed-fd7a-4085-8738-e257968dbc22", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec137f11-89ac-4ba9-9df1-724a8192ab9c", "sighting_of_ref": "indicator--255e3203-3a01-4049-a312-1a40463777ba", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d29844-a281-4538-b76a-a648fd05b60e", "sighting_of_ref": "indicator--d9da647c-8388-4035-8a7f-e141da43dca4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459c674f-c083-4cad-a291-5580df8ca4d5", "sighting_of_ref": "indicator--213e4569-c67f-42d7-a345-d7b1bc875859", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9ac00e-d590-493b-9046-1af0bfc8fd0d", "sighting_of_ref": "indicator--cf0340b7-fc89-45c5-a43e-cf6e17771ddd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee99fe94-4cf4-4eb3-8b5f-bfe20b5a3beb", "sighting_of_ref": "indicator--c4f3feeb-3923-464c-a757-96aa32e662ee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34208099-b0b1-4fcf-8739-7955a00017c1", "sighting_of_ref": "indicator--116f5c7a-4d4f-4f11-8742-2a7b8bbf4bf6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43f3e18-a198-45d2-a02d-87df368aacfe", "sighting_of_ref": "indicator--3587d91b-535a-4ae9-8cf8-fad851ecf627", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6435b5e2-104f-46e8-8295-e5ef98c48278", "sighting_of_ref": "indicator--d490436c-d5dd-4ee9-a347-b47a20675c1e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0111b9-ac46-44d9-bebb-877b4e9f92d7", "sighting_of_ref": "indicator--d490436c-d5dd-4ee9-a347-b47a20675c1e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b00888-cdc2-4e31-92a7-7671f9468e02", "sighting_of_ref": "indicator--893a41cd-d389-49ae-a154-ecccde499ac0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f6a999-d2b6-4eab-810e-4678ee115152", "sighting_of_ref": "indicator--a43f5d82-c635-49db-b2f7-e75ae8f1d66d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509029e3-c759-4a3e-8f78-43f3e7b08ed2", "sighting_of_ref": "indicator--c4bed46b-26d2-4edd-a3c9-bd2c35322598", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d05f70b-7bbd-4b5d-8ca8-d8cc3f33af8f", "sighting_of_ref": "indicator--ecd81a93-d423-4218-ba4c-1ac4b8575e7a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec7730e-a9f8-428a-8e71-deea7165167e", "sighting_of_ref": "indicator--3021c006-0fe3-49e5-b739-1b0b4d9a3a62", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d5aeb5-3371-4ebf-8cec-c4eb46f6ea4d", "sighting_of_ref": "indicator--3021c006-0fe3-49e5-b739-1b0b4d9a3a62", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b35323-8ee2-4fad-9db8-a901a50df60b", "sighting_of_ref": "indicator--31ccab27-bb3b-471e-9271-859e37dde863", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab79c521-32c2-42dc-838a-6ee91d418393", "sighting_of_ref": "indicator--73d38e30-2edb-4371-a555-f892398cff5a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f54b4a-0d71-423f-adad-55cd2398daf0", "sighting_of_ref": "indicator--86050548-cf68-457d-b486-6d192eb327b7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca75e1b-a682-4873-b634-79b5815d8676", "sighting_of_ref": "indicator--45eda53a-6815-4a8e-8efa-bba15bbbb1c5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551f15ae-c73b-4140-aa9c-c2daaf438aae", "sighting_of_ref": "indicator--facf7325-957f-412c-83cd-7a3663f050ad", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245e7ff5-2c84-4d92-b52d-2faf4b0a7d16", "sighting_of_ref": "indicator--25f03d38-0020-4c00-aed9-336bb8de7d08", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e23ee41-7262-4591-8573-8890125fbb1c", "sighting_of_ref": "indicator--364892c1-ba04-4aa9-a2a5-ec42188b9426", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee19510-0360-4584-82ab-d3a75b95ccf2", "sighting_of_ref": "indicator--96792b38-cd7d-4da0-947d-87d3ebc7691a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b667e252-47cb-4e6e-abee-d2e4e2af1604", "sighting_of_ref": "indicator--910177ad-4a51-40ad-98e1-27e4737f2eb6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368423ac-a8de-4fd4-8ae7-d03a67d0af92", "sighting_of_ref": "indicator--7d58674a-5407-4497-bd7c-021f806c0e1e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df394e08-bb69-4ac2-8ca2-0869ea4610ba", "sighting_of_ref": "indicator--8f2d2fee-c99d-4a6a-b178-63ec724b65d8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f997911e-03a7-4c8b-ab21-2e050038acf0", "sighting_of_ref": "indicator--9e8e468a-d5dc-47be-bfe9-fb0a2947b813", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3f61b2-4d87-4c98-8cde-0578f96d8450", "sighting_of_ref": "indicator--c5d01a96-40f9-43f5-8a2e-b9bda8ed9113", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e6d014-6629-415b-93ff-05100ebd41c6", "sighting_of_ref": "indicator--717ea2e7-8373-4210-84c2-54a4a765db3c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0e29f5-8188-4c62-b7a2-075f9fb9f38b", "sighting_of_ref": "indicator--b75a4a3a-24c5-4097-9617-622cdd98c0fb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a5cd20-e0f1-40ed-8f0d-e85a1386d46b", "sighting_of_ref": "indicator--b0017dbd-7022-4a8d-8baa-bf1a6cb6b5de", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f979b302-dcd9-42c1-a7ab-6455e9845d25", "sighting_of_ref": "indicator--ed2c7e55-e706-4c28-901e-d4ad4ccc9d86", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1643d8-d43f-4bac-b7cf-b49d1f835c0c", "sighting_of_ref": "indicator--ddf263e6-ae31-4c45-b949-1facba0dfdeb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2c138e-1d4e-44e9-8ff1-4f5c37d000e4", "sighting_of_ref": "indicator--1585857d-645f-47cc-96e1-5c395fb1e3df", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f63084b-f5c6-4499-9a2f-0427841c91cf", "sighting_of_ref": "indicator--995a2c55-b3c2-473c-b5b9-01b195288be1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5b5d9f-5bca-4f3a-a8cd-e03d234e4dc9", "sighting_of_ref": "indicator--d198e504-f62a-43a0-9339-cfed08fa1094", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98699874-5c03-4370-b10b-5c07cb3a71d0", "sighting_of_ref": "indicator--693df1d5-21d7-4f0f-9c79-619a76e37dd8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4bb8ee-840f-4c57-9a6c-010a3bdb9fde", "sighting_of_ref": "indicator--35343034-e0fa-4ad5-af94-296e837f8ed8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1d4830-c74a-498e-a19a-bd0d80f247e7", "sighting_of_ref": "indicator--7ece2be5-1139-4c43-87ba-c1e2fdc66ef5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c13fdd0-dd35-4643-b5e5-d36dd3a163c3", "sighting_of_ref": "indicator--99e1094b-622a-4879-9137-de6c1b9a52dc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182d6b73-f5f7-4f22-8e4e-3580a302236a", "sighting_of_ref": "indicator--7d239e4a-c306-4ee5-afe0-de2fb54eb688", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a42ef0e-1be2-47f7-a3b6-a8814dab894b", "sighting_of_ref": "indicator--3dee85b2-e881-41f2-8266-fbe418708e50", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95f1858-e3c1-46f1-8729-b2f7a5c82645", "sighting_of_ref": "indicator--6c518394-c1cc-4bfd-bcfd-3a6a4ffabc1e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25c9bc8-e720-4a91-a7cb-cf235b6ef479", "sighting_of_ref": "indicator--9bef8b6d-ec03-444b-bc03-722293125fb7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a802f59-044b-4a66-8606-ceb9af216932", "sighting_of_ref": "indicator--f15ffe13-1c5e-4a00-ba7b-ee729cc50593", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78aff942-548e-4166-8bc2-9d64c14a0ca8", "sighting_of_ref": "indicator--78c9719b-de78-4fd8-b938-d2b7f01064cb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a01cbb-f06a-4193-9b84-f8ffc960783f", "sighting_of_ref": "indicator--33f7c608-a46a-4c4b-9ac1-8f46ed53388c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0599837b-a8f0-4ffc-bc5d-73edcb7a2b00", "sighting_of_ref": "indicator--291cbc5d-c95a-4ae0-b38c-0cccfc2be419", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40b50bc-a386-49bf-9e20-63d1088bc826", "sighting_of_ref": "indicator--ff542e4f-a6e3-426e-b08e-63c0c9d1bc0d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf8654f-64ed-454b-91bb-c73d797d8035", "sighting_of_ref": "indicator--b85a84b1-f7bf-4e2b-85c9-6636d4a00905", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331bb185-45d1-4174-b60c-265327b28a32", "sighting_of_ref": "indicator--7b0f3f60-c81e-4336-952a-9cad86473310", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd13cce-7088-4cf9-b226-18dd49f567b0", "sighting_of_ref": "indicator--1faa61bb-c107-4998-af2c-363e1d3ebf32", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd165db-bbb8-4829-87b3-38f9f5283ee3", "sighting_of_ref": "indicator--c223fada-3a78-42a4-9647-98ecaec58492", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f65e4b-c524-4398-9068-b12da2e65182", "sighting_of_ref": "indicator--4612c771-14b9-4cf9-b693-ae07bafa7a61", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1852cd4c-36a2-46c4-9467-c6f803b32ecd", "sighting_of_ref": "indicator--f29bec14-e43d-4174-957d-cec01a4e13cb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f81979-8631-410b-bf04-5194f99248bc", "sighting_of_ref": "indicator--4a916899-7873-4a85-ba94-c44d5b23284f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b4477d-3d00-45a5-9b6f-bb5bc22ce600", "sighting_of_ref": "indicator--4a916899-7873-4a85-ba94-c44d5b23284f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790212ec-244f-449f-ab2c-3d0067cf4363", "sighting_of_ref": "indicator--0ae6d954-7a63-4536-a26d-c9424e0bc05d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a514e155-7d71-467c-b321-c112d2e6c959", "sighting_of_ref": "indicator--7cb375d7-02d1-445c-aadc-36cab39e3dd7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968ba23e-63d0-4026-8e69-45e2584fe7cf", "sighting_of_ref": "indicator--692aca68-801a-4d38-9cf8-a6e5d6c4527b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45df389-a8ca-45c3-8865-a9b7cbe92db5", "sighting_of_ref": "indicator--692aca68-801a-4d38-9cf8-a6e5d6c4527b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d172ee-ed48-473d-8e16-3efc4577384c", "sighting_of_ref": "indicator--e9944b22-56f7-4753-af9f-41c1d46dee41", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8db8ed-bf27-49f0-8d83-86a2ea1375f3", "sighting_of_ref": "indicator--cc9975de-06ad-41fe-95d3-242fde44bc4b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf68e75-288b-4ff1-9920-93edc1d84aaf", "sighting_of_ref": "indicator--caac1a29-42cb-4ba3-8775-63fa3a2e403e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055d6181-862d-40cc-b39d-62c121db2a4c", "sighting_of_ref": "indicator--24ef2f4c-d708-468c-8706-46b444e22d91", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c9def0-ac6c-4a1d-a1be-d17a16bf8fb5", "sighting_of_ref": "indicator--7c5d0052-31a7-4299-898e-2e8c2f1fadb1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fef5990-bf6f-4cde-93d8-1385c3ff01b3", "sighting_of_ref": "indicator--0abd1160-a124-4563-ac35-ffb74f019fdd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68df27dd-a82c-402c-b557-b083004caea5", "sighting_of_ref": "indicator--738cf6ae-e9b5-457c-9f96-7b85571706ee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37946913-3818-4504-a7fc-a2c0a24bf711", "sighting_of_ref": "indicator--fbcf2f28-2c55-450a-a2e8-17e5097f8d57", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad5efe9-c373-4cbc-abb8-ad2a14261961", "sighting_of_ref": "indicator--a5d4e6fd-8c84-4a30-bb16-130e56b7a9d1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a22ce62-d542-4274-ae41-b4f479e9666c", "sighting_of_ref": "indicator--fe080e5b-9ca9-4c82-86bf-839e071bbeaf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b102210-ac65-463d-acbe-7d12e8c8788d", "sighting_of_ref": "indicator--a008c19e-07b9-4326-9a7b-2f8a8cd3c6aa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a4bf86-5ba6-4c10-b4d1-25d99039e859", "sighting_of_ref": "indicator--5526fdb5-2744-4845-bce2-4b9636be043e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5d7635-51a5-44d8-a3b0-547858d9a103", "sighting_of_ref": "indicator--99b01ba9-5872-4b80-a909-203be98d7804", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aca46d9-28da-429a-bed0-2bbd84257d5c", "sighting_of_ref": "indicator--9ab214bb-7c18-467c-878d-bb2167e0a21d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25769982-36da-4ae5-83f9-eb9da8380b4b", "sighting_of_ref": "indicator--7cf31ce8-69d8-4516-9d53-30f84d6d25bf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1737bdeb-7d28-454c-844d-5dcfed57b537", "sighting_of_ref": "indicator--acdd760b-5333-47e3-9d6d-a088926bbe89", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4aed2b7-e2ce-43d1-8519-8e447ac8f34e", "sighting_of_ref": "indicator--8d89a50f-b2bd-4a0c-92c3-e52a2b4ffb65", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73c90e2-2214-41c8-bef5-50f88029d0ff", "sighting_of_ref": "indicator--0b283d2f-5692-4020-8341-0a5a7d061517", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54ecfaa-7234-4f0b-8650-3059260bd1c5", "sighting_of_ref": "indicator--4aa1a8dd-4250-4c17-8e4a-aaafe37b1619", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0240a89-9d06-421c-9b1d-4b6bb3787ace", "sighting_of_ref": "indicator--e9d4c4f8-eced-4277-be02-a5cf1c1a9a00", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0669f3-eb80-481d-9833-a250fab1fa08", "sighting_of_ref": "indicator--e0cb370f-d1df-4797-8880-43590bd520b2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b4e113-db79-4319-a427-e0ded129754a", "sighting_of_ref": "indicator--b4c1120d-dd16-4d67-9929-04fb60f95722", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fa61ea-d432-493e-89a6-a21fd007ce8b", "sighting_of_ref": "indicator--1d0b90b1-ecfe-4f8d-a1d0-ec46c15fd715", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65cd94e9-5256-4e98-9499-d0717c94e57c", "sighting_of_ref": "indicator--470879c8-a58c-4954-94d3-8cb742f2cb7c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcc956d-d15a-4922-aba1-960c0f6706b9", "sighting_of_ref": "indicator--0e2de09a-7947-4308-bb50-a0d4a78b2d7b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b819a42-08f4-43c7-bc46-0138da837600", "sighting_of_ref": "indicator--8e23dc3d-e593-4a0d-a058-529e17194b21", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23859ab-5d9d-4dd3-a497-3038925d57a6", "sighting_of_ref": "indicator--bd57ef8b-de1e-479c-a23b-5aef42588928", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef68aa7e-bbe8-4a65-a0be-386dd3910738", "sighting_of_ref": "indicator--8b8d146b-6f27-4b5f-ab3b-1b631446fec2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abff2897-03d4-4e82-b81f-6ec6e4c65e7e", "sighting_of_ref": "indicator--7b714c22-a2ee-454c-a298-eb7c8f43ed86", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48110cdf-207a-40dc-9a81-b34c22b8458c", "sighting_of_ref": "indicator--38f1818a-5aac-44b8-b50c-3cf513ddcd38", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc6b53e-e5d8-4f36-82eb-8871aa4a75c7", "sighting_of_ref": "indicator--68a58de3-6e58-48e5-a6d9-27d391202139", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f7ed4a-661b-4d10-8cb2-6a3e6cbd7992", "sighting_of_ref": "indicator--c9d9ee15-021e-437f-a67a-6f766e9ee472", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c7f7db-0643-482e-855c-814b0f43e8ad", "sighting_of_ref": "indicator--14b2180c-9283-4b28-9aa2-47d2503dc18c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efc3f1e-1621-4cd1-af47-ca1102401b1a", "sighting_of_ref": "indicator--f8930021-8d6e-4157-aa86-2a5a369bfa00", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68ec42b-e1f2-4bc1-b316-b4eaec70b79a", "sighting_of_ref": "indicator--73a8c915-24ad-4e0e-b213-d9f897d7d8c8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9614321-3d98-43dc-b7da-9c9e62d270f6", "sighting_of_ref": "indicator--1a92609e-abc2-4faa-a844-32464c54e8e8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de94620e-88fe-49fa-b007-533919d8947e", "sighting_of_ref": "indicator--50ba1b04-8263-4419-b2f0-49d00e49c5ed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6634ce-4d0a-4e61-ba8f-15631a422068", "sighting_of_ref": "indicator--a31f6dd2-3748-446a-b73b-c893d4dd4b19", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78935c5f-44f5-47af-899f-e4aeae534289", "sighting_of_ref": "indicator--75ada6ec-8d1d-46cb-9c33-a940f41332bb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f103499-9550-425f-80ea-212de44f6492", "sighting_of_ref": "indicator--e53c59d9-a50f-41c9-ae8d-ccab043b1441", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe841e88-0d6e-48e8-a838-97bf8f6fd430", "sighting_of_ref": "indicator--faeae08f-7e92-44f2-9b2f-d63839664e4b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b758725-3993-41b7-9bb1-c0c8979a1c41", "sighting_of_ref": "indicator--faeae08f-7e92-44f2-9b2f-d63839664e4b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d38475-6dda-436c-bd12-8ae83162edb1", "sighting_of_ref": "indicator--2a7937e7-d097-4088-8d81-f2320efea04c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff7bf01-e0a4-4c47-8abf-8a401bdb097f", "sighting_of_ref": "indicator--0a11bd4a-65a3-4636-a613-e96683043f22", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886bab1b-8882-4dcf-b9bc-e91a0fd8a88e", "sighting_of_ref": "indicator--ef949a78-4bea-4548-ad00-32df3710ae95", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d513f471-b0db-4dc0-bf01-4dc9e7b3933c", "sighting_of_ref": "indicator--0d94cde7-23b0-4144-9426-a204d7505fa3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731ff651-e392-44a9-bb04-e3fe21978fb8", "sighting_of_ref": "indicator--5d588728-8cfd-469b-b336-0c1f098fda48", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fc072f-577f-48f3-893b-b80f0091a1dd", "sighting_of_ref": "indicator--da4c4e15-3cd5-4804-99ab-213495114bb1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d591ae9-6cfc-4096-b7c8-62de30bbb0d2", "sighting_of_ref": "indicator--229e6431-cef5-474a-a432-d79fdd3fba62", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3265930-df16-4120-98ff-23a1a9571cdc", "sighting_of_ref": "indicator--1ce524d6-4332-4856-8823-5bc0a94a4556", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755603dd-2abc-4e7b-bc50-9236efdfc19e", "sighting_of_ref": "indicator--ebf69ae2-eb43-4523-bd82-2329a62aa54a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49db7438-a032-47d8-b3e1-d70176cc1a7a", "sighting_of_ref": "indicator--7e47a65c-f711-47f3-9450-12accd10a1bf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5c1de5-b4f2-4fed-8b61-8b20f19476e5", "sighting_of_ref": "indicator--0133260f-eed9-4615-9d71-8cf083295af4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace948f4-5d6d-41e1-a516-f3193d7e2641", "sighting_of_ref": "indicator--ccec49da-fdf3-438b-93cf-f46809df1080", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5646cfce-ab00-4b48-b32a-6383fa2d8dab", "sighting_of_ref": "indicator--1563dc59-996a-4a7d-83c1-b33727054f58", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055e2728-daee-42b9-a42c-80ab050d0eb4", "sighting_of_ref": "indicator--4ba6f373-dc9d-437c-aef0-6d6ccf865872", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b0024b-554d-45ff-8d40-257b066bd920", "sighting_of_ref": "indicator--03a49f8a-cd90-400c-bdd0-90e3d12813a4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3644917a-ee3a-4b93-923e-78eda2a374f2", "sighting_of_ref": "indicator--cb2939aa-3436-4fa5-ab40-6d2ce2b8f748", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92b3adc-bbb7-4d44-ad13-4838faf3ae23", "sighting_of_ref": "indicator--2f359b76-02e2-4d98-9e63-feaef2ef5081", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19abeaa-c512-4e3f-880a-a3d16d9fee1f", "sighting_of_ref": "indicator--bee11034-0ff6-48bb-b223-47c96fa08d14", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86570d9-b910-44c0-8a78-d2022707b464", "sighting_of_ref": "indicator--70a3ac25-be45-4f27-a2d7-bf15130e28b0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6731fa3-7cbd-43aa-b791-cef21de47b83", "sighting_of_ref": "indicator--d9f32535-8d44-4195-a22a-38fbe5ed7759", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11dad51-d9c3-4b5e-81ad-f2264051fce3", "sighting_of_ref": "indicator--b28c6821-88ae-425f-ab4b-719e359840ab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe941c8-f09d-4f66-8b22-382db81c04f5", "sighting_of_ref": "indicator--b28c6821-88ae-425f-ab4b-719e359840ab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b001fa9-f6c7-42cf-ad6a-690580c7095e", "sighting_of_ref": "indicator--ef14fe6e-b418-40ac-a38b-041033f307eb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2593009-8031-4741-b13d-a8ac690c48d3", "sighting_of_ref": "indicator--95c1f7e0-3d50-46f5-9b70-6d446965381d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1870c6-ee06-49d3-92f9-2a8cf619c4da", "sighting_of_ref": "indicator--172ceec4-9b93-43cc-9c93-c88a319c873a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20e7346-58e9-484f-a565-cd7fc0965079", "sighting_of_ref": "indicator--5d3d26d5-72ac-473f-a48c-b60dbe8bedbf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099ab479-a6a9-4673-8c17-b7d4eb204248", "sighting_of_ref": "indicator--b6b40c2b-5738-42a4-9f66-66e00055a8bb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9d7a91-2820-4132-882e-a328f0a355c5", "sighting_of_ref": "indicator--55c75785-f843-4cb9-bbcf-843b9e5f6259", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ccbfac-a7de-4ba3-9e18-7cc93140cca0", "sighting_of_ref": "indicator--f43d48c3-2bbf-4448-8895-8ea73749c306", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18aeeb2a-bfba-4838-978f-c873b1f21ad5", "sighting_of_ref": "indicator--4c37837d-a1a1-4b8e-9939-c3cc018e12dc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fec336c-4914-471c-883c-531f4657dbc8", "sighting_of_ref": "indicator--b51cbbbc-03b2-4f7f-ab5a-131ba6525ce7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e557e0-05ee-46a7-be64-a5bf64fda2ca", "sighting_of_ref": "indicator--995d5508-49a9-49b8-8e9d-7b3094163a3d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9289a6-85a2-4c55-80b0-c1998b16e47e", "sighting_of_ref": "indicator--b5103b73-2f77-4382-bb1f-2c37678a4557", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50055d25-1210-4466-8028-18425a36ceb0", "sighting_of_ref": "indicator--63916b78-cd62-49a0-94c7-1bb7849f9923", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea443ec-9e82-48d5-a99d-4d2d6ee94f18", "sighting_of_ref": "indicator--2ce8517b-5e5a-40b7-8d46-a72d004ffa1d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fffde08-6a22-46fd-aeb4-591eb4dc8c44", "sighting_of_ref": "indicator--d22ff011-7bb0-49ba-8843-515a81096bfb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4732650e-f6d2-4ae0-9caa-2b7097b2396d", "sighting_of_ref": "indicator--9614c8a6-839c-44d6-8f96-333dd64af43d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f5cec9-4a11-4cd8-a8d6-3e8cbdcacf61", "sighting_of_ref": "indicator--679c6420-a01e-417a-a41d-044f7f4780fc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f1185e-2c39-4bda-9717-f380479d587f", "sighting_of_ref": "indicator--996357e7-bfde-41b9-a2a7-5dfe159db81c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbfc7a1-41e1-44c3-b660-d31da23dd233", "sighting_of_ref": "indicator--2e1b0243-c9c9-4d41-86cf-4d7dbbc4057a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b137ba54-0115-4a85-9648-0b2c054a8a7b", "sighting_of_ref": "indicator--dc0ef6fa-c176-4672-8beb-9f6edd2cfec6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b9a47e-e41a-475b-8d9b-17e4811ae2dc", "sighting_of_ref": "indicator--035ff2b2-bbb9-4d2b-9805-43ae78ff62fa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95384a6b-aba9-4dd1-8774-0914cd7aaf8b", "sighting_of_ref": "indicator--11674496-e992-405f-bbbb-5bdf115c1a11", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa77b72b-6539-43ff-963a-6755ac47bf63", "sighting_of_ref": "indicator--5fd432e0-5e48-423d-8a54-f2476bbf7733", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab53439-7312-4aa6-b774-978892f8dfb6", "sighting_of_ref": "indicator--5c2c747c-df1b-45f8-9dd5-5247b520de7f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b444b4c-ce30-4c80-a0bb-a8630074613b", "sighting_of_ref": "indicator--cdd2c2ee-b8d6-4ff2-83a0-d688eb31df46", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01624774-ee91-4452-8701-15ff7b046556", "sighting_of_ref": "indicator--28aa92d3-f7f4-473a-b26a-ca3645e8d74d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e6a52e-9ccf-4e04-ba8a-7c4117f4b7fa", "sighting_of_ref": "indicator--28aa92d3-f7f4-473a-b26a-ca3645e8d74d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c385b9-e7ab-4ba4-9824-1591dd1f213c", "sighting_of_ref": "indicator--e496701f-9591-4096-a0da-10bd606b2db5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1821cbe1-a115-40a0-b675-02bca2f21f78", "sighting_of_ref": "indicator--86d563d3-cc7d-4d52-910b-6fe2fd589638", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a1b4d0-147c-4f4c-9f38-219aa5d61ec3", "sighting_of_ref": "indicator--4687c72f-c9d3-46c1-9671-3d3a1b104896", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81bad880-f41f-44ae-93c1-72be2945190e", "sighting_of_ref": "indicator--99d97fbd-e3b1-489f-9836-bf5822b11033", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a792dc9e-7837-410f-908d-584ef5221515", "sighting_of_ref": "indicator--dc771653-d7c2-4e3d-ba77-65c8a7428768", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111b926b-e7e8-4038-876d-34b4e8b8c32a", "sighting_of_ref": "indicator--dc771653-d7c2-4e3d-ba77-65c8a7428768", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f888546-e9a2-4d03-b67d-7f625ec8c283", "sighting_of_ref": "indicator--b763942a-9fe2-4a78-9b9e-13e97cb26935", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb0d328-ee2c-446a-a4c7-2e40ea3988d2", "sighting_of_ref": "indicator--53219ebc-2352-4607-ac04-e5f37311d4f5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4d8722-060b-4fa4-a178-a16861ddd1b5", "sighting_of_ref": "indicator--05ca036b-2883-4f37-a9eb-2ff6a7143ca7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a428c90-394c-47f4-a78b-15bf143c46f1", "sighting_of_ref": "indicator--d4f8b5d5-bb0d-4531-875b-88bd40b15475", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6071edf1-f90e-4fd6-ac96-5f0ea74b9375", "sighting_of_ref": "indicator--cbd0fac6-f382-46bf-a3ad-07c5aec0bf13", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a4ceb0-2534-407d-a6e9-f732df2a666d", "sighting_of_ref": "indicator--be09c22d-5955-4a24-b9e8-8424dee9e301", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4898478a-abd7-4b6c-b581-88df951ada91", "sighting_of_ref": "indicator--9c61c1e7-9046-4c91-91b1-e847a4996131", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e93a2e7-279f-40cd-a4ee-b28db9732675", "sighting_of_ref": "indicator--165a6d0f-fd87-4f27-b0f5-8a339dd0352c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14794b08-b6cf-4a74-b0c0-219426e32345", "sighting_of_ref": "indicator--d699a0b9-628e-4b38-8caf-6413e6e30bcb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6576f3ef-9954-4965-b379-31ac7ecbfa51", "sighting_of_ref": "indicator--34c4d024-dd75-40b5-84f6-db0155a53d81", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0804974e-74a6-4c1d-8c0d-861a256cce0f", "sighting_of_ref": "indicator--d6fe82d9-b034-4f6f-9dcb-f9fc7a4a1cea", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009bd343-a9f6-478d-82e8-9ad46ac88c55", "sighting_of_ref": "indicator--b24ca0a8-747f-4a0f-b1a3-ed303a0c5aef", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eccd600f-2507-4dd6-a613-8f621c392b97", "sighting_of_ref": "indicator--92791125-cfd2-4402-93de-cc0f02a0c42f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eec4786-074d-46dd-8621-883005e00683", "sighting_of_ref": "indicator--7fda5bed-9aa7-4ed3-a9da-ed7f530e4e12", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59b0cdb-392f-4d23-86ab-6f270e7e5009", "sighting_of_ref": "indicator--10156370-921d-4e22-ad1d-18bd118cede2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffe95a1-23c2-4e55-9944-bcc23fa98e90", "sighting_of_ref": "indicator--f4a6c4a7-be05-4c0f-bcc5-d3c20eefec36", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc11b59-b7d9-4ed9-b4f4-3b5f058dd0a7", "sighting_of_ref": "indicator--a7f529b9-7f8c-46ed-a744-5df960fbd284", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e5bfe1-3d59-4bf0-b731-ba78108e7a49", "sighting_of_ref": "indicator--d1a442f1-aa4b-4793-83ac-bc0e2e2564ad", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873323ab-504d-4da7-8b9a-8ac79d1d982e", "sighting_of_ref": "indicator--d1a442f1-aa4b-4793-83ac-bc0e2e2564ad", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df7a6b8-f0e1-40e5-b01f-00a4299e97ab", "sighting_of_ref": "indicator--e7d4c29e-1568-4e83-9592-ce675c497c13", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cee57d5-80e8-4b19-ae7f-467996f1c971", "sighting_of_ref": "indicator--e8572310-1027-453d-8559-4fce2e13777a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edf5908-e2fb-45d0-9a2a-050aab19f45e", "sighting_of_ref": "indicator--2cce37f0-bdc8-4fe1-ac7d-54e2930bc8f2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c81f93-4d27-464e-a227-5c58c3afeefe", "sighting_of_ref": "indicator--ea44008f-fa70-450d-b8eb-408032115d43", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae81989-d080-4005-ab4d-9ad4091ddecb", "sighting_of_ref": "indicator--5bad7991-4ad7-4f01-81ec-a48e70efcd80", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993bdda4-8472-4538-bbb4-ab9a5bb17e71", "sighting_of_ref": "indicator--5bad7991-4ad7-4f01-81ec-a48e70efcd80", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc3f3c2-72b3-4968-acf4-fb0632066906", "sighting_of_ref": "indicator--4c384a16-d6c7-48e5-ad0d-06b6a31c93a3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b4f76b-d05e-4946-82c8-0065ccd463ce", "sighting_of_ref": "indicator--2b99728d-36de-40cf-9c93-eef345a12ed1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebe6c82-a3c6-46c6-8911-8027aeba415a", "sighting_of_ref": "indicator--2b99728d-36de-40cf-9c93-eef345a12ed1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a267b05-6f0a-4faf-a5a7-7bfc554e502d", "sighting_of_ref": "indicator--83f72531-1a9b-43e4-ad49-59903ca12ee1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcb06fd-f830-466d-a5b6-f6bf840527b8", "sighting_of_ref": "indicator--22956db1-1544-4020-b133-2c260afd4cef", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b634bd62-70ea-497f-9071-7a675f429d52", "sighting_of_ref": "indicator--6ba4e876-1789-46a4-980b-440d858ef977", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249875c0-c1e6-4d11-90f7-fffb73ae4a37", "sighting_of_ref": "indicator--83eaa8e4-3be3-4d77-a480-822186457dbe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54046c59-6749-4ee7-a571-440c31ae1d71", "sighting_of_ref": "indicator--26a7a017-2c3c-4260-8b21-c3bdaa15d3d1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881a99ad-5dea-4065-8986-0d2eff29484f", "sighting_of_ref": "indicator--2cdbc448-a87b-43a1-b6ff-cd114b51c38e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0101ab37-e882-4682-8c3c-f1129b8fd3cf", "sighting_of_ref": "indicator--904c6726-a3d0-41f4-b2b4-357ca265bff3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa2fc41-0f49-4ec7-8aa6-1ad83552d06f", "sighting_of_ref": "indicator--77bff57c-88cd-469b-a8d4-87a400bd8a2e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92ca1ee-c0d6-4bc3-8421-4db23f20c032", "sighting_of_ref": "indicator--df7051b1-ec8c-4c26-83ab-220481ddc812", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00dfc760-3e7b-453d-b417-32e432c7aa1c", "sighting_of_ref": "indicator--93c3ffc3-303f-488f-8361-67d8e937b77a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ec98ee-2e5f-4b27-96c3-ee76d69745d9", "sighting_of_ref": "indicator--772e911e-b787-4ed1-b6fb-457df8b4a7a2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f380fc-93ab-4046-b67e-444ef47ff388", "sighting_of_ref": "indicator--772e911e-b787-4ed1-b6fb-457df8b4a7a2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89f6625-9415-402e-86a0-69a8201717f6", "sighting_of_ref": "indicator--3ad39cb7-8851-48d9-b386-6e1605b7836b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82f480b-676f-4a2c-a556-b7bcc538a658", "sighting_of_ref": "indicator--1df08a95-8b2d-4786-bc9d-84d80e8cbf52", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef032d3-50b8-4baf-a295-1bf52d90cd41", "sighting_of_ref": "indicator--ade8f91b-b4d6-4d33-b90f-8e28a57007bb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ed0271-7901-4724-bd0b-939c23e5c21d", "sighting_of_ref": "indicator--60553804-f606-4fa6-a7c1-e71a89602c2b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157cd266-5656-42a7-87cc-d4f950d5fafd", "sighting_of_ref": "indicator--a776cdd9-32db-44c1-a63d-a70142a32f5d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0cb5e1f-add4-44bb-9310-c77ad89cf909", "sighting_of_ref": "indicator--31e9df28-211f-498e-bded-ddef90b501e2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a509680-039c-4e1a-bbb3-3956aab67da5", "sighting_of_ref": "indicator--b7230f82-1357-4ce2-a49a-528152af2329", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa0e5a8-0770-4f76-9e54-24e716eddac2", "sighting_of_ref": "indicator--6f5f8b21-598a-430d-8ec3-bd7e10219d9b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e881bc-00d3-4ec3-ae5a-152ef21ef143", "sighting_of_ref": "indicator--508fb936-3cee-49ad-952b-62f25e90ef20", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363f2783-7a38-4ab5-99fb-e27e33766049", "sighting_of_ref": "indicator--39756a02-e5fa-4cf9-bcac-a3a24ca8e0c8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e8aad7-ad8f-46bb-9b9e-953d7a0246f1", "sighting_of_ref": "indicator--bf076703-4107-42d7-bf93-4b4c8c2c2fe7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d82cdf-02ce-4c1a-8033-e256dbfe6b31", "sighting_of_ref": "indicator--3f0ff625-958f-48f0-89db-594c36e1fff8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b091dcb6-7f90-408c-a683-63ad04017644", "sighting_of_ref": "indicator--4eb5cfc8-1ee4-48fa-aafc-a07363684f8b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0824d53b-f4f6-453e-99b1-24aaa1819450", "sighting_of_ref": "indicator--d1175a78-7947-4d11-8549-e7e029c9a191", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4539e2-6c61-4dd7-b669-07493847afee", "sighting_of_ref": "indicator--8e0e85e7-d9d9-4c00-9e8f-357a3b4cbefd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abeb8b4a-5fb3-4082-a43d-96da4251cd98", "sighting_of_ref": "indicator--0ed58296-2cba-496a-92b6-424ca05fb1a1", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0640807f-c2bd-4dd8-bec5-9a6be6855098", "sighting_of_ref": "indicator--4017b095-f87e-470f-863b-866d3fb0f3ee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06967a5f-87bd-4264-8d85-bf24bbd7f9e4", "sighting_of_ref": "indicator--8e9d70f2-37e0-4625-891a-2b9988695bee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f33da14-e59c-40ef-9117-4d7028b66f5b", "sighting_of_ref": "indicator--12ab2a81-6ec8-4195-95a5-065e2ad7a91e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7ff4ed-e2bf-40e6-9142-8c8282d38985", "sighting_of_ref": "indicator--ebb8f0d5-f624-41f1-9ad4-b9527ac6f55c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9d161c-bcc1-4502-b12f-70aca6227bdc", "sighting_of_ref": "indicator--ebb8f0d5-f624-41f1-9ad4-b9527ac6f55c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16eca425-8551-43d3-ae38-c05d54662142", "sighting_of_ref": "indicator--c960a45a-c081-4927-ac8b-c287fec55c44", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501e1d9d-45fc-4400-a961-4c8108eebce5", "sighting_of_ref": "indicator--c5d7e805-de3a-4ea3-b57e-c6d70913443a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57bf38c-07b0-4d8c-b60b-8127c7272141", "sighting_of_ref": "indicator--f6c98e2a-aa20-40ce-904e-a4f9709864c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c43312-1a16-4f77-b1fe-2a1207c5108a", "sighting_of_ref": "indicator--b16d12cc-e429-4b53-93b7-823f98ce0cd2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6448d23f-0a43-4ef1-b879-02a333e2e829", "sighting_of_ref": "indicator--9f453b62-1e63-487b-ba31-0c160ecc314f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc07d712-1331-4dd6-863e-a4a4fc07a10e", "sighting_of_ref": "indicator--c19a5675-e2e1-4e26-9fa2-f1c51cca9ad3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f773d5-6a93-4737-992f-4bce92a4e459", "sighting_of_ref": "indicator--836f7f8e-2513-4eac-8c6a-413802e9e80b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8b0d02-b48b-48ed-b2a6-bc4b1af61272", "sighting_of_ref": "indicator--8c96fb21-4c4d-4606-a93c-76b96ec0e767", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588af0fd-1b5e-4659-92e1-e30e119ea164", "sighting_of_ref": "indicator--05488931-191c-47ff-8fb5-79bc526b99a8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6235cc30-1088-456d-a296-5b29e0f934d6", "sighting_of_ref": "indicator--ee28c465-ea87-42d8-9fca-74a8e953a4d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1159dd1-f70e-4de1-948b-fbf6c64b0ca5", "sighting_of_ref": "indicator--aa5b7015-42c3-495c-8a0f-aad03cd98445", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6f2858-bd42-46f8-ab26-d5f76c0bc562", "sighting_of_ref": "indicator--d1ec3407-63ed-4a33-a23b-eabbe113f168", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1260b4a7-cf6c-410b-b56a-8e6fcc57baf1", "sighting_of_ref": "indicator--d1ec3407-63ed-4a33-a23b-eabbe113f168", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb68135f-7b28-4461-944a-e7fe5d0f16b1", "sighting_of_ref": "indicator--f622d7e8-8772-43e9-96f2-14af151285aa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4b55f4-5fba-4848-baad-4eb07349dc59", "sighting_of_ref": "indicator--ef4453c7-a3cd-490b-a883-2eed08b4ed28", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d80bf15-2e93-4c3b-aef7-206aed800f18", "sighting_of_ref": "indicator--ef4453c7-a3cd-490b-a883-2eed08b4ed28", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba035810-16ec-4680-a619-3aaf846f4048", "sighting_of_ref": "indicator--ef4453c7-a3cd-490b-a883-2eed08b4ed28", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07630bb7-65a2-4a87-bf1a-9034188b857a", "sighting_of_ref": "indicator--491ede56-0ce2-4931-9af8-9aac41e3086a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0e57b6-6d72-420a-b54c-3d9bfb96db90", "sighting_of_ref": "indicator--491ede56-0ce2-4931-9af8-9aac41e3086a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002afc82-b96b-4660-81c5-9d83f2e0f264", "sighting_of_ref": "indicator--491ede56-0ce2-4931-9af8-9aac41e3086a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791cc564-c68d-4d1a-9675-0bba37a44111", "sighting_of_ref": "indicator--a6c0f97a-242e-4d8e-81d0-2b13c1efa2d5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50975e8-cd99-42a5-9879-87d1c8218611", "sighting_of_ref": "indicator--a6c0f97a-242e-4d8e-81d0-2b13c1efa2d5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6d0ea9-1805-4c1c-8eba-85d292540130", "sighting_of_ref": "indicator--a6c0f97a-242e-4d8e-81d0-2b13c1efa2d5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95671026-1d4d-494e-b7e5-f9c92ebda59d", "sighting_of_ref": "indicator--dd34f5f7-1c14-40c7-8221-0b9f04be7579", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928da7ee-cee8-4301-be2c-cbf2e6d7dc79", "sighting_of_ref": "indicator--dd34f5f7-1c14-40c7-8221-0b9f04be7579", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d06c62c-318f-4a29-a9af-16eef37d278a", "sighting_of_ref": "indicator--a49b6e24-7012-4cdf-acab-1be0f08c98e8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d108913-9aea-483b-abc3-ed5b4cd8c2f1", "sighting_of_ref": "indicator--ac1f1906-e811-478b-bca3-df3fd20eb4de", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b026a070-8126-447a-b8a7-9b5a43e9dcdb", "sighting_of_ref": "indicator--3c8d1b2a-cf3e-4d53-a415-f21cd355b1e8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321c089e-76bd-4234-b588-8b2c761af090", "sighting_of_ref": "indicator--4ea92f8f-3a04-45ca-942e-163ba2989323", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9ff473-695c-418e-81ef-02920d293de9", "sighting_of_ref": "indicator--3053e88c-7d84-4811-b4ec-28d203431e25", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3881b109-d337-4fb4-bcea-1ee805f1b555", "sighting_of_ref": "indicator--3053e88c-7d84-4811-b4ec-28d203431e25", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd85a1a-dd58-44cb-a07b-f4a071c18992", "sighting_of_ref": "indicator--d6a7892d-37cd-42fd-9192-a93b39a88768", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8b1df4-9986-463a-973c-bfe8c5c4f016", "sighting_of_ref": "indicator--4c0e3f66-14c9-431c-b72d-cfe70a8c508d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9240911-1b08-4306-88a8-c351d0ab268c", "sighting_of_ref": "indicator--2af0470d-ef96-4794-bde8-ad5f6bfe50d6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d8b4b1-25e9-4be6-9b89-830cbb533f40", "sighting_of_ref": "indicator--0a563aee-e717-4945-9f18-5c9f6626e65e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b482c8c-53a7-4ad2-b693-d12e6f9acadc", "sighting_of_ref": "indicator--85a72770-1ad2-439c-ad85-a353f86c8e8d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d493c6-28d4-4631-8b93-5f021ef08f46", "sighting_of_ref": "indicator--130007f8-65b2-496c-8143-56e36b245cc4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccdc332-90b7-483a-990a-01ef7bcddf97", "sighting_of_ref": "indicator--130007f8-65b2-496c-8143-56e36b245cc4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fc71c1-bbbc-4fca-b60c-dfe989852617", "sighting_of_ref": "indicator--9e974221-a214-4ccc-a95d-d6547bb5c456", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e54d24-76d3-448e-abc5-d12606ef512f", "sighting_of_ref": "indicator--d3964d1c-9d56-4435-8165-59178713d236", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c076fbef-d585-410f-89c7-327a7a5e8e66", "sighting_of_ref": "indicator--bf852106-7122-4593-8be6-0a73e8e53cd0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20da61e3-8d16-4bfe-8ea1-2d07f9877355", "sighting_of_ref": "indicator--bf852106-7122-4593-8be6-0a73e8e53cd0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb50755f-0a7a-41d3-b28e-c68a30925ec0", "sighting_of_ref": "indicator--bf852106-7122-4593-8be6-0a73e8e53cd0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57c67c6-c733-4c86-a8d0-190cb6c07ea5", "sighting_of_ref": "indicator--28cd6976-5b98-4381-879b-de089c2860c0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1150252f-bbf4-4cff-871b-8a94e1de68a5", "sighting_of_ref": "indicator--28cd6976-5b98-4381-879b-de089c2860c0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7c60a0-aff5-4a0e-87be-3b52880590ba", "sighting_of_ref": "indicator--28cd6976-5b98-4381-879b-de089c2860c0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db57aaa8-e92e-40ef-9d5e-f3016eb3e4d9", "sighting_of_ref": "indicator--69dc7a49-77e3-4fcc-8385-71f51345c605", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84f6fb3-d1ee-455f-9546-480ee85020c6", "sighting_of_ref": "indicator--69dc7a49-77e3-4fcc-8385-71f51345c605", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7097e453-47f4-4a5a-a226-d4fdf179e95b", "sighting_of_ref": "indicator--69dc7a49-77e3-4fcc-8385-71f51345c605", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30cd34a-50ad-40af-9c9e-e81e45888140", "sighting_of_ref": "indicator--db3df973-8cda-4193-891c-2c8d9cd2f01a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d794ec-5339-4941-9a7d-56f9bf6c00da", "sighting_of_ref": "indicator--a2b517b6-507b-458a-897e-ce68e462c391", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a600f950-77c0-49d0-84bc-3edd53e3cacb", "sighting_of_ref": "indicator--75b3983f-7bff-42b8-8973-2159ed8b987b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9734f4-65ba-4c26-a1d7-dbdbb91ace61", "sighting_of_ref": "indicator--6c625d5f-7e73-46b8-ab7e-e58b4dab7218", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83c79b0-c592-4a75-bc3d-916363b64cce", "sighting_of_ref": "indicator--5ab78365-3c4b-4c53-8873-98d3505cd76e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296353c8-1b65-434e-9af6-38defda0d113", "sighting_of_ref": "indicator--d404df4a-c0d7-4575-baa3-f0187d582b80", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268065d1-4fa4-402f-b621-5eece5be2494", "sighting_of_ref": "indicator--796015b0-e7a8-48db-89bf-eed789ca1b3d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86894f3-492a-4c26-8057-eece8cb693b0", "sighting_of_ref": "indicator--a34facc9-5892-48af-b37f-e216caf6285a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0826ae8c-3ed6-48d1-a275-a7de0f6c6e42", "sighting_of_ref": "indicator--fbb644ac-0693-4758-814d-80d821f185eb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26328b1d-e9c1-4585-bbe5-fe6838b4d623", "sighting_of_ref": "indicator--fbb644ac-0693-4758-814d-80d821f185eb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0990874-8efa-4c5f-93ef-d3ae0c1d5981", "sighting_of_ref": "indicator--e9dda7e6-a746-4f97-9257-4fd4c5efba90", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba49443-db0b-49dd-8830-e44bc2a3a2aa", "sighting_of_ref": "indicator--e9dda7e6-a746-4f97-9257-4fd4c5efba90", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578fb760-653f-4e60-a4ff-f2fba676cce7", "sighting_of_ref": "indicator--6cb0bb5c-47e0-485d-8eca-29f860ad9c8a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e236a0c9-5dc9-4dad-8fd0-583d84a5b7b6", "sighting_of_ref": "indicator--c642d04f-9e6c-405e-9090-c929880e5445", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b072f94-c6e8-4293-b30d-be9aedfbc443", "sighting_of_ref": "indicator--4b3fbe70-2b97-496d-a0ff-641be697111f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7730639-64cf-4154-ac0f-fe928bd766f2", "sighting_of_ref": "indicator--cba98381-eebb-4070-a276-88a829afadb7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff94e8a4-f74c-4b58-b350-28da0779698c", "sighting_of_ref": "indicator--c41db4c6-4a01-4ff1-9f7c-25293885041f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c08433-6fd9-47a2-9a7a-1e26b72852b8", "sighting_of_ref": "indicator--38fca5c5-4f14-4fb3-b640-973758276ab6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b31e20-803b-4996-9ff5-462b282fa70f", "sighting_of_ref": "indicator--b011a236-8729-4fe9-b4ca-d7f79549207a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ac88d2-c237-4286-b682-3e9c185a4df3", "sighting_of_ref": "indicator--7f9ebc1b-19e8-4512-94ec-f601b7ad9a07", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e523ae44-664f-493b-9c43-d2a9332da0ab", "sighting_of_ref": "indicator--7f9ebc1b-19e8-4512-94ec-f601b7ad9a07", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a34440b-7075-4481-a854-0c98b26d5fbc", "sighting_of_ref": "indicator--5e719017-8c9d-40e6-9d07-b9e6799941e1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da98fa48-e71c-4cee-b2ae-842ad6a0582b", "sighting_of_ref": "indicator--c1454f62-cadf-4913-8221-181c86c4ad0a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23b3df9-ae92-4b25-b0c4-cf28f2cd89f6", "sighting_of_ref": "indicator--157490cd-603c-49af-abf8-1a7b055ad9d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a78ed3-af09-4aad-ae87-e7bbb2c51721", "sighting_of_ref": "indicator--ab9a95f5-cd7e-422a-b841-7e8fbb86826b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4947658f-ff5d-4ece-bd9b-59f1f396e431", "sighting_of_ref": "indicator--ab9a95f5-cd7e-422a-b841-7e8fbb86826b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fdf14df-c2f2-4406-92fc-92c30ca46dd0", "sighting_of_ref": "indicator--ea7ac8c9-5330-4c8d-a405-4833251aac3a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03fac0e3-8884-44b8-bb3d-9b3efc89d452", "sighting_of_ref": "indicator--2b9921e7-be94-4a34-8ecb-01c0ec9594ac", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ed25c4-17f1-45dd-bb05-01b850d6bf92", "sighting_of_ref": "indicator--89b720f2-2155-4f0b-984b-c2f87ef28643", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29c44f0-62f0-4b42-a379-c0ca712c1c3e", "sighting_of_ref": "indicator--fd8b04c6-576a-4979-a663-93be337cdf4d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852b4aa5-b86d-48f5-a0e2-9458c7d26a51", "sighting_of_ref": "indicator--fd8b04c6-576a-4979-a663-93be337cdf4d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3c4fae-2d42-403e-9d62-263bcadd5446", "sighting_of_ref": "indicator--79065f83-4648-4486-a879-3d946762ba36", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d6dc0f-5203-42f8-9bed-4dd4a0aac824", "sighting_of_ref": "indicator--79065f83-4648-4486-a879-3d946762ba36", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd40670-4c7c-4344-aa55-40fbc7c82fbe", "sighting_of_ref": "indicator--79065f83-4648-4486-a879-3d946762ba36", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530361a8-e88f-4db4-bd53-c7e035e03de9", "sighting_of_ref": "indicator--0db64a88-4a36-447e-9fe9-e82579340c94", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857fca76-179c-4b5f-b834-49d005ee2e82", "sighting_of_ref": "indicator--f03098a7-0307-46e4-8d37-ebb1fadc2857", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa61cf2-64cb-4515-bbfe-7e1b5508cb83", "sighting_of_ref": "indicator--f03098a7-0307-46e4-8d37-ebb1fadc2857", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61772dc5-488e-4046-99a3-145912d01ba9", "sighting_of_ref": "indicator--a04e9ea3-ebb4-4393-878c-8c96abf27843", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ff07e9-2a68-40f5-93e7-a355c6b12276", "sighting_of_ref": "indicator--a04e9ea3-ebb4-4393-878c-8c96abf27843", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f7aa7e-f644-4f25-9d18-1a8048a21b63", "sighting_of_ref": "indicator--a04e9ea3-ebb4-4393-878c-8c96abf27843", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fd944c-04f5-4abc-9d8d-87d413b681cb", "sighting_of_ref": "indicator--a253f274-4680-478a-bd19-4265bcd1ee9e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94be4957-eceb-4db4-b845-df64bbf19b32", "sighting_of_ref": "indicator--a253f274-4680-478a-bd19-4265bcd1ee9e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74adc9d5-f2bf-4fa1-9f20-c4a0750564b9", "sighting_of_ref": "indicator--a253f274-4680-478a-bd19-4265bcd1ee9e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e0d277-d046-4513-8f74-fc6b61b8a7bf", "sighting_of_ref": "indicator--d369c6ba-0534-425d-aafc-aaad620a3b23", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13fb4593-37a3-482b-bd9b-11941e7328a1", "sighting_of_ref": "indicator--d369c6ba-0534-425d-aafc-aaad620a3b23", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81bd8c7-49d0-498a-ba49-9f7b346fcc88", "sighting_of_ref": "indicator--b5d33d97-e4f0-426a-92cc-edfc73fc84f5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c153cc-52a5-430a-a437-ccd80b2e0fe8", "sighting_of_ref": "indicator--b5d33d97-e4f0-426a-92cc-edfc73fc84f5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba75858c-a41c-43f0-8951-730c5975d654", "sighting_of_ref": "indicator--b5d33d97-e4f0-426a-92cc-edfc73fc84f5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b13cc9-9145-4bcb-a548-6b841906c719", "sighting_of_ref": "indicator--02148a35-0ecd-4743-9c77-2b605545a880", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6348fa63-d281-4120-aed8-b7f94458d3fe", "sighting_of_ref": "indicator--02148a35-0ecd-4743-9c77-2b605545a880", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eadc6bd-ecfe-41fd-a46a-e6c3b98e43de", "sighting_of_ref": "indicator--02148a35-0ecd-4743-9c77-2b605545a880", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d1ab86-f2b5-40f3-9aff-eab2cc6f055b", "sighting_of_ref": "indicator--122bcace-681c-480f-9cc2-5f98bacc9d9f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79e6346-42ab-4289-b26c-53396ae16eb5", "sighting_of_ref": "indicator--e93a2547-57de-41d4-8cc1-d3b126ee9b17", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df5335a-dc06-4ff0-ab9d-3010804d235d", "sighting_of_ref": "indicator--e93a2547-57de-41d4-8cc1-d3b126ee9b17", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f42dee7-9fe0-438a-a365-27bc789f1efa", "sighting_of_ref": "indicator--55fd0b7a-a79e-4f49-a6dd-ae2078cd95b8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01f06ee-94a4-43a4-bdfa-2faa3b357db4", "sighting_of_ref": "indicator--db0a32e8-5c19-4218-9e6c-a3811179e955", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc484488-4049-4eea-b4e3-a985ff4ead97", "sighting_of_ref": "indicator--db0a32e8-5c19-4218-9e6c-a3811179e955", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d49c05-c69e-4658-96ad-8770fc9b64af", "sighting_of_ref": "indicator--db0a32e8-5c19-4218-9e6c-a3811179e955", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950cb000-d8f2-41d6-972f-b13d17505471", "sighting_of_ref": "indicator--736ce406-ea62-4bf6-86e7-2c54cba8983c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d1ff85-243c-4c68-b9b7-fcffd84e63fb", "sighting_of_ref": "indicator--d0bd3a2c-21bd-4c0b-a18b-1bb2e58162da", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b912860-d277-4d96-9f49-b17d61026822", "sighting_of_ref": "indicator--d0bd3a2c-21bd-4c0b-a18b-1bb2e58162da", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7365be52-b955-49ed-9ca3-20ef8b1c5242", "sighting_of_ref": "indicator--7ab77ab0-872d-4de5-bfbb-ffe79c9b55f9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bacd3149-00b3-4e1d-8d6b-56a2aa086921", "sighting_of_ref": "indicator--7ab77ab0-872d-4de5-bfbb-ffe79c9b55f9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82987cf4-e1de-42bc-b857-f92694a49bd8", "sighting_of_ref": "indicator--8fa43790-d110-432b-8b85-de17f0698f79", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5d6270-7ea2-4340-a38e-84785b802adc", "sighting_of_ref": "indicator--8fa43790-d110-432b-8b85-de17f0698f79", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9affc4-8588-449d-8100-86bdeb4a64e9", "sighting_of_ref": "indicator--6c6e220a-c2e5-4cd6-9755-92cd7433423f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12fb7e0-920b-43c9-ba22-9c2c28a4f799", "sighting_of_ref": "indicator--bc97f174-b9e0-460a-a4fe-0def7c4ef4fc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f41117d-6bdb-4eb1-b3ef-7ff0ebe6f2f5", "sighting_of_ref": "indicator--939c14dd-7797-467d-a2c0-3873b6784e4c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd34bdc9-b027-4e38-bdc0-af4cbbd8019a", "sighting_of_ref": "indicator--e072d301-cfec-4f01-b138-58b469364e09", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0c880f-dbac-4e57-ad75-86766fa71781", "sighting_of_ref": "indicator--b4751fe9-b33c-4727-b820-2b995c446292", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a466366f-99da-46cf-ae3e-7a12879b5a53", "sighting_of_ref": "indicator--d681e964-b9ff-487c-90d3-2e0126e42076", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a45b4e6-e3d4-481f-8666-383371226e0d", "sighting_of_ref": "indicator--ffda228c-0731-40a8-954b-783cac204a6d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35bb02d-048b-4f0a-87ef-632ebc964604", "sighting_of_ref": "indicator--ffda228c-0731-40a8-954b-783cac204a6d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a174a73d-42b5-4b9b-bfe7-fbbe485f4cbb", "sighting_of_ref": "indicator--76444846-3510-4387-88fe-9949ab656594", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d4d5ff-0f45-4e03-8b65-238ff0c29f6e", "sighting_of_ref": "indicator--59e37005-8cc0-4375-b70f-455647f2627f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5e2e24-ce57-401d-97e5-faa477a0c0e5", "sighting_of_ref": "indicator--b2701474-2484-4c4b-85a4-9e926af5a0f7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7663e5-c784-42bc-a9f5-46f917e17b5f", "sighting_of_ref": "indicator--b2701474-2484-4c4b-85a4-9e926af5a0f7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1546e14f-6ec9-46ab-9693-afeb2a4b9a0d", "sighting_of_ref": "indicator--349e2261-f33c-4cb5-974a-65c791f0de64", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4010df-b728-4d79-9445-ed2e1b20e2e2", "sighting_of_ref": "indicator--349e2261-f33c-4cb5-974a-65c791f0de64", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b3e52c-f651-427a-90a3-1f8f962b3b29", "sighting_of_ref": "indicator--349e2261-f33c-4cb5-974a-65c791f0de64", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40a2a6c-f5be-4899-be71-9f80b40c97e4", "sighting_of_ref": "indicator--7dd995e4-9f72-4406-a63d-d62e63c1556d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a3ee74-e9e5-44aa-b269-46ed6752482a", "sighting_of_ref": "indicator--7dd995e4-9f72-4406-a63d-d62e63c1556d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786373ae-cf52-48e3-9280-0588df35f16e", "sighting_of_ref": "indicator--d891f46c-cefa-415b-b840-422a05ce6997", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d209ef71-5ea0-4826-9eae-dc76638de760", "sighting_of_ref": "indicator--541df568-fcf0-480b-aab5-2545fd079e09", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9763b89b-6e6a-4263-b512-db4a460bd28b", "sighting_of_ref": "indicator--541df568-fcf0-480b-aab5-2545fd079e09", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b44c4f-534e-402f-8d4e-1c99738de230", "sighting_of_ref": "indicator--662cc71e-2a2c-4a0c-a9ff-93a0b21c40c9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecf2380-4fa0-40f8-878a-a267dabda98f", "sighting_of_ref": "indicator--662cc71e-2a2c-4a0c-a9ff-93a0b21c40c9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8d4ee6-4a58-44f5-90d2-dffa2c1fd332", "sighting_of_ref": "indicator--bfeb234d-2c6c-4f59-bb54-bf2799f2e935", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baac71f2-ee24-4c61-a5d6-dcee19365655", "sighting_of_ref": "indicator--bfeb234d-2c6c-4f59-bb54-bf2799f2e935", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e007c4a-5eda-4d3f-b499-f5aeaeab84c9", "sighting_of_ref": "indicator--ecebbd36-7471-4c10-987e-2afe68af0da9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2667d021-4571-467c-b66c-fdf4f4ad6f86", "sighting_of_ref": "indicator--b320ff64-cdd6-4cb1-a27b-cadd7d080efb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c8aff4-cf10-4747-9d40-b87bddd51076", "sighting_of_ref": "indicator--b320ff64-cdd6-4cb1-a27b-cadd7d080efb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcc6ac8-cec2-4292-b0b9-ea963737a976", "sighting_of_ref": "indicator--82de4f29-258a-4f70-93ad-fb206730a49b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b31409-3718-42cf-a4fa-9e84bbf3377b", "sighting_of_ref": "indicator--9af3f32c-c2e0-41c5-aa35-af09206a5401", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778deb98-b225-4607-9ed7-7afa185be038", "sighting_of_ref": "indicator--1499912c-a8e2-4ee4-97d3-6756efe4e7d8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4219b20a-94e4-412f-8a94-3805b9aa553e", "sighting_of_ref": "indicator--12ce6601-d86f-424a-b189-7903bba13e1a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cbde23a-6c44-4af1-83d6-da0efbc3e49d", "sighting_of_ref": "indicator--db640a2a-4b87-4a7d-904c-a51bb8ee20ce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d30fd9-2e16-4cc4-9b69-be98251ab750", "sighting_of_ref": "indicator--303ba7cd-001a-49a4-bc67-24c151d24f7a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee307225-ac6b-4df6-8092-15e6b50bec13", "sighting_of_ref": "indicator--e0baba7d-ba5f-4003-81d1-5dd483aeb5fa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5640cb-8d85-45b0-aa7e-fdb52686d430", "sighting_of_ref": "indicator--f1db3b15-9743-462e-826d-f12c4646fd1a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35dba95b-0549-49fd-8d3a-0f277d8fb945", "sighting_of_ref": "indicator--59ac6a5f-3910-4b74-a242-3022662da3f7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f970e049-7a2d-47ba-be4e-a87802ad7289", "sighting_of_ref": "indicator--9d908a30-0347-4d7a-84eb-52ebac8c96eb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8c4a51-a3bf-4184-820d-217402b656ab", "sighting_of_ref": "indicator--e64ac5b1-3631-4509-beed-966a2cae3a8e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0365213-71fb-4bba-ad8d-9f39db99298f", "sighting_of_ref": "indicator--6edd6b1d-70fe-4839-b8fc-bd8710d42895", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8624f0b0-4c7e-4bd1-a5b3-9508f338076a", "sighting_of_ref": "indicator--01efd909-ca3b-4489-a5e5-547811515908", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2bbcc25-e898-4320-8572-2e894e4edcb0", "sighting_of_ref": "indicator--19995dd5-604e-4aa7-ab10-627220878968", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02466c1d-60ea-45f7-a4bf-d3e2b0f9bd57", "sighting_of_ref": "indicator--ca184332-27cd-499e-9bdb-e7ba843c9e25", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac359027-6068-4630-9a6b-e674d89ff4b0", "sighting_of_ref": "indicator--dd88817e-000b-4576-95b1-1c2c53d9e8f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f08ebda-0852-4cff-9798-d8201a52816e", "sighting_of_ref": "indicator--bfb79f45-ee25-42f5-a1e0-b1ecc238596a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3272a73b-7c9a-4bbb-8f6a-52481cee2f21", "sighting_of_ref": "indicator--be120db6-77fb-44e3-a876-ac35502f9fbb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c2987c-9479-40c1-88ae-99fcc3a8b093", "sighting_of_ref": "indicator--064376d3-dd02-455a-b2a2-e222434b25f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb03288-9ee4-46d1-a842-00dddf0c7a6b", "sighting_of_ref": "indicator--a26117ae-242a-483e-8cfb-0311dae382a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a48676f-6a51-42f3-98ee-dfc50b5f9590", "sighting_of_ref": "indicator--d9418996-aff3-4ce5-84fa-e33c4fe8e538", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e157daa-1ca5-4a39-a581-e924c77b9ac8", "sighting_of_ref": "indicator--68ed346d-b603-4c87-aafa-18bc00d5a9b0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc180b41-bad8-4eb1-944e-67f08cc8dd98", "sighting_of_ref": "indicator--7b81aa0b-2cbc-42e0-acf9-a6d34ebfb5b1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c881565-3a11-4d9c-82dd-1aa628e020da", "sighting_of_ref": "indicator--9a88a458-933d-4a7f-9521-5addf28e68f8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4509016c-0a54-4a8e-9d9a-b354ffc0e5a9", "sighting_of_ref": "indicator--a58bb578-2316-430c-a3a5-1632f0deaf1b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9739ef0e-a4f5-44b5-90f4-2007593b40a3", "sighting_of_ref": "indicator--ca6dde8f-5908-4fdf-93ba-19a8a9d1a4ab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03efbafa-d5a4-4083-a15d-d89c362b2925", "sighting_of_ref": "indicator--7d50fb66-790e-4d33-a1ac-643416a13ea4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad27379-5878-431d-89c3-5aeaa3920588", "sighting_of_ref": "indicator--3ff73bcf-2432-41c6-b1e6-e5209b8314c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e657ff7-9e0b-459b-a299-9bbca72b8757", "sighting_of_ref": "indicator--041eb405-849a-464b-913f-bd4cfad5b8c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43d3a84-d3de-4c09-8677-570c3de10f95", "sighting_of_ref": "indicator--b0431d5a-dd03-4858-be2d-e185215e633e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820909e2-ee48-4717-a36e-fd6dca94073b", "sighting_of_ref": "indicator--02965562-9265-4a89-8609-d97140af4fb5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fe716b-6297-4293-b2f2-a36bcd196418", "sighting_of_ref": "indicator--af4f69c3-fdcf-4c6f-af9e-d47d93166efd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5467dd26-7ab5-44c4-81db-014befc52ca9", "sighting_of_ref": "indicator--6bf41ea8-758c-491f-ba63-6af407a779ec", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bdf99d-99a6-4df5-b125-53079a27318c", "sighting_of_ref": "indicator--fdb918c9-3a3e-438f-b2f6-b8e7d3cefc7e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e938525-806e-49f7-b8c0-bbe9040806a0", "sighting_of_ref": "indicator--e411b266-3931-4bd2-8ab5-3287a6558607", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff2a95c-aa91-4072-8f0c-af42ba1228ca", "sighting_of_ref": "indicator--58443ee2-f2f6-4d37-98be-68a25d7bd273", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80774e00-2211-40ee-8766-7944693de6a8", "sighting_of_ref": "indicator--9b9edbc1-a823-4d3f-891f-8f3b3af009f7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0e1708-dc45-4e42-913a-a24a20b15760", "sighting_of_ref": "indicator--9b9edbc1-a823-4d3f-891f-8f3b3af009f7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a94074-8a39-4dc4-a2eb-3e08bbc059d5", "sighting_of_ref": "indicator--9b9edbc1-a823-4d3f-891f-8f3b3af009f7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feda02e2-5592-4973-8040-9bfd27e5a966", "sighting_of_ref": "indicator--fede4c96-d407-46e0-a961-2c3a42adc22b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9269238-ac45-4bb6-99c4-627bad221c8c", "sighting_of_ref": "indicator--7be4c27b-f494-40e2-b2fe-23f410843e78", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4394c46-93a8-4d19-8f62-38f068960862", "sighting_of_ref": "indicator--7be4c27b-f494-40e2-b2fe-23f410843e78", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b3938c-cfc4-4fc4-ac6b-f77e8a8dc0b9", "sighting_of_ref": "indicator--7be4c27b-f494-40e2-b2fe-23f410843e78", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1745e5a3-5cc3-49a8-9ae3-0ac814d011f0", "sighting_of_ref": "indicator--a0b51a90-43bb-42e0-8997-b3a6b81d75d3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b097b8-6c2e-4f9e-b347-54a54fa67063", "sighting_of_ref": "indicator--947a0738-f488-40ff-9f16-73c0d417c512", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df88c81-893a-44ca-bd3f-73119904a490", "sighting_of_ref": "indicator--1cc6a246-6d32-4c77-a06e-65040e6622cd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc7381a-a835-4f8c-8985-1c3ece48da30", "sighting_of_ref": "indicator--6dbfbedf-040e-4ba1-9cc6-ef4aa35788f0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb220e7d-c0c7-45af-b415-9590c9a674b7", "sighting_of_ref": "indicator--edb89cdb-c485-4896-af47-01f58245b8aa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d44094-076d-409e-b68e-fc7f35ecbf43", "sighting_of_ref": "indicator--c513a9f8-a6c8-4028-acfa-dff478e0c2a0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81b2156-4407-444b-8ff6-3bc0174b148b", "sighting_of_ref": "indicator--6d59cb44-9af7-419f-a371-cea483bc77f8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f11bda1-912f-4221-8fe0-4c3e8edbacc8", "sighting_of_ref": "indicator--a453e7d7-1383-4b6f-8369-b4d33a4a0964", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7520461-c80d-4f7e-8f92-fe24c12c3b94", "sighting_of_ref": "indicator--262222d4-85bb-4e00-b46a-53ec8f54c954", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8d88e5-4fdb-45e9-91d6-cbe1173924a7", "sighting_of_ref": "indicator--3c8e99ac-910a-4c01-84a5-c5f24a1764fe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102f6f77-a755-4771-964d-f19e234fd051", "sighting_of_ref": "indicator--b33eb389-f8db-4644-8d6c-09af6b698440", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7de275-5f36-4058-ad5b-68cfb989ebef", "sighting_of_ref": "indicator--b33eb389-f8db-4644-8d6c-09af6b698440", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7af06f-7421-4061-9762-2755ad8a2280", "sighting_of_ref": "indicator--e0bb444c-0f7d-44d9-9def-4df3281df322", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71224c22-daa3-41ed-8d74-3551dece95d9", "sighting_of_ref": "indicator--2bc44335-2545-4120-865c-0297a9e997fd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea54a65-5ee8-4420-a0f4-4ee274c0bfbc", "sighting_of_ref": "indicator--2bc44335-2545-4120-865c-0297a9e997fd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498018d4-34d9-48a4-8a93-7cfd5db19a4d", "sighting_of_ref": "indicator--dab9f3d1-9874-4813-b399-92a4738915d9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6413feb6-50c4-427f-8ab9-00c9b49a20b9", "sighting_of_ref": "indicator--4c9d28d0-6f72-46c8-b778-7eb8bcd3529b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131a209a-e963-47b9-a857-0face81ab372", "sighting_of_ref": "indicator--df39bf28-4271-4010-b861-d6068a932a3e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--913e8d75-a7e9-4d39-8ca3-2043c44d4ca7", "sighting_of_ref": "indicator--ad06a34c-cbcc-4da6-9f08-fd6edc10ae88", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5ff15a-68ee-4879-80e9-8fead9873a11", "sighting_of_ref": "indicator--9c847002-f494-4328-8a54-e88d170a1739", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35991f05-999f-4642-941c-2e1643aa47ea", "sighting_of_ref": "indicator--996a10b3-5a61-4e3c-936c-b7213be7e7a2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e87f5f6-e6a0-491b-bf9a-e42c34fc00ca", "sighting_of_ref": "indicator--996a10b3-5a61-4e3c-936c-b7213be7e7a2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98be4aa-6051-4a6f-b4ef-e55916fa7c19", "sighting_of_ref": "indicator--0cf88379-86ac-41d7-b5b6-723797e6d840", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1efb88-4a57-4204-befd-b9664b24b9d6", "sighting_of_ref": "indicator--7ed7ccfb-5d7c-4bc6-b682-3074556e2a87", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2608c3-7b0e-4119-b728-8f13cd65952e", "sighting_of_ref": "indicator--7ed7ccfb-5d7c-4bc6-b682-3074556e2a87", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ab5df0-2928-451e-9e9d-816dc471d265", "sighting_of_ref": "indicator--619dc1df-82ae-41a8-8baa-9c9cfe83e2b4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000359cc-0827-4e30-8692-0a9f76e6ce48", "sighting_of_ref": "indicator--58f71bb9-8f36-485b-8235-811e8ca3b4cd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d378a26-ae13-4618-87fc-530fbc8f62b6", "sighting_of_ref": "indicator--60bd04a4-736e-42f1-ad11-07813dde1753", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8416aec-ffec-4eee-a142-855769535e1c", "sighting_of_ref": "indicator--2b7b2f9d-245c-49d2-bd26-172cb47c5a61", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9c7cde-1651-4745-ba6a-977ec7794517", "sighting_of_ref": "indicator--32127122-d3e8-4a73-93ec-36b3dc5090ed", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d6b3e1-41fe-413d-8452-4d8428b8a777", "sighting_of_ref": "indicator--e605b299-d3cc-4274-9422-c8fc958a207b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4f47d5-0638-4c2e-a333-b826b7ac56cc", "sighting_of_ref": "indicator--a44567b1-3cec-4bfa-b58f-284360b87409", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8661954-fe6e-4bf7-9321-279fb55cfc86", "sighting_of_ref": "indicator--1af59998-a218-4619-8443-13e5bd963bed", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d20c5fc-a8fe-4fbb-9fbe-888f5d5c3464", "sighting_of_ref": "indicator--f90300f5-a0e3-45f0-948b-64bab7eee372", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8398df4-de97-4a9b-bee1-d1ce110928ae", "sighting_of_ref": "indicator--e42ba1c8-073f-4a29-acb4-5f949a1b9c9a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23aa5ab7-3219-4a7c-84a1-1dac77b93061", "sighting_of_ref": "indicator--9679032f-f3da-4b07-815d-48d6811e8ca8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66040107-93fd-42ff-9ca5-f989eb00b51d", "sighting_of_ref": "indicator--800c57f2-de8c-43e8-9473-d94139b16d89", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b571018-4762-4a7a-95b0-314419cd33de", "sighting_of_ref": "indicator--697617cf-a70a-48da-bbca-e6bc4f56d679", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f80a640-cf6f-4aa9-9834-d1ec14896e78", "sighting_of_ref": "indicator--871428ec-68fe-41f4-b9e7-a9580d1911e3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b0ad58-05d1-47d8-98c8-74f1781f6054", "sighting_of_ref": "indicator--37f3598f-26e3-4281-930e-a89c240384e0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239863fb-9b20-47f3-8358-7385db4a80bf", "sighting_of_ref": "indicator--8e6d7ece-3796-4fe6-9943-e8f2b62bc001", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124a1082-c97c-45a0-9039-7978a6d6fcfb", "sighting_of_ref": "indicator--a3125aac-63c6-49c4-88a4-cdb49d1dc087", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8db1b71-0e37-4112-bc6e-cadee73b4771", "sighting_of_ref": "indicator--a0dd259d-6a34-4b01-be48-1569722b02ac", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff98913-225c-414a-946b-46edc81b62ca", "sighting_of_ref": "indicator--2d350ab3-2ec6-471b-9588-645b99afa114", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967d40ea-8167-4206-9256-4d9d9e17801d", "sighting_of_ref": "indicator--44a2e65e-14f8-4b69-9a29-54c6903ad355", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3e76ed-bb72-402d-b8fd-5606dbaf8701", "sighting_of_ref": "indicator--8e39ec81-be5c-453d-80ff-6be4a39fdd15", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053d0c12-bd37-46fd-bcd5-2e43eb1413cd", "sighting_of_ref": "indicator--4e16019c-f3f9-49a3-8a2a-2c8b5b13edf2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db2a219-c347-47bb-912b-89930a7820e6", "sighting_of_ref": "indicator--760c7274-b2e0-4545-b980-88551bf0bbfb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82ac832-4b34-47c9-8bb0-fa595f29a000", "sighting_of_ref": "indicator--760c7274-b2e0-4545-b980-88551bf0bbfb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115ab6cd-3ae4-4be3-92d3-30a1431af5db", "sighting_of_ref": "indicator--6c92e2fe-58af-4668-a3ca-73e8f090b744", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed0887c-1dea-4edf-a97f-c0b1f90ac119", "sighting_of_ref": "indicator--0dcee3d5-17bd-46b6-a90b-df6796948666", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9eb0286-a4f0-47de-8046-4219cdefb635", "sighting_of_ref": "indicator--e92f8d87-5146-46e1-a924-5718846067ae", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e7c1be-5af1-42a1-8aef-908e3ad6b675", "sighting_of_ref": "indicator--d5dc737d-73f7-4265-95a4-9859e439611f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6925c25c-19c0-4ec4-b97f-2eb63f06589c", "sighting_of_ref": "indicator--ebe77856-9d62-4592-8707-681e071200ff", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a065762-1a21-4038-b55c-4a602f28abf5", "sighting_of_ref": "indicator--91759d5c-1ec9-425f-a30a-c422df8d2c9e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483813b1-2ab1-4a5a-ad9e-85db51cb35c7", "sighting_of_ref": "indicator--43727d0d-94ab-4bd8-8eea-781674c8fb81", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b930ec-6449-4712-bded-993961235fc0", "sighting_of_ref": "indicator--0e948361-1248-458e-8f55-518493613a4f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3795f15-2633-4af1-a713-2cb212b7ddc5", "sighting_of_ref": "indicator--686a1068-5630-4416-a125-64ccd58cecd8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22468acf-f725-44f1-a0f1-807809f36090", "sighting_of_ref": "indicator--a204fdbe-393e-4cb1-9236-03ff68be77e5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3b7974-0895-46c9-ae23-2fda10396054", "sighting_of_ref": "indicator--80969f63-392e-4c82-bf79-6c920986b2d2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d69be5-d97a-46e0-b19c-1ab625ac966b", "sighting_of_ref": "indicator--ebb7daf0-8e61-47d8-a172-d2414b4099fc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9690b279-10f8-4bd1-a0f4-67d1e7a65cb6", "sighting_of_ref": "indicator--819bb42e-e9cc-4d6a-9cc3-87031214fa02", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6b2e10-ebab-4133-ad58-65d3e3c9f194", "sighting_of_ref": "indicator--09de0462-c54c-4408-a6cb-c7f49221887a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6420fdc-395d-4cd5-9357-76fe641946fb", "sighting_of_ref": "indicator--d905b3cc-f213-4f88-b7bd-6ebb2ec92687", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f5d825-d956-4b57-82d5-a0775269fd06", "sighting_of_ref": "indicator--73393382-3309-4906-a8b2-f5b7fdf2286b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcba126a-dcb4-47bf-b86c-b93934d0b2f6", "sighting_of_ref": "indicator--b44bc173-23aa-4929-bb33-a58bbec1d588", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7761cc-6220-4432-ad63-6f01c03ef526", "sighting_of_ref": "indicator--aa3b817f-1ad8-4d37-aa91-5f383ab298d2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c537a25-7a3e-4c9e-9bbb-ab98d6c18c6f", "sighting_of_ref": "indicator--aa3b817f-1ad8-4d37-aa91-5f383ab298d2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f4bc13-31c2-4234-bb34-e155e5bbcfb4", "sighting_of_ref": "indicator--8fb79716-e0d3-466a-aca0-394c51cabad0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e9f4d0-d4bc-4951-864c-9304f58e3f9c", "sighting_of_ref": "indicator--3a71ed5a-7e3d-4c31-b53a-e87a0d65d427", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03300555-d339-494e-b730-1baa37e46d7a", "sighting_of_ref": "indicator--537822e2-f943-4609-b3b7-51e59af52840", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312926d2-dab1-42da-a80c-517b1b5d4d6f", "sighting_of_ref": "indicator--76cc1fcc-aa42-4df8-8865-9861236c2a40", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed24a384-6b9d-4dd8-a632-73928702bd3e", "sighting_of_ref": "indicator--76cc1fcc-aa42-4df8-8865-9861236c2a40", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee7dff5-5f39-4e5e-9a15-281e34f04363", "sighting_of_ref": "indicator--da4982ed-182b-4741-8680-9fa131f61d49", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e932438-f5c4-42e9-9dc4-23cc77e6a425", "sighting_of_ref": "indicator--d969ef6c-1064-4e2a-a250-99f6be5f572b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f099ca-da51-4306-9b83-65b11d6a75a8", "sighting_of_ref": "indicator--6966d742-cf8f-47c8-9e5d-10dc7db1fe7a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c046450-13b8-4edb-818b-f1f3a38f57ce", "sighting_of_ref": "indicator--bd97734e-4471-4aaf-af6a-e12b7ab3be0d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3ff598-fe46-4afb-acd1-f4009507936a", "sighting_of_ref": "indicator--36ff7dd0-48b8-4b34-b9ab-47ab46e6d9c1", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65906cf-1c51-4b2b-b477-93de725d5c04", "sighting_of_ref": "indicator--5848c484-17b5-4774-a7e0-eab91f6cc9d4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e874a07-3815-48ad-aec7-39697b1e70b3", "sighting_of_ref": "indicator--14355402-143e-4b79-9801-cd6d8f7eb954", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e16480e-2712-4c24-bdf8-8e77ca5231e7", "sighting_of_ref": "indicator--7846d610-59f0-4eec-b02a-6c44a5f36047", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f66ea1-6c22-43aa-a33a-344418ba6795", "sighting_of_ref": "indicator--7672eaee-66e1-4055-a81e-3a667b6e0bf2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03422c6-7779-4dd4-bae0-a923753ea0ab", "sighting_of_ref": "indicator--8adb680a-5a99-44e8-b939-998a09ea3788", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb396a22-0630-4dae-916b-d7fafe0a33b2", "sighting_of_ref": "indicator--f66ec364-e5d3-430b-a6b9-efa6d5a434d9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66be77b1-99f4-402f-8092-d4b1a3a3a9ff", "sighting_of_ref": "indicator--f66ec364-e5d3-430b-a6b9-efa6d5a434d9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d475c39-176e-4826-a279-83446405b6a5", "sighting_of_ref": "indicator--cf1111a7-2de4-4c0e-9f0c-223e38a113e3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8cc983-519d-4955-835c-b2f9bafa9e90", "sighting_of_ref": "indicator--cf1111a7-2de4-4c0e-9f0c-223e38a113e3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31e4ee6-5e13-4201-857c-50946fd92edf", "sighting_of_ref": "indicator--cf1111a7-2de4-4c0e-9f0c-223e38a113e3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f5b7fe-046a-4190-a1bc-08892dc773dd", "sighting_of_ref": "indicator--f6afac2a-aa2c-46f3-9b18-63212dee8069", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a885df-398b-44ee-9220-3ad150ed713d", "sighting_of_ref": "indicator--f6afac2a-aa2c-46f3-9b18-63212dee8069", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2111e9e1-fa3c-46ca-8b15-e9ac254d3243", "sighting_of_ref": "indicator--b1273cd3-5a1a-4936-b6ce-dcb0642ca6e0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4820c70d-7b62-4fc6-9c18-aabfe9fff068", "sighting_of_ref": "indicator--341ee233-0334-4f31-886f-4f58d0d2c91d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c31cc6-d39e-4b63-84b2-caa7e0d65609", "sighting_of_ref": "indicator--f013200d-56d5-4d13-9602-36f8f0179a09", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe0c4f7-2355-429f-9959-43e9c36e7a3e", "sighting_of_ref": "indicator--7e69ed0a-7c0a-4ea8-9697-1bbcbe517e6e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cc426c-cad6-48b0-bd4d-9a3350cacbcf", "sighting_of_ref": "indicator--7e69ed0a-7c0a-4ea8-9697-1bbcbe517e6e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4951a5-0e2c-422b-a7b7-9ed050419f4b", "sighting_of_ref": "indicator--7e69ed0a-7c0a-4ea8-9697-1bbcbe517e6e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4731c74b-6e54-4b2b-884b-75b8951943c0", "sighting_of_ref": "indicator--544ddb68-0366-4be0-9434-e12ba81c8ae9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a02c83d-2e10-46ca-83ac-273ce05116c4", "sighting_of_ref": "indicator--a099f256-6b8e-4759-80cc-66cd36e81a39", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacbb1a0-cd49-4835-afdc-8dc3ced9b3f9", "sighting_of_ref": "indicator--a099f256-6b8e-4759-80cc-66cd36e81a39", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760e0a19-2745-414a-9108-0e69c483787c", "sighting_of_ref": "indicator--1a74bf30-2090-41cb-9199-515344a0e38a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ead7f9-5a8f-4a7c-b8f7-d882a9ff3bc0", "sighting_of_ref": "indicator--1a74bf30-2090-41cb-9199-515344a0e38a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1a04bb-d89a-4660-a323-deccb4f475bb", "sighting_of_ref": "indicator--657db52e-340d-493f-bb6d-48d5e61d38c9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32c5fd7-f001-4ed5-b0c3-8ff221584a23", "sighting_of_ref": "indicator--2622b90f-4edb-40a8-a0f9-d04936dfff2f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beeb869a-a280-459d-a221-c34ddc9c5f20", "sighting_of_ref": "indicator--2622b90f-4edb-40a8-a0f9-d04936dfff2f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4de2d89-3370-43ce-890c-81c5db989c06", "sighting_of_ref": "indicator--2eceac04-8b59-4b06-9e41-66997b8b5776", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd733767-25b2-4149-a9ad-ef7a408731c8", "sighting_of_ref": "indicator--2eceac04-8b59-4b06-9e41-66997b8b5776", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b87d05-056e-40cb-958f-cfad35c703fb", "sighting_of_ref": "indicator--2eceac04-8b59-4b06-9e41-66997b8b5776", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1cd5567-9e57-497c-833d-4065206001b9", "sighting_of_ref": "indicator--c2272eb0-3e8e-41f3-800f-6c40e1d789b5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5691ca-2bea-4f2a-8e10-51860091ebd7", "sighting_of_ref": "indicator--c2272eb0-3e8e-41f3-800f-6c40e1d789b5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75395d1-baf1-4bf8-9a09-d81e060b0cc6", "sighting_of_ref": "indicator--c2272eb0-3e8e-41f3-800f-6c40e1d789b5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519fd9fb-76e5-460a-ab35-64865e8fa5a5", "sighting_of_ref": "indicator--c2272eb0-3e8e-41f3-800f-6c40e1d789b5", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09edc93e-49b2-41b9-b6a4-deda46337820", "sighting_of_ref": "indicator--caa3d245-7499-4c82-b7b5-d7c6f19f00a3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c951ab9-b07d-4552-8379-736804e738db", "sighting_of_ref": "indicator--7e77fcef-f70f-47e2-a482-0f6915ce2a08", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd43bcce-f1ca-47fd-a48a-4e0f3a574ce5", "sighting_of_ref": "indicator--6b208902-526d-4e34-94dd-4f1d11490015", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b0b916-7edb-45ac-9dbf-cb6bc1e0da41", "sighting_of_ref": "indicator--5787e674-748e-4a2e-a9e1-854d425b3e06", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae65e7f-e5c0-4889-af75-a144b131b46c", "sighting_of_ref": "indicator--777aab77-c0c6-4d50-8bed-ba98bbe84c2f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e91bff9-d2b1-4868-b1ad-50ec336e1731", "sighting_of_ref": "indicator--777aab77-c0c6-4d50-8bed-ba98bbe84c2f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a306651-8494-4e53-885c-d5e876944603", "sighting_of_ref": "indicator--869940f8-c780-4085-97fb-c020e022b630", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c414a928-e3b6-4937-84b6-31293c2d5ad3", "sighting_of_ref": "indicator--da42ed05-086a-4e53-a07b-46ad25ed3e3c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612d1551-fac4-4a84-8a5c-d03ebcf0f87c", "sighting_of_ref": "indicator--da42ed05-086a-4e53-a07b-46ad25ed3e3c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e5b1ed-b733-4ae4-af00-ce78e6146271", "sighting_of_ref": "indicator--da42ed05-086a-4e53-a07b-46ad25ed3e3c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9e7782-856c-48f7-8743-8f74079b46d3", "sighting_of_ref": "indicator--a80a9f49-101f-4d7d-aaef-ba94e8443665", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcde778-eccf-4c0a-9686-519ee9b9955d", "sighting_of_ref": "indicator--4026edb5-1338-4db1-9750-ed1b12d6a16f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564af1d0-bd1e-4984-a230-9949970a2120", "sighting_of_ref": "indicator--e08d982a-aca5-402d-8c02-705e19cae574", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3170339-acd3-43f1-902a-a31be868d4d8", "sighting_of_ref": "indicator--00ac0e21-b183-4fb3-a23f-1287a8489e2e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be1e540-2c36-4ca9-b6cb-482f591803b6", "sighting_of_ref": "indicator--e7e6c79b-3a8c-43e9-9e64-0da6385939ab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b671bf-bbfd-479a-b09f-02779c214c5e", "sighting_of_ref": "indicator--2ea7fc62-9f7e-4914-8f86-0f6bfff5679a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240ea80f-6be1-417e-abbb-ebf91f3ae10a", "sighting_of_ref": "indicator--5dfb78c3-0496-4642-aaf9-ba586723deb9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5567eb-0e79-4dba-b1cc-531d35a7d45d", "sighting_of_ref": "indicator--805e3f08-c1dc-4bb0-b064-66adac0ecbc1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4ab65d-b1ca-44ec-b7b9-d581c863b4bc", "sighting_of_ref": "indicator--24c66501-49bd-4ca3-a745-ae5aa9ca3278", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f709fc9f-9715-4219-8ae6-a85e4f08d7f8", "sighting_of_ref": "indicator--ca0bcd0a-8bc6-4bf3-9681-ea120814e1dd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7444afe0-a459-48d0-8d56-ceeaf53c3938", "sighting_of_ref": "indicator--41656a21-37b9-4a0b-9910-401a47e5c7f3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141d4bba-daec-4c73-839f-2b633815151e", "sighting_of_ref": "indicator--298583dc-849b-497b-92e9-6fc4e13851ba", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b005eb6-18a0-45f1-952a-d8dd2fc3b679", "sighting_of_ref": "indicator--a6f04e40-505b-43a3-94fa-d0a81fcc3eb5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60b5000-7eda-4bf7-9b9e-6ec60bf9c778", "sighting_of_ref": "indicator--fe2a7b0d-909a-40ed-a291-b4bb40dbcecf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47a59f8-3f5e-40a2-8423-5aef5afbb873", "sighting_of_ref": "indicator--6c1e72d2-b9d0-4ec4-9d8f-d2a53f364d02", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3924c09-b4d4-4904-8b01-2e5730dc1daf", "sighting_of_ref": "indicator--f7ba7bde-7041-4877-a188-7342409c725a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694cfe1c-e0ff-4d69-b6ff-dd93853a5369", "sighting_of_ref": "indicator--5a92eb4d-54fb-4744-b36e-c01888bca708", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f8d7cc-f43b-4367-ad7f-86ef3858a566", "sighting_of_ref": "indicator--43139506-2ed1-4ce9-936f-865b1335bd2a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b405e917-e441-4950-a0b4-de8edc276def", "sighting_of_ref": "indicator--def34abb-5d94-4a68-8b48-99364e2b28e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91bf414-eec5-45bc-8caf-9a15a3a3a198", "sighting_of_ref": "indicator--6a27742c-92e3-4599-b06c-098eec09750d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26793cba-54cf-408b-84d2-09ec21e09f19", "sighting_of_ref": "indicator--8047d591-003a-4b55-a945-a3903ad7ea35", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b19bb92-291a-41ab-a91b-7769fa1e75ac", "sighting_of_ref": "indicator--4eb29719-6ff7-43bd-90ef-0cb4c140393a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6a02c9-1f01-4baa-a18a-5da077ca65e5", "sighting_of_ref": "indicator--c9bc4f30-7d69-40f8-b7f3-ba1b5b4b9938", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f06e3c-8fe5-4d6f-a6fb-28fcac08c023", "sighting_of_ref": "indicator--e57bbb6c-97cf-49b2-94df-b108a0b99534", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceee32f2-502d-42e4-91cc-6c281eaf648e", "sighting_of_ref": "indicator--c1d62279-d4c6-473c-a194-42d13ae26a47", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529e0e66-b2c2-4ef3-8fa4-b6d8ef606670", "sighting_of_ref": "indicator--c1d62279-d4c6-473c-a194-42d13ae26a47", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2beaac55-c96d-42ce-8c71-1a6fa314338d", "sighting_of_ref": "indicator--ce8b13a5-98ca-418a-a90a-b901698df740", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbcdfede-6f82-4ede-aa50-e7b527f51b6f", "sighting_of_ref": "indicator--fc813d78-485e-4325-8f90-f9e5eb4d816b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0774a340-d7ce-4a73-aea6-50ee41aad253", "sighting_of_ref": "indicator--714076b7-6b94-4488-86e0-689bff86c49a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80426d5a-e306-48ba-9af0-b7a53243537a", "sighting_of_ref": "indicator--f7fa5022-4bec-455d-a469-1ffbf74f57a9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54aa0aae-4429-4341-a7d3-fd642bfa5e8c", "sighting_of_ref": "indicator--81059e0a-e119-40dd-a6e5-9c46742dbc29", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5c33e5-bc8a-48c7-9073-3a535ec41404", "sighting_of_ref": "indicator--260802c1-d06d-4ec3-a846-ee9ba6d47cb0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22077b30-8254-402c-93f4-4c2ceb884052", "sighting_of_ref": "indicator--260802c1-d06d-4ec3-a846-ee9ba6d47cb0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ab63fc-6485-4f92-9ca8-8482f5ed175e", "sighting_of_ref": "indicator--04522416-c4eb-4a40-b273-dba4f353c4c5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf37026-aa45-419c-8b78-6b8787d0b6e3", "sighting_of_ref": "indicator--dea1f93c-68e6-4d04-bb75-b2d4766c6405", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa7c006-c85a-421a-b5cb-47d2adba94cb", "sighting_of_ref": "indicator--f4eede79-fada-4502-a663-3ad3985749d6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3489ea-c8e2-4524-a780-55871d89bb7b", "sighting_of_ref": "indicator--f4eede79-fada-4502-a663-3ad3985749d6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e8968b-4d1d-4fd1-a675-99b4d7311801", "sighting_of_ref": "indicator--e12fc2c7-d8de-405d-a0f9-8801769efa61", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0220276-5a6b-4330-9bac-736fdba042d5", "sighting_of_ref": "indicator--c8a4842a-f6e5-4fbb-ad73-5ad44ded92ad", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9b549e-7b16-4b78-b04d-a1ab5aaf6170", "sighting_of_ref": "indicator--dba45da9-6e2e-471f-92ad-23d0987f8a38", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd45b43-c2e2-4fc3-885d-21eddc6faa2e", "sighting_of_ref": "indicator--f24df81e-decd-430d-8b8f-94545a9e2312", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc51b61a-f57a-4c6b-955e-666ae9179383", "sighting_of_ref": "indicator--26d99b85-1ca1-411a-8207-df1000a49a6c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e4dadb-2718-40f2-852d-f0f0e5476320", "sighting_of_ref": "indicator--b0c21895-0dd4-4b33-9440-7c2e847dfaec", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05cd9fac-e16c-469b-a5fe-864346bbb063", "sighting_of_ref": "indicator--b0c21895-0dd4-4b33-9440-7c2e847dfaec", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8a5604-a551-43e0-9c85-30713c13669d", "sighting_of_ref": "indicator--082bea6d-42bb-4fd6-8058-bb62dafe425e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55813f5-319a-4037-bb21-a55eb918a7b5", "sighting_of_ref": "indicator--560ba8aa-85d5-46b8-874f-1042ab065cbc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4590e374-b49d-46f6-b2a8-fc0a67adcfaa", "sighting_of_ref": "indicator--d63d9dcd-ec91-4793-ad5a-9fe1d0642498", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a19709-2b53-4129-8809-89663c9b8ed4", "sighting_of_ref": "indicator--d63d9dcd-ec91-4793-ad5a-9fe1d0642498", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd2fc07-bdd7-4a18-9bca-5409236fa494", "sighting_of_ref": "indicator--562e3c23-ad22-46b6-873a-874bbefefc60", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e9bf740-02d2-4160-97a8-1f3e6643f2eb", "sighting_of_ref": "indicator--6ad16e97-b34b-4a6a-91ad-5e26198cf91f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fc9fe0-ee41-4dee-a05a-a08e2076bdb6", "sighting_of_ref": "indicator--6ad16e97-b34b-4a6a-91ad-5e26198cf91f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0251134-7185-4f06-b5b6-718def7e53a0", "sighting_of_ref": "indicator--ebebdbcd-ae9b-4cdf-9b4e-6ff9b5c31ba9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e77a0af-f7ed-4538-aad3-058afbda2198", "sighting_of_ref": "indicator--0a84ee85-0ef2-4fd8-a67e-cd38216813fb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864e4865-807b-4a02-a271-71a4b6897d7f", "sighting_of_ref": "indicator--9b12092b-bab0-46d0-b870-d4d1b81999f9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bacb0832-f2e1-4419-9fb5-5dedd352de89", "sighting_of_ref": "indicator--9b12092b-bab0-46d0-b870-d4d1b81999f9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b38c5a9-05cf-4f0d-8a43-ca6b857c6940", "sighting_of_ref": "indicator--039095aa-3771-486c-a5df-adf8c15cb0c3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab9f113-1af1-44b6-b29b-c5504c5ffc6c", "sighting_of_ref": "indicator--9556009b-dbe7-4216-9663-486526497151", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b51a7b4-ead0-4605-9ffe-ff205bef31af", "sighting_of_ref": "indicator--957835de-eaa6-4961-89d9-10a8a3151647", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9772a4-87a8-4a68-88b3-f13a9506d1ca", "sighting_of_ref": "indicator--298e2dfc-b1ff-4cf2-bc86-e918ce492955", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91baf52-3138-4f10-8c28-75fe02637a43", "sighting_of_ref": "indicator--298e2dfc-b1ff-4cf2-bc86-e918ce492955", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ebc838-1884-4049-ae2d-aeab3f414d8a", "sighting_of_ref": "indicator--3c03216d-9a43-4dfe-8f2d-9fbaf9fee8d9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3669cc0-280b-46f8-b0b4-4d9049d861ca", "sighting_of_ref": "indicator--3c03216d-9a43-4dfe-8f2d-9fbaf9fee8d9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5efe40fd-e348-496e-95b0-453aa819d15c", "sighting_of_ref": "indicator--6e7e7047-5c75-4c50-b71f-c93688f6e0ee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbda4ae-d044-4237-a5e2-4845bdcea797", "sighting_of_ref": "indicator--42a08f63-758e-4210-adf3-e51835ae304e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a43ede-5c1e-403f-bf2a-4b9fc4355f37", "sighting_of_ref": "indicator--b5d19c6a-9c1f-4e7e-bc38-3271db0b6063", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91463ea-e6c0-415c-bb34-216810343e60", "sighting_of_ref": "indicator--2f6cd1c4-792f-4e71-835d-a00930eb85b8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9c8aea-abb7-47ee-a4dd-9a753749485f", "sighting_of_ref": "indicator--6ad806f2-2bf2-40a7-a266-f6211f2c7b12", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bb541c-6978-4a89-817b-6fbfd335a28a", "sighting_of_ref": "indicator--ef6f16b8-2d99-4de0-9613-aad09cb43fbd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becc44ed-9f49-4bb5-93eb-8d5d11a8f381", "sighting_of_ref": "indicator--713a10b5-497a-4c1e-ae9d-76ec867b7cb5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee84004-7187-4498-9e5a-2c01b9406f23", "sighting_of_ref": "indicator--9cde9a9c-2e4c-42af-8a02-d2e794fa00e6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75cb837c-1b9c-456e-84c0-2cc0b631f1ec", "sighting_of_ref": "indicator--9cde9a9c-2e4c-42af-8a02-d2e794fa00e6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ded47a-4a38-4dcc-9a36-14952a53c519", "sighting_of_ref": "indicator--64723e32-49fe-4097-b84c-abe32d365583", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0046d98f-1d73-4f3b-92dc-902789b21ebb", "sighting_of_ref": "indicator--64723e32-49fe-4097-b84c-abe32d365583", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376613b4-1677-4aed-ad15-1707f4b019a2", "sighting_of_ref": "indicator--d268335e-cc4c-4534-8d89-1203894e0e1d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de812aa-6a8f-4e14-bdae-a43b4c150a98", "sighting_of_ref": "indicator--798835f8-04c6-491e-894e-f80abb6d1905", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c27599-4fbb-4656-90eb-9add880a4731", "sighting_of_ref": "indicator--d642038a-bf2d-4fa1-8256-eb2e4da0f4e5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2b0940-6402-4d0f-b01a-cd40df8027f5", "sighting_of_ref": "indicator--2c3cc330-107d-4572-a1b3-bdc14b6dd043", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1506ccec-605f-4d89-95d9-5f114681f880", "sighting_of_ref": "indicator--2c3cc330-107d-4572-a1b3-bdc14b6dd043", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1b0a88-e91f-48e7-9640-957b4328f0b6", "sighting_of_ref": "indicator--eed173f4-00a9-4237-9536-b93548f28cd2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7e672b-b393-4339-a71c-27f880c1933b", "sighting_of_ref": "indicator--a515a57c-f8dd-4b36-b842-d088a978d862", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4252785f-ac35-4f02-b09a-c1055b65e39c", "sighting_of_ref": "indicator--89572e40-fe66-4d1a-9f6c-872b17ac08d1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5617be-1a05-4aea-b483-1d8f4ca5a43c", "sighting_of_ref": "indicator--136b8492-d589-4bca-96ce-eaf4b02d836f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eebabea-0afa-45da-9c83-234ef7a1cdcc", "sighting_of_ref": "indicator--66967b17-5264-4cd2-ba7a-63bf3906364a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcee6457-13fc-410b-a0ff-1a933d72b601", "sighting_of_ref": "indicator--e8d6fff8-b730-4360-a19e-d7bac06631c1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875b95bd-0359-4000-ac3d-b893e08c9442", "sighting_of_ref": "indicator--5cee4559-4d6e-4097-a02e-82c29f8b9962", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1e0fae-1274-41c3-9e41-c7e9f4490350", "sighting_of_ref": "indicator--5cee4559-4d6e-4097-a02e-82c29f8b9962", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72223a4-e869-4826-a7bf-4eb499a886bf", "sighting_of_ref": "indicator--f478725f-39fd-4288-af2a-8ce6af941a5e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74421b68-48c8-4e11-9890-3f7716cb749b", "sighting_of_ref": "indicator--33563c75-56f6-4bb3-ad93-245dc2e1a01c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f47772a-fb4d-4ed6-9780-7badf7a6d973", "sighting_of_ref": "indicator--0a9dcf4e-9717-483b-998c-54b653d8f644", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db25b77-a7bf-40ce-b183-66ddc130687f", "sighting_of_ref": "indicator--58d741fa-5e2c-4ee8-9c11-2e185fef0158", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c616a593-ac15-49f2-a54e-627040363943", "sighting_of_ref": "indicator--e49dbf6c-01b3-475c-82b6-a760e98f3940", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e99cb4-da24-484a-bb2a-cf1df765a52a", "sighting_of_ref": "indicator--7a7f18a8-4f44-4838-92d0-812dee0376b0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934dab7c-da96-4f6a-80da-c658aaf980a8", "sighting_of_ref": "indicator--fcf68616-eca5-43c6-96c5-813924763562", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f076bf8c-a432-47ae-826e-784b475b3a57", "sighting_of_ref": "indicator--c7311329-a6cf-45c9-938d-aecd9f8924e4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8977de47-b6be-4445-bf31-ef0ab05b762a", "sighting_of_ref": "indicator--08b9bf17-193c-48aa-82e8-2abad71cd6cf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c369a6f-1f3a-497e-a1de-489224c6c601", "sighting_of_ref": "indicator--c0e921da-6a7a-4ff0-930c-932cc36ea5c5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fadb944-527b-4e81-88cb-c388e08a49a2", "sighting_of_ref": "indicator--8dc70f20-6746-431f-aab4-4783e9a825f8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf09d3e-55ce-47b1-9d19-20d547703ba1", "sighting_of_ref": "indicator--498dade3-c379-4b3e-8d4b-55c9d0995692", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680c7fea-1f3e-4c1f-838b-5fa99a938d26", "sighting_of_ref": "indicator--e1420e8b-02ae-4f6b-a4ce-d4602c93cbab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a201594-afb4-4478-8c11-81dcf2e3d038", "sighting_of_ref": "indicator--59e198f4-ebd8-43bd-a663-af5e1c598985", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac34aed-31c3-4f0a-8f19-72abd90e7a58", "sighting_of_ref": "indicator--22d19a27-f100-464a-b27b-92c6051576e3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9adbb9c-1f97-4555-9867-db9fa3e4c46f", "sighting_of_ref": "indicator--22d19a27-f100-464a-b27b-92c6051576e3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb95016c-27b9-471f-9f90-04fdc7d7a2ac", "sighting_of_ref": "indicator--5bdc16f1-23e6-4345-8ef7-cbcc6d413766", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be20d1f3-def6-41c2-a85e-eee218b65af5", "sighting_of_ref": "indicator--e72a0247-488e-402e-8695-a86a81e1ff6a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69bf4ce3-c6b1-4a5f-a751-81d6998ba680", "sighting_of_ref": "indicator--2a7ffe1d-45a0-44fc-aed0-a6257825ba52", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c9787a-50db-4b9a-8db2-c7f5c8115897", "sighting_of_ref": "indicator--57150d1e-463e-46f6-8c3f-f148efd28e15", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9f2456-c35a-410f-ab91-5178e86e8f3b", "sighting_of_ref": "indicator--ac7e38a1-d7f0-4b37-8f98-efdfad5978dc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6598481-2e17-4361-ab3c-ea429d699bed", "sighting_of_ref": "indicator--a419f025-b607-45a3-b7df-07452d7c203d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05cb195-db70-4465-8a1c-86441319e438", "sighting_of_ref": "indicator--a419f025-b607-45a3-b7df-07452d7c203d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc779ff7-bc0e-441d-9f96-d476edceeb3f", "sighting_of_ref": "indicator--75551223-b554-4f33-be86-5a11b252e37e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cef223-f5ea-40d2-8514-123aaf4cf50f", "sighting_of_ref": "indicator--3859e25e-7c6b-4d10-8e0d-bb58c8693ff8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d679970-91de-4b06-94d9-905e42871966", "sighting_of_ref": "indicator--be85d126-6ca3-4bdf-a56e-f02f998261b8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c92ae77-5637-4a97-acdc-f82ffd7e2171", "sighting_of_ref": "indicator--be85d126-6ca3-4bdf-a56e-f02f998261b8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db101317-2ce3-4a4d-87d8-90095fd81212", "sighting_of_ref": "indicator--be85d126-6ca3-4bdf-a56e-f02f998261b8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fc257e-5cbc-480a-8aad-1bb22ef13d92", "sighting_of_ref": "indicator--892162f2-36d0-463f-8823-d9160fc9f265", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2846640-c1e1-4533-95a1-d5350ccf9593", "sighting_of_ref": "indicator--6424d834-98bd-46e7-aa7e-fd9c76a4fb2c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60775f4c-216d-407a-97cc-a836cf494dc7", "sighting_of_ref": "indicator--0fa954f2-4d44-4917-8686-ad5ec441b9d2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457dc12f-c64e-437e-b338-3e24e433922d", "sighting_of_ref": "indicator--4c5b9c5e-01ba-46ea-ba7a-c86054200598", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8173cebf-2151-4d78-873e-6269f80f41d2", "sighting_of_ref": "indicator--9dcbacbe-72e7-4db5-946a-7827b31e7dc9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a178e016-988d-4134-81c1-eef6fe1617fa", "sighting_of_ref": "indicator--7a1e4ffb-7b41-47fe-b3f4-c6d6f48622bc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7b24f2-a135-4b0a-ae3c-a71e22cbf0bd", "sighting_of_ref": "indicator--fb4f6222-a965-4385-abce-09771974d64a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934b8395-e790-44d2-8daf-3cb08ff01f0e", "sighting_of_ref": "indicator--fb4f6222-a965-4385-abce-09771974d64a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29d7791-8f93-41e2-bdc8-6ada3e5a9d98", "sighting_of_ref": "indicator--02326e36-b060-44b6-8c15-6609ba09cbad", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33961158-21b3-433f-81ba-67caec9b8167", "sighting_of_ref": "indicator--8e768f12-d87f-4aa4-8b92-b0befbc0d483", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c3478f-9908-4725-9211-d761735458ee", "sighting_of_ref": "indicator--25aa96dc-cbcd-4f8c-a48c-abe0f98d9561", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1f5430-87b1-44fc-b83b-d22842b9cbb6", "sighting_of_ref": "indicator--62e2cf30-54c2-4ad2-90d9-bdc8e10e7067", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954d71c0-f2de-40ea-a883-534cd393caa5", "sighting_of_ref": "indicator--345b23e9-ff9a-473e-ac67-0884f95bd5fa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24bcbf7-c640-480a-8944-c395801d7aec", "sighting_of_ref": "indicator--b684a6fa-76cd-4581-8ed3-ac542258bb53", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ddecb1-6f39-4d3a-ab6a-ffccbc21bd6b", "sighting_of_ref": "indicator--101ec222-ffc8-41da-922c-3659e88406eb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02a1696-ed5e-4c31-86ec-831f56fc2119", "sighting_of_ref": "indicator--101ec222-ffc8-41da-922c-3659e88406eb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253670db-8299-4f09-bd8b-67a41825d3c2", "sighting_of_ref": "indicator--762143ba-4fb3-47dd-8654-9b47ea3f84cd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ef89ab-ffaa-4342-85f5-e7eebfe41cb2", "sighting_of_ref": "indicator--762143ba-4fb3-47dd-8654-9b47ea3f84cd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50266047-aab7-470f-807e-652305af6bd1", "sighting_of_ref": "indicator--762143ba-4fb3-47dd-8654-9b47ea3f84cd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1939845c-b614-456a-b19a-44ae6575af3f", "sighting_of_ref": "indicator--e323247e-8d78-4824-9053-08eeac2b4ef3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e619eb-1443-4ac3-8140-f5719649d3bc", "sighting_of_ref": "indicator--4019068b-43c7-438d-905f-d8e562c1876e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14da756d-b69f-4c14-b3ae-4ecd2ff6e78f", "sighting_of_ref": "indicator--725dce4f-a0a1-45d5-8f4d-aeccef73c8d6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785b4c7f-9696-45f2-9b1f-4abc3573f214", "sighting_of_ref": "indicator--725dce4f-a0a1-45d5-8f4d-aeccef73c8d6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a6cb16-02e8-4812-8e82-2673666684a1", "sighting_of_ref": "indicator--725dce4f-a0a1-45d5-8f4d-aeccef73c8d6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbcf828-8cb1-4336-9d00-7d45089aa4cf", "sighting_of_ref": "indicator--359d1d17-1948-4ada-b445-b765ad449493", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abe6a00-5901-4e49-8bc1-cea7f54e59fd", "sighting_of_ref": "indicator--50fc1a98-5b50-497f-9b87-41d29dd1c154", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e48d00-428a-4727-89b0-84cc9c07dd8f", "sighting_of_ref": "indicator--810cfcbd-dd0e-48fb-aaa3-45792bd26cfa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a23862-5896-4e7d-81f4-91afe09f6e19", "sighting_of_ref": "indicator--319928a8-a602-4e66-af80-351dc7f86ea1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7510478a-36c9-405d-a597-f99787d77061", "sighting_of_ref": "indicator--7942921c-321b-420e-9d4f-fe7ec69a0390", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a114650a-fbcf-41a8-8a78-cfd271404a4b", "sighting_of_ref": "indicator--c8934c63-fded-4625-80bd-ed1c09bd2905", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3c6a79-cdcf-4408-8b58-d655ab86492c", "sighting_of_ref": "indicator--fad76fd9-164f-4f09-814d-a2912ce9beb4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9068644-c9f8-4186-9da4-4636d9a2a857", "sighting_of_ref": "indicator--de71bf0c-1cd0-4c6e-ba57-ff21bbeffb32", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785e22be-7c5d-4b2a-88b5-cfa508327666", "sighting_of_ref": "indicator--de71bf0c-1cd0-4c6e-ba57-ff21bbeffb32", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7801ed-c7bd-40fb-bbc6-bcc13be69daa", "sighting_of_ref": "indicator--5c2f14cf-cf95-410f-b80b-f367db7a2c4b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a5ac51-8550-49ae-aff5-57b50d938251", "sighting_of_ref": "indicator--993b307b-b539-41bf-a766-c7d6a879a729", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c21153-bf21-4642-9724-9cc581e59818", "sighting_of_ref": "indicator--5b7ec86c-4d49-4a21-861c-61846aaca5b5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43860c6-403e-41b0-b855-e1a3edd732ee", "sighting_of_ref": "indicator--0a349f5c-7bd6-45ff-86fd-c80bdc69e2a8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7bd085c-6221-424c-a730-410f7e2c6b1b", "sighting_of_ref": "indicator--6547454f-4b28-4061-a8e8-5f803f191b0e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dfe9d5e-8544-4978-a93c-36d03601bdf1", "sighting_of_ref": "indicator--6547454f-4b28-4061-a8e8-5f803f191b0e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc08267-2abd-4924-9d12-7a2090da9d82", "sighting_of_ref": "indicator--d2d70105-d8ba-4be7-be29-c90bea719450", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ab3af0-a15b-4119-b949-d0fa8b6d32e9", "sighting_of_ref": "indicator--192871cc-d695-41bb-b397-6923d1383c08", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73cca1a8-8081-4cd6-895e-2aebcadd16d0", "sighting_of_ref": "indicator--00a29dec-b062-4bcf-b5fb-02c3387729ec", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bb1ba1-fdb7-49da-af94-762523adf167", "sighting_of_ref": "indicator--de846495-3586-402e-a436-9d2b5bd20b8a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5037849c-10d3-40ef-941d-b2c50c7fd827", "sighting_of_ref": "indicator--bdcbb9b0-1731-44b6-8b50-10c325f85614", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc1d2bd-f95a-4def-bcbe-22a45d94c66d", "sighting_of_ref": "indicator--8db94a79-c6d5-45c1-b5f3-51dcf9ae3ded", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c66cbfe-1d25-4223-b6c5-c5c99254086a", "sighting_of_ref": "indicator--8db94a79-c6d5-45c1-b5f3-51dcf9ae3ded", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc655f9-afef-4243-81cd-b30622f47e1d", "sighting_of_ref": "indicator--cb69ac54-e861-4f23-b292-ad18f3c32169", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db711828-cd0b-43eb-9c69-c1da48f24ee7", "sighting_of_ref": "indicator--02f26aca-b7cf-437a-9b72-9797c76ba9d2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de231bc3-5c90-4d79-9ecd-cddf0f13e0b1", "sighting_of_ref": "indicator--b870ada4-538f-44cf-8df6-be6862684290", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a170b88d-77e1-44d8-ab75-651947ab1e0e", "sighting_of_ref": "indicator--b44be287-bf13-4677-8b6c-bd33b0004d59", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9cf430-cdc7-4670-b686-7793b2d131e6", "sighting_of_ref": "indicator--0da3f65f-9b31-45aa-862c-46716555e1ce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a57a4b8-8dbc-482e-8713-d9cdcb65a8c6", "sighting_of_ref": "indicator--dc68929d-00fc-4363-91d0-62927eefde82", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a42c0d-aa88-409f-a37f-e85003f62dfd", "sighting_of_ref": "indicator--e6299903-43f0-4741-92b0-6512b6e42739", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46eea241-3381-47d7-93f5-c653a64b1233", "sighting_of_ref": "indicator--832f9df5-82b5-4e73-8bef-0aaca0dcb940", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2346f845-fb31-43c5-aaed-e013bd4f6733", "sighting_of_ref": "indicator--832f9df5-82b5-4e73-8bef-0aaca0dcb940", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a7dba7-5758-47dd-a022-c9c0d1775780", "sighting_of_ref": "indicator--832f9df5-82b5-4e73-8bef-0aaca0dcb940", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a575c5-d7fe-448b-81d9-f8b3f3e72e2a", "sighting_of_ref": "indicator--fd8f56a7-61d7-4c4a-a0f4-9979409a512c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c71904-167e-49c4-a88b-7f01d6deae95", "sighting_of_ref": "indicator--2f871f9c-0485-4b16-b6c8-3ba2b46c148f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671f8c36-42a4-4b55-a87b-12b30f91a26d", "sighting_of_ref": "indicator--2f871f9c-0485-4b16-b6c8-3ba2b46c148f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15dead2f-9b0a-42c0-8dc1-36c14e9edc63", "sighting_of_ref": "indicator--ca6a8614-50f0-42af-8901-507a18bdf0d4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1203357-0a0c-41f2-95e4-91555d450c74", "sighting_of_ref": "indicator--7969214f-2bb0-4563-a206-2291cf2ecc38", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b946af7d-1274-435f-a83b-c20b6c3167c5", "sighting_of_ref": "indicator--946859f8-a59f-4a37-b6cb-2f6c886c7d0c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81cb99bc-f148-4734-92a9-3060ef080995", "sighting_of_ref": "indicator--946859f8-a59f-4a37-b6cb-2f6c886c7d0c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8de099a-b1a5-4932-9e62-a70e895fe3b9", "sighting_of_ref": "indicator--4cadf8d2-b153-4789-b3f4-ba0ed1e41243", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc7703b-8848-47aa-b69c-cce3a247c557", "sighting_of_ref": "indicator--4cadf8d2-b153-4789-b3f4-ba0ed1e41243", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf96644c-22ba-4eec-b44b-5e5a5f18f943", "sighting_of_ref": "indicator--fd3fd1fe-cd30-4e0d-8623-da162fff1e3b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709e2e7d-4bf2-43fe-b2bb-e471d5bf2b0f", "sighting_of_ref": "indicator--fd3fd1fe-cd30-4e0d-8623-da162fff1e3b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2826c6b-3f65-4ee4-8722-592b9d2deddf", "sighting_of_ref": "indicator--fd3fd1fe-cd30-4e0d-8623-da162fff1e3b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d12ba66-9f4b-4014-a959-2a3d5913d7fb", "sighting_of_ref": "indicator--88e14fe8-2152-4e05-96de-af1ae42fc8dc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1549ae-302a-4246-890b-aea8a3eaf3b1", "sighting_of_ref": "indicator--88e14fe8-2152-4e05-96de-af1ae42fc8dc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57c9f34-5166-410a-a466-6d746cdcd676", "sighting_of_ref": "indicator--44d89c58-d3ae-4b31-a94c-903ddaf9fbc9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a86f6ce-75f2-4ab1-a62b-587718c50555", "sighting_of_ref": "indicator--d5fca948-3070-4b1c-83c1-6724864823a1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c21b1e4-5e63-4d9b-aaef-1294a7b388a0", "sighting_of_ref": "indicator--d5fca948-3070-4b1c-83c1-6724864823a1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ce03f5-515c-4d81-98c8-c9729eea37af", "sighting_of_ref": "indicator--1d17f5bf-f791-41fb-b5bd-62b77560bbf3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b106e77a-7640-479f-98cf-68644263140f", "sighting_of_ref": "indicator--09765383-7646-47c2-ac88-2f4877a0f38b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5678c3-6264-40c3-aebc-8f8c98641b21", "sighting_of_ref": "indicator--908b2df0-10c2-4039-a186-a272d18a18f6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5140bd45-0d09-470f-ab0d-98f3113cf63a", "sighting_of_ref": "indicator--c2dc76ec-8a7a-4cc3-856f-70507bbda006", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17477e7a-bcf0-496c-b4b1-871a52b736b1", "sighting_of_ref": "indicator--c2dc76ec-8a7a-4cc3-856f-70507bbda006", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c6b88a8-d15f-426c-aa18-48170dfe4a71", "sighting_of_ref": "indicator--01056aa3-7c2c-4f94-acfb-e9f6bb4d7a6b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287fb89d-27b6-4d14-b8cc-9896f354b010", "sighting_of_ref": "indicator--775b2359-1294-4f77-a79a-45554f68e7f6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd2a3d3-ad1e-456b-b891-a8fcf791dc19", "sighting_of_ref": "indicator--7e6f4402-1e80-4e71-8c27-32d4cb24dd5f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300f9948-707f-4847-bb59-c33dd48f2eb6", "sighting_of_ref": "indicator--2aeeaef6-a681-485f-9c13-74974a20deb9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea258bbc-b614-4995-b558-a7cf827e0a41", "sighting_of_ref": "indicator--a7e8e33b-e6c0-4597-9f14-b43fd35f7a3e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2182b6a5-d1f4-4810-a9ab-5a7d6debda8a", "sighting_of_ref": "indicator--bed7be94-9b54-4ebb-a312-1d95f7422570", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5c95a0-a03f-4c08-a015-beee33610490", "sighting_of_ref": "indicator--25aa3186-1456-48a9-9dad-7e0b91832875", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b566061d-1539-492c-bdd3-fba014029d4b", "sighting_of_ref": "indicator--32fda343-f76c-480e-8f29-d580ed714ce6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3add256-ed02-4da0-a10c-f60455790ba9", "sighting_of_ref": "indicator--cd7072e2-6486-4d38-afc5-624a6dc16c19", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5814ccb9-c5ba-4a87-96ef-1519fa71c809", "sighting_of_ref": "indicator--89620bd6-b9cd-40a5-a1cf-17936c0ab537", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82b965f-3474-492d-90b7-e05b9c333bc9", "sighting_of_ref": "indicator--3fa668ee-aa52-4a73-8b1b-0e4c4d171e7a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0897dbd-6d50-4bd4-9d5c-384474be900f", "sighting_of_ref": "indicator--3fa668ee-aa52-4a73-8b1b-0e4c4d171e7a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e706269e-afca-4114-b43a-96ac6347922f", "sighting_of_ref": "indicator--4d9454ca-59e2-4f00-8bdf-2181516cfbc2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8182bf04-3a81-4053-b3f8-da384adc76ea", "sighting_of_ref": "indicator--9c3aa151-7d6e-4ecd-b7b4-3c057a3184e7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce886f5e-e356-4e70-8e63-6040944fae8b", "sighting_of_ref": "indicator--9c3aa151-7d6e-4ecd-b7b4-3c057a3184e7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d63e1f-6ac3-4de8-9a06-84233e7cb16b", "sighting_of_ref": "indicator--26666096-6888-43ac-b05b-8003b94bf2a6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd28f505-3818-4406-b7a8-1429662f0aff", "sighting_of_ref": "indicator--e233ba71-409f-48ea-9ebb-a0af1b466c70", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cecc5e98-8360-4216-9a1f-bcfbce3f7e63", "sighting_of_ref": "indicator--3cc5ef8f-60bf-48db-91d7-41e737cad913", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb0b78f-3036-43c0-a956-872d2190524c", "sighting_of_ref": "indicator--3cc5ef8f-60bf-48db-91d7-41e737cad913", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defaf1d9-1b3a-46ec-b7b7-98573baacf98", "sighting_of_ref": "indicator--04b2d268-624f-46c4-a0ea-bc4dc329351e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604d7bf4-37bb-44eb-b385-47dc84929f48", "sighting_of_ref": "indicator--f8da8659-943f-446a-88d9-f9379f151b6e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe6a475-e9ca-468d-ae31-72a123687b4e", "sighting_of_ref": "indicator--2e2fccf0-0075-4a32-8ff3-f1d19b811fbc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2851080-6ace-4061-8476-d29603e10f4f", "sighting_of_ref": "indicator--1c74ade5-c1d0-4fd1-92ae-4c04c1a21a4e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e396843-8cf0-4d73-a90c-81924999c816", "sighting_of_ref": "indicator--dfc2207d-99ec-4a36-8394-3a9959e958d2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d427c5-9ca0-48bb-bb35-7e8953b4cffe", "sighting_of_ref": "indicator--3da11206-3a70-4447-bcb0-522d85626108", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52aceadc-f27a-4be2-9d38-6fdad39f1699", "sighting_of_ref": "indicator--84d380eb-666f-41fa-8c14-5163e85797a8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e200f6-285e-4825-9bdf-093561c84ea7", "sighting_of_ref": "indicator--12b4f20c-8683-42c0-a140-ba732a4ff134", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bfa544c-710a-4f3e-8cda-18cc19f9a13b", "sighting_of_ref": "indicator--80069d53-8a1a-4d54-aeaa-b1859fc685f6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e5691e-24a2-4102-9040-8aa35247f60c", "sighting_of_ref": "indicator--38cb31fa-c236-45c2-8082-f02f320a896c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8f7c9b-d2bc-43d3-b8bc-4831f4a6b26e", "sighting_of_ref": "indicator--b909b8af-6de5-4de7-a6f6-99cdc0ddae7d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbbea1a-a872-4ebe-ad5b-2466ec54d322", "sighting_of_ref": "indicator--ac403879-f26b-4bdc-960a-5089cd6aea86", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dad9343-4875-4e94-b0ae-1c2978dd44ee", "sighting_of_ref": "indicator--ac403879-f26b-4bdc-960a-5089cd6aea86", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17965076-fbda-4ef9-9c00-98df6880e4ab", "sighting_of_ref": "indicator--0951ea83-0c72-4f20-81cd-5473b5ea659a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1551dff-a31c-4cb7-bd6e-4421abde4233", "sighting_of_ref": "indicator--a57f4150-a11d-4212-a657-17903f33f444", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34dfebf2-3faa-4464-97d9-074f3cc09694", "sighting_of_ref": "indicator--6229f0f4-320a-459e-865c-4ef3aa400f55", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55092710-4dd1-4779-903b-ba11030643d2", "sighting_of_ref": "indicator--6229f0f4-320a-459e-865c-4ef3aa400f55", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17372d5c-0908-4495-9171-9f800905ee2e", "sighting_of_ref": "indicator--ce37b555-abef-4b80-b17a-3c106a2e19d8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f73e20-61d4-4584-aaa6-8861f8d93159", "sighting_of_ref": "indicator--396d3eb7-5ae4-4253-8921-eb5ef374d082", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90625a13-3287-4a93-8b9c-5d413f21e87c", "sighting_of_ref": "indicator--e4dcbe0a-10f8-4b2e-ba22-7c6c13319b4a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8b68dc-669d-4574-90e6-7171d07f55c5", "sighting_of_ref": "indicator--e4dcbe0a-10f8-4b2e-ba22-7c6c13319b4a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fb5cec-fe79-4df4-9ec0-4689f259237e", "sighting_of_ref": "indicator--678e781e-3630-412b-8b9c-6433a86a395c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6df1763-f418-47cf-b7c8-043c709900e9", "sighting_of_ref": "indicator--678e781e-3630-412b-8b9c-6433a86a395c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe071905-4598-4255-8c0c-c3beb585e972", "sighting_of_ref": "indicator--850660f9-5059-4211-bacd-19aa837bfaf0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac42304-b98a-4c7b-bd84-6742e8cc7d4c", "sighting_of_ref": "indicator--db6ecaa4-bc55-4017-b063-5515632db2eb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d57697c-9838-4ff2-8227-4065121a42c4", "sighting_of_ref": "indicator--7fbfe004-070a-4b7a-a8cf-9b172f3d27eb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7cfd3f8-0577-4f35-84b2-f8a71840b3ed", "sighting_of_ref": "indicator--58dc62d9-46cd-42b9-9c36-47d340028c02", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa799d9-d399-4cbf-aa90-aad27e0107f7", "sighting_of_ref": "indicator--ea17227a-1dae-4cff-8956-e06d7693b5b6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9bd379-37ad-4590-b188-1e2932656668", "sighting_of_ref": "indicator--22be071b-ccec-4957-bfbf-beebdf24a14d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbab2c2-0412-434f-8397-a75e83db2f08", "sighting_of_ref": "indicator--6eb39063-5c2a-4e80-b2f0-bdc8045d08f1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3ace85-e757-422c-b3b6-02b02128d4d0", "sighting_of_ref": "indicator--6eb39063-5c2a-4e80-b2f0-bdc8045d08f1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173858e9-8c07-462d-b341-ae50150f5e07", "sighting_of_ref": "indicator--c0fa7adf-1d17-40d2-ba3c-21b0d4609fbb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4536a9-6be4-4909-be0f-a28fc183a408", "sighting_of_ref": "indicator--c0fa7adf-1d17-40d2-ba3c-21b0d4609fbb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9acc0c76-3caf-44f6-a4d8-7bc646ae2447", "sighting_of_ref": "indicator--994bf824-96cd-4b03-9fc2-8affccc3ae61", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c172e49-f3f9-482a-bfd0-68368342f84f", "sighting_of_ref": "indicator--9a111e63-5820-483e-a676-b5d0896fde05", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1af8b61-5071-4ef7-8d1e-6be24840fcb6", "sighting_of_ref": "indicator--810d711f-2c67-4abd-9d32-08c6c17b92ca", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2ef740-57fe-4fcb-bb9b-3af631e1e9b4", "sighting_of_ref": "indicator--35e696ea-eb2f-498d-a898-a2423f5ccc41", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc1bcb8-7b44-4646-8caf-2eda392e1cc1", "sighting_of_ref": "indicator--00ac1c1f-42f4-4e48-b8df-88905ed20714", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7d5b03-5cd1-4794-82a9-913fd23458df", "sighting_of_ref": "indicator--c05302b7-df5c-4df6-9514-913edd8e8e01", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ca3efe-5066-4351-8347-e32b5add0fe0", "sighting_of_ref": "indicator--8de64ab4-5907-4c2b-9b38-f66ef41b4e4a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf6e301-5437-4669-ae2b-294c5579d55a", "sighting_of_ref": "indicator--05dcb437-d3cc-43ef-9a77-a05ddc3e9a65", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac02dc60-01f1-48d4-9f53-bf83c4cf3f44", "sighting_of_ref": "indicator--2c9a6e2d-0dd2-4fdd-9e9f-3418a987f468", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb61758-3e90-40ab-a9e0-7377a7131423", "sighting_of_ref": "indicator--1e491af0-8c5d-41d3-affa-04591f87a3e8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59bdb96-e8b5-46c3-b609-cad12ae0a0d5", "sighting_of_ref": "indicator--0ed227c7-db45-451c-a637-703495dd381a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44cfda96-3424-434a-b7a9-a3fa75e35850", "sighting_of_ref": "indicator--6aeea17d-cc9f-4cb1-a910-8aefb3e0ae92", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74234f3-254b-4acf-88b5-c150b2bf6778", "sighting_of_ref": "indicator--c849e917-bce5-4c56-b2ad-aa1363b6dd6b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933aa169-fc20-4f33-ac97-450cf806a2e0", "sighting_of_ref": "indicator--b58c50e9-7363-42e8-ac39-b3e8297638bd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a1ac45-d528-40e7-8478-92c27468dc08", "sighting_of_ref": "indicator--8f260510-0689-4de3-b885-ef7af390e6bd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981960da-e8ec-4ce6-aa79-013339db20c9", "sighting_of_ref": "indicator--b6589b3a-d1c1-4ce9-85ed-b0965950307f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2e1f10-770f-41cc-8b20-9c53a62a783d", "sighting_of_ref": "indicator--70f48b22-b478-4930-96a7-9e182b729982", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c759cfdb-101c-4371-a33b-ae5f7374d6bd", "sighting_of_ref": "indicator--f9663222-47d5-48e7-8ea6-8948a6bb4cb5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc51cfa6-2cac-4f34-a31a-3e2fe87a7484", "sighting_of_ref": "indicator--9347c06e-4005-4aac-b849-a17c731dcda7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c612ac54-b219-49f5-af45-2fc84237387f", "sighting_of_ref": "indicator--49d9ce77-0653-4f1b-83b1-2f8f31e556b4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28ac709-8a91-4e04-9caa-36ba71c68ebc", "sighting_of_ref": "indicator--a8d9280e-254d-4a61-8f8f-fe360286790d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050d4bac-ffa9-4cbb-9ae0-7990ce365adc", "sighting_of_ref": "indicator--080c422c-23ad-4119-afc0-c64a4df3b3db", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c14712b-b68b-4778-8b95-0bd720158cc7", "sighting_of_ref": "indicator--1e09e823-4491-44b5-a24a-e3d5ff3e70ff", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9d2e36-2c8b-443d-b8e4-6e4d14f135f5", "sighting_of_ref": "indicator--3f438288-505f-4414-8777-1eb9d9c6446a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e9c618-26fc-4f00-b4a7-ff92c66f4059", "sighting_of_ref": "indicator--0ced25f3-5747-4432-826f-cf9508953448", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8f2f38-6896-46dd-879c-67272d4ccebb", "sighting_of_ref": "indicator--134e8c43-100b-40f3-ba6a-52b10386c9ba", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf278c0-87be-4a49-ac2a-ac1d8f5da423", "sighting_of_ref": "indicator--f0d93681-a534-44ba-8d68-344678c034e5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c736c3-141f-4347-a904-d6fbe5e1d8b5", "sighting_of_ref": "indicator--b7d89638-e183-4f06-a864-030212674aa2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c522bd-712e-4682-8eda-ce41a2d41b89", "sighting_of_ref": "indicator--8aa98190-35ba-4a3e-9948-3492ad1dbe21", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd24b6d-5ec0-467a-8a47-3b5db20ea969", "sighting_of_ref": "indicator--4c9445f0-8edb-4d1f-b68b-83cf9a860928", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75b925a-0817-4a8b-bbed-b142ea4be630", "sighting_of_ref": "indicator--98a7c252-19ef-4146-b289-f68de66de431", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b603c12d-8c5a-419c-a505-f459cb4bb15c", "sighting_of_ref": "indicator--98a7c252-19ef-4146-b289-f68de66de431", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12782f4-34b5-4f69-b4f3-e70911beeb03", "sighting_of_ref": "indicator--5e713b42-172c-4f9c-b5ae-a0d91768d8b6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d54467-3f0c-4e53-be26-6ad2f6498c8c", "sighting_of_ref": "indicator--501e46e6-4276-492d-8a41-b7840849d59d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee9e17d-bf57-4442-a0a7-bd07a775f10b", "sighting_of_ref": "indicator--9de26543-5f07-44ed-905b-ddac3c399257", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50df7b6-2ffe-4b9c-8303-31a4ecb48671", "sighting_of_ref": "indicator--9de26543-5f07-44ed-905b-ddac3c399257", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880e5502-65ea-4bdc-a8e9-2d3ac14152e2", "sighting_of_ref": "indicator--9de26543-5f07-44ed-905b-ddac3c399257", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74c5dfc-50f0-4382-9d50-37a4eead1427", "sighting_of_ref": "indicator--32dfd28b-ab25-4ab5-8ce5-0cfa77c60d85", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d739479a-ed39-4389-9757-fe84e53620e8", "sighting_of_ref": "indicator--32dfd28b-ab25-4ab5-8ce5-0cfa77c60d85", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb15d1f-6602-46d6-bf90-120b713b29f3", "sighting_of_ref": "indicator--b437a8c1-1859-4350-8caa-af8f1a5fec3b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8c78ff-a80e-4371-8bec-e07d84947a01", "sighting_of_ref": "indicator--b437a8c1-1859-4350-8caa-af8f1a5fec3b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d08d793-4569-4ad0-a96e-0c59cea53ed0", "sighting_of_ref": "indicator--363a5ee8-10f3-41c0-b884-9747d060f45d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ca7cea-2382-45f3-9cd6-843879089969", "sighting_of_ref": "indicator--363a5ee8-10f3-41c0-b884-9747d060f45d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25522734-e9f6-4d30-b5cd-4ab8a5906010", "sighting_of_ref": "indicator--5da063eb-df58-4aa9-bceb-4fba9d9c6b81", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589084a0-164d-4468-adad-1e92274edb49", "sighting_of_ref": "indicator--f3177427-2c10-4e19-a9c7-4b6e6b80ab77", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab376cb2-39c9-49d1-9cf3-9f78660daff2", "sighting_of_ref": "indicator--9114191d-80c7-4b3c-966f-6d096ec6e433", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974a65dd-8219-4c56-a36c-2436fc31760a", "sighting_of_ref": "indicator--fda3e992-c8b3-4af1-8e4b-f4811824ac1d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6fb658-c184-4d1f-9366-bc0bd8e92bc9", "sighting_of_ref": "indicator--5f47bafb-a4af-43a6-960b-f6547513d31a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5570d5b2-9410-48d0-bbd8-2b1956724d4b", "sighting_of_ref": "indicator--030b513a-4763-4914-b234-44db2a050fac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf7885d-00dd-4c9b-8347-3c2395e6ec29", "sighting_of_ref": "indicator--030b513a-4763-4914-b234-44db2a050fac", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad9a117-2345-457e-8733-e8908c6548d8", "sighting_of_ref": "indicator--faa518bd-0675-4ad4-be29-555da21bf137", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad809dd-95f5-44c3-9e2a-125c10b3cfe6", "sighting_of_ref": "indicator--faa518bd-0675-4ad4-be29-555da21bf137", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce64987-5af8-4708-8a86-4fdea9fc2433", "sighting_of_ref": "indicator--1f1d9cc0-d12d-42ab-9668-0d9f79d1532e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531010c4-7345-45ad-b46a-c0fd446deefd", "sighting_of_ref": "indicator--1f1d9cc0-d12d-42ab-9668-0d9f79d1532e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6095a59-92b2-40a0-9d6e-8846e3ebbb06", "sighting_of_ref": "indicator--1f1d9cc0-d12d-42ab-9668-0d9f79d1532e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73872403-32ed-4c57-80c8-231b01a7ab08", "sighting_of_ref": "indicator--c2f48b52-8209-4446-8e2f-3235d281c969", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4539be-0b6d-499a-a763-16f9d8e849c2", "sighting_of_ref": "indicator--c2f48b52-8209-4446-8e2f-3235d281c969", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bed5923-da86-4f91-915e-9183948bc2f1", "sighting_of_ref": "indicator--c2f48b52-8209-4446-8e2f-3235d281c969", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bcdbb16-e68a-4667-ab59-c0297fb0eef0", "sighting_of_ref": "indicator--653637e6-246f-415b-a37a-6009e4a787c0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46e15b2-64b4-4ad4-8967-ad603dc5bd14", "sighting_of_ref": "indicator--074d6034-e598-4991-832c-ed535e4a93fb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451fcc40-4688-4909-b046-26f826d9f97b", "sighting_of_ref": "indicator--290f8e2d-23bd-4c53-8ed1-e99c4fb99db3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697c9ebb-3d0d-4ebd-bd7d-3e5fff6a6bc1", "sighting_of_ref": "indicator--a369d2b1-7e71-4d74-b8ca-ca9a035481bd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ce541c-add3-4933-a6bf-c13ac595735f", "sighting_of_ref": "indicator--3cf1eca9-461f-46e0-a921-eef16d1ec1d3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e890cb92-f95d-49c1-a153-ed2eefc95175", "sighting_of_ref": "indicator--3cf1eca9-461f-46e0-a921-eef16d1ec1d3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd520be-851c-49f4-9fa1-deb76dfd02fb", "sighting_of_ref": "indicator--3868af04-c954-492d-96f2-e5c28ef18664", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f247138-ddd7-4426-a0a0-8b97e434b904", "sighting_of_ref": "indicator--ed21075f-2447-4869-93bf-42bc99ff03bd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabe312b-7fea-4aef-99a0-51ef288961cf", "sighting_of_ref": "indicator--f5b492ef-98c5-47bb-a419-98f8545677c5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f2cc3b-7ac2-4834-92d9-a01347798fda", "sighting_of_ref": "indicator--55dce4cc-2721-45d6-9212-7b6d9e38b35b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2469821d-3c48-4bec-b9a0-efb0c23b9f9f", "sighting_of_ref": "indicator--aa059b74-6a49-41ab-9be7-f33a67935a2b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578e1145-6e89-4a29-9304-7458100121f0", "sighting_of_ref": "indicator--aa059b74-6a49-41ab-9be7-f33a67935a2b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43dfb415-a3a8-4b2e-836d-1f73441a0749", "sighting_of_ref": "indicator--aa059b74-6a49-41ab-9be7-f33a67935a2b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc53eee-37c2-4b16-a994-1bc154c6b13c", "sighting_of_ref": "indicator--d68833c7-f5e2-492e-9bad-8665f0caa5ac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336f5b9f-3286-4139-acd8-4d568b443d60", "sighting_of_ref": "indicator--d68833c7-f5e2-492e-9bad-8665f0caa5ac", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea04eb2-facb-4e5c-9685-0fe5386e289a", "sighting_of_ref": "indicator--8c062e7a-73a5-48bd-bc30-7013ca5e6fe5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70485eb0-1265-4243-a371-269f2fec80b8", "sighting_of_ref": "indicator--6dcb59ae-c7a4-42c2-8a8f-20d97e5498d6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4636ac1-7115-4ec7-8dd7-91c654ff4d68", "sighting_of_ref": "indicator--f3b86809-c3e6-4eca-88f6-ada459bb842c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feaf8f3f-d5b6-4c18-9a3a-54ca3e829f70", "sighting_of_ref": "indicator--f3b86809-c3e6-4eca-88f6-ada459bb842c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb0834b-06ac-4f6b-b88e-a8e68fc5f3af", "sighting_of_ref": "indicator--4a9dfd95-3a04-4dc0-b4dc-ae666848debd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432b247a-5697-4f77-8f9e-8c0b35289a2d", "sighting_of_ref": "indicator--7de585f3-6128-40a9-8085-01f2c9edc407", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b6cf90-4b82-4449-85af-74a1796b63ff", "sighting_of_ref": "indicator--7de585f3-6128-40a9-8085-01f2c9edc407", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4a62e2-2292-436c-9a6a-dc24b5eab0b0", "sighting_of_ref": "indicator--06018f83-94ac-432d-966b-cef21aaaf83d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c71b9e-4d87-49be-b92a-14eb8d6feb08", "sighting_of_ref": "indicator--0a21dea0-b556-4ab4-bf61-6423bf2b63f9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aebc812-56a5-478a-b027-6e923105600d", "sighting_of_ref": "indicator--b92a6363-7241-47a8-9035-ed6c9d55b8dd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82d5089-42cc-4f2f-8ef1-404b13ec6fa2", "sighting_of_ref": "indicator--9f1bd121-cdc3-4086-bced-0675e2eec228", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c272374c-4b1c-4e21-afae-60ff96dcdc21", "sighting_of_ref": "indicator--ecffb3e0-3827-4db1-939b-17c679be48f8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68630335-8a0c-4b6b-8323-b913d6a8bcc7", "sighting_of_ref": "indicator--ccd5de49-473b-40fe-8fbf-137b80f37c03", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ef0696-6205-4a82-bd41-97cbe2208dd6", "sighting_of_ref": "indicator--a931dee4-1e09-47fb-855f-255919d68416", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60bf7e7-ac2c-480d-9209-7ae8520704a3", "sighting_of_ref": "indicator--c425e7b0-791c-4012-881b-89e2d647004c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe7196d-57ce-4cbc-a4fb-314f64ec036a", "sighting_of_ref": "indicator--dae0d802-0188-443a-b122-94beac547905", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d1ac19-b803-455e-b0ab-1097895288a7", "sighting_of_ref": "indicator--b2e3db02-8be8-469f-8fb3-5ba2b579759d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026a17b8-2a15-446c-834b-aa1ae63d33b3", "sighting_of_ref": "indicator--d7a0c222-65ea-4b94-994f-1741314ebd08", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61177d8-8674-4736-99cc-05cf39e0cd87", "sighting_of_ref": "indicator--9df5241f-1a49-45fe-acdb-757499c92fa2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a04f502-56d5-4533-9d23-081cc75fcd04", "sighting_of_ref": "indicator--6862db71-2c07-4107-8cb6-1061d4661b23", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee88762-b4bb-4fc6-ac67-3fc486d155ca", "sighting_of_ref": "indicator--1c7459ef-9f5d-4cff-b78d-9f07bb947dd3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6140771-39e5-40fb-9512-b1bb275cfaa2", "sighting_of_ref": "indicator--594f1108-f550-4771-8ac0-ae2a218014d1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aac5251-c0ea-4ea5-974c-3c6ccb76080c", "sighting_of_ref": "indicator--21d4454e-28aa-4e51-845e-e8010c8f33ba", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553dcbe0-cb67-4cc5-a134-9f32122c5cca", "sighting_of_ref": "indicator--3580e600-6e92-4d6d-b8c1-e421422ba65a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6cb55f9-e1fd-4279-861a-67223ae25b36", "sighting_of_ref": "indicator--2ed880ad-c041-4eef-a939-23be1a3dd45f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2776b595-bc6f-49f2-9de2-d63208bb2960", "sighting_of_ref": "indicator--81d49df9-f908-4022-a7a4-3caf1dc0dbef", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119f3563-7ea2-4747-9b90-a3081e9971fc", "sighting_of_ref": "indicator--81d49df9-f908-4022-a7a4-3caf1dc0dbef", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21882dbc-d775-445a-b4bc-ef361da4aa82", "sighting_of_ref": "indicator--a802438d-9a36-449d-a736-4d4cf6637d79", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3adf308d-b51d-432f-aa4e-5077e671f708", "sighting_of_ref": "indicator--a802438d-9a36-449d-a736-4d4cf6637d79", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c56c96-65b0-43a8-9405-e085df8e2815", "sighting_of_ref": "indicator--c0ca9c33-b269-4f00-8d8e-3fcff0ebb2d9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efa516f-ce51-4406-9e31-d611850a1212", "sighting_of_ref": "indicator--eb1ff91d-5414-4117-b2dc-e654af0d140d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f210ad-1480-4673-8d98-7026fec7f298", "sighting_of_ref": "indicator--1192e490-32f5-4c6e-814d-7462b35b9596", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc00c820-eced-4bd7-83d5-2617e6b4a50d", "sighting_of_ref": "indicator--1192e490-32f5-4c6e-814d-7462b35b9596", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8da646-f114-4351-b4f4-3dc28c960a51", "sighting_of_ref": "indicator--75a61c80-8e2d-4a40-9a63-6f688f13eb77", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8dc4db-785d-4708-b8dd-3ab28cd5037f", "sighting_of_ref": "indicator--75a61c80-8e2d-4a40-9a63-6f688f13eb77", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7782e135-c051-4b13-9f2f-22f79d7bd141", "sighting_of_ref": "indicator--4c616b45-4a52-4112-a4a1-c8075fe68dd1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57f75d3-e82c-4096-b375-64ad6f0b50d8", "sighting_of_ref": "indicator--7530dbba-5a60-44b3-a444-3acb284300d0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebc9192-a474-4823-9c5c-7123c55ec62f", "sighting_of_ref": "indicator--f484cdb3-c0c0-4b6c-9bd7-889b35cb6682", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb639f16-f557-4f32-8be9-9ef64f2f3e55", "sighting_of_ref": "indicator--977e7f39-b349-4539-8fd2-f05d145a2aa5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7f60fb-ba05-44ec-8769-8cd351cdc446", "sighting_of_ref": "indicator--eaa935ca-ba99-485f-8ba7-185795565b4e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bdd750-c3ab-4dce-aa9d-77f6d3010a47", "sighting_of_ref": "indicator--7cf0c66e-d420-46a6-9d63-124b9781b410", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3d9a62-a1d8-4ada-b170-3b89705601fc", "sighting_of_ref": "indicator--7cf0c66e-d420-46a6-9d63-124b9781b410", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26268b3-c0e8-4e03-b314-6c254008f8fb", "sighting_of_ref": "indicator--378c2763-2a93-45fb-a06c-ea1fa5b3fdfb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a780ea26-127a-4d64-a04b-ace0eeb4e615", "sighting_of_ref": "indicator--14450d97-d63f-40c5-a732-91d60d508b26", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a63e95-8997-4a31-bf84-5c56fae1054c", "sighting_of_ref": "indicator--b449dc67-9683-4611-be11-c071ff1df7c5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e69a6d9-f4cf-41f2-96ea-03a4ea0308ea", "sighting_of_ref": "indicator--1a827b15-d364-4685-981e-18c079f70964", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605ce4c3-263b-42f5-8a79-2412604d4025", "sighting_of_ref": "indicator--2b182698-2c8d-487f-8638-b37e6fb53972", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c7487c-38c3-4ae5-83be-ddfbbabeeb74", "sighting_of_ref": "indicator--3065472d-d427-435d-8896-7461839b9f37", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c9b91d-175e-4c63-9054-cb3a6118cc9b", "sighting_of_ref": "indicator--318bd6eb-5730-4ef6-94ab-21127a027c39", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb48f8ee-fe12-40df-92cf-922a1dd14cc1", "sighting_of_ref": "indicator--0dc13cf8-07b4-480c-a26b-fb71262def63", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aace7516-b99e-46cf-b7d1-137e6e182ad1", "sighting_of_ref": "indicator--0d647965-952e-4c52-8485-006849cd75e7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843b2f4c-e656-4680-9381-1d22aaaaa440", "sighting_of_ref": "indicator--ee810883-4b5f-4dba-a879-703d73368a72", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be56aa3-c44a-4b7b-ba0a-8901e0721b6d", "sighting_of_ref": "indicator--e0b53c65-aee5-4c55-ba69-9a2eb9fed70a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e275052f-8c58-4cbc-9caa-b293ce066787", "sighting_of_ref": "indicator--aa4a6d2c-8e76-41f4-a006-4c5036202faf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a30aa81-e76f-471c-9deb-0160c6ef41f4", "sighting_of_ref": "indicator--3ba67a20-688e-4e7e-8c10-f00c6c5753ca", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6559a1-6e14-4c91-bf8f-8c3aa53e6edd", "sighting_of_ref": "indicator--3ba67a20-688e-4e7e-8c10-f00c6c5753ca", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298342b7-404e-43ef-9aa0-06c467658d48", "sighting_of_ref": "indicator--98100194-03da-424a-a882-74c026bb1b0d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbadb96e-8b32-467e-aaa1-b9f34ed276f8", "sighting_of_ref": "indicator--70d016b9-8ebf-42c6-82f4-436ae009d339", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663f401c-32fb-4bff-b66f-0a1ddd5af636", "sighting_of_ref": "indicator--70d016b9-8ebf-42c6-82f4-436ae009d339", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119690fa-5c49-4aa0-9a1d-e89a068ba973", "sighting_of_ref": "indicator--3a10814d-c0e5-4603-8936-31fedd477cf4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10014b1-4522-4b5b-9bb8-675b16ab5bc5", "sighting_of_ref": "indicator--3a10814d-c0e5-4603-8936-31fedd477cf4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cab9db-31e5-4a74-a359-74e22482254a", "sighting_of_ref": "indicator--7a43c703-5706-4c0c-a0c2-436bfd30960f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17dc1fb2-6598-4598-b77b-f228d01a65dd", "sighting_of_ref": "indicator--4548fb52-05db-46d8-8d30-0efaeac72a7f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c81c3f-a14c-4674-944d-42ce3dea27be", "sighting_of_ref": "indicator--4548fb52-05db-46d8-8d30-0efaeac72a7f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599ef505-9e3b-466c-966f-006c45169ce9", "sighting_of_ref": "indicator--7f2e2902-875a-4271-8ada-497ff653ba15", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e51e0e-d290-49da-86a4-9b59d0fe4b90", "sighting_of_ref": "indicator--7f2e2902-875a-4271-8ada-497ff653ba15", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494b8726-8b87-4087-bf57-49942a35ca72", "sighting_of_ref": "indicator--7f2e2902-875a-4271-8ada-497ff653ba15", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a527fba0-6040-49a3-a16b-5014f0541373", "sighting_of_ref": "indicator--770def4b-69bc-4536-bd19-bc4be7cbc1db", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7028ff7-ecf0-48ed-9363-c31fd6a316e9", "sighting_of_ref": "indicator--b99366cf-a1f4-4a1d-b0fb-e5c1e199d766", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff428c3-2fdc-40cb-b975-8889ac3eb8b9", "sighting_of_ref": "indicator--b99366cf-a1f4-4a1d-b0fb-e5c1e199d766", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65cd2d02-17df-4afe-84dc-acdaf0ae1d7b", "sighting_of_ref": "indicator--42578f59-dc7f-400a-84a4-1775a23b3d2a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911bdf7f-c361-40c2-8988-ac98441a0ee1", "sighting_of_ref": "indicator--fc5cf388-3a1a-4309-97b6-2120cf36c04d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d88d4b-35c5-4c9f-bc0c-d34a651b527b", "sighting_of_ref": "indicator--9bef4c20-e302-46ab-bbba-133ad1ea934b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa4d377-312f-46ce-8a26-ed2ae02e6cc8", "sighting_of_ref": "indicator--21baa6d5-6ad9-443b-99f4-b28c00bd8c4c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3728de98-4cdf-4e52-ba1c-9236d5d1e5af", "sighting_of_ref": "indicator--c2fd14e1-8ef1-493e-b2f3-6e25daab7b41", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34491949-550c-4f80-a2d9-4e1fead8934f", "sighting_of_ref": "indicator--c2fd14e1-8ef1-493e-b2f3-6e25daab7b41", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ac9eb6-f846-4988-b9f5-90e9331710fb", "sighting_of_ref": "indicator--912fcb7e-7426-4efa-a439-54f0011bd20a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0c15c1-7aff-48eb-9022-458c50eea7fd", "sighting_of_ref": "indicator--70a753d4-89d7-4fb0-92a1-5aee293abcfa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e75e091-a24e-42e2-8ddb-8f4ad311743e", "sighting_of_ref": "indicator--70a753d4-89d7-4fb0-92a1-5aee293abcfa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90db0a3-554b-4a6e-a88a-5d6961df4a97", "sighting_of_ref": "indicator--e292c1d0-de7f-4aa1-adef-1f232bae8c8b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4784e28-ca84-46b1-a000-bd03536c2837", "sighting_of_ref": "indicator--10dde05b-862f-4797-8c12-b211c6c33baa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33b1dc3-cdbf-4ba0-9b25-9e242999fffe", "sighting_of_ref": "indicator--1dd5bc7d-7a90-4390-a1f8-67be35306d6d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6b1d19-c4ef-4171-8026-f5e2c7e0a3ca", "sighting_of_ref": "indicator--163eddd6-69e5-4c19-8dc0-d7ea8209ac2e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da221c4-d80d-47af-9092-f1b0a9642e54", "sighting_of_ref": "indicator--163eddd6-69e5-4c19-8dc0-d7ea8209ac2e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c6a43c-092d-4265-9092-fd32be915556", "sighting_of_ref": "indicator--ab739042-4bef-49f8-a237-55a8cfec1c54", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065934d0-1bcb-4866-abb0-f8c10402f654", "sighting_of_ref": "indicator--ab739042-4bef-49f8-a237-55a8cfec1c54", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834041bc-5769-4abe-bf64-42c1181301bd", "sighting_of_ref": "indicator--ab739042-4bef-49f8-a237-55a8cfec1c54", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c8f92e-605e-498f-aa70-c063949c79aa", "sighting_of_ref": "indicator--2808063e-5150-46fa-8a12-cc473fcb15bd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0736a98b-dc3a-43f4-b9a0-f8ed5f7cf175", "sighting_of_ref": "indicator--615dcece-0268-4ed5-9cfb-190ff75fe725", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfd2288-ef32-45fb-9a25-fdf7dfe5b0c4", "sighting_of_ref": "indicator--e4362915-f8c2-4101-84e4-a87557f403c5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4833793f-ec2b-4611-9597-9a591ce8ed5d", "sighting_of_ref": "indicator--ac226e31-b33b-42e8-bcb1-ecb9dacda5ba", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27cea7d-b849-4845-af72-8b31cc4a55df", "sighting_of_ref": "indicator--ac226e31-b33b-42e8-bcb1-ecb9dacda5ba", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c61da41-cf4b-4442-bc36-2357f45420f2", "sighting_of_ref": "indicator--225f3ea6-591f-47b9-8f5a-48cbfb85ecab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1de4a9d-ad13-4f95-8296-43a15c7864df", "sighting_of_ref": "indicator--225f3ea6-591f-47b9-8f5a-48cbfb85ecab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7bfe18-fd12-4c1b-a5d0-0e3a1283ff02", "sighting_of_ref": "indicator--cce7eecc-1b7f-480b-a288-c641ac9c74e3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbe187e-17e2-4284-a4c6-698467d3c7a6", "sighting_of_ref": "indicator--79f21aa9-a23e-4226-8536-e589d0cc8436", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7996a8-4b3f-4e4d-a493-9323363353ec", "sighting_of_ref": "indicator--4079ed47-c98c-4818-b8f1-292a3d460214", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056aff4e-53e5-444b-b32e-5e7e33a84a90", "sighting_of_ref": "indicator--4079ed47-c98c-4818-b8f1-292a3d460214", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cdf0701-5bfd-429b-ad61-04cbfaf3e2f3", "sighting_of_ref": "indicator--8495a47a-6dd5-4e6a-a5b5-647b04c2460a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37dd0c22-6d78-40d5-8721-3d8af838a8e3", "sighting_of_ref": "indicator--12f547ff-7b90-4816-8d91-3f660dd8763c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89a03b9-37ee-4e97-9a7e-d9e76fb72076", "sighting_of_ref": "indicator--12f547ff-7b90-4816-8d91-3f660dd8763c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3d3922-7bd4-4a48-8c3f-59e98696d25e", "sighting_of_ref": "indicator--b786a680-7e5b-49e6-b0fc-def4e96e934c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26826f19-b1b8-4d5b-bd07-c480eefc46e3", "sighting_of_ref": "indicator--c1ff4dc7-b566-4561-aad2-7b90568a3214", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20191936-b5f7-40c3-9cd5-ad3b7ffe0fd5", "sighting_of_ref": "indicator--acfa320a-43d9-4a3f-90f1-e8e9769137d4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7f202c-08d8-417f-83a5-9af2f1978ccb", "sighting_of_ref": "indicator--8920cf4e-02f3-4056-995c-f1ba429813d0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af409ca3-df16-4b8e-bded-d7d99860836c", "sighting_of_ref": "indicator--c3638159-452a-4b1a-99ac-8fe684efa19c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5301b8-4818-4a01-8167-7b61f500d8d4", "sighting_of_ref": "indicator--85112176-4edb-4686-a338-67865a3ad68a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a225491-8b7e-4c2b-82a2-b841b3fe7782", "sighting_of_ref": "indicator--f4ef38c2-3fad-4649-940b-f9404de7909c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe00344-1dd3-4f86-bd27-9d7638a86bf3", "sighting_of_ref": "indicator--1feeccba-3380-43f0-811a-e9bc8ca64028", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5411716-03bd-4568-9445-055a2392eae9", "sighting_of_ref": "indicator--f7f80934-c951-4329-a2bb-cb4db0a5e1ed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ef1242-1460-4d34-9499-74e9df3d5d29", "sighting_of_ref": "indicator--f7f80934-c951-4329-a2bb-cb4db0a5e1ed", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1832dfd3-331f-48af-9bd4-a69308e1c88e", "sighting_of_ref": "indicator--61ad533e-60fd-40c6-a1f1-5b7c6d6c8f98", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdca71c-a102-4a37-b08d-f89e512f89f8", "sighting_of_ref": "indicator--8bd8c2d3-c5fb-4c69-90aa-e0e37ffcb0c5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51d2232-38d6-4daa-9882-b660b2d41bd2", "sighting_of_ref": "indicator--1dfbc029-0870-4816-9e6f-b17139d2c56c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a482b6-ad32-48ea-895b-c37f3ee46a05", "sighting_of_ref": "indicator--1dfbc029-0870-4816-9e6f-b17139d2c56c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a576589-88d5-4664-b6af-2d5153d2987c", "sighting_of_ref": "indicator--1dfbc029-0870-4816-9e6f-b17139d2c56c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1a9dc6-cc1f-4a02-a097-eda64d2fb574", "sighting_of_ref": "indicator--6d9c440b-5505-4ab3-b61c-9188f3c013b1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f56d63-453c-4601-91a3-0de48f7fff72", "sighting_of_ref": "indicator--dea770ee-ed2b-43cf-8de9-3436d100fd75", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227db8f2-79e6-497f-acd1-c5437556daa4", "sighting_of_ref": "indicator--cadd450d-ba69-43ef-a7de-7333ddce315f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f50c8d-f5dd-4aaa-b5d9-92897780eeac", "sighting_of_ref": "indicator--cadd450d-ba69-43ef-a7de-7333ddce315f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22070771-5ff8-45d6-a92e-3288a91d9bd6", "sighting_of_ref": "indicator--cadd450d-ba69-43ef-a7de-7333ddce315f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80dada5-a162-4127-899b-f32fd3902b5f", "sighting_of_ref": "indicator--8892b4ce-15af-4040-b5da-863e6e1a8e71", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42a7e3f-b118-4b3a-a39a-d6cb06b10526", "sighting_of_ref": "indicator--8892b4ce-15af-4040-b5da-863e6e1a8e71", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2180a1b2-7658-46c7-b778-9979f0040e3f", "sighting_of_ref": "indicator--0fb99913-3d7f-4a72-ac66-766d18b9d295", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722bb6c7-0ebb-480d-af93-0cc1a35f6bd3", "sighting_of_ref": "indicator--0fb99913-3d7f-4a72-ac66-766d18b9d295", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0e2b91-3942-4758-ad29-2077afe3f586", "sighting_of_ref": "indicator--0a575b76-e8d8-4345-b584-f8eab08b2831", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a306bd-99e4-4b70-a24a-cf63af7039e1", "sighting_of_ref": "indicator--0a575b76-e8d8-4345-b584-f8eab08b2831", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df731ae5-f950-4176-af42-b4443fb7b1ab", "sighting_of_ref": "indicator--2d719e29-a331-4109-9c35-02c2eab9f56b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83df0af-4195-48a0-9325-ee2f14a199bb", "sighting_of_ref": "indicator--2d719e29-a331-4109-9c35-02c2eab9f56b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb43cfb-2440-4aae-9b14-28102479e50c", "sighting_of_ref": "indicator--fa107194-e5c2-4da6-8280-655f8b32255a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd3458a-9a0b-4134-bff1-85e7490cb6db", "sighting_of_ref": "indicator--e80ce961-3416-43b3-8748-240c8c481e4a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc53c8a-822d-4957-8c83-c4a9f4484d62", "sighting_of_ref": "indicator--f247ed3a-ff90-434f-a91b-6b4594e40915", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b66bbc3-06ae-44dc-9a8c-7f1edc493485", "sighting_of_ref": "indicator--217e51c1-bc23-494e-a239-a9f96ac7be8d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78831ff-137c-4895-ba1e-3157118cc0f6", "sighting_of_ref": "indicator--17b8d90f-d931-4f39-8c58-6d4c212b69c1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd9c4b2-3e60-4fc7-91ad-8e3bae678001", "sighting_of_ref": "indicator--17b8d90f-d931-4f39-8c58-6d4c212b69c1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b4d9a3-3bb9-449b-979e-1b6b45786086", "sighting_of_ref": "indicator--d8720ff8-b023-4889-9b95-321ad7679485", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b80d1f-4a8d-41df-8009-09612f132546", "sighting_of_ref": "indicator--518498d5-d199-40c1-a9b1-ee1519fe8fab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ee24a2-cd49-4c4c-97ba-cd7a3a752784", "sighting_of_ref": "indicator--f34feb69-003a-4bac-95bd-c7dc4462b6dd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35930b57-af13-4793-ba64-446f18ed5f09", "sighting_of_ref": "indicator--f34feb69-003a-4bac-95bd-c7dc4462b6dd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f687c6a5-6360-42fe-bed0-50924ff1c3cb", "sighting_of_ref": "indicator--ca836d34-ca9b-49c3-8473-985a771da2c7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524af31d-552f-461c-9df4-11d26613b100", "sighting_of_ref": "indicator--643e0cda-7cc9-41c3-a3d2-faf366a033d2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616f57c1-8e48-4077-b626-7b2646c3d8bb", "sighting_of_ref": "indicator--f69d9197-4983-4f5d-9542-aaa852a0171d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce64715-826b-4bdb-b7c1-e452dc6fce08", "sighting_of_ref": "indicator--cc27ef49-c7fe-4779-be83-4e19c283f3d9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ddaabfb-0b40-4552-a2b8-f47e6fc2b77f", "sighting_of_ref": "indicator--0262db32-6c4a-4497-9b1f-7f3112b08670", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f080473-3e1e-44e8-bd79-088e4564b322", "sighting_of_ref": "indicator--f1512212-077f-4257-87ea-7e843ea5c7be", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0a45a6-52b1-410c-bd5b-f22ba7ca4b39", "sighting_of_ref": "indicator--faf89f80-4692-401a-a5f0-f84e33432321", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730b6013-2944-4206-a70c-46fd0d1878a1", "sighting_of_ref": "indicator--3202a287-c08f-475f-9adb-01376fcabcbe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597222d0-58db-4f16-9ab9-3d07a8e2b447", "sighting_of_ref": "indicator--7af0d0f9-8edf-4ea4-9308-84134ff272ac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f6f9ff-a2cf-4b7c-8a06-0d66409ede40", "sighting_of_ref": "indicator--7f5bd21a-8ced-487d-a6ae-25f5b69e0a3e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d46440-e510-4515-a001-50fcc47d0ef1", "sighting_of_ref": "indicator--9036ca00-9c40-435b-b29b-06453cc6beb5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a0ad91-0658-4fe1-b583-b2e93c54b2f4", "sighting_of_ref": "indicator--0a251502-0f02-4f81-9251-dec7f53c9f19", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb74c56-d079-46f3-8d5d-0d8947042dec", "sighting_of_ref": "indicator--452a58ec-8f54-42dc-89d4-7078f005d1dc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7f532a-8bb9-408f-a6eb-71013fd2897a", "sighting_of_ref": "indicator--4e6a4be9-913d-4dbb-9eea-799a586574d5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1087fd7f-e37c-45b9-b243-00c71e1c3ec1", "sighting_of_ref": "indicator--2f00c515-ac98-420f-aefe-1794ecb6da39", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ca9a4f-421b-4287-b183-e1b11b2947df", "sighting_of_ref": "indicator--b2fd7ec4-4800-4766-b343-c1ae2b5b4b41", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ca8a7d-2f5b-41a6-8bc9-9654d058e1cc", "sighting_of_ref": "indicator--6a9bb581-6276-4edc-997b-40c2dd4d55d1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45cf551a-7155-4ef7-8301-2415b0e9a79a", "sighting_of_ref": "indicator--6a9bb581-6276-4edc-997b-40c2dd4d55d1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d265add4-c418-4173-aa44-26b1abce320a", "sighting_of_ref": "indicator--13186bbb-9ecf-4298-8d75-9eda4f803754", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4bb2f22-4806-4743-ba47-68a0766a1686", "sighting_of_ref": "indicator--c713bcc5-6640-44c2-a645-c4e6f88cb213", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e35e93-5237-4776-93c4-520f6a755384", "sighting_of_ref": "indicator--c713bcc5-6640-44c2-a645-c4e6f88cb213", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feda4dad-54cf-4d0a-b43e-af01d1d4b85e", "sighting_of_ref": "indicator--7f47549e-3d83-46fd-a129-c7e95301d215", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d97627-b94a-4a10-8923-c00d50de2f50", "sighting_of_ref": "indicator--7f47549e-3d83-46fd-a129-c7e95301d215", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec90f034-3659-4757-a2fe-ee7a940c4991", "sighting_of_ref": "indicator--e925d2ef-cfb4-4864-ac76-ecae05578ac1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e7c5c9-5c02-4f8d-accb-80b1a304f40a", "sighting_of_ref": "indicator--e925d2ef-cfb4-4864-ac76-ecae05578ac1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ce5432-848c-4111-b97d-191f855e8c29", "sighting_of_ref": "indicator--f6d6b14b-07eb-4699-b515-5e8f4dc759b3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3fed17-1f8a-4d48-a482-0dd4304dc3be", "sighting_of_ref": "indicator--bfa897fb-2697-49a7-947f-62f5790d2114", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e4799a-2288-4ab7-b17a-0756096a3011", "sighting_of_ref": "indicator--ca2e1dc0-a282-4154-9a17-b3e90921a689", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d507aa-74d0-4d81-b6b5-105168508bca", "sighting_of_ref": "indicator--37d4da93-2157-4bac-a287-b5f01d72f748", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be14a6dc-edc4-4112-9104-4df3a366344d", "sighting_of_ref": "indicator--451fcc91-aebf-47fe-b306-a8ec184b7bf8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a1276f-712d-46df-9476-469210c52acc", "sighting_of_ref": "indicator--451fcc91-aebf-47fe-b306-a8ec184b7bf8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d055cdd7-32d5-4f5f-9ea8-1b26b8bc91fa", "sighting_of_ref": "indicator--b5c1531c-696a-4a7d-a0e9-22f79438ea31", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6316d8-48a7-4708-a6f7-b41d56c48bd6", "sighting_of_ref": "indicator--b5c1531c-696a-4a7d-a0e9-22f79438ea31", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab9a21c-33b1-4983-9efe-46eecfbdd8c4", "sighting_of_ref": "indicator--57e1cd9e-77cd-4e43-bc03-b357cd880834", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25dee454-cdb4-4602-8125-bbe3e5c030a9", "sighting_of_ref": "indicator--57e1cd9e-77cd-4e43-bc03-b357cd880834", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efddc5a-93dc-4c5d-8a9c-3076ec778ff2", "sighting_of_ref": "indicator--29b02683-6094-4804-8cc3-f481140dffaa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561b4615-e922-4cbc-9acb-953971f4108c", "sighting_of_ref": "indicator--a7a49212-9ad0-4439-8393-c57aea6feab8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9efc34c-551c-4a09-9e7b-7014d997b207", "sighting_of_ref": "indicator--225e33db-c7e3-4059-bbe6-07997393d842", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ec3169-f400-47e9-96ef-72ece0e176a0", "sighting_of_ref": "indicator--96133cdf-6ca3-4fc5-8036-0f06dcca3a73", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa76c27d-1c19-4e85-a5ed-764f8f5b73ab", "sighting_of_ref": "indicator--96133cdf-6ca3-4fc5-8036-0f06dcca3a73", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bfb359-5672-49f0-ae2a-1ca5822868d8", "sighting_of_ref": "indicator--a105ad58-68a7-4bf8-bfd4-2f00e2a2ee6d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a9f66c-b893-40ff-88ed-a4070b68394d", "sighting_of_ref": "indicator--a105ad58-68a7-4bf8-bfd4-2f00e2a2ee6d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c73dcce-0d01-4a29-9e90-24ccdc407344", "sighting_of_ref": "indicator--6a016c71-b9fb-4ed2-ba6e-af07b1f4bf1f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22076388-59ae-4bcf-87e0-bc7b18cb5ef2", "sighting_of_ref": "indicator--6a016c71-b9fb-4ed2-ba6e-af07b1f4bf1f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad4a82b-bf32-4e06-be7e-5a8b14865f74", "sighting_of_ref": "indicator--6a87c232-a137-4959-bccc-8df47b10a3c2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca800d2a-5062-4621-8199-d1a6ec94aee0", "sighting_of_ref": "indicator--28ee236b-c0c6-4eef-a8a5-28d3bf5611fe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be181dc8-c4cd-4571-9af8-567b47331d31", "sighting_of_ref": "indicator--2de081ec-9702-4d15-a767-107649119a54", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed90cf1-a1bf-4d6a-a2e2-d4d460649cc4", "sighting_of_ref": "indicator--8a1a4ddc-bbe1-4c13-92f8-22f5c7137066", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25c6f39-9187-4f7a-a429-1fabb045e9b6", "sighting_of_ref": "indicator--507cdb68-c1c2-4e11-bb25-32db7aeb066c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b67c20f-d0f1-477d-b98e-d8c3dab08ccd", "sighting_of_ref": "indicator--aaae8781-7e99-4283-a88b-e39084a5b5b0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af137d5c-f4fe-44e1-85c9-7512ceacea4e", "sighting_of_ref": "indicator--8d5281d6-efab-4cba-a622-4d9de7e63aeb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6c0d37-d9bf-46d5-9725-e4e46b6d8726", "sighting_of_ref": "indicator--bb2e66f7-0656-4542-b34c-c6b552cd26e2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022b3447-f1ca-46e6-b7ef-05c6271934ca", "sighting_of_ref": "indicator--1e6aece8-558b-43f8-a8ce-4054db759ae9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625368d2-7e6d-46e4-aa5c-616634c7e28e", "sighting_of_ref": "indicator--1e6aece8-558b-43f8-a8ce-4054db759ae9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14adcbc-0f47-4c3c-9813-a903d424da7d", "sighting_of_ref": "indicator--b371ac92-9d66-4a03-8ab6-c103771f7559", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53528f5-529e-4e34-b401-1427aac7312f", "sighting_of_ref": "indicator--619775c4-5163-494c-950c-a1fc6fbbc309", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efeda09d-1059-477f-8a4b-018e1b27b56b", "sighting_of_ref": "indicator--2dce2799-4a85-4ea1-972c-272987c070e7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcec3e5a-d57e-4ced-98b4-e0771eb76750", "sighting_of_ref": "indicator--2dce2799-4a85-4ea1-972c-272987c070e7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7adfd059-70a6-4f9b-be25-f9fe5dbf3a25", "sighting_of_ref": "indicator--df85fed5-269c-4d84-a8d8-6b5100c7dd93", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db35f167-bb9d-4bdb-8137-d5062986af81", "sighting_of_ref": "indicator--d6351fe5-9695-4ed1-be89-26019f93feb4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1ac22d-7c72-44a6-8fcc-60d6f752a10a", "sighting_of_ref": "indicator--4ef73b4c-c3cb-4c86-8a58-e8fecc9d9283", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468313db-3f20-4c38-b2f6-b20b02415d23", "sighting_of_ref": "indicator--bf0bbf51-0967-480b-914f-01cb2a825304", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544f84c0-be9d-416f-a99c-2a8d40aa3db0", "sighting_of_ref": "indicator--901561e5-9d73-4d2b-ac85-b24d03cc9cff", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb7bca9-c842-495a-a970-8442928fd5e2", "sighting_of_ref": "indicator--901561e5-9d73-4d2b-ac85-b24d03cc9cff", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b4e75f-aa17-43b5-831d-94a78819671c", "sighting_of_ref": "indicator--ab39ab9d-b29e-4f9f-8222-54d526e4030b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9520a0-1853-43c1-b951-7d58589bb0d4", "sighting_of_ref": "indicator--dec55a29-2913-4369-978d-70e76dbb1ab8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84138e9f-ce7b-484e-8806-52efc61e85ea", "sighting_of_ref": "indicator--dec55a29-2913-4369-978d-70e76dbb1ab8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79082618-98f9-490b-b9de-822442b68317", "sighting_of_ref": "indicator--f3a44862-18ea-4c1f-b92e-2fad303e105c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b91fa6-35cb-4466-8410-e9a955d1f063", "sighting_of_ref": "indicator--4e6ffddb-5d97-4661-8c73-451f3bc5043f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3994e03b-b10d-4823-a6a3-753398341580", "sighting_of_ref": "indicator--3a333353-6248-4a28-bde1-c7db180f26bd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a4a159-0596-4169-9de5-0ffc46b556f5", "sighting_of_ref": "indicator--5e196b60-9ede-43de-ae9c-a45f2de73f91", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf0876c-8a57-4cad-9449-a9c9e0a48edf", "sighting_of_ref": "indicator--b2dbb052-90b6-4ff5-9b86-fafeef82707a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d2fac8-9429-493e-a5d3-5aa8a21a518e", "sighting_of_ref": "indicator--4e960a20-5cef-43ff-9b0c-c5cfc53cce64", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f925b86-d7b8-4fa6-887e-2cda1fdcee4d", "sighting_of_ref": "indicator--fc6b068e-8fbf-42bb-95ed-cf81a113b257", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30600b0a-d846-4b23-b3dd-1fee80ef1a11", "sighting_of_ref": "indicator--a46d5ce6-f980-4a7d-9e7c-07edee9216ed", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b944b87a-7f4c-452c-830c-2ecbb2580522", "sighting_of_ref": "indicator--4fffe8bb-838b-4270-8928-5e67f9334c8c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81dca3e3-b963-4e6a-b2bc-35aac64a1669", "sighting_of_ref": "indicator--1fed886c-87dc-4911-9f39-efea77aa7e1f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ededb04-33b3-40fa-b485-c1ef15ab0249", "sighting_of_ref": "indicator--5713ea25-d083-417a-9713-98205ff044f4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03902538-d74b-41c9-be4a-053805bc0c82", "sighting_of_ref": "indicator--44831339-362d-4156-81bd-84f38d356dae", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10bacb3a-846e-4562-b83c-52b31226f4fc", "sighting_of_ref": "indicator--fa85a8ac-a5c2-4ee7-bbb2-4ef3a65fdf22", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8a1fba-1c06-40c0-8add-3c8915939738", "sighting_of_ref": "indicator--fa85a8ac-a5c2-4ee7-bbb2-4ef3a65fdf22", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d849520-b2d3-4db8-9182-cc0f0f9a8f35", "sighting_of_ref": "indicator--5c29ebc8-9ab9-4529-9457-392cfa39b14e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e861a4f7-bbcb-4840-a372-da96b2d949e9", "sighting_of_ref": "indicator--5c29ebc8-9ab9-4529-9457-392cfa39b14e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2218b94f-35df-4e25-9605-d23421835e1c", "sighting_of_ref": "indicator--5c29ebc8-9ab9-4529-9457-392cfa39b14e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362f05ca-1dc0-4d82-a4cc-6627089e5ce9", "sighting_of_ref": "indicator--9590c0fc-b561-4e76-863d-d878f7f63b7e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c8caa7-7077-4021-a746-eb3391e0d974", "sighting_of_ref": "indicator--9590c0fc-b561-4e76-863d-d878f7f63b7e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90bcd24c-136f-4b5d-bc31-b4e6d7dbccc6", "sighting_of_ref": "indicator--77f1925f-8fe9-4271-ab76-10f7d50538af", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410d7194-e49d-4662-880b-b922d4099920", "sighting_of_ref": "indicator--77f1925f-8fe9-4271-ab76-10f7d50538af", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e26e4d2-3bdd-4841-b73a-62e49803a760", "sighting_of_ref": "indicator--77f1925f-8fe9-4271-ab76-10f7d50538af", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160817e8-0d92-4975-93d3-9cd2e8368ae6", "sighting_of_ref": "indicator--80b0c97b-c49b-4976-8ee8-5c52424969c4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12694a3-35e0-450e-9914-e8c73f21a682", "sighting_of_ref": "indicator--80b0c97b-c49b-4976-8ee8-5c52424969c4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde245fd-37df-4cf5-a166-26c34bdf509d", "sighting_of_ref": "indicator--b7949b56-9c12-4f92-992e-c139f8a4bc03", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6427b33e-73ec-4b99-bb35-878cc42d749b", "sighting_of_ref": "indicator--b7949b56-9c12-4f92-992e-c139f8a4bc03", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52114f7-2955-4281-8dde-fcebf49c204a", "sighting_of_ref": "indicator--3ca18f0a-00bb-47fb-83ca-3a4dabad807c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9b2615-56e0-4acb-8ed5-79d6ac6c2d4a", "sighting_of_ref": "indicator--3ca18f0a-00bb-47fb-83ca-3a4dabad807c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78fb77c-83ae-4d5e-b7bd-7df3e0041eb6", "sighting_of_ref": "indicator--3ca18f0a-00bb-47fb-83ca-3a4dabad807c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57314606-e0f4-4797-876c-1b6fabc9ef3c", "sighting_of_ref": "indicator--1f3da45f-323c-432a-8998-b8bdb7486787", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4013ebc-355d-408e-a164-2a719507b5a5", "sighting_of_ref": "indicator--1f3da45f-323c-432a-8998-b8bdb7486787", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9551907e-d28b-44c3-8f03-96d90c837d07", "sighting_of_ref": "indicator--1f3da45f-323c-432a-8998-b8bdb7486787", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e458fc-2957-4720-a03b-eba3fc975188", "sighting_of_ref": "indicator--723ba3ae-fda3-44a4-89cc-2c230952d665", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4a2564-02da-4977-8fef-097f1e0acf54", "sighting_of_ref": "indicator--723ba3ae-fda3-44a4-89cc-2c230952d665", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343aef8f-dd66-42c5-ae8e-ac9659adda17", "sighting_of_ref": "indicator--27c5df78-61ec-4066-997a-1bf20b4c8219", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e88adb-b534-4925-8a9f-1f496f8c7a4d", "sighting_of_ref": "indicator--27c5df78-61ec-4066-997a-1bf20b4c8219", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8b35d5-9bb0-48f4-89b6-6b6ccf157a6d", "sighting_of_ref": "indicator--b35f6fc7-f403-42af-bb85-dc3d4b831141", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe0f0d3-d0b9-43fb-9e08-304c46c8c68f", "sighting_of_ref": "indicator--b35f6fc7-f403-42af-bb85-dc3d4b831141", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09faa981-14de-429e-b6e4-99c2955d234c", "sighting_of_ref": "indicator--b35f6fc7-f403-42af-bb85-dc3d4b831141", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a60e80e-02f1-46bb-a695-5491ec97f5b3", "sighting_of_ref": "indicator--158c04fe-fcd3-4983-9198-3748237e5f8c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8a00b8-1780-4077-967a-3f0f014e36af", "sighting_of_ref": "indicator--158c04fe-fcd3-4983-9198-3748237e5f8c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523fd6cd-1c20-4c10-aeb8-5aff5ff0443d", "sighting_of_ref": "indicator--158c04fe-fcd3-4983-9198-3748237e5f8c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5aaced8-c265-4d6a-a210-a4a1da71a5aa", "sighting_of_ref": "indicator--554dfac7-b517-4360-9195-72cc5fb20162", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c49bad0-262a-4e9f-ab60-73cb81e37318", "sighting_of_ref": "indicator--554dfac7-b517-4360-9195-72cc5fb20162", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278d5387-f7b6-402e-a10e-2bd664ff4d2f", "sighting_of_ref": "indicator--4b8685d4-bac7-4ab1-80b7-17217d161749", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a148a9-a8ec-4c61-a867-2253c4501ad5", "sighting_of_ref": "indicator--4b8685d4-bac7-4ab1-80b7-17217d161749", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6eb8847-2229-492a-b686-10206f3925cb", "sighting_of_ref": "indicator--552fc105-5da9-4370-8961-09122f815699", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5f622d-72b8-417d-8342-048449141574", "sighting_of_ref": "indicator--c3afb206-147a-4b3a-9a33-4c7ceceff25b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1826172a-f7b6-4c66-9189-59e3bb083995", "sighting_of_ref": "indicator--c3afb206-147a-4b3a-9a33-4c7ceceff25b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0667804-4e4a-4fed-b1e0-7b87002f5e89", "sighting_of_ref": "indicator--327e3bff-6f23-4651-ab81-70e515c9554a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413c2da9-af19-443a-9233-64d72668e710", "sighting_of_ref": "indicator--25bb7783-2a66-49e8-8cf9-4cf1754eba52", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4085f10b-1734-4d50-8f9c-0e23f2b4fd08", "sighting_of_ref": "indicator--07e71600-716a-4faf-8f79-8ada4bd0577d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca02e10-238e-447b-ac12-e6ba6f504bd6", "sighting_of_ref": "indicator--07e71600-716a-4faf-8f79-8ada4bd0577d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1745a3b-8bf5-4456-99c0-a03fe5931b30", "sighting_of_ref": "indicator--4dec4e71-ee15-44dc-8921-28a86e9070da", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d249df-2b3d-4e4a-a6f1-58cec6ef9b0e", "sighting_of_ref": "indicator--c6ea141a-090e-4d98-a125-69787bf342c8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb180dbc-4397-4c2e-a9bd-b6dd4efc19c4", "sighting_of_ref": "indicator--357784da-235c-46fb-80fc-fd004fec0725", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d9075d-c69d-406a-ab8b-9ed7bf26d6c8", "sighting_of_ref": "indicator--357784da-235c-46fb-80fc-fd004fec0725", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd688d79-e6b2-4088-ad64-31d5dd612b12", "sighting_of_ref": "indicator--418af6fc-a8c5-442d-9c83-9fec34cd9f65", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5905e1-5d14-4869-bd86-49913c1b277b", "sighting_of_ref": "indicator--831b51a4-3465-46ca-a973-1b4ffe262107", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304a2810-04ef-4f8e-8cfa-2b743906c14d", "sighting_of_ref": "indicator--1cc6e3a3-eca6-422f-9e2b-34e253398506", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6917debd-7aea-4964-888c-a65aca856a63", "sighting_of_ref": "indicator--1cc6e3a3-eca6-422f-9e2b-34e253398506", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30888a58-b893-4b0e-a69c-08514e8733e3", "sighting_of_ref": "indicator--1cc6e3a3-eca6-422f-9e2b-34e253398506", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6f5d65-14c9-460b-8bdb-98aa0dc6f1d9", "sighting_of_ref": "indicator--e3f9febb-63d6-4e75-b6b7-f2166884df45", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435fc8db-c42b-420f-8fb1-d488a3ffd254", "sighting_of_ref": "indicator--e3f9febb-63d6-4e75-b6b7-f2166884df45", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597579af-63f9-4506-9e6b-7419f1602306", "sighting_of_ref": "indicator--e3f9febb-63d6-4e75-b6b7-f2166884df45", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfb2871-79bd-4776-a567-79bea1eec4db", "sighting_of_ref": "indicator--4fccafb0-b0ef-4e7d-8a4a-1ce33b15ce63", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87df7c59-2a71-436c-970a-eb8fbd47a123", "sighting_of_ref": "indicator--4fccafb0-b0ef-4e7d-8a4a-1ce33b15ce63", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1cb9a1-a32f-48a7-9888-3697c64b5459", "sighting_of_ref": "indicator--cdabfb7b-4097-4241-80cd-277cbb890b3a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26705ae-4ee9-4a0e-bfef-d0ff005f5df5", "sighting_of_ref": "indicator--cdabfb7b-4097-4241-80cd-277cbb890b3a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611f829a-7624-4cf5-ac18-43c98b991876", "sighting_of_ref": "indicator--bc682a38-554d-41e9-8ae5-0b8abf1b5406", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8538d3-244b-4d2e-86bb-6923105ce6ae", "sighting_of_ref": "indicator--bc682a38-554d-41e9-8ae5-0b8abf1b5406", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e96dfbe-e7fd-48b3-8ca8-a8a17bbec8f2", "sighting_of_ref": "indicator--52df1f8a-2088-4773-bbd0-88ed2ba6ac85", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16dbdb1-f388-4a18-9bf5-3581bc1d6e9e", "sighting_of_ref": "indicator--52df1f8a-2088-4773-bbd0-88ed2ba6ac85", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843e9d12-95b8-4efe-9ed0-3729c4debf95", "sighting_of_ref": "indicator--34d1aea3-4f9a-4087-a97d-0a8d72c7ebd8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345f571b-dc0b-4458-90b8-eb7429300315", "sighting_of_ref": "indicator--34d1aea3-4f9a-4087-a97d-0a8d72c7ebd8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215fdfb8-0fe7-470b-9b9e-2bc6831770aa", "sighting_of_ref": "indicator--4e554ffa-6740-442d-aeea-ebddf6a1dbc8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2a9484-6523-4003-9f81-8d92391a3931", "sighting_of_ref": "indicator--4e554ffa-6740-442d-aeea-ebddf6a1dbc8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9162d4-2dc7-4746-97c9-897a1e360938", "sighting_of_ref": "indicator--eb5609b5-d575-4a03-b6b1-58a5fd09ec75", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7780cd1-36f2-46c6-b727-f83de3201678", "sighting_of_ref": "indicator--eb5609b5-d575-4a03-b6b1-58a5fd09ec75", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212b494f-f526-49df-8822-786e39956762", "sighting_of_ref": "indicator--eb5609b5-d575-4a03-b6b1-58a5fd09ec75", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df26787-b946-4872-b882-c5bc664877ad", "sighting_of_ref": "indicator--1784816e-97b9-40da-94cc-2ec187764876", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b2799b-c949-469f-a51e-53f1ec5aabe8", "sighting_of_ref": "indicator--1784816e-97b9-40da-94cc-2ec187764876", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1645fe70-d994-4ea0-acbe-a3a118bfbead", "sighting_of_ref": "indicator--1784816e-97b9-40da-94cc-2ec187764876", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f93d312-6492-40b3-b461-1b1404039471", "sighting_of_ref": "indicator--6dd23092-b871-4c93-b2d1-042eb3e77f2e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2031e286-588a-4b24-b3cf-c3387d813177", "sighting_of_ref": "indicator--6dd23092-b871-4c93-b2d1-042eb3e77f2e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f27314-2fba-40e4-8986-b1d96bc75179", "sighting_of_ref": "indicator--6dd23092-b871-4c93-b2d1-042eb3e77f2e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de224466-5535-4289-aaf9-3a20e65b0dc6", "sighting_of_ref": "indicator--834f7272-6423-465e-85ac-64fc17c13c5a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5f13dd-899d-495c-99e9-abe6097f914f", "sighting_of_ref": "indicator--834f7272-6423-465e-85ac-64fc17c13c5a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03afdc7-ed8e-458c-812f-ab98df12631f", "sighting_of_ref": "indicator--834f7272-6423-465e-85ac-64fc17c13c5a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7cfcb9-8979-45bc-bdb6-258595798b25", "sighting_of_ref": "indicator--5cccc5b9-3007-439a-992a-e664cbeb43df", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e20e8c0-9e36-45ce-a7b0-7eb959164ff8", "sighting_of_ref": "indicator--5cccc5b9-3007-439a-992a-e664cbeb43df", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83112ca1-b883-4e0f-80ee-f9ab93224508", "sighting_of_ref": "indicator--83f3bf9d-8353-4ac8-b531-cf18c88ec722", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b3c3b3-37e6-4825-812c-c9cce8c7c802", "sighting_of_ref": "indicator--83f3bf9d-8353-4ac8-b531-cf18c88ec722", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b3f17c-a2c7-4bfd-8c4d-f8289f5ac8b2", "sighting_of_ref": "indicator--83f3bf9d-8353-4ac8-b531-cf18c88ec722", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e206c559-6442-477d-9b5f-2f621a22aff6", "sighting_of_ref": "indicator--1ae50dbf-7a8a-4ade-8465-d8c83d558a03", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee24da5-132e-4dde-a524-2aa6846e8f34", "sighting_of_ref": "indicator--1ae50dbf-7a8a-4ade-8465-d8c83d558a03", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9baa8e7-fc4d-4148-9de2-f34f08b188eb", "sighting_of_ref": "indicator--ac207c19-dfec-4298-919f-bd0c7f73a8ed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24eb298b-23fe-4be1-9178-fef86ab5489d", "sighting_of_ref": "indicator--ac207c19-dfec-4298-919f-bd0c7f73a8ed", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e3f38c-255e-41c2-8ef5-a443dfd40cc9", "sighting_of_ref": "indicator--ac207c19-dfec-4298-919f-bd0c7f73a8ed", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3d9e3b-791e-4739-aef2-915c53a530d8", "sighting_of_ref": "indicator--6e08ed96-70aa-4525-b02e-094510e859f1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2ff0f5-b80e-4352-8112-3ff37fa3f471", "sighting_of_ref": "indicator--6e08ed96-70aa-4525-b02e-094510e859f1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748ceed6-cc19-4899-8e91-0ad08daa5f86", "sighting_of_ref": "indicator--6e08ed96-70aa-4525-b02e-094510e859f1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d91977d-fd32-4c54-bc1a-df6addd592bb", "sighting_of_ref": "indicator--b19afc4c-1f42-4c13-bd44-44872e1de94f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeac901b-5a8c-4e2e-a9c2-cbe2cfa69d95", "sighting_of_ref": "indicator--b19afc4c-1f42-4c13-bd44-44872e1de94f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e0dfcf-673d-41d1-9ed3-564853d38635", "sighting_of_ref": "indicator--b19afc4c-1f42-4c13-bd44-44872e1de94f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71c20fa-1623-4690-baff-9487699a9bd5", "sighting_of_ref": "indicator--21d66c4e-b802-4cc4-bc94-dfaf5c6cee8e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2015e013-27ba-4266-a422-2046bf417ef1", "sighting_of_ref": "indicator--141a4131-5861-4ff8-8709-c30844b04334", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3573bf-07ca-4cc0-9609-30d219133bbc", "sighting_of_ref": "indicator--439afabe-8f10-4990-aeff-3b85746ec2f3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984c83cb-09ee-43c2-a4a5-3d0f5af5076f", "sighting_of_ref": "indicator--636579cf-8c05-423a-8a3d-19df447b422e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389792de-94e1-4bee-b262-d7a333971b78", "sighting_of_ref": "indicator--7a701989-229d-4f42-9176-324d85d4a4d7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7a950b-4ba7-460a-8213-f8abe85b9dd7", "sighting_of_ref": "indicator--cdc18104-0b46-49f0-b080-0ae7a100e1c9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7381b677-0e5f-4a8b-9545-38f127401acb", "sighting_of_ref": "indicator--401be65e-9de7-4d14-983e-282ab9b88ba9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9db6fc3-c625-4d86-83e1-8f64c864ca3f", "sighting_of_ref": "indicator--401be65e-9de7-4d14-983e-282ab9b88ba9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558a854a-9055-4202-8334-afe99e2f3c82", "sighting_of_ref": "indicator--4af1b9d0-9c83-48b8-a55c-509085d29474", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56351d83-70b0-4cfc-a9ba-fac35013577e", "sighting_of_ref": "indicator--639acf5f-3ce3-4268-a89b-9a63685c544f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9e7ed9-4a5d-498e-a1f4-fa9cc410a9c8", "sighting_of_ref": "indicator--6e4dda4c-5913-415e-82e9-0e2b54b0fe57", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff3738e-b254-4624-89e4-11ca32b595c3", "sighting_of_ref": "indicator--ec7847cf-95d7-456c-ae32-60ccecc70c41", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c47860-2984-453b-9064-37575b548989", "sighting_of_ref": "indicator--60817ec3-8325-4a25-9532-c043caae42c3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859eebd0-b7b7-4f51-8de1-3c9e296315a3", "sighting_of_ref": "indicator--60817ec3-8325-4a25-9532-c043caae42c3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0073053a-c23a-4e46-bd11-8085a2ac0567", "sighting_of_ref": "indicator--f08acce8-2cc8-46a9-8535-9707482fbd50", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e87473-5ef3-487c-b179-6d6672d6a8d1", "sighting_of_ref": "indicator--f08acce8-2cc8-46a9-8535-9707482fbd50", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4935d0c-fe2f-43bb-9086-de180e6bec78", "sighting_of_ref": "indicator--f08acce8-2cc8-46a9-8535-9707482fbd50", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac45d73-f5ee-4a11-b6a6-c3082d995ebf", "sighting_of_ref": "indicator--0b588ca2-18a9-4dea-b9ce-cc3801165a95", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4a0b10-4358-47ce-aacd-06d08836bb94", "sighting_of_ref": "indicator--0b588ca2-18a9-4dea-b9ce-cc3801165a95", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec55199-10af-4dae-b3ca-baaed2016d1e", "sighting_of_ref": "indicator--0b588ca2-18a9-4dea-b9ce-cc3801165a95", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd757e4-817b-4acc-a6a4-5b82797f29ee", "sighting_of_ref": "indicator--0d062810-bd63-4dcd-bab7-7219b115f29b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93c535d-78b8-4f61-b0b8-4eaec8404087", "sighting_of_ref": "indicator--0d062810-bd63-4dcd-bab7-7219b115f29b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ae77cc-ccd3-408f-adb5-e3d89cea5686", "sighting_of_ref": "indicator--4e0bd4f2-d82c-4097-b696-38d4db92c704", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a74571-54de-4893-91ed-c69816d233eb", "sighting_of_ref": "indicator--4e0bd4f2-d82c-4097-b696-38d4db92c704", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe45f9a7-c980-40f8-8c0c-537759e127be", "sighting_of_ref": "indicator--562a06c1-ea29-4fbe-b8e8-95ce35e49f76", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257db7ee-d3e3-475c-9061-eb0cb2859f16", "sighting_of_ref": "indicator--562a06c1-ea29-4fbe-b8e8-95ce35e49f76", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccdd6874-44b0-4201-b853-727b15137d02", "sighting_of_ref": "indicator--562a06c1-ea29-4fbe-b8e8-95ce35e49f76", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91095cc-eab2-49a7-b2d0-4831d984de7d", "sighting_of_ref": "indicator--f28b11bb-d0da-4092-a13f-8db0107683d6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77716e01-0c75-4eb7-acaf-8d758eb5395a", "sighting_of_ref": "indicator--d8324391-5936-4b4d-bbd7-783931a56f8e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9d62f2-0536-4c67-9c7f-00114e9f38b7", "sighting_of_ref": "indicator--d8324391-5936-4b4d-bbd7-783931a56f8e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e058dc93-00d6-4b6c-accb-7561eb6dec14", "sighting_of_ref": "indicator--d8324391-5936-4b4d-bbd7-783931a56f8e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b573d5-aafe-47dc-b7a3-d25c7b9d90a6", "sighting_of_ref": "indicator--c35486b0-2da8-4170-b361-311b85a69f18", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0928b63-a9b5-431a-85db-a61b764693ac", "sighting_of_ref": "indicator--c35486b0-2da8-4170-b361-311b85a69f18", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7326fc6-4209-429f-826b-9791ec1f241f", "sighting_of_ref": "indicator--c35486b0-2da8-4170-b361-311b85a69f18", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab9e15a-9626-404d-8714-89b57f606824", "sighting_of_ref": "indicator--fd1150c5-d2a1-4797-9b3c-8c4c123d5455", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10eb278e-0c98-4799-b08f-104aa3b8f44d", "sighting_of_ref": "indicator--fd1150c5-d2a1-4797-9b3c-8c4c123d5455", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d023d8-b125-4342-9dc4-4a5b5c54d427", "sighting_of_ref": "indicator--44e9c408-434d-4822-a99b-7db98f3dbac3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36b3953-1dc3-4791-9f62-b5a38de07a43", "sighting_of_ref": "indicator--44e9c408-434d-4822-a99b-7db98f3dbac3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdab2c93-075f-4fcc-92c9-f67166a84054", "sighting_of_ref": "indicator--4cbb2e1b-f773-482a-9fc0-7afa12ceff01", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1bcee3-3780-45ee-9dae-61c6a158de2f", "sighting_of_ref": "indicator--4cbb2e1b-f773-482a-9fc0-7afa12ceff01", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cddd2dc-ed7f-48ea-8dfd-196bf2914fa8", "sighting_of_ref": "indicator--4ffeed17-7235-4c40-800f-a7993c911c32", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0518b12-f17b-42dd-9fdf-cc1b9c02ce46", "sighting_of_ref": "indicator--4ffeed17-7235-4c40-800f-a7993c911c32", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8428169d-aca5-449c-a8f3-ea05e61d0e02", "sighting_of_ref": "indicator--9a53e92e-f8ad-412c-9347-f36e20cfc85f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09792a49-6119-4bda-ad9b-b578eb492fc9", "sighting_of_ref": "indicator--1f7c5d83-68ce-4a2e-8a2f-dfd97c82326b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e99771-b07b-4348-9788-5d2a285bfc32", "sighting_of_ref": "indicator--1f7c5d83-68ce-4a2e-8a2f-dfd97c82326b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045b7871-93c7-45ca-b819-3eec7f9b2e6f", "sighting_of_ref": "indicator--1f7c5d83-68ce-4a2e-8a2f-dfd97c82326b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1985a0f4-edf4-4a7b-b9e6-b52cb5d1d6fb", "sighting_of_ref": "indicator--fc76a95d-aa24-4910-9ad4-e61308e4e0e4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aebfca5a-b5f2-4210-b838-199e977bc6d6", "sighting_of_ref": "indicator--b21ff258-4fe3-4dd8-9405-282844197d88", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6829c12c-a11b-4fee-a640-f585ec1c0976", "sighting_of_ref": "indicator--5ae3422b-e929-4782-9563-ea298d9b7ba3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7622806-7320-4407-ab11-56b1449b2378", "sighting_of_ref": "indicator--5f58a8e6-7b21-4925-95b4-e8b85f2f23df", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5577098-15ea-4c2d-8c49-f529e7ffbbe0", "sighting_of_ref": "indicator--f1590996-879d-4927-a23d-8c1ed7b931d5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa19475-7934-43d0-9fed-646c3d0c217c", "sighting_of_ref": "indicator--7e06466d-46bc-40cb-83ef-84c2f71f6e60", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a974f0-5482-4dd1-9249-07a84216f1ae", "sighting_of_ref": "indicator--d422754b-6999-44b1-ab29-16581c37187f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763c4b2e-c1df-4d31-baa8-6a127d468eb2", "sighting_of_ref": "indicator--d422754b-6999-44b1-ab29-16581c37187f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba97bd70-d1a5-4182-89e6-eebf36375001", "sighting_of_ref": "indicator--d422754b-6999-44b1-ab29-16581c37187f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef2225b-f5a3-40ba-bb5a-466ffabf1c1f", "sighting_of_ref": "indicator--ab955978-73b9-47d8-866f-0ddf48ef8d91", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5761ce60-d608-4efe-a173-a0f1f3c0bf47", "sighting_of_ref": "indicator--ab955978-73b9-47d8-866f-0ddf48ef8d91", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7eebf95-9ef3-4350-b513-1eda67aea86e", "sighting_of_ref": "indicator--3ae64442-d847-4b0d-933b-67779e1032c9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7555c5b8-a130-446e-8d40-a7d0416c2fae", "sighting_of_ref": "indicator--3ae64442-d847-4b0d-933b-67779e1032c9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e0ca47-5910-4bf0-8ac2-3a7f6479624d", "sighting_of_ref": "indicator--3ae64442-d847-4b0d-933b-67779e1032c9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0d37d3-91d0-49eb-85b5-6a427145b7bb", "sighting_of_ref": "indicator--ea80d944-bdde-49e8-ab74-7f6b955a79ec", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f37c2f-e7cc-4192-9171-8fcd14192db6", "sighting_of_ref": "indicator--ea80d944-bdde-49e8-ab74-7f6b955a79ec", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb01858-fa18-4139-b60b-5634cd9485fe", "sighting_of_ref": "indicator--ea80d944-bdde-49e8-ab74-7f6b955a79ec", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e992550-a719-4598-8bd3-b0f6f0532cd5", "sighting_of_ref": "indicator--aeb00e32-79c1-441e-a2da-5f71cb39f613", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8937cdc5-509c-4c7d-8147-e1712d772e29", "sighting_of_ref": "indicator--aeb00e32-79c1-441e-a2da-5f71cb39f613", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9a65e9-91a1-4acf-b152-5cf72d87da3c", "sighting_of_ref": "indicator--aeb00e32-79c1-441e-a2da-5f71cb39f613", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92969086-2fa8-4508-89ba-85b224dd89ca", "sighting_of_ref": "indicator--2d865491-a8b6-4e59-8245-5880b62cc93e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dddd76d-81a7-4d28-a65c-a93ce7c68642", "sighting_of_ref": "indicator--2d865491-a8b6-4e59-8245-5880b62cc93e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc22b6e0-05e7-4801-8e09-9652e77257fe", "sighting_of_ref": "indicator--795df341-e311-47de-a02c-8799dc573aae", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d61d2d-df28-4667-8346-49c0241e3a68", "sighting_of_ref": "indicator--795df341-e311-47de-a02c-8799dc573aae", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c9fdec-5ab2-46cf-9af3-e2f4c17be92a", "sighting_of_ref": "indicator--795df341-e311-47de-a02c-8799dc573aae", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c2a7c0-3323-4962-9e8c-31e62769d78d", "sighting_of_ref": "indicator--fb3bc314-e406-43a5-80cd-435fc8763d3a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6bd508-0806-47be-94cd-fc8cfc0239ad", "sighting_of_ref": "indicator--fb3bc314-e406-43a5-80cd-435fc8763d3a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97aac2be-f5a0-4a1c-9a6b-240695b244b1", "sighting_of_ref": "indicator--fb3bc314-e406-43a5-80cd-435fc8763d3a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6baad786-9fb1-4dd5-8b1c-cca676bf04b1", "sighting_of_ref": "indicator--f77ed0c6-b349-4887-8d25-83a540650b08", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34f91a2-ab8f-42d9-b372-bd9a81588998", "sighting_of_ref": "indicator--f77ed0c6-b349-4887-8d25-83a540650b08", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e85cad-b963-4a93-a651-ce68c76d8e3e", "sighting_of_ref": "indicator--44b11ff6-0d52-4cd2-894e-c6eff5e4fcb0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b32019b-aba7-4fa2-aa4e-fee1a5700196", "sighting_of_ref": "indicator--44b11ff6-0d52-4cd2-894e-c6eff5e4fcb0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619bfd65-47d3-42ef-95ba-9b5de079dfde", "sighting_of_ref": "indicator--44b11ff6-0d52-4cd2-894e-c6eff5e4fcb0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a976f6-49c2-40ff-8e5e-96e8ac963fe8", "sighting_of_ref": "indicator--8b2698bb-7a65-48b9-a475-e7365579253b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36c4e1d-0ccd-4c2a-9005-da86c119b18b", "sighting_of_ref": "indicator--8b2698bb-7a65-48b9-a475-e7365579253b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36afdf8-6781-4f8b-80ee-361aad678250", "sighting_of_ref": "indicator--abffa1ec-2673-487d-930b-1d3891eb381e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25299289-f156-4178-9927-8ade3821d8e5", "sighting_of_ref": "indicator--abffa1ec-2673-487d-930b-1d3891eb381e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b32374-fadb-4cf4-bd65-3a85d5379c7a", "sighting_of_ref": "indicator--af2ab847-4e56-4342-b6c3-1aab92bf6de1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65674410-05cb-4c47-91dc-2abe38f6ed58", "sighting_of_ref": "indicator--af2ab847-4e56-4342-b6c3-1aab92bf6de1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6191757-ae66-4e7d-b217-8cd19e788a22", "sighting_of_ref": "indicator--3d11bcd8-5c48-48b5-9fe7-4afc535266aa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2d79b1-2455-4dee-a85f-2d6b9f267759", "sighting_of_ref": "indicator--3d11bcd8-5c48-48b5-9fe7-4afc535266aa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854e997e-112e-4f55-8190-8aed8009d098", "sighting_of_ref": "indicator--3d11bcd8-5c48-48b5-9fe7-4afc535266aa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933a5f04-fcdd-4208-a5b6-6bf7f0011d97", "sighting_of_ref": "indicator--a21f70a6-0779-4bfc-b574-59fdfed03528", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3ad4a7-33c6-49d3-860d-ce408dfade82", "sighting_of_ref": "indicator--a21f70a6-0779-4bfc-b574-59fdfed03528", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba2342b-97d7-4b93-a26e-da4cb53666f7", "sighting_of_ref": "indicator--a21f70a6-0779-4bfc-b574-59fdfed03528", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2afb60f-7607-4b10-9307-94a680f61821", "sighting_of_ref": "indicator--9c4363e4-a4ef-4e1b-9498-60c2ab7fafe6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7fbeb50-896d-4ce4-a1be-189dfae5f323", "sighting_of_ref": "indicator--9c4363e4-a4ef-4e1b-9498-60c2ab7fafe6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28af6bf-c933-4251-94cf-37511b583ebe", "sighting_of_ref": "indicator--9c4363e4-a4ef-4e1b-9498-60c2ab7fafe6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5578ea5b-4927-4170-b8ef-efe545288de8", "sighting_of_ref": "indicator--44137b49-6a08-45fa-a8b2-07b4f8854f7e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e9c583d-d775-4440-a56a-e6c4b44b8eed", "sighting_of_ref": "indicator--bd53bdf2-d278-42f3-a422-f3f2a5133ee4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725155f1-9794-4bc4-8a52-730fe9fb09ac", "sighting_of_ref": "indicator--6a11b472-ebbe-4045-95f4-1ede98893ef0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af76e17f-98fe-4cf6-a1ad-d5f6987c67df", "sighting_of_ref": "indicator--3319a34c-c577-4665-ada0-bc4d099c15bc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a78976a-8032-40b9-ac06-da378d8c0ed2", "sighting_of_ref": "indicator--307c2b84-0511-4f16-9f3a-3df00d91e850", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0897169e-5814-4e36-8a34-176114b7c5ab", "sighting_of_ref": "indicator--b201915c-a17d-4c6c-b3c7-96d766025a1d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad6771c-85c3-4075-99de-a4bec20eb635", "sighting_of_ref": "indicator--9edf7e9b-bad8-4aba-a87d-ee98f11fedfd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7eda2c-b486-466f-867c-dbda3e50d6e3", "sighting_of_ref": "indicator--e1303a5c-7779-460b-961a-a0bc0e14954b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9d7562-38ac-4276-8f53-0ab7b228830a", "sighting_of_ref": "indicator--b0d26555-b51d-4575-afbe-816a4f3a93af", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438bbc80-03cc-4fb6-9db4-ae893d9ba76b", "sighting_of_ref": "indicator--cf07c610-1813-4a84-8a48-4993545f5876", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490ea50f-d90a-48be-90a4-46672d45281d", "sighting_of_ref": "indicator--af1343ca-c2c2-493e-8095-2bbf4dc228ee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b258739e-2a7a-4df7-a9ce-d7d42fa9e3e0", "sighting_of_ref": "indicator--27b61206-f0ba-45b2-9020-820803e74a20", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29cbd28-7779-4152-a6d7-c6fc2dfcf792", "sighting_of_ref": "indicator--876fd807-7602-4171-b848-26539f7184f3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc5c94a-5f90-4c53-83a3-60a3ef6e49c8", "sighting_of_ref": "indicator--876fd807-7602-4171-b848-26539f7184f3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec2c91f-f356-4146-9cd7-90657401d478", "sighting_of_ref": "indicator--876fd807-7602-4171-b848-26539f7184f3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16dfb53-8ea5-4c2a-8a3d-12283fa28409", "sighting_of_ref": "indicator--7aed1e45-a96b-46eb-aee0-d56ed9772e00", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae92a0d4-6e2b-4502-ae0e-23e082897b39", "sighting_of_ref": "indicator--a0f4fc1d-8554-4978-98ba-9d3bd829be30", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd70f7b-1982-4394-ba11-b432f37ee26f", "sighting_of_ref": "indicator--a0f4fc1d-8554-4978-98ba-9d3bd829be30", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e401088-0b33-4286-9183-02cc4e064737", "sighting_of_ref": "indicator--a0f4fc1d-8554-4978-98ba-9d3bd829be30", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8233c430-2a0b-4588-97a3-152d389a137b", "sighting_of_ref": "indicator--77cf2756-e955-46f7-9b21-9e36a98d3f51", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9b3b15-8f6e-4a80-888f-44e671e3c55d", "sighting_of_ref": "indicator--77cf2756-e955-46f7-9b21-9e36a98d3f51", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da34592-21aa-46c7-b467-554cbe4e1356", "sighting_of_ref": "indicator--ea73f2c7-e645-4419-af6f-c09f42d9e37c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25bc2542-820c-4556-b443-17a4ad305a05", "sighting_of_ref": "indicator--ea73f2c7-e645-4419-af6f-c09f42d9e37c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf53c001-255a-4992-b3d0-4331e0da778b", "sighting_of_ref": "indicator--ea73f2c7-e645-4419-af6f-c09f42d9e37c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b678cf26-c6b1-4e8a-a330-c6171390a9db", "sighting_of_ref": "indicator--d59ce0b4-6bc0-4150-b82a-6d2ab10c9d60", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda84e4c-ec20-406a-a3b5-24920122f085", "sighting_of_ref": "indicator--d59ce0b4-6bc0-4150-b82a-6d2ab10c9d60", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d111cbec-c61b-4f58-a47c-f53d474a02af", "sighting_of_ref": "indicator--d59ce0b4-6bc0-4150-b82a-6d2ab10c9d60", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a969eb3-7ac5-4c4a-bb99-4abb9093ebd3", "sighting_of_ref": "indicator--57fda8d8-064a-4646-8788-564253556763", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c180d0-3428-46c4-bed8-04342134213c", "sighting_of_ref": "indicator--57fda8d8-064a-4646-8788-564253556763", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a90f20-ea27-4d5e-bca1-d5eaf2983232", "sighting_of_ref": "indicator--36fda804-4f5e-4b6e-946f-2984c87961ff", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7f0741-1c83-4b93-9665-4fe45fb1ec01", "sighting_of_ref": "indicator--36fda804-4f5e-4b6e-946f-2984c87961ff", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9caa0304-5569-44ae-9bb2-a121ba102990", "sighting_of_ref": "indicator--f5eab432-a936-446d-9ac8-51998ebad86b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b761853-f488-4d6a-b62c-f849ca2ee14d", "sighting_of_ref": "indicator--94a12460-ca9d-4378-897b-fe5da782a9a3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6990195c-e573-415b-b31a-e4507e5f6174", "sighting_of_ref": "indicator--94a12460-ca9d-4378-897b-fe5da782a9a3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0cc3aa-44c0-41e1-8b84-07f597a5afb5", "sighting_of_ref": "indicator--94a12460-ca9d-4378-897b-fe5da782a9a3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87fa5b72-b579-4419-9113-0d493189c0fe", "sighting_of_ref": "indicator--faa07815-af07-4f4f-b3d6-4251e2e26d5e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88c373d-056f-4dee-99a6-13ad3fe1be41", "sighting_of_ref": "indicator--00490f0f-9ecf-4106-8cf0-7791e8b80dee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d744161-6a96-4287-a97f-daf4f2920655", "sighting_of_ref": "indicator--00490f0f-9ecf-4106-8cf0-7791e8b80dee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85ef78f-d1c7-4760-8205-f6c56307f226", "sighting_of_ref": "indicator--b2470027-e897-4dac-bff2-8dd79f35a9f0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af62e767-8ecb-4feb-a1fc-b607ff322707", "sighting_of_ref": "indicator--b2470027-e897-4dac-bff2-8dd79f35a9f0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89bd64e7-968c-4ed4-a990-36fd286b359c", "sighting_of_ref": "indicator--b2470027-e897-4dac-bff2-8dd79f35a9f0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d26cda-2a4e-44ba-907a-a6207be2e4d0", "sighting_of_ref": "indicator--5dc8622f-59d8-4000-af51-7aca1b4cbe97", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857e6df9-d7a3-41f1-a99c-cf2d89e72f8d", "sighting_of_ref": "indicator--332d3fd0-b791-4fa3-a5b2-71fa90e13355", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41b697b-eb94-4378-b26d-f2edaa13bd8e", "sighting_of_ref": "indicator--332d3fd0-b791-4fa3-a5b2-71fa90e13355", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0249c411-a7a9-4fc3-b2a3-a0a527297017", "sighting_of_ref": "indicator--5d8e8ccd-bc54-4e1f-9624-cf48e180cd12", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd5596d-901f-4b64-9e39-1f9ca25adc14", "sighting_of_ref": "indicator--5d8e8ccd-bc54-4e1f-9624-cf48e180cd12", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b50c105-488f-4394-92a6-bebbd9946931", "sighting_of_ref": "indicator--308453fc-7824-4170-9ef9-a24e6967734b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f5bbbb8-5154-4db3-bf71-cbd5c1617aae", "sighting_of_ref": "indicator--308453fc-7824-4170-9ef9-a24e6967734b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c6a45f-308f-473a-8d5d-d9fc0578ed1e", "sighting_of_ref": "indicator--2d7e4881-c39b-4d19-9dcb-cd70b07519d8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c189d80-00df-45be-95aa-91d6a65a3ff3", "sighting_of_ref": "indicator--2d7e4881-c39b-4d19-9dcb-cd70b07519d8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b91bd3-8ebe-465d-9a3e-ad549d7f4e5d", "sighting_of_ref": "indicator--2d7e4881-c39b-4d19-9dcb-cd70b07519d8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7d65bd-52b3-4559-a3b3-f023aacc6b3c", "sighting_of_ref": "indicator--961145cf-c43a-4337-99c8-1280a7f7eddd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf188ba-ec15-4237-aa87-cf2b5b4ad446", "sighting_of_ref": "indicator--961145cf-c43a-4337-99c8-1280a7f7eddd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc936cb-eed4-4385-835b-c350b2c870fc", "sighting_of_ref": "indicator--8550996a-51b0-4caf-81bf-29fc501c47df", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d790cd9-4d2e-4518-8ae2-75a3e782b816", "sighting_of_ref": "indicator--8550996a-51b0-4caf-81bf-29fc501c47df", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542e18ec-3b30-49b1-ac98-c4c88de2d81f", "sighting_of_ref": "indicator--5f74e91d-199e-4ba8-8a16-a09d96a1ccc9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9174bb-29b5-4190-a657-518b29850102", "sighting_of_ref": "indicator--5f74e91d-199e-4ba8-8a16-a09d96a1ccc9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94be6900-7938-4ef8-940a-2ebd6f3a53f3", "sighting_of_ref": "indicator--5f74e91d-199e-4ba8-8a16-a09d96a1ccc9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45a4b47-26bb-41a9-92e9-f742bb6d7652", "sighting_of_ref": "indicator--e5dd8617-7dc9-43af-a696-31d59411a1dc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6bf411d-88b2-4003-8ee9-76b34a1a870e", "sighting_of_ref": "indicator--e5dd8617-7dc9-43af-a696-31d59411a1dc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ce4ec6-3b5f-4e4e-900f-c9412490342c", "sighting_of_ref": "indicator--52ddec77-c3fc-4176-8835-22c2f0330512", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e71235-0cd6-4c95-b36e-cabef3a2739e", "sighting_of_ref": "indicator--52ddec77-c3fc-4176-8835-22c2f0330512", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3830c42-4f51-4cda-9622-17997acdd8cf", "sighting_of_ref": "indicator--77e401b2-568d-495e-a0c5-262a4610da4c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5ed803-856e-4f1b-9f6b-f6bfa40cc221", "sighting_of_ref": "indicator--9b6bcfc2-c914-4b5a-bfda-d922f64ca3a5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a5505b-0a89-4130-bbbb-9ad7bfa95930", "sighting_of_ref": "indicator--9b6bcfc2-c914-4b5a-bfda-d922f64ca3a5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3616dc9-499e-46ed-9e8a-17cb5b9a935a", "sighting_of_ref": "indicator--9b6bcfc2-c914-4b5a-bfda-d922f64ca3a5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a081153f-a69f-4f1a-a883-b265b3c7a930", "sighting_of_ref": "indicator--722e85a1-317a-4504-8ab1-9f0d8ed483fb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3ad898-e0e1-4ddd-803a-ce7b7740b22b", "sighting_of_ref": "indicator--722e85a1-317a-4504-8ab1-9f0d8ed483fb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202f0bc0-1a84-44f2-992d-abb0de44a0f7", "sighting_of_ref": "indicator--722e85a1-317a-4504-8ab1-9f0d8ed483fb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba82f20-24bb-4cc5-8e34-26808e6ece87", "sighting_of_ref": "indicator--f6cb72bc-bafb-403f-9cf4-029d85ed9a68", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c5b875-c695-4a4a-8b37-c77c91d8e64b", "sighting_of_ref": "indicator--f6cb72bc-bafb-403f-9cf4-029d85ed9a68", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78765694-33fb-4389-a908-46f69dbd3607", "sighting_of_ref": "indicator--f6cb72bc-bafb-403f-9cf4-029d85ed9a68", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27721115-e6bd-4239-845b-62eb98a88d66", "sighting_of_ref": "indicator--555100cd-4214-4027-8bc9-596d6ce09506", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2075ee5b-8860-4822-8e5c-2dbbea29a5c6", "sighting_of_ref": "indicator--4f9d2ed8-c100-4938-8fe5-acf136e89eb2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a7961c-23d1-4b90-a2d2-177e93b76e8e", "sighting_of_ref": "indicator--4f9d2ed8-c100-4938-8fe5-acf136e89eb2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1813c5d9-c7e5-4b9d-9118-974edfd91bff", "sighting_of_ref": "indicator--46011484-eaf5-4626-804d-6a22d6a99d7c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d814433-cc23-44a9-a027-29fa700b3ad9", "sighting_of_ref": "indicator--46011484-eaf5-4626-804d-6a22d6a99d7c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58368789-d7f4-42a6-a6e6-8253d0b31fc3", "sighting_of_ref": "indicator--51bf08ba-d65a-4474-98f5-0b6ca06c3b64", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ef715f-a888-4094-b273-6af72fbcf1e8", "sighting_of_ref": "indicator--51bf08ba-d65a-4474-98f5-0b6ca06c3b64", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd6dd65-1a86-45c3-a11f-749a014c014f", "sighting_of_ref": "indicator--51bf08ba-d65a-4474-98f5-0b6ca06c3b64", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc2657b-0c15-4dd2-b6ce-387c9f1989f4", "sighting_of_ref": "indicator--edb22eb8-db47-42c3-9e68-7c901507b987", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef20ce97-5504-40ee-8626-0d3baf45cae0", "sighting_of_ref": "indicator--edb22eb8-db47-42c3-9e68-7c901507b987", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e593465-c887-4909-afbb-0bc107ae56ca", "sighting_of_ref": "indicator--edb22eb8-db47-42c3-9e68-7c901507b987", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1c13ec-ae62-445a-96ac-ea3a6dfc5465", "sighting_of_ref": "indicator--4dc0673f-01a6-45e2-b529-7980bdc5acd9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3888e81f-2750-43ec-852c-596ed4c07064", "sighting_of_ref": "indicator--4dc0673f-01a6-45e2-b529-7980bdc5acd9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45834bc9-3359-4a29-ade8-8a19fb24958b", "sighting_of_ref": "indicator--4f7766fa-b94c-4f80-851b-ed961709a446", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35945079-a172-43fe-bdd9-46239bf901bc", "sighting_of_ref": "indicator--4f7766fa-b94c-4f80-851b-ed961709a446", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e288239-6a9e-45e2-8056-3211496c9d66", "sighting_of_ref": "indicator--4f7766fa-b94c-4f80-851b-ed961709a446", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3efd35-c242-4086-a629-0fe29fddfe9f", "sighting_of_ref": "indicator--86c79084-5e64-4f65-82b3-c5cdfc09b9c8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4193b3-3063-4f6b-ace6-2878afa2a9e0", "sighting_of_ref": "indicator--86c79084-5e64-4f65-82b3-c5cdfc09b9c8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da41465-569c-4acb-b2da-d6dc7e95f336", "sighting_of_ref": "indicator--86c79084-5e64-4f65-82b3-c5cdfc09b9c8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c749b50-d735-467d-9a7f-c0d67365e6f8", "sighting_of_ref": "indicator--1cf76d75-9f66-4aa0-9c69-d1b8b5a6f85a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688334bf-b690-494f-b8d5-17da7f816a15", "sighting_of_ref": "indicator--1cf76d75-9f66-4aa0-9c69-d1b8b5a6f85a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3ec5b8-2672-4ad6-8494-374c57273810", "sighting_of_ref": "indicator--1cf76d75-9f66-4aa0-9c69-d1b8b5a6f85a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216c6fa9-3a15-4511-8447-0e7d302b059b", "sighting_of_ref": "indicator--27706906-a793-4aa2-ac42-b722862642f8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ee25ef-4fad-4470-9bfb-7c5a122580e2", "sighting_of_ref": "indicator--27706906-a793-4aa2-ac42-b722862642f8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400a9021-8749-4d08-ba1b-cb7b4fca5d2c", "sighting_of_ref": "indicator--27706906-a793-4aa2-ac42-b722862642f8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb38f2c-a996-45d9-8c4c-330f19cc7588", "sighting_of_ref": "indicator--463ece90-66c8-4a53-88eb-3c4c0b72ce3c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d80a54c-2d74-436f-b4eb-76a99a1538d0", "sighting_of_ref": "indicator--463ece90-66c8-4a53-88eb-3c4c0b72ce3c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6875e141-9fc5-442b-8da1-0a777c66cee5", "sighting_of_ref": "indicator--b174e756-3c64-47d0-a651-8ec9ba464efa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5597bc17-f3c4-47ea-ac9e-f7754b6d2c83", "sighting_of_ref": "indicator--b174e756-3c64-47d0-a651-8ec9ba464efa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02286259-c955-4605-b3d1-58222661e024", "sighting_of_ref": "indicator--b174e756-3c64-47d0-a651-8ec9ba464efa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93714959-3e8e-4271-8128-40da5c6c807e", "sighting_of_ref": "indicator--02c19438-000a-4afd-8d7d-9245f1029f75", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c116d0-3eb0-4d40-b69a-f9a80011ea5e", "sighting_of_ref": "indicator--02c19438-000a-4afd-8d7d-9245f1029f75", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846a6a06-1c4f-4660-b0cf-12b4fd0cce66", "sighting_of_ref": "indicator--02c19438-000a-4afd-8d7d-9245f1029f75", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50ddc9c-c903-429a-b5ac-30386440960e", "sighting_of_ref": "indicator--e657953f-4c54-4763-8a7f-d3158ef512d4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25c423e-7b5c-4a3a-9e8b-5877ddf5d0e1", "sighting_of_ref": "indicator--e657953f-4c54-4763-8a7f-d3158ef512d4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298a9ade-3791-4021-b8a3-7f460606ca22", "sighting_of_ref": "indicator--e657953f-4c54-4763-8a7f-d3158ef512d4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e885eab-2a88-4522-aecd-76361b42e142", "sighting_of_ref": "indicator--82289259-0974-46ce-ae04-ab8d44bb1fd1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ea0e77-011b-464c-902e-96c02e7af5a4", "sighting_of_ref": "indicator--82289259-0974-46ce-ae04-ab8d44bb1fd1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3949ec1a-10e2-49a8-84d1-8aa81994f3b9", "sighting_of_ref": "indicator--82289259-0974-46ce-ae04-ab8d44bb1fd1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c293f87-ca36-4432-adfe-cde89da5167b", "sighting_of_ref": "indicator--b0605802-39f2-45a6-b1aa-53e21f664720", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb47fa0e-79e1-45d7-842d-1753fca80ed0", "sighting_of_ref": "indicator--b0605802-39f2-45a6-b1aa-53e21f664720", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c169fe8-0098-4bc5-a9eb-98f621404595", "sighting_of_ref": "indicator--730d9855-b275-46df-866c-40d847c3a263", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934b2ce7-00cd-46f2-a817-b89d2ee36a42", "sighting_of_ref": "indicator--730d9855-b275-46df-866c-40d847c3a263", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb959e27-712e-4d39-a4b2-e2a0b045d26b", "sighting_of_ref": "indicator--730d9855-b275-46df-866c-40d847c3a263", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d20df8f-7628-42f8-ada5-20d5cabab4f6", "sighting_of_ref": "indicator--71e44cbe-c8b1-4a93-946f-c84e984a4f4d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6eebb0-0cd9-4470-8b5f-eb8cc954d442", "sighting_of_ref": "indicator--71e44cbe-c8b1-4a93-946f-c84e984a4f4d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6cfbd5e-8bfe-4bc7-b5ca-b939f071631b", "sighting_of_ref": "indicator--ab007fb3-fb9f-4cd7-a224-d361e3a588fd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57835f29-0c4d-4bbc-8b6c-e4189cd6293e", "sighting_of_ref": "indicator--ab007fb3-fb9f-4cd7-a224-d361e3a588fd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde7d947-eca1-4394-b43a-52846c1b3d78", "sighting_of_ref": "indicator--ab007fb3-fb9f-4cd7-a224-d361e3a588fd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466a20c2-7c23-4776-be1f-2056155a96c5", "sighting_of_ref": "indicator--cd2594b8-30bc-4dc9-b947-bb5e759f83f4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a629499a-a137-40b7-906a-2913b4e0eefb", "sighting_of_ref": "indicator--cd2594b8-30bc-4dc9-b947-bb5e759f83f4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f012cc56-f104-440d-9a48-4944c9a61a30", "sighting_of_ref": "indicator--cd2594b8-30bc-4dc9-b947-bb5e759f83f4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a451e2a-3761-4a35-9fa5-e0407cd64feb", "sighting_of_ref": "indicator--44c1c295-b076-4685-ba21-f61d39f615ca", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e405bee-32d9-47e4-929f-df2a68cdbf02", "sighting_of_ref": "indicator--44c1c295-b076-4685-ba21-f61d39f615ca", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ff33fb-e6de-462d-a1b8-bd0cb92ea715", "sighting_of_ref": "indicator--b16d849e-244c-4c40-8400-b66b040929ce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa418c2-4b8f-49d2-abb1-686d936c698e", "sighting_of_ref": "indicator--24a012a1-6508-4f68-b837-1a2f8874569a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9b52a4-78ca-493f-8ce0-e55f61e7bdd7", "sighting_of_ref": "indicator--70240720-ec1e-4bcd-aaba-b01f2a7b58d5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b04743-192f-40a9-9a82-78e4766e051a", "sighting_of_ref": "indicator--4ff3036e-3605-4753-9091-1e16b1719147", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1dbc86-df01-44c2-89bb-215fce2ebbd7", "sighting_of_ref": "indicator--fdb95079-c795-4d27-829f-b29a241f4364", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b6a330-df68-4d1b-9322-047c815a5d92", "sighting_of_ref": "indicator--4e1be646-7d0e-43f6-bcaf-49ffa8a34b6c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048fac53-49f9-4ad6-a44c-82f13cb7ab91", "sighting_of_ref": "indicator--4e1be646-7d0e-43f6-bcaf-49ffa8a34b6c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550bb717-e61c-4a6c-9603-46a9f7e32e79", "sighting_of_ref": "indicator--32d17e10-956e-4b9d-aa16-886b9a67df91", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b393428-dbaa-44f0-a010-1ac1caf7ea11", "sighting_of_ref": "indicator--99a04c38-48e4-43b9-887f-de63ec4d438e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929c2156-4dc2-48d6-a11b-8027347f9b5d", "sighting_of_ref": "indicator--cfa2a958-c556-4af6-95ac-9b8d43de29ed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8cd268b-a325-427f-ad0e-d96beba3c26d", "sighting_of_ref": "indicator--76408d80-24ab-48df-b938-1f65dd325096", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff856dac-fcde-4fab-aec3-842d4a91433f", "sighting_of_ref": "indicator--19222be0-f81a-445e-8adb-2063729517cc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a065fff5-61b1-4913-a2ad-1fa1013fa7df", "sighting_of_ref": "indicator--19222be0-f81a-445e-8adb-2063729517cc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5579cd5-b727-4500-a6eb-9d1b50132ecb", "sighting_of_ref": "indicator--19222be0-f81a-445e-8adb-2063729517cc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77cc2a1-24fc-4c51-9f96-7bac0fcc5c9e", "sighting_of_ref": "indicator--4a405784-8e38-4cc1-bca2-8d266e2e95a6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad84eaf9-2687-41e2-ad4c-c342f314d158", "sighting_of_ref": "indicator--4a405784-8e38-4cc1-bca2-8d266e2e95a6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc63a05-d06a-40fd-86bd-c53e6e4b636e", "sighting_of_ref": "indicator--6df7bdf7-75b2-44e1-bbc8-0464b396b5cb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf878203-c70b-495f-b7ca-e9733931598c", "sighting_of_ref": "indicator--2403f39f-15fd-4248-bc30-05627c1606fb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7097475d-26d7-4ed9-8c95-5722146af068", "sighting_of_ref": "indicator--2403f39f-15fd-4248-bc30-05627c1606fb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899179e6-f74e-4324-952e-dde9da8ce477", "sighting_of_ref": "indicator--855b75bd-d88d-4127-83b8-a8dc203b2660", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0f6ba7-9d9a-4adf-be52-84b1c6f1602d", "sighting_of_ref": "indicator--855b75bd-d88d-4127-83b8-a8dc203b2660", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0fcba29-8bf7-4638-aed7-f54affa40119", "sighting_of_ref": "indicator--855b75bd-d88d-4127-83b8-a8dc203b2660", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a09d18-a19f-43e7-962c-2cc6bb862b4c", "sighting_of_ref": "indicator--228f39f9-b926-4a35-b3be-3aaf29ed37ba", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35fb029-b7b9-4412-b769-58bbce3231ad", "sighting_of_ref": "indicator--228f39f9-b926-4a35-b3be-3aaf29ed37ba", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7a464e-800d-4696-a0c3-2f41caa4edce", "sighting_of_ref": "indicator--228f39f9-b926-4a35-b3be-3aaf29ed37ba", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b7359a-465f-494f-9f71-c5b41bc584f5", "sighting_of_ref": "indicator--847b0fe9-11d6-42f7-8d2d-3edf0da4aee1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0190e0c-99c0-46cf-83f8-823ce5d598ba", "sighting_of_ref": "indicator--847b0fe9-11d6-42f7-8d2d-3edf0da4aee1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394fdd92-45e4-4122-ab9f-8886b650ab50", "sighting_of_ref": "indicator--847b0fe9-11d6-42f7-8d2d-3edf0da4aee1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9756cb-c455-41f2-815c-56d7697a31cb", "sighting_of_ref": "indicator--b48b50fa-5f92-4377-874e-4f411ec724d9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a200e597-b766-401d-b982-3ed9bb96c5fd", "sighting_of_ref": "indicator--b48b50fa-5f92-4377-874e-4f411ec724d9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed398c94-5409-4972-bc47-e2229ec34bda", "sighting_of_ref": "indicator--f1204b5c-62d2-42a6-a544-481f4b77f5ef", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd925f1f-ceba-4b3d-8622-84c1c2070f39", "sighting_of_ref": "indicator--f1204b5c-62d2-42a6-a544-481f4b77f5ef", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b0ce0b-15db-47ab-a36f-506d06fe83ca", "sighting_of_ref": "indicator--afd475ac-9053-4df7-872a-e5d0d87430dc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6d79b7-332d-4b57-8d3f-bfd729895f25", "sighting_of_ref": "indicator--afd475ac-9053-4df7-872a-e5d0d87430dc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b40dfb5-3ced-405a-8827-7bbc172701d3", "sighting_of_ref": "indicator--afd475ac-9053-4df7-872a-e5d0d87430dc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a40710-5915-4efc-9292-d471b97565cf", "sighting_of_ref": "indicator--ada9916c-00e4-443c-8adf-a67e5d00dee5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81bdd73e-2c52-4a5a-ace6-3bad9e2d7789", "sighting_of_ref": "indicator--ada9916c-00e4-443c-8adf-a67e5d00dee5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa1d064-f2af-4b79-85ba-0efd76d7d4be", "sighting_of_ref": "indicator--4d1d665f-74f7-4408-9481-15245de01ed7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cccc5ce-13c1-4ecb-9d82-62358d17a869", "sighting_of_ref": "indicator--4d1d665f-74f7-4408-9481-15245de01ed7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678914f4-58e8-4ff4-a443-e11ed1e2d218", "sighting_of_ref": "indicator--4d1d665f-74f7-4408-9481-15245de01ed7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce3e767-bbf9-4fbc-bd50-08a72f2c472c", "sighting_of_ref": "indicator--52f24000-f036-49a2-ac6b-19dccd065bd6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabe4997-bf10-4972-b344-32355ef4a316", "sighting_of_ref": "indicator--52f24000-f036-49a2-ac6b-19dccd065bd6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b1ee17-ca32-4365-852a-73a46d2ef54c", "sighting_of_ref": "indicator--a46caf15-52e8-4e33-becd-804af07f27ee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9108b805-3914-4ccb-b796-9f568c3509ab", "sighting_of_ref": "indicator--a46caf15-52e8-4e33-becd-804af07f27ee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6216a29-86d0-4691-aae2-236751a5cb95", "sighting_of_ref": "indicator--a46caf15-52e8-4e33-becd-804af07f27ee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3077ee46-aa18-4132-acc6-112d6e83deb5", "sighting_of_ref": "indicator--5c1a2bfe-8b02-4a53-b76a-b2f2e06e71e6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edffdb99-f6eb-40d2-84b2-a67c860161ec", "sighting_of_ref": "indicator--5c1a2bfe-8b02-4a53-b76a-b2f2e06e71e6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44f8187-e5fb-45f4-bde2-8d4d70639216", "sighting_of_ref": "indicator--5c1a2bfe-8b02-4a53-b76a-b2f2e06e71e6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37625663-07b5-4be0-afcb-d1baa68e5dbe", "sighting_of_ref": "indicator--127713d5-78f7-4b4d-a42c-f0610fd21b05", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406a5043-b26a-4a42-8fcb-89148283980c", "sighting_of_ref": "indicator--127713d5-78f7-4b4d-a42c-f0610fd21b05", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6d0dbd-0d0f-466f-b76d-6bca345fbde8", "sighting_of_ref": "indicator--127713d5-78f7-4b4d-a42c-f0610fd21b05", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c486bf5f-e8cc-4e42-9a04-295d53ad4e80", "sighting_of_ref": "indicator--74fd7ece-d556-42d1-88a1-adde0b433bce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bcb6caf-737b-44dd-bc8b-c57ccb777242", "sighting_of_ref": "indicator--74fd7ece-d556-42d1-88a1-adde0b433bce", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cab89f1-5261-4471-bf24-e885ba4cfb5a", "sighting_of_ref": "indicator--74fd7ece-d556-42d1-88a1-adde0b433bce", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ab1de9-cf04-4aed-ab70-14bbb6116521", "sighting_of_ref": "indicator--1634f657-9172-4339-88e9-c1fccf31207f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f749dd16-738b-46ee-adee-764591c4b67f", "sighting_of_ref": "indicator--1634f657-9172-4339-88e9-c1fccf31207f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b42308-285e-4528-82db-9d4191ef639b", "sighting_of_ref": "indicator--1634f657-9172-4339-88e9-c1fccf31207f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1dd1c54-bba9-4768-a71f-f4c8b7b25c46", "sighting_of_ref": "indicator--7716db2f-3d26-4c1f-ab83-37c49f5cf37e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2597986-9d5c-4a1b-9ca5-c242458370fa", "sighting_of_ref": "indicator--228de839-b1a2-473c-a44d-761516059788", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50974dab-c39f-4741-9316-ba3b661fe5cc", "sighting_of_ref": "indicator--ffb4e33c-8678-4623-aaec-89446e049245", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b812d8-019d-42f1-a2ed-efd3566f0e59", "sighting_of_ref": "indicator--260e9f3d-14c1-4733-b9d8-b79b92ef4e63", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3041127f-2bcb-48d3-ad12-6748fe597c83", "sighting_of_ref": "indicator--bf81e9e3-6976-46d5-945e-529ca9800349", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb918cf-7a0c-4531-bfa9-4eba4e5cb49f", "sighting_of_ref": "indicator--bf81e9e3-6976-46d5-945e-529ca9800349", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95318c24-11f6-4774-8281-1f077b6cb7e0", "sighting_of_ref": "indicator--72206261-406c-4197-825f-d38e77cec9ec", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe76e68-cdee-49d4-b671-bede33e1b5fb", "sighting_of_ref": "indicator--7db19a9f-5110-443d-b9da-9eff1a6ffd54", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b8856c-2c34-42c6-8c3e-a0fe82ce3a93", "sighting_of_ref": "indicator--c6b70baf-f68f-4bce-8489-f3926d701092", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6557b3-1914-40c8-a2ba-7d8cadabc536", "sighting_of_ref": "indicator--bd02f5cc-0795-421c-a86e-72a743fe20b0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7463103-1817-44eb-8532-618e6dc4a5fd", "sighting_of_ref": "indicator--0215e52c-d9c3-4174-a62f-f3f6b26fbb88", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf5ce6b-4500-4fa9-a58e-09356f26b5c7", "sighting_of_ref": "indicator--1d485bac-f13b-4e04-b5ad-fa5a1c9b1ace", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6861b09-86f4-4fba-82c5-e91f4b5f8351", "sighting_of_ref": "indicator--0681236a-4aa8-4777-aacd-fd1ecb035b0a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b226c7a3-9380-4ff3-b0c8-64a809c3a881", "sighting_of_ref": "indicator--0681236a-4aa8-4777-aacd-fd1ecb035b0a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3110e6d-0d42-418d-8b51-ec4d59677340", "sighting_of_ref": "indicator--e3a0432d-8691-4237-bf05-3c1d8cc3b51a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258e9b07-3325-4335-9dfd-cec4823c1de9", "sighting_of_ref": "indicator--e3a0432d-8691-4237-bf05-3c1d8cc3b51a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38e1455-c068-4b1b-b7d4-3afb4e421058", "sighting_of_ref": "indicator--fe957d87-6a8b-4651-ba49-1936bdcdb56c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f742fbcb-0816-42db-b677-7cea43882e0e", "sighting_of_ref": "indicator--bbdd7266-f60b-4a7a-acab-0196aaab5681", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919d8ea5-6904-4ea7-b53d-feccc2817fd1", "sighting_of_ref": "indicator--bbdd7266-f60b-4a7a-acab-0196aaab5681", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844a6997-8a86-4a08-810f-34691ce0f3a4", "sighting_of_ref": "indicator--bbdd7266-f60b-4a7a-acab-0196aaab5681", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c08a9e7-e85c-4a72-b117-69ea2c609e61", "sighting_of_ref": "indicator--77c2cd52-612b-49dd-a790-d39e394eaa10", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0da3b1-95f4-418c-b655-b72ed362c937", "sighting_of_ref": "indicator--77c2cd52-612b-49dd-a790-d39e394eaa10", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc05aa0-e7ca-4565-a5d5-86b4f5a0ab5f", "sighting_of_ref": "indicator--27388e24-02a3-453c-a31a-f18f7be7f7f2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e70428-550e-4dee-b2b6-1492cdbe6333", "sighting_of_ref": "indicator--f391a810-ee03-405d-9a86-168f1f1ceced", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc82d638-9764-402f-b4ff-27923ec032fa", "sighting_of_ref": "indicator--f391a810-ee03-405d-9a86-168f1f1ceced", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64bee8e-738f-463f-97ee-7b3d834eede8", "sighting_of_ref": "indicator--f391a810-ee03-405d-9a86-168f1f1ceced", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218e8f0b-4a1f-479d-84f3-7306db25f64b", "sighting_of_ref": "indicator--97af9eb3-3b6f-4555-b5f6-94fdf1bbf768", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812cba11-b37a-461f-a981-027b160017c3", "sighting_of_ref": "indicator--97af9eb3-3b6f-4555-b5f6-94fdf1bbf768", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb266b90-3823-4c09-b8b8-1620a381e94e", "sighting_of_ref": "indicator--ff9970ea-9b80-4799-b9b3-9db1da3a00b5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c65c55-79e1-4810-a890-dbae5db41abd", "sighting_of_ref": "indicator--ff9970ea-9b80-4799-b9b3-9db1da3a00b5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61fe5b8d-4d1f-4a6d-a08f-ae19043b2759", "sighting_of_ref": "indicator--ffcd2334-9391-4dda-b7d1-3e5b40893083", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b137519-7b3b-4097-a581-32d8b302bf25", "sighting_of_ref": "indicator--a5b6362b-fa75-4a10-a351-da76e275cc54", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb87ddf9-356e-4890-9cd2-aeffbdbfa536", "sighting_of_ref": "indicator--a5b6362b-fa75-4a10-a351-da76e275cc54", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3b3635-defa-4127-aefb-e08f989f15cb", "sighting_of_ref": "indicator--1b480e4c-a456-4718-85f1-b9f86a528c3f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121d878e-2e2b-46a8-9c32-2ad8614ff6cf", "sighting_of_ref": "indicator--1b480e4c-a456-4718-85f1-b9f86a528c3f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8c0555-22a3-42fd-b25c-70b570bd6d04", "sighting_of_ref": "indicator--1b480e4c-a456-4718-85f1-b9f86a528c3f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0571bd-e63e-4439-bb8e-2794deacbaaa", "sighting_of_ref": "indicator--2745f158-e19e-4ae2-a3ca-309ebb5a1c48", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a84ddf-f8ad-4b38-ac3e-04558b9e424e", "sighting_of_ref": "indicator--3704da1a-f9c4-4ff3-917c-54afcbe93af9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953eed31-fc97-4d05-b673-eb9fe537265c", "sighting_of_ref": "indicator--3704da1a-f9c4-4ff3-917c-54afcbe93af9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35dd8c33-6ad1-460c-9619-83f4b217c103", "sighting_of_ref": "indicator--3704da1a-f9c4-4ff3-917c-54afcbe93af9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba5a859-3966-4342-8678-923337ed1688", "sighting_of_ref": "indicator--cadce5f7-d1d8-4d92-b938-f75b1583c436", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84f3ee9-bb2a-4409-ac68-21dd497104ad", "sighting_of_ref": "indicator--cadce5f7-d1d8-4d92-b938-f75b1583c436", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71627f00-b39b-4f8e-b2d3-f79ebc908c79", "sighting_of_ref": "indicator--cadce5f7-d1d8-4d92-b938-f75b1583c436", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b132877-b087-4ed5-b1d5-be1796c664f4", "sighting_of_ref": "indicator--103727e2-a6e4-4c6d-b072-69d36f9715da", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d3a5a2-d290-4470-8b1e-6758dc1480aa", "sighting_of_ref": "indicator--103727e2-a6e4-4c6d-b072-69d36f9715da", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa34eebe-5dca-4e6f-b49b-e855851e3ce1", "sighting_of_ref": "indicator--86244009-b787-4d66-b04c-de11b7806cd0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937c3cbe-c751-4dbd-9e9f-cfef4cec915c", "sighting_of_ref": "indicator--86244009-b787-4d66-b04c-de11b7806cd0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbecb78e-c17a-465f-a4bb-77f3fbfd50b2", "sighting_of_ref": "indicator--9ed117e8-1de7-4998-9df0-934126f7a6ec", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05dc5a8-d00a-4a26-836f-a15923ea9c48", "sighting_of_ref": "indicator--9ed117e8-1de7-4998-9df0-934126f7a6ec", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b2c0ac-2ddc-412e-b453-22c5e473aa35", "sighting_of_ref": "indicator--9ed117e8-1de7-4998-9df0-934126f7a6ec", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fac659-447c-40f3-9aa2-c4c27ce5036a", "sighting_of_ref": "indicator--35af8cc2-5a2f-4215-8c52-2d5d554cc229", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df46c6d-871a-4127-bc8a-6278d284d837", "sighting_of_ref": "indicator--35af8cc2-5a2f-4215-8c52-2d5d554cc229", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66753fac-97ac-4023-b78d-cc7c29569731", "sighting_of_ref": "indicator--35af8cc2-5a2f-4215-8c52-2d5d554cc229", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34107b78-2fee-432d-a1a5-ed03a3230230", "sighting_of_ref": "indicator--22837f7f-4745-4877-8244-4b30561a1e2b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a49d5c-4e98-4dd5-83f9-d57d7a27eca9", "sighting_of_ref": "indicator--22837f7f-4745-4877-8244-4b30561a1e2b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621623a7-867b-46ba-ae29-299439109a3b", "sighting_of_ref": "indicator--d06a87d9-133d-4491-8804-65cde98ecefe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eddb42d-4276-4436-bcde-25736324e27a", "sighting_of_ref": "indicator--8dba1770-453b-47db-ac90-d7fe45c910e0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c05618c-56a4-46a7-946d-5ba38c84e6c8", "sighting_of_ref": "indicator--7489c8c5-eccf-4c58-a067-7a7dc2eb90e9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2841fe-e94a-4797-b0fa-b1539ea0b151", "sighting_of_ref": "indicator--7489c8c5-eccf-4c58-a067-7a7dc2eb90e9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8f4d8d-7887-4854-83a7-427a46a10e8d", "sighting_of_ref": "indicator--de9a0632-eb29-4a3a-a39e-fe425d92155a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c208e98b-f94c-4ae4-badb-493125516cf2", "sighting_of_ref": "indicator--62f86e8c-bfcb-4f9e-a019-5cfb89bcdc0b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af1008e-5fcc-4b8f-b5fc-18936ca7491a", "sighting_of_ref": "indicator--49ce34c8-c12f-4510-acbf-a4e48a67a1e2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7851e1-e511-4046-b3d0-8afb5b9f5174", "sighting_of_ref": "indicator--5ee9b333-e91a-41f6-a273-363188354336", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0749f2-06ff-43d8-9d18-e731dd699843", "sighting_of_ref": "indicator--8543e982-299e-4935-b999-0b25495b5dac", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49df6cf-8f1d-49e7-94fa-d15d1197f273", "sighting_of_ref": "indicator--d03bf6f6-620f-4372-9f1d-bb5233209d12", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b9a56b-fd74-46a2-ae7c-346878f7ecd4", "sighting_of_ref": "indicator--608d4a06-bc74-4d29-ac8b-78648259f2e4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422c72ee-1beb-4f59-91a2-7b2767a3d038", "sighting_of_ref": "indicator--84cf5a96-30a6-44ca-a99c-29fb2138482e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6bddd8-bd47-4e8d-8095-d7efb00ac1d4", "sighting_of_ref": "indicator--84cf5a96-30a6-44ca-a99c-29fb2138482e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88833278-5d30-40d3-929e-d3e95bfcf297", "sighting_of_ref": "indicator--84cf5a96-30a6-44ca-a99c-29fb2138482e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36801de1-ea11-4132-b015-7f2024e93c62", "sighting_of_ref": "indicator--c8ead7ea-307c-4f51-aa32-9c5061e6b07a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab10dba-fa23-4114-b0b0-b96c27d6ec39", "sighting_of_ref": "indicator--c8ead7ea-307c-4f51-aa32-9c5061e6b07a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73910062-8d80-4d09-baf7-d5c939bc416d", "sighting_of_ref": "indicator--aac00d1b-c3b0-418a-9f86-dd6168cd8a10", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0029effd-101b-4de9-b7ea-504d45ab9e28", "sighting_of_ref": "indicator--2c4c36e7-6d69-411a-bb62-de678fdc392c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8d1122-081f-4cef-9096-1c8627c69bfd", "sighting_of_ref": "indicator--2c4c36e7-6d69-411a-bb62-de678fdc392c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54cfed6-bee5-46e3-8c46-2850f883692d", "sighting_of_ref": "indicator--2c4c36e7-6d69-411a-bb62-de678fdc392c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127db58e-d7c2-442d-9c85-2a022c83afe6", "sighting_of_ref": "indicator--e2ba712d-f237-4e89-9d2e-c9e1c37fee04", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8c36ab-cac0-4584-abbb-2b5fb3bc1b2f", "sighting_of_ref": "indicator--e2ba712d-f237-4e89-9d2e-c9e1c37fee04", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470cdb21-75dd-441a-9610-cc35ae431ed3", "sighting_of_ref": "indicator--67bb2ca0-b76b-4ea6-8989-d3e2af99fd0c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b31502-3998-4d4f-bb1b-1c0ad09fb4cd", "sighting_of_ref": "indicator--1d59ab65-127b-471f-a433-f30573f6e886", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d480f626-b41a-45af-a44e-f5e7696f0432", "sighting_of_ref": "indicator--a4ad5611-df52-47ba-a722-63ef5b9f25a4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c22411-adf1-48cd-a07c-10a0d24e79ab", "sighting_of_ref": "indicator--a4ad5611-df52-47ba-a722-63ef5b9f25a4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a52d802-63de-4033-93fb-f81bd66f7362", "sighting_of_ref": "indicator--246198b2-f60e-46e2-b68b-52ead9caf459", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a42860-b7f3-4ee1-b58e-cc48b1410d67", "sighting_of_ref": "indicator--0ad33860-f3d9-435f-9bc5-59ccbbda5085", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20562d76-0956-4524-91da-c4e6e12e5bbf", "sighting_of_ref": "indicator--2f7bd415-3d59-4333-baa3-633cb2e6a26a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adefeecc-ed98-4a0e-9440-85ba7f7085ec", "sighting_of_ref": "indicator--ba1d78ee-98ff-427e-8403-5b02fa6cde62", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9eb0d4e-63aa-43b8-9a92-212c058d991e", "sighting_of_ref": "indicator--49c20b43-2ae7-4f65-aa71-86417d027ff4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc86ea5-c2ee-4470-99ca-9f51fad968ba", "sighting_of_ref": "indicator--885d4419-20c4-4ed4-981a-e674cc558304", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b8f4f5-2d76-4719-8424-025ae7ec8949", "sighting_of_ref": "indicator--885d4419-20c4-4ed4-981a-e674cc558304", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f166aa2d-3763-4a5b-b778-ae5b8964384a", "sighting_of_ref": "indicator--885d4419-20c4-4ed4-981a-e674cc558304", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8e08ed-d66d-4dc6-9752-72dd031fe75a", "sighting_of_ref": "indicator--ae4723c2-496d-4936-9a35-7c85783ced43", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248f7085-4cff-4f3c-a60d-f4b0e8622986", "sighting_of_ref": "indicator--ae4723c2-496d-4936-9a35-7c85783ced43", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fd860b-4fe1-422f-81ad-0ca60d087af9", "sighting_of_ref": "indicator--ae4723c2-496d-4936-9a35-7c85783ced43", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da06135-37c1-4cfb-aea0-b89da049bfe2", "sighting_of_ref": "indicator--99022465-326c-47b1-bd30-3d14050aef33", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8ed572-1bd8-4660-b25b-bff9198ab9a2", "sighting_of_ref": "indicator--7e7c034a-652c-4308-9627-e6817977300e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926c0c53-3e08-487b-9eaf-549e80ec9e08", "sighting_of_ref": "indicator--38a6a791-7086-47d3-962c-7f3a8bcef4f7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f475318d-0f09-427f-b90a-2d91aff4dc0c", "sighting_of_ref": "indicator--38a6a791-7086-47d3-962c-7f3a8bcef4f7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa0ab6e-90e3-4586-a663-924101c87d4a", "sighting_of_ref": "indicator--fafa23b7-4bd6-4ef3-9f6e-15c120bc6630", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fdf8d5a-56de-4932-ab6c-27b220128b41", "sighting_of_ref": "indicator--71c93094-63ef-4c93-b85e-0730868b0c49", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38159bf0-043f-417f-bc21-c42d7dfbf3a6", "sighting_of_ref": "indicator--71c93094-63ef-4c93-b85e-0730868b0c49", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acda09c-fd3c-4696-9b8b-9469d5ebef35", "sighting_of_ref": "indicator--b15b8084-ba9a-4278-af74-199c46b1e3ef", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab1a894-c0d8-439b-815f-fd8381bf3770", "sighting_of_ref": "indicator--19319173-c9bb-4037-bcdc-5d9f24a43f5a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da913f88-1c0c-4ab8-82ce-ea461c36035f", "sighting_of_ref": "indicator--06198bb0-fa93-42a6-89ea-48f02dd1b025", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1ea4f4-6abc-4ef1-90e4-1f96a2af042d", "sighting_of_ref": "indicator--e0687c59-1e45-4795-8e89-2d602d3bf769", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4033ce3-3ae2-4bb8-a4bd-dde47613dc09", "sighting_of_ref": "indicator--73aa0cbb-dc9a-4965-b2a8-d6ec8e4052bd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d79a48-4e19-4aaf-8000-56310b6c4039", "sighting_of_ref": "indicator--73aa0cbb-dc9a-4965-b2a8-d6ec8e4052bd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ce0717-5bfc-4de8-8ba2-4121aa06d74c", "sighting_of_ref": "indicator--72d59636-963e-4f26-a3d0-f1cbb8ec030f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5844db-cf3c-4a75-b24e-86114191d0fd", "sighting_of_ref": "indicator--72d59636-963e-4f26-a3d0-f1cbb8ec030f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05df8682-3552-42bd-b351-b18907baea3c", "sighting_of_ref": "indicator--b8d9a331-b89a-4364-9ec6-2cb74bcc2450", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2133bac-5ec7-425f-bd76-ed5573a236f1", "sighting_of_ref": "indicator--c2cac1ef-2ed6-480c-a3ea-2aa485f52938", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40648ee-b795-4125-a5d8-16cbe54b7064", "sighting_of_ref": "indicator--c2cac1ef-2ed6-480c-a3ea-2aa485f52938", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbcc7c8-633c-4578-9120-815bf3c091c1", "sighting_of_ref": "indicator--3068a0c1-14f7-4f97-b9d8-2c6744641ca7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a1f80a-3a65-4d3f-9215-ba87e4548883", "sighting_of_ref": "indicator--3068a0c1-14f7-4f97-b9d8-2c6744641ca7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee27ca30-2183-41d4-aee5-f774653301ee", "sighting_of_ref": "indicator--ed22a7c3-00c3-4a52-a319-d2892fd1306c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1ebbfa-6f38-40d7-9715-7882c04392cc", "sighting_of_ref": "indicator--926a0b08-5365-4dad-aa47-7bcd85fdd8a8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f98e87-a852-491b-81a8-eac06db886da", "sighting_of_ref": "indicator--f3bb42d7-70dd-4bc4-a47b-53dc8dea8028", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9947484-f218-4c36-b1d7-28a46c57a668", "sighting_of_ref": "indicator--7a186b5a-cee8-463a-abb0-4c77ba15be3d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4136e408-c560-44df-9fd6-0c76ac68f676", "sighting_of_ref": "indicator--7b6f4494-95da-4c08-8f3a-90a79a18709f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07527ae-183d-40be-80c3-999970d58372", "sighting_of_ref": "indicator--cca19bfb-c687-4261-93c3-cfe0e7b5d747", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baed2716-d100-4065-9e3e-b0a0e3e756d8", "sighting_of_ref": "indicator--cca19bfb-c687-4261-93c3-cfe0e7b5d747", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcb09d0-7789-4570-adff-15096cc096f6", "sighting_of_ref": "indicator--90d04faa-066f-40d5-b400-998144d4c97f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67db480-2477-4328-8036-478f40bdce60", "sighting_of_ref": "indicator--cb914c24-3e30-4b37-abe2-d67318defb3f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242f04fb-ece6-466b-a926-b8bd2f78e3bb", "sighting_of_ref": "indicator--cb914c24-3e30-4b37-abe2-d67318defb3f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad08b72-a441-4d63-b5ea-d2ae50cf5687", "sighting_of_ref": "indicator--1604443f-b5cd-444d-9cf7-535143798816", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b695491-fbbe-4abf-bfa6-1c5b90c265a6", "sighting_of_ref": "indicator--5ea99c4f-d119-48da-9ef7-d303b6c04da0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03fe2ba-ad6c-410f-9f8d-451340072f8e", "sighting_of_ref": "indicator--d5fdec47-7b90-479e-a751-6e60e2f06776", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e667b2f-608f-4c48-94c0-8dbfe04ecb5c", "sighting_of_ref": "indicator--9054c6fc-58d9-47d3-b3f0-56365adb21bf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfccc66-0d7c-4979-be39-1176405041b0", "sighting_of_ref": "indicator--bab759a6-db59-4479-8809-6f89008ee3d4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b13de1-dd98-4c7e-918f-6e48a10b31b7", "sighting_of_ref": "indicator--e9a40c09-46b7-420c-8795-b0c78c8df49f", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19e6a0a-1f80-4e86-ab63-62f45cdac220", "sighting_of_ref": "indicator--93ed3359-a281-46ff-af7c-0ca706e5d6a1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb89de07-f16a-43f3-bea3-bf3c7126230e", "sighting_of_ref": "indicator--93ed3359-a281-46ff-af7c-0ca706e5d6a1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df47c16b-32f5-4463-a9ac-2b344ac1fc51", "sighting_of_ref": "indicator--0c459afb-fa60-4952-8a28-ae25cde6ac80", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70c91ee-2281-49da-8494-2521746c6bf6", "sighting_of_ref": "indicator--0c459afb-fa60-4952-8a28-ae25cde6ac80", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f99dbea-42a5-4430-9763-b7573e7f33c9", "sighting_of_ref": "indicator--0c459afb-fa60-4952-8a28-ae25cde6ac80", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63203ed6-d552-4eae-b915-d5c108a51754", "sighting_of_ref": "indicator--2628cb0b-ee3f-49ae-a961-b123a7fe17fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fce4f0-e43c-4784-9040-1367d3c238ad", "sighting_of_ref": "indicator--65ca10c7-8c33-4601-ad45-971e7f7be76c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5540d9d-639b-4018-8601-7d9a08adec48", "sighting_of_ref": "indicator--43e59dd4-2ef5-43ca-bc93-9b0325f136c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e456cf60-a16b-4ccf-a3ea-c3848e43aca3", "sighting_of_ref": "indicator--d3db6d52-afa6-4e06-a60c-034f1f8ffdfe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf554d3a-735e-4be6-addd-27120fe07087", "sighting_of_ref": "indicator--d3db6d52-afa6-4e06-a60c-034f1f8ffdfe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba275d96-1f7b-493d-858e-b355ef0d66aa", "sighting_of_ref": "indicator--e105fb72-3800-4fb2-b665-f1f4c6ee956b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f324598-0ace-4c64-939a-9c53143a8f2d", "sighting_of_ref": "indicator--e105fb72-3800-4fb2-b665-f1f4c6ee956b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b1740f-bc30-4abc-9ca3-ed23feff705f", "sighting_of_ref": "indicator--07531fd4-fdce-44f7-9ceb-f9c24f5cafb3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad02128f-31ab-4db9-ab87-a29e852c3647", "sighting_of_ref": "indicator--b60682d7-d9f2-4696-8af2-c697ef9e7026", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f206a0-faba-48bb-bcb7-358bdd7b7742", "sighting_of_ref": "indicator--69bc3f5e-959c-46e9-862c-fec72848aa35", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811de58f-a86b-4aab-8e72-bba38bf282a1", "sighting_of_ref": "indicator--d05b2b37-2a86-45f4-bc38-a63759b3396a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae8236f-0e07-4ab8-9b7e-61c4721092b4", "sighting_of_ref": "indicator--bd0cdb0c-4fd1-434c-950d-15e7b0ea9dee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a19c13b-2e00-4957-bd5d-7ae8d4f2bfd8", "sighting_of_ref": "indicator--5ca9edd9-005a-4d45-82bb-174312090c84", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94246315-c8fc-444c-a9d2-137b97838860", "sighting_of_ref": "indicator--5ca9edd9-005a-4d45-82bb-174312090c84", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1655de38-cc1b-4e63-ad50-1f4e257e55d7", "sighting_of_ref": "indicator--5ca9edd9-005a-4d45-82bb-174312090c84", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a38187-931f-432d-b8e3-8d13481ca07b", "sighting_of_ref": "indicator--cc0005de-d0f6-4e30-8684-a0ed4d65a7eb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a276e79-e5bd-489d-bacd-f98345c7ea41", "sighting_of_ref": "indicator--6acee178-7d51-4726-b47d-3f65374083ad", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d3f11e-e867-4521-8cbd-91db701ecb20", "sighting_of_ref": "indicator--f62b2ade-80e0-428e-aced-46307b55b47d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39625263-77bc-44f9-9318-6fdc78b780d5", "sighting_of_ref": "indicator--d93c5ac9-e82f-4576-9b7e-0cac06ed0010", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4f116f-9fa0-463d-b765-fa2b86345ffc", "sighting_of_ref": "indicator--da522843-cc23-4539-9d08-c615c0e7bd59", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17b3acd-62c3-4147-bf6d-0c066fc9bb46", "sighting_of_ref": "indicator--53ab7276-7f29-48c7-b72d-f57a12bbe740", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d217893-3a82-43cf-8ab7-a15df4eb2eae", "sighting_of_ref": "indicator--53ab7276-7f29-48c7-b72d-f57a12bbe740", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652bc287-d2ca-49ee-8b5f-ad1aae66037c", "sighting_of_ref": "indicator--53ab7276-7f29-48c7-b72d-f57a12bbe740", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ac06e4-34db-42fc-a1b5-c049c3b9ebde", "sighting_of_ref": "indicator--928d87cd-5e3b-42c8-8ca6-f955b865887d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf83fd0-031b-4b95-86cd-72b4ce7fc05a", "sighting_of_ref": "indicator--aebc06d0-9dd5-4c39-9ce2-8f1f14146f88", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8743ff-d648-4729-8864-9c48ed8bd49a", "sighting_of_ref": "indicator--aebc06d0-9dd5-4c39-9ce2-8f1f14146f88", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977ceaff-bbf3-4c0c-8d8e-d7e223be2ce3", "sighting_of_ref": "indicator--aebc06d0-9dd5-4c39-9ce2-8f1f14146f88", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda50c7b-7bb8-48c4-b967-bcbd6273969a", "sighting_of_ref": "indicator--a9b28efb-c2a3-4689-82cd-ec42ac376a3e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b86864b-db38-463d-a1d2-bdbd8fdb6be7", "sighting_of_ref": "indicator--a9b28efb-c2a3-4689-82cd-ec42ac376a3e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cfd1b8-e931-478e-b343-4999b4ab60f8", "sighting_of_ref": "indicator--e1cd5e70-b6c7-468d-8fa9-78c0638b70ab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25c345c-e648-452a-9188-deeb3abd412b", "sighting_of_ref": "indicator--e1cd5e70-b6c7-468d-8fa9-78c0638b70ab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a66b145-7734-4c51-98f2-6ed3f438382a", "sighting_of_ref": "indicator--d5ddfafe-414c-48e3-8b7e-d74648443362", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cbe17d1-7b5a-49f6-b95f-de7ff3103dd7", "sighting_of_ref": "indicator--d5ddfafe-414c-48e3-8b7e-d74648443362", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511a533a-e9e4-4d27-a5d5-5c71778a6d56", "sighting_of_ref": "indicator--d5ddfafe-414c-48e3-8b7e-d74648443362", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3470000d-6c42-4502-96b6-047ec6cd0eea", "sighting_of_ref": "indicator--ccb18062-06eb-4f82-8560-fff61374404b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cbe6ee6-df85-40c9-a633-459a238dc637", "sighting_of_ref": "indicator--ccb18062-06eb-4f82-8560-fff61374404b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d84f3a-2965-4717-b7f7-ff75d52ea130", "sighting_of_ref": "indicator--ccb18062-06eb-4f82-8560-fff61374404b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cde5cc6-ebfb-43a8-8add-2d04a2f62945", "sighting_of_ref": "indicator--5f2ee07f-a34f-4510-b0d3-7fb6e60eb258", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ad810c-1039-4a86-b437-49ed9e34b722", "sighting_of_ref": "indicator--5f2ee07f-a34f-4510-b0d3-7fb6e60eb258", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d34562c-adee-4c11-91a2-c1c4fbb28a57", "sighting_of_ref": "indicator--5f2ee07f-a34f-4510-b0d3-7fb6e60eb258", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e12a6e1-b068-4009-9cdf-a14cdd3908cf", "sighting_of_ref": "indicator--1c975adb-3b0e-4508-8931-b5687e4067d5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5b735f-a973-4fd9-8c3e-838096dd81bf", "sighting_of_ref": "indicator--ca0172fe-6171-4326-9731-632a29ec47f3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8387704-4727-4ed1-832f-d4c71bfa0aac", "sighting_of_ref": "indicator--ca0172fe-6171-4326-9731-632a29ec47f3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9c14a4-6a13-48b6-9048-3031e6b79798", "sighting_of_ref": "indicator--ca0172fe-6171-4326-9731-632a29ec47f3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4625eb16-b897-4e3a-b000-ed0f4886740b", "sighting_of_ref": "indicator--692688f4-bf9e-4e10-bb09-d7c3795dd024", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669308da-09a7-47e6-a3db-febf1b36da55", "sighting_of_ref": "indicator--692688f4-bf9e-4e10-bb09-d7c3795dd024", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7d07e7-9d5e-4d36-aa4a-29edc091aa25", "sighting_of_ref": "indicator--692688f4-bf9e-4e10-bb09-d7c3795dd024", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdeaf06e-0886-4456-ad36-cd6cf9542f64", "sighting_of_ref": "indicator--d92aa750-78ef-4d99-837d-dd92f8ff36ef", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384f0b2a-5bbb-4289-a0af-dc851a96e972", "sighting_of_ref": "indicator--d92aa750-78ef-4d99-837d-dd92f8ff36ef", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485289f4-1885-4776-a975-f291f01d8b3e", "sighting_of_ref": "indicator--f2ac89bf-918c-4382-abff-42b7fa9ed717", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6761cb-51b3-4c8a-8ae4-5851fa879c5d", "sighting_of_ref": "indicator--f2ac89bf-918c-4382-abff-42b7fa9ed717", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2f8ff5-a5c3-4846-a764-93912ca80fb5", "sighting_of_ref": "indicator--f2ac89bf-918c-4382-abff-42b7fa9ed717", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d028d7f1-efa1-4db4-838d-99672e1659db", "sighting_of_ref": "indicator--06dda514-582d-4fad-90fb-80010c42ed72", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b53a56-b4c8-46a2-9e34-d1acce41ea1f", "sighting_of_ref": "indicator--06dda514-582d-4fad-90fb-80010c42ed72", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b86c2b-5bbd-458f-98a7-69030d994c9e", "sighting_of_ref": "indicator--2cef59f1-0f9c-4c7a-939d-4c14e26e8f10", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b998c8-86c4-474e-840c-97504106acba", "sighting_of_ref": "indicator--2cef59f1-0f9c-4c7a-939d-4c14e26e8f10", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fd12ff-145f-4d58-b580-e6224dc759a2", "sighting_of_ref": "indicator--2cef59f1-0f9c-4c7a-939d-4c14e26e8f10", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d2c390-7c32-47d4-9f4a-556306d2895a", "sighting_of_ref": "indicator--b8c1653d-5902-4d3e-bf80-09be55515277", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070793bb-9343-4cbd-9542-6b2ec481c85a", "sighting_of_ref": "indicator--b8c1653d-5902-4d3e-bf80-09be55515277", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112ff8ef-d400-41d8-87bd-73d1f6d374ad", "sighting_of_ref": "indicator--b8c1653d-5902-4d3e-bf80-09be55515277", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8a1fea-e117-43f0-ba18-41ccba8759bf", "sighting_of_ref": "indicator--c896948f-683c-4e36-b135-2807e9d0c1bc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83897a8b-126a-4781-881f-530c912fc852", "sighting_of_ref": "indicator--c896948f-683c-4e36-b135-2807e9d0c1bc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ae8cdd-a10d-409d-83b1-74b6d244e36b", "sighting_of_ref": "indicator--c896948f-683c-4e36-b135-2807e9d0c1bc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33d385d-e2b9-4393-8eb8-a0444b1d7e53", "sighting_of_ref": "indicator--fb4910e2-850b-47e6-adff-4fbabb706f6a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c80a1b3-c02c-4bdb-b6f2-a634010bb6be", "sighting_of_ref": "indicator--fb4910e2-850b-47e6-adff-4fbabb706f6a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b30ce88-377f-46c2-8951-5eb64948aa88", "sighting_of_ref": "indicator--fb4910e2-850b-47e6-adff-4fbabb706f6a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32059088-e109-4c28-b7cb-38f63292e2e8", "sighting_of_ref": "indicator--82303111-162d-40b1-8918-91707ee71012", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082a1be2-25ec-456a-b6cd-e26569ff4824", "sighting_of_ref": "indicator--82303111-162d-40b1-8918-91707ee71012", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c7d567-dd0d-4ce0-8628-d80058597a98", "sighting_of_ref": "indicator--82303111-162d-40b1-8918-91707ee71012", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6254ef-4063-4eb0-ad0e-e78427134921", "sighting_of_ref": "indicator--c261759a-ed10-4c89-84e6-cf15769d6edc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb18844-4988-468b-a2dd-38b0dca1d5c5", "sighting_of_ref": "indicator--c261759a-ed10-4c89-84e6-cf15769d6edc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bfda370-5f3f-42d1-b837-2d4406c3368b", "sighting_of_ref": "indicator--c261759a-ed10-4c89-84e6-cf15769d6edc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f1e9a8-d7e4-4e2b-ae3c-f8f0995bc103", "sighting_of_ref": "indicator--c422735d-45e0-4078-9198-e5d9c98b1f91", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8297a3e1-be20-47cc-abd5-0a1d59aecf13", "sighting_of_ref": "indicator--c422735d-45e0-4078-9198-e5d9c98b1f91", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbd0e0d-be27-4fc8-abb4-33a9ff99cdfe", "sighting_of_ref": "indicator--c422735d-45e0-4078-9198-e5d9c98b1f91", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf28721-c68d-4500-be30-a1463333065e", "sighting_of_ref": "indicator--664b1bd3-4cb7-4688-8829-c3cfef6483ad", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ed0d7c-6177-403a-8eca-0d7d40806631", "sighting_of_ref": "indicator--664b1bd3-4cb7-4688-8829-c3cfef6483ad", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d29bfd3-9823-4ec5-8ca1-f86f658b943d", "sighting_of_ref": "indicator--664b1bd3-4cb7-4688-8829-c3cfef6483ad", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7d727d-6816-4b75-835e-a17c79d34f43", "sighting_of_ref": "indicator--30732b8d-6935-4ca7-a8bb-7fd10ed6d46a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf511bdc-74d4-4fe1-b228-3932e94d6696", "sighting_of_ref": "indicator--30732b8d-6935-4ca7-a8bb-7fd10ed6d46a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e09d218-b847-493b-8f31-e1b20ae96700", "sighting_of_ref": "indicator--30732b8d-6935-4ca7-a8bb-7fd10ed6d46a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab9d0ad-f2a4-48c1-b839-629a4aa2263f", "sighting_of_ref": "indicator--7d5f645e-e137-4f3d-8b59-d34f2a636452", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a504517-91d3-446e-9ce0-ac979b292861", "sighting_of_ref": "indicator--7d5f645e-e137-4f3d-8b59-d34f2a636452", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cf1f3d-f48c-4842-b7d8-bd270e7bc2da", "sighting_of_ref": "indicator--7d5f645e-e137-4f3d-8b59-d34f2a636452", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851b62b1-352c-4908-bbd1-fa25da47dd4c", "sighting_of_ref": "indicator--f42280f7-99ee-47db-b7ac-33cb2d875c38", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bb6d54-0840-4ed3-909a-e45d40d98857", "sighting_of_ref": "indicator--f42280f7-99ee-47db-b7ac-33cb2d875c38", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1621d36-9af2-4cb8-8fe9-4bc3abf05a03", "sighting_of_ref": "indicator--f42280f7-99ee-47db-b7ac-33cb2d875c38", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947ebaec-c864-4482-9fc8-f80d6a6cafd4", "sighting_of_ref": "indicator--b08d6454-42d8-40a2-9e00-42ddedbefdc1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e87486-f771-4959-9d55-6450aae72a9b", "sighting_of_ref": "indicator--b08d6454-42d8-40a2-9e00-42ddedbefdc1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01969e93-fbd5-4314-b8f3-eefaf14b2101", "sighting_of_ref": "indicator--b08d6454-42d8-40a2-9e00-42ddedbefdc1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59e17ed-95a2-44f6-9f20-07ea51ddbaff", "sighting_of_ref": "indicator--e2c83f5d-0506-4dff-b493-e3d5ef1ae107", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29201835-3049-45da-a34e-dfd4d81d9067", "sighting_of_ref": "indicator--e2c83f5d-0506-4dff-b493-e3d5ef1ae107", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4cc922-f42e-499f-af17-92bd7826da4b", "sighting_of_ref": "indicator--e2c83f5d-0506-4dff-b493-e3d5ef1ae107", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e52611-ee42-49bc-80f0-62bca570f1a6", "sighting_of_ref": "indicator--27f45d96-877b-4709-9f99-f74fa51aca89", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d058d45a-86a5-45cb-87e4-8917fb387ad0", "sighting_of_ref": "indicator--27f45d96-877b-4709-9f99-f74fa51aca89", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1588158-7395-41a9-b77f-1f338dfcbfc4", "sighting_of_ref": "indicator--27f45d96-877b-4709-9f99-f74fa51aca89", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a541bd-da8e-4604-83bd-6ddee8ffc5d5", "sighting_of_ref": "indicator--2489855a-7f9d-47bd-9e11-809529fa2deb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d945d5-8a33-4d90-925c-3f729e5dcad0", "sighting_of_ref": "indicator--2489855a-7f9d-47bd-9e11-809529fa2deb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8a14a7-3a33-45e8-ab1a-3318b1c45e53", "sighting_of_ref": "indicator--2489855a-7f9d-47bd-9e11-809529fa2deb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d137d1-5fb7-454f-91dc-8f3abccc843f", "sighting_of_ref": "indicator--043ea4bc-dc00-4072-93fe-4cd846f22ff1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7308366c-91bd-4a29-a07d-af907c025deb", "sighting_of_ref": "indicator--043ea4bc-dc00-4072-93fe-4cd846f22ff1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54cd09e9-eefc-4982-bf98-9a884c7fee69", "sighting_of_ref": "indicator--874d1d76-1219-48c3-8176-d8b468a73f6e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1f8a52-8086-46bf-8e15-6c4ecb6da64f", "sighting_of_ref": "indicator--874d1d76-1219-48c3-8176-d8b468a73f6e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb44aa63-9865-421b-9e61-0c91a48ff189", "sighting_of_ref": "indicator--874d1d76-1219-48c3-8176-d8b468a73f6e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c10a75-9fbd-414a-b41a-16d9eff6ac18", "sighting_of_ref": "indicator--55d02aa7-ee79-400d-955b-f31fb4568320", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1862463a-0c8f-4764-beb5-2fd1fa5e693e", "sighting_of_ref": "indicator--55d02aa7-ee79-400d-955b-f31fb4568320", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275a702c-5d1c-4568-8c4b-1994a31a3afa", "sighting_of_ref": "indicator--dd5c9e86-1e52-4155-b207-835efafcd311", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d9032a-03ff-4949-b05b-8cf26e522dfe", "sighting_of_ref": "indicator--dd5c9e86-1e52-4155-b207-835efafcd311", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062f34fb-46e4-43d6-a7c1-49b792f3c0b7", "sighting_of_ref": "indicator--f856fac3-8658-482a-8962-dbab5aeabd29", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1c2211-c478-439c-ac54-bdd0b2f3dbee", "sighting_of_ref": "indicator--f856fac3-8658-482a-8962-dbab5aeabd29", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cbb4831-9b44-4536-98d7-10acb8378787", "sighting_of_ref": "indicator--f856fac3-8658-482a-8962-dbab5aeabd29", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbcfb50-12f6-4da2-8913-65aa95bbd2ee", "sighting_of_ref": "indicator--f9ffb16a-0cd9-439b-9066-9d23cf4ee440", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5591191-7672-42fa-aa02-27221980816e", "sighting_of_ref": "indicator--f9ffb16a-0cd9-439b-9066-9d23cf4ee440", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6d4f6f-37e8-4c46-bf23-5378070fcd86", "sighting_of_ref": "indicator--f9ffb16a-0cd9-439b-9066-9d23cf4ee440", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14911d5-9a14-48c8-826c-18df388cc204", "sighting_of_ref": "indicator--a1b32a1e-5c5c-478f-a09e-93e4f5cfc2ab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ee84f4-72a8-4fa6-a9cb-73e254cf8567", "sighting_of_ref": "indicator--a1b32a1e-5c5c-478f-a09e-93e4f5cfc2ab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10987f71-2811-4273-b9b4-15a8919ca700", "sighting_of_ref": "indicator--a1b32a1e-5c5c-478f-a09e-93e4f5cfc2ab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b70913-3bd4-492e-b49d-bc5ec1bf9c15", "sighting_of_ref": "indicator--de144c68-a9c5-4328-a726-645f0be01aff", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539b746b-2635-48d0-863e-848e35f8b272", "sighting_of_ref": "indicator--de144c68-a9c5-4328-a726-645f0be01aff", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75da2ddb-671e-4d87-950a-de41eafd3174", "sighting_of_ref": "indicator--de144c68-a9c5-4328-a726-645f0be01aff", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4334f05-da09-4a1c-b37c-99d7de99b132", "sighting_of_ref": "indicator--62aa5773-8b1b-487d-a222-e4692accf198", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b0a9e4e-c723-4fed-ab15-09de12f16345", "sighting_of_ref": "indicator--62aa5773-8b1b-487d-a222-e4692accf198", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9da1bc-a8cc-4b9a-a5e8-abb4dd6848ab", "sighting_of_ref": "indicator--62aa5773-8b1b-487d-a222-e4692accf198", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0126d3aa-5230-48fa-a7b5-69e90ba0f866", "sighting_of_ref": "indicator--4a1fdfb7-1c39-4aff-a5f7-e109d74d76a6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fb170b-a4a2-4ef0-bf75-7c5be600d4e1", "sighting_of_ref": "indicator--4a1fdfb7-1c39-4aff-a5f7-e109d74d76a6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4452b2f-e707-4b7a-b34f-77193e2e7317", "sighting_of_ref": "indicator--4a1fdfb7-1c39-4aff-a5f7-e109d74d76a6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77869928-7ab4-4095-a9ff-e22c6eedda19", "sighting_of_ref": "indicator--657511d0-7149-48ce-91db-bcf759d11897", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c4a1b6-946e-4fc8-b62e-c337fa7c8d6f", "sighting_of_ref": "indicator--657511d0-7149-48ce-91db-bcf759d11897", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcdd0fd-37f2-4120-8d33-052be9c81ee6", "sighting_of_ref": "indicator--657511d0-7149-48ce-91db-bcf759d11897", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3393d7-dc3d-4981-a4b1-782a5ad31bcc", "sighting_of_ref": "indicator--05017576-9f5d-471c-a613-de19296cbe7c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9a67be-6a0f-4c6a-b9ce-15ba5953e340", "sighting_of_ref": "indicator--05017576-9f5d-471c-a613-de19296cbe7c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dbb8db9-f0bc-443b-a5e1-f6abc0a3aef5", "sighting_of_ref": "indicator--041192ba-df29-4ea2-b2f4-87afed3dfa6a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3088825b-3ac1-4d5a-82c2-9d9c5d5291a9", "sighting_of_ref": "indicator--041192ba-df29-4ea2-b2f4-87afed3dfa6a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb188cf-6732-4f68-93fe-7fc4b0069f82", "sighting_of_ref": "indicator--041192ba-df29-4ea2-b2f4-87afed3dfa6a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e56e9bd-5ad8-494c-9d9a-4f148ee5a994", "sighting_of_ref": "indicator--1d905a50-c1ac-44a5-be9e-4e5fbb6f5148", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb3c9cc-1265-42ec-9ff1-7fef521c1aef", "sighting_of_ref": "indicator--1d905a50-c1ac-44a5-be9e-4e5fbb6f5148", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36649570-8b10-4762-9851-e4a603e677a6", "sighting_of_ref": "indicator--9d23e142-94b1-4dbd-bfa2-4f75f12f96c9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3ae783-045d-4a43-a896-d7d0f7844348", "sighting_of_ref": "indicator--9d23e142-94b1-4dbd-bfa2-4f75f12f96c9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebcea65-36b3-4f69-9b19-302e47e03119", "sighting_of_ref": "indicator--904a2565-d747-48d1-a284-3e980f881057", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6b1a8e-9685-4d35-9f68-2beb424d5c1a", "sighting_of_ref": "indicator--904a2565-d747-48d1-a284-3e980f881057", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda1be8d-7389-42a4-941a-b4c959e0429d", "sighting_of_ref": "indicator--904a2565-d747-48d1-a284-3e980f881057", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfe2180-f132-4540-b587-ce5645c2e7c7", "sighting_of_ref": "indicator--7d766f45-5df3-4b14-b374-ddd98318c394", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65cf23fb-212a-4d25-b2ad-d0d575499dd9", "sighting_of_ref": "indicator--7d766f45-5df3-4b14-b374-ddd98318c394", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae1f982-a24f-4d47-9132-6ac595797bc5", "sighting_of_ref": "indicator--7d766f45-5df3-4b14-b374-ddd98318c394", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e13fcf2-54f3-4186-a0e6-79ec490513d0", "sighting_of_ref": "indicator--5b020ddf-75db-4208-8b6f-a6bb853d3197", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce188a1-c6d2-4f1d-a451-8295e419c2a0", "sighting_of_ref": "indicator--5b020ddf-75db-4208-8b6f-a6bb853d3197", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c699c8d6-0beb-4aa2-a44d-f9aab7ed66c2", "sighting_of_ref": "indicator--5b020ddf-75db-4208-8b6f-a6bb853d3197", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae157147-516d-47c2-b446-a2a4a6f02300", "sighting_of_ref": "indicator--0c0ebdb4-1e2b-4183-b213-109c6f1b83eb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d068ace-f9f1-4504-b49e-bb970adb0c24", "sighting_of_ref": "indicator--0c0ebdb4-1e2b-4183-b213-109c6f1b83eb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33a893f-b4b6-4a79-a084-3c97cb715a80", "sighting_of_ref": "indicator--c1656d2f-6769-4650-a22a-cc6337e9eb6e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e504e3e-00a7-4600-9ef7-ca58d9c9e960", "sighting_of_ref": "indicator--c1656d2f-6769-4650-a22a-cc6337e9eb6e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ad6c69-3278-45a9-9f2c-4298f7dafb41", "sighting_of_ref": "indicator--c1656d2f-6769-4650-a22a-cc6337e9eb6e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74902bea-a59d-436a-a166-5cfc0fda5ba3", "sighting_of_ref": "indicator--5c30bd3f-a93d-40b3-bcdf-028fc217cba5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758d6b87-32fe-4af0-b48a-7459f5a0696d", "sighting_of_ref": "indicator--5c30bd3f-a93d-40b3-bcdf-028fc217cba5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66efa4ac-121f-46f1-800e-77dfd1d9c003", "sighting_of_ref": "indicator--5c30bd3f-a93d-40b3-bcdf-028fc217cba5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da481c2-865b-4e8c-a3ba-81280544e4b9", "sighting_of_ref": "indicator--812f9abb-4601-4656-bf25-7cc72677c5d2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6ab3cf-cd6f-445c-80f3-0450f61be8e2", "sighting_of_ref": "indicator--812f9abb-4601-4656-bf25-7cc72677c5d2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd5f9cc-37aa-4e7b-95d3-10717061c933", "sighting_of_ref": "indicator--812f9abb-4601-4656-bf25-7cc72677c5d2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d96787ca-2d94-4333-875c-b84f7b43457e", "sighting_of_ref": "indicator--d321949a-ba11-4855-a97e-66ffc696dabe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebeca460-8aa2-47d9-a952-987dee61296d", "sighting_of_ref": "indicator--d321949a-ba11-4855-a97e-66ffc696dabe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875bad34-0131-4480-ae7c-184d24027357", "sighting_of_ref": "indicator--d321949a-ba11-4855-a97e-66ffc696dabe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520cdd5f-be2b-48e6-9ebc-e7249ba387fe", "sighting_of_ref": "indicator--c8342fd6-8e59-47b0-8773-7005e2ebae4f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df46607-c6ea-4ea0-890c-79d92c45e670", "sighting_of_ref": "indicator--d150942a-6002-4112-aebc-ff8e1bf7716e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a4c24c-1546-4ff1-bb64-aef14d220997", "sighting_of_ref": "indicator--d150942a-6002-4112-aebc-ff8e1bf7716e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8775e697-fefb-44ae-8e0c-9ddcb13a4f0b", "sighting_of_ref": "indicator--7f844a41-578e-4016-b261-9372ba01301d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095adf76-f901-4e81-bcd5-1d03f1860739", "sighting_of_ref": "indicator--7f844a41-578e-4016-b261-9372ba01301d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf420bb3-c036-408d-ac50-8cbc5080fd29", "sighting_of_ref": "indicator--7f844a41-578e-4016-b261-9372ba01301d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6205d24a-6535-4e41-91b9-0dfa40709103", "sighting_of_ref": "indicator--bc4c3a3d-829d-4683-b08b-ba10861bb481", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd09904d-f720-4b9e-97bc-57a61c1d5b33", "sighting_of_ref": "indicator--bc4c3a3d-829d-4683-b08b-ba10861bb481", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab7e72a-19e2-4073-ac14-9c68c021304a", "sighting_of_ref": "indicator--d820bff2-d098-4453-ae18-523476734f04", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843c9833-2c83-4a67-9bdb-f7eb2919338a", "sighting_of_ref": "indicator--d820bff2-d098-4453-ae18-523476734f04", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d137ff51-0157-4a4e-bb59-f15849fe927c", "sighting_of_ref": "indicator--d820bff2-d098-4453-ae18-523476734f04", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1db82c9-827d-4529-a5d2-374526be3c5d", "sighting_of_ref": "indicator--02149983-6d2c-4970-8e04-3c877a6ba87c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac34c7d-f582-4ea8-b223-0a2e4a37232e", "sighting_of_ref": "indicator--02149983-6d2c-4970-8e04-3c877a6ba87c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91bf2c2-7b0e-422a-8f77-f1fd2cca6cea", "sighting_of_ref": "indicator--02149983-6d2c-4970-8e04-3c877a6ba87c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f339135-1d92-4675-a508-b10a1314156b", "sighting_of_ref": "indicator--baf0c548-7f26-4afb-94f4-4947244959ce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d862a7e4-3673-424a-8e62-104ca752b54b", "sighting_of_ref": "indicator--baf0c548-7f26-4afb-94f4-4947244959ce", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc55ecd9-3afd-430c-9c44-e2ccb93820f8", "sighting_of_ref": "indicator--baf0c548-7f26-4afb-94f4-4947244959ce", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94657d21-e6fe-4a70-bfb7-718523dd849f", "sighting_of_ref": "indicator--1a1c0f1c-dffe-412c-9acb-af3435935fe5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db157716-f0d0-4310-b64e-0cb19d5df2d0", "sighting_of_ref": "indicator--1a1c0f1c-dffe-412c-9acb-af3435935fe5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b7d5bb-45df-4a9d-a72c-32ccbde4bc13", "sighting_of_ref": "indicator--1a1c0f1c-dffe-412c-9acb-af3435935fe5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0b450b-1f84-4b92-a571-6ced8a5b08fa", "sighting_of_ref": "indicator--949f653a-52a7-471b-a07d-0bde8204d0d3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be57faf-f7fd-46eb-85a0-9f45351ac5e6", "sighting_of_ref": "indicator--949f653a-52a7-471b-a07d-0bde8204d0d3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f30ebd-1e46-4d97-860a-72520cfa2cfe", "sighting_of_ref": "indicator--949f653a-52a7-471b-a07d-0bde8204d0d3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fbb8d1-22e4-44d2-992d-8d786074419c", "sighting_of_ref": "indicator--adeca37c-28ab-4beb-af81-212a5d053f7f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88020197-17f7-4daf-b15f-bdf0b7f41791", "sighting_of_ref": "indicator--adeca37c-28ab-4beb-af81-212a5d053f7f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a216cb7-472b-4623-b73a-4c92e0fe87f8", "sighting_of_ref": "indicator--c4ea877c-ec7c-428c-9c96-cd8d4bba860d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522a3092-aead-4203-862c-92756a64b875", "sighting_of_ref": "indicator--c4ea877c-ec7c-428c-9c96-cd8d4bba860d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123178e4-bb1f-4aba-aa99-3ba3df45670f", "sighting_of_ref": "indicator--c4ea877c-ec7c-428c-9c96-cd8d4bba860d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92d2355-34a5-48bb-92b1-86550ca869c1", "sighting_of_ref": "indicator--beb906bb-218b-42e3-9b76-03ed7a8c6ee4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49991234-9353-4056-a708-df43113c0d1f", "sighting_of_ref": "indicator--beb906bb-218b-42e3-9b76-03ed7a8c6ee4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519fc883-d206-41ae-a5bf-2ed01e9d9ace", "sighting_of_ref": "indicator--beb906bb-218b-42e3-9b76-03ed7a8c6ee4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822a78d4-0507-426e-b627-d65c2597d5f0", "sighting_of_ref": "indicator--709bcc89-5fd2-4ccb-a290-1250a2ff4ea1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8feb0a-8e91-40d9-8c02-247af40a86c9", "sighting_of_ref": "indicator--709bcc89-5fd2-4ccb-a290-1250a2ff4ea1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f665160c-cf54-489b-a08e-c18fb54dc124", "sighting_of_ref": "indicator--709bcc89-5fd2-4ccb-a290-1250a2ff4ea1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6575ef11-ba3d-4d11-be51-563b750e0e73", "sighting_of_ref": "indicator--e9d8df62-1e5b-41eb-b5ed-492b1dffbcf9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ebbd6c-4cfb-488e-b59c-26dc7a66c676", "sighting_of_ref": "indicator--e9d8df62-1e5b-41eb-b5ed-492b1dffbcf9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1f01d7-527e-46f0-9066-123af8dc4176", "sighting_of_ref": "indicator--e9d8df62-1e5b-41eb-b5ed-492b1dffbcf9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b86a95-5ad3-44ae-ad71-03bbfa2b54e5", "sighting_of_ref": "indicator--5d875de3-59ff-4e73-baee-5b8caf614efd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea20d0e-f96c-476a-a2a7-96f5b04f5847", "sighting_of_ref": "indicator--5d875de3-59ff-4e73-baee-5b8caf614efd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf27e54-7310-4ea3-9fcf-864e23f22c9b", "sighting_of_ref": "indicator--5d875de3-59ff-4e73-baee-5b8caf614efd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4174bbd9-97a7-4572-a864-7a07464f5602", "sighting_of_ref": "indicator--b104603d-a257-4957-972a-ec8e4ddfb6ae", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193d351d-3d57-44f0-bf3c-22805ef21d21", "sighting_of_ref": "indicator--b104603d-a257-4957-972a-ec8e4ddfb6ae", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064b0e60-6633-4411-87a6-df35954e3a31", "sighting_of_ref": "indicator--97501000-e7fc-4d24-b625-e46dc560f783", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7bba0d-7c5b-48e8-a99b-60e85148db10", "sighting_of_ref": "indicator--97501000-e7fc-4d24-b625-e46dc560f783", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1253237-debe-41c1-afc9-f4fd3fba2192", "sighting_of_ref": "indicator--97501000-e7fc-4d24-b625-e46dc560f783", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935b4e91-31f6-4d51-be5c-500044f96641", "sighting_of_ref": "indicator--4580e115-da70-467a-9454-9173ee2a90eb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972f25d4-ee11-493d-94f3-c253ebf542c2", "sighting_of_ref": "indicator--4580e115-da70-467a-9454-9173ee2a90eb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1714c2a-8948-40a4-92c8-7a693ef397bf", "sighting_of_ref": "indicator--4580e115-da70-467a-9454-9173ee2a90eb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb89346-2003-4f03-a211-528653adfcb0", "sighting_of_ref": "indicator--1a1dc350-8ec3-423f-ba3c-3f1990dbe2bb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339d81a6-90b5-4e5c-bf8b-35af273affef", "sighting_of_ref": "indicator--1a1dc350-8ec3-423f-ba3c-3f1990dbe2bb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97cb91c7-7988-465c-8ce2-6a962283c1e5", "sighting_of_ref": "indicator--1a1dc350-8ec3-423f-ba3c-3f1990dbe2bb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70964e15-4824-438b-974e-ce58777f6d9a", "sighting_of_ref": "indicator--a30336e5-d5c4-474e-b663-fc1067e4f3f8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c338ff1d-3b2e-4ec7-bc99-054935633c96", "sighting_of_ref": "indicator--a30336e5-d5c4-474e-b663-fc1067e4f3f8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795f1682-90c5-4f6d-be88-05d7c837937b", "sighting_of_ref": "indicator--a30336e5-d5c4-474e-b663-fc1067e4f3f8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe205966-3dee-4f96-8920-709936b5c15b", "sighting_of_ref": "indicator--6ec45bed-66e4-429e-ab25-f30d636bba79", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96141dcc-53ca-481e-8581-d47b82c4ca7d", "sighting_of_ref": "indicator--1458d75e-6930-409b-9f5a-0575e47bea8f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be7104f-4fb2-4d12-a38b-baec1a6fda8d", "sighting_of_ref": "indicator--1458d75e-6930-409b-9f5a-0575e47bea8f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b070233f-ec24-4b95-97e4-ee8cea217b2e", "sighting_of_ref": "indicator--1458d75e-6930-409b-9f5a-0575e47bea8f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c284e4-3285-489a-b122-ba9c99b118c9", "sighting_of_ref": "indicator--9a149b5a-4f56-48d2-822d-a3fe9dcdda16", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d93083a-dc30-4a25-b6bc-7ae486a3aced", "sighting_of_ref": "indicator--9a149b5a-4f56-48d2-822d-a3fe9dcdda16", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacee71d-c78f-4593-968c-6fe6eab5646c", "sighting_of_ref": "indicator--9a149b5a-4f56-48d2-822d-a3fe9dcdda16", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d3bb1f-c231-45dc-b14d-0d902ba453e0", "sighting_of_ref": "indicator--59a23fc8-be4d-405d-864b-c4b0f0831c59", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c23150-d48b-4d11-84bb-984f6647bacf", "sighting_of_ref": "indicator--59a23fc8-be4d-405d-864b-c4b0f0831c59", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c21483-a3f0-4e72-a6d7-68b4cbec70c1", "sighting_of_ref": "indicator--85467ea9-2465-40b0-b3d5-935ef535963e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac70175-c34e-42de-b2cf-a26acd30ca78", "sighting_of_ref": "indicator--85467ea9-2465-40b0-b3d5-935ef535963e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a0cf54-4c16-419e-bb4f-06a89c278793", "sighting_of_ref": "indicator--85467ea9-2465-40b0-b3d5-935ef535963e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc917f7-7f2e-400e-b51d-02f0a7b2f3e7", "sighting_of_ref": "indicator--f222fe91-328d-4bab-8ea7-229c37081ab5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e5d403-c4c6-49e3-9791-68b8c6ca93e2", "sighting_of_ref": "indicator--f222fe91-328d-4bab-8ea7-229c37081ab5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4763e3-4693-4e83-a28c-387914efd328", "sighting_of_ref": "indicator--f222fe91-328d-4bab-8ea7-229c37081ab5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190ae297-0867-4051-9e14-7b80686f7d82", "sighting_of_ref": "indicator--1dbe9ac6-141e-49c8-aee0-c515dc862d2d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c96056-873d-4be6-b145-eaab435ece8e", "sighting_of_ref": "indicator--1dbe9ac6-141e-49c8-aee0-c515dc862d2d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19a1c4d-926e-4918-a8cd-d262d07e0cf1", "sighting_of_ref": "indicator--1dbe9ac6-141e-49c8-aee0-c515dc862d2d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195768ce-caa2-4a28-95c0-6293cd1f16ab", "sighting_of_ref": "indicator--5cb233ab-5aa3-4263-a68f-2fdc07af7ea2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a117a8e0-6fbe-4f9c-ade3-7aa8bf2eaeba", "sighting_of_ref": "indicator--5cb233ab-5aa3-4263-a68f-2fdc07af7ea2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657899e9-c633-4435-bf4c-ecf79f71bfd9", "sighting_of_ref": "indicator--91344a6e-70a7-4019-9e76-067c4704a778", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce81863f-6c7e-481d-b36b-0d19728a5bc4", "sighting_of_ref": "indicator--91344a6e-70a7-4019-9e76-067c4704a778", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7359424-b6d4-4d61-a712-69ba8081c5ba", "sighting_of_ref": "indicator--91344a6e-70a7-4019-9e76-067c4704a778", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2292156f-9e9a-4b31-9e18-7d7809031736", "sighting_of_ref": "indicator--e965998b-2790-465c-b2d7-c120feeb2799", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4eea97e-b6cc-44f5-8bc7-0bcd88323ee7", "sighting_of_ref": "indicator--e965998b-2790-465c-b2d7-c120feeb2799", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fece092-db07-4025-ba02-a5c142ae7a9d", "sighting_of_ref": "indicator--e965998b-2790-465c-b2d7-c120feeb2799", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2338c5bc-7756-4ef9-8dfb-369eacc624ca", "sighting_of_ref": "indicator--5d9c3668-13c4-4f11-b900-a369e3dd926d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f70e2c0-cc58-4dc3-adab-49ea453ea76e", "sighting_of_ref": "indicator--5d9c3668-13c4-4f11-b900-a369e3dd926d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829d1712-36c9-40a7-8e9d-46e35799bbd4", "sighting_of_ref": "indicator--5d9c3668-13c4-4f11-b900-a369e3dd926d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fdd92e-627f-4d7e-a285-994b1e819396", "sighting_of_ref": "indicator--1bd55b23-0fd8-4c79-8b6e-9cbb276bbcdd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62bd6abc-6b92-41c1-8662-d8292db7b1d0", "sighting_of_ref": "indicator--1bd55b23-0fd8-4c79-8b6e-9cbb276bbcdd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7111d21-ddca-4997-9e22-03fa5c9dd607", "sighting_of_ref": "indicator--1bd55b23-0fd8-4c79-8b6e-9cbb276bbcdd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3245963a-016f-4f3d-8ded-440c90e1945a", "sighting_of_ref": "indicator--2c94d180-e14f-4c4d-bec7-a8b9566b2ab5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a39871-9164-47a9-88a8-ea9c312c705d", "sighting_of_ref": "indicator--2c94d180-e14f-4c4d-bec7-a8b9566b2ab5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53f6f44-e6f1-4b3a-8f09-3cbf7b3c1d27", "sighting_of_ref": "indicator--2c94d180-e14f-4c4d-bec7-a8b9566b2ab5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2d5f09-44da-470b-b6c1-2d83021e9339", "sighting_of_ref": "indicator--766da9df-7310-4c86-a8ab-59513b677c18", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65af2ca7-38cd-4590-a2c1-24e8ae787c53", "sighting_of_ref": "indicator--766da9df-7310-4c86-a8ab-59513b677c18", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1433245-f4cb-4634-95d1-f904b1aeda6b", "sighting_of_ref": "indicator--766da9df-7310-4c86-a8ab-59513b677c18", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b66b86-d3af-4104-b634-c37821755d0a", "sighting_of_ref": "indicator--6a5b2fde-294d-464a-8daf-9e35d00dbaab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414c9114-d59c-44b5-8c7e-f6d1d131e02e", "sighting_of_ref": "indicator--6a5b2fde-294d-464a-8daf-9e35d00dbaab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46aef09-9ca4-488a-8f1c-13fd6be9f0bb", "sighting_of_ref": "indicator--6a5b2fde-294d-464a-8daf-9e35d00dbaab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a574110f-6986-4aa1-bebf-0b5657742d96", "sighting_of_ref": "indicator--167a7047-51a4-47ed-b5ae-8f822e64a1eb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea83bca3-0f6d-42f4-8354-d263197bb339", "sighting_of_ref": "indicator--167a7047-51a4-47ed-b5ae-8f822e64a1eb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f57a2c-fa3e-4425-a459-338670fa822a", "sighting_of_ref": "indicator--167a7047-51a4-47ed-b5ae-8f822e64a1eb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ebec6d-ac5e-43d5-840f-dd4d699d39a1", "sighting_of_ref": "indicator--daeb2530-4ffb-4e07-a094-a1c3fa4c2a15", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3a7e90-6cd2-400a-afa1-8d9dd282d983", "sighting_of_ref": "indicator--daeb2530-4ffb-4e07-a094-a1c3fa4c2a15", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f6d739-79bd-46fc-b76c-8ae2abf7c6e4", "sighting_of_ref": "indicator--daeb2530-4ffb-4e07-a094-a1c3fa4c2a15", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962188b2-fc3b-466f-a79d-0bb2abc23b27", "sighting_of_ref": "indicator--39e5824b-ee9b-400a-9d1a-2d725c3429a9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0458c0-5221-469c-b02d-2bb2ca332abf", "sighting_of_ref": "indicator--39e5824b-ee9b-400a-9d1a-2d725c3429a9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615aa754-74ef-405b-9d56-9f2d82319bfc", "sighting_of_ref": "indicator--39e5824b-ee9b-400a-9d1a-2d725c3429a9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c00851-9e8b-4918-b18b-47427ccca6d7", "sighting_of_ref": "indicator--9b2a342b-23ec-4951-87bc-eb832f664d20", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9f33fd-b16b-4779-a480-0e16073b0487", "sighting_of_ref": "indicator--9b2a342b-23ec-4951-87bc-eb832f664d20", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a568da9c-a626-48dc-a8a7-4ffe310a63b7", "sighting_of_ref": "indicator--f52f57b2-03f7-4bfc-8686-c258999c9171", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ece3d21-d148-43f9-a95a-08e6f9290d0c", "sighting_of_ref": "indicator--f52f57b2-03f7-4bfc-8686-c258999c9171", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4322c173-bd10-45ca-ada1-e8754f4a762c", "sighting_of_ref": "indicator--3bab35e5-ea3f-48a6-83e3-268b7ac1ec30", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b57a0e3-d4eb-49e9-8d92-bf4402775e49", "sighting_of_ref": "indicator--3bab35e5-ea3f-48a6-83e3-268b7ac1ec30", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f1f890-3459-4c62-8f4e-f99cbf77ba33", "sighting_of_ref": "indicator--aed5c241-4269-4a7e-998d-e8cbfccad9d8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f129218a-f579-417e-b06f-94c088432c5a", "sighting_of_ref": "indicator--aed5c241-4269-4a7e-998d-e8cbfccad9d8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675ce873-6e73-4dd1-a77d-0f3e2b62e16e", "sighting_of_ref": "indicator--aed5c241-4269-4a7e-998d-e8cbfccad9d8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda620c3-22cc-432f-8271-360bdde9aba4", "sighting_of_ref": "indicator--76d892c3-a6b4-41e5-861e-7381bff37510", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286deb01-38c3-4417-9cde-740d5e5f5033", "sighting_of_ref": "indicator--76d892c3-a6b4-41e5-861e-7381bff37510", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6865bf3c-4867-42ef-89de-ed1bb43c481d", "sighting_of_ref": "indicator--2a989433-7963-48bd-83f1-89e1562faff0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20308960-ab0e-4444-8caa-6dc844dfdf20", "sighting_of_ref": "indicator--2a989433-7963-48bd-83f1-89e1562faff0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3361c3b5-3387-4c64-a70b-84d2ef88a1a9", "sighting_of_ref": "indicator--2a989433-7963-48bd-83f1-89e1562faff0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68456f26-2453-4e1a-8f93-9da4fef451fe", "sighting_of_ref": "indicator--1ca06632-fbb4-4715-b579-a6d984121b0f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc1a1f5-2e58-4f8e-a088-44fc41d79f24", "sighting_of_ref": "indicator--1ca06632-fbb4-4715-b579-a6d984121b0f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1fd564-3ec8-433b-9021-2739d82109f8", "sighting_of_ref": "indicator--1ca06632-fbb4-4715-b579-a6d984121b0f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6404f8-497a-4f78-869c-fd3fe9dab397", "sighting_of_ref": "indicator--9183797b-697f-4619-9b50-a56a015eddad", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd854991-175f-40ff-b8a9-63bc7331c274", "sighting_of_ref": "indicator--9183797b-697f-4619-9b50-a56a015eddad", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf29071e-834e-45a8-9035-a7bbfac59ec0", "sighting_of_ref": "indicator--9183797b-697f-4619-9b50-a56a015eddad", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1c6c83-2a06-4eaf-b324-8e2be94d0b25", "sighting_of_ref": "indicator--1437159f-5fe5-4581-9140-8407830adae3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e412fd8-f307-442b-becc-52eded7dbc49", "sighting_of_ref": "indicator--7d6edb6c-b7bc-45ad-bd16-078a603724d4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8518ad2-650f-4ca3-9ae4-cc11f299cde2", "sighting_of_ref": "indicator--846fb292-c05e-4199-b44b-01a55760f756", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d340161-9f60-47ea-a3bc-0b2b8816d2ac", "sighting_of_ref": "indicator--0be2dff5-039c-4944-8188-42dc8c599465", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177f6663-6eaf-464b-bc7f-74c364791157", "sighting_of_ref": "indicator--fc96b139-c4d5-4251-8c96-dbd1b2894a32", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f524eed-e481-470f-b147-2a5210d7aba3", "sighting_of_ref": "indicator--f19f0aab-2f8d-4a30-b69f-142d9fca2974", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e491631-b120-4029-9ea7-57b071967cdb", "sighting_of_ref": "indicator--017e18e7-a338-4996-8e5f-0a57d78ff7b3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e45fa96-ef35-4a46-b963-4bd93e207cf6", "sighting_of_ref": "indicator--5f6f9ce7-8d5a-4d9a-8478-b5c402d92bc8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04045c4-4045-4eef-825f-9fd4ac88f183", "sighting_of_ref": "indicator--57a4bfc2-21bb-47e9-85e5-66f0652bc118", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3df731-b707-473e-be91-03903898a3e2", "sighting_of_ref": "indicator--c064f730-4475-4c7d-a97d-381f1979b91d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28eeab9-c0fd-4975-bc03-d67c3fa8237f", "sighting_of_ref": "indicator--c064f730-4475-4c7d-a97d-381f1979b91d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994c5021-5d41-44be-aa96-6593643dc37a", "sighting_of_ref": "indicator--c064f730-4475-4c7d-a97d-381f1979b91d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f0cc51-9cbf-4630-87f3-e2edc1a09d18", "sighting_of_ref": "indicator--0bf1a82b-8cff-4f16-930a-2909456b241e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c264f0-3d21-48ef-aaf4-6ca6f8777127", "sighting_of_ref": "indicator--972ab3b3-bff3-4ff2-b3e2-e2772fa9f957", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8741dcf-cf0c-4d09-a497-42f6a1743750", "sighting_of_ref": "indicator--972ab3b3-bff3-4ff2-b3e2-e2772fa9f957", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d24c223-f665-4eb2-bbee-7faf857523bf", "sighting_of_ref": "indicator--a7ce025f-6953-4cc0-926e-0f6400330072", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a1f596-0270-4e4d-ad6f-983600f50cf7", "sighting_of_ref": "indicator--a7ce025f-6953-4cc0-926e-0f6400330072", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95d9d1c-f75b-4638-9ff8-265bff85f88f", "sighting_of_ref": "indicator--a7ce025f-6953-4cc0-926e-0f6400330072", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fbe8e3-8f5b-4d5a-8900-a93c139b0d4d", "sighting_of_ref": "indicator--14794b35-749d-4a04-8cb5-e287ae279f22", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb7c5cb-e511-42a3-a316-155bf1307b8d", "sighting_of_ref": "indicator--14794b35-749d-4a04-8cb5-e287ae279f22", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f57cf18-4b55-4480-9254-216313a68c08", "sighting_of_ref": "indicator--6489a051-4f8e-40bd-a23c-7d58df1666d3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a65452b-3dc5-471c-a218-412c40608524", "sighting_of_ref": "indicator--6489a051-4f8e-40bd-a23c-7d58df1666d3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6da5850-c1c4-4b03-9082-b9cb964ebc01", "sighting_of_ref": "indicator--6bf051e7-e7ba-42fd-8318-78229d5da434", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1aabf42-b562-4341-8498-2ea4b71ae2ed", "sighting_of_ref": "indicator--6bf051e7-e7ba-42fd-8318-78229d5da434", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e55002-44ca-4ece-8107-6dabc4728dbc", "sighting_of_ref": "indicator--fbdce9d5-0389-4c10-93ed-75f738efb148", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676af470-0e3e-44fc-b02a-021a79a4e14a", "sighting_of_ref": "indicator--fbdce9d5-0389-4c10-93ed-75f738efb148", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565d0a91-5ae1-47ac-8bca-d41561785248", "sighting_of_ref": "indicator--801fddd0-14ff-47fd-bffe-5b5151a52dbe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ff471c-2a81-403c-be86-4fcd958ccec0", "sighting_of_ref": "indicator--801fddd0-14ff-47fd-bffe-5b5151a52dbe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58646e5-1531-4fec-9a26-da8a36fe3652", "sighting_of_ref": "indicator--801fddd0-14ff-47fd-bffe-5b5151a52dbe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9300603b-5914-43a0-a63a-b0f5a70846a0", "sighting_of_ref": "indicator--5c112bfd-b004-4374-95c0-2db99bb1f081", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad31cc96-02eb-4504-8428-912cec1a9907", "sighting_of_ref": "indicator--d3fe7c9f-03a4-4713-9a87-c7489012ca0f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e734e0b-6730-452e-8d89-8926398dc260", "sighting_of_ref": "indicator--7aab7b8e-9439-4e63-b0cf-6288581d322d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8ea200-0d19-42b6-932e-f1a9ec58350e", "sighting_of_ref": "indicator--7aab7b8e-9439-4e63-b0cf-6288581d322d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704cbf1b-d5ff-43f5-950f-2c75737f129a", "sighting_of_ref": "indicator--7aab7b8e-9439-4e63-b0cf-6288581d322d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ef2bfd-6c8e-40bb-af0e-7726fa6dc191", "sighting_of_ref": "indicator--75b24fda-4a52-4b78-929b-196522ff5b47", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507b4e55-785f-4855-869e-2f1a97943d32", "sighting_of_ref": "indicator--8f673265-d4ae-408d-a512-75c36f5f0360", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5899188-9565-4787-97d6-8a70969b9889", "sighting_of_ref": "indicator--8f673265-d4ae-408d-a512-75c36f5f0360", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ca8529-5d56-4505-a018-01dca318d0c2", "sighting_of_ref": "indicator--22f74e3a-7676-421b-87f7-f98693c622e4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354e70c3-7a8b-4f09-80b8-a638c9f38aa1", "sighting_of_ref": "indicator--22f74e3a-7676-421b-87f7-f98693c622e4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f050dd41-f0d5-4a68-afcc-7ff42a62a7db", "sighting_of_ref": "indicator--22f74e3a-7676-421b-87f7-f98693c622e4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33274195-74bb-452b-8eb4-efc917d390f0", "sighting_of_ref": "indicator--4ba65878-cd48-4b3f-973a-04892825e533", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644c23da-714d-4ab5-a132-675ce7109f65", "sighting_of_ref": "indicator--4ba65878-cd48-4b3f-973a-04892825e533", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b60c20-d7df-48b1-9343-35faf9674bfd", "sighting_of_ref": "indicator--e1095cc7-2864-422f-8c15-9e65a3497612", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97fdcb7-5dae-4ae3-8d5e-ed1b869538f9", "sighting_of_ref": "indicator--6ad360d9-73c0-4b08-8427-77242b1b8a3d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a698ef1-3e2c-4359-997a-3b359f12316e", "sighting_of_ref": "indicator--6ad360d9-73c0-4b08-8427-77242b1b8a3d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419465b1-9e89-4371-a532-43bac7d3f50c", "sighting_of_ref": "indicator--484121ef-eea3-4277-9596-922bd5d41fe3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea55b9d4-2ddb-409f-85e1-2c84789bd9ce", "sighting_of_ref": "indicator--484121ef-eea3-4277-9596-922bd5d41fe3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4eb940-00a4-4bd0-99ec-2d2f64bf5dce", "sighting_of_ref": "indicator--06e9d768-39d9-4633-b74d-f0c4615d8fec", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176b2892-562f-4b9f-9648-0b62c6362157", "sighting_of_ref": "indicator--e3a71e57-c965-4396-b356-9ae1d247ba5a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bae910-a6a1-49a6-be35-4f2863419356", "sighting_of_ref": "indicator--7e923fb8-ee31-4de8-8280-f97815f9c702", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd11900-643b-44ec-a22b-0716b562d092", "sighting_of_ref": "indicator--6e05787e-8726-4c65-b133-739ad66d7545", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3ad9d4-5d00-4332-9532-5dc3d2f82334", "sighting_of_ref": "indicator--6a8e971e-e290-415f-abc0-43bfbe11b915", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356013be-fb7d-47dc-bd49-7ea3c4269f38", "sighting_of_ref": "indicator--6a8e971e-e290-415f-abc0-43bfbe11b915", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ee85ce-d7d3-405a-bf61-dfd9f4797f4d", "sighting_of_ref": "indicator--6a8e971e-e290-415f-abc0-43bfbe11b915", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6cb5abb-83e2-4f24-b0b2-6a09cc8b1042", "sighting_of_ref": "indicator--62c6fc96-bbbc-41ee-b508-aefa71cd9c2a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b47375-ddf0-482a-97d6-260508f7cda4", "sighting_of_ref": "indicator--cfbed2b2-2fc7-4b49-8d4c-43eaecd14d86", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa5fe57-e87e-4889-89ba-583060d578b7", "sighting_of_ref": "indicator--5a5bc987-0a42-4796-924d-14e63e9ec61f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd5ef1c-3441-464f-aa88-82b4fcbd0e99", "sighting_of_ref": "indicator--08b139d8-4d96-41bf-9cc6-22fd7ef43c56", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474b9d58-1524-4439-b3e0-c48ac00bb9d0", "sighting_of_ref": "indicator--6b023f42-895d-410c-bb40-254c5b34210e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df664f3b-b776-44fa-be74-291e40c17cde", "sighting_of_ref": "indicator--6b023f42-895d-410c-bb40-254c5b34210e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d622c80-b55e-4130-878c-317fece99833", "sighting_of_ref": "indicator--c2252e51-4857-4687-9557-996d6f07f16f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edb2dbc-d052-4e55-a795-e44075bed6e9", "sighting_of_ref": "indicator--b864c3c2-fbb4-4e38-8ca0-6f5d42b36d76", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe7be5d-e5db-4e9b-9435-7d4461e571e4", "sighting_of_ref": "indicator--1b4f7ec3-21f1-4012-9a88-11ca52254004", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97261c9b-e858-423c-9ac2-f4bbb81f05a2", "sighting_of_ref": "indicator--2eea0d1b-ad28-4014-baad-af4fc020e710", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90a740d-014b-486c-84ff-5285ae88481a", "sighting_of_ref": "indicator--b14b4d02-def7-4455-a98c-6d0dd6eb85d8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94784ef9-16ad-43ce-bc61-0478951b003a", "sighting_of_ref": "indicator--c2cd7f87-e158-4e38-a66a-be0343935310", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b790aa-c0d3-4ae5-b704-5588bfb98760", "sighting_of_ref": "indicator--c2cd7f87-e158-4e38-a66a-be0343935310", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e542a3f5-0e5b-488b-b3f0-bf40d744cd9f", "sighting_of_ref": "indicator--c2cd7f87-e158-4e38-a66a-be0343935310", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2369855-9f8d-4bd3-933a-b31f8596b0ad", "sighting_of_ref": "indicator--a8e81882-a18d-49f0-bb60-faf62ba0161c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43f8530-6984-459f-8e2f-c80cc545ccc8", "sighting_of_ref": "indicator--9fcf9bda-1b23-46f7-bc23-3718103ec2bb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f80502-0c85-45ae-b784-62c01e2d0a23", "sighting_of_ref": "indicator--9fcf9bda-1b23-46f7-bc23-3718103ec2bb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c64422-d45a-410b-89ac-6ff960ee9f23", "sighting_of_ref": "indicator--60ebc716-0867-466d-80e6-cd799450e649", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb984f2-6251-42b9-b4cd-3fba83827464", "sighting_of_ref": "indicator--0450b1a4-d3a9-4a8c-a654-6e8a95f23003", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc59472-597f-4052-9b4d-3389bff973bb", "sighting_of_ref": "indicator--992ada70-4055-49d7-98cc-e2fce28e1967", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f718057-ba76-4691-bc55-2382f1c7f9c5", "sighting_of_ref": "indicator--5ade68ce-6dc2-4845-939b-fbb661f67757", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e45621b-0b44-4cd1-94a5-6a9ae2e6f210", "sighting_of_ref": "indicator--0696940f-7710-4cbc-93f4-4f4279f01750", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526b0398-04c2-4d02-bf29-4bdbc8e75cf8", "sighting_of_ref": "indicator--dd7bffb1-4443-4c70-a2cb-da9f6fe27fc0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570820f2-835b-4ed9-bbc5-be234a82841d", "sighting_of_ref": "indicator--e3bb0bde-2c19-4cf6-a9d7-62c8f14a43e6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2d37d2-073d-4330-be83-e2284e286902", "sighting_of_ref": "indicator--dcea71ca-e790-40d0-a9ba-e9552aa55b5f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3172d326-5dde-4681-948f-ed8998b6481b", "sighting_of_ref": "indicator--842a97e0-aec7-4213-9387-0c934c9244fc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fd4462-4857-4c7d-a13f-c3c1c8b735b9", "sighting_of_ref": "indicator--8f19c035-4a0c-40a0-bb21-36250bd0f941", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fecc7c4-3858-4d9c-bf3a-d63a0023060f", "sighting_of_ref": "indicator--3a169862-47ff-4c7c-9e9d-7260024e8d1f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9191385-9568-4192-b181-8e69db47af40", "sighting_of_ref": "indicator--52dd3b35-e242-4744-959b-04b1690ba77f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17a4915-ccce-4167-a26c-c8b5ad2a554a", "sighting_of_ref": "indicator--9bd49378-a950-4bb7-b50f-5e5fd6a90c11", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795bc1aa-b49c-4819-9d5f-3b7746e1ebc0", "sighting_of_ref": "indicator--9bd49378-a950-4bb7-b50f-5e5fd6a90c11", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac28f5b-34c6-42f1-a5fb-5a045d70cea8", "sighting_of_ref": "indicator--314e801f-bf8d-47f9-a28d-eaa980361c5b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2325dd-f231-457a-9eb8-d3a2949dd6dc", "sighting_of_ref": "indicator--8bad51e8-c9cf-4b86-94fe-8cdfd053d43e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eed5464-f3f0-4968-b628-148be5b84622", "sighting_of_ref": "indicator--05209c8e-4ed0-4dc4-90f0-eda002d38050", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915aa479-fe8c-461f-844c-c2951f5d4fba", "sighting_of_ref": "indicator--e878e3a7-5872-462d-8d3e-49b7da31a1da", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611f0479-b00e-473a-b881-44119a989b15", "sighting_of_ref": "indicator--5a1c0dd3-bd38-413b-a1a1-46d09f395a3c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82bea589-e588-4af4-8fed-5bdb5de3514b", "sighting_of_ref": "indicator--72a31d57-407f-4f6b-854e-8681ad9c2c2a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0fcbc4-ac24-443e-bbe1-17001044fe9b", "sighting_of_ref": "indicator--72a31d57-407f-4f6b-854e-8681ad9c2c2a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c64bcb3-ee52-4698-9c09-c7f22da96ccc", "sighting_of_ref": "indicator--0a45ceef-41fd-4653-a828-1d5764fdf3ab", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfb3ea5-4796-4a14-8c13-5cf609874a47", "sighting_of_ref": "indicator--39cace49-1a55-4112-a7fc-699b15c5a44b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6546e96f-fc2b-4592-b731-b0e72851b1ea", "sighting_of_ref": "indicator--bb385640-63f8-426c-aafd-8ccc97d7918f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9410f0af-1843-4356-b41b-af8c1b163e81", "sighting_of_ref": "indicator--57c811ab-046b-4117-8de7-eb95d1dd6531", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262abe24-f695-4b49-bcb9-f8cfca4e19db", "sighting_of_ref": "indicator--44861e7b-808b-4073-9daf-a1f69822a1eb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eecbfbde-ddb1-4a01-9655-da8d875f8b5c", "sighting_of_ref": "indicator--8cc89de8-80d9-49bf-9c07-196927b0548e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69745dc-edbe-4af0-8fe6-c52d1ea622c8", "sighting_of_ref": "indicator--8cc89de8-80d9-49bf-9c07-196927b0548e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa0b1d4-2cbd-4f8e-837f-25e5777a04ab", "sighting_of_ref": "indicator--048685dd-14d1-4cc8-9142-7a3a618573f9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52f7777-b08d-4e0f-b722-2a1e20617689", "sighting_of_ref": "indicator--8b86dcb1-d107-43f5-bd04-c7a9704cced9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348a90c4-7f22-4d57-bb42-b818029c334d", "sighting_of_ref": "indicator--acaa7ce9-ef34-4273-982f-a7bdebaf35d4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7414b776-e348-445b-823f-ffc8ce06f00e", "sighting_of_ref": "indicator--edd2a57d-6fbf-4d1a-98ab-1e12362f6ea9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e179e4b1-da7d-4554-a47e-fa4faed911c5", "sighting_of_ref": "indicator--b627fe47-a9d8-4b1a-a3bc-823dd09527b4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102eea60-5494-4d5f-aacc-5109e9af0ef8", "sighting_of_ref": "indicator--bbdd0375-1391-4d42-94c4-a4b3bbfd24b7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf86b0b-40c3-4000-ba10-24b90b5246e5", "sighting_of_ref": "indicator--bbdd0375-1391-4d42-94c4-a4b3bbfd24b7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68703e6f-745c-4d68-b780-5d89ba428f22", "sighting_of_ref": "indicator--1287e087-91df-4818-832f-57d7f9513966", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35385417-1ec0-4534-9985-6f0e5e88c2fd", "sighting_of_ref": "indicator--2d8c3e64-7a9c-40a7-9aaa-6d2150b15e5d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81a3a29-de19-4dee-b8b8-fbc83f63cb84", "sighting_of_ref": "indicator--4ce933d9-98e7-4112-9b91-c7ef6be1ca93", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c7af6d-fcf4-4ad4-990b-85e48755c5c6", "sighting_of_ref": "indicator--139f45d7-7b34-4763-ae2c-a63b171a511a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099bde40-b83d-4118-a374-bf4574e1a125", "sighting_of_ref": "indicator--139f45d7-7b34-4763-ae2c-a63b171a511a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff83cd9-c3bf-466c-aaa8-44bc53cc685c", "sighting_of_ref": "indicator--7729549b-42ef-4992-9da8-00a2903511bb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab03ed3-2aa0-4503-869f-7fb3e636fec3", "sighting_of_ref": "indicator--eae10c99-b6ef-481d-937a-72a4652766f3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001f2a69-7c91-4426-81c2-f9f6a09fbbd6", "sighting_of_ref": "indicator--eae10c99-b6ef-481d-937a-72a4652766f3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c392ffa-3853-4125-ae51-b59caaf4cf39", "sighting_of_ref": "indicator--56b44d78-14b5-4e07-9d0f-04230eb02b2d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7d8baf-9775-44b6-a934-45bd33d20de7", "sighting_of_ref": "indicator--460e135b-1579-4e13-aa07-d4b462327939", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3830ea1e-ea27-4030-a78e-a01ca6aec29b", "sighting_of_ref": "indicator--460e135b-1579-4e13-aa07-d4b462327939", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c1f627-6446-4af7-b6cc-cd4cad1532bd", "sighting_of_ref": "indicator--8caa4c5c-8740-49f4-a87e-a57fb4102d1c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614783c9-53e7-42c0-8f23-5c327399e880", "sighting_of_ref": "indicator--8caa4c5c-8740-49f4-a87e-a57fb4102d1c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773f06aa-8157-4296-b280-7f8ea8aafff3", "sighting_of_ref": "indicator--04acbb4c-4a54-445b-9730-29862879d000", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d8532e-cbae-4012-99fa-46e646432ac4", "sighting_of_ref": "indicator--ee3402bd-8dab-4391-aab9-da1ef117413a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f504e80-6203-474b-8bb2-038fbc49dea6", "sighting_of_ref": "indicator--cd1fd7bb-7d2b-4d30-9865-36ac3aad0152", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1acfa74-782d-4488-85cb-1257cb86fe94", "sighting_of_ref": "indicator--cd1fd7bb-7d2b-4d30-9865-36ac3aad0152", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce3c646-301c-40f8-9d54-7c99e4670cff", "sighting_of_ref": "indicator--2c8d575e-42c4-4dcd-8dca-2f41aeb87bc4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50e1c32-4fc5-4c84-aa21-23d6494f96d5", "sighting_of_ref": "indicator--f6f06cc9-1795-4c53-9d5a-41c987be535c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5d44e5-a625-47f2-a304-82f9783f248d", "sighting_of_ref": "indicator--f6f06cc9-1795-4c53-9d5a-41c987be535c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4000b1-eaf6-4c17-933b-37c4c9513248", "sighting_of_ref": "indicator--80260760-7f40-4bfe-ad93-1ea5392eebeb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ae0c7c-2520-4dbf-87f3-6c9ad3be8e7b", "sighting_of_ref": "indicator--788d1a48-3485-4352-9052-fe4cf226d98f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f871399a-2a83-4074-980e-d903bff8b91b", "sighting_of_ref": "indicator--142358e1-5eda-4b0c-a41a-f46fade32d02", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866e7ced-463d-4f81-8d58-ef4f2ab8353c", "sighting_of_ref": "indicator--142358e1-5eda-4b0c-a41a-f46fade32d02", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82ef299-c233-4944-a257-291ee5b0c73c", "sighting_of_ref": "indicator--3e812f91-e762-4541-88af-e60328f4e994", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7f5c9a-bdc2-4d6c-a94b-325baa1805cb", "sighting_of_ref": "indicator--3e812f91-e762-4541-88af-e60328f4e994", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb639ed-c3f9-496a-b3ec-c8021ae9019e", "sighting_of_ref": "indicator--e0611a16-d660-49d7-a740-7a6750aadf7a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02b2674-9a7c-48d7-bda2-27b4ff6c3f57", "sighting_of_ref": "indicator--8de4c3f6-ed1a-4d66-ac94-88117771c6a2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e5091a-8b6d-44a0-80fc-3c939a6261fa", "sighting_of_ref": "indicator--289286c9-5c7e-4a62-a8fe-20993b736f3e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6732460b-ec78-45ea-9a4f-15e0e8f751e3", "sighting_of_ref": "indicator--35add15b-d399-446f-adb5-65a131d3842b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ad20d7-457b-450f-9d48-bd083bc122f4", "sighting_of_ref": "indicator--24f83d47-1d1b-4dac-90be-45792f6e3350", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f73de3-e43c-444a-9f35-e08d9ca6b033", "sighting_of_ref": "indicator--ec951f3a-e45d-45bd-9aeb-18018a2d455c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98ddc4c-497f-4636-8b81-66948330e299", "sighting_of_ref": "indicator--54f1699a-1840-471f-9f34-efd334a39575", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13383ca-46fe-4130-ab5f-5fe66d239714", "sighting_of_ref": "indicator--ca29fdb3-4790-4024-aa28-d0db99c9843c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb5f90f-23d3-4195-8f25-849fc0fc4f62", "sighting_of_ref": "indicator--ca29fdb3-4790-4024-aa28-d0db99c9843c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461c6162-e9a9-49b2-8c03-9f23ccfd8c4a", "sighting_of_ref": "indicator--eeebf5e2-7a63-4772-a938-dc32c8cd7cc7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d3f118-a12b-45f1-9227-cf7ee5549b84", "sighting_of_ref": "indicator--cc9830f9-8699-4286-b069-b863f67a0035", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d19478-84bb-4872-a729-3e30b6b10ffa", "sighting_of_ref": "indicator--6cbb9f1d-dce2-41fd-b910-7376bb606447", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1bdcaf9-7084-4df0-83fd-609a792be6fc", "sighting_of_ref": "indicator--6cbb9f1d-dce2-41fd-b910-7376bb606447", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490fdda6-d749-4254-8bff-327b42992c01", "sighting_of_ref": "indicator--6cbb9f1d-dce2-41fd-b910-7376bb606447", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d96856d-9f63-4d7d-b903-e578479e371b", "sighting_of_ref": "indicator--93646f2a-773c-4a90-9172-64f45290f4a7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc386df-1ace-452d-b4a0-28d3d2c2cb29", "sighting_of_ref": "indicator--1e91c37b-7069-497d-aa90-ad16cc3e1a77", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c5075d-c83d-4c93-a588-4c3eb93fc5ad", "sighting_of_ref": "indicator--d151eb0e-8c22-4646-91c5-508de04b873c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125f70e6-30bf-4c58-82a6-a8f71321da3e", "sighting_of_ref": "indicator--d151eb0e-8c22-4646-91c5-508de04b873c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176d6416-2381-4cdb-a9da-3432c2af68d7", "sighting_of_ref": "indicator--173d1ecd-5903-4c84-b3c5-68bef98f4309", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f24e7be-9f01-4f35-940a-3910745e98a8", "sighting_of_ref": "indicator--173d1ecd-5903-4c84-b3c5-68bef98f4309", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70202a48-9a8f-43c9-b99f-f8597ea4c966", "sighting_of_ref": "indicator--9e469b74-f167-430e-a2fd-ca67aee81d52", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46738ce5-c8ed-4954-8a53-5b62faf07bb6", "sighting_of_ref": "indicator--bccc9a16-b831-49d2-8c4d-68f672bfa32d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a35e23c-c721-40fc-b27a-f3f7d7302e5a", "sighting_of_ref": "indicator--a0f68856-eab5-413b-b11c-03cfb401bf11", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144cb1fe-dc5e-405c-86e1-4154d1b84461", "sighting_of_ref": "indicator--6675b8d2-b03b-4807-8d3f-e2e0292fc2d8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0be176-5ff8-435d-ada3-dc067bd7ca07", "sighting_of_ref": "indicator--d7c410c5-a1e8-404e-aab1-dc113f1897e3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9294b932-dbe7-4a44-879d-f4d8a686af2f", "sighting_of_ref": "indicator--f6e64875-3d9d-4b9d-9185-40635cd69664", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a7b604-c7f5-412d-8a04-2756c1d6c0a2", "sighting_of_ref": "indicator--fb3f76ea-d527-4547-8aba-6dc61a9d0a58", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83af8600-333e-4011-9d95-f4fdec66f143", "sighting_of_ref": "indicator--fb3f76ea-d527-4547-8aba-6dc61a9d0a58", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8af80a8-dad5-456e-a689-492d315ce18d", "sighting_of_ref": "indicator--fb3f76ea-d527-4547-8aba-6dc61a9d0a58", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550d52e7-eff6-46f9-a11b-3f8b4191e5e8", "sighting_of_ref": "indicator--13b77b7a-9f28-4d4d-87ac-1c14410efedf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f3ff15-3098-4196-bfdf-f3ca2a3b766b", "sighting_of_ref": "indicator--b26085b0-cf1e-4e90-8ab7-199feaeddbcf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90edf39-80d7-472e-bafc-375478ae6725", "sighting_of_ref": "indicator--1e523ec3-902a-41ab-99c8-51f23cc03158", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8eca972-60be-46a6-b70e-95298ad6746d", "sighting_of_ref": "indicator--3b7f90b6-6e15-4771-88e3-5218debc4133", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d454d296-57e1-454f-8c44-e0cf0cda28eb", "sighting_of_ref": "indicator--d5688d7c-5c66-4790-9519-e061dd2696a4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e44d8f6-e371-454a-9ded-3e18aeb41081", "sighting_of_ref": "indicator--f1fff60b-6e26-4beb-8225-2650cc9f2508", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04896229-07a5-4be1-9c78-4648a0b63d59", "sighting_of_ref": "indicator--f1fff60b-6e26-4beb-8225-2650cc9f2508", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386d809d-4ae9-4bd8-9ec1-f87901fe0e6a", "sighting_of_ref": "indicator--f1fff60b-6e26-4beb-8225-2650cc9f2508", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a65bb1-f696-41b6-8be2-478c06c39335", "sighting_of_ref": "indicator--73246251-5fc3-4031-b801-9de97d37b197", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e9f64d-f62f-4d78-b85c-2c2ed661aed6", "sighting_of_ref": "indicator--73246251-5fc3-4031-b801-9de97d37b197", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a091511-98d5-428e-bccd-527de00557ab", "sighting_of_ref": "indicator--73246251-5fc3-4031-b801-9de97d37b197", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f11098-80bb-4256-af4b-ee8aea938d23", "sighting_of_ref": "indicator--0c8e9834-9ca1-4578-bc63-43da637e6a06", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455fe9dd-613b-4884-adba-ba9fcaf8ff94", "sighting_of_ref": "indicator--0c8e9834-9ca1-4578-bc63-43da637e6a06", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66063a0-cbf0-477d-97a1-f4b1f97a0cb0", "sighting_of_ref": "indicator--0c8e9834-9ca1-4578-bc63-43da637e6a06", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39324a80-d6ab-4cfe-8764-012560c9b4d1", "sighting_of_ref": "indicator--cbca1acc-1eae-41a0-bf8c-1afa1e51577e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebdcecf8-2d32-4bcc-8063-200e76de6816", "sighting_of_ref": "indicator--cbca1acc-1eae-41a0-bf8c-1afa1e51577e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f585ccd2-a7da-4472-b6fc-41009157f560", "sighting_of_ref": "indicator--6c7bee47-f46e-40b4-ae39-717e825e1197", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfeaebab-0738-4855-ae6a-4fbc54281f75", "sighting_of_ref": "indicator--47b695d7-6212-40fa-9f00-16e64aca32dc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20a012a-345c-4944-ba52-3364a2e8b98e", "sighting_of_ref": "indicator--1a229d1c-7dfc-4a42-8903-162f08c76112", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0156588-e0d9-47bf-a474-c47710b4f64c", "sighting_of_ref": "indicator--0178ca6f-6b6d-4413-b5f8-51955e9d920e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af92ece4-39cb-44da-9bc3-b71a5a2f19b6", "sighting_of_ref": "indicator--0178ca6f-6b6d-4413-b5f8-51955e9d920e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660a5a2b-bcb9-41c4-ad36-66502799ecb5", "sighting_of_ref": "indicator--0178ca6f-6b6d-4413-b5f8-51955e9d920e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462a14ce-f13b-4e47-a33d-54672babd53d", "sighting_of_ref": "indicator--a7786692-b126-4bce-9253-9ca00740ca8d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4c0fe6-56db-4992-aa46-2c19c652486a", "sighting_of_ref": "indicator--a7786692-b126-4bce-9253-9ca00740ca8d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d715e708-2ece-48fa-a511-0df6e3c3b88f", "sighting_of_ref": "indicator--a7786692-b126-4bce-9253-9ca00740ca8d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568d59dd-aef4-42fe-a5ca-1521038e515e", "sighting_of_ref": "indicator--0ddf609c-1c3d-4608-a12f-504f39481b8d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944e8587-72d8-423c-ae05-c9dabbcfcdd8", "sighting_of_ref": "indicator--0ddf609c-1c3d-4608-a12f-504f39481b8d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66956013-9859-4ceb-8d36-a583b06e25e2", "sighting_of_ref": "indicator--0ddf609c-1c3d-4608-a12f-504f39481b8d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e4f595-ae53-4218-98ad-f18b5965eb5c", "sighting_of_ref": "indicator--c81bd203-80a9-4215-84a0-2aefa5916b29", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d2d446-e8d1-4cef-97db-43ecad5fade0", "sighting_of_ref": "indicator--c81bd203-80a9-4215-84a0-2aefa5916b29", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e696e0bd-3973-4ef0-a010-a8a45565c483", "sighting_of_ref": "indicator--c81bd203-80a9-4215-84a0-2aefa5916b29", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90e4869-7475-4493-9e6f-8d1db091594c", "sighting_of_ref": "indicator--d3539816-e941-4e53-9ef7-566f603adc61", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4057ca5-1c7a-44da-8b3a-94455879c6d0", "sighting_of_ref": "indicator--d3539816-e941-4e53-9ef7-566f603adc61", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b811110-3b64-4411-b655-4906638bec98", "sighting_of_ref": "indicator--d3539816-e941-4e53-9ef7-566f603adc61", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7dd39d-472c-4954-9fe1-1e90d03df41a", "sighting_of_ref": "indicator--53161093-94e8-4824-a583-4a3551f3f125", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d6c052-3523-444b-a8c9-6f0b69be4e1c", "sighting_of_ref": "indicator--53161093-94e8-4824-a583-4a3551f3f125", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f45a8b-0017-470d-b78d-f9c6cd229cac", "sighting_of_ref": "indicator--53161093-94e8-4824-a583-4a3551f3f125", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8dd4c00-4151-4320-a9f5-e4abec99bc12", "sighting_of_ref": "indicator--fc44b822-7cec-43e6-9e37-3d58d3d516fd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd0b89a-c689-4e13-bc79-8bf5dad23c63", "sighting_of_ref": "indicator--fc44b822-7cec-43e6-9e37-3d58d3d516fd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15af157-96fb-4619-99f1-b17051f3e3f5", "sighting_of_ref": "indicator--fc44b822-7cec-43e6-9e37-3d58d3d516fd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2fb3fc-7959-4a71-a936-c23f985e76d0", "sighting_of_ref": "indicator--9ca1124b-051e-45b6-9781-eb19295694a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f628bb-9bec-4570-925b-6aba9945ef32", "sighting_of_ref": "indicator--9ca1124b-051e-45b6-9781-eb19295694a7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca581c4-1662-4c8a-a17e-9340c43394e4", "sighting_of_ref": "indicator--9ca1124b-051e-45b6-9781-eb19295694a7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d556315d-23ff-47cc-8423-9e273a888b4c", "sighting_of_ref": "indicator--7a6e07af-f3b7-4892-be45-0bc077cb926b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4632ce7a-7fab-4699-8c07-8e3069c91073", "sighting_of_ref": "indicator--7a6e07af-f3b7-4892-be45-0bc077cb926b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d642a3fb-0309-4aea-a167-0f4e87b8fc89", "sighting_of_ref": "indicator--d56d99fb-8bb7-4de9-96fc-fc6227a89794", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9776a08-39a7-4b15-af09-8067455d995a", "sighting_of_ref": "indicator--d56d99fb-8bb7-4de9-96fc-fc6227a89794", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84fd3b0b-51aa-4375-ac44-4625aae42831", "sighting_of_ref": "indicator--d56d99fb-8bb7-4de9-96fc-fc6227a89794", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0524fd8-9a6b-4f82-b279-82e305e3378c", "sighting_of_ref": "indicator--40d7dac4-2ac3-4dd1-a017-f28b38da9e7a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5eba39d-dbca-43d1-a2d3-3bc3e84b7ebf", "sighting_of_ref": "indicator--40d7dac4-2ac3-4dd1-a017-f28b38da9e7a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcd513b-873e-45e6-9663-b5fafeeae907", "sighting_of_ref": "indicator--40d7dac4-2ac3-4dd1-a017-f28b38da9e7a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d9c4d4-1068-4dbc-a6f6-fdbb88576ebe", "sighting_of_ref": "indicator--7d8b1a68-8bbe-4215-aab3-7b7e41f34bfd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a45b3e0-acb3-4968-be4c-565f84219978", "sighting_of_ref": "indicator--7d8b1a68-8bbe-4215-aab3-7b7e41f34bfd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654cfe10-aff4-4903-85a3-35030c332b22", "sighting_of_ref": "indicator--7d8b1a68-8bbe-4215-aab3-7b7e41f34bfd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c0d14e-08a8-48aa-942d-6f8e568f7443", "sighting_of_ref": "indicator--55dab615-d356-465e-85dd-ee36122dbc30", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749cef9c-4a72-462d-8b79-d49c6353ee0f", "sighting_of_ref": "indicator--96d4d19f-ec30-48c8-917c-db04812465aa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd0c8c8-7c26-4e14-8c97-40156c1ccc01", "sighting_of_ref": "indicator--96d4d19f-ec30-48c8-917c-db04812465aa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794d2811-a3ad-4de7-a3ca-15e12f77a36b", "sighting_of_ref": "indicator--344cb8fe-3510-403d-b91d-9ed6837ef5c2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67569c9e-1ce7-47c5-a768-3008e2fad91e", "sighting_of_ref": "indicator--344cb8fe-3510-403d-b91d-9ed6837ef5c2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a9d8bf-2faa-4574-b6cc-485a245e164d", "sighting_of_ref": "indicator--288e3d98-339b-41ad-be5c-9c2a2037575a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65dbe542-8689-4db1-b817-3112755d1949", "sighting_of_ref": "indicator--288e3d98-339b-41ad-be5c-9c2a2037575a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6496f59f-9b60-4ff4-a066-01a038c14cd7", "sighting_of_ref": "indicator--f3a1aef2-117b-4227-981d-a381206b3717", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75eca71-79ed-4892-831a-7016955676e3", "sighting_of_ref": "indicator--b0006750-52a0-42ec-8427-32fd9316a301", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a93ecef-ff29-45ae-af40-7a645fb2be29", "sighting_of_ref": "indicator--8b07168a-7f60-4d2e-af2b-e32cddbbdfd9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296a9ead-4bdb-4e61-8a7d-cd98ff4e148b", "sighting_of_ref": "indicator--17c56180-90b0-4f91-a281-76730db465b4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c91e649-79b6-4f2d-878c-0c9e0e14ba4c", "sighting_of_ref": "indicator--62461467-25a6-4330-81f8-91fd6966a5b6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824d14aa-52fb-47d3-b806-faf2809fd058", "sighting_of_ref": "indicator--007814ea-5c9f-4715-9967-496d284f0fa2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ef9f68-32af-4334-98fd-13c7a4a2db21", "sighting_of_ref": "indicator--bce93baa-1313-4f70-8933-2d2d1d81115f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5a6b47-6846-466f-9bbd-ce5f85fb01df", "sighting_of_ref": "indicator--bce93baa-1313-4f70-8933-2d2d1d81115f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664b63dc-973c-4823-8521-a7f7d0597e31", "sighting_of_ref": "indicator--bce93baa-1313-4f70-8933-2d2d1d81115f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b0d344-c946-4cbd-bd83-b63038262c71", "sighting_of_ref": "indicator--3825bfe8-49c4-4520-89d3-3fb7d4802699", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686978c6-801a-44bd-b91a-4376f2c68fa1", "sighting_of_ref": "indicator--3825bfe8-49c4-4520-89d3-3fb7d4802699", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c8b14b-bd41-42a2-b795-71091cd09c0e", "sighting_of_ref": "indicator--49d1012f-7230-41f4-a1af-1f9103548e50", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0be4884-2804-4b3e-a70f-dcef0e6bd48c", "sighting_of_ref": "indicator--76241a81-91ee-4460-b1b5-6bcc22b07254", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33b5c5d-dd9a-4a7a-9618-4e325639d142", "sighting_of_ref": "indicator--76241a81-91ee-4460-b1b5-6bcc22b07254", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8435e914-663a-457e-9540-8547081a002a", "sighting_of_ref": "indicator--20fc0f97-2757-4b87-8229-fe9ab71299d9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc36ef25-292e-4a02-bcfa-8667ac71e99a", "sighting_of_ref": "indicator--20fc0f97-2757-4b87-8229-fe9ab71299d9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b21818-27f4-4740-8601-7bb9e91509ab", "sighting_of_ref": "indicator--20fc0f97-2757-4b87-8229-fe9ab71299d9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59099552-a536-44f6-acb9-5bc2482919c1", "sighting_of_ref": "indicator--44f85f88-3f89-43d8-b1df-823bb7832cee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cc12b6-dc06-4e14-b293-b36cf11a302e", "sighting_of_ref": "indicator--44f85f88-3f89-43d8-b1df-823bb7832cee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7205fed-ad16-4daa-908a-d932db9fd701", "sighting_of_ref": "indicator--44f85f88-3f89-43d8-b1df-823bb7832cee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1643de-3cf9-43f9-be2d-caa42d72b088", "sighting_of_ref": "indicator--8ac7df8e-34ab-4557-9c79-6fdac80259f6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3037083a-5300-48a2-811c-0e3cf49a2f59", "sighting_of_ref": "indicator--8ac7df8e-34ab-4557-9c79-6fdac80259f6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2a8575-34d2-4196-946d-54bc9d679400", "sighting_of_ref": "indicator--93ce12e5-ae28-4e3a-bc54-f992a2d52ca1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f6e852-ae65-4996-bd34-3f777ec78c70", "sighting_of_ref": "indicator--93ce12e5-ae28-4e3a-bc54-f992a2d52ca1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c561c011-4138-4783-8e79-ad777566386c", "sighting_of_ref": "indicator--93ce12e5-ae28-4e3a-bc54-f992a2d52ca1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43cee1c-9db1-4fd4-b158-d0574f52f6e6", "sighting_of_ref": "indicator--c93274eb-3b72-4c3d-94a2-c25678dc6d56", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83ccd34-5606-4c0e-adf6-e45faaf09bf4", "sighting_of_ref": "indicator--c93274eb-3b72-4c3d-94a2-c25678dc6d56", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2f5c86-92b0-4c5e-a07e-6170a53bb483", "sighting_of_ref": "indicator--c93274eb-3b72-4c3d-94a2-c25678dc6d56", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd6a0d7-3703-4d02-8797-cd6f22b815c7", "sighting_of_ref": "indicator--d3e70041-b620-41d4-aa74-bce9f1f0642f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001c8ea0-b722-4bdc-a905-55207677ca17", "sighting_of_ref": "indicator--d3e70041-b620-41d4-aa74-bce9f1f0642f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba5d2f4-4ecd-4bca-a5c4-5916feb7128c", "sighting_of_ref": "indicator--d3e70041-b620-41d4-aa74-bce9f1f0642f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66064d0a-c4dc-4c61-8359-07cb39f361d5", "sighting_of_ref": "indicator--643a61e2-203e-498a-88ef-25bb1a59fbc3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5eca41-b900-41d4-b6b9-c205b29b4042", "sighting_of_ref": "indicator--643a61e2-203e-498a-88ef-25bb1a59fbc3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3efd615-af76-40ba-9fa0-20b55c2e1d06", "sighting_of_ref": "indicator--643a61e2-203e-498a-88ef-25bb1a59fbc3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8580add0-fe51-4eb3-b682-279eaca663da", "sighting_of_ref": "indicator--4d68d686-72e8-4963-a9c9-ecb01728e875", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecabe0f-de13-4b6a-95c2-4fbd950cb65f", "sighting_of_ref": "indicator--4d68d686-72e8-4963-a9c9-ecb01728e875", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db2a559-371e-4b99-9ecd-65803fd951ab", "sighting_of_ref": "indicator--4d68d686-72e8-4963-a9c9-ecb01728e875", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedfb8e3-e42e-46d3-9158-a5446583c73e", "sighting_of_ref": "indicator--89b2fd3e-ac09-47cf-bb88-581ca5791dc6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826ea86e-3039-4a19-b223-0f6fcad6850f", "sighting_of_ref": "indicator--89b2fd3e-ac09-47cf-bb88-581ca5791dc6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feca615e-e09f-45a9-92df-abad5e202dfe", "sighting_of_ref": "indicator--89b2fd3e-ac09-47cf-bb88-581ca5791dc6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1415dd57-b151-4998-b0db-d302346bd3d8", "sighting_of_ref": "indicator--6262d5e7-c7ae-4f58-bbc1-0ad13b83e714", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d3ec35-c56e-4fe9-9a56-78e5a75e4ab6", "sighting_of_ref": "indicator--6262d5e7-c7ae-4f58-bbc1-0ad13b83e714", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f93ffe-895a-4759-a885-66156d40bd9f", "sighting_of_ref": "indicator--6262d5e7-c7ae-4f58-bbc1-0ad13b83e714", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28227047-ed8f-43ec-ace6-e48ca3f7b765", "sighting_of_ref": "indicator--210f62b5-e6f6-488e-8dc2-343a43e537ba", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8948e1-9f40-462e-8c46-52e43a7bedf7", "sighting_of_ref": "indicator--210f62b5-e6f6-488e-8dc2-343a43e537ba", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3329b25c-ec23-4769-a310-b944f7ddcee4", "sighting_of_ref": "indicator--210f62b5-e6f6-488e-8dc2-343a43e537ba", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d020cada-d5ae-4017-9c33-06f39adeaed0", "sighting_of_ref": "indicator--a2f71b9d-3340-42c7-866c-80e50b26d3b4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a91d98-7534-4996-909f-c4e2f5dcde61", "sighting_of_ref": "indicator--a2f71b9d-3340-42c7-866c-80e50b26d3b4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464d1820-0930-4237-97dc-b9c4d4c1c78c", "sighting_of_ref": "indicator--67e66a7c-6899-444e-a464-05e996301fa3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea1bf14-b2dc-4ee4-a988-8e65cb7c7360", "sighting_of_ref": "indicator--67e66a7c-6899-444e-a464-05e996301fa3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36830663-3382-4c5e-a04b-53d30e90f9de", "sighting_of_ref": "indicator--9224403c-e31f-4bda-877d-84e3a52466af", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f044b2f-efe9-4426-9ae0-0c5991029597", "sighting_of_ref": "indicator--9224403c-e31f-4bda-877d-84e3a52466af", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246d0cfd-8743-44e0-ac62-51d208200ce6", "sighting_of_ref": "indicator--9224403c-e31f-4bda-877d-84e3a52466af", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5930e8-0066-40ce-b7ca-d3e867bcad46", "sighting_of_ref": "indicator--01866ddd-7d8d-490a-8162-f9a8366dc0eb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6fd187-ae92-4105-a6c4-e80fd9321891", "sighting_of_ref": "indicator--01866ddd-7d8d-490a-8162-f9a8366dc0eb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db2eb5e-c6a6-497b-ac84-933d2fd20e7c", "sighting_of_ref": "indicator--c48bb6fd-e9ce-4fd5-b650-adf06bfe9c5c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29dc6f60-e68d-43f5-baab-d2f089b912da", "sighting_of_ref": "indicator--62ace199-a2df-4f75-9a0d-bdf44f81a1c3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0cb1cc7-98ed-4ba8-aeeb-9a29866485a2", "sighting_of_ref": "indicator--1cbfbce2-e6fd-4762-93aa-dd41dca7a119", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab3c3d8-a167-44d6-abd4-6fc3a2dc8e4a", "sighting_of_ref": "indicator--225449eb-593f-4c5a-87f1-c4accc33beb9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319671e6-d961-4940-a9b6-7dfd2bf5197c", "sighting_of_ref": "indicator--95917fc3-b746-4a81-a65b-afc7c4020679", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fefe44-ef2a-4932-af78-9b64a16cf551", "sighting_of_ref": "indicator--34f53f10-6106-44d8-a650-a0375cabd099", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6f418b-71af-4844-a1f4-a73195de68fd", "sighting_of_ref": "indicator--20b6a17f-ecb4-4a86-a1c5-c11c17925790", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65576771-18ac-4b23-98d1-57b6429551df", "sighting_of_ref": "indicator--20b6a17f-ecb4-4a86-a1c5-c11c17925790", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9d46d9-f3d8-4233-89a5-bcd52fafd6e4", "sighting_of_ref": "indicator--d55a9a80-2145-4a70-84ed-05dd39ba6d50", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670ff415-dc7b-4664-a021-a69f7b5c8d36", "sighting_of_ref": "indicator--d55a9a80-2145-4a70-84ed-05dd39ba6d50", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc275873-56e0-4e07-a6e6-5040e6bc49df", "sighting_of_ref": "indicator--972dec78-3e73-4154-931c-c59556624cc1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fefbfc-c39c-4885-a039-3f206c9b95a8", "sighting_of_ref": "indicator--972dec78-3e73-4154-931c-c59556624cc1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059be2f5-cbf6-4bd5-b883-bba8161aec43", "sighting_of_ref": "indicator--8310f16c-e417-4e79-a792-603f299c8a91", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d171459c-6fa8-4aa1-b782-a11ad3b1cbbf", "sighting_of_ref": "indicator--6caf1fec-333e-435b-b1b3-036024b242d0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a3f831-e569-440f-83de-c77362bb770e", "sighting_of_ref": "indicator--d4fb020f-2f26-4d78-8a9f-7b04b14c29d0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5710d2b-4fd2-4d4c-8e84-c33c17b72378", "sighting_of_ref": "indicator--d4fb020f-2f26-4d78-8a9f-7b04b14c29d0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8880b853-2c52-4631-b689-f5cb5afddce7", "sighting_of_ref": "indicator--c584f518-bc9f-4492-a0ed-d54183ca5e13", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41cd186b-a086-42da-aa48-cbbe25181a24", "sighting_of_ref": "indicator--29ad871a-254c-40fb-b508-679a4c678ce0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7aa3a5a-21c1-42d2-bf82-4cb46763a6c9", "sighting_of_ref": "indicator--4ca32d37-a5bc-4a71-9f22-1b3728172cfb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86be5273-f7ff-426a-b068-7baa3cd3f844", "sighting_of_ref": "indicator--4ca32d37-a5bc-4a71-9f22-1b3728172cfb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c5616f-b64a-4a93-a690-192782432a8e", "sighting_of_ref": "indicator--a4c36acd-95a1-4559-96cb-043288eaa2a0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eaa6723-b914-4c0b-a07d-4cef727d9ee1", "sighting_of_ref": "indicator--233214d7-bb10-4f06-9833-800da3ae27ab", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c60c43-c48b-442d-a15d-ac02bb68d5b7", "sighting_of_ref": "indicator--5dd7696c-8855-43c0-b06e-6686dd9ca341", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16de99a6-ac03-45b5-8052-9796d5f787df", "sighting_of_ref": "indicator--5dd7696c-8855-43c0-b06e-6686dd9ca341", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1730359-240c-40e4-92ca-e07d97eb2016", "sighting_of_ref": "indicator--1e60838f-3c8d-46d3-8602-3476b0f5f075", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3848b2-a910-472c-8245-0561bd7631c7", "sighting_of_ref": "indicator--27dfdf8b-8df4-4195-a432-1e45cdfd9732", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e6f5d2-c8ef-4b28-bde2-b5adcdfa007c", "sighting_of_ref": "indicator--15149fec-bed6-4135-9907-7ee43ddec779", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bd9486-5872-43be-a808-7ab925eaa0d6", "sighting_of_ref": "indicator--aef3b321-b165-40da-9088-5a222b195ae0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20d7f35-263a-4357-85a8-00ff6f48de4c", "sighting_of_ref": "indicator--bb81e307-e5d4-434a-9978-bfbd50877250", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1ae989-a057-4a9a-bdb6-f6c0591a4686", "sighting_of_ref": "indicator--c2a0b72d-da91-4694-9364-d5e42621e15e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76fea91f-a550-4443-94ef-6555cf36c312", "sighting_of_ref": "indicator--0a98ddb1-3629-41f5-8acb-443f6366a749", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688ecaf6-5a7f-4b15-90b7-fc06778c037b", "sighting_of_ref": "indicator--1efef88b-7c7d-4a40-b3b5-20e20e08dbea", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644d5e43-2959-4de5-9d94-1d8274fbb92c", "sighting_of_ref": "indicator--dfd8846a-37ac-45d6-b50e-77a2e7972aa9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30207ac8-ffcc-449e-80e8-90d7089be2d7", "sighting_of_ref": "indicator--cfee1665-a156-4f5a-bc1f-45e6e302dacd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d4a0be-db2f-4954-be7a-e38874bca916", "sighting_of_ref": "indicator--d1964c08-865d-4e9c-baec-fa037035b8d0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f4409b-8f7c-45ca-a877-1ac28912ba20", "sighting_of_ref": "indicator--e58d8e77-05af-4feb-b9e8-e635d9c934f5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432d2d8a-5502-4fb0-9103-419e754235d8", "sighting_of_ref": "indicator--76987927-bb32-40c8-9618-5a1148c197fa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a5d534-0101-4ce2-950f-c9d058b7c685", "sighting_of_ref": "indicator--dbbc726d-4278-4eaf-bc9d-7e9ceb0860e1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85489533-3665-4efd-8571-52c44a1bf65b", "sighting_of_ref": "indicator--106fb952-bf40-455d-9869-145a9ad0c005", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d097119-b6c3-4154-828a-12fc08145ba6", "sighting_of_ref": "indicator--c9cee8e7-59ea-4143-a02a-3e1cafbafa69", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27b373e-c9d3-4081-a9dc-f3bb0d09e3d9", "sighting_of_ref": "indicator--440f910e-3bb4-4554-92a1-251c86a093c2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9e274c-2993-471c-9980-9cecf9b3c08a", "sighting_of_ref": "indicator--a018d1c1-c4d2-40b7-a557-827a67283928", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32759217-a4bb-4112-b199-5b50182f79f3", "sighting_of_ref": "indicator--e711115f-4b49-454f-9577-c42330127c2c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6234ba-c4fc-4c63-a1df-090ce07371ac", "sighting_of_ref": "indicator--e92520ba-113a-4775-b8e9-f59b4895f167", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7618bf-27df-46d7-8ca5-8ed7291594fd", "sighting_of_ref": "indicator--17f21aa4-c60a-4eb9-a525-75bc0d69d992", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5794f20b-3e0f-404f-a9d3-4b3ec7e702b9", "sighting_of_ref": "indicator--bc2719de-6eb1-46f8-aaf2-70b3cfb77f05", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679b75b8-21fd-403e-b5e1-aa7f3c97bc3b", "sighting_of_ref": "indicator--700657dd-bed1-4c8c-8993-94ac940570b2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2898ab63-1c55-498b-9a41-aa3ff2a8a764", "sighting_of_ref": "indicator--31648aa7-3c5c-4605-aeb8-0625f6e44d8d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291a17bc-5a02-4a95-a332-94905c99c486", "sighting_of_ref": "indicator--f9d99ddd-d5be-4bbd-8e32-f5cba24bb4a0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6482ddd4-09e8-4ded-8fca-cf1c8f0aacc4", "sighting_of_ref": "indicator--bc5b7b68-c6b4-4337-b2d4-6c25e27b75fd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b333670b-2d62-4f24-bc3b-b6cc97b6227b", "sighting_of_ref": "indicator--7a747a1d-b67d-4d1a-ba3c-dfb2aad851ff", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb0b3a3-3e22-4647-b66c-cbc95585b7ac", "sighting_of_ref": "indicator--6d0c3cc1-7e6b-4053-be15-7327a755e903", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d42b9dc-b4f9-4ce5-83f6-fa38d9579af5", "sighting_of_ref": "indicator--7638838b-c72e-4c85-9d7e-011c1213f9f4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6026795a-a5b7-49fb-8fb8-e315f6f38ba2", "sighting_of_ref": "indicator--fbec1c63-b4cd-4018-94bb-c784acc8b0a0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e411935f-c56d-48a1-b7d5-5c1c85ed2614", "sighting_of_ref": "indicator--5e98ac75-5f3a-4fa7-b75a-d5dcfa96e715", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36803392-a63f-4c9b-bf9c-2de7f65efa57", "sighting_of_ref": "indicator--1c64874d-ba06-4860-b181-96e27356c8be", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23a57bb-748d-4341-bd93-cfab77bc2a78", "sighting_of_ref": "indicator--e0898f98-9b95-4efe-82f8-071d9d6cc5f8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ba6e2f-4ff4-467d-a97f-de96cffe30e2", "sighting_of_ref": "indicator--8c78d18b-7aab-4222-9ddf-b5e14b50fd13", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2dc564-3f50-4e2b-b657-15778c44461e", "sighting_of_ref": "indicator--94964b7b-f1ba-40c7-a7d0-46082888d2c9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b76e04-d851-4321-8a3d-266d1e78c64a", "sighting_of_ref": "indicator--94964b7b-f1ba-40c7-a7d0-46082888d2c9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66eadf2b-4f6f-4afb-bab6-463024e6b009", "sighting_of_ref": "indicator--13bfd202-83cf-4514-9ccb-0ce2686d186f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78308e47-a944-40fd-90b0-8cb5158b1f81", "sighting_of_ref": "indicator--13bfd202-83cf-4514-9ccb-0ce2686d186f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f7eabb-d44e-4f24-b3f8-268a0e297cfb", "sighting_of_ref": "indicator--166ebac5-0588-4f73-a945-d6047fe562a5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b7c3c3-6b6a-4009-b9bc-dfa8468ac429", "sighting_of_ref": "indicator--bb98aa24-62ed-4d0c-a455-cffc534128c6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a888f79-2076-451c-806b-2c02d6e3b5d5", "sighting_of_ref": "indicator--718a60ac-3174-4ca6-a5fe-fa42d297d14f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130606f9-d914-44c6-8fce-29425cd7d5aa", "sighting_of_ref": "indicator--11f0c85c-c546-4c59-bda8-5e172da0ff81", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d4baa3-7330-4aa1-b448-5ad858adc02d", "sighting_of_ref": "indicator--0a3be2ae-bd12-4eee-a531-10bacc87a51b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050a7874-84d9-483e-bf2c-ad006075b2d0", "sighting_of_ref": "indicator--663c721e-320f-49f5-b100-e509efe4a53b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a734ff0b-5071-49ab-9d73-1247f269789f", "sighting_of_ref": "indicator--c20a4579-06c4-4ba9-8937-9c7368242d50", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88f9cf1-f644-453f-b349-bd49922c90f2", "sighting_of_ref": "indicator--30b0d41f-cd26-4946-b2a1-4a8cb59cb3b6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc414f1-b394-42e8-8f02-ac39553b985f", "sighting_of_ref": "indicator--66a1fe70-554c-485b-92c8-ec517de46e23", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deeafdf3-2082-409e-b88e-3309edb6223e", "sighting_of_ref": "indicator--11fa91d6-fb5d-4e1e-adfe-399aa01eb55a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11937ea6-d231-468b-87c5-5b747ccd8071", "sighting_of_ref": "indicator--de42024b-e948-449a-8ec9-5a5f97f87224", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf4636b-1029-4a73-b7ba-876b4be32fd1", "sighting_of_ref": "indicator--c1fbcec3-f46e-4a15-aafc-606134111af2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f295b87b-29d5-4fed-abdb-b6e6fb1c2b92", "sighting_of_ref": "indicator--002c3683-5d89-4b33-a7cb-35bfd3f319b2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0aba0b-ac03-4d4e-a2d6-5989acb2e09f", "sighting_of_ref": "indicator--39d26910-0b11-416b-8fca-b18ea61c54e7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef266b0-580e-4850-8e5c-6c5c37cb86a7", "sighting_of_ref": "indicator--7ae427fb-99d7-47fd-8a25-27c20daa62b2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ca9d41-420d-4d1c-910e-2327b1c40d4d", "sighting_of_ref": "indicator--9ff0da1d-3423-4a7d-bc35-f97eb67fc60c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876527b0-e328-433a-b9ff-f7a8591b3e2c", "sighting_of_ref": "indicator--fdb1a509-675d-4d4a-bf83-e5935b465e04", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c7c177-095d-4e0d-93a5-b4cf158e9592", "sighting_of_ref": "indicator--3aa7d0dc-5252-4ae1-8551-efdef212b1f2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2e8522-c77d-400f-8d90-8f29e51f4640", "sighting_of_ref": "indicator--a6cceb4b-7d60-497d-bda4-345c85fa27af", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b44070-afad-4509-ab11-766f064f1bee", "sighting_of_ref": "indicator--033e2fde-98b5-4913-82f0-08f689315e55", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e00594f-db75-429e-8312-115d2709913c", "sighting_of_ref": "indicator--033e2fde-98b5-4913-82f0-08f689315e55", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f9807c-f559-482a-aeb3-da948fa84f3f", "sighting_of_ref": "indicator--3121497f-6c60-4ad7-a000-5a3e3533dffe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f8a9bf-459c-414e-b120-1630d346631c", "sighting_of_ref": "indicator--43d1cc96-bea6-4fd0-8d8b-7e7f1c67afc6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a398c22e-d438-45e3-80d3-a44cc8d5c3db", "sighting_of_ref": "indicator--56d749cd-109d-4191-bea4-90cf4c740bf1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef633dd-f847-45c1-84f2-7f0908029e2e", "sighting_of_ref": "indicator--42601df0-d165-474a-abaa-997a21cd9edd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612c8626-06c8-4953-af3f-90ffe52b8fdd", "sighting_of_ref": "indicator--d881629b-a126-4c2d-8b82-16133fd71e02", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f1e41c-708e-428e-ba75-c943fa957fca", "sighting_of_ref": "indicator--59e6c020-ace2-4d12-888a-16daccbb2d82", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56640a9e-8ab1-4049-9258-1485edc3d023", "sighting_of_ref": "indicator--dee524bf-59c9-4445-9bff-282125c8a21a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5a9cdc-1105-4b54-93ec-5ebf4b73dc69", "sighting_of_ref": "indicator--a3f9e70b-877e-40b2-ac2b-bec34b28b1ce", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef24f72-1d65-46a4-a32b-00fd79471e90", "sighting_of_ref": "indicator--bbbe0f8c-1f20-4e58-93ad-fcba9f5ab617", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ae411c-7428-45a5-8751-6e676099eebf", "sighting_of_ref": "indicator--bbbe0f8c-1f20-4e58-93ad-fcba9f5ab617", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3de46eb-6d34-49bd-a4b5-e1ce8d2ecd19", "sighting_of_ref": "indicator--d101927f-e9d3-4fd3-942f-5fa6da51f621", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4eebf3c-1430-49e0-90ba-cb02ddf8c5da", "sighting_of_ref": "indicator--0aa26157-b090-4e3a-bb10-7d97916aca7c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e7bbe6-b8eb-4d16-aa22-53784ee83f48", "sighting_of_ref": "indicator--0aa26157-b090-4e3a-bb10-7d97916aca7c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7434216-4f70-489b-b12c-c11dffbff4e2", "sighting_of_ref": "indicator--22324b86-2e44-462f-a9f6-e8455197ebf9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f375eb76-8874-443c-8e0d-811bcaefc047", "sighting_of_ref": "indicator--8120db13-8a00-4000-8243-bbc8705fbe79", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc03abfd-456d-443c-91b1-ff2a14102aad", "sighting_of_ref": "indicator--8be15e2d-6a96-4407-ab00-0caa8b8e99cc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c40d5b-a0ed-4fbb-b803-68029c2dfbf6", "sighting_of_ref": "indicator--d9b14540-2799-4682-8e89-3468be390342", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117e79a3-5957-405b-900c-e703da54ac92", "sighting_of_ref": "indicator--411270ae-54f0-4d43-a770-7d4a46426668", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253b2bcc-11fb-4420-9f82-b27cdc3f370f", "sighting_of_ref": "indicator--fc1987ef-33cc-4dec-becd-9ff2e319adb1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66135531-110c-4fe6-b6b3-005ca6930dba", "sighting_of_ref": "indicator--8d65e3f7-def0-4840-af2c-d4c1847e469f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a8d5f3-1f46-468d-987b-7064847c4978", "sighting_of_ref": "indicator--8b9d4c42-51de-46aa-8cf7-3de18218cb7d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1622171e-2bce-4465-bae7-b9051ba8ee08", "sighting_of_ref": "indicator--17d5ddb2-ef5a-4884-8ced-78f4266a0c89", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd62d11-ae56-447d-8a39-c40947e6c825", "sighting_of_ref": "indicator--49f9926a-c299-46f7-a089-b0a3d4bbbdee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a826cdb3-d604-4818-96c6-7bd8bd115083", "sighting_of_ref": "indicator--8dc05909-c3d0-4710-b8d5-782c360d4313", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668e81ae-a625-4be0-9d26-4299bb4a2b74", "sighting_of_ref": "indicator--59a2bc2f-c569-4455-aa34-3bd5ed2a62ac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eccaa0fe-bcd3-4162-b95e-7e122f28d49a", "sighting_of_ref": "indicator--8664328e-390a-4f83-bf3f-a5a0eb5f5fa9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b731ef-9217-454f-aef4-5353cc0d9407", "sighting_of_ref": "indicator--32c4ffc6-f9e8-452b-878a-2e7a24713717", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc09bcd8-9abd-4648-ba3f-bfe6d5509b2b", "sighting_of_ref": "indicator--3e764048-052e-4ac2-8421-eda53dc9ed21", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39410ff9-e33c-4fb8-b994-2f6f3d4c1144", "sighting_of_ref": "indicator--73120d8d-6188-46e1-8f6c-7d78ec11b1d0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50fd7f7-173c-4748-8aa2-5865acf76945", "sighting_of_ref": "indicator--d56b87d9-a6f3-4246-807e-e7c76bd8e77f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07748271-17d6-49b5-8e40-4420d019c106", "sighting_of_ref": "indicator--e2bd6469-6968-46bc-80ce-f0929559c68c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4e5b7f-1064-47e4-ad6b-2aa2090730fc", "sighting_of_ref": "indicator--0e8736d6-c958-453e-97e0-6820edfe331a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96189ae4-a664-4ea6-9a57-04d6537674e6", "sighting_of_ref": "indicator--1304ce37-13cc-4d9d-b7c8-00e53232a01f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fde2a5a-6c79-45b5-9680-69593e77bb24", "sighting_of_ref": "indicator--950a29e2-0280-4103-b406-3e14825e4ffc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb7937d-f462-4caa-8f8d-aa6101235069", "sighting_of_ref": "indicator--7d980735-8d7f-48d1-b744-06952e6e2192", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c978113-aa1e-4f12-beba-22c96c7a90b9", "sighting_of_ref": "indicator--5ce5fcb8-f701-4b6a-8b9c-ff8185a020d3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7321ad4a-4198-4c3e-8a5b-d2459b4edb62", "sighting_of_ref": "indicator--6706eb78-ae15-48c5-924e-7f3e7131133c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c09b0e7-82f4-4fc4-835f-6c48c658ceb5", "sighting_of_ref": "indicator--55569e68-7918-4621-b4e3-673fbc497d69", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b51cda2-b1c6-4064-9504-f731b071500d", "sighting_of_ref": "indicator--9c3b88b9-d651-47d7-956c-cfbe036bf0a3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6777d4e8-a840-4b62-9183-c9402e29d986", "sighting_of_ref": "indicator--eef48f71-b158-44f8-8c3b-6f593e343241", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747b722c-929f-48dc-95d6-b60550448427", "sighting_of_ref": "indicator--4ba65b1e-7e8c-428e-b1bd-b2cd418d34f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a881954a-3728-40fa-b388-8817e343f0ed", "sighting_of_ref": "indicator--ce5012bf-47a5-4b64-8496-580b6e946efc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f670f6e-86cf-4a64-abdc-d840720cd00d", "sighting_of_ref": "indicator--a8cf3e99-49a4-427b-9f54-97a1fcada3ba", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc97ac9-f244-4ed4-94d8-ae0b336429a2", "sighting_of_ref": "indicator--2b330c3d-9f0c-4995-8c45-433fe1081a0d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06da9427-543f-4222-9426-ead8a4edfb11", "sighting_of_ref": "indicator--2b330c3d-9f0c-4995-8c45-433fe1081a0d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b1fa8c-be1c-4379-b225-2e8ceaa152ee", "sighting_of_ref": "indicator--c916e0b7-9d1d-4d96-b806-1358a4de7b9b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1232c310-a320-4fce-8387-46ea558841fe", "sighting_of_ref": "indicator--1068e5bb-5383-493c-8de2-1f1c63fd2fc4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf074465-4f6e-410c-bf76-f222b2feb522", "sighting_of_ref": "indicator--1068e5bb-5383-493c-8de2-1f1c63fd2fc4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f479f5-1f07-4a9c-a9bd-c755ea66b191", "sighting_of_ref": "indicator--f8b8d8e6-5bde-4f16-8b35-4cb77d33e922", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91935b6c-aed5-4654-9900-6a87afdbd8dc", "sighting_of_ref": "indicator--f8b8d8e6-5bde-4f16-8b35-4cb77d33e922", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a98ce60-ff0a-4f8d-b10a-ff79f9f269d6", "sighting_of_ref": "indicator--f8b8d8e6-5bde-4f16-8b35-4cb77d33e922", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa59ed73-1d5b-4568-abef-e7f610fb71f0", "sighting_of_ref": "indicator--6a1d4430-74ea-48f7-825f-550586e44509", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5df0e0b-bbe7-45d4-9c02-8798290da5ca", "sighting_of_ref": "indicator--6a1d4430-74ea-48f7-825f-550586e44509", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f981bfe5-c930-4bc8-9b38-e1af659e988f", "sighting_of_ref": "indicator--6a1d4430-74ea-48f7-825f-550586e44509", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4dcd09-8d03-4e44-b96f-0ce38c02afea", "sighting_of_ref": "indicator--3b2b1c86-0413-449e-8ac6-a1196d20d7c3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1004d23a-7816-44f3-8657-0128343caf16", "sighting_of_ref": "indicator--3b2b1c86-0413-449e-8ac6-a1196d20d7c3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f447f5b-1192-4c56-9858-940eae6bd2e7", "sighting_of_ref": "indicator--fbaff6d8-fcd5-411b-bce7-1d237b943415", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb00cb8-e508-4ff9-9fc1-252b8825a599", "sighting_of_ref": "indicator--477c53be-634f-4a0d-becd-a2b42f36925a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c9b602-2d5e-4464-b210-35af19b580ea", "sighting_of_ref": "indicator--0049d153-6064-4f41-84a9-006af2d96654", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--398e4b33-ac5a-41fd-9b52-3c94e8056df5", "sighting_of_ref": "indicator--2b2c3c2b-a732-4fe6-83d5-2313d1816051", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e4d3f7-41aa-453e-941e-b4e50eee9cce", "sighting_of_ref": "indicator--2b2c3c2b-a732-4fe6-83d5-2313d1816051", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e156ebf-4e74-4778-a954-431470831f98", "sighting_of_ref": "indicator--2b2c3c2b-a732-4fe6-83d5-2313d1816051", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c943d8b-c23d-42a1-ad15-be0fdb72a74d", "sighting_of_ref": "indicator--613b9407-b4a6-47c9-9e84-e334b84adb05", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf1cbbb-c22a-4624-80a2-8247c4c9ba44", "sighting_of_ref": "indicator--613b9407-b4a6-47c9-9e84-e334b84adb05", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c618903b-bc25-4c83-8a1c-b4bcab620f1a", "sighting_of_ref": "indicator--613b9407-b4a6-47c9-9e84-e334b84adb05", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46df0e4-e629-4092-bed0-e77fea58d51a", "sighting_of_ref": "indicator--2976a329-56ba-4508-8dde-cb0484560521", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc2cc3e-85f4-4584-9d0f-0f02bc89af84", "sighting_of_ref": "indicator--2976a329-56ba-4508-8dde-cb0484560521", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9886348d-b67d-4866-8ee4-e62db5f0ff1b", "sighting_of_ref": "indicator--2976a329-56ba-4508-8dde-cb0484560521", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8593f6a9-6ffd-4272-a057-ab6eb3978c34", "sighting_of_ref": "indicator--319a425c-3047-4581-934c-7c7b4200df32", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f8645e-cd52-439c-9653-aa7f950d848a", "sighting_of_ref": "indicator--319a425c-3047-4581-934c-7c7b4200df32", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c87d6f-52bf-430e-ae2a-8b4245cdaa31", "sighting_of_ref": "indicator--319a425c-3047-4581-934c-7c7b4200df32", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f629ed31-31cf-47a9-ae6d-16744d4cce7f", "sighting_of_ref": "indicator--6ad9dd40-a59b-45c6-a393-9604074fab36", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8e5a39-ba4e-44c0-8b29-e5ccb92390b5", "sighting_of_ref": "indicator--ef06072b-796d-4316-8a85-3ef472e83935", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4498ef-e70b-45b0-948f-e18dc4f231fa", "sighting_of_ref": "indicator--541e7067-6d4e-4ec0-96b5-764ca15b2e6f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b388fe-c6d0-4f00-8a49-9e9b2fe206c9", "sighting_of_ref": "indicator--9dc2eeb9-8ece-48a9-86f1-c977f8a9c027", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07475ff7-f371-406a-8fb4-d41b5d5b7244", "sighting_of_ref": "indicator--9dc2eeb9-8ece-48a9-86f1-c977f8a9c027", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b469011-d25d-40c4-93d0-8053c1f33015", "sighting_of_ref": "indicator--634f83e2-f8a4-44e4-93a9-4986cb53391c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad523b0f-954d-48f2-8030-64b3685807be", "sighting_of_ref": "indicator--7b99b921-208f-41f6-96da-3a051a127c9b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176cd775-20a1-4224-b228-a140778765ce", "sighting_of_ref": "indicator--7b99b921-208f-41f6-96da-3a051a127c9b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9175e99d-1e23-4dce-9c41-10593d7d97e7", "sighting_of_ref": "indicator--d127de1a-2395-4dac-90a4-7a14ea1f3a11", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce731777-c1e0-42bd-84be-ae9012245b01", "sighting_of_ref": "indicator--89089634-9f23-4fe3-9109-adb53edb5e57", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1812d10f-a17c-48c8-866f-a1ffcef7b616", "sighting_of_ref": "indicator--89089634-9f23-4fe3-9109-adb53edb5e57", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48620373-f2a1-416b-97c6-0a6c457fc9e4", "sighting_of_ref": "indicator--bd69f13b-3591-4784-91d3-ec28313aebac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc3a367-797b-4414-bfe8-c90b6626a608", "sighting_of_ref": "indicator--bd69f13b-3591-4784-91d3-ec28313aebac", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca72dd5-e1d2-4fd0-bce1-23cd01cfa75c", "sighting_of_ref": "indicator--bd69f13b-3591-4784-91d3-ec28313aebac", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f549d046-d072-4342-8e4a-35fe5543a2e5", "sighting_of_ref": "indicator--4f532216-2e7e-43a4-bd29-688e4b779a01", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1981865-e151-4ead-8215-5b72fdeeb72e", "sighting_of_ref": "indicator--7b448991-5170-479d-b3c3-4794d9480982", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f47db77-29b3-449b-9739-39bebdbd41ff", "sighting_of_ref": "indicator--f34befc8-54b7-44d4-b761-885bbe5309b3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4dd0108-6a8e-47f8-8c41-7057b0d254e4", "sighting_of_ref": "indicator--76aefa0f-e1a2-4488-b2ef-627d4810bfd8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1fdf1e7-4bdc-4636-a197-4caa22692ab1", "sighting_of_ref": "indicator--72199e12-f59e-4232-b4a7-98ded4144253", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6bfb15-1c39-4144-a062-47c69a850191", "sighting_of_ref": "indicator--72199e12-f59e-4232-b4a7-98ded4144253", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532de01e-b6d9-4a92-a21c-015045aada8d", "sighting_of_ref": "indicator--89140d9b-ef79-4cac-879a-f28ac9d0f999", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be7690b-7072-4cc1-8529-5daf809171b4", "sighting_of_ref": "indicator--90f418e7-d2f5-4aa3-baa4-8521e0d7f7fd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c3e271-3388-4edf-ac76-db8872a0a576", "sighting_of_ref": "indicator--d01fedae-67a6-4f7e-b414-eb9c5e4af4f3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87eb8cf9-a3c8-40b1-8f3b-a1867be4b477", "sighting_of_ref": "indicator--73c9b23a-837f-40c6-9a9f-c7b7ffa86d40", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ce6cf5-8e72-4839-bbe3-ffa4a38263e7", "sighting_of_ref": "indicator--30f2cdd6-9ccc-4b83-8867-a478645cd8cd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0958d545-1351-441d-bf68-9bb4501ea4b3", "sighting_of_ref": "indicator--b2baad2b-3397-4629-96d5-45dae328b93c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b8d047-8f8c-4c74-9412-f9d3dca472d6", "sighting_of_ref": "indicator--b2baad2b-3397-4629-96d5-45dae328b93c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fa42ad-c2af-42f7-8044-9e1f890a0a2c", "sighting_of_ref": "indicator--1a5c2817-7efa-46cc-93c5-1b493c9f0019", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc79913-623d-4633-9635-bcd913b34578", "sighting_of_ref": "indicator--348f8a81-1004-4716-90a2-8dbc549e2c01", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141f93fb-4d8a-4010-bb9b-c56ed3629872", "sighting_of_ref": "indicator--348f8a81-1004-4716-90a2-8dbc549e2c01", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55f6b9a-f693-4a55-a4d4-e617453351e6", "sighting_of_ref": "indicator--69c13cf8-a1b0-4a6d-abe2-00f225ae56cb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa45840-06a6-4444-ace8-022159d644df", "sighting_of_ref": "indicator--38623935-5adf-4fc1-9c61-0e915a81f44e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625e9bc5-ea0c-4a81-924c-694ad245341c", "sighting_of_ref": "indicator--1bc36b43-e305-471b-ac3b-433ae45d1b19", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a808ca39-224b-4a8d-a24a-ec1332d0b21a", "sighting_of_ref": "indicator--60546d55-295c-49d5-99b2-03fad5b38ac1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac92a82c-0449-4064-b428-3a3836dd8e61", "sighting_of_ref": "indicator--60546d55-295c-49d5-99b2-03fad5b38ac1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1b0b4b-7dfb-4dad-8b8c-709962437cff", "sighting_of_ref": "indicator--96b69d2c-da5a-47b0-8f99-2d3e352eff84", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cee109c-e9ba-44ba-a700-521958ec59fb", "sighting_of_ref": "indicator--2dbbb060-1ee9-40db-9e29-1568013da35d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a218b4-3d27-4c44-a8f3-d228c9ae6ae3", "sighting_of_ref": "indicator--82abad8b-ead1-431f-bdb0-cc782443b29d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18354798-5b9f-46ef-a575-01cf9553753c", "sighting_of_ref": "indicator--34601511-dfe4-4a8f-912d-f82c452df051", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd432fa-1dcc-4b90-9d93-0892a64ad829", "sighting_of_ref": "indicator--1d5bc351-a4a6-4554-a3f5-47826e0691e7", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91766df5-f3d6-4428-94c2-a46dae62dbc0", "sighting_of_ref": "indicator--fbaf507c-fc4d-495a-a2a5-bc6223008bb1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9ed415-fc28-45e6-ba20-8e74306c3afd", "sighting_of_ref": "indicator--7eec628a-7e1b-4464-b72f-40a14cb10b35", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07010ef9-34e0-4fa6-801b-9da2c3702ed7", "sighting_of_ref": "indicator--bd83209e-157d-4cd9-9c64-113fefb886b8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bcd178c-a2d0-40b5-979a-ff927b9774ac", "sighting_of_ref": "indicator--bd83209e-157d-4cd9-9c64-113fefb886b8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dcaac81-7f5f-4081-b511-7d89046e7fe8", "sighting_of_ref": "indicator--4c6b55f7-9122-4371-bbc8-2e2736a09cf4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465ab5c0-2d04-4d2a-8d0c-49ec68cdbe65", "sighting_of_ref": "indicator--21f1c1c2-1ec3-4eac-af5e-7d8086da55e1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f66474-f7af-4620-aa2c-13c376a7532c", "sighting_of_ref": "indicator--79344661-84bd-414c-9029-4aa56fdc59c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3ac1d7-e3f0-4cad-839a-c16044245309", "sighting_of_ref": "indicator--56ad7dfa-e4df-4f05-a028-6c112729b263", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76bfcf84-72aa-4ffc-a475-ca648cc5a564", "sighting_of_ref": "indicator--b2e64528-cef7-40b2-9f95-4af1db1133e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdda6b0-c070-4e39-b186-2a4cde84b1e5", "sighting_of_ref": "indicator--939859a7-e9d1-4901-a9da-fd165d2a20eb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5716fd48-7db1-4851-b398-383d6ca7c720", "sighting_of_ref": "indicator--17892dfd-234e-4725-90f9-323af9ef98d5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574ab8eb-8afd-46f7-ba9e-e8dd27bf8076", "sighting_of_ref": "indicator--17892dfd-234e-4725-90f9-323af9ef98d5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1c3d7c-6d73-4653-b559-9a4a8b45d7cd", "sighting_of_ref": "indicator--17892dfd-234e-4725-90f9-323af9ef98d5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9225fdb-8b2f-4a16-9003-8b4785bf49df", "sighting_of_ref": "indicator--3557b03e-7091-4a9f-8a9f-ddf9a68953c6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41f19c4-72f0-42d9-ac21-ae353f932d14", "sighting_of_ref": "indicator--3557b03e-7091-4a9f-8a9f-ddf9a68953c6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8727e406-599b-4640-8256-4722c6977347", "sighting_of_ref": "indicator--3557b03e-7091-4a9f-8a9f-ddf9a68953c6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37416939-5c9d-476e-9613-1c2996adab90", "sighting_of_ref": "indicator--85087cfa-5329-44ea-bf21-005603b8a96e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceaa0e66-11e4-4fa6-b254-c4bac19a715e", "sighting_of_ref": "indicator--6b439e3a-999e-426d-9335-ad042c0e60ff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc17c0c5-fe44-4170-bb23-50adf05833ae", "sighting_of_ref": "indicator--cb0e8257-6999-4f31-a0e5-60409f40a0c7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2885ecbb-401e-49d3-bd91-e6c0b3854b81", "sighting_of_ref": "indicator--cb0e8257-6999-4f31-a0e5-60409f40a0c7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfd22e5-82e4-4172-970a-67d16e1cb2c6", "sighting_of_ref": "indicator--cb0e8257-6999-4f31-a0e5-60409f40a0c7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea064610-3f0d-450f-a35f-3e99bf4f2f86", "sighting_of_ref": "indicator--366544b8-05cf-4703-84f5-4cc16743adf0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017fa517-fd10-4a06-9c85-604636f0647d", "sighting_of_ref": "indicator--366544b8-05cf-4703-84f5-4cc16743adf0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd76739-3f76-4e51-b6bf-e5e77796b9dd", "sighting_of_ref": "indicator--366544b8-05cf-4703-84f5-4cc16743adf0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6839011c-f30a-4865-ac44-a88b80b39073", "sighting_of_ref": "indicator--ce8b8138-6b1b-4e7c-80bc-34b4ef292ce8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503fde91-dd41-4959-af0b-53b8e6f78409", "sighting_of_ref": "indicator--3e4bdbc5-572c-40ba-866b-80dcab0f22d5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6bc0c4-6b11-4a79-a926-5c7e8856f4f5", "sighting_of_ref": "indicator--3e4bdbc5-572c-40ba-866b-80dcab0f22d5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ba6bc9-d4ef-4e10-bf2e-948f7c996370", "sighting_of_ref": "indicator--25b51b17-4081-499a-a88b-ca06b7432a52", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16be9093-6371-4a63-b623-c01ec405fcbd", "sighting_of_ref": "indicator--25b51b17-4081-499a-a88b-ca06b7432a52", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8dd734-2c46-435f-9b8a-0ea459ee8a24", "sighting_of_ref": "indicator--25b51b17-4081-499a-a88b-ca06b7432a52", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c552bf-d48d-4791-872e-dc5bee886548", "sighting_of_ref": "indicator--3b3363f2-067d-4974-b94b-81c27ff7e00c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fdbb627-5f72-47ea-8fe3-a75c43463a62", "sighting_of_ref": "indicator--3b3363f2-067d-4974-b94b-81c27ff7e00c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e858e0bc-1fb3-4dc3-bfc7-9f6aab7b342c", "sighting_of_ref": "indicator--3b3363f2-067d-4974-b94b-81c27ff7e00c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84c5830-cedd-4188-85f4-b79f9579ce25", "sighting_of_ref": "indicator--eb5bde63-e064-4542-b3d6-269b46823f16", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca26af00-795d-44ae-846d-53492714caca", "sighting_of_ref": "indicator--eb5bde63-e064-4542-b3d6-269b46823f16", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea892e3-a078-46e3-949b-b7151a3e55fe", "sighting_of_ref": "indicator--eb5bde63-e064-4542-b3d6-269b46823f16", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b2b7dc-22fe-4d42-8505-d32e08dfaeca", "sighting_of_ref": "indicator--425c9c69-1e55-44db-a21e-4f5b1b83aa9e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6254d2ac-0eab-4599-bb7d-38d2355162f0", "sighting_of_ref": "indicator--425c9c69-1e55-44db-a21e-4f5b1b83aa9e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77799201-3298-4b8d-8873-fe6a026ec3e1", "sighting_of_ref": "indicator--3f0fe458-aedd-4395-a4d4-6744ca00ed47", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9558cf6-9b52-47b8-b0d6-04600183111b", "sighting_of_ref": "indicator--9fc489c9-81a6-4047-bd2d-52091b55b501", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bb3bc7-5749-4d5c-9dce-41d2627dc485", "sighting_of_ref": "indicator--2af0934e-ded7-4bc3-8c9f-55f6b43881cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056d6700-742e-406b-bc04-ce4c234f6e25", "sighting_of_ref": "indicator--fafbb5d5-aed7-4006-9749-3deb841df63b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec949e4-862b-4524-8c7e-1bc0a52ccc2e", "sighting_of_ref": "indicator--de573502-06ab-4322-8abd-76a35c5dd8d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a028ce64-0396-43aa-b257-8b7fb8affa48", "sighting_of_ref": "indicator--58d7b9df-37ce-454a-a0db-dabd125d571f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae85f2e1-ae93-408b-96fb-031327cd82be", "sighting_of_ref": "indicator--ba0d5f57-56dd-4eec-bc61-09c6e3598ed9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a153c7-df43-4cf2-b174-ea4902abce80", "sighting_of_ref": "indicator--65f23c15-9bd3-4d20-904b-5d778c0231f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90bc8247-980b-457b-99b4-349b00801719", "sighting_of_ref": "indicator--507598bd-953f-4362-8255-dfd2c85834a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d6d3c2-264f-465e-9a5b-709fc09327e2", "sighting_of_ref": "indicator--15648b8e-fbce-4dcf-9719-926074969775", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6e5d06-15be-4550-bbe6-b97524987b71", "sighting_of_ref": "indicator--18b74681-d868-45bd-ae33-475911f55015", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4431f0f-3083-4591-80c3-fb8d49a37dc4", "sighting_of_ref": "indicator--1e727da2-3fc2-4563-b0f0-9204557648cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab90cc1-fb19-4c55-8096-5aefbe9f153b", "sighting_of_ref": "indicator--ac19e4a7-420e-4add-82b8-c65f3f197380", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e381ebc-0969-4799-84de-b02348b3e685", "sighting_of_ref": "indicator--34d4b87c-ab45-4525-95a4-1e620e535017", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3612dc-d35f-40a9-afae-a75e58987228", "sighting_of_ref": "indicator--163db870-b3cf-4357-abbf-28c7d68e7615", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ae368a-25b0-41c5-b3b0-8faeadf3a6b8", "sighting_of_ref": "indicator--dcfb2e17-e9b2-4e79-bd55-6634db389eaa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac4b310-a8bc-4de8-9a47-2490e5910960", "sighting_of_ref": "indicator--9409f73a-0970-4a2f-a2f6-bfa362b2822d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a96708-5e88-4e3c-bbf4-9fd1c9c60f14", "sighting_of_ref": "indicator--ffc2c32d-e423-4966-b5c5-6077d315bf9f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4839ca-9e93-4344-bcf2-5c3d698c4648", "sighting_of_ref": "indicator--43d20437-0713-4bf0-b44f-29b695c30c1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f787939-ad25-45d3-9eb7-ab37129d7128", "sighting_of_ref": "indicator--aa0c46f2-5dbc-42f5-8fca-d27ed1b580cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b08b9d-b57b-40cc-8141-9cf8856214c1", "sighting_of_ref": "indicator--45bd9fde-05a3-4f1e-988c-2fd0ffc5a81d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72885e04-0127-4ab7-8c67-5e01b88ce259", "sighting_of_ref": "indicator--c54cf5bb-892d-42c3-be5d-739c22f75789", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54eca8e9-0829-4b35-a5f5-5f595fe9c729", "sighting_of_ref": "indicator--bb4d0790-ed62-44ee-9845-c2f13f33003d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f72247a-a40e-4675-9ff2-d7ab091a7870", "sighting_of_ref": "indicator--bf3956aa-e656-4482-9c2f-4398e82563e7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7c1250-2119-41c7-b2af-b5d1649c9431", "sighting_of_ref": "indicator--50e22be1-2c8f-47bc-b399-afeeb4b52f91", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697af05a-4aa0-401e-b43c-4ab89c15e6ed", "sighting_of_ref": "indicator--50e22be1-2c8f-47bc-b399-afeeb4b52f91", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76b904a-9f1c-42ba-ada4-6105c14f2c86", "sighting_of_ref": "indicator--76c6f01d-f1c0-4e98-942e-73533466300b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85200be2-1afc-460e-97f2-b05437be91b3", "sighting_of_ref": "indicator--d3a776d3-cb31-4278-87d1-47ddbf6a2902", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e86422-208a-412a-bdbb-2754bc428304", "sighting_of_ref": "indicator--344d4ff7-da52-4abe-b5d2-416707b1e645", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3522a8e-fa76-453b-b949-a970512075a3", "sighting_of_ref": "indicator--f28032c4-edbc-4bd5-ad31-0f5c4786ecc5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e24199-87aa-48f3-a105-e3e54243192c", "sighting_of_ref": "indicator--b23449a3-f121-42bb-9b92-85ee1f834d19", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8035af92-e14b-42f2-bd4e-fe1a2771276c", "sighting_of_ref": "indicator--55e37faf-9a3f-4934-ba4c-0da01e7729ee", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555cc34d-a66e-4381-92c5-8a8ca96cfb31", "sighting_of_ref": "indicator--e616a277-cec5-4f2d-a202-4b1a347e9586", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3354653f-d29f-4ba9-83d1-e2aca8523679", "sighting_of_ref": "indicator--aa6e5cb0-3263-46b0-bc79-48ff03522280", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed927996-575d-4377-989e-9a344519e4ed", "sighting_of_ref": "indicator--ebb2dee8-9fef-4606-b504-021d181764e1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bf1955-655e-4892-a1f2-6487d2ecc518", "sighting_of_ref": "indicator--6082eee3-32e6-4803-b78a-d1521332efc7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891cfa99-7cba-40d6-9d27-1cbfb5344fec", "sighting_of_ref": "indicator--b0538d51-3609-4c77-a8d3-b4d8827b51f3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309f0f17-4081-4646-a131-de2ad90c720a", "sighting_of_ref": "indicator--8075bc9b-4adc-482a-abdd-bd17828c6f7d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25945c2-7bd0-4f82-9ea7-13dcd92e5904", "sighting_of_ref": "indicator--d613380d-5989-42b3-8553-e565ad5bbfdc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f0a34b-18f5-4612-aeed-8cf39cc415ac", "sighting_of_ref": "indicator--98880880-25f0-46a4-a7a5-87cee8e853e3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88ddc60-c776-4c9b-9615-37729dfdeff8", "sighting_of_ref": "indicator--a1f3428c-f938-444a-b726-efaa63cfe9d6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad14c01-55ba-4ebb-851e-c8727b58bf60", "sighting_of_ref": "indicator--2413cd2a-750f-4ec9-856f-ee78a177f2b1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1471c9-e1c0-4fc3-a3d5-4c228ae6849c", "sighting_of_ref": "indicator--1573dffb-e20c-4dff-984c-64ba208c46cb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94320e9c-1def-4d31-a03a-8cbc88f5ada2", "sighting_of_ref": "indicator--87091d84-0b29-467f-910c-ccbed715d23f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ac1124-fb95-437b-8d01-f9b72b08cce4", "sighting_of_ref": "indicator--e7c9febe-9223-4059-bc4b-62a8397cfbaa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a93812f-6507-43b3-9197-d3ffba228480", "sighting_of_ref": "indicator--fc7b3a84-3c8e-42c8-a0a7-ae1a2019e205", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c506b7a6-8bb9-47cc-8ce3-8377ca63c43e", "sighting_of_ref": "indicator--f2c5d52a-11f5-4cc1-b8b7-9a7ff4924160", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89d1b25-545b-4be3-be4f-5e47da1929de", "sighting_of_ref": "indicator--52b19a94-04f4-404c-8b5d-5d48f137f433", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70168759-b8d4-4804-b551-1ec4546f6e18", "sighting_of_ref": "indicator--2fa00043-31d6-4238-9527-239feebec6eb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4671af-ced9-424c-bfcc-bf1090033a5c", "sighting_of_ref": "indicator--bf1d7acb-9f88-455d-86a8-4899d5080453", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e76ee2-df6d-42c0-8ab7-8b010d080c06", "sighting_of_ref": "indicator--75839ddb-5395-4d33-bb0a-1dda64d7cade", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d459a97a-fd53-41fa-aefa-e352f7756b6e", "sighting_of_ref": "indicator--c4021eed-07a9-4c8d-b892-7b9a6ef21c19", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c66d296-6ab5-4585-9e39-3f7f8a6adcc2", "sighting_of_ref": "indicator--112353f5-460a-4204-bd5b-a3f21a80b945", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f50080-af13-4973-91f8-982a6e69e199", "sighting_of_ref": "indicator--fd0e7819-f1a7-4672-9189-ad1224c6b9ca", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c93e6d7-2831-4c48-af4c-6f0a0d40279f", "sighting_of_ref": "indicator--c5a5b39e-f980-4438-93a5-7bf1e10812ae", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4aaba6-1700-4aa7-a38b-f1a0b63ff0d0", "sighting_of_ref": "indicator--4ec3bffb-c9c6-41eb-97f2-047e4cf1f0f2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da724b4-2f4e-4b5f-8292-ba30f855197b", "sighting_of_ref": "indicator--e57046dc-5611-419e-a330-b103404c30a3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f431517b-3308-4ba8-b1a1-9a478ec36b98", "sighting_of_ref": "indicator--770b52fb-f62f-47f2-b793-18ff3aecfcac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254f6135-a5e4-4d06-951d-42ad60f05866", "sighting_of_ref": "indicator--f37e3d9b-c3b5-4d25-994f-eb062d12f5f6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476a7a17-0815-44ad-83cb-85be4beb903b", "sighting_of_ref": "indicator--0ec83c45-8c70-4a5e-94b8-27f525691eed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e6a628-2cd8-426e-a3d9-9de0ef2eea18", "sighting_of_ref": "indicator--28449b51-065c-46f7-89f2-e4a5d1949b73", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af13fd1-fd3e-41de-abef-5dec5efb098f", "sighting_of_ref": "indicator--27a208b9-7065-4294-8c92-0a4c43d23e0a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d5cbbd-1e85-40ef-b97c-8d60a9598549", "sighting_of_ref": "indicator--8c2e6b80-5980-4263-b5a7-bb5defc536ba", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3607537-422a-4984-89af-b1c259035fa7", "sighting_of_ref": "indicator--3ab4e74f-5654-43a8-a89e-593c2db0e756", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061ab105-d1e7-4dd8-8b16-8f253eacda37", "sighting_of_ref": "indicator--fae9f25c-b9a8-46d1-bd94-c57d2b91bf6e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc9ed31-20ae-446d-a592-1ad48f836c4f", "sighting_of_ref": "indicator--7b32573e-38a7-4526-93d4-b045fe03b77a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2114df3a-26e1-430d-9ddf-5416f9fb58da", "sighting_of_ref": "indicator--998c9d50-b3d6-4bf6-a9b9-4eb8c5c073f3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb451a8f-55ee-4063-9968-f733dfb6b407", "sighting_of_ref": "indicator--180a4a94-9471-43b9-8ff8-805e82783051", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f6da65-c9c5-400f-87c6-376d7fc4fbee", "sighting_of_ref": "indicator--0fb85a79-785a-480e-b231-8f2694606625", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b714cbc0-2e71-4ae1-afdc-4a02cef5d187", "sighting_of_ref": "indicator--afd38d74-01da-41fa-90ee-7bd2dcb7e17a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624d6fd6-8150-4e3b-8d47-9925244a93be", "sighting_of_ref": "indicator--afc2ad5c-f641-4801-8fd7-c92a86611b7a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c8c6ce-d425-42e1-a7bd-238bfb68c132", "sighting_of_ref": "indicator--415bdf6d-a5a3-4cee-a553-22d7c8b68c36", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5e3015-d4a0-4e43-8b04-69ed8fa6de26", "sighting_of_ref": "indicator--3e45cb3c-76ef-4665-aa1d-6dc7e19f5d43", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3d67fd-4acd-4d9d-888d-ac588b2fb82f", "sighting_of_ref": "indicator--3eea274b-82fe-4d64-a578-1c0674b6dc99", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080a781f-9888-425e-98c7-6960d6cee57d", "sighting_of_ref": "indicator--bb4f680e-d60f-4606-9aea-fd43fdd6a80b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0567b94-e7af-4244-bf8d-87ebe7b369fd", "sighting_of_ref": "indicator--486a0dd1-c152-446f-87cb-8c52fedf811c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0e5f8b-b5f4-49d8-a6a0-76a1917271dd", "sighting_of_ref": "indicator--0be624f9-fb65-4d6b-b4e3-92c28e421881", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b45f46-4a74-48c4-8e6f-9e9b60552b75", "sighting_of_ref": "indicator--3d7e208f-7d10-498c-a1a8-f6c74176e72a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da744779-f975-4148-9e7c-0ef42655a4e0", "sighting_of_ref": "indicator--e93d0d0e-a1a5-4388-9392-828274a718c5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30eb5aaa-0d84-4dc1-adff-66b95865831a", "sighting_of_ref": "indicator--e93d0d0e-a1a5-4388-9392-828274a718c5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1eca94-f5a9-457b-a85b-4ede7f8d5d4d", "sighting_of_ref": "indicator--a0ca5f88-8103-487c-a434-f21e8a8673a6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a699b9c-deb9-4c6b-9442-48c13fa55f69", "sighting_of_ref": "indicator--a0ca5f88-8103-487c-a434-f21e8a8673a6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d14336b-268f-4d8c-99c3-718ba6e66124", "sighting_of_ref": "indicator--6958411f-16c0-4423-90f3-4a35dfd46962", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0840a01-b095-4860-b3e7-c46785c39058", "sighting_of_ref": "indicator--6958411f-16c0-4423-90f3-4a35dfd46962", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129fb895-45d2-497e-8764-bba58184b193", "sighting_of_ref": "indicator--70976701-28eb-4939-89fc-e56c7054094d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fcd60a6-2183-40d1-ac1a-08ac00ba1222", "sighting_of_ref": "indicator--70976701-28eb-4939-89fc-e56c7054094d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1223689-8222-434f-ad55-bf378e2ae806", "sighting_of_ref": "indicator--b175161a-dffa-4c24-af06-bf434d808744", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0592bb55-d524-4130-a301-dc9101d15328", "sighting_of_ref": "indicator--b175161a-dffa-4c24-af06-bf434d808744", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee39f5d-3f96-45df-89b7-b0808e217fcf", "sighting_of_ref": "indicator--3a8c5ec4-343b-4ecf-9358-3814dd67678d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742f7d66-eeb0-486b-9038-14e0ef2a40e9", "sighting_of_ref": "indicator--3a8c5ec4-343b-4ecf-9358-3814dd67678d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333acb78-2dd4-43f5-acb3-d9eb91ea00ce", "sighting_of_ref": "indicator--30d26f14-0184-467c-9051-38e50c99f7c2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fc571e-8781-4aa7-b3a9-4ae41ab3f1a8", "sighting_of_ref": "indicator--30d26f14-0184-467c-9051-38e50c99f7c2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fc4f31-1b14-4d9b-934c-45cc0a9a6c14", "sighting_of_ref": "indicator--30a378bc-609b-4db2-9e7a-5ca1174d43c6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83accd57-e9a1-4a42-a53c-dd94fd9311a7", "sighting_of_ref": "indicator--30a378bc-609b-4db2-9e7a-5ca1174d43c6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c376a7-7c89-4e6d-81c5-5b0e6277c7fa", "sighting_of_ref": "indicator--b39373d1-819d-4251-92a9-0fbf196a9248", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebc63bd-c91d-4c32-a119-92cc93c0a4a9", "sighting_of_ref": "indicator--b39373d1-819d-4251-92a9-0fbf196a9248", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4809e33c-c504-472d-b292-b5e0043d5a16", "sighting_of_ref": "indicator--1807ba06-9624-4f5d-acf0-f2e333967c07", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f339fe-8e00-4ece-8540-ea59bc734853", "sighting_of_ref": "indicator--1807ba06-9624-4f5d-acf0-f2e333967c07", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eccc6cf8-9ff9-4a80-bd21-8cc6cb4a81d4", "sighting_of_ref": "indicator--2bdc11e0-b9ef-4954-96ae-3865a0af5ac4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9dacb5-ae88-4308-857c-731e4b89ce6c", "sighting_of_ref": "indicator--2bdc11e0-b9ef-4954-96ae-3865a0af5ac4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff3729b-4f46-4080-95de-e29f0c4d391b", "sighting_of_ref": "indicator--0ab90237-3e81-4124-b5cd-265e3114e749", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62dde5e0-7700-4709-bb36-85612d897186", "sighting_of_ref": "indicator--0ab90237-3e81-4124-b5cd-265e3114e749", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08885a6a-b3e5-4528-b566-653d1365cd86", "sighting_of_ref": "indicator--96946cb8-03dc-431b-9b6e-3edbc0e2d5c1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45a58de-f4cb-4ad1-9b11-47d4dec951de", "sighting_of_ref": "indicator--96946cb8-03dc-431b-9b6e-3edbc0e2d5c1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62248776-2cfc-4598-9c17-9281d2c2f3b2", "sighting_of_ref": "indicator--f2f53983-e633-498c-a369-3fa8fe8006a9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281a9e40-c418-4146-b082-5cc81412198b", "sighting_of_ref": "indicator--f2f53983-e633-498c-a369-3fa8fe8006a9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7e6230-e74d-4b78-8e8a-f4ea5a673688", "sighting_of_ref": "indicator--a4ae62ef-0a43-4cc5-8283-16af9d7f2d53", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b8ae97-497c-4988-b3fa-294fbaecc482", "sighting_of_ref": "indicator--a4ae62ef-0a43-4cc5-8283-16af9d7f2d53", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69621ac1-e1f7-4c81-8fc3-bd2938c76abc", "sighting_of_ref": "indicator--0986e259-5fd9-4fc4-b0c1-defac81b26aa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8a5540-7b4c-4d1b-950c-618d76ba8e77", "sighting_of_ref": "indicator--0986e259-5fd9-4fc4-b0c1-defac81b26aa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a33d673-f76d-4c7e-8e60-91591b86290c", "sighting_of_ref": "indicator--ac43b0b7-1c9d-4a8b-8ab0-bed5d1ef165b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a102fff-3c7a-4bdd-a8f0-36845723b9af", "sighting_of_ref": "indicator--ac43b0b7-1c9d-4a8b-8ab0-bed5d1ef165b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6744af83-c5a0-45a3-8587-d7f3930bc313", "sighting_of_ref": "indicator--83f0efbd-3f10-46c6-badd-a19f168bb9f1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21254076-cceb-4aac-9c95-6a7dd94ac46b", "sighting_of_ref": "indicator--83f0efbd-3f10-46c6-badd-a19f168bb9f1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ebb9d70-de76-428d-a2f3-1780bf0dc598", "sighting_of_ref": "indicator--41ba1fbc-e6a9-4aaa-a2c5-d30deb4b4b1f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba77d1e3-7694-48bc-ab55-e7b4ed5fa563", "sighting_of_ref": "indicator--41ba1fbc-e6a9-4aaa-a2c5-d30deb4b4b1f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ddb4491-cbd7-425e-bc04-e8a93a87b5bb", "sighting_of_ref": "indicator--9a22595f-ffcb-4ac3-b59d-e128d921e896", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7d3b34-7a9a-4704-941c-af5eaabff2df", "sighting_of_ref": "indicator--9a22595f-ffcb-4ac3-b59d-e128d921e896", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449b2bba-fdf1-4f57-ab27-b5cd0989d744", "sighting_of_ref": "indicator--257e0c93-cd30-4668-872a-8946395a9950", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109f9122-d57b-445d-aaed-55789724679b", "sighting_of_ref": "indicator--257e0c93-cd30-4668-872a-8946395a9950", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d325a50-840c-4e56-8672-47cf2d94d994", "sighting_of_ref": "indicator--ebad0a02-f8bf-42c9-881e-e7bec3fb1546", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b255236-1738-42e3-9dd4-681830657907", "sighting_of_ref": "indicator--ebad0a02-f8bf-42c9-881e-e7bec3fb1546", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52eb7fd9-43f0-430f-8def-b4ae5175d5a9", "sighting_of_ref": "indicator--b1aef77c-bc9e-45c7-b886-482cf1f405c0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49edaf4d-6801-43c4-befa-ae9a8bcdafe1", "sighting_of_ref": "indicator--b1aef77c-bc9e-45c7-b886-482cf1f405c0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff398d28-1183-4a73-a1e1-ab0da4885a05", "sighting_of_ref": "indicator--650f36c8-8a9a-406d-827a-98d28c0afef0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fb67d9-414f-4803-aafa-9ee5260d8b11", "sighting_of_ref": "indicator--650f36c8-8a9a-406d-827a-98d28c0afef0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae88790-a295-4348-b842-7dff9432a8bf", "sighting_of_ref": "indicator--f3005b74-31da-4ca0-bd2c-219384ab3583", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fce0e33-e517-4994-b451-5a8786a1c513", "sighting_of_ref": "indicator--f3005b74-31da-4ca0-bd2c-219384ab3583", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84228fc-dafc-4ddf-9fcc-6acfa20b28cf", "sighting_of_ref": "indicator--f749885d-70a2-4422-bb0a-da28e22528d2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559643fc-2ef6-4047-8598-09f01c57504e", "sighting_of_ref": "indicator--f749885d-70a2-4422-bb0a-da28e22528d2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdd812d-6f55-4e27-8969-a02d4023ae1d", "sighting_of_ref": "indicator--7c6c7464-7628-40ad-8499-03a240166cec", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8dc6cb-2661-480b-9b0f-4f971e0579d3", "sighting_of_ref": "indicator--7c6c7464-7628-40ad-8499-03a240166cec", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45c9b95-cd74-4773-acd6-8bfa8bda16e9", "sighting_of_ref": "indicator--1221c6c4-84c0-4fe8-8b9a-8072f5d92a31", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479cfe12-beae-4ee7-8ebc-eb346a617d9b", "sighting_of_ref": "indicator--1221c6c4-84c0-4fe8-8b9a-8072f5d92a31", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57cd9fcf-b342-4de0-b4d0-6711e3b32a2f", "sighting_of_ref": "indicator--fe6bb3cc-f149-4f9e-a917-c251590cdd48", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27604b74-4cc6-4f9c-86df-fd56938027c3", "sighting_of_ref": "indicator--fe6bb3cc-f149-4f9e-a917-c251590cdd48", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191eb31e-9b1c-422f-996a-4f10131230a9", "sighting_of_ref": "indicator--d87889f4-1b8a-4a66-a529-6c6340dea327", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e06300-d0c9-402c-9fc2-c6faa853563e", "sighting_of_ref": "indicator--0a8629c8-36df-486c-9a5f-1bc06fbc83ff", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358e7bab-5184-41fd-b60b-5d8442b2e290", "sighting_of_ref": "indicator--0a8629c8-36df-486c-9a5f-1bc06fbc83ff", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e255b07e-f74e-4d80-9232-35fef7b7c598", "sighting_of_ref": "indicator--fe2d61fb-bd37-4b84-854e-2f8689ef71bb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385fc0e2-481d-49a5-9294-6183d0e8b0a6", "sighting_of_ref": "indicator--fe2d61fb-bd37-4b84-854e-2f8689ef71bb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433525c7-ae59-44c2-adb9-271260d5c3c9", "sighting_of_ref": "indicator--f6c3fc0c-56dc-48ee-ac81-cad218665702", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934f5857-1d2b-42b2-b434-a438873cc78f", "sighting_of_ref": "indicator--f6c3fc0c-56dc-48ee-ac81-cad218665702", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae075135-3c52-452f-aef4-e65c7760363b", "sighting_of_ref": "indicator--7fa36376-e256-41e2-9a76-a64c61e403d0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6dd922-3013-4f0a-8416-95e2f267a1d8", "sighting_of_ref": "indicator--7fa36376-e256-41e2-9a76-a64c61e403d0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205c495c-b2e5-4d5a-aee6-099e15e7a8c4", "sighting_of_ref": "indicator--201555d4-7368-4a48-a0fb-eb61d42902c9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b643f5-9c44-4579-8e0c-5210625d298d", "sighting_of_ref": "indicator--201555d4-7368-4a48-a0fb-eb61d42902c9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4d10ff-c484-42cf-841f-858b22aa6aa2", "sighting_of_ref": "indicator--b877d96e-72d2-4028-9447-f951552dfa9b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157797fc-953e-4ddb-944e-86adbd04b73e", "sighting_of_ref": "indicator--b877d96e-72d2-4028-9447-f951552dfa9b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf7acd3-c3e9-4311-8399-bb4172be5e9d", "sighting_of_ref": "indicator--0ff71983-0420-41cd-93ec-5b0b1e83cdd4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed395d0-1293-46de-9982-e2d3088b60d7", "sighting_of_ref": "indicator--0ff71983-0420-41cd-93ec-5b0b1e83cdd4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0903b288-fed8-4a1c-93e8-ebdc1d5e7e96", "sighting_of_ref": "indicator--23b7965d-7467-4bb8-8e09-947f2f2470c3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3283e64a-9af2-46af-8aab-8c6d7b0cc2be", "sighting_of_ref": "indicator--23b7965d-7467-4bb8-8e09-947f2f2470c3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb724274-7af0-4d14-afc0-28f3171d1d3f", "sighting_of_ref": "indicator--934d9c57-d61f-4708-a90c-235b476cdd06", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42132f7e-9a91-43ad-8a19-b98d2602f25d", "sighting_of_ref": "indicator--934d9c57-d61f-4708-a90c-235b476cdd06", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319c7570-33a6-4cb2-89f5-a1941e187cea", "sighting_of_ref": "indicator--368658b4-eac4-419a-bb50-d8c4b6bf4694", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898a89e5-e2e3-424f-9f79-ffc5dcfb2150", "sighting_of_ref": "indicator--368658b4-eac4-419a-bb50-d8c4b6bf4694", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ce9ebf-d942-4b98-9fc2-c455265ee6dc", "sighting_of_ref": "indicator--bbc50c27-a98e-4ce1-b54c-027796f6746e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c13a109-c17d-4eac-bb58-c165bbe1322e", "sighting_of_ref": "indicator--bbc50c27-a98e-4ce1-b54c-027796f6746e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c202d30b-52d9-4726-b694-1744c35407ca", "sighting_of_ref": "indicator--a954439b-2868-4f9b-af4a-075b1c7e3d91", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3cfaae1-25f8-4d15-8e12-0b18f1b3a066", "sighting_of_ref": "indicator--a954439b-2868-4f9b-af4a-075b1c7e3d91", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d4a61c-5f72-4357-ae9d-b1b98ea13baa", "sighting_of_ref": "indicator--858ac9a5-a9e1-4930-ba45-b7e0d0d09e74", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3f7d6a-6332-4bb3-a67b-f70d09b57779", "sighting_of_ref": "indicator--858ac9a5-a9e1-4930-ba45-b7e0d0d09e74", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b8c093-d339-4124-942e-6b2fba1b456b", "sighting_of_ref": "indicator--dd57ff1b-8b26-4c40-8218-d859c7d5e713", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5468aac-f1a0-417c-9cef-32a68b0333ea", "sighting_of_ref": "indicator--dd57ff1b-8b26-4c40-8218-d859c7d5e713", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868042be-b7c2-427a-bcba-ff1d93a5da66", "sighting_of_ref": "indicator--287f0d16-6d08-4f4d-a3a3-d9a1ba625a7e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5534a0c8-1a40-4b9a-9236-55f3f9411caf", "sighting_of_ref": "indicator--287f0d16-6d08-4f4d-a3a3-d9a1ba625a7e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbb4dd9-3663-4f83-b116-bd577e6f18ba", "sighting_of_ref": "indicator--25d24ac9-9d67-47f7-8ddb-fbce12485c97", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa421252-9dd1-47a0-874c-fab9cf046603", "sighting_of_ref": "indicator--25d24ac9-9d67-47f7-8ddb-fbce12485c97", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276814ad-d7c6-4df9-afab-a1206c698eab", "sighting_of_ref": "indicator--065efb86-6645-42f0-a3bb-919645afbf0f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe426d2-5701-499e-9f1a-9e631ca879db", "sighting_of_ref": "indicator--065efb86-6645-42f0-a3bb-919645afbf0f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a8183c-260e-4969-9896-574ca6c318bc", "sighting_of_ref": "indicator--d2e937c8-46a9-4320-9627-0fe5092815a2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b6eab4-761f-433a-bccc-d6680caef09f", "sighting_of_ref": "indicator--d2e937c8-46a9-4320-9627-0fe5092815a2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4430bb-f110-4d84-b4ae-47590514473f", "sighting_of_ref": "indicator--29fd02a1-3d61-4489-abb4-53698272dd3b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6138ea61-d784-46f6-86d0-f714409e373e", "sighting_of_ref": "indicator--29fd02a1-3d61-4489-abb4-53698272dd3b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01172f72-74e1-49d5-a8ee-ec1bb22bf8fa", "sighting_of_ref": "indicator--ed80dd31-46f5-4ad4-8beb-f953eb268414", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2e3037-329a-41e2-92f0-e4e40ea5de1d", "sighting_of_ref": "indicator--ed80dd31-46f5-4ad4-8beb-f953eb268414", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21793972-fe6e-4622-8053-e628d75b1657", "sighting_of_ref": "indicator--d303240f-47ae-4fa3-a652-ee2021026f4c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8682c659-77ac-4136-a21f-05c6ca8b0497", "sighting_of_ref": "indicator--d303240f-47ae-4fa3-a652-ee2021026f4c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5e3f60-6669-445f-b837-dcf78f0ccebd", "sighting_of_ref": "indicator--df79ebdd-c384-4a4a-a84f-6630414e387e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef4f6dd-5bcb-4a3a-8aad-afc52d498e08", "sighting_of_ref": "indicator--df79ebdd-c384-4a4a-a84f-6630414e387e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f729f408-8541-4884-b0e7-e9c3ec0d207e", "sighting_of_ref": "indicator--78a2ed65-a98b-4579-985b-e0bb611f4ea9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6f37bf-7c37-4055-9b01-96e471f29f3c", "sighting_of_ref": "indicator--78a2ed65-a98b-4579-985b-e0bb611f4ea9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f0ecf7-7066-41fe-8d0e-b1e8e0ff0e10", "sighting_of_ref": "indicator--956534e8-b6f1-41c8-be6d-9cf923edcf99", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53f2b20-805e-4cc2-8557-2574d1108616", "sighting_of_ref": "indicator--956534e8-b6f1-41c8-be6d-9cf923edcf99", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d18a11-a7d7-455e-9fbb-e4c374d82705", "sighting_of_ref": "indicator--eae648f5-0f17-4222-bafb-36c895e09f6d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe5dba9-8e15-4f76-9a98-ba0576f762d8", "sighting_of_ref": "indicator--eae648f5-0f17-4222-bafb-36c895e09f6d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3ad6bb-803b-4f09-85d1-5eace76ea30b", "sighting_of_ref": "indicator--aa508efe-d8c5-48d4-b2b0-4d6b810afcbf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8308913-9b77-4059-9e3f-d9c80a5ede0c", "sighting_of_ref": "indicator--aa508efe-d8c5-48d4-b2b0-4d6b810afcbf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fc29d3-e7ac-4674-8398-d90752120864", "sighting_of_ref": "indicator--d6f57bfd-fe38-45bc-aa70-a13d4906c4f8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d5d07c-e204-4d9a-a813-a5bece56b5a2", "sighting_of_ref": "indicator--d6f57bfd-fe38-45bc-aa70-a13d4906c4f8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e88b95-3408-4c5f-81a0-17c2b65e6254", "sighting_of_ref": "indicator--087fa56e-5687-4258-a63e-86efde6a5e6b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e378b1-f6a9-4aca-a42f-93e5d4a78b8b", "sighting_of_ref": "indicator--087fa56e-5687-4258-a63e-86efde6a5e6b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0051da-6aac-4df4-bacc-9f7141c62900", "sighting_of_ref": "indicator--757c0619-5be0-4c96-bad4-06c7d5511e7d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0141bfbf-de5c-40b4-94c3-6e467b76b020", "sighting_of_ref": "indicator--757c0619-5be0-4c96-bad4-06c7d5511e7d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2876be0f-29e1-406c-b238-aaa4e3b10dc7", "sighting_of_ref": "indicator--4614a6cf-b265-40dc-825f-87a38c264194", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b80fab3-c732-4427-95f5-920f3b4e57e5", "sighting_of_ref": "indicator--4614a6cf-b265-40dc-825f-87a38c264194", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1526c49-b0f0-47f5-9b52-25748f68d8a3", "sighting_of_ref": "indicator--6f767198-d13b-489b-afcf-6ce27e0e0d35", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485cceeb-9bcc-4ae1-a956-d1152110fa00", "sighting_of_ref": "indicator--6f767198-d13b-489b-afcf-6ce27e0e0d35", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37599564-3e33-4f81-98fb-7055620ade0f", "sighting_of_ref": "indicator--bad2d2ec-3fdc-432a-956d-093621d1ad98", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cff9fa-9e4e-44e0-936e-d102aab17e6f", "sighting_of_ref": "indicator--bad2d2ec-3fdc-432a-956d-093621d1ad98", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac92eb7-9c41-456c-ba9a-0f8438a5ff4f", "sighting_of_ref": "indicator--10273835-bcfa-432e-80be-92651d7c359d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b365d52-db68-42f7-8352-1875abd47370", "sighting_of_ref": "indicator--10273835-bcfa-432e-80be-92651d7c359d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250d5cfd-7d3e-4dcf-9661-301d00d88996", "sighting_of_ref": "indicator--dbd5ff0f-2812-4c54-bcb1-e0adaff9b195", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97673cf-4d20-47d5-a364-8b4508fac9da", "sighting_of_ref": "indicator--dbd5ff0f-2812-4c54-bcb1-e0adaff9b195", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c05581-76e5-4869-989d-67cf162c7b1a", "sighting_of_ref": "indicator--ec96f128-fd45-48aa-92d5-f491e37b5e1d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323863e7-2f60-4c82-89ea-148c5a82d214", "sighting_of_ref": "indicator--ec96f128-fd45-48aa-92d5-f491e37b5e1d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7280f3b6-79b7-42a2-bed0-2bddda92a8af", "sighting_of_ref": "indicator--6cbd2189-e5f4-4ca5-b79a-5bbb7f01d0de", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f086b1-8da9-4552-8c4d-fe4f94845e0b", "sighting_of_ref": "indicator--6cbd2189-e5f4-4ca5-b79a-5bbb7f01d0de", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabe47c3-d263-4428-9a15-f3ce0b2ca4bc", "sighting_of_ref": "indicator--fa20a8ff-9e28-4e76-8c80-df3c719acfef", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a465879f-bc76-4895-8ad8-39bac9ab8492", "sighting_of_ref": "indicator--fa20a8ff-9e28-4e76-8c80-df3c719acfef", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14371da7-c706-4754-bb65-731742937c98", "sighting_of_ref": "indicator--958f9e5c-7d45-4ea0-8b5a-9dfa8d5414ef", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625e5ed1-5a60-49e0-8516-4dfb52f45d9a", "sighting_of_ref": "indicator--958f9e5c-7d45-4ea0-8b5a-9dfa8d5414ef", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819bd3e0-1a33-438b-ad02-deb8c4587ed8", "sighting_of_ref": "indicator--7bca3955-4601-49be-8138-8d3e2bed7ea9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d124998-13d2-4a9a-95ec-0b8e2f04dd8a", "sighting_of_ref": "indicator--7bca3955-4601-49be-8138-8d3e2bed7ea9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71148de-04b1-4193-af2b-7d0ffcc10632", "sighting_of_ref": "indicator--6fd6f234-a02b-4486-b5e6-099e03e655f4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83461ce9-33c0-4dea-83d0-69b23117e8af", "sighting_of_ref": "indicator--6fd6f234-a02b-4486-b5e6-099e03e655f4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1628ca-3b8c-41a1-ac33-1409988c2b61", "sighting_of_ref": "indicator--f28e2e34-f86d-4ac3-a8c4-1da4ac0193e4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b082b3-1501-442d-b98e-d4f2f4a9e850", "sighting_of_ref": "indicator--f28e2e34-f86d-4ac3-a8c4-1da4ac0193e4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686ad5b1-4891-4248-a334-17309e2fde2a", "sighting_of_ref": "indicator--05b21898-be3d-4b21-9cd9-0b4708049039", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd597551-338f-44f0-8842-2bc9ebe57cdf", "sighting_of_ref": "indicator--05b21898-be3d-4b21-9cd9-0b4708049039", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8cf134-e723-4afd-804e-7f3207253f89", "sighting_of_ref": "indicator--e0f77682-2f49-425a-ab0f-1900ec30baeb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3956c7fb-6433-48ab-b008-f997f7861988", "sighting_of_ref": "indicator--e0f77682-2f49-425a-ab0f-1900ec30baeb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b92212-08d7-4c25-853e-a189d0969282", "sighting_of_ref": "indicator--f06c0789-9be3-427d-8878-20fb2c72a997", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434b60f2-1750-49a8-82a7-523f87a68a2d", "sighting_of_ref": "indicator--f06c0789-9be3-427d-8878-20fb2c72a997", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48207913-5118-4f29-bca4-89725c7875de", "sighting_of_ref": "indicator--48220a34-c3f9-4dc5-9f62-ee0703661226", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7728191e-1761-4c04-8778-17f1983172ed", "sighting_of_ref": "indicator--48220a34-c3f9-4dc5-9f62-ee0703661226", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34259e94-bf5b-4735-977c-08d5911ea57d", "sighting_of_ref": "indicator--48220a34-c3f9-4dc5-9f62-ee0703661226", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51503794-2246-4006-b796-1ed046e74285", "sighting_of_ref": "indicator--66a5f603-2a17-4795-9882-b593b50c3ac5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee1984d-2a9a-423a-973a-bc14164b0927", "sighting_of_ref": "indicator--66a5f603-2a17-4795-9882-b593b50c3ac5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb10e9e-e5d4-4e56-8bc3-c932d3b29734", "sighting_of_ref": "indicator--66a5f603-2a17-4795-9882-b593b50c3ac5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7cc0a6a-e1f7-4e42-83b1-d432ae6d8538", "sighting_of_ref": "indicator--819f5713-beed-4b69-9817-7dab048fcf6d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ee9e5f-082a-445f-b808-64881da22057", "sighting_of_ref": "indicator--16efc134-4d15-444b-b765-8d6e7a64d0cf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1a3eee-20ba-404c-baa6-90bff8293ff0", "sighting_of_ref": "indicator--94928935-072a-447b-bef0-e8b7b1830da4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396892a0-b114-42a8-986a-8b28fbd46ed2", "sighting_of_ref": "indicator--94928935-072a-447b-bef0-e8b7b1830da4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80170570-ed12-44c9-8cbd-43399b010680", "sighting_of_ref": "indicator--94928935-072a-447b-bef0-e8b7b1830da4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2789bb18-0368-47dc-b0db-2d2055270824", "sighting_of_ref": "indicator--ae36c537-42bd-47d8-899e-16d08b3aa395", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868d3f67-f1f8-4d15-9f75-d1136325252a", "sighting_of_ref": "indicator--ae36c537-42bd-47d8-899e-16d08b3aa395", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afe56c7-315e-44e0-bbc6-63c5f29b9cd6", "sighting_of_ref": "indicator--88bb6eb7-2dc8-4ad7-81d6-79de2a37cbac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bffe529d-0fcd-4f0c-acdd-ededc48df8c6", "sighting_of_ref": "indicator--da341f32-2850-47ad-8aa6-1079e910fc88", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a031d3-2df8-4245-92d2-bc9950c0c7bc", "sighting_of_ref": "indicator--cacf3853-bcef-4aea-855c-7491a1356598", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc94dd2c-a04c-4ff8-a4fb-0d66d8ac6727", "sighting_of_ref": "indicator--cacf3853-bcef-4aea-855c-7491a1356598", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4d41cf-ac40-4ead-b0ef-9dfeb3b4f72e", "sighting_of_ref": "indicator--cacf3853-bcef-4aea-855c-7491a1356598", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d00f2e5-1864-490f-b6a9-e29d43b2a39a", "sighting_of_ref": "indicator--8c88c9ab-061e-4ecb-a334-743f8396cdfc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48961f7d-5dd5-4a45-88d4-c8697d4419e0", "sighting_of_ref": "indicator--8c88c9ab-061e-4ecb-a334-743f8396cdfc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31141652-4145-431f-8d8f-9bd68b003183", "sighting_of_ref": "indicator--8c88c9ab-061e-4ecb-a334-743f8396cdfc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d702bcd-19a0-4a80-953b-9613aeb0d66a", "sighting_of_ref": "indicator--d1c80d2d-7fbe-4117-b9b7-2bbb653ca0c4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8ae096-511c-4fea-987c-e3e647fa683e", "sighting_of_ref": "indicator--d1c80d2d-7fbe-4117-b9b7-2bbb653ca0c4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d88033-4787-4831-b338-4cb49c51a338", "sighting_of_ref": "indicator--48114c7f-3bcd-47b0-986c-133f31696e73", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b26c85a-fea2-452f-8cb2-b3d6c878169d", "sighting_of_ref": "indicator--48114c7f-3bcd-47b0-986c-133f31696e73", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c07a80-5a89-4bc7-893e-14c44bee911b", "sighting_of_ref": "indicator--48114c7f-3bcd-47b0-986c-133f31696e73", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e4dd6a-2db7-4b5a-91b7-087275f401c4", "sighting_of_ref": "indicator--e1f4aeef-bfc4-4c70-8d8e-ae951cc900c4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27283b2-85c2-4035-b771-42173c0cb894", "sighting_of_ref": "indicator--e1f4aeef-bfc4-4c70-8d8e-ae951cc900c4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20279650-b5c7-4571-afb7-ea745d4c9407", "sighting_of_ref": "indicator--3dbe6b06-db9f-4cd7-8fd1-089c3d192009", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f69bcc6-adf9-4ee5-871d-40cdc3b54342", "sighting_of_ref": "indicator--3dbe6b06-db9f-4cd7-8fd1-089c3d192009", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dccd9d6f-9ac4-465d-babf-fcffdc912a39", "sighting_of_ref": "indicator--3dbe6b06-db9f-4cd7-8fd1-089c3d192009", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb1de22-6466-41f8-ae84-58f636320dc4", "sighting_of_ref": "indicator--c278267f-e1d7-4d05-84d0-87838e7b8393", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a884195a-3edc-4478-909e-155d7e262acf", "sighting_of_ref": "indicator--cbf0b9fd-2d0b-4832-b9e7-bb8dcda6f9ad", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1a4491-8093-4898-9def-e6784a181184", "sighting_of_ref": "indicator--cbf0b9fd-2d0b-4832-b9e7-bb8dcda6f9ad", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3dcb84-f439-42a3-95b1-17ff41e3e71a", "sighting_of_ref": "indicator--cbf0b9fd-2d0b-4832-b9e7-bb8dcda6f9ad", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477f110b-b278-4ae0-8d46-46f499ada6fa", "sighting_of_ref": "indicator--b2f2daf8-32e4-4a65-b92b-496ffb71979d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c7ce31-1672-4d40-8ded-91f558cd5233", "sighting_of_ref": "indicator--201dddc4-68b9-4035-98d4-be98035d54ed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246b60cc-0290-4cf1-80d7-b475a4f4c002", "sighting_of_ref": "indicator--201dddc4-68b9-4035-98d4-be98035d54ed", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ff27bc-4847-4e85-b89c-eb5bab006a81", "sighting_of_ref": "indicator--b2838da9-689c-4360-8535-019634c0029e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48835935-f554-4501-9527-93c19176ae5e", "sighting_of_ref": "indicator--aed7a52a-c424-4594-945d-aab2fed2f96f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b8b7ac-7989-4317-aea5-4cacbf9f6405", "sighting_of_ref": "indicator--954862c6-db5e-45ca-acd1-30bec1af851b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f20a9c-ca30-4120-a164-b609c8f1f51e", "sighting_of_ref": "indicator--954862c6-db5e-45ca-acd1-30bec1af851b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438a30d2-8c42-4b3d-9b29-067c15a8cb90", "sighting_of_ref": "indicator--954862c6-db5e-45ca-acd1-30bec1af851b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d2b7d6-c4b2-4da1-8745-7ed09683ca43", "sighting_of_ref": "indicator--30c660b6-4e01-48da-aab7-b9ca6ae0c32f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885278f3-eb17-4760-acbe-7e28d9e5a75f", "sighting_of_ref": "indicator--30c660b6-4e01-48da-aab7-b9ca6ae0c32f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ebb6e3-eb20-4605-b4a5-00e17dde127d", "sighting_of_ref": "indicator--30c660b6-4e01-48da-aab7-b9ca6ae0c32f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e902fd-5e44-474c-837f-30054b07057d", "sighting_of_ref": "indicator--35e3f8c3-7a1c-4216-a306-ac6e873c0158", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ef35c5-059e-4d58-a323-6b7812ddf557", "sighting_of_ref": "indicator--35e3f8c3-7a1c-4216-a306-ac6e873c0158", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5189997b-2be4-4e28-924c-6d6889e4a05a", "sighting_of_ref": "indicator--4246763e-65af-4907-8769-62bc8e63b0ec", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838ba673-5fe9-406e-8d2e-f641f4270800", "sighting_of_ref": "indicator--45b522c5-8d4f-4907-9bbc-60460cbfbaa8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ac7559-afcf-40a4-9504-fba0945d385f", "sighting_of_ref": "indicator--140a09c4-07d1-4925-9d4d-8d67387a2d65", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9970297a-3294-4fb6-a461-d96ff4d415d4", "sighting_of_ref": "indicator--b1798a4e-a7e0-454a-a0d5-78853ac1e634", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57e3841-d358-40a0-903f-d4cdd7f1d827", "sighting_of_ref": "indicator--e6d6967f-7682-4545-b673-cccc595bf804", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a082e4c-59f0-41d6-ad85-750bbcc8b2fc", "sighting_of_ref": "indicator--e5b28852-264a-4cd6-ac92-4ecfdf074807", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c323eb76-087f-4e41-96c2-7f3565885da4", "sighting_of_ref": "indicator--8974ff56-9cde-4ef8-beaa-8bb1fd951bd6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837cdba3-96bb-43e6-a0f4-cdab80e54b84", "sighting_of_ref": "indicator--88f27ec8-2420-4229-90bc-b696f98adcf2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01bdb6d-48d1-41c1-96ff-ef734650d4ee", "sighting_of_ref": "indicator--de9117d8-8bc8-4e38-b697-4976edb04ca2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d0f2af-9b0f-4489-a6d5-cadec01f7d72", "sighting_of_ref": "indicator--de9117d8-8bc8-4e38-b697-4976edb04ca2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eee4e0b-f9d1-46ac-aada-a6bd4b6b9a46", "sighting_of_ref": "indicator--de9117d8-8bc8-4e38-b697-4976edb04ca2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e95640-9f60-48d3-9e44-42362367b7ba", "sighting_of_ref": "indicator--ceae94b4-1473-4d14-89f0-817d7ff29360", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6457acae-9696-431d-bbe1-ce6d1b776a1b", "sighting_of_ref": "indicator--9909bd3a-753b-4a8c-8a64-8507f257c5bf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac39d046-51b3-42df-837f-801f1c586685", "sighting_of_ref": "indicator--f1404777-2a50-4540-bf39-131e0916995a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614da0af-14e2-4e05-91e8-47bc698186c3", "sighting_of_ref": "indicator--70377d98-88f6-44c3-aa5a-e3f566291066", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43eee6fe-8ffd-413c-9b09-64d4b925fe16", "sighting_of_ref": "indicator--3b772789-6a8d-44c7-91af-bf24ddafaf8a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58927235-0851-4613-bfb1-2f8f09bd68b8", "sighting_of_ref": "indicator--1af62741-7580-4e8f-8f1f-730377279090", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cebd71-c0ab-411c-84b7-6da90951cdcd", "sighting_of_ref": "indicator--5c04ce93-b4cc-4176-a726-2ea62aedba19", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4128e450-9596-495a-9e55-13b8d2e2b59f", "sighting_of_ref": "indicator--5c04ce93-b4cc-4176-a726-2ea62aedba19", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95f5418-ba50-493d-bfb7-701e887fc513", "sighting_of_ref": "indicator--5c04ce93-b4cc-4176-a726-2ea62aedba19", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c4d7b2-4bf1-41b5-bca7-5169a15cf625", "sighting_of_ref": "indicator--3fbc4daf-da0a-48bc-8167-e30b802e5e2d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06184016-ca66-4416-bed0-86fd7b540f7c", "sighting_of_ref": "indicator--3fbc4daf-da0a-48bc-8167-e30b802e5e2d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376d3ad3-d4b8-40c7-ac3a-a87fa071deb2", "sighting_of_ref": "indicator--3fbc4daf-da0a-48bc-8167-e30b802e5e2d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d6883d-531c-4fdd-90cf-5d8b90e43b6d", "sighting_of_ref": "indicator--ff1a7ffa-7732-4d66-944e-9911efe685d2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130fb5a7-32f1-4e20-a7e7-8b438994a433", "sighting_of_ref": "indicator--ba78982e-aa2b-4d09-b69c-205b86bf7779", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b287ccd5-0e2f-473e-8faa-c7ca26c390c1", "sighting_of_ref": "indicator--1bf3ea44-10eb-4708-9799-58e3b67d5b9b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ef86ab-1729-4f22-be90-1e9703c388b3", "sighting_of_ref": "indicator--e9f85b58-10e9-4966-a488-ec7101b35ce5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c280144d-851b-4405-8fa3-b2540718092d", "sighting_of_ref": "indicator--152a93c2-c4cc-49d7-a1d2-c9ba85f5dca0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8457c9a-1b58-4167-ad94-9d6292e06e36", "sighting_of_ref": "indicator--21428e64-655c-49f3-9deb-30b27d36c1e0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb2da36-8b6f-4f37-aa31-36b78435b4b5", "sighting_of_ref": "indicator--32c56fcb-da7e-4dcd-9f13-b45f668689ee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c47fb8-b5a5-4759-b4e1-8604b1233fe5", "sighting_of_ref": "indicator--14f5dac8-3014-47ed-8546-2ddc46a4b54e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f118dc60-6c27-4ea3-b903-45ac69906c08", "sighting_of_ref": "indicator--55cf4dd8-24f7-4488-9ad4-ff3e529360a2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee966690-a9b0-46ed-ae05-ae380fa80354", "sighting_of_ref": "indicator--55cf4dd8-24f7-4488-9ad4-ff3e529360a2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bce8745-8790-47ee-819b-fa4491d5a237", "sighting_of_ref": "indicator--04cffa82-c089-4093-964f-e48b7f207596", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d70d73e-d894-411c-80b6-8503a351fbd7", "sighting_of_ref": "indicator--92c37d04-0028-4560-b3f3-8e3ac59ecd34", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8838cd5b-61c2-4201-b540-c3c70d5ab309", "sighting_of_ref": "indicator--eada2470-9864-4ae8-9bc0-e31528ad270c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b717e9ab-b9c6-4771-a81f-ed42ec841ca9", "sighting_of_ref": "indicator--59379613-95e6-4b22-9cf9-02e19ef514e0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e3cd9b-ce45-4305-a835-49065d7123fa", "sighting_of_ref": "indicator--59379613-95e6-4b22-9cf9-02e19ef514e0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d3f6f1-7d36-465f-b50f-699f2f66b15e", "sighting_of_ref": "indicator--59379613-95e6-4b22-9cf9-02e19ef514e0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd28476-cc7e-42c0-a43d-c0b4ded9c1fa", "sighting_of_ref": "indicator--73323ebf-9cf0-41e2-aaf5-ba3f97816174", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59a5fb8-824a-4cdc-8a36-de8cb5b80b8f", "sighting_of_ref": "indicator--73323ebf-9cf0-41e2-aaf5-ba3f97816174", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1ff3c3-472b-4739-9d42-0558cf5b55a9", "sighting_of_ref": "indicator--73323ebf-9cf0-41e2-aaf5-ba3f97816174", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220a0427-c3da-4a4c-891d-5c957bdb7b6b", "sighting_of_ref": "indicator--6bc9b929-b7c9-4485-a574-991ff133af7d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978182a3-5aee-4939-baae-91edf1f9a277", "sighting_of_ref": "indicator--4ecb5660-8acd-43d2-aa0d-f92469abc426", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c5582e-d7c1-48a3-849e-1ccd3a7c1d42", "sighting_of_ref": "indicator--8476dcdd-a3fd-45fc-a91a-357c943b63a4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bff3a88-e967-4fad-a649-d64047e4bff8", "sighting_of_ref": "indicator--8476dcdd-a3fd-45fc-a91a-357c943b63a4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe11704-af8b-4b44-b22d-dc519999dbfb", "sighting_of_ref": "indicator--3b38c121-1984-4d5d-a61b-864420977c57", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e54f5b5-7aa1-4926-95a9-5b88c95b1c0f", "sighting_of_ref": "indicator--b3a9cb01-cda4-41fe-b83f-6642147fb3df", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e774adef-5639-4ccd-8eb7-342090dc9665", "sighting_of_ref": "indicator--3afc18c8-a32d-48d5-9d2d-016986ae033a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02c87d7-1e23-4705-95c0-65a2522e2cad", "sighting_of_ref": "indicator--fb704990-7ac0-4d78-9275-83edb3b9abe1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392bc31c-6145-4633-a244-1590b04a4c86", "sighting_of_ref": "indicator--fb704990-7ac0-4d78-9275-83edb3b9abe1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475d9315-179c-43c4-ae93-847a26d7eb29", "sighting_of_ref": "indicator--2b6b5b87-f327-4e4d-a7a4-799090376bc6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af607465-6601-4a55-83d5-76539eb140b2", "sighting_of_ref": "indicator--2b6b5b87-f327-4e4d-a7a4-799090376bc6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b983ce1-1f38-4ffc-8d13-4a5fc29f6d34", "sighting_of_ref": "indicator--fd028f97-c13a-49cb-ba73-cb2d59d14727", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78dbaa2c-2928-4a8f-ba31-b5d58f5c97d9", "sighting_of_ref": "indicator--55c9de6f-4f7a-4e4f-acac-b12548b9875c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0badea-a576-426a-a46a-c9a8615892e8", "sighting_of_ref": "indicator--ea8b96e3-c870-49db-bd6e-0d721e4b755f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d56642c-e971-40db-8604-73f71fada1de", "sighting_of_ref": "indicator--de2a0229-5903-40bd-9e96-6078cb251dcb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a79bd9-501f-4889-942d-150b1d742e08", "sighting_of_ref": "indicator--dfc56972-8e90-4993-a470-0f40a4773954", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6d407d-9dec-4941-884e-7ee860b3700f", "sighting_of_ref": "indicator--3c85bb66-55b0-4745-b18c-9cbfe7092d2f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f4429e-9bb0-4be1-9647-c38c9d46a8fa", "sighting_of_ref": "indicator--e02ec9cb-6078-42a1-b6d1-5b1effb81c67", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a8646c-18c6-4361-9b3c-8d38b30d19e0", "sighting_of_ref": "indicator--f9660e58-596e-4b5a-89cf-bc0e3a00600f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eef5887-74dc-4838-ac2d-bc82c8f4436a", "sighting_of_ref": "indicator--d7583b74-3975-4c73-9b1f-b24403140e30", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76afb028-59b3-4366-b50e-1a86e8a98444", "sighting_of_ref": "indicator--cc55a8e7-76a6-41ca-a3cd-39ae1dac814f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66198757-ebcf-40bf-9309-9b397e419cb0", "sighting_of_ref": "indicator--2ab9bdcc-7607-4ccf-bed9-7655df80a15a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b956cd8-d896-4897-9631-17335cab8b54", "sighting_of_ref": "indicator--05f08c29-e404-4140-b558-c1e2ca91d6c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ca0fc1-6f38-4b89-8062-a44940f357a2", "sighting_of_ref": "indicator--b974db76-45d5-4f01-8049-e5d57f3d21d0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2ca13b-5179-41c5-8134-2944dcd67418", "sighting_of_ref": "indicator--b974db76-45d5-4f01-8049-e5d57f3d21d0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538ed1fe-c1c9-48b0-8b6b-e15c6ce72f21", "sighting_of_ref": "indicator--b974db76-45d5-4f01-8049-e5d57f3d21d0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0065837d-873f-4bb0-981b-66a344115180", "sighting_of_ref": "indicator--aaf66fa7-7ed2-4923-904b-0af06ec1145f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f2174d-7082-4515-8501-00fb9aaf6e6f", "sighting_of_ref": "indicator--b3b37b76-cc4b-4b91-87eb-b6a45f524abf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b0cd0a-de61-40e6-8a56-6ca166196c28", "sighting_of_ref": "indicator--b3b37b76-cc4b-4b91-87eb-b6a45f524abf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815ba22a-3078-42d0-b750-58f57837838e", "sighting_of_ref": "indicator--b3b37b76-cc4b-4b91-87eb-b6a45f524abf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ac5d06-7105-46b3-b39f-e9de66efe3c1", "sighting_of_ref": "indicator--3aae72c6-1891-4fc4-b386-848edd32da40", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb798db-4a2d-4b1a-a700-3853ccb1912f", "sighting_of_ref": "indicator--3aae72c6-1891-4fc4-b386-848edd32da40", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef33536-d963-4be9-8d24-5567b99fe959", "sighting_of_ref": "indicator--3aae72c6-1891-4fc4-b386-848edd32da40", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1689f87a-98b9-4fad-b89b-957d241a8f11", "sighting_of_ref": "indicator--052c010d-9f7e-4246-ab99-39b56d1a79da", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372e1b57-c68c-4402-b591-5f8a1cd4c071", "sighting_of_ref": "indicator--052c010d-9f7e-4246-ab99-39b56d1a79da", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffaca8b9-6442-4036-82df-9cfc9abe7b95", "sighting_of_ref": "indicator--052c010d-9f7e-4246-ab99-39b56d1a79da", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941ae042-888e-4861-b2a7-4ee5749f6fc6", "sighting_of_ref": "indicator--91096c10-bbef-4e6b-887d-6c37d7500846", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f883bb-f9b5-4e36-a6f6-80e0d3e1fbe6", "sighting_of_ref": "indicator--1cfddefc-24af-4f53-8960-17da53041be1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3356ec48-decf-4e8f-a5fb-2cab2292223f", "sighting_of_ref": "indicator--5ae5015a-908b-4309-83a4-2794cf6dbe0f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b37b8e3-1f81-4eaa-834a-01c6b5e3251a", "sighting_of_ref": "indicator--29ef470c-0a0f-4b93-ba6c-d7a6385b3604", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088e79fa-dd7c-4828-8ae3-69066da80711", "sighting_of_ref": "indicator--2c6a4bf0-f772-4027-89d7-741a1c278d0a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cfa970-6f42-4b2d-828b-3e0c5690d9d8", "sighting_of_ref": "indicator--aa04896c-5ea3-47b5-b63c-b2471105983d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7888bb9d-cd1c-44cc-a43a-4f55de144acb", "sighting_of_ref": "indicator--d8ee5745-7c94-4fd0-9516-b71d651ddc0f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c2828a-0399-4d0c-8f00-5d692f8571d3", "sighting_of_ref": "indicator--d8ee5745-7c94-4fd0-9516-b71d651ddc0f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f08b6a2-db0d-4865-b7dd-b864d500dc37", "sighting_of_ref": "indicator--eb7c6b92-c89a-4569-af4d-be6991a6a6c6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c02824-3c71-4dad-a7a6-ea591ddd7834", "sighting_of_ref": "indicator--eb7c6b92-c89a-4569-af4d-be6991a6a6c6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a41d1e-3a71-4ca5-a87f-4f235e01e847", "sighting_of_ref": "indicator--05c792f1-f119-403e-81ab-3fa417e7dee2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d70bf0-2ee0-4434-9045-4aded9156c6b", "sighting_of_ref": "indicator--05c792f1-f119-403e-81ab-3fa417e7dee2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ca0141-3633-4030-aaf1-e26a66173b4a", "sighting_of_ref": "indicator--bc18d672-32d0-453b-9091-388d21c1be5c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9b3a6b-585e-4a0e-9b37-abd469cd86ac", "sighting_of_ref": "indicator--bc18d672-32d0-453b-9091-388d21c1be5c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39434c6c-e0a6-445e-b3d2-14ebce3ffd91", "sighting_of_ref": "indicator--bf2bd2dc-171d-40c1-8176-4c29a8f22ba7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111947ce-73ee-4fae-b795-572b21a16785", "sighting_of_ref": "indicator--bf2bd2dc-171d-40c1-8176-4c29a8f22ba7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66515b5e-f8eb-4a1c-801d-75e1211c52ac", "sighting_of_ref": "indicator--01f9acbe-b720-4ac1-a467-f477ae4cac72", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592ae375-6d17-4922-94a4-b5bd1030b43e", "sighting_of_ref": "indicator--01f9acbe-b720-4ac1-a467-f477ae4cac72", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbe4e31-45ab-4520-a7fa-4f6af0f36489", "sighting_of_ref": "indicator--a62e1863-7abb-43b1-a31e-3fe4202e77b8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83da7de6-a0d7-4087-aef6-201045363352", "sighting_of_ref": "indicator--a62e1863-7abb-43b1-a31e-3fe4202e77b8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f5513d-d2c9-4818-8f07-b1257b1887c6", "sighting_of_ref": "indicator--51d7fddf-293b-49cc-b402-c7f4d6472e82", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc0b211-3b88-476d-ba18-6d961aa34e2a", "sighting_of_ref": "indicator--51d7fddf-293b-49cc-b402-c7f4d6472e82", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b95504-8451-4c9a-a33e-7e77b307ed9d", "sighting_of_ref": "indicator--c90057e6-7488-4bc0-ad01-fcc34244932d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32430771-029e-4de8-b689-dad49601db8f", "sighting_of_ref": "indicator--c90057e6-7488-4bc0-ad01-fcc34244932d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b055ca05-7b2a-4cd5-b760-39c9e7fea289", "sighting_of_ref": "indicator--f77eba82-9364-4280-8dfb-966727612b2f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27013d3-4db1-4621-b887-9542a50c8515", "sighting_of_ref": "indicator--f77eba82-9364-4280-8dfb-966727612b2f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438634f3-ef7e-4ff7-9986-59c194beb4e5", "sighting_of_ref": "indicator--89a546a7-80c6-4878-88d9-fe732aaa2f29", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8f8f08-f875-4548-83c4-6e0bb47a7e1e", "sighting_of_ref": "indicator--89a546a7-80c6-4878-88d9-fe732aaa2f29", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde959ed-ec42-4a5c-b73c-cc624a6dca49", "sighting_of_ref": "indicator--2ccf8630-3795-48ec-a411-9d449d83c466", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2e8ae3-ac9c-4904-851a-ef09cb8a5b27", "sighting_of_ref": "indicator--b8c6b824-991a-432d-b048-0dd8cb07ed38", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6354cd3-162d-4dd7-bcf7-d18f62706d9c", "sighting_of_ref": "indicator--b8c6b824-991a-432d-b048-0dd8cb07ed38", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c671c45-6e06-4943-93e2-3d5f0d61823e", "sighting_of_ref": "indicator--3be717b3-0575-421d-874d-76a4c5e0c5df", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852da853-1897-44db-a5cb-c27a5c9f898b", "sighting_of_ref": "indicator--3be717b3-0575-421d-874d-76a4c5e0c5df", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d57f76-d85f-4296-b32b-f37528df1455", "sighting_of_ref": "indicator--a208da32-2f07-4a0a-b1dc-1e95fe180142", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf723f1a-44be-4c81-afb3-5fc310df34f0", "sighting_of_ref": "indicator--a208da32-2f07-4a0a-b1dc-1e95fe180142", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d041e0-be95-4a18-babb-202046949a39", "sighting_of_ref": "indicator--91e1fe15-60ed-4d22-95ca-1ae7f0105dfc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8241349-e119-4690-a4ca-a9efaf36cf75", "sighting_of_ref": "indicator--91e1fe15-60ed-4d22-95ca-1ae7f0105dfc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46e7257-c59b-4161-9960-ee05f549871d", "sighting_of_ref": "indicator--f004edba-ffa3-485b-a4e0-a14d46ffedfb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0c4b42-3b58-4851-8412-4db7614e8d01", "sighting_of_ref": "indicator--f004edba-ffa3-485b-a4e0-a14d46ffedfb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6415628e-0559-43d2-aa5c-cb8a325a0661", "sighting_of_ref": "indicator--faf8602f-7505-4f71-908d-8fd44ed1321d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43077435-6dbe-4407-bedb-5004d90f4bee", "sighting_of_ref": "indicator--faf8602f-7505-4f71-908d-8fd44ed1321d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542fd0c7-f3e0-4f28-952b-48258d04607e", "sighting_of_ref": "indicator--71229c2c-d818-4242-9599-e34620d2b134", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882970f5-ebc4-4058-91b0-982239caf96e", "sighting_of_ref": "indicator--71229c2c-d818-4242-9599-e34620d2b134", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7728cb93-6020-4687-b30d-a80a9a416cca", "sighting_of_ref": "indicator--eea4fe97-1ad1-4d84-aec2-cf9201aded51", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d636c55e-e6ca-44ba-a1cc-7b3d14910460", "sighting_of_ref": "indicator--eea4fe97-1ad1-4d84-aec2-cf9201aded51", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c897ef2-624a-449f-8726-d34536dae2f5", "sighting_of_ref": "indicator--448b6e3d-648a-43ae-a832-b9038fd3a3b2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498d3d07-fb73-4c07-a1c6-b0f74c23f16c", "sighting_of_ref": "indicator--448b6e3d-648a-43ae-a832-b9038fd3a3b2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f995d4-538b-4fcf-a19f-575afcfac2ef", "sighting_of_ref": "indicator--bef88e88-5698-4f8c-aa30-2bb135c06070", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747ebeb2-a885-44fe-a816-a8962daa0c44", "sighting_of_ref": "indicator--bef88e88-5698-4f8c-aa30-2bb135c06070", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08dff0cd-602f-48ed-aca8-2fe11c190298", "sighting_of_ref": "indicator--0919b4c3-d89a-408d-96be-2723cc41f274", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc5aa69-67a4-4bad-99ef-da0b2accc8d7", "sighting_of_ref": "indicator--0919b4c3-d89a-408d-96be-2723cc41f274", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeeaeb14-a2ac-4c18-8eef-d3c3efdbaf64", "sighting_of_ref": "indicator--df882e7e-6b1d-4de7-be86-b436cf695362", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d98eaf6-7d1c-4d02-9ac6-3af257a4c56d", "sighting_of_ref": "indicator--df882e7e-6b1d-4de7-be86-b436cf695362", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec64e5dd-27fe-4e69-9c4d-e1486b58344c", "sighting_of_ref": "indicator--123ac192-220b-441f-905f-746a0ceb58a3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60837a65-a879-4f7e-a549-2b42c51394ec", "sighting_of_ref": "indicator--123ac192-220b-441f-905f-746a0ceb58a3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64467a4-a2bf-420b-b35f-5bd84952b18b", "sighting_of_ref": "indicator--a4b21088-79db-41e4-93ec-727ae5221aea", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f73f36-8c17-42b2-b295-a1e89f7eb484", "sighting_of_ref": "indicator--a4b21088-79db-41e4-93ec-727ae5221aea", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9345ea71-0fef-474d-8805-aee159e4cb05", "sighting_of_ref": "indicator--f291a0f2-b4f1-42d7-a3ef-db23f6f654ee", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4973503-bc99-46b3-ae40-65f2b36dd9da", "sighting_of_ref": "indicator--f291a0f2-b4f1-42d7-a3ef-db23f6f654ee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec2e0b9-a3dc-4f0f-88b8-a2cfab1bf213", "sighting_of_ref": "indicator--8f1214b2-cd9d-4d84-b97d-daabf3156919", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b092474-4404-474d-b212-421174873471", "sighting_of_ref": "indicator--8f1214b2-cd9d-4d84-b97d-daabf3156919", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d4c5f8-fd4e-4933-94b4-401526d9a996", "sighting_of_ref": "indicator--5de3fb76-2442-4693-b8a0-bc91c07a2131", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0d3529-2958-4b79-b533-1dfa96d5e65e", "sighting_of_ref": "indicator--5de3fb76-2442-4693-b8a0-bc91c07a2131", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109247cb-8348-45e5-b768-05b971d6405c", "sighting_of_ref": "indicator--16df2cbb-734c-4419-8b05-977a31fbf898", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bf08d2-bb26-4775-9563-46da964ce391", "sighting_of_ref": "indicator--16df2cbb-734c-4419-8b05-977a31fbf898", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791f51d0-e52b-43ac-a973-0c7de60d4921", "sighting_of_ref": "indicator--43c25233-a682-49d6-b9dc-710a1c88fb19", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4fc2cab-4b77-44e3-8163-ff7fe785b0de", "sighting_of_ref": "indicator--43c25233-a682-49d6-b9dc-710a1c88fb19", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002a3dcb-bebf-4fa7-99b1-5a9c522ec70c", "sighting_of_ref": "indicator--8a513172-968d-4a0d-917f-91bc8169cb2a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5a2e95-3b1d-4188-a7f3-dc3696afc6f5", "sighting_of_ref": "indicator--8a513172-968d-4a0d-917f-91bc8169cb2a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2531ec-02ad-4c1b-978a-90e0bde742c3", "sighting_of_ref": "indicator--94dcc259-ab74-41e4-8250-e525e6e8502e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b93562-b58c-4876-8362-d3b44fc89ef0", "sighting_of_ref": "indicator--94dcc259-ab74-41e4-8250-e525e6e8502e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f062ce-3015-49f8-a0ae-5ef9a21706db", "sighting_of_ref": "indicator--5ab93297-6a10-43d5-908f-0daf92c4cb77", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a363ef89-5a40-46af-9fa0-2816ad455edd", "sighting_of_ref": "indicator--5ab93297-6a10-43d5-908f-0daf92c4cb77", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095b06a7-6e1e-419c-9a2c-01557c2e6588", "sighting_of_ref": "indicator--0eafbcb7-0667-41e9-81d4-2070d83e0ac0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e119af7-6e32-42a7-ad72-fb24072f5a3b", "sighting_of_ref": "indicator--0eafbcb7-0667-41e9-81d4-2070d83e0ac0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf99809-a5ed-4535-8f1a-01715ebf6a33", "sighting_of_ref": "indicator--cec2c7e1-77ac-4dae-b604-779bb26214d1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7beb69c6-b8fe-4c1a-a06a-3f3845f645ac", "sighting_of_ref": "indicator--cec2c7e1-77ac-4dae-b604-779bb26214d1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560ae1f9-673a-41ab-a306-7dac73fbd0e6", "sighting_of_ref": "indicator--917a6fe0-7d5e-4e84-805d-625df52c4625", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dab5d46-d51d-4bc9-a6c6-ecfe3b947702", "sighting_of_ref": "indicator--917a6fe0-7d5e-4e84-805d-625df52c4625", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ddcb6c-17ab-47ed-aad7-8ea25a8f486e", "sighting_of_ref": "indicator--6bf08b8e-32a8-459b-beba-da8eb96ea97f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b8065c-44de-4f73-9122-e243c2f4edca", "sighting_of_ref": "indicator--f0d4d947-7d06-45ca-975e-eb9bdbcded48", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a33acc-173c-4b5a-9840-b9eac028d857", "sighting_of_ref": "indicator--07fc6d5e-b0a2-4d48-813a-f0243f4fbf87", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669b9637-7c16-4bfd-92a0-5df5fd166f5a", "sighting_of_ref": "indicator--07fc6d5e-b0a2-4d48-813a-f0243f4fbf87", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe6a50c-fd51-4eb2-aa7b-f53e47afc1e7", "sighting_of_ref": "indicator--ecd8e495-54ae-4448-95de-056101335769", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb15479d-25da-47f4-88c7-33f77718548b", "sighting_of_ref": "indicator--ecd8e495-54ae-4448-95de-056101335769", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b170b7-701b-46fa-a468-69f203deb3ea", "sighting_of_ref": "indicator--e287669d-3c40-4867-9580-01ced1bc10b7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf1be4d-8c91-43bf-84e6-b8201bb14060", "sighting_of_ref": "indicator--e287669d-3c40-4867-9580-01ced1bc10b7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61264ed9-a57b-4760-9260-5eff220c2a4e", "sighting_of_ref": "indicator--573c7c93-1ef4-4073-9d82-f66f85f2821e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ff28e3-9446-4cf4-af3d-38e14a41eee2", "sighting_of_ref": "indicator--573c7c93-1ef4-4073-9d82-f66f85f2821e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d808c41c-8c25-47ac-b251-a3131a56aec7", "sighting_of_ref": "indicator--418b522f-beaa-49c9-9c53-98199951afbc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c518b1d-ccdf-419a-afd9-d7c3713c71a8", "sighting_of_ref": "indicator--db09459e-af13-45c8-b435-b3fcc5014f92", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c1e70d-5761-43dc-94a3-a0912b60b7eb", "sighting_of_ref": "indicator--76077d2a-4c08-4b3c-8f0d-8d398c2cd022", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1faa61d-2e80-49cc-9d94-852b0582911f", "sighting_of_ref": "indicator--7d383489-8ca6-42cc-99b9-05f8b694fa82", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc405d0-326a-4575-a0dc-4084aadb9d92", "sighting_of_ref": "indicator--7d383489-8ca6-42cc-99b9-05f8b694fa82", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aada8791-112c-4992-a7f8-0a90579ac6f5", "sighting_of_ref": "indicator--15834575-098f-4cbd-a379-01cf6dd3fce5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9491e806-e053-4f55-bdf3-5209ac9a25ce", "sighting_of_ref": "indicator--1eba8bdd-0522-4605-a424-a62983114d2d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cabdc00-2b93-4da3-b95e-a7008ec51cab", "sighting_of_ref": "indicator--48d5e9c1-7169-4a1f-bc80-51d218e37ebd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace0f8a5-3ca3-44e6-859b-4e41c26635ab", "sighting_of_ref": "indicator--9aba56ff-d53d-4fcf-84fc-605c0115188b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef74141-1cf4-4cb8-afc2-2a3546923266", "sighting_of_ref": "indicator--76de3254-022a-4b8c-b257-727cde2e3b5d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ede9d4-3c2d-4786-853b-36275c8d47b6", "sighting_of_ref": "indicator--76de3254-022a-4b8c-b257-727cde2e3b5d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c920200d-32bb-4a3a-924b-dfe181225cec", "sighting_of_ref": "indicator--76de3254-022a-4b8c-b257-727cde2e3b5d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25cef18b-2dd2-4b9e-aaf4-0269c960dba7", "sighting_of_ref": "indicator--c6a4dde7-160c-4228-a8c3-9893b227001d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f6a5fa-0642-4649-8063-40fc9f2bafe3", "sighting_of_ref": "indicator--d1be025a-6fe5-411c-91a5-579a2a764855", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdb69bf-0999-4848-bf47-5f58a31b2b23", "sighting_of_ref": "indicator--d1be025a-6fe5-411c-91a5-579a2a764855", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e205d16d-d5b4-49be-a644-cca7dc912428", "sighting_of_ref": "indicator--eece7575-00ec-4359-a159-5a9ed02be87f", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a4de3e-8228-489d-8e32-4469f20e605e", "sighting_of_ref": "indicator--eece7575-00ec-4359-a159-5a9ed02be87f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d89b7f-bf6e-4c9b-91de-100ac709e851", "sighting_of_ref": "indicator--fad4035a-c94a-492e-b6c9-1368b655c1f8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35f8952-8035-46d4-8252-61a64dd528e6", "sighting_of_ref": "indicator--fad4035a-c94a-492e-b6c9-1368b655c1f8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f9160d-a385-4817-ae66-7fe729b6f013", "sighting_of_ref": "indicator--ff752069-d3c0-4a82-82be-d9b0e56a80b3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389e4141-b747-42ef-b6aa-2d43b25502d7", "sighting_of_ref": "indicator--ff752069-d3c0-4a82-82be-d9b0e56a80b3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db92d76c-771f-4bed-b957-4cb8365620e7", "sighting_of_ref": "indicator--19ad775c-be2e-4ef7-8fad-b2c79417bfb3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989b0f51-fb14-477d-bd3b-07eb741a91cd", "sighting_of_ref": "indicator--19ad775c-be2e-4ef7-8fad-b2c79417bfb3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff24e083-b1e2-42ff-9859-5888d93e300e", "sighting_of_ref": "indicator--ced939c2-942b-49f9-ae2e-6af66bb3ca40", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea991ae3-605c-44a6-9b45-fd4a0e405c37", "sighting_of_ref": "indicator--06e57a75-2776-43cf-8193-eed1c58f1c05", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b430c417-1907-4e92-8dac-35e014f8842a", "sighting_of_ref": "indicator--06e57a75-2776-43cf-8193-eed1c58f1c05", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebc844f-559e-4b25-94f5-ede1cc057020", "sighting_of_ref": "indicator--b438a298-902b-408a-825b-30b78a6efc64", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57065b8d-2e1c-464c-abd0-d2e7ea737166", "sighting_of_ref": "indicator--b438a298-902b-408a-825b-30b78a6efc64", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6d076b-af9d-49ed-ab52-732a9adced23", "sighting_of_ref": "indicator--e376c1d8-5f57-42ce-9468-48e23de3cb25", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365d09ca-0305-4058-a7d1-2f9f2960bfe2", "sighting_of_ref": "indicator--e376c1d8-5f57-42ce-9468-48e23de3cb25", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574e7ae3-d636-4b1d-9da0-f11df9fb564e", "sighting_of_ref": "indicator--563e05b6-6eb5-443d-b267-b2825018490a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113f12ac-6394-4faa-8e5f-df218d062343", "sighting_of_ref": "indicator--563e05b6-6eb5-443d-b267-b2825018490a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ecc88b-7b15-4a88-bbf8-9dc5453e5561", "sighting_of_ref": "indicator--84eb0efb-5888-4255-ba06-a17944a07974", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b82c177-21c6-4198-86ce-0007e7095ed6", "sighting_of_ref": "indicator--84eb0efb-5888-4255-ba06-a17944a07974", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378e1798-db2b-406e-96f3-ab8dcdf78791", "sighting_of_ref": "indicator--0f651f6a-ee20-45de-bf8a-2a696ccf0d2c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567cfeb6-9b1d-4e23-b008-a166b4e694b8", "sighting_of_ref": "indicator--0f651f6a-ee20-45de-bf8a-2a696ccf0d2c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da23361d-2383-4a06-a17c-d3143b4954a5", "sighting_of_ref": "indicator--b0eb6c02-df5e-4e4c-82dd-cc3d724c18c3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4953a56c-2333-4770-bed4-ce3bee041345", "sighting_of_ref": "indicator--b0eb6c02-df5e-4e4c-82dd-cc3d724c18c3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d2289f7-311b-4357-a39e-54516a260f8a", "sighting_of_ref": "indicator--f042a10a-244d-4a10-a7a1-2a3b6a3565a8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a408ca0-50e1-4c78-a246-a8e444ea3889", "sighting_of_ref": "indicator--f042a10a-244d-4a10-a7a1-2a3b6a3565a8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9148690-3b5f-4152-b1b8-140c4aa17589", "sighting_of_ref": "indicator--176fe9bd-b264-4ce0-9462-bc980baf20a6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052b18a9-b12e-4f15-bb39-7db6ad3a848b", "sighting_of_ref": "indicator--176fe9bd-b264-4ce0-9462-bc980baf20a6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fbbd47-ab77-4ed1-8006-986fe4c587e0", "sighting_of_ref": "indicator--a8f6094b-6d36-4797-8414-ae5303fef02c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca6023d-bf8e-4b5d-b7ca-1187773189f9", "sighting_of_ref": "indicator--a8f6094b-6d36-4797-8414-ae5303fef02c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc3ce8e-73f1-4fe6-a1ce-edae07b40784", "sighting_of_ref": "indicator--b4d8ee04-2c0d-4952-a984-974890553421", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb6d0f9-3649-41f4-9f69-155605a4290d", "sighting_of_ref": "indicator--56d14276-b985-487d-98f0-7e7244f6fbcb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62bfd19a-71e0-435b-9edd-a0acd713f12f", "sighting_of_ref": "indicator--0d7289f5-2062-4958-8418-eadf76146b59", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64b7993-8b97-4a44-82b5-4fdcd6369aa2", "sighting_of_ref": "indicator--0d7289f5-2062-4958-8418-eadf76146b59", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10cb417c-e491-414c-9262-d5d3a9793db8", "sighting_of_ref": "indicator--d76f0aa8-7c65-4491-b25f-9fc69a67dc92", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c04f4a-af36-4e10-b496-3d266dbe9dbc", "sighting_of_ref": "indicator--3ee1d704-6103-4867-af29-da7006dafada", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62bac734-07fa-4ad3-8e6a-63ca9258067e", "sighting_of_ref": "indicator--3ee1d704-6103-4867-af29-da7006dafada", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b49f64-5483-47dd-a48c-404e6028b004", "sighting_of_ref": "indicator--390f516c-14c6-445d-a789-475a03a7825b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e045d9b-8947-40cc-bba1-2b6dea40b06f", "sighting_of_ref": "indicator--ffc1a8ac-d04d-4e8e-80af-6c2da1d42f3a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb299f8-5052-448d-84a7-7ac042408ab0", "sighting_of_ref": "indicator--a18a8797-86a6-43aa-8a28-9ae38800585b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbedf4b-832e-45bd-a926-efc322864c33", "sighting_of_ref": "indicator--77b086ca-0c37-42f4-8758-bdbe5638b605", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902584fb-831b-434a-ba85-88ce85a5f5e7", "sighting_of_ref": "indicator--e5841fcb-9b1e-433a-be6c-62a3f0463c60", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff961fa7-2853-4306-a25a-e5cb37602f36", "sighting_of_ref": "indicator--e5841fcb-9b1e-433a-be6c-62a3f0463c60", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fe43d3-0e85-4a38-9dd2-29354d63741e", "sighting_of_ref": "indicator--bb696b11-f477-4657-8689-25e1713c9fd2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04a5b83-3541-45c8-b5d8-59284e226bdc", "sighting_of_ref": "indicator--bb696b11-f477-4657-8689-25e1713c9fd2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d3b969-83d6-4061-9510-29360d43f206", "sighting_of_ref": "indicator--82ebe6a7-7b7d-4db2-bc82-20138c073654", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0c0498-7222-4244-917e-b2da967cde21", "sighting_of_ref": "indicator--82ebe6a7-7b7d-4db2-bc82-20138c073654", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654700b5-2a36-49de-9502-8708e775bdde", "sighting_of_ref": "indicator--ceaf7b24-4e14-48b5-b163-19308f76e683", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5525ec3b-579b-463b-bf81-199f04e1b7a8", "sighting_of_ref": "indicator--ceaf7b24-4e14-48b5-b163-19308f76e683", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a4ac16-b4a6-4b14-85bc-31f33cec713b", "sighting_of_ref": "indicator--c0330bdf-4bbb-447f-b769-50ea0aaa4b42", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe704a9-5a51-44d9-9c69-b7bf61a2ad2b", "sighting_of_ref": "indicator--c0330bdf-4bbb-447f-b769-50ea0aaa4b42", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576abb10-473a-4e93-944b-1b87e74c2231", "sighting_of_ref": "indicator--94c4547f-7313-479e-88e0-297b3688e1b5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3dc6b5-5116-47e9-9bc3-2a68d5c856e3", "sighting_of_ref": "indicator--94c4547f-7313-479e-88e0-297b3688e1b5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cdb2377-655b-4d2b-89b9-9ebfd7dc35f1", "sighting_of_ref": "indicator--6b9f6f7f-32c9-44d3-b705-b3ba76ee2467", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d7b62d-6a22-463b-8a98-251b2d8d0f78", "sighting_of_ref": "indicator--6b9f6f7f-32c9-44d3-b705-b3ba76ee2467", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a2fb3a-cf32-46c4-9f0c-cbf9ff4de862", "sighting_of_ref": "indicator--cf9344ba-e21c-43ff-8377-393290249a50", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49ec874-af25-4720-af30-d43bd217ef7e", "sighting_of_ref": "indicator--cf9344ba-e21c-43ff-8377-393290249a50", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71fa4ea-6a83-46e7-b57e-8d1d8a898d9b", "sighting_of_ref": "indicator--9b2643a3-a747-4965-a0f4-7a63dd75b9d7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3823b1-0009-4b53-b7ff-8c5d5fce4280", "sighting_of_ref": "indicator--9b2643a3-a747-4965-a0f4-7a63dd75b9d7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8502ca97-8826-406d-a864-a2eb18855e58", "sighting_of_ref": "indicator--19c6724a-9c79-46ad-bce5-b387266351bf", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79614134-8e13-4d18-9744-d96893b029c4", "sighting_of_ref": "indicator--19c6724a-9c79-46ad-bce5-b387266351bf", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81d06c0-50f5-45df-bdb6-9921103f2133", "sighting_of_ref": "indicator--74254c73-cfa3-4336-b585-b9d018be4e01", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454c9529-6de5-485f-a17d-067de3c719c0", "sighting_of_ref": "indicator--74254c73-cfa3-4336-b585-b9d018be4e01", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83a1275-2036-4aa7-bbc8-739d8a988418", "sighting_of_ref": "indicator--bc1ef35d-f9cd-475e-9a36-3226b529534e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fc19fa-8b2d-48d0-b306-5e1fff675075", "sighting_of_ref": "indicator--bc1ef35d-f9cd-475e-9a36-3226b529534e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca7782b-d33a-45b0-b9fc-e871dfb1d728", "sighting_of_ref": "indicator--6c8304e1-ec97-4562-a1d3-34a1ef4174bb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f71a729-5a6e-4113-a83c-9bb98699f240", "sighting_of_ref": "indicator--6c8304e1-ec97-4562-a1d3-34a1ef4174bb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340ad7d8-fa93-4bb8-888b-c40b6901a65d", "sighting_of_ref": "indicator--f060f66b-0a91-4ecf-80e7-3bdf8dae3480", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c729cf44-ab7f-4c55-92f9-cb7dc41f564f", "sighting_of_ref": "indicator--f060f66b-0a91-4ecf-80e7-3bdf8dae3480", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e3a066-baad-415c-9b1c-0e71b10bc3b9", "sighting_of_ref": "indicator--8ce61ea1-dccb-4516-acbc-1a62af96a950", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ebef69-7d8d-48d9-aa51-4933e474e383", "sighting_of_ref": "indicator--8ce61ea1-dccb-4516-acbc-1a62af96a950", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22001a82-0736-4480-8c8c-7f1d5f4409b4", "sighting_of_ref": "indicator--94405fa8-0236-4650-8a5b-4da19d76a6e1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b2c662-a878-4a48-9fb6-00cd4a134285", "sighting_of_ref": "indicator--94405fa8-0236-4650-8a5b-4da19d76a6e1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9aeeca-6eed-4ce1-9b9b-1df817358600", "sighting_of_ref": "indicator--14edeb1f-6ee4-4898-b824-2f111ea001b0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47b4309-ee13-4d6c-9414-6e7ad7eb0040", "sighting_of_ref": "indicator--14edeb1f-6ee4-4898-b824-2f111ea001b0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f6566a-0818-4646-8de0-20ba3292061c", "sighting_of_ref": "indicator--25f4c77d-3644-4f1b-8c00-ab0eeb137c3c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263eb446-8651-44c4-91bd-6775dfea3b2b", "sighting_of_ref": "indicator--25f4c77d-3644-4f1b-8c00-ab0eeb137c3c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4aec66c-be33-47ce-9b8b-c34fc1325393", "sighting_of_ref": "indicator--bfe6b841-aee6-48dd-afe4-3a355ebc8621", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d7bb77-db12-4327-909a-7a6c2a9d0024", "sighting_of_ref": "indicator--98810e07-99c4-46e6-b728-9a9bfddedc84", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acf5b25-1ca5-4b37-a066-9c86143ef3fc", "sighting_of_ref": "indicator--98810e07-99c4-46e6-b728-9a9bfddedc84", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456a8075-baa7-489c-aff6-aad8b75bae2a", "sighting_of_ref": "indicator--b73f4f20-44cd-43ac-a4cd-e38f304842f8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcb7eb3-926d-44b6-adf1-b5e49204337c", "sighting_of_ref": "indicator--b73f4f20-44cd-43ac-a4cd-e38f304842f8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb9fc21-594f-47bb-9bb6-c476ecff8a54", "sighting_of_ref": "indicator--512dff1b-7d0a-47c0-b1e7-017990111482", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbd2a19-5852-445a-be8c-ae3e83dc5674", "sighting_of_ref": "indicator--512dff1b-7d0a-47c0-b1e7-017990111482", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29551ed7-0cf7-49f9-8211-2951df2a9b6e", "sighting_of_ref": "indicator--4747a294-c716-42e2-a045-c7e65e3f35cb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e201d94-e065-4ee3-a60b-c5b2f95c66cf", "sighting_of_ref": "indicator--4747a294-c716-42e2-a045-c7e65e3f35cb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bba405-ba68-42df-a12d-065d20e3390f", "sighting_of_ref": "indicator--242b6ee7-f004-42c6-82e8-6182022131c5", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63299ca5-3760-450f-967f-f3b019e5f745", "sighting_of_ref": "indicator--242b6ee7-f004-42c6-82e8-6182022131c5", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456f911d-2a10-4a29-9f1e-1cd44853b559", "sighting_of_ref": "indicator--f19687d0-c0c9-4f15-afeb-d3300f6bee6a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a1d6fb-a862-40e0-8b85-ff8e7ef16350", "sighting_of_ref": "indicator--f19687d0-c0c9-4f15-afeb-d3300f6bee6a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20578452-7b0e-4b3f-a343-84d4a94c7bfd", "sighting_of_ref": "indicator--bc8b7cf3-438b-4c70-94c6-2d8698243d4a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc62b21-2979-4799-ab67-66b7a0e9a728", "sighting_of_ref": "indicator--af631762-36c2-4bb2-963a-95eeb0a17f6b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21966eba-e2e0-4228-92ab-764840f94906", "sighting_of_ref": "indicator--4309e648-14ce-4c03-9c36-ddd9016eca2e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60bf5975-0311-4fc1-ba90-cfbceb260b52", "sighting_of_ref": "indicator--4309e648-14ce-4c03-9c36-ddd9016eca2e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8223873-4f64-463c-9593-66f36365a6e6", "sighting_of_ref": "indicator--7ce876ca-02d7-475d-9f5e-589f4572b793", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996ae2f5-4ce2-4dea-978d-629eea55a680", "sighting_of_ref": "indicator--4b867021-7ecc-47a5-bf64-becb8fe86fd9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29cd830-3b27-41e0-b302-aa69527a7c6a", "sighting_of_ref": "indicator--4b867021-7ecc-47a5-bf64-becb8fe86fd9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6bc04dc-2688-4b9d-88b9-dcd461fc25a3", "sighting_of_ref": "indicator--e7de8482-6a83-4c6a-9201-d70495b155f2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7567f16a-9fdc-4d25-8450-8a5068c6a48c", "sighting_of_ref": "indicator--366c96b4-6b87-42fd-96f2-8475184395f2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104d90d0-8410-4645-b5a0-9d7bea85e87f", "sighting_of_ref": "indicator--c1e19412-f927-4a0d-bd1d-2f58fed70338", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d58cd92-76d9-47cc-b964-a6788962a2b9", "sighting_of_ref": "indicator--c1e19412-f927-4a0d-bd1d-2f58fed70338", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1a7db6-a21f-4b6d-92eb-22c4117e8a08", "sighting_of_ref": "indicator--b452db4b-2bce-4381-8bef-c60733e90b6b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279a4b50-826b-4037-a955-46f71ff7f08e", "sighting_of_ref": "indicator--b452db4b-2bce-4381-8bef-c60733e90b6b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6b86f3-d16a-42e7-add2-882e2688edf6", "sighting_of_ref": "indicator--ee0c37cd-7537-41f4-a07e-b5f21d9add98", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--affc149b-f716-4e95-8611-e6f95815c91d", "sighting_of_ref": "indicator--ee0c37cd-7537-41f4-a07e-b5f21d9add98", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcabde6-de8f-4556-9d91-39754a7a19a4", "sighting_of_ref": "indicator--cf0a9bd3-93b5-4f64-9490-08b837fe4dc8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0825c3b-7b6a-4021-bf32-327817ed4f48", "sighting_of_ref": "indicator--cf0a9bd3-93b5-4f64-9490-08b837fe4dc8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe1f44c-525f-4b6e-8fb8-ac1a1199143b", "sighting_of_ref": "indicator--0123bf88-82d3-463e-bcd8-456c1165f0ad", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2eb3f31-7283-467e-992c-50ee90dca848", "sighting_of_ref": "indicator--0123bf88-82d3-463e-bcd8-456c1165f0ad", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4159037e-c16e-4755-b0a7-4a6db3a06792", "sighting_of_ref": "indicator--bd635c3c-cd89-49a8-a611-7bbcf03fd4bb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f381a59-d8e6-4103-9ac0-cba832d06675", "sighting_of_ref": "indicator--bd635c3c-cd89-49a8-a611-7bbcf03fd4bb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a93d68c-7137-433d-8cc5-6191f44bf8d7", "sighting_of_ref": "indicator--9f7f326e-7523-4c3c-9725-bc8ad9f4034e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c58e907-44b1-4899-9107-16ad2f45061c", "sighting_of_ref": "indicator--9f7f326e-7523-4c3c-9725-bc8ad9f4034e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf70c67-c946-4611-9d5e-9d6ddaf7121e", "sighting_of_ref": "indicator--c065451e-d18a-41a6-bf09-d4eeb9b6852c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb97829-8d8d-43ed-a1b9-56bd8cb4416f", "sighting_of_ref": "indicator--c065451e-d18a-41a6-bf09-d4eeb9b6852c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a13f61e-982c-4919-9e50-ce363eaad199", "sighting_of_ref": "indicator--bc3caa5b-9e3f-43c3-8eef-b8dee56a5013", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d798f83d-a342-4554-9408-e6d79800b6ae", "sighting_of_ref": "indicator--bc3caa5b-9e3f-43c3-8eef-b8dee56a5013", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f499f3-3b87-4d72-b828-c3b72811805c", "sighting_of_ref": "indicator--d3044c09-bcc2-4f9c-a5ad-d12f88ca67be", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad6c38a-e495-4a4a-a6cd-0ad56a65771e", "sighting_of_ref": "indicator--d3044c09-bcc2-4f9c-a5ad-d12f88ca67be", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd2f28c-5928-453f-92fd-4c09388d3c71", "sighting_of_ref": "indicator--ea6e415a-eacb-4100-bb97-c235966ca54b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbf79e1-fd76-49fc-9224-de1b0f22f1df", "sighting_of_ref": "indicator--ea6e415a-eacb-4100-bb97-c235966ca54b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3214a87d-dab2-4e90-9d19-382cd4666bc6", "sighting_of_ref": "indicator--b630a70d-a8d7-4db1-90ca-76b418f96530", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3dbcff-656f-4bf8-b423-242dbcd0f41b", "sighting_of_ref": "indicator--b630a70d-a8d7-4db1-90ca-76b418f96530", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7769b0d7-e422-44cd-93d9-d30347615612", "sighting_of_ref": "indicator--ab8582a1-401a-4076-91c2-4c14ab5c5c8d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f04933-e269-4c05-86bc-22778a3360aa", "sighting_of_ref": "indicator--ab8582a1-401a-4076-91c2-4c14ab5c5c8d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0809aa1-c1dd-473b-bf0c-ea3dc479ab44", "sighting_of_ref": "indicator--d4a521af-7f0f-4ee9-b6aa-be9baf3feb43", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321881aa-c85b-4dd2-9a57-1e60cba69075", "sighting_of_ref": "indicator--d4a521af-7f0f-4ee9-b6aa-be9baf3feb43", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02904527-0c38-4ec7-9efb-122be19dfe07", "sighting_of_ref": "indicator--64c7457f-898a-4691-ae20-84c2f407ade7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7897be-1216-419a-9b89-9926c2e6f371", "sighting_of_ref": "indicator--64c7457f-898a-4691-ae20-84c2f407ade7", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612432a7-fcf2-4567-80bb-f4983333abe1", "sighting_of_ref": "indicator--3752c8b2-3e50-46cd-905e-46c6ea6e0718", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8799bb18-6635-4566-af8b-584014290a57", "sighting_of_ref": "indicator--3752c8b2-3e50-46cd-905e-46c6ea6e0718", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3817e2-f244-41e8-8324-80b388cf7d7f", "sighting_of_ref": "indicator--9eb8c44b-6d0d-4fdd-a155-d76d742e192d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2700e33b-ff43-43f3-b54f-3a6a48064361", "sighting_of_ref": "indicator--9eb8c44b-6d0d-4fdd-a155-d76d742e192d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67633d22-e252-4590-9149-2a95026d60b8", "sighting_of_ref": "indicator--54989dd4-3962-4b4d-961f-4e9022280697", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9baa5222-4634-48f3-97c1-9778d0889daa", "sighting_of_ref": "indicator--54989dd4-3962-4b4d-961f-4e9022280697", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0dba4fa-420e-4b7c-9bdc-7fcc026cc716", "sighting_of_ref": "indicator--5ff28492-980a-4ec0-a7b7-a474dd0a0c0b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56465446-ec46-486c-b9ac-c2b610f8cecf", "sighting_of_ref": "indicator--5ff28492-980a-4ec0-a7b7-a474dd0a0c0b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba77e83-6625-4817-afa1-38831edb3ce3", "sighting_of_ref": "indicator--72ee4de6-88f6-48b5-bd4f-7728985c71e9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37cea8ea-45c4-47cd-b6fd-cc7b43030980", "sighting_of_ref": "indicator--72ee4de6-88f6-48b5-bd4f-7728985c71e9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08074e13-bb3a-47da-90a1-0fe790cd3334", "sighting_of_ref": "indicator--00d284b8-7609-41cf-a754-c8fe90c61391", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12225e23-3418-43d2-9593-58462892245b", "sighting_of_ref": "indicator--00d284b8-7609-41cf-a754-c8fe90c61391", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a96b98-d437-4bdf-a666-d55cf638b908", "sighting_of_ref": "indicator--1d6338a4-5504-4223-8abb-e6b682ab0be1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0975f6-def0-4bb4-a28c-68bdf75a9011", "sighting_of_ref": "indicator--1d6338a4-5504-4223-8abb-e6b682ab0be1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67907209-5f28-41eb-b9a7-43cfd40eda8b", "sighting_of_ref": "indicator--4c5c07b5-9f4e-4ea7-831b-59c20cc59412", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf1f19f-50ce-48fb-b6b6-924dc378c090", "sighting_of_ref": "indicator--4c5c07b5-9f4e-4ea7-831b-59c20cc59412", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab946382-4959-4d90-acc1-9f1f5d97cf77", "sighting_of_ref": "indicator--2468234a-9bca-46e0-b981-ab47b2af9fe1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b1d7c2-441e-490e-9f42-51b6877afcb7", "sighting_of_ref": "indicator--2468234a-9bca-46e0-b981-ab47b2af9fe1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ecadfb-c111-44f8-bf3a-48e4344e8c15", "sighting_of_ref": "indicator--8ac72b9c-a9e1-43cd-88b2-c611d31a877d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a153ecaa-1832-40c6-8b42-7cff8826154f", "sighting_of_ref": "indicator--8ac72b9c-a9e1-43cd-88b2-c611d31a877d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1930304-5a51-4e90-be80-caa2c414f9ea", "sighting_of_ref": "indicator--f284f524-c509-42bf-9974-b2e2c7fa1b27", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cb8073-8157-4145-95a9-0c275f55f63a", "sighting_of_ref": "indicator--f284f524-c509-42bf-9974-b2e2c7fa1b27", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5189a463-a2db-4830-9696-f23b807c9615", "sighting_of_ref": "indicator--a59d40a6-e825-4175-a1bb-33b6158a1160", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb8c44d-8c82-4c29-ae91-61e9c99b2448", "sighting_of_ref": "indicator--a59d40a6-e825-4175-a1bb-33b6158a1160", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec98853-700a-44fc-b977-cfba8c694bb2", "sighting_of_ref": "indicator--4fbd54f1-e0f7-46de-8002-00d3ba9d2922", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82185fc9-5b33-4f37-84f1-ac33d0699eec", "sighting_of_ref": "indicator--4fbd54f1-e0f7-46de-8002-00d3ba9d2922", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f70d872-951f-4bc5-b97c-63e149a0193a", "sighting_of_ref": "indicator--728a0192-a739-40c4-94c2-0bf1b54397c3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a62c51f-fdf8-4bda-97ad-616bc267f0f8", "sighting_of_ref": "indicator--728a0192-a739-40c4-94c2-0bf1b54397c3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e1d91c-fd0e-4db4-b8ab-d0cec17e50a4", "sighting_of_ref": "indicator--cf7f2502-2d8d-4e63-bcf6-c241d5dcae50", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e1c064-41ca-40d1-88b3-2cefbc4f2eea", "sighting_of_ref": "indicator--cf7f2502-2d8d-4e63-bcf6-c241d5dcae50", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7e36c2-a45a-4849-8585-1fc9199ff139", "sighting_of_ref": "indicator--594f7c5c-4c88-47d9-9c5d-7abf3de3beea", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da24298-46f6-4f23-9e4a-71515ee58642", "sighting_of_ref": "indicator--594f7c5c-4c88-47d9-9c5d-7abf3de3beea", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6bd2ab-bab0-40de-bf47-f14e9b9037e1", "sighting_of_ref": "indicator--c137e26e-32a5-4107-8e66-5a54f942329b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76c2bd0-4950-4527-9c51-2378dc9e904d", "sighting_of_ref": "indicator--c137e26e-32a5-4107-8e66-5a54f942329b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10910423-c491-48d3-aca9-d4a2a60699dc", "sighting_of_ref": "indicator--bd68ec92-7c33-40d5-bb11-3a1dca3c3570", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094714ac-08e5-4dc4-a680-6e9f3bf99255", "sighting_of_ref": "indicator--bd68ec92-7c33-40d5-bb11-3a1dca3c3570", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa792b9-1769-48ae-828a-04dd0e92ce05", "sighting_of_ref": "indicator--903bbc2a-c28a-45c3-bd09-77895c615e31", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f9e075-8b52-4259-8e41-34bd436a0822", "sighting_of_ref": "indicator--903bbc2a-c28a-45c3-bd09-77895c615e31", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aabebe2-892d-491f-a456-41fdc176eb48", "sighting_of_ref": "indicator--d5cb624d-876a-4a8d-9f58-06a4a68b47fb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e43611-37b2-478e-b8fc-0feca6840e65", "sighting_of_ref": "indicator--d5cb624d-876a-4a8d-9f58-06a4a68b47fb", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4fc423c-2311-457c-ae8f-ea4411656053", "sighting_of_ref": "indicator--b90fe5a7-7591-4f4b-86dc-758803c31b87", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94890d79-fc08-4578-ada9-bd56522eeeab", "sighting_of_ref": "indicator--b90fe5a7-7591-4f4b-86dc-758803c31b87", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6383a075-22ac-4f4f-a508-f920dea77869", "sighting_of_ref": "indicator--0dfa0adb-4300-4008-b544-274d31b16dc1", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d254f48-543d-4c68-bf80-e871b7b32781", "sighting_of_ref": "indicator--0dfa0adb-4300-4008-b544-274d31b16dc1", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a12cb8b-1e09-4c44-af8a-e582137e924b", "sighting_of_ref": "indicator--6d8f379c-23e5-4995-a07a-4a5c9979ec20", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b7fc97-6126-41f7-a117-7eeb071d1eb3", "sighting_of_ref": "indicator--9f5be6ca-bef1-4a8a-b779-3b99815fda30", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280bd589-bb46-42e6-a0ea-6fc70896adba", "sighting_of_ref": "indicator--2a62b9c3-bb16-41d5-84c1-80bf476996d0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4a3f45-eb57-4646-aee5-1eecb2fde2fc", "sighting_of_ref": "indicator--e69feadf-b467-4ce7-a67f-e1aaecef90ee", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb3f20d-ea58-4f3e-a8dd-329725db24e5", "sighting_of_ref": "indicator--ca2730e0-491c-4d0b-a64d-6b38c118a0a1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b08fff2-f5a4-4ec5-b4d0-437b92f80bc5", "sighting_of_ref": "indicator--0d153d08-a1ca-4a70-8474-2911abb6c5aa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b31504-b39d-4d48-976e-da2fb442fb95", "sighting_of_ref": "indicator--0d153d08-a1ca-4a70-8474-2911abb6c5aa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5137074b-1c26-4eb9-9642-42284c892d93", "sighting_of_ref": "indicator--358856e3-acf2-4527-be51-7ec483e90957", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77125991-d1c3-4fa5-b1f7-eab0357ea532", "sighting_of_ref": "indicator--358856e3-acf2-4527-be51-7ec483e90957", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab10febf-9b7e-4636-9242-ede80bb6765a", "sighting_of_ref": "indicator--aaeb4a1c-ec61-49f5-ae2e-a387e6e3d898", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb15e6b-75ce-4f18-8505-2d3af1fe07ec", "sighting_of_ref": "indicator--aaeb4a1c-ec61-49f5-ae2e-a387e6e3d898", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa81cc10-80a1-4b4f-86cf-92d2e18ffe2e", "sighting_of_ref": "indicator--5f9cae74-447c-4656-9e56-47963005fc57", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb87e17-bb3c-441c-9556-be54f94c7054", "sighting_of_ref": "indicator--5f9cae74-447c-4656-9e56-47963005fc57", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdaa0b7f-8c34-476e-893b-100afb8107ca", "sighting_of_ref": "indicator--d754a501-fc90-4127-b3f9-de8e61cc8901", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6494c83e-d07d-4ea6-94e0-0c4249d78e3e", "sighting_of_ref": "indicator--d754a501-fc90-4127-b3f9-de8e61cc8901", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72259364-a2cc-4b0e-b41b-981284c19921", "sighting_of_ref": "indicator--0c7e80e7-4548-4243-85d0-5171c9f4ace2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ed1bf2-cf85-4b0f-ad73-9ae742c1f5fd", "sighting_of_ref": "indicator--0c7e80e7-4548-4243-85d0-5171c9f4ace2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff46176-e883-4bce-ad16-5f3299d0849d", "sighting_of_ref": "indicator--de5bb765-3e38-4eea-a3d9-d8f69f7f3fa2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f00e395-8e91-43e7-933d-9943e959f029", "sighting_of_ref": "indicator--de5bb765-3e38-4eea-a3d9-d8f69f7f3fa2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40381786-fea0-4407-8d30-9808f455dd63", "sighting_of_ref": "indicator--79025059-2c7d-4da7-a2d2-2b56b8a7fd7d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ab6eae-7040-4e81-a351-b84496db54e1", "sighting_of_ref": "indicator--79025059-2c7d-4da7-a2d2-2b56b8a7fd7d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93926fbf-a051-4833-a519-fabcb5367ff4", "sighting_of_ref": "indicator--1266eef3-8a66-4031-88ff-73f70e2afd7f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddaf42e4-b816-440c-9f85-11d63d81b705", "sighting_of_ref": "indicator--bb632fe4-66aa-4460-98f9-d528d7d6412c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5529404a-eceb-4b54-9cbb-e9caf772ef8e", "sighting_of_ref": "indicator--09a321d0-9580-45e1-8a62-3ec01830cec9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815d69d0-350f-4b4b-ae30-a12a91db16e1", "sighting_of_ref": "indicator--09a321d0-9580-45e1-8a62-3ec01830cec9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0b06f3-05b1-486e-a990-7cd8a1d7206a", "sighting_of_ref": "indicator--a800af5d-c8b7-4d36-bf8b-35ef60f6c9b3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b92fe5a-e092-4736-8713-c5d3cc57fc53", "sighting_of_ref": "indicator--a800af5d-c8b7-4d36-bf8b-35ef60f6c9b3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacadb9c-c692-438b-ac57-f7ab2f7c9062", "sighting_of_ref": "indicator--919a3d00-e6cb-457c-a3f3-61e62cec5607", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44de6319-6b8f-44cf-a824-c832dd7b418e", "sighting_of_ref": "indicator--919a3d00-e6cb-457c-a3f3-61e62cec5607", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab97c5c-0728-4572-b71b-71fe15ca3a45", "sighting_of_ref": "indicator--07a4b68b-c04e-4388-88ed-bbfc2a2646aa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033fa09c-bd20-4eca-81b6-8c8d4e7b1cea", "sighting_of_ref": "indicator--07a4b68b-c04e-4388-88ed-bbfc2a2646aa", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dd47ed-a6a3-4ca3-96ec-34ce9b6ee55a", "sighting_of_ref": "indicator--24cae173-5d38-460f-8d18-3c7811e8e571", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f2ffd7-af97-4bf2-90ae-af1ae135a4d3", "sighting_of_ref": "indicator--24cae173-5d38-460f-8d18-3c7811e8e571", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33c9ccc-36bc-43a5-9e6d-1b6a341decfe", "sighting_of_ref": "indicator--3fe17d13-c49b-496b-bcf6-61ac7f171f2e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e71faf7-f858-4bde-a514-9dcfe0e451e0", "sighting_of_ref": "indicator--3fe17d13-c49b-496b-bcf6-61ac7f171f2e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e709456a-3896-403d-a105-8d02d0cd45d5", "sighting_of_ref": "indicator--975dc580-d03d-413a-9984-e4b34a5cceb2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1caad8f3-4fef-4140-95a6-9eec64bc7b1a", "sighting_of_ref": "indicator--975dc580-d03d-413a-9984-e4b34a5cceb2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d06f230-aacf-482b-8ea3-4dc08d343b1b", "sighting_of_ref": "indicator--1a879ae9-4e85-4145-80a1-6f6ce4bdfb32", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027082f6-f24e-4953-8f00-860b02403432", "sighting_of_ref": "indicator--1a879ae9-4e85-4145-80a1-6f6ce4bdfb32", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85edac6c-d63a-4907-85f4-6d59fbe61c8a", "sighting_of_ref": "indicator--4b3a4e41-a702-41f0-ab86-b3b11e548b0d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea6f7af-0aac-47a9-bae4-dcd0afcdf429", "sighting_of_ref": "indicator--4b3a4e41-a702-41f0-ab86-b3b11e548b0d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f25c33d-d031-4c44-9ae5-c81798e78d95", "sighting_of_ref": "indicator--ac599845-bb6e-4e14-b8b1-f2623750ee3a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b3d4ba-b822-4490-979e-74c58123090f", "sighting_of_ref": "indicator--ac599845-bb6e-4e14-b8b1-f2623750ee3a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc411e64-a77f-416e-9a2c-1994efbb03a4", "sighting_of_ref": "indicator--f3d93128-1066-4988-8910-89055737394b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb46e818-2a44-44b1-b6f5-590988d8c747", "sighting_of_ref": "indicator--f3d93128-1066-4988-8910-89055737394b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b8ffb4-372a-4783-bcfc-2fd8a776c325", "sighting_of_ref": "indicator--fa6700c3-628a-4038-b3fa-a8c3eb4051c4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac74657-b8c6-460d-a96c-0758f01cc481", "sighting_of_ref": "indicator--fa6700c3-628a-4038-b3fa-a8c3eb4051c4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092f5518-5651-4fc9-86a6-4e4445d198ae", "sighting_of_ref": "indicator--ae686f0f-dc76-467e-9a54-eed4b6b7a957", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4bc980-c7be-4a0c-9323-f9e2b2149862", "sighting_of_ref": "indicator--ae686f0f-dc76-467e-9a54-eed4b6b7a957", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9ac7e1-a8ca-45a4-a6ca-d9472e62dc87", "sighting_of_ref": "indicator--9272a83f-cc3b-43bb-81c5-18e856729abe", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c251e99-ddb1-4379-b2ac-ed9f039834c4", "sighting_of_ref": "indicator--9272a83f-cc3b-43bb-81c5-18e856729abe", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7fde68-e550-467d-959a-45d96b60388b", "sighting_of_ref": "indicator--5ee992c3-86b9-4ce7-b4f8-452dad2686be", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f98acf3-f623-4e67-915f-435e3b2a013b", "sighting_of_ref": "indicator--5ee992c3-86b9-4ce7-b4f8-452dad2686be", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c701bb0-b07e-485b-b4fd-5abf473e6e52", "sighting_of_ref": "indicator--371233da-4e93-4fc6-94cf-01fce6bddf10", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee02cef7-be8e-4e9f-8b1b-ca36f5cfc161", "sighting_of_ref": "indicator--371233da-4e93-4fc6-94cf-01fce6bddf10", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7432016b-1203-421d-8027-b6f36699b53d", "sighting_of_ref": "indicator--a0557517-1ec8-41b5-8d17-c359ec94f1e2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c00f08-d0f5-401b-94d3-ad4a5955cae7", "sighting_of_ref": "indicator--808ab5fe-f83f-42ad-a3dc-d94a6f84dab9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc3453e-1a37-46c0-a948-d326973d0f4b", "sighting_of_ref": "indicator--808ab5fe-f83f-42ad-a3dc-d94a6f84dab9", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d317a3-392d-4fcb-b466-24a03999220a", "sighting_of_ref": "indicator--0b70e960-0fd4-4ddd-b7ac-e8449f80e080", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06332082-f9b0-4563-bd31-b4feae444871", "sighting_of_ref": "indicator--91c5605e-cfc0-402a-927d-c7dcc6f0c161", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ebbcd6-c12e-4fe7-90f4-3f91041bad3b", "sighting_of_ref": "indicator--552b41fa-10c3-4574-9c93-5b1a6df7acc0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143ef7c9-5911-4434-b4ac-8810803ca79d", "sighting_of_ref": "indicator--552b41fa-10c3-4574-9c93-5b1a6df7acc0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ecb1a2-35d9-4086-9e71-be7f7f978190", "sighting_of_ref": "indicator--855ecb05-d6e4-4019-9f34-c03d28b777c4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1441937-fee4-4f26-9e08-3973e3c720e9", "sighting_of_ref": "indicator--689fca09-0497-439b-b326-160a0a5d6176", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a33721-df96-4b10-9ca6-85bf4c2b072a", "sighting_of_ref": "indicator--b151554a-066b-413a-805c-f035380b170d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5ec1b6-7cfd-40af-ae0b-6af8075d6ec4", "sighting_of_ref": "indicator--b151554a-066b-413a-805c-f035380b170d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a38e74-00b4-4d9d-8be6-e1d29a0d2efa", "sighting_of_ref": "indicator--cb542f99-8931-4bff-a60e-9e9a2006064d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f30cbd-31c1-4721-8f84-a83886b34500", "sighting_of_ref": "indicator--cb542f99-8931-4bff-a60e-9e9a2006064d", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516c0b92-ed03-450e-baa4-3230c6b38cda", "sighting_of_ref": "indicator--87bb43e1-8f93-4775-af1d-7b10accc8d8c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb309f6-31b0-41cc-8eea-1cea5d3b1144", "sighting_of_ref": "indicator--87bb43e1-8f93-4775-af1d-7b10accc8d8c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573c508c-7ffd-4b87-917d-666ebeb3cf7b", "sighting_of_ref": "indicator--ed35f291-1771-40a0-af02-7a46d1def352", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d976f660-a6c7-4b47-95a5-43b764ab67dd", "sighting_of_ref": "indicator--ed35f291-1771-40a0-af02-7a46d1def352", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026ea9a2-ac24-4bd0-89cc-d91c6d6a53a5", "sighting_of_ref": "indicator--95457b99-db4d-4ab9-a88e-8ef11a1ea222", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586c799d-18f7-4964-a7bf-0d7e8388f490", "sighting_of_ref": "indicator--95457b99-db4d-4ab9-a88e-8ef11a1ea222", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d052f4e6-fd07-4754-a8b9-0a2643776a62", "sighting_of_ref": "indicator--3d853830-b06e-46da-b77c-eb391bc505e6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97de5bdc-0277-423d-9308-d3ef375191e4", "sighting_of_ref": "indicator--3d853830-b06e-46da-b77c-eb391bc505e6", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766c1900-9a9e-42f4-b960-d034312ba2e2", "sighting_of_ref": "indicator--21d0fe77-f6ad-4941-9320-cc8d5a97f21c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a6842b-734b-4247-996f-71acaf50ad4e", "sighting_of_ref": "indicator--21d0fe77-f6ad-4941-9320-cc8d5a97f21c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93363e6e-bb3a-4359-8fef-56a8d726a1b1", "sighting_of_ref": "indicator--baeaa8a2-677b-4862-b1f8-b121e37842f2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e94d49f-5dfc-4c80-884b-3f56aa238e1e", "sighting_of_ref": "indicator--baeaa8a2-677b-4862-b1f8-b121e37842f2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d1490f-7e56-49b2-97d5-7d4b4caf49ca", "sighting_of_ref": "indicator--00eaff0a-91ea-419c-9abe-b8d5db5e0e17", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ef1a19-8e99-471e-b8e1-c9f554aec9b5", "sighting_of_ref": "indicator--00eaff0a-91ea-419c-9abe-b8d5db5e0e17", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6dd9c0-c54b-4446-b0a6-3f9b485c0b3f", "sighting_of_ref": "indicator--2cdc10ba-63ee-4803-998f-58c0085e6939", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c0d919-1a8e-4d77-b99f-c1ca7959be54", "sighting_of_ref": "indicator--2cdc10ba-63ee-4803-998f-58c0085e6939", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8027f1d7-5b0b-4e58-a36f-d262f2ef2672", "sighting_of_ref": "indicator--75d0bbda-0057-4398-af8f-263d7adadde4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1b0583-db17-4008-ae10-aa2e60088306", "sighting_of_ref": "indicator--75d0bbda-0057-4398-af8f-263d7adadde4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01d8179-6bc1-46f9-8206-f45f8f118f4e", "sighting_of_ref": "indicator--d9e88f6d-4eae-404d-a3d0-f38812d15c85", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21e2aae-67e7-4f50-a598-8a396d82b19f", "sighting_of_ref": "indicator--d9e88f6d-4eae-404d-a3d0-f38812d15c85", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ffc338d-ce3b-4893-8b41-9d2131bbf511", "sighting_of_ref": "indicator--ae864f77-06d8-4c0f-a644-ca6690e6cbe2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bffacc-8a91-4b54-a8bc-377410af2fdf", "sighting_of_ref": "indicator--ae864f77-06d8-4c0f-a644-ca6690e6cbe2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0adf3457-0344-47ef-8276-a52510795537", "sighting_of_ref": "indicator--db1e9481-96fa-4ae1-8fd3-43d80b1dae9c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdb706a-f0bc-40af-b2d1-428e2d062272", "sighting_of_ref": "indicator--db1e9481-96fa-4ae1-8fd3-43d80b1dae9c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c046e2-44ab-47c5-9bb8-08a49e2be83f", "sighting_of_ref": "indicator--be30f811-9a40-4d20-84ee-66ce6508fb02", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c5c540-2381-49bf-abdd-9aa983137ed7", "sighting_of_ref": "indicator--b06a16e9-14a0-4a1d-bb16-8098156d72e2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa49020-a7f7-490c-9826-e0f234c915a6", "sighting_of_ref": "indicator--b06a16e9-14a0-4a1d-bb16-8098156d72e2", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e5e4f0-08b1-49c3-ba41-e0682639915d", "sighting_of_ref": "indicator--14e51392-1a27-4492-b87d-468e3767ca77", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888959ae-12c9-44f4-bd68-72625b4ddb90", "sighting_of_ref": "indicator--1f5982df-7e73-4121-93b3-07d74ca0ef9a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60fbe34-35ce-4ff2-a8ad-17f6d4041117", "sighting_of_ref": "indicator--c64b7193-d026-48a4-8c1e-6930fac1ecca", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e93d0b-eda1-4938-8ed8-94a0144d7de1", "sighting_of_ref": "indicator--8dcba799-cb16-4a2d-abd5-905878ea6b7f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04ca22f-25d7-434c-93bb-ca90bf6e1a35", "sighting_of_ref": "indicator--878f583f-6441-4d53-ba39-87ab6cf470fe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cd2962-69c9-423a-97a1-f940ef59f158", "sighting_of_ref": "indicator--19e58298-9601-404e-9b1d-8d7bd6e50c64", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0c2c2c-1e05-4eec-81be-b66c9bbd4a22", "sighting_of_ref": "indicator--1950bf37-5807-4674-ae74-118e0ef67880", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b36d2a-3d60-4f7e-8895-2c6f908158a5", "sighting_of_ref": "indicator--6b90fd04-e56c-40eb-8886-26d1736ba791", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7bf9996-c715-49f7-b9ba-6b7e7cb46299", "sighting_of_ref": "indicator--daa453b9-541f-4aab-9b4c-8e2a67722be3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94587261-24c9-46f6-8f06-2c54bf3ff9e1", "sighting_of_ref": "indicator--de2530d7-75f6-4eaa-b08a-d3eef0b8a229", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d915b8-2d76-491f-9f75-3331bf6fee91", "sighting_of_ref": "indicator--4ad1ad26-adad-42ed-b2e1-d656136bc69e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156ad5a4-44bb-42f7-b504-5c7f5cbb47cc", "sighting_of_ref": "indicator--879950c9-c53d-4ae4-8552-4f5d28672818", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9c632b-b406-44b0-a92f-bace08af308c", "sighting_of_ref": "indicator--7b2e750c-4ae8-4b69-8d8d-bc6ee9cf2a2a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d4759c-84f6-4990-aa1c-6a5b50e04cab", "sighting_of_ref": "indicator--1d98798f-2a7c-4fe4-b6bd-7b0006444fb5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf68bf54-1091-42ef-94ef-ebb8cffa7607", "sighting_of_ref": "indicator--fa51dff6-3b07-4ce5-a2fb-47d68480bc26", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62372c5-e2cb-4544-ae6b-3aab4eac2302", "sighting_of_ref": "indicator--2acb6518-dd6a-46b9-bdf9-78cae6cb53d8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf113af-a40c-4276-bc0b-5c6bd3b5eabc", "sighting_of_ref": "indicator--49acf4ee-429a-482b-836b-7be0feced7c3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f149f3ff-5987-4bbe-833f-7f36e9ff9f3b", "sighting_of_ref": "indicator--a7ef513f-6b38-4364-895b-f04f9f03ac94", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8707bd-03a7-4aa7-903d-7862e768fabe", "sighting_of_ref": "indicator--fc7cd660-993b-4484-b3e4-db255c7ecb5a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe0d0d5-07e3-4472-a035-308d72d6c871", "sighting_of_ref": "indicator--a6ad3e17-be56-410e-abc9-d741ce3e27c5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2b4f12-82bf-44f4-b14e-d99116720087", "sighting_of_ref": "indicator--770c2bbb-9a3e-4ac1-85a0-67f5d28e0f82", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec73e95-dd57-4c8d-82c8-769fd83b40ec", "sighting_of_ref": "indicator--4ae8d697-13f2-4a93-939e-655ba73e11f5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212b8975-48ee-46b1-af54-92c89994be6b", "sighting_of_ref": "indicator--abcb0fce-c2fb-4da0-8924-d6cc269c5381", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba91058-1be7-4e2e-86b7-d8259db41bfb", "sighting_of_ref": "indicator--adef3714-c7dd-4cdf-ae19-0396b7a2f41d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd23958-7e22-4bcd-995b-8a23fd51fe63", "sighting_of_ref": "indicator--acd3879d-4e89-4524-a68e-99a8080f57c0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85968820-2fa3-41fa-879a-9dfd196e5bcc", "sighting_of_ref": "indicator--4016f52f-c53c-457c-9d93-be1f8397a379", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf080185-7bf9-4b8e-a7cd-9e6528405e40", "sighting_of_ref": "indicator--c7c6cabb-ad64-4d69-9bc3-d87bc9fb9219", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2b914c-8ce5-4e78-9484-d8f84e33557d", "sighting_of_ref": "indicator--c7eb2f3a-9a02-4932-8785-bd7ff2cd7444", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0272a3c-d455-4181-8ce7-0b870211b78c", "sighting_of_ref": "indicator--39dfc88d-cc38-4b68-b80d-77bbf089cd55", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e969ae1c-553d-4b5b-aa56-8d11cb5b1331", "sighting_of_ref": "indicator--3c47a7ee-7e41-4152-a2b0-334f2b04a342", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bd21fd-8630-4db7-a2ce-3ecb37de55c4", "sighting_of_ref": "indicator--e92997e1-a22a-401d-a36c-4927556ac897", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a3286e-737e-4bc4-966b-dff70eb31f8a", "sighting_of_ref": "indicator--8f70bb1f-2a97-4393-95a2-d55f481abc2f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1ad2b3-d7ba-4598-96ec-21eef640a401", "sighting_of_ref": "indicator--96439eb3-8c3a-4a06-b57e-903cefeafcac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373e2c75-c976-43b6-82f5-9ae38090b14c", "sighting_of_ref": "indicator--7790f03f-0b01-40fd-bc59-20fd947bcf1b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5fd259b-8733-407f-b7f3-e215e11db29b", "sighting_of_ref": "indicator--77c62760-f5e6-4d73-bb87-1a9b5d1a1046", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e95c694-d592-4500-9af0-d8e6528574f8", "sighting_of_ref": "indicator--f87a730a-c5d3-4de9-b86a-f2e941b02c83", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd430b97-c34c-4361-bc84-25608d6f2c0c", "sighting_of_ref": "indicator--55a29be1-b4c6-4f4d-84ae-430630d8ed63", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b92b751-32e6-4be8-819d-4b7b6d7598e4", "sighting_of_ref": "indicator--d2afe4af-8854-436b-bed5-fe7b490c8a6f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ebe642-136c-475b-b042-f0a51036dda4", "sighting_of_ref": "indicator--c76669a8-4298-4c22-a2cd-02e8a1be29d0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127b1818-5462-4825-9ed5-c2078b916f48", "sighting_of_ref": "indicator--4a5fb32e-1fd6-4cc0-bbc3-dfb43de2153d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e551a85c-9b9b-4055-8d06-d91dca7db786", "sighting_of_ref": "indicator--63527ef6-1f7c-4c13-a20f-8eda60c5b372", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574f142e-164c-48f8-886e-3a3339e4efd8", "sighting_of_ref": "indicator--8b5c07a1-4db9-4ad2-93c9-bedc525f3ddc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6174c8a-9410-4a8b-961d-cf32c80bbb27", "sighting_of_ref": "indicator--11b3e6e5-439d-42f9-a9f8-add4dea84b30", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2f0b2d-dae5-4758-b786-50ba78f8a6fe", "sighting_of_ref": "indicator--630b1082-d416-4146-aae9-adf99c4dd3d9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda33feb-837a-4d02-8f76-fe34d6bed771", "sighting_of_ref": "indicator--1af9618d-f8e7-4c02-812d-2a65391f6f61", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a83fef-00bf-4524-a583-c365474830bc", "sighting_of_ref": "indicator--4b150951-c4c2-486c-87dc-37ad016ccf07", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c0c78a-346d-42df-b1b9-2b2164dad609", "sighting_of_ref": "indicator--43b3255f-946c-421c-95c8-ed9abd4cd8de", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9b577b-38e9-4d0a-b81d-af47319efff0", "sighting_of_ref": "indicator--37d4e84a-1033-4751-b608-dad4c1e8d4c0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6500e0-203b-4678-be07-2c26ac67cff5", "sighting_of_ref": "indicator--c163afa0-5953-45f0-855e-8a76c35fd0b0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0133c286-9446-43c3-b1be-1f8220df0347", "sighting_of_ref": "indicator--04fd4c74-b6f5-4e09-a95e-956db3d3187e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf373a14-f519-4b79-81f8-728f2dcd1ab6", "sighting_of_ref": "indicator--cd73b584-33f0-47a7-85b3-c9614178a60e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb727f6f-f156-4ad2-b206-013312e36af0", "sighting_of_ref": "indicator--def46aee-ceed-4ab0-aff1-068bf0d8d687", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d661d42-17ac-4eae-94ae-1c17b62a0eb6", "sighting_of_ref": "indicator--9d35b239-41f7-4a51-a504-9683ff4e0f55", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e44c2ee-9d50-48d7-888e-085f4c686d9e", "sighting_of_ref": "indicator--a822ec7a-d11c-4af5-8f97-7f4deec77c32", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129e5571-307e-4ed8-91d8-7ca8a7ae2c96", "sighting_of_ref": "indicator--0dab5eea-6fe0-454e-b4a7-b1b55840323e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8e2d58-80b5-458f-99c9-51e7be5350c9", "sighting_of_ref": "indicator--1debe169-1f38-4e75-b9c6-bc058a278bb5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1732a96a-c05e-4166-9f1c-a4780c20244a", "sighting_of_ref": "indicator--ff458f80-3f6c-498c-9974-17de7d182445", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2ba25e-4ef6-4ace-991e-85c43745da94", "sighting_of_ref": "indicator--126fb433-d385-4e9e-8674-d56b9a97cf96", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4726a08a-3bd0-4873-a03c-6c441903d335", "sighting_of_ref": "indicator--030dea62-5e75-4cc0-85c7-0c298ba02630", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b302348-bc1d-4a12-bca5-6ec140313925", "sighting_of_ref": "indicator--ae79fd82-2117-4583-8e1b-790feb0d2334", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba1873b-cc14-4b02-b833-d39afe3a8767", "sighting_of_ref": "indicator--772235b7-3cbf-465c-85b1-82ef2a71a70b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eeeee37-281d-438e-8e0f-026f2c2d7a33", "sighting_of_ref": "indicator--1a65c6c3-90b5-4bf1-a561-ce5a74f613df", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1526d347-e295-4d4b-bf5b-05a58de5b403", "sighting_of_ref": "indicator--ce158e45-6aa6-437e-9a0c-4a3c3c86f858", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d71154-e4cc-42d8-bdc8-7094b9f4d520", "sighting_of_ref": "indicator--c74245cd-e00d-4d05-a84c-b930d2023f4b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71647e68-0417-46a5-b52e-26159160a9a0", "sighting_of_ref": "indicator--ae0a625b-64bf-4f50-9636-135a065acd8d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0bf0e6-4698-4ea0-842d-147141830c3a", "sighting_of_ref": "indicator--a1b83574-7a67-48af-b6de-5c7162122780", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7d1aa4-3e91-4f64-b82a-01267f0b0451", "sighting_of_ref": "indicator--882690d0-015a-4b81-a4b2-c2ca3abebb53", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23c6a2f-6352-42dc-a04a-5fa94a696ce6", "sighting_of_ref": "indicator--71563545-0b00-46c2-86c8-8c28fcc5189c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72535217-89bc-41c8-8229-56fb7cc930b9", "sighting_of_ref": "indicator--2971c35b-a5e7-4e0f-895d-1044e4372ad3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5117e5a7-a62a-4f3e-8710-8fccea0eac01", "sighting_of_ref": "indicator--34bca331-a114-4941-991c-9a2cb8702051", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e291fb-e4ff-4b16-be10-d7015e9547fc", "sighting_of_ref": "indicator--670661d3-5486-4f13-a1e5-e999fefc47ab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25af000b-74cd-4f3d-b1c3-b9aa6b6234d2", "sighting_of_ref": "indicator--7ac9d1b5-dd4c-4b6e-899d-bf32360cc4d7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c375e82-43fb-434a-a15e-0b996d31c5e7", "sighting_of_ref": "indicator--bb22e53b-628a-41d0-be34-2339ea624144", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c928e7-78db-4979-aaf3-f18dddd86de7", "sighting_of_ref": "indicator--8c2426ab-2a9c-421e-8d86-35ffee5780a6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f6712f-3d43-484f-af34-df4f6a7b87fc", "sighting_of_ref": "indicator--71d18bb5-fee7-4cbe-87e6-33a1d8ed8331", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967c5925-221a-4111-aed2-e5d3fe569a5a", "sighting_of_ref": "indicator--c29523fb-67d0-4449-b895-590073382a5f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b074826-f19c-49c2-8735-f3fb2f2589f5", "sighting_of_ref": "indicator--5db4fe88-a1a9-4bcc-bf57-6d328bf5d549", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1aa79c1-7053-4e00-8caf-ff0d6ba92f4c", "sighting_of_ref": "indicator--44ae2b1e-1231-4179-9edf-08414c66ab49", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f8b603-6e2a-4e88-b3f4-a322e88a50e8", "sighting_of_ref": "indicator--a98a4872-865a-42e1-8ce9-7da5f32132bc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e254eb-a9e2-40ee-9294-bfa2394b3a13", "sighting_of_ref": "indicator--b4d1bdd7-ec99-45a8-bead-fbf14abe95af", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5752f33-ca17-43f3-a849-0accf541e822", "sighting_of_ref": "indicator--1eec90d3-b409-44a0-b113-3e9269c36c32", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f14773d-1682-4382-a506-46598603b86a", "sighting_of_ref": "indicator--5139d380-10e0-4770-b166-3108a5aab7b0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742f6e46-687e-4aaf-b574-a2b20c80a75e", "sighting_of_ref": "indicator--6e2c0dd4-9720-40fc-8f19-e7a903d912bf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbaa8de4-7b04-4666-b4f1-425379c13f9f", "sighting_of_ref": "indicator--012406af-5779-4444-8c68-0b0992bbb733", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d882cba-0f6f-4abd-bb9c-c60491154458", "sighting_of_ref": "indicator--c038b06c-fa34-4077-9b95-e6c100c18b00", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c0fb07-c853-40c6-b146-612ca3417cfb", "sighting_of_ref": "indicator--d853a5d0-374c-4b2a-bd7d-457086b48c6b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ee7492-5201-4881-af76-84ffde35a3d4", "sighting_of_ref": "indicator--c45fa41d-d133-4194-9d64-6a37905417e0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab547484-3ef4-411e-a9cd-d55219ccd68b", "sighting_of_ref": "indicator--26c22483-a027-489d-adfe-b87a0207d34e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84592eb-98c5-4c99-a285-20316738a4ec", "sighting_of_ref": "indicator--d7d6ef3a-6c99-4cc0-b07f-9a1e4b6b60bc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915af003-acbf-4c6d-a12f-4fca2e87cee9", "sighting_of_ref": "indicator--24e9a51a-be00-4ba4-9631-f87b964a1cc4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa81d9c8-96df-445e-b8c3-a89acb28443a", "sighting_of_ref": "indicator--867662b8-f28d-4b8b-9eb2-c682c3f9235b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae0a5e0-82c0-49a9-a2b7-e970438d7f37", "sighting_of_ref": "indicator--857b2108-2415-47b9-9c25-c3843de0a649", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61397487-51f8-4e53-b886-e7c8aed4d143", "sighting_of_ref": "indicator--940a6cb0-d577-4c81-a5c0-28a126679a50", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb8ae74-f2c1-4664-b3df-2cdf11b71355", "sighting_of_ref": "indicator--8e24f39d-2aaa-4d37-a890-fb685fe07e84", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec934c4d-2b89-4733-8689-5c426f4be6a3", "sighting_of_ref": "indicator--691258f9-fb2c-417f-bca0-7a51f4212225", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f495be-8781-47e2-8ec7-4516ab684a40", "sighting_of_ref": "indicator--6133da0d-3729-4c9c-a98a-1ee9530fe7f7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ebf9bc-5ac2-468c-82fc-94b1efc6809d", "sighting_of_ref": "indicator--c9bdcafc-df2c-470c-8d65-c108ff99c443", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5a315b-eb18-428f-8cde-8bb16e04dda7", "sighting_of_ref": "indicator--dc9fae45-2e31-465f-8f14-5e5ae79a1866", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b58238-d45a-4152-a936-69f97629cece", "sighting_of_ref": "indicator--0646725b-5b24-482b-93e9-78352fd73fb0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0b2c1c-65f0-4882-ae36-d3b403abd38c", "sighting_of_ref": "indicator--19c0a46e-bd33-4fd8-9cab-c3e0a6523f14", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f07a785-b815-4082-9690-33083fae7a1d", "sighting_of_ref": "indicator--a95d9f29-76d7-4957-b0b3-8cb409300c50", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36796b89-7071-48b6-9237-aa131769c5ba", "sighting_of_ref": "indicator--a630e3f2-9b99-4d0e-8b5c-11a341402f0e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050467dc-018f-41d5-aa6c-b30537bf9be4", "sighting_of_ref": "indicator--cd0be92f-a30d-455b-bdb3-c9d1deda84f1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706ed579-dfcb-450b-9b74-52ae7094c7f2", "sighting_of_ref": "indicator--35d867ea-8f8b-45cc-9be8-238d09cf659b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d42786-b714-4769-bc96-0a57b815fd19", "sighting_of_ref": "indicator--520a0ed3-8f33-435e-b136-e06946f5f032", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4d368e-e171-4d14-b0b3-3d36e19650e8", "sighting_of_ref": "indicator--34c1a9d5-d3d8-4343-9769-6ef346070807", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad1c6ef-c857-4c0f-b132-3708a1ff29a3", "sighting_of_ref": "indicator--f0ebe7b0-6e36-4643-8a0a-ea7d8178f1dc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3182e1b-8858-42d9-a72f-0461d09fb6f9", "sighting_of_ref": "indicator--a3cea3f1-bfa5-4046-83f3-c1b222de12c9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc2e450-385b-4d0c-9aca-5b062901cdd5", "sighting_of_ref": "indicator--4dd00d17-e3a0-488c-9c6a-be2d2c7e8125", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3e30cc-c248-4480-941d-799bf9f59716", "sighting_of_ref": "indicator--1a6d96aa-ce58-4bfc-8154-24de25e2c82a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00cc2923-8019-4f8b-b241-1793630e6542", "sighting_of_ref": "indicator--e78548e7-4688-43a1-a39f-a1df2fccb54e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304f8754-7757-4e2b-bbbc-0d2c2431b284", "sighting_of_ref": "indicator--3e0eb55a-3f50-4d0c-96fa-31c008ae41ea", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19072e70-d7bc-4f82-9bd2-274d563f53cd", "sighting_of_ref": "indicator--1f7f149f-3d73-4f25-8955-c7690669f8c9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccc6db2-3b21-4155-8437-8d70bc50c334", "sighting_of_ref": "indicator--c5e0a102-2918-499d-ad12-6bfeae836c54", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba25fbe6-441d-4253-a6a3-834a6610083a", "sighting_of_ref": "indicator--4e2e0076-4649-41da-ae50-c39ea403ab55", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12254b49-6a5c-4461-9955-7ac555045f48", "sighting_of_ref": "indicator--0fd42024-539e-410f-982d-f9642a7ad0c1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c958d2-d06d-4486-98a2-b38a2fc19d28", "sighting_of_ref": "indicator--0ee3a8ed-7a45-4634-85ab-ff14b9fe1897", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed16dbd2-dbe8-4995-beb9-5d047176222f", "sighting_of_ref": "indicator--5dfb9a55-45d7-4c42-8925-5d23934f34f0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95fab575-060c-42b6-a978-0f9c829686a3", "sighting_of_ref": "indicator--1302dbdf-ec86-4a21-86d6-556cd307ff88", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0670fd2-b8a6-41d3-b99c-c3ce71e9f20b", "sighting_of_ref": "indicator--e93c617b-6dfb-4138-8a82-d1c29265cfaa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dfbe02b-3eac-476f-90c3-ab4ad42514ee", "sighting_of_ref": "indicator--1d79d22f-f97b-4359-b0d2-2738a2a9b7dc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3906fbd2-6467-46c5-8a5d-97a5a6c85578", "sighting_of_ref": "indicator--a9403e2e-7012-4156-8420-0614b3d51df9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66793d17-6268-4ce5-87ef-1b79a97a7322", "sighting_of_ref": "indicator--39e01fa5-008d-4afb-b4a4-b88f76ba4eb3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ae640e-2ee2-4cd1-9727-92f772bc55ca", "sighting_of_ref": "indicator--18d7a4e9-5478-4436-a22d-6adcdbd46cbf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd953a4-049f-4891-8861-2fb3d56ee7c5", "sighting_of_ref": "indicator--bea90e79-4216-4b45-862c-9dab898912ea", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27673465-e844-42cd-b196-231f74db95fa", "sighting_of_ref": "indicator--37df5f68-e6c9-4668-bf45-11eff38bcfeb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6410aaf7-34f5-467b-a53a-7a95aaf30056", "sighting_of_ref": "indicator--c6ca3342-5687-435e-af4f-cbec3f839926", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9bb1d3-aa30-4805-8cf9-ab68c5714cb5", "sighting_of_ref": "indicator--15c9d657-e627-4769-910e-eadce37682af", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c8adbb-f0d6-4275-a21c-a20bb2a43835", "sighting_of_ref": "indicator--4f5f1684-7c00-47c2-9ce6-af54a6a9343d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a3efb1-ad50-4465-ad67-52c8b49c83a9", "sighting_of_ref": "indicator--25dab792-8957-484e-b268-2fa38f923fa0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff41df6-0a16-49cb-b70b-2de9beed8203", "sighting_of_ref": "indicator--ff1c5c11-8a47-4a9b-b687-365b3c740462", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d772f6-06aa-4ae0-bba9-a0ff0b2dfccc", "sighting_of_ref": "indicator--e941aaeb-4688-4440-9fdb-eeb44e9b3b09", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8574fe0c-1ccf-4be3-9e87-e754d846b5e1", "sighting_of_ref": "indicator--4166377f-3899-4f40-a606-2e3750e15607", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58a3915-e68b-4683-823f-d64a5f4c60a6", "sighting_of_ref": "indicator--6914891e-9448-4a8d-a9b8-1b09ffedce09", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa14d794-53ef-4d4b-9050-1ea7019b64b8", "sighting_of_ref": "indicator--5c8cedf8-9113-4858-8f31-726a00803e36", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc31b2a-2c8d-4a90-9821-066b915a9e92", "sighting_of_ref": "indicator--70e534f9-56fb-404b-ac84-e2afcf3321df", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5b67c1-18a9-4a57-bb0f-28edbdade2e4", "sighting_of_ref": "indicator--2176867c-e109-49a9-8041-87dcc9eb5751", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2146e2e9-59dd-4c4f-83e8-94e6d448b805", "sighting_of_ref": "indicator--f0c81864-5a5f-4b46-a2ea-dabb4b043509", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972683d8-54aa-4606-ad84-a23ab205b629", "sighting_of_ref": "indicator--253e55d3-9ef9-493d-b06d-08691d0e6f80", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069c5e95-c4b6-48cf-9ce4-4aa39fefc22d", "sighting_of_ref": "indicator--c50fe01a-0a9f-4894-932d-f33a70413e1a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1361a4c-ec85-4a66-bd51-cbd8ad3889e7", "sighting_of_ref": "indicator--6d7d7ce9-6738-44a5-8cce-bb0a7a4c6b46", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187da6bf-083b-432e-ad70-608640eb66a3", "sighting_of_ref": "indicator--7354c32d-1614-4513-8761-be0d02c2890d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b198106-d219-4cad-974a-f74b1f4fbb36", "sighting_of_ref": "indicator--d02ce4d8-8a4a-4273-9214-6b0af7d34b35", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba30dfe4-a7a9-42ba-b7a9-a43f67ce48f0", "sighting_of_ref": "indicator--60123486-2256-4d1c-9ec3-dfdca79829ac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f465f2e9-34b5-405b-8b99-dfbc693b0229", "sighting_of_ref": "indicator--8b6af68e-5220-4e4c-a0a0-e9c8cfc54510", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fdde0f-f289-40e8-9f8a-bec6ffc25064", "sighting_of_ref": "indicator--f5c9e00d-5a3b-4d3b-8693-19b0b59e5894", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7af6cb9-18bf-46ca-9760-3fe6617f3860", "sighting_of_ref": "indicator--b96b751c-e50c-4b98-95c8-18c8d7ddb029", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07d98f4-0002-41ec-bb07-ee7f5f39885b", "sighting_of_ref": "indicator--c0d3e9ec-33b6-419d-8eb5-6a08489a9d20", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a99086-5484-4506-94f8-091c5139b887", "sighting_of_ref": "indicator--1e2bef47-f3f8-4b48-a63c-88e69fa77840", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ac796c-b82d-44f9-ba02-091f573de835", "sighting_of_ref": "indicator--436a5641-a72b-4056-a585-0849cc4a257c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e98aab0-cee0-466c-9849-522c1f64b9e8", "sighting_of_ref": "indicator--dbaff8ad-41ab-4cd1-8c77-fd2d60a0ad29", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8618d930-dcc5-4c30-bb24-65089fb607ff", "sighting_of_ref": "indicator--6c67fb53-0780-40cb-b4ac-13cc390e48af", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f21a762-8957-4779-b7cc-d23a35185e30", "sighting_of_ref": "indicator--921fb099-599e-46cf-89c8-8893dc5d684e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18188111-e370-476f-b12a-0a9f6af655e0", "sighting_of_ref": "indicator--07740b96-04b9-428a-8292-bbaefb0cdd5d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a992cf14-84ff-4a3b-8476-98bff4b1a958", "sighting_of_ref": "indicator--7532e08d-3aaa-4875-8f4a-71334a51a09d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d113208-04b2-4b5f-bad6-c74b6936a584", "sighting_of_ref": "indicator--e3bc9e8f-6610-47b6-9f0e-99b6d6d4caa2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e297c5-93f8-44c7-83d0-9553ffac2678", "sighting_of_ref": "indicator--fedb58f8-08ce-4b81-b7d4-bcf110b31086", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8ddb09-277d-4046-82e7-13ea19744cc5", "sighting_of_ref": "indicator--9f8219a1-ca31-49fe-a4ae-2fb9256b5f3e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c2894f-5874-45af-a506-b5c4814efc17", "sighting_of_ref": "indicator--fabc7fef-23d3-4848-a45c-6f8b277264c3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf59272f-de47-4af9-8089-146f38fc8366", "sighting_of_ref": "indicator--15d479fe-bc86-42dc-a87a-db78a9fc57be", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02314f5b-5c0c-489e-99ac-bbee18422610", "sighting_of_ref": "indicator--936c8066-9914-4002-9b14-b05c36e367c9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7a2b9e-503e-4e9b-84d3-adfdf98ae916", "sighting_of_ref": "indicator--b846ac09-4841-4543-beb4-c17aa4b77987", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a91346-aa1c-40a0-9f5e-53ff5a84a991", "sighting_of_ref": "indicator--90e89772-4ca8-4238-a897-274db42ca80f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2950e0-3c3f-48fd-82e3-ee3e855469cc", "sighting_of_ref": "indicator--3907632d-dcb6-478d-952c-562fbd5a3b3d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a5de89-48e2-43c1-bc46-db33d34ada06", "sighting_of_ref": "indicator--c820cadd-e3ef-4a11-8a0d-26849d5952b1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791a3aac-bcd0-4a1c-a79a-895de0eee099", "sighting_of_ref": "indicator--e939e8bf-7782-41f9-9901-deb8311ccd09", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ac4b07-3765-41a6-877a-cc873b1ddd9a", "sighting_of_ref": "indicator--add463b6-686a-4bd0-b009-8d7a48d08ae4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74790233-2c6f-47ae-b921-907e38d3872d", "sighting_of_ref": "indicator--667fcf57-a1f8-4e06-b140-c28f712a5eea", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da1d76e-aad4-4e0b-a82f-7b80415d9683", "sighting_of_ref": "indicator--667fcf57-a1f8-4e06-b140-c28f712a5eea", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8a8155-d6e7-44b3-be07-cda8d2d16968", "sighting_of_ref": "indicator--667fcf57-a1f8-4e06-b140-c28f712a5eea", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812e1942-dbd3-45de-b3aa-0a80855d3638", "sighting_of_ref": "indicator--80918dfb-0d17-44da-b2ad-b1b2991a872c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42cdb5c2-1fda-449a-967c-d56d5e1f7b78", "sighting_of_ref": "indicator--c1f3bc95-97d5-42bd-8f5f-34b4e94672d7", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f84b81d-5f63-4c41-82e5-e8d2056deb72", "sighting_of_ref": "indicator--5908621a-aebe-40e3-bdd8-b9abd079072d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a6f246-9483-440d-96f3-bc9dc3966b6b", "sighting_of_ref": "indicator--cf6daeb9-6854-405e-bb5d-8e3cab307b55", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8195c13c-9e42-4438-a366-c338178c40da", "sighting_of_ref": "indicator--5b24a7c9-eb07-48c9-b835-77c9b58b865c", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e0d9ce-231e-4c5f-9d73-3a3885d0b4e4", "sighting_of_ref": "indicator--c6549813-bdc3-4299-b7a5-70b66238ddac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e114c06-5943-4c24-a0f7-77efe9aae118", "sighting_of_ref": "indicator--08a9e358-9026-4a4e-80b0-48165b28f042", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd79b38-813c-454e-b9b0-1ca261ade14d", "sighting_of_ref": "indicator--f8136734-ac99-41de-bb02-cfed63d0b644", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e28d53-7954-4c4b-b504-bb3be6df244e", "sighting_of_ref": "indicator--dd3ff529-e343-480f-9cd9-c66ab5557326", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2208bd-0fd3-4f1e-9488-d2a973b21b1c", "sighting_of_ref": "indicator--896d1164-5a8e-4817-8691-b2e218fbbb4a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fbc29a-d04a-49e0-920b-df2c5341ba69", "sighting_of_ref": "indicator--652d47c9-d10a-402c-a4dc-ffb5e568e431", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5445b3b8-3c31-48be-a856-fbb029e484c0", "sighting_of_ref": "indicator--b19aa64e-75d2-498a-8b9c-cd3098119336", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38a8789-8914-4673-9feb-ac49251b64fd", "sighting_of_ref": "indicator--fcc50ee0-9e49-442a-bec1-1255f35113c4", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45ec3c3-a91a-492b-b69f-da916fabbb45", "sighting_of_ref": "indicator--3304e42a-90e8-459d-bfc1-107cf6488d5f", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ac39df-78bd-4697-a29b-1050f1ced86b", "sighting_of_ref": "indicator--84d14a56-8508-4c54-867d-825c4c27c7dd", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eeca14b-15f0-4a1c-b39b-e2e795040156", "sighting_of_ref": "indicator--84d14a56-8508-4c54-867d-825c4c27c7dd", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99bd8c6-5804-466e-af17-8a598b427640", "sighting_of_ref": "indicator--84d14a56-8508-4c54-867d-825c4c27c7dd", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652f8324-76fe-432a-8df9-559e2b9b0509", "sighting_of_ref": "indicator--fb7e5458-dc9a-408d-ac8b-04b83653dc24", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534b6ec7-96fd-4edb-ad56-3bb6b20a6619", "sighting_of_ref": "indicator--16ec9db7-6e51-475a-adb0-afc52bf6ec0e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f7fe0f-2e15-46f4-b8cd-319a0a4178d0", "sighting_of_ref": "indicator--fe2eb3a8-3e1b-4c45-8018-5d47326ac8ba", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e984c76-fb3e-47c1-a3f1-781494b10e9f", "sighting_of_ref": "indicator--b8453142-157e-4ee0-ae28-2562a760dbeb", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0530ac7-06b1-452c-959d-6a6829ddea0b", "sighting_of_ref": "indicator--e1ba637a-023e-4a0b-b8bd-2ef67689a50b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0be0ffa-51fe-4030-b9be-a3e3ac65b35a", "sighting_of_ref": "indicator--02dc281e-b5f4-44db-bd18-9e88a712cade", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccf2b1b-0690-4441-b686-486f30389fac", "sighting_of_ref": "indicator--02dc281e-b5f4-44db-bd18-9e88a712cade", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03cebd1-6d9b-4a78-aba4-037f61fb841d", "sighting_of_ref": "indicator--02dc281e-b5f4-44db-bd18-9e88a712cade", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8c5fea-5335-401b-bcf4-7f7dc33c4b25", "sighting_of_ref": "indicator--522ec542-1301-42e5-8bcc-5c8445b75b71", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f9dfc8-fb85-47bb-ad68-db33363e8e07", "sighting_of_ref": "indicator--52456923-77f5-4134-af19-f8848c4e13da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8094bb4d-1d01-4ac0-bf15-3ef1c3c44633", "sighting_of_ref": "indicator--6076618e-0390-4bb5-a707-7cc277fb99f3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fad9e4-f9df-431e-960c-4b16b699476a", "sighting_of_ref": "indicator--6076618e-0390-4bb5-a707-7cc277fb99f3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ac883e-899d-4e0c-a973-117dd1b5ae80", "sighting_of_ref": "indicator--6076618e-0390-4bb5-a707-7cc277fb99f3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da397e9d-2401-40aa-99e1-e5ca4d740ced", "sighting_of_ref": "indicator--7373d570-4628-4cb3-9de4-5be9802ebebe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b00ab4-793b-44ff-81dc-1046b908940e", "sighting_of_ref": "indicator--40d8a1a4-920e-4429-aedf-56460961d25a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af6d58e-5a98-48fd-ad79-d20ba0f529c1", "sighting_of_ref": "indicator--40d8a1a4-920e-4429-aedf-56460961d25a", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c7198b-b02d-4099-beba-d9c5aa35a1d7", "sighting_of_ref": "indicator--40d8a1a4-920e-4429-aedf-56460961d25a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab71fd84-ca5d-49ae-bb09-b23b3369c58a", "sighting_of_ref": "indicator--8acb0954-8821-45f7-a8dd-a6efc395079b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e434b548-b47d-4230-a9f4-f89fac9a1170", "sighting_of_ref": "indicator--644647fc-57be-4e3f-81ac-5200b8d3b823", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7983a311-7b6c-40c0-9411-ed1ccc4c47a1", "sighting_of_ref": "indicator--ccfedc1c-3ba0-4c28-a4f6-dca4a0a2b95d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15f5995-dbea-4d01-b3d9-33731dcd4737", "sighting_of_ref": "indicator--40d4720d-e963-4322-8dba-751306f106c8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94782f77-cc79-4f2b-8c6a-c065c6ae379b", "sighting_of_ref": "indicator--06c5b8ef-316f-429f-9e5a-7f9bc08e41a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d265b6-8dee-4d6b-af00-0f37c56df2a9", "sighting_of_ref": "indicator--5d04e8cc-f480-42a5-821b-8de095dc797a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee504d0e-c542-44e3-9c9d-906340140744", "sighting_of_ref": "indicator--7624b2f7-a0d4-4420-8fb4-fd7d4b0dc082", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e400ab83-c62a-41e6-858e-9973bfae648f", "sighting_of_ref": "indicator--bdc982ba-c659-48c9-a953-20ef8e2574c1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001f5fb1-9c56-4a82-be23-d4a5817b31a0", "sighting_of_ref": "indicator--2b4447e4-472f-40da-ba4e-8e4927dbf45d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838131aa-c918-4689-aa41-c8513c221fc2", "sighting_of_ref": "indicator--8680dbb5-adb2-4957-9866-b2a6c83a722a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086584ab-00b2-4af9-9059-322d0a7bd7a3", "sighting_of_ref": "indicator--01633188-d734-4ee3-9125-2cc6c1cfcf97", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5cf21d-089f-4406-828c-4c0c84f2b688", "sighting_of_ref": "indicator--01633188-d734-4ee3-9125-2cc6c1cfcf97", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07f51df-628a-421e-919e-29b55b78bbb8", "sighting_of_ref": "indicator--c81844d5-bfd9-43b8-80cf-fafa4b999357", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb1107b-4fbb-4aff-9521-8ea5c4be6317", "sighting_of_ref": "indicator--c81844d5-bfd9-43b8-80cf-fafa4b999357", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028f133b-8f04-4351-97d9-f0828af90866", "sighting_of_ref": "indicator--c81844d5-bfd9-43b8-80cf-fafa4b999357", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e2faeb-a7f0-4579-94e8-cf2e5b2d3af7", "sighting_of_ref": "indicator--7144211a-e043-4a12-8a85-9eb3eee6a83e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279729c0-ea83-4c8f-977d-34798655e843", "sighting_of_ref": "indicator--bf4da778-a365-48d4-8ef9-399e43f18290", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb9bae4-3181-4f92-84ec-07b41b74c1a8", "sighting_of_ref": "indicator--dcaf5aa9-5fb2-481f-baa1-26a0d53d0711", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd16f4b-4a58-4c40-9c6b-e604e1af9de7", "sighting_of_ref": "indicator--735049bf-8b81-4eb3-91d1-3f8e884efd87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70b869d-33ab-4af6-b3f8-aa31cd358c62", "sighting_of_ref": "indicator--519ea0e5-0fdc-42da-8be9-df53860af0aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52f7020-236d-4cf3-aa8b-b00078955f0b", "sighting_of_ref": "indicator--4adbbf6c-5c70-4943-aae3-30cc8df5b4b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c028e26f-291e-487f-9d1d-f25b1bff4bf5", "sighting_of_ref": "indicator--3cb827d2-3d8d-4805-9f04-c0465bc9fd2c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09209c2-01df-4d14-b58a-0d3ad498ad05", "sighting_of_ref": "indicator--4bdea704-825d-4631-83f4-78d7e2481328", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a962397a-f2b6-4072-9b3e-e574ebcc4bf2", "sighting_of_ref": "indicator--5e88b9c3-510f-42fc-a30d-a993bac71992", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb379e62-ba8c-4175-9e6e-301af7359a46", "sighting_of_ref": "indicator--41f40922-dee8-4f9b-a4f4-7715ff2f6148", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96253614-d64d-4637-834d-5db951f8dc45", "sighting_of_ref": "indicator--63a263ae-8d8b-4d81-b912-01890540952d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06aa1ff4-9aae-4137-a752-7555b7925710", "sighting_of_ref": "indicator--67ad8c0c-6b44-4440-8ee1-3cb97bc56b4c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bc21ac-fe46-4da1-97ee-c27c2c117fb9", "sighting_of_ref": "indicator--e0c7bf41-52c8-4ada-bd09-bdce344c212c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6294a4c1-a314-4b18-9bef-453147b05a71", "sighting_of_ref": "indicator--d7bea200-94cd-41bc-980c-6737411edb5e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97b9f42-36f9-4112-a5f5-c5736fdbe6d6", "sighting_of_ref": "indicator--6bd65e62-80ad-4877-ad25-271d30bf9541", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb63145-e8e5-48e2-8214-20735e7a993e", "sighting_of_ref": "indicator--878855ae-69f5-49c7-b991-b4cb009a2ac6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e75ca65-0a02-462a-820e-6ddb7b908d59", "sighting_of_ref": "indicator--372ea18c-ea46-41c8-af4b-7fda28ab1ef7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ceb832-3a11-4ed2-acb6-a22ba46db7de", "sighting_of_ref": "indicator--8995e800-a340-4bd5-9040-c40cb70c5b03", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bc830e-6329-4613-a20c-11a9c34cce7c", "sighting_of_ref": "indicator--55192231-63e9-476a-9a76-219f2cf582a1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76267612-ae40-4b43-ba57-3be9fe95fa34", "sighting_of_ref": "indicator--afecf7c9-5f29-4df0-97bf-3f0d1107081f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4024027d-0b22-4c19-b93b-434c9979e30b", "sighting_of_ref": "indicator--eb42b28c-e0cb-4759-b70b-d32f61c2caef", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd8890d-8109-4dd4-b1fc-b119d44c12bd", "sighting_of_ref": "indicator--af980053-16a8-47d3-b1c2-bb1dc3eb7ff0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabe6dcd-6d8b-497c-a3cc-fa4efdad8216", "sighting_of_ref": "indicator--9c4d4e3b-d6d4-4c1b-98bb-562fee50c7ea", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce26b1b-651e-4ed1-8937-462cf51a6db5", "sighting_of_ref": "indicator--1c3d0de3-7f95-4270-8310-fc8d5ce187fb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753eaaf4-79a3-4ff8-a4c7-f652fb7c4ee5", "sighting_of_ref": "indicator--8ca14360-4b24-4fef-b13e-616413c2ceff", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3456e9b8-dfbb-40f8-8d33-6990c3df7bb6", "sighting_of_ref": "indicator--3767b862-ac95-4a3d-8a30-9ea4433e983f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74d2880-4915-4291-b627-a740a0899cf2", "sighting_of_ref": "indicator--696f65ff-eeff-4d31-a7fc-c4d1eb5f1081", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65de3f57-548a-4c74-a0b7-457dac588aeb", "sighting_of_ref": "indicator--613296c1-7ec3-483b-bca7-d345ae23be21", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af20fca9-5603-4d04-a056-386daec443f0", "sighting_of_ref": "indicator--bf9bcee5-f509-49f6-8986-bcdce924c418", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65101016-cb0a-4158-94ab-e3fda1644df7", "sighting_of_ref": "indicator--ecf6921f-aa14-48a9-aa30-3919a6f4baa0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68fcc388-5bef-4f97-bab7-e3c8120aa1de", "sighting_of_ref": "indicator--1d0d4ca2-a452-4b17-a2f4-000e3ac3052e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aef7bf9-179d-47e1-b8e4-34b4cd3791a6", "sighting_of_ref": "indicator--e9036c1b-6c39-4e4f-9611-dbd61f0a38aa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0752617-12f8-43d7-81d2-9bdf91f94c1f", "sighting_of_ref": "indicator--a810f882-463b-4617-9d60-425cec8b2055", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130670f6-732b-4f8a-be99-938e9bc1677b", "sighting_of_ref": "indicator--c9aebab5-47b1-482f-944f-b9f89899399f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e9e23d-8e33-4b61-9cb6-95730b59f04b", "sighting_of_ref": "indicator--ebd3bbac-fba6-4a65-beb9-c87365cc0be7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9061ac6-bed9-4513-b1bf-9f89c00cfaa4", "sighting_of_ref": "indicator--66d6a5b2-ffde-4d2a-ab46-3f23049395e5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5a1e2a-f60e-46fe-b942-c5ad0358e077", "sighting_of_ref": "indicator--a6794a33-5a66-4988-9edb-59b55cf3aab5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b05724c-314c-4c8c-a5ad-e7f40774e556", "sighting_of_ref": "indicator--d4924f3f-2905-472a-85ab-45ef4f34ee66", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40f6daf-b838-4629-9aa8-dd519a8903cd", "sighting_of_ref": "indicator--9696f5c5-e858-4255-b197-b3b6078f8d51", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed5c693-0765-465c-9793-e34c3224c7df", "sighting_of_ref": "indicator--98883233-b981-4e58-8dff-2e59b137355e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5566e46-69cd-4b7c-acb0-6b67b6912c4d", "sighting_of_ref": "indicator--c1447133-1f99-49c9-833c-a22bae0459a8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c028d898-2d99-4a1b-9cf6-f84b630a6766", "sighting_of_ref": "indicator--f265d876-79eb-454f-ac49-06981ed15ed2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b947f1-fa16-4183-b702-3854a769bce2", "sighting_of_ref": "indicator--184927f7-6c8d-4da4-a610-80f4425502ce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11db687f-58f8-46c3-85eb-d93c46a91ffd", "sighting_of_ref": "indicator--654650da-8149-4490-820d-48de19c85893", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212c1eb6-6c6e-464a-9e03-cc2dc50a4af5", "sighting_of_ref": "indicator--7c1c2a2a-f65b-432e-859e-5d69bfbcbfff", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69303bd2-9004-4c21-82fc-94b04dee1254", "sighting_of_ref": "indicator--e4ec156e-a365-4546-bf85-fe828c074532", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb9346e-9cd9-4faf-97f6-6437a38791a5", "sighting_of_ref": "indicator--1652f185-2549-4140-91f1-6f27b430578e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad64a330-468f-444a-b23b-238e8bc8ac1d", "sighting_of_ref": "indicator--3459ec9f-f3a0-4243-924c-710fd9ff55a8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb49952-8dcf-43f1-a6d1-1f5c709d010d", "sighting_of_ref": "indicator--3459ec9f-f3a0-4243-924c-710fd9ff55a8", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2fbd8c-f5b2-4100-ad4c-6e6cac8c002a", "sighting_of_ref": "indicator--3459ec9f-f3a0-4243-924c-710fd9ff55a8", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95acee3-55e6-4c1e-81f0-113d09046181", "sighting_of_ref": "indicator--e6b43a31-95ba-47da-9cf4-f74c21016621", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebf4477-581f-488f-b366-5680df5fb4a6", "sighting_of_ref": "indicator--e6b43a31-95ba-47da-9cf4-f74c21016621", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df47b17-073b-437f-8fde-d28b1b05f00a", "sighting_of_ref": "indicator--e6b43a31-95ba-47da-9cf4-f74c21016621", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21aad90-3fd5-435a-960d-5267e687600e", "sighting_of_ref": "indicator--b7222ce8-8837-4779-b687-6de8c390de15", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e043e822-7abb-44ae-b5b4-f39b76a715b8", "sighting_of_ref": "indicator--b7222ce8-8837-4779-b687-6de8c390de15", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5c755b-8d42-4802-9f17-46b6bb8dfa71", "sighting_of_ref": "indicator--b7222ce8-8837-4779-b687-6de8c390de15", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00b348e-3c62-4633-8de1-1b950fee46c1", "sighting_of_ref": "indicator--2fd894a8-a124-4740-ae25-8fb110e8db69", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000733a6-b0ab-4003-872e-08dda5c6dbdf", "sighting_of_ref": "indicator--2fd894a8-a124-4740-ae25-8fb110e8db69", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e4b4b7-1793-495c-9caa-c8af5c2bbe10", "sighting_of_ref": "indicator--2fd894a8-a124-4740-ae25-8fb110e8db69", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edadd57a-28bc-459d-8fed-4965ce1b2e42", "sighting_of_ref": "indicator--7f31abea-0e50-4a6e-b336-43bb4505af8c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8c4541-ecef-43cb-bf56-7c6c3212c46b", "sighting_of_ref": "indicator--7f31abea-0e50-4a6e-b336-43bb4505af8c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ceeb354-d697-4fba-a2c4-c7e6cf16c6df", "sighting_of_ref": "indicator--7f31abea-0e50-4a6e-b336-43bb4505af8c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe813e0-0805-427e-ad4e-80067de6c3d6", "sighting_of_ref": "indicator--1b295399-b293-4c24-8efb-72488e7f4f32", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c75c567-65fd-4247-abfb-8bbf85846c08", "sighting_of_ref": "indicator--1b295399-b293-4c24-8efb-72488e7f4f32", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3744ce10-4c8b-4bd1-8a3b-f549788eb263", "sighting_of_ref": "indicator--1b295399-b293-4c24-8efb-72488e7f4f32", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08221f2c-9d19-4767-b18a-8202f1643485", "sighting_of_ref": "indicator--2616cc1c-9dce-4581-8b8f-0b2817bb0efc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9095f096-fbab-4541-8a28-73571c40e63d", "sighting_of_ref": "indicator--2616cc1c-9dce-4581-8b8f-0b2817bb0efc", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b442d9e-f872-44a7-9ea9-ca3e9f10fef1", "sighting_of_ref": "indicator--2616cc1c-9dce-4581-8b8f-0b2817bb0efc", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cc3f74-d672-4ebe-8c41-c7628ff6131a", "sighting_of_ref": "indicator--2616cc1c-9dce-4581-8b8f-0b2817bb0efc", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962b10c3-295b-4761-a8f6-c8523345b692", "sighting_of_ref": "indicator--b4c556e5-a9ac-4174-8c74-441e8e91ef55", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa517f06-a4d8-491b-86e7-65a3c7d94931", "sighting_of_ref": "indicator--b4c556e5-a9ac-4174-8c74-441e8e91ef55", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78cb9371-a1a3-4cb5-a9a7-66452e155988", "sighting_of_ref": "indicator--b4c556e5-a9ac-4174-8c74-441e8e91ef55", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d194065-0b88-40aa-a2e7-5c6bcf072c9e", "sighting_of_ref": "indicator--a8e320eb-6e26-4ee7-9f0d-7f3c8e58ada0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb01d85-f654-451e-a284-632f045dba9f", "sighting_of_ref": "indicator--bce58487-2ed4-4930-97f6-4781ba51079c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802a9bf1-4bf3-4801-b9c7-2abd173c33ca", "sighting_of_ref": "indicator--bce58487-2ed4-4930-97f6-4781ba51079c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36c0781-f64f-4dff-b4d6-4e29e802cf6e", "sighting_of_ref": "indicator--bce58487-2ed4-4930-97f6-4781ba51079c", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76137143-cc6b-44ab-87d8-109eedf269a3", "sighting_of_ref": "indicator--92c262a8-ebd0-4717-9b94-a44740fb6579", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba43cd9-28e4-4ea3-9792-e306947b1865", "sighting_of_ref": "indicator--92c262a8-ebd0-4717-9b94-a44740fb6579", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12ff6bb-612c-4f45-b03b-4e02a8021503", "sighting_of_ref": "indicator--92c262a8-ebd0-4717-9b94-a44740fb6579", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f516a0-d80c-42d2-a5d4-284956c1b74a", "sighting_of_ref": "indicator--fc0c17ff-c32d-4487-917a-210fee41c274", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7937e0-19b9-4cb8-a26d-82ced3b9bd2a", "sighting_of_ref": "indicator--221201ff-d991-42df-8e76-9b08dd9af47e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e36269-2b28-4d81-855f-993e9eb741f8", "sighting_of_ref": "indicator--221201ff-d991-42df-8e76-9b08dd9af47e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f7a585-d3c7-4c81-83eb-47b93b9b9e5f", "sighting_of_ref": "indicator--221201ff-d991-42df-8e76-9b08dd9af47e", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44148882-e9d8-4b77-bb22-06ccc3b7e75b", "sighting_of_ref": "indicator--d03485e5-8782-4043-990e-0f574648244b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281c2e50-42aa-409e-8789-6d9f0d9bc83a", "sighting_of_ref": "indicator--d03485e5-8782-4043-990e-0f574648244b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b67a8a7-e89d-407e-a643-a66d75c0bb3f", "sighting_of_ref": "indicator--c72f1e36-7919-4b8c-a7d5-dff16687595e", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab268d8-9e1c-4715-ab54-06378cde8d4f", "sighting_of_ref": "indicator--34f6cdca-3177-4185-9908-bdcee1bdc0ec", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566af6ae-5e25-45f0-898e-5dbcce0dca42", "sighting_of_ref": "indicator--34f6cdca-3177-4185-9908-bdcee1bdc0ec", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572c0b37-c625-48b1-bca7-01356cf3b49d", "sighting_of_ref": "indicator--440ccf9f-573a-4bd3-b5bd-8962caeccd31", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c849df-eed6-40ca-b992-76ea640bbe82", "sighting_of_ref": "indicator--95f84e0c-9fed-4a66-b2ac-fa405740af98", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bffa506f-b9a9-4673-917f-0ac68af7149e", "sighting_of_ref": "indicator--95f84e0c-9fed-4a66-b2ac-fa405740af98", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae9d6a2-1021-4bbb-8b17-ea2b0e38dc8b", "sighting_of_ref": "indicator--95f84e0c-9fed-4a66-b2ac-fa405740af98", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77da206-8344-4fad-9453-f6f83373df4a", "sighting_of_ref": "indicator--adbf5a13-ce6e-40fe-b13f-71d6469b01d3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebaaf6c1-79ff-4588-9e1c-6fa690950ee5", "sighting_of_ref": "indicator--adbf5a13-ce6e-40fe-b13f-71d6469b01d3", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ca4caf-a893-4af8-9ad2-a22e4ebd7f34", "sighting_of_ref": "indicator--adbf5a13-ce6e-40fe-b13f-71d6469b01d3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49692c58-005d-47ba-966b-41d4e2e77525", "sighting_of_ref": "indicator--d73318b9-95e2-40f5-83f5-c1cb134586f9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47fa0452-ae8b-43dc-a8cb-92f90c028b7a", "sighting_of_ref": "indicator--d73318b9-95e2-40f5-83f5-c1cb134586f9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14973c84-d487-4c64-9c9a-180371ea9224", "sighting_of_ref": "indicator--591d0adf-c807-4186-a614-b76b42736427", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e8fe07-5bf5-4528-931d-74f01f139bdf", "sighting_of_ref": "indicator--7295fc1a-a964-4e03-b731-d97d4af60411", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e200300-cb98-4c0c-a115-4ae3a5bc7d4d", "sighting_of_ref": "indicator--d5b42d72-983d-46b6-b7a8-ebea4b65f9b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e39f45c-c46f-4a5c-840d-0e392fc784f8", "sighting_of_ref": "indicator--cca2b56e-3dce-4208-b390-635517fa36ca", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d5f5b4-8faa-44fc-8010-f64336d0e145", "sighting_of_ref": "indicator--b3fe1c20-6dd5-4dc7-8095-f499129e8e5a", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eada9c0-8d88-45c6-9afd-9e5e5bfe0a31", "sighting_of_ref": "indicator--d4883671-c565-491e-8212-b21a97a08885", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fffa9831-64f1-4675-93f8-443ae6a312fa", "sighting_of_ref": "indicator--07198b9c-6266-41c4-bbd7-fd8ea926a9a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85828b73-16eb-4008-bdcb-899799c830af", "sighting_of_ref": "indicator--13ea8146-6e80-48da-9c15-b8d0f8a6da03", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a634b091-a1a9-479c-89a2-4377c731f74f", "sighting_of_ref": "indicator--bdf3889b-220e-46f8-8abc-480126a4bc45", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2347b4d-9268-424e-9c9b-65543b2de1fa", "sighting_of_ref": "indicator--d8023050-cb4e-4dde-a305-2097b591c937", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bcd405-1e07-40a2-8623-bf77fbada82e", "sighting_of_ref": "indicator--5ba4f460-7d1a-4bc5-99c0-20162e3fa448", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5719e1-3155-4ad1-8c82-9d82c7edcab6", "sighting_of_ref": "indicator--651775f4-1718-40b6-afaf-1122b1d53247", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a114f0-989a-4b0b-be37-8b832e60610b", "sighting_of_ref": "indicator--3eee53c0-044a-410d-8a25-cfa3ec9d50ba", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2888444d-3d4c-409a-b3ec-e677e22a89ac", "sighting_of_ref": "indicator--b67a3784-8b5c-405f-b18a-26c7a2f9118b", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a177225-4358-45f0-9960-308cad6df878", "sighting_of_ref": "indicator--79ef9bb2-c7ea-41af-a1bb-e856a4014613", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3f38a9-c924-44d9-8219-6ffe442012c1", "sighting_of_ref": "indicator--f375c930-fccd-4641-9e16-754131be2089", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602a8ffd-f0a2-4721-8e14-2bee4c0a07dd", "sighting_of_ref": "indicator--53fc6020-3fc9-45b9-9281-7f6c9407a4d9", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533043ab-427c-4616-8c87-d66b06c27d39", "sighting_of_ref": "indicator--9d3416eb-45c9-4de5-91da-33a88fd89171", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce021e04-971a-425d-a38e-3901bcb53d6a", "sighting_of_ref": "indicator--9d3416eb-45c9-4de5-91da-33a88fd89171", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b661c8-14ae-461b-bf84-b631e8c8c581", "sighting_of_ref": "indicator--9d3416eb-45c9-4de5-91da-33a88fd89171", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623d7198-e5dc-44ba-b170-0deb0cd37b8b", "sighting_of_ref": "indicator--cdf7248e-16da-472e-8841-d9e51844cfb0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75422949-920a-40cf-af1c-2b90829b19d7", "sighting_of_ref": "indicator--cdf7248e-16da-472e-8841-d9e51844cfb0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f564e9-e269-492b-91b8-754d33abec0f", "sighting_of_ref": "indicator--0ccaffab-b229-4138-a10c-69e00838725d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8796259f-987c-4031-a816-0e06f1318a36", "sighting_of_ref": "indicator--c348dc56-19e3-4f9c-8144-21392a78c3d4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1978feb0-035e-487e-81d2-c726e36b4c0a", "sighting_of_ref": "indicator--c348dc56-19e3-4f9c-8144-21392a78c3d4", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbde7c5e-4ccb-4794-a0f7-70af676fab55", "sighting_of_ref": "indicator--7ab5e437-4bda-47b1-bea3-f096976b5212", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f139c50f-d529-407c-aaae-4c972c5b05ce", "sighting_of_ref": "indicator--7ab5e437-4bda-47b1-bea3-f096976b5212", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d71c92-400d-4d85-86e3-3e7745e46b4f", "sighting_of_ref": "indicator--1a40d656-2c18-49fd-9aca-2b99dd3eeeaa", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f16832-2592-4887-b8b1-fffa0cf69503", "sighting_of_ref": "indicator--26825e2b-6d49-4e44-83a8-7cd83b8b07af", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b154cfd1-45b1-4e2b-b1c2-6b25fed47f82", "sighting_of_ref": "indicator--9f7b66d3-3037-4ed1-9ee7-fb82ba1545c4", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78abca88-e930-489b-bd79-c64e52a09a79", "sighting_of_ref": "indicator--80a73979-bd72-4f3a-a606-28e3d696805e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fb53aa-56be-4199-be59-26889a7385e7", "sighting_of_ref": "indicator--fce003bb-4faf-4503-ac41-8c9d92bdf098", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9128ef0-9ec0-4b08-ae5e-9c7412b73a25", "sighting_of_ref": "indicator--86e04307-e9f8-4468-8db6-b525b6bb1706", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8816e39e-c3d9-49ea-afb9-f38fd6f3019e", "sighting_of_ref": "indicator--75f66245-696d-4420-9e4a-4d19b9d027ed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1af673-f40f-4bce-9611-7e88b0b3a7ae", "sighting_of_ref": "indicator--43bc5f3a-7d03-42be-a45e-80cf28d2ee23", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c404ad-bf8d-4c9c-a811-cebc78f10cb7", "sighting_of_ref": "indicator--7c389b5d-8b1e-4b1a-a791-bdf449b4a648", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d231800e-2574-485b-b0cd-1003133a110e", "sighting_of_ref": "indicator--8461e11d-a68b-4283-9812-dcb0c0eace7e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35455b7-b50b-4ccb-b97d-1af26215ab43", "sighting_of_ref": "indicator--4f0384df-f11e-46af-85a6-f88903b68669", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d882bcb-f093-4ce4-a290-62504b28b42f", "sighting_of_ref": "indicator--8ea4ee5b-730b-413f-8b6a-5a3643d11241", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71f4ffe-876a-44cc-b636-f66542eb5a69", "sighting_of_ref": "indicator--b0f3f568-a43e-4ec2-858b-52eff3ec441f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5315e82-8e24-48b5-b4b9-398fdb44408f", "sighting_of_ref": "indicator--32c55a40-5622-4db9-bfcd-a6c17e895e7a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbf34c7-1bf1-4c10-87ac-f42bc4e3a1b4", "sighting_of_ref": "indicator--a9522135-c956-45fd-bcfc-8a784679de9e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55125e35-c4d4-486a-bfac-630cfcc134e1", "sighting_of_ref": "indicator--4e5b2047-b017-42c1-902b-46ff6edef256", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68e4b77-c043-40e3-8993-f77545558171", "sighting_of_ref": "indicator--bf8ea6bb-91d9-4a91-be5b-9c5e41d25c95", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b8d66e-8f81-4c98-9f6c-4d876e64367b", "sighting_of_ref": "indicator--85763c6d-f785-4945-bc9e-cb88149464d5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92ac3ca-83c0-4af5-a591-a3d0a352f8f8", "sighting_of_ref": "indicator--d8b8c37e-5ca2-4add-bad5-81eae287ba5b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250fd05a-b564-4320-95e3-c57a00312d50", "sighting_of_ref": "indicator--72acaeb7-c0ea-4051-8cb6-da8b13cbd690", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c2eb12-5651-4e0b-bf9a-67b29debe965", "sighting_of_ref": "indicator--87fd41b7-f2a6-4975-922f-13a3bd4807e2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9732573-ef8d-4bf0-9333-4fb79c510220", "sighting_of_ref": "indicator--3a36c7a6-e9f5-439c-8c36-5c735381b647", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce04ca8a-3ead-4718-be24-ece63e134d18", "sighting_of_ref": "indicator--80570f00-ec97-4de2-b387-6020f078192f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30836f2-36df-4293-867d-10fa41ec35fd", "sighting_of_ref": "indicator--97a39c2f-aedd-43ad-ba06-673ea02bf349", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a423193-08ff-4343-a0d1-634c954b145f", "sighting_of_ref": "indicator--53071d41-a4ba-4449-a413-da629940ff19", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b958fd-cd63-4773-afb3-25a887e6e3d3", "sighting_of_ref": "indicator--65159364-16b0-4e2f-8922-1ffadacc0e2b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34689a88-4132-4ff8-8ede-6795fc534d02", "sighting_of_ref": "indicator--e3c6aa91-c519-496f-9f73-1e8d51da1024", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb62e2c8-36cc-47c0-abcd-75098fc8905a", "sighting_of_ref": "indicator--40844112-0493-42fa-b385-8e56f4581e60", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2ee9a6-1bd3-419e-86de-89c16f18ac92", "sighting_of_ref": "indicator--f8bb802b-875f-4be7-b05b-b5cf517d7b64", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3734997d-2ce7-4f95-a599-f353b0c29d8f", "sighting_of_ref": "indicator--6331fe87-44d9-45f4-a754-79a45d617930", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17ce7a8-c07a-44e1-820c-7ba480ac7808", "sighting_of_ref": "indicator--4e776d66-2e4c-4bce-8579-f2d4423c2915", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a033214-da22-4e72-b26d-c6d250c5765c", "sighting_of_ref": "indicator--b4e9be3f-98fb-4a39-89fa-6a6b77f07b6b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2680977d-6ba5-4eee-81a2-e985b13f71a0", "sighting_of_ref": "indicator--76c51edd-9033-4201-87ed-ff9b76de2650", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b2d0c4-ea2f-4f57-b236-27a42139cbb9", "sighting_of_ref": "indicator--4ebead46-c175-40ba-a0ed-5b23202b63b2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2fabf9-4e96-46d3-b33b-222e48feba89", "sighting_of_ref": "indicator--e145fbaa-71a2-4930-a63f-128d71612622", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fdb691-3449-4f79-8f77-f63848296d06", "sighting_of_ref": "indicator--10db8f21-d3ad-4f20-8aa1-a82ca6d50174", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1953e592-542c-4b08-ab60-b7a3a3097dba", "sighting_of_ref": "indicator--53d70b0b-2132-4de0-8da7-7ef53da18f0c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c33a3ae-12dd-4687-b14e-8c6d6dbe9063", "sighting_of_ref": "indicator--88db61a8-6e0b-44e3-b730-ff03bd8cdd7b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f53946-ab70-4900-8cb5-4c1a7042c890", "sighting_of_ref": "indicator--8ddebe0f-de21-465e-ac98-f8a595a27f82", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3370d5-442c-4db0-93c9-8bb484290026", "sighting_of_ref": "indicator--1dc338fa-df55-4463-9d7b-adeaa4b46ee5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2f896b-2862-42de-99b5-4b11535f3d60", "sighting_of_ref": "indicator--52df4f66-c815-4754-be39-8a93fdb562d9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ada71a-670b-45a0-81c5-9ed56719c8f0", "sighting_of_ref": "indicator--5d57f58b-8bb9-4281-be61-cc66c195fe48", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c2e5a5-f62a-494e-837f-6cbcf73a7049", "sighting_of_ref": "indicator--f8bb264c-57a9-4e3a-974c-f51050ef2973", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c9ad70-3cf9-4d04-b36d-3091ce1497a1", "sighting_of_ref": "indicator--c8cd1228-d2f4-4ef2-86f6-1446b2be3472", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae4f377-f5fe-4302-87da-2521972417ee", "sighting_of_ref": "indicator--897198d1-48c1-463d-a219-396cb4ec1f05", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1258e2a1-7f65-4992-8f86-e06684731ba7", "sighting_of_ref": "indicator--f64e7753-8458-4b67-8ce1-eef733cdc21e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca84cd7c-23d4-4752-81db-8ef831b1fd5c", "sighting_of_ref": "indicator--9cfc4e09-2c77-4730-bde1-0ca8283a350d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af50d9c-61ef-41bb-bf39-fcd799a869aa", "sighting_of_ref": "indicator--54b2efcf-60e2-4bb3-82a8-be0256476013", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74841b5c-e117-43a9-a5c4-3f0fe1991ef2", "sighting_of_ref": "indicator--a95c8a77-cd27-47d4-b498-f562e0dd3866", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e61b7f-c825-4773-b883-6bf3989dc5a1", "sighting_of_ref": "indicator--1387e3bb-2fbe-4756-bd65-a48f389c8f9c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836278b5-29e8-46be-8263-3628827a98c6", "sighting_of_ref": "indicator--0eef6a2f-4dce-438b-adfe-5cb214cab334", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d477acd-d1eb-480b-b23e-8d5f350bc265", "sighting_of_ref": "indicator--fcd82768-bb7d-437b-bb15-a346a271c733", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acda40f8-e8ec-481d-8546-13104b7a7636", "sighting_of_ref": "indicator--f7dd6e0b-8113-409b-97a5-9952bf9538e5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdaee8f-02a5-4d4a-a93e-ecfc8a42afe8", "sighting_of_ref": "indicator--7feee615-9f05-443a-a92d-0f0f78efbc95", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2537ce-5ab0-4a9d-a846-44d221a9cb26", "sighting_of_ref": "indicator--67802416-ede5-4845-a542-05e333ad857e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a9415a-66dd-4408-bf3b-e11333791c6f", "sighting_of_ref": "indicator--5feb0cf0-2560-405b-8f8d-560dbb74e5f0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed138511-6f61-4247-bf92-27f2820a3707", "sighting_of_ref": "indicator--ecf862e5-c9b0-4320-986e-bdfca7321ec5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27efba8e-9cca-49a9-b743-9803ae76d9a6", "sighting_of_ref": "indicator--92f031d1-9b42-49e5-9e1e-1e67f8540f07", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb10fee1-f3e0-438b-b48f-3ba3db598efc", "sighting_of_ref": "indicator--bea327c5-36e9-47f3-873a-273dfb0f1de9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec815787-471e-4e18-ac57-d16c6ea2d8dc", "sighting_of_ref": "indicator--13ae0cc5-d02c-431b-9db4-5e79a605a035", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c756fc6-2b9d-4b70-a0e9-4991afe2f989", "sighting_of_ref": "indicator--3e627050-20ab-46ab-ac29-0bb798eae157", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9638b715-e38b-413a-b2e1-accbbf50aa71", "sighting_of_ref": "indicator--91ee7f1b-0fef-434a-bbab-8ea18b9f31cb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab6486c-c11f-4e97-b3e9-f89a91fe0fb9", "sighting_of_ref": "indicator--85108768-6301-4269-8252-5084d91709d1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e480937-4b76-4c3b-9fd2-e252acefb903", "sighting_of_ref": "indicator--2673f343-3b7c-4c28-af92-de9a6bb47352", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5e8763-2ccc-457b-a07f-de8c7db77c39", "sighting_of_ref": "indicator--ad9c5bbd-1175-408b-aec6-776a48b9ce95", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5f511d-daf0-4a80-b810-5f1d40b208b1", "sighting_of_ref": "indicator--9397a716-80b2-4546-98a7-e82f971ba1e6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3fad23-afe3-4ba8-9929-a94a8d2984fd", "sighting_of_ref": "indicator--ad0e48ee-bbc0-4ac3-a1a7-597948db96c5", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd176ba2-c3d6-4cb2-8fd5-eee9255cb8d2", "sighting_of_ref": "indicator--e52ff216-b86b-472a-a975-48d2b2af1796", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afda98b-35eb-4bf3-ad64-416ee0741a37", "sighting_of_ref": "indicator--46840ad0-8067-419c-a408-7a4c4118e80b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7d4db2-2ce9-4eb2-b77a-47ed0497b83c", "sighting_of_ref": "indicator--1b6200e7-b9f9-466e-a6ee-f10d81b2f0d6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af34568-0a08-460c-aa7f-27fc6be9e999", "sighting_of_ref": "indicator--dcbcae21-60b1-4c38-a04b-e843aced8b77", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5908f25e-3cd8-441f-ac1a-4abe74384b21", "sighting_of_ref": "indicator--0ab1c8e4-5138-4a13-8e4e-6942539ed0c9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d447b5af-8b5a-43e5-af8d-ae7433f2e7c3", "sighting_of_ref": "indicator--c37e649e-5dd9-4964-8571-f58202b4a3f6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3ee653-59b8-46a8-8cfa-d865fd417e63", "sighting_of_ref": "indicator--2bcad2c2-ba60-4288-a11a-810de6ef1189", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a53c46a-faa5-470d-b076-2a2093f002b7", "sighting_of_ref": "indicator--bdeeec96-0821-4755-babf-507669549463", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f0df91-899d-491f-9d37-57fa42e11be7", "sighting_of_ref": "indicator--1eaf5511-7ef9-4f85-9e74-8fab2462875f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f02a805-88c6-4882-bd0f-d7c9fa6bcd89", "sighting_of_ref": "indicator--012db054-7415-4f5b-ba1d-ee911b4e748a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6addd84a-eb3b-4bfb-a3c3-2f29ed3bf870", "sighting_of_ref": "indicator--fa6e6ca6-10be-4448-86cb-b239cb0b4854", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36f8f37-b322-467f-95e8-72fafcff5f96", "sighting_of_ref": "indicator--ddff1693-33b0-4f45-a76d-3a973c66e87b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f147775-5481-4425-849a-bab0ef2a51d1", "sighting_of_ref": "indicator--2b77c1e7-91f6-48c9-8444-82e10b4e50b7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9a5144-6352-434e-8326-aeac9ed77eb7", "sighting_of_ref": "indicator--5cd936c6-fe22-45f1-a546-d608bced0e8a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097be74c-4c85-431b-b4a6-44d8659b07f8", "sighting_of_ref": "indicator--2443ce05-f28e-41ac-87b0-4d898ee99fa8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fffe2e80-a150-4bda-afe7-e76cd851f2ac", "sighting_of_ref": "indicator--c990d3b6-a8fd-454c-9d67-9e09e1d4807a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6ca815-847d-4386-9661-19f7d25f08b4", "sighting_of_ref": "indicator--62d39e3a-88fb-4cfc-83f8-46b05e230db8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12448acc-be35-4649-9296-44b92964a1f7", "sighting_of_ref": "indicator--9a9fa1df-4c15-45c6-80e1-e1aec301ac55", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf07b71c-a417-427e-b60c-c1abdd38a0c6", "sighting_of_ref": "indicator--7511500e-c954-4f88-8dfa-a805ef59e0c9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f57c780-fd5d-4213-a0c3-47bae5caf42e", "sighting_of_ref": "indicator--680a64db-e666-4bae-94c5-a3343abbeebd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9633005-d3b5-4318-85dd-e73d16e6aa5d", "sighting_of_ref": "indicator--d4f386ef-b650-4465-b55c-ff1cb6f42558", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05dd872-1aeb-47c7-85a8-a9b5acedd98f", "sighting_of_ref": "indicator--b5fc74f7-3ab7-4f4c-b190-c25b4b6ee9b3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ff1109-30a6-426f-ba1c-dbb168576484", "sighting_of_ref": "indicator--99d20303-c27f-4532-949f-e02719d26500", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51520824-033a-4c6c-8a64-cf4799914b8b", "sighting_of_ref": "indicator--22fabca0-bcbe-4675-94b8-8e9a063999a4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9706b0-9e14-46c1-9591-131618a56246", "sighting_of_ref": "indicator--78462464-faa2-4015-bcdd-0e1c1fa92a57", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8c9e71-2bc6-4a5c-8412-832dcfad522d", "sighting_of_ref": "indicator--c1123cd8-b01e-4138-b8c3-a8aa76050900", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c5aba8-5b5e-4d7e-ba8e-fd876a291a45", "sighting_of_ref": "indicator--caebc2f0-556c-4be4-a956-4d16d2585017", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccb490b-35c1-4326-8c60-af032e0c696c", "sighting_of_ref": "indicator--540059c2-7e97-4664-bc3f-42825c1f01ef", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c93881f-d1b5-4c18-af2c-22b13b19ecce", "sighting_of_ref": "indicator--5f0c432f-b303-44f3-bff3-3a25bb136f83", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f6b022-d838-4313-812e-e86820d6a781", "sighting_of_ref": "indicator--b3102c0e-94e4-4927-b597-63e4f3857f58", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2ebc13-2bc2-4f8f-8e36-b491f611f88e", "sighting_of_ref": "indicator--c96743d7-90fc-4611-a90d-12111b4f4e29", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320fd034-f31e-46e7-a1ae-1e52ef3384cd", "sighting_of_ref": "indicator--0433782c-fedf-4120-b316-3f349afbf9c8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9d6620-3e5a-4329-8edd-e5740621b477", "sighting_of_ref": "indicator--04768288-8965-4bb6-bd2a-fe2462bcecf6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb99f032-32dd-4821-ab09-7605ebe7c64d", "sighting_of_ref": "indicator--80edc2e3-2c52-42ac-b580-7f05a72d4e0e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459bb21b-6642-4a0d-a18e-360b7547c8c2", "sighting_of_ref": "indicator--c14dc0da-92f8-4123-8b5d-f207ab4836b2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b48b014-588d-447d-a388-caa21b28b2bd", "sighting_of_ref": "indicator--72704275-f9bd-4f28-9d68-a9137232ecda", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923432eb-fb41-4809-905f-9bb552afeaa3", "sighting_of_ref": "indicator--daa324c2-5bd7-4e58-b1bf-afd3416f9736", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80181ffc-2ab5-4a76-846f-430cc7637b59", "sighting_of_ref": "indicator--b9879258-4184-486c-bc07-b668629407ef", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28036c07-51cb-4cb9-9629-605723cbaafe", "sighting_of_ref": "indicator--b83165e7-c959-4392-8b01-de9c6289d9d2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef92a38b-69d2-4605-a310-01f3c1c54a30", "sighting_of_ref": "indicator--9f522361-9a03-4f5d-8bea-d71354f8ace3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9216489d-a184-4246-a1d7-b57a41a9e366", "sighting_of_ref": "indicator--b856d9f3-6bf6-4aef-b778-1d98b650b049", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484b0963-a0d5-4fc8-a331-49f653d95c2b", "sighting_of_ref": "indicator--20ffa8f2-3219-4042-8b99-3e49e916f360", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361cbd45-aadd-49fd-9b75-93005275af6b", "sighting_of_ref": "indicator--46ef7063-9873-4c50-9ffa-1c0c8446ab42", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c3d929-7e7b-4b3b-a957-c0e44f249d33", "sighting_of_ref": "indicator--a2c5db46-0d84-40d7-a48c-b316db9088b8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99220dfb-cece-47cb-b890-a22d4e9902a9", "sighting_of_ref": "indicator--c12c9857-c6c4-4d20-a614-a23b3fbcd7b1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43aa4e52-d09b-4a79-bf31-7b9954858ec8", "sighting_of_ref": "indicator--f0c90131-edb3-4e58-8b3c-c58b869b35e2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5526e303-fb96-4435-a7c0-5489b259aa5e", "sighting_of_ref": "indicator--b02833e7-586d-417e-b75b-8849b9a384c8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e173c9f7-a002-4aaa-8d4b-2c875388bd0d", "sighting_of_ref": "indicator--1889f461-4959-40f0-b245-68d75b4053e4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f840758-f9a3-4016-912f-3f4f731380e1", "sighting_of_ref": "indicator--b5ae0e9b-ea06-4600-a83a-15a55dfbec3f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3910605-a4fc-4717-b3a6-e350144d886e", "sighting_of_ref": "indicator--54815fa3-443f-4c24-b67a-f9139dd20267", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb82bfb0-1881-43ac-a1c4-68cc50db2cc4", "sighting_of_ref": "indicator--30a9d5db-64c0-4d3d-babf-37e58dad2cd7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a4bb82-70f8-4750-ab90-e647f7a483bf", "sighting_of_ref": "indicator--8d046980-27c1-49a4-afb3-0f1b03e2e8b9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23d1d17-fdea-486c-84f0-bc82c33172d1", "sighting_of_ref": "indicator--80b00c27-7eb0-4d32-a7e9-b8bccc465c95", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d4ffee-90f7-469c-8c90-fedb900cb61e", "sighting_of_ref": "indicator--f93c96e7-1f04-4907-85b5-5c2eae930f56", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a9b3e6-d95d-4c55-ac87-420c500d9da7", "sighting_of_ref": "indicator--7a0153cc-b5b4-4ec9-a634-b62359dbddac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ced54d6-8b20-4d6c-b7b9-6032985fa200", "sighting_of_ref": "indicator--562bc654-6808-4751-91e2-6b394d93de22", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b28aeb5-5d23-4bfd-a5c6-d8ec9aca04b2", "sighting_of_ref": "indicator--a3a52d1d-b5e4-419b-a6eb-25a933239d7d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2e9ced-3359-46fe-a8b8-100ca3192457", "sighting_of_ref": "indicator--82ed2bd6-310a-4a6d-838b-d829c857144f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff484dac-3d7b-4118-af39-10936f797d27", "sighting_of_ref": "indicator--dda43789-fd85-4319-ac30-940ef1fefd17", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb6bb5b-599d-44dd-a76f-49c4f5759840", "sighting_of_ref": "indicator--5623213c-56f8-4d37-b4ca-882ab5858c92", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e8ff79-e0d9-4984-be3e-50717d241f92", "sighting_of_ref": "indicator--07357922-3748-4d91-a1d3-6db539764f22", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b99d606-d432-43db-9dfc-d92603e98b55", "sighting_of_ref": "indicator--b0d99bb2-ecbc-4d9d-9269-c3bbd924d8e3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ca2e80-3dee-46bb-bc1c-a16c25d93c77", "sighting_of_ref": "indicator--c5f99e62-8e6f-4943-8994-1445348ead53", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929af0e8-60a4-4701-8499-1b0477e96036", "sighting_of_ref": "indicator--8351df7d-c43f-49bd-a4e6-ed7a2ab9bf4f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fee9e7-be30-4b69-8a16-d69c02a3ec93", "sighting_of_ref": "indicator--1c4b05c6-a660-4b91-a829-22f3f6889db3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c90f456-eb9a-4a65-ab25-32c1715e36bd", "sighting_of_ref": "indicator--43cfb28c-5038-4f42-85e6-8ecec2a7fc2e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a67373-3e55-462f-a72b-a45d07efa074", "sighting_of_ref": "indicator--a67b6a35-ba80-4b7f-bd21-678b0d6472ef", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ddda4a8-89cc-47fe-ace2-9d99433118db", "sighting_of_ref": "indicator--adfdbb1a-91fd-4651-aa54-548e551c2036", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55867a7b-4e59-44d4-b05c-cd670f425325", "sighting_of_ref": "indicator--db2f0c07-6b59-48b2-8ea3-62d86582f05f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a626ab-e28e-40ed-8bd3-7ea9e453d918", "sighting_of_ref": "indicator--045eb694-b72a-4724-8f3c-48aa96fd583d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43279a6b-7ed6-45b2-b926-091e0e6374ba", "sighting_of_ref": "indicator--0a05dc1a-0269-4a95-8637-a7ecce60543d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ec855d-3432-40b4-9d8f-25caf578a627", "sighting_of_ref": "indicator--313718f9-703f-4687-8b65-0ca197f1e6d3", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9aac0fb-ce74-4acf-8406-822d7d5c3f0b", "sighting_of_ref": "indicator--9e721513-97c3-4d95-85a6-b1c833cf282d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc495a8b-0179-47de-a108-f54f02708959", "sighting_of_ref": "indicator--84d50fb5-1f49-41c2-a333-ad9ef232eb5c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e4413c-e7ff-4aca-87a3-8394de41fc7d", "sighting_of_ref": "indicator--03a244fb-a21e-42b0-b1db-0f04851f1a5a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ef8927-ba03-4907-806e-fa98b29de03e", "sighting_of_ref": "indicator--b7801db3-62b5-4756-a0f7-5daaf579b29f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1d28f5-acae-4704-bff7-85d9f59ab4f8", "sighting_of_ref": "indicator--f1a60da1-6a60-442a-a90d-57ec1eae6b12", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d57f21a-16ca-448e-a30d-422624d9a998", "sighting_of_ref": "indicator--7b1688cd-181e-42da-8208-f4568db1cb75", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c33cde-d25b-4c27-ab0e-ae2c2170c29e", "sighting_of_ref": "indicator--714c200f-b295-4be8-81dc-8f8e4660ce63", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc538775-15b1-40eb-b09e-19f8d18fa1e3", "sighting_of_ref": "indicator--6efdba80-94a5-4785-88cc-fb9ca7a54ca0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc372102-ef45-478b-ad93-9f4ddc74f4a4", "sighting_of_ref": "indicator--8621b780-ce1b-436c-b906-367547639286", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcdbdb0-f36c-479e-a271-3c20161016ea", "sighting_of_ref": "indicator--259a5bd5-373b-485c-9a7a-40e72dcd09a9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74db7e4-9459-4e0c-9c04-60ffbb401a88", "sighting_of_ref": "indicator--9b4c5c31-a56c-481f-8c37-27b4a2b33166", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc401f0-c480-4939-aa80-99a28e190463", "sighting_of_ref": "indicator--8e589779-089b-4d9c-a771-f0114b2e8f45", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679ea41f-179e-4c68-aad8-4e5a09d69112", "sighting_of_ref": "indicator--86593112-35b1-4752-a8d6-24cb908142ce", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bec3c08-afb6-4005-b650-2977db39fc4f", "sighting_of_ref": "indicator--f2ee4e8d-504e-42fb-9a96-e2d68ce952a9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cd5d39-8861-4cbb-97ea-734d509cdde9", "sighting_of_ref": "indicator--629d4384-9862-4814-bedd-16b9abfd8778", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806c4690-cc09-4b57-834a-8006f184ad17", "sighting_of_ref": "indicator--2c63a5da-f938-49ee-b36c-471feb5ee04a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2e4d3b-b66a-4afd-bd0d-fa8e39b8da01", "sighting_of_ref": "indicator--67a8b4c8-a54f-4df3-877d-4b3dcfdafd46", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745526ae-2ccc-4bd6-b1b1-366038a49ba0", "sighting_of_ref": "indicator--2740dd63-ffb7-4d8e-9c46-92579c207056", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3c491e-e449-404e-b01b-5d07602fed45", "sighting_of_ref": "indicator--9af7b959-3ac8-4c79-8850-f104409bc2fe", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de6f98c-63f3-467b-8e9e-74eb5f87663c", "sighting_of_ref": "indicator--963009ee-a39e-44fe-9f6e-cdce1ac1537e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed51bbe-a8f9-4109-9103-a0e69cddb356", "sighting_of_ref": "indicator--23b0b385-b989-45c7-a37e-3a7887ddf2f7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ab5f65-49e7-49f9-bc29-562a7a4c41b1", "sighting_of_ref": "indicator--dfefcf82-2499-4df6-91e2-5ab5a3a65602", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc04e10-b8a9-4339-b553-7c8268ec7b69", "sighting_of_ref": "indicator--f1847895-7368-4a05-b14e-8054fbf486ad", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38aa3c21-2376-4ba6-95a8-0623b1c48dd2", "sighting_of_ref": "indicator--3c51000f-403e-4dab-b3a5-556927cf40a8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e03796-9840-4678-b11f-331f7612249e", "sighting_of_ref": "indicator--fadf265d-e154-493e-8077-d9d431f44933", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb17fc1-fc8d-436e-b331-6d9ef9f2742e", "sighting_of_ref": "indicator--f806c7b6-1353-46ca-9fef-a6e0ba6c7730", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff717282-77c3-44e7-b7a1-09abb2488915", "sighting_of_ref": "indicator--ff42ae32-0e29-406f-bfd3-7b8f4711d577", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2193362-8213-4678-9f16-b5f37be703de", "sighting_of_ref": "indicator--89f3db1b-e9a0-420f-89d9-b355be022c1d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ac7ce7-c24d-4008-9fcd-bd412eeca177", "sighting_of_ref": "indicator--8bb0d958-9dff-479f-b755-2a5c465bf33c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5351958a-e9f6-4c18-9687-ac2003e9ede2", "sighting_of_ref": "indicator--97c7d4e3-9565-485a-8557-b81a586eb5bf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a283648-1a8a-4f86-bf10-56f56f7497a2", "sighting_of_ref": "indicator--6a515f7c-386e-4971-bfc5-eae1bbfde9bf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6384bdbd-4689-463d-ae8d-6eea3116851a", "sighting_of_ref": "indicator--30910ad6-916f-4cb9-b92e-c6c8ca78ce42", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37680798-d2c3-42e2-a0b9-dec495398b74", "sighting_of_ref": "indicator--7ee0ccad-ffcb-458b-b82e-c24c1cdbb6e0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0687edaf-9105-4dd2-a03d-4b665633f90f", "sighting_of_ref": "indicator--30a5dff9-9b2c-4cd5-99ee-e43cda8f11e4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734288af-f045-4f4e-a970-2879deac3789", "sighting_of_ref": "indicator--4f4d94d8-3c40-4e7c-98aa-8e71fc80a811", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29644cbb-bdd1-4c4e-8654-193584534e7a", "sighting_of_ref": "indicator--00198e92-0300-4e20-9c98-178a47a891f9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26502dd8-0c33-47a8-bc34-82596c0d9962", "sighting_of_ref": "indicator--9ee21aa7-d21f-4fb5-824a-adc9e3efc24f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bd5457-8532-4693-ae03-324efc3c0714", "sighting_of_ref": "indicator--4adca465-5d15-488e-b2cb-9b36191035ba", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a051ff8-d8ce-43cb-8083-b692466d00e9", "sighting_of_ref": "indicator--11f04eec-5603-4a12-98ea-ddc6d4dc77c1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191ceb25-6c06-4f9d-903a-b17f84012a4d", "sighting_of_ref": "indicator--eb629168-db3a-4f77-b20e-a3a13dc3ad39", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b9ef5c-a535-458f-b3b8-5a19f650ec84", "sighting_of_ref": "indicator--e93fdf88-a3e4-4f4e-b9fd-e8cdee410a64", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878bac0a-9d2b-4808-8299-41d308593530", "sighting_of_ref": "indicator--dbddc23b-e816-4cfc-9b1a-e237648706f9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5db5a3-3717-40c3-ab72-0196cda306c8", "sighting_of_ref": "indicator--8d231c9f-85c6-4ef8-8d20-50b2bff5b29d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287ae17b-7938-4e25-aa9f-9ec164adde41", "sighting_of_ref": "indicator--eee0b752-ebfe-4695-b35f-2da047bab03b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab351b81-47e4-438d-8e57-23a3f728d33b", "sighting_of_ref": "indicator--d893a165-81c0-4de2-b2ed-d9619bf2eb9b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f1a936-0582-4d11-949c-460e1f9367fa", "sighting_of_ref": "indicator--075779e4-b582-4209-ae7a-ded3fdcd805b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb65d17-1e09-40f1-ac82-0b25dac57e32", "sighting_of_ref": "indicator--0a27ecc1-771e-45ae-93ec-a9b148d2799b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c7eda5-7e95-4372-8ad7-e18d492aa8a8", "sighting_of_ref": "indicator--18016298-ef8a-49bd-9bc8-4deb55fa1635", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63813b8-af3e-482b-929b-50d1f1755248", "sighting_of_ref": "indicator--0e569d20-4097-47a4-a111-bc9089a1e4db", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db79ce7-6430-4d66-a1d8-faf4b4df8fc6", "sighting_of_ref": "indicator--26750928-a278-44fc-9902-9cec75cd1995", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f669d5-2b55-44b8-938e-281c6790c270", "sighting_of_ref": "indicator--0e99465d-0de8-480c-86c9-910cae86f6c4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcc0f21-a916-4c49-9681-f6af3116091c", "sighting_of_ref": "indicator--743bf8ca-b357-45f0-b3be-977ef6a7439a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef351f38-ef88-4f7a-8de4-4d58856f33ee", "sighting_of_ref": "indicator--4c60ecf1-2a62-4a36-803b-3f1b4417cb76", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f814367f-75c7-4930-8c42-1bd807aa428f", "sighting_of_ref": "indicator--6a52fb8d-3d2d-4e6d-a405-4df84067ff68", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236ca2eb-827c-4fc5-9ee0-d231fdf09799", "sighting_of_ref": "indicator--9ba30e38-caa5-46ad-aa2c-17b8e7044127", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8ca7c5-a821-4531-ae3f-d75fc52c1e17", "sighting_of_ref": "indicator--15608f3d-34c1-48fb-9503-e498704872fd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57cd58cf-ae8f-4daa-9a9a-7e5fd22076a7", "sighting_of_ref": "indicator--75c62bd0-afe4-4b76-98ef-4631eb98df08", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc0ef19-dcee-443d-a05a-54f1697cc019", "sighting_of_ref": "indicator--80127e44-4023-45f5-be8a-734db55921b4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba17929-c236-4866-8d5e-3721610d2575", "sighting_of_ref": "indicator--63f945f6-97f8-4ee0-aac7-d53000f004a9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da47e877-9d0b-48b3-bc35-74aff04ef0fc", "sighting_of_ref": "indicator--f77286e7-9648-4ca8-9b34-081ff17c9a48", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90caf38-ab1d-485f-a09c-bb9687cf73fe", "sighting_of_ref": "indicator--aa10a838-03bc-449c-a2c0-d9a245d21ca1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797bb134-c31f-49d4-b209-66ed3966fba6", "sighting_of_ref": "indicator--2bd73be6-9b4d-4d33-86a6-20a22fb3f8fd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b444d7ee-46e4-4d8e-b937-4547915f79a7", "sighting_of_ref": "indicator--c0c41695-1cf4-4562-b2a5-fa5dc417ead6", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174a65aa-3db1-4cca-9236-3cd89b14fd7d", "sighting_of_ref": "indicator--e715d8c7-f969-4863-a37a-c6b2adc01bb8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e4438e-70fa-4c8e-8bfd-da5ddc3984a4", "sighting_of_ref": "indicator--a0c58a1d-434e-4b36-9b24-6777d828b804", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17375a70-f119-44c0-9003-9abef516d7f6", "sighting_of_ref": "indicator--dd03e0ea-6463-4e14-b9b5-0ea30e384cf0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dac0910-818e-4fcd-918a-6cd1c3be9405", "sighting_of_ref": "indicator--0e97ba69-ef85-4d01-92e9-b1f1a57b6d7d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15fc54d-2a8d-42ab-b858-6d541b791fb8", "sighting_of_ref": "indicator--aaf68e01-4625-43b9-b3e0-9257a32db6be", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5700f7bc-939d-4a37-a455-581e32c14800", "sighting_of_ref": "indicator--2d7c2b3f-d37e-4f63-a936-9cb9625dc004", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4282160c-b3fd-4dfd-b654-4782eae78714", "sighting_of_ref": "indicator--1acd5b41-574a-4b8d-b03b-edf09e1f761d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb46d8a-3351-487c-9648-f3025b56fb47", "sighting_of_ref": "indicator--7d752b0f-7bf2-4910-8bcb-fe7502a2c957", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523920f0-243b-4259-8c76-4fb8aa7dd65f", "sighting_of_ref": "indicator--a601729d-ee2b-4b1b-a2d5-214c317f824c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34da4623-4f03-4ca1-bc39-b981e5e71dbb", "sighting_of_ref": "indicator--350fba03-b577-4822-9ff7-5ff399cc7ddb", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f48cbd-073d-445c-80bf-f584409d22a8", "sighting_of_ref": "indicator--68a6020c-2d22-4d9c-bdd7-5df0c883bbdf", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f208f9-ce12-40aa-90f0-39ff4fa41855", "sighting_of_ref": "indicator--a608695b-87ec-40a2-8b05-5b0a43777116", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496caccb-cd19-4baa-bee7-a7aefe6b3fa9", "sighting_of_ref": "indicator--82607863-dcca-4d60-a58e-4159d6abfe65", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b0db51-c120-4392-b0cd-e2e94088caa5", "sighting_of_ref": "indicator--a4c07055-f569-4d46-b6e4-74560b57132f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df95945e-76cf-4576-bd5e-729e03b9b00f", "sighting_of_ref": "indicator--b73632cf-fe18-4762-bcb5-44942f1ba8a2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db0e79c-f458-46fb-a7c4-e89637f70388", "sighting_of_ref": "indicator--63d392b0-d5de-47bc-9664-c2e10f69e308", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddf41a3-499b-42b2-9079-3eb3bd90abfa", "sighting_of_ref": "indicator--56502ffe-b050-4524-981b-e261863ed479", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc5972d-6e96-43ec-a0b4-bf46cb28f06e", "sighting_of_ref": "indicator--c4a766e8-abfe-4dda-80be-51ccb8656d30", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd588e0-c4df-4a12-8801-8ea334575c71", "sighting_of_ref": "indicator--73a5de82-1833-4c37-a2ae-541fde0ff1a0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3871097e-4fe7-471e-abac-f35799200bc3", "sighting_of_ref": "indicator--b8ba4fd9-7664-4adc-a910-5cc72e5898c7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bd8289-efb1-4805-a5a8-3bd6368f4950", "sighting_of_ref": "indicator--138e1e2c-0dcc-4103-9022-5859e60aeba1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92808d4-9944-4cf0-940d-59f0f660113b", "sighting_of_ref": "indicator--dda00209-16b9-4519-8d74-9f2fef62feec", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77f5558-3af1-4753-9cd8-596d27c88c9c", "sighting_of_ref": "indicator--8c2b770b-9317-495e-922a-963dabbc75c4", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f850fbaa-0420-4c5b-8dc9-654399511493", "sighting_of_ref": "indicator--80f086dc-56f8-4fc3-b6a7-b4833f2e0e93", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61886d80-6f58-473f-a308-069efc62569f", "sighting_of_ref": "indicator--b790e36b-6352-4f85-9fb0-cd2cc11e2a84", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3361ef59-e8f3-469e-b0b0-1ab56bf5744e", "sighting_of_ref": "indicator--7a931248-0c0e-482c-897c-cf121954a7a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49fd6589-d429-4503-bfce-6484202c49f6", "sighting_of_ref": "indicator--590f0937-8df2-4645-b880-9bc0e4abf4a7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca02d5eb-ed49-4b5f-9d17-986bb350c741", "sighting_of_ref": "indicator--481c8b22-6add-41f8-88d7-2ae88515b6ae", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce52731-d44d-4d48-9534-b426b3e913ca", "sighting_of_ref": "indicator--0bd032cd-4e8c-4fbf-87bd-33331ae7a8e0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5ca3af-8431-4193-ad62-21cd720faa8d", "sighting_of_ref": "indicator--243161b5-ab0f-4ef9-a9a2-9404d9cbbe02", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103676a6-8c4d-4f7c-b652-7e052bab3652", "sighting_of_ref": "indicator--323be17c-ce9d-4fbb-994b-f4386c9d3e92", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0e49c9-b861-4111-b85e-2ce6d7b9a547", "sighting_of_ref": "indicator--1ee8488d-6034-42b0-8e33-67f63e7bcff7", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b812618-e904-4ec9-ad80-ae98bc8bc3fe", "sighting_of_ref": "indicator--3e7fca8f-c40f-49c2-a985-a0412158c498", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375fdace-2473-40de-af81-31dedc7e1db5", "sighting_of_ref": "indicator--7f84a7fd-ce6f-4eec-a55e-3b4423bdeca1", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df95759-099d-4720-a038-ce8e41efe4ac", "sighting_of_ref": "indicator--0554c4fb-5c24-4cc4-bbae-bfeda2e3461a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69bd2a81-6cc0-436d-8230-c8000c62b0d7", "sighting_of_ref": "indicator--f1c8e827-c050-421a-b68a-e278061b4e6b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5249d7-6fd8-4f94-8d14-ebd823052e1d", "sighting_of_ref": "indicator--19bbfebd-d668-495c-a8de-c72e4d51d895", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e4760d-26ba-4498-8a8d-b0263427663c", "sighting_of_ref": "indicator--1e1f28af-88d7-401c-8eec-3268c4d987ab", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4b3dcd-3a5d-4ed3-a020-08157f5d841a", "sighting_of_ref": "indicator--79d67bd0-5313-4764-9037-176be660dc75", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c18a74-c099-4f35-b731-5e720bc7c068", "sighting_of_ref": "indicator--838f4a3e-82f1-4e18-abc0-ea7b44fc4a7a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb703bfe-3bf5-4caa-8a8c-bdb400836b55", "sighting_of_ref": "indicator--6017ca8c-0a58-40b6-80dc-ece9cf9e6351", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63fcf3e8-5c33-4a85-9b43-ce4c79932d40", "sighting_of_ref": "indicator--c70cc17f-4109-4342-bfd1-f98f9374760b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7dd98a-5288-4b0d-a5f8-83b9938b4cc8", "sighting_of_ref": "indicator--fc8a0e9b-3146-466d-9a51-f1f07f49b6de", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1f70f1-1085-4070-b190-e6dd5ade6493", "sighting_of_ref": "indicator--d93aa7b9-de0e-439f-8b20-d455e84488aa", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373f8ff2-6c3c-4670-a555-c75117e56b0a", "sighting_of_ref": "indicator--0f27dcba-f018-4b97-b725-bd33a68d24fd", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f8978f-0824-4b3c-a161-5edb86852a11", "sighting_of_ref": "indicator--5a7172a3-3fdc-435f-85b9-d51a38c5adb0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bec961c-a653-47b5-9ccd-9bd74468ef99", "sighting_of_ref": "indicator--3b70df7e-f34f-4a4e-a892-63479881ce61", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2928a8-895b-44fa-b66d-6d27efc5119b", "sighting_of_ref": "indicator--15795748-d5c7-4bb2-804d-d303acd0009a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce4dd94-cd46-4cf1-aacc-01f78aa0f839", "sighting_of_ref": "indicator--4169dc9a-bd0c-40df-b510-cedaff953128", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a8ac2d-3bc1-4905-a2b1-6658fda84d7f", "sighting_of_ref": "indicator--f2153bc0-5be0-4062-a751-c0f25e95a12d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870f136b-f3c3-4154-9b49-69752cc3568c", "sighting_of_ref": "indicator--5028bb06-36c0-4065-8956-f6029f1c5eae", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f42909-3f4f-4d45-ad8d-95f56d3bec03", "sighting_of_ref": "indicator--3b444efd-20dd-48db-acea-417248db830d", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4da98f-de31-468a-a93d-183502e415eb", "sighting_of_ref": "indicator--6b4e2487-a448-4a7d-a782-3d3fb6076599", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f0d215-d947-4c0a-b8ad-6e50004d0b0d", "sighting_of_ref": "indicator--ad036470-eee4-413e-9a8e-7f05ef0d7b30", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61341cba-b4cd-4ea6-b16c-3d9f99fdc042", "sighting_of_ref": "indicator--a27f949a-5777-4c37-8be6-658b9a68cfca", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef6436f-ce6e-4d2c-ac2c-cf582c2764b7", "sighting_of_ref": "indicator--3789d72a-fdac-4b0f-becd-034a7fcda9d2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7cd318-cf3d-4683-a885-39a4c6a99851", "sighting_of_ref": "indicator--629d9e04-bca2-478b-9151-256758c22e06", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7943a423-d5dd-45ea-b923-93e5f2ac1f97", "sighting_of_ref": "indicator--6310013d-d5f6-45d7-9a6d-22d3b68385ed", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a640544a-0851-4f8d-8b5f-b3bc62f5336a", "sighting_of_ref": "indicator--7be0bbef-0d94-4e84-a8bb-db88e5a53268", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e141bb7b-20a2-4828-a39d-16c2ccbbfccf", "sighting_of_ref": "indicator--661fbd44-fd64-4ca5-a837-12a7c6441f04", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b54fc71-8d1b-4325-85b2-2ec2638f0764", "sighting_of_ref": "indicator--902d25b9-adb0-4e3f-b864-b3633058608e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd61001-6c6a-4fea-ba9d-5b688c4d207d", "sighting_of_ref": "indicator--360c885d-aaba-4289-abef-4f1955a4e30e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbdcfc5-2f16-43f2-ba52-1af8abed6a7c", "sighting_of_ref": "indicator--8bc51103-4a13-484e-aa1f-60eddebfe018", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8efc59e-3139-4278-b03f-e9a763127360", "sighting_of_ref": "indicator--252a33b7-0acf-46a2-bbe0-1e7ecca7c92b", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41dea704-3203-4882-8041-80ee0c4f1d5f", "sighting_of_ref": "indicator--3261e65d-f44d-4fa6-b0a6-b9daf4edb612", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163f41ff-7716-4ace-91b0-519b9532c4ee", "sighting_of_ref": "indicator--ab9c17f2-b05d-446b-9860-3a0882502e1c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d02fc58-965b-48bd-ab21-0216bd4300c2", "sighting_of_ref": "indicator--832c0e61-b6e8-4428-8b04-cfbb5dbef648", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b603d88-51c7-478c-8d2c-2a92fe6c2ddd", "sighting_of_ref": "indicator--063a1a66-13d3-49e2-9b22-dacf2aa9cda2", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376a121f-0e67-4461-b0f8-9ea1a0d25356", "sighting_of_ref": "indicator--f2223d86-f8c9-4aa3-95be-2c9dc7b55e10", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bff69d1-6bf8-4a29-a796-e7907a758c84", "sighting_of_ref": "indicator--987c89e0-9e1e-460b-8564-2d7016408fac", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c5b501-72fc-41d0-abed-999d08809243", "sighting_of_ref": "indicator--ab240da6-5505-4577-8fa6-ce74f914da42", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ce46a7-cbdd-44e4-9fc1-51c287791688", "sighting_of_ref": "indicator--baab9d86-79fa-4c14-b56c-f84aa534d748", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b3a14e-064e-49ba-9abd-1c2c250ceb82", "sighting_of_ref": "indicator--19bcb859-2f8c-470c-b7a0-316b92839f30", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d72dff-0005-4b2d-beeb-0a016fd813a3", "sighting_of_ref": "indicator--9d60f227-07a4-484a-95f3-e47609ee73c9", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458f1cb0-2c56-4fa5-8ef2-79390ee321ae", "sighting_of_ref": "indicator--3a3f2628-1911-4c6e-88bc-3629ad93516f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a2384f-792b-4588-81b7-e1bfe9079a1e", "sighting_of_ref": "indicator--d79b018a-f145-4f4d-b2b0-7399bbeed371", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87426a5c-a319-44cb-8425-32c1789192ae", "sighting_of_ref": "indicator--7b784fbc-0b7e-4224-8095-8b8f4b83c70a", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0083884a-9073-4091-92f6-b94ae18b6b91", "sighting_of_ref": "indicator--2c2f7bf1-5cc9-4f06-b2d5-401d349a887f", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891dd3a6-9444-4f77-b3cd-6972579ab266", "sighting_of_ref": "indicator--167f17ff-ff19-4187-aa6c-73ff91c4ccdc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db1f4d6-5bcc-42ff-93cc-7264ada33a47", "sighting_of_ref": "indicator--cb1f32a0-c542-4cda-a1c9-7cabc82b72bc", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c18aa9c-66c2-4c1f-968c-c6962f23058d", "sighting_of_ref": "indicator--1be9ea9c-bc5c-4261-ae2e-df34d7030263", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b9acb7-af0c-492a-9a5a-33040d60316f", "sighting_of_ref": "indicator--5e8142ed-2d56-4d82-bbe3-f235eeb65406", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e53c7b-d019-482a-b4d1-e07fa3c09acb", "sighting_of_ref": "indicator--034b4a94-1d38-462a-9783-c65ef14f7b8c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c51d19e-cbde-46e3-ab1b-807baaa3a4d3", "sighting_of_ref": "indicator--6dc6224a-22c0-4a2f-b1dd-57ca0d9b5383", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67be8d1-70fc-45bc-8833-ae1a523c126d", "sighting_of_ref": "indicator--e5d0cd10-048b-4b54-a9b4-67c5ce08abb8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b11e96e-35f5-4775-943c-fe474b70d306", "sighting_of_ref": "indicator--f4aa312b-b81e-4c35-8c44-2ed73a2d0e7c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8383e2f0-e7c6-4c2e-8f33-3d3c921a06e9", "sighting_of_ref": "indicator--e6d3e262-1473-4f23-8c38-99e0ff4811d8", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17264f9-2e5a-4807-8609-025d5f9cca94", "sighting_of_ref": "indicator--065bb0d2-c286-4928-a140-46792b641a22", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41c1918-b212-4e07-992d-5cd355245241", "sighting_of_ref": "indicator--7469926b-0f91-433a-a043-1312d533c090", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1088aba9-2970-4d5e-abf5-2d7541057bce", "sighting_of_ref": "indicator--dc9a4466-55e1-4201-8af0-eb50c8322ab0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05bc24f2-c658-442e-966f-5838a9253a29", "sighting_of_ref": "indicator--dc9a4466-55e1-4201-8af0-eb50c8322ab0", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c7c054-5993-47c3-8409-39a5b63e2a04", "sighting_of_ref": "indicator--dc9a4466-55e1-4201-8af0-eb50c8322ab0", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3efecf-55c4-425b-ab5f-3cb702c07145", "sighting_of_ref": "indicator--6094dcb0-a2a7-4d01-9cf6-0178bcecd3da", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9536abbf-a2c5-4954-8e0f-86d98b1d4264", "sighting_of_ref": "indicator--e895bae6-645b-413a-9696-c66f19fc997c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0400cd36-d117-4746-9f4c-c0e5e67023a6", "sighting_of_ref": "indicator--11aa05a0-def5-43f6-81ef-5648498d81a3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01fcdcb-2a65-404e-9fa0-8450348ca02c", "sighting_of_ref": "indicator--8f7c2faa-c22b-4c1d-9d02-189d4b930a04", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1299d8c-b4ad-40d3-84a4-28b4f2a0f45f", "sighting_of_ref": "indicator--ab2176cd-a73a-4510-b56a-62368d721fdd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80ae61c-e1fd-46d9-9d04-14442e4ff078", "sighting_of_ref": "indicator--f34cbede-03e8-4a01-8340-cf8ebbe6890e", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a354a92-9f59-47d9-907b-79d784fa2a5e", "sighting_of_ref": "indicator--b0460d73-d4eb-4856-9705-4e0b014eada6", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc57fe00-26a7-4acc-91fc-b66fb6ebf14e", "sighting_of_ref": "indicator--dc1c0bf7-80ea-43cd-8c27-efb9e86359d7", "where_sighted_refs": ["location--9ec7f19f-d9be-4fad-a20d-c77d531ac685"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42db7d72-0cbd-4693-b88f-af72df3fa3a0", "sighting_of_ref": "indicator--c450e145-f027-49b9-9ef0-54a77187d681", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4bb5155-1e62-47b7-b652-be93edca9c13", "sighting_of_ref": "indicator--c450e145-f027-49b9-9ef0-54a77187d681", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dabf263-c933-454c-89b6-8ce1e284a3dc", "sighting_of_ref": "indicator--4b2f1095-b2c6-4ea7-8b3b-68cc93a3919b", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11675229-6098-4438-9945-3e8f97544914", "sighting_of_ref": "indicator--7b23b848-4ba8-49fb-8eb4-1dec1462b7df", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd499be-bfae-4741-8b85-500f55413f58", "sighting_of_ref": "indicator--7b23b848-4ba8-49fb-8eb4-1dec1462b7df", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a2cfb9-a645-49c6-bf9a-3b4b4a85674e", "sighting_of_ref": "indicator--7b23b848-4ba8-49fb-8eb4-1dec1462b7df", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca84ca0e-f4a3-4bc4-881d-7cce490d8b5c", "sighting_of_ref": "indicator--90f1ab66-abea-49ac-9d30-9ded89cd312c", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f50b10c-54e5-4797-9f0b-7d5513776280", "sighting_of_ref": "indicator--90f1ab66-abea-49ac-9d30-9ded89cd312c", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7b45e0-fde7-4259-86c8-1aa18fbd30f1", "sighting_of_ref": "indicator--1ec29116-dd61-48da-96a3-a61a6aa0bf81", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533f0fba-d75f-4908-94a3-e8698dba8090", "sighting_of_ref": "indicator--9b030028-5e74-41e9-bb4f-a26590306d25", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb504030-7717-450b-a93c-4b44f730d0e8", "sighting_of_ref": "indicator--9b030028-5e74-41e9-bb4f-a26590306d25", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cce90a1-570c-49b6-a635-c1ab0b5f1c4d", "sighting_of_ref": "indicator--9b030028-5e74-41e9-bb4f-a26590306d25", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9073f27c-1bf4-4ebd-828f-16e578d0669f", "sighting_of_ref": "indicator--a74b98ef-f270-4a10-b32f-4456af7fe3af", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c23da83-f399-4c74-8521-9a76ff3af1af", "sighting_of_ref": "indicator--a74b98ef-f270-4a10-b32f-4456af7fe3af", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7dd8c5-7c85-479a-839b-080837bc6ba7", "sighting_of_ref": "indicator--de1053f6-9b81-4834-bd8c-cf8e71217bc3", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7f9d07-fcd9-4805-baae-354778f764ed", "sighting_of_ref": "indicator--cac35430-1205-43fc-ba8a-d2ea4e981437", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f881f5e5-95d5-4fd3-ba82-9cbcdcd97d81", "sighting_of_ref": "indicator--78bdde5e-0505-45d6-8faa-8f2ac1a17e25", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f21a1d-01ee-480b-acae-89cc23787fae", "sighting_of_ref": "indicator--78bdde5e-0505-45d6-8faa-8f2ac1a17e25", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9668a0-d5bf-4500-a4e0-c26f6d8a0bf7", "sighting_of_ref": "indicator--304e2d5a-f5a0-4da6-a098-3be740dff04d", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9b069d-ebd2-42b2-90a7-c5f4dd60b7be", "sighting_of_ref": "indicator--7ebc5592-2a0e-48b1-bbb0-32b57fb6ae30", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1196b89d-a699-4e01-82e5-12df865d9e54", "sighting_of_ref": "indicator--e43fe77e-7e1e-4b68-ad2a-8cd9d816f443", "where_sighted_refs": ["location--7d3be57f-7b38-41f1-8114-1d90ddb5f714"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2f9db3-ac42-4a4e-9ec9-ca6deca28bb8", "sighting_of_ref": "indicator--fe57e8d9-567e-4012-afaf-a35cff63fbd2", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20927bee-6d40-4e05-bb24-854d699b74b7", "sighting_of_ref": "indicator--1826c881-9f26-4fbb-a9d9-e16c1637cbe7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ac9612-9b08-4360-8f3e-956450bd34e7", "sighting_of_ref": "indicator--fe9e9525-79ff-4e9e-9284-4dd7c071c9d0", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe1ac3e-07de-4047-b976-cfaf068e5b52", "sighting_of_ref": "indicator--a4ff2d3f-fc00-4bb9-94f2-bd185a863911", "where_sighted_refs": ["location--2031996b-4d7e-4014-a84f-4f6563b0e2a9"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5799e76b-dce5-4662-b84d-137b75e84432", "sighting_of_ref": "indicator--a4ff2d3f-fc00-4bb9-94f2-bd185a863911", "where_sighted_refs": ["location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61db5a8e-66f6-4514-bf5f-8fa3e0b2db02", "sighting_of_ref": "indicator--48b25620-446e-4035-ba3f-39b58f0d2fa0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-03T00:00:00.000Z", "last_seen": "2026-07-03T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--051e3cab-ba6a-4bbb-955e-7923b7959643", "name": "Threat Report for 2026-07-03", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-07-04T11:00:02.186Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--2031996b-4d7e-4014-a84f-4f6563b0e2a9", "location--a3a73b40-3bf9-4ab7-adf7-068f0b14b761", "location--7d3be57f-7b38-41f1-8114-1d90ddb5f714", "location--9ec7f19f-d9be-4fad-a20d-c77d531ac685", "infrastructure--d1e3eec7-9a4d-4067-a3de-1e9e095f1527", "infrastructure--aa2ef009-5021-4521-8319-5b8cf0be9857", "relationship--e210af39-c27a-4566-8b3c-593ad1ccb65f", "infrastructure--abdb3ffd-780b-4492-a091-1da269e36dac", "relationship--049ace6a-6f05-4e7c-9ed9-909919618438", "infrastructure--7e4570f4-05e2-455a-b21a-922b0e59937e", "infrastructure--5da48813-a6f3-4585-9c16-755d1c60bacb", "relationship--5c17d345-5b59-4440-abca-a81082969f4b", "infrastructure--3e90ddf1-0c4e-471d-a474-e84a7828cbe8", "relationship--0a743595-0f4e-4a3d-8d22-65423f323255", "vulnerability--b3a43a8c-4055-47cd-b848-be1382d8bafb", "vulnerability--33c5aaa2-79bb-4d86-bd4d-10d895084dad", "vulnerability--d07122aa-0aa0-4e18-8e4d-bd3e7e18dc58", "vulnerability--ab3c0f78-a5f5-4522-b5e0-6c6c486bb35d", "vulnerability--e7c3766a-5e2d-41dd-a466-61c956def038", "vulnerability--53f84b33-ae55-4ff3-9a40-daf03764627d", "indicator--9e034770-b5dd-4777-96af-6d69cfef634e", "indicator--c72f82de-8571-4b0e-b53c-5effc9e628c2", "indicator--278f26b6-53be-43ac-95b1-ec3d605757a4", "indicator--7c481bdc-b21a-4e2a-97a9-c57b6cf59c8a", "indicator--0fd6c84e-078a-4c37-b23e-3a4b88f65144", "indicator--08ef9017-825d-45b7-a4d9-230c70c8044c", "indicator--57eb6891-dd3b-448f-b03c-d8b9aedb8021", "indicator--bede7490-ab2b-4fb5-a5fa-21ac81ed57fc", "indicator--b06a11a2-5835-4dfb-86fd-1b567a79d399", "indicator--444e5a9f-88bf-4a07-8876-1aa75362c8d9", "indicator--6aaee3b9-dcfe-44df-942f-bf83e372a4fb", "indicator--f3de16fd-1aab-424c-9756-7c234e3a34ef", "indicator--3595a860-d98a-4258-a7a9-fb9a93e79136", "indicator--9b2e4f1a-6707-41ca-b60a-a1852b15f2a6", "indicator--4d64c2fe-d073-4a5c-8cd8-565da4a40061", "indicator--189a3f9d-1ef0-458b-8654-b85600fe49c2", "indicator--41ced3ac-4762-48dd-84a0-176919008ea5", "indicator--dbfb5069-9ef9-413b-9e67-0ea28402ddbe", "indicator--a32177b5-caad-4b4e-aee1-3f78f67ad82b", "indicator--60baa053-07d2-44f3-a65e-8eee780d9e68", "indicator--3291f657-37f0-46b2-a54e-13eb974ab9b0", "indicator--fbc3c8f7-afa2-4167-8b84-d45b6272c870", "indicator--6c0ad70c-ef04-43d3-a4a2-fecae50af60e", "indicator--ea0eb241-793c-43e9-ad47-0604b84db892", "indicator--7d4ceca2-a308-4f46-8834-ba3b80fc7c87", "indicator--077d835c-1d49-47a9-98d8-cc9a7b855d6f", "indicator--dcf94763-d209-4fc4-8a8d-5bc3b3827ba3", "indicator--7b8d4f85-f175-4e67-8985-53d93fdc98ee", "indicator--57376f4c-b14f-47e5-8ad8-77bf1a930c75", "indicator--1ea6728c-8b99-4369-a7d7-25173f6995b0", "indicator--1007861e-dc4c-4110-bdf8-9774cdf465bd", "indicator--76824f1c-ffb2-455e-8ef2-7853e5f2edb7", "indicator--72fe18ae-ebe7-4af0-b8f8-b0d00e6e730c", "indicator--54cfdc5d-bef4-4947-8914-bab146d0b1e5", "indicator--8f76d8d6-d8d6-4362-8f5b-93558c7e8e65", "indicator--b28ebe85-6daa-46d0-8968-9b848c8090e1", "indicator--5ab9927a-7721-457c-aa04-8b13453b5765", "indicator--7208f96e-d1ac-4bd7-8d68-af5b8147af83", "indicator--8cdffa14-7140-4c33-a1fc-cd05b14aa327", "indicator--6134ba1e-5efc-4339-9e01-f2d73682294e", "indicator--637750b3-89a5-43c1-a944-522b735049cb", "indicator--d8c8a09e-1d82-468a-a661-d0141a229a46", "indicator--37789cc6-08b1-47fc-a99e-8303b0ad79b0", "indicator--68f38559-8ca6-4f06-85c6-1ef3d1b9e149", "indicator--e760842e-94af-4780-86ff-3cd93bc1dd2e", "indicator--cd0edfec-33f3-40c1-9ea4-54514285de60", "indicator--9265a8cb-aee4-4708-b79e-a67689ca4e1c", "indicator--763d7741-36a0-4895-b434-298a6543e2b8", "indicator--8fe5df65-e42c-4837-8bea-6b14a86a6a07", "indicator--8e3d1679-15e1-4d51-a446-49878b0f747a", "indicator--d3f46b2e-1697-4ee9-aef9-1e7066c6335f", "indicator--00974e6e-1d3f-4a64-98df-93b4d4234f77", "indicator--e22bc30b-ca39-4ed1-9c76-f7e641f626b5", "indicator--ccac4477-3618-4705-910c-5161c4c7af7e", "indicator--61c021c9-e943-4276-b11a-0d8a01222a75", "indicator--ab9b4147-340b-4229-b0e2-3fb40fc39a77", "indicator--6fd75599-b764-4bd9-89e2-11093a1d4920", "indicator--534c8a06-ecba-43c2-b534-28a01c964987", "indicator--db703b8b-30f8-45cc-85ce-11100ca3e9e5", "indicator--45bb6633-f4ca-4902-8866-74f416044d33", "indicator--0c0ca3d4-c8bc-4a5c-8b6b-50a94574f012", "indicator--766da8fb-91da-45f0-9b43-77eb014f06bc", "indicator--1a489560-84bc-4616-b847-17cf0ec7ec95", "indicator--841cb358-1b15-49e8-96b8-4ac53934ff6b", "indicator--9648df40-ab35-434e-a0cf-2bbba8ca7098", "indicator--3028ee87-5d06-4299-85b4-8c7e3cce212f", "indicator--f253be54-c86d-45fa-88e3-43890752902f", "indicator--7c8cc925-532c-4428-b8c7-a5c76878c34f", "indicator--1690d41c-a25e-4ee1-abd4-a5bee971f461", "indicator--65827828-64fe-4e3c-ad93-0c09d5542911", "indicator--4f5f9340-13b7-46a9-ad96-2f9f6942f366", "indicator--32ad8ef4-8e82-437a-8119-ebcf232b08bd", "indicator--1078582c-4197-468c-9fbf-14b706a5bbb5", "indicator--c17b32e9-1b51-415d-a0ee-c6f55f6087f4", "indicator--1269ed07-a543-4d1f-aef9-5e53bae96a4c", "indicator--d7577a8b-6974-4267-a7a7-2e024e8d157a", "indicator--d6d05add-5c82-4c50-a260-7d7400ac20ae", "indicator--a38cee80-d043-4914-9196-d581f3996653", "indicator--36c01779-ce6a-4358-9c83-88007027e2a7", "indicator--bebceb98-f754-4a32-b301-25edd0c10e9c", "indicator--c64b622d-acad-4336-ad48-2b848287c5c0", "indicator--a2a294ec-0d84-4dbb-abb4-4a39556a397d", "indicator--e334c24b-8a0f-4b40-b31c-3dacdc458a44", "indicator--4b2a662f-aae8-4a2a-b2b0-4f860851e071", "indicator--9c660d17-1c27-4141-a388-64554054d39a", "indicator--704c0367-9232-4691-963d-49f66b222464", "indicator--d8457c82-8fd6-4706-8edf-ebf2c104d047", "indicator--94ef76f5-da46-4e05-a20a-a03a3abe3b87", "indicator--c9f8a82e-db32-4fe1-9343-acb24a369154", "indicator--e136d8f9-f1df-44bf-8bc2-7fc0a8400891", "indicator--d8cba8a3-8808-4a48-890c-b4db966cb781", "indicator--8e675c90-e3f6-4bd2-9507-37f6ff4bf48d", "indicator--68251a5c-edab-4518-8ae6-a4b89a4ceb23", "indicator--0baf3e8e-411b-4d43-bcd9-a06c297d60f6", "indicator--09261153-dff0-45a0-9a21-7c4e4c75a852", "indicator--2b77d8f7-9e18-4f74-b889-1a284c6dbe94", "indicator--3c3ce05b-b11b-47a0-a795-bbece611873a", "indicator--ef407be7-fbf7-4c64-a22c-da28cdae71ed", "indicator--277f9fac-6cd7-418d-ae09-f0cd5ebc3490", "indicator--5fadb3f4-1ed4-4dd0-b87c-29309ce8401f", "indicator--6874eee0-4c8a-468a-aeb8-dae79f4f0b5a", "indicator--ee778b9c-257a-4d11-b21a-c0fd6eb59a08", "indicator--00f620c1-5d4a-4a54-b51c-aff92ce4fc91", "indicator--0cd160da-a493-480d-add0-bf8aeb0d50ea", "indicator--84a92d85-a85b-431f-8678-da01ccdb3e5c", "indicator--d362513b-e3cf-408e-ab91-7761bef6e44d", "indicator--12e3f8fa-8979-4245-8a77-d538fc1075da", "indicator--2b920d1f-4624-4b40-af60-2a3786fba342", "indicator--312df948-0946-4c1a-b6e6-861984332231", "indicator--e0a71bd4-cef7-4c29-9a7e-48804f5eb452", "indicator--a681f784-0aac-4e8c-8037-44f6e3dd1074", "indicator--5452dceb-a692-409d-9577-0227a22e63b1", "indicator--0ee1e239-e587-4182-adaa-a0ed3cf2377a", "indicator--baf8277d-0ee9-4781-af72-4e9ded6e5de2", "indicator--f2e3df92-3d15-4247-b14c-34d3b7556795", "indicator--04f365de-9c12-4882-8951-ec4619818ea0", "indicator--7b748b21-2cb1-4764-bde2-be6c39ee0cbb", "indicator--c9c0ce3a-55ec-461b-b5e0-c255a88dc13e", "indicator--86e62b16-c597-460c-b65b-d4454acaf0f9", "indicator--0b7d6527-154b-4bd8-82a5-a7e394916b46", "indicator--e51ba40b-a073-4169-a6ba-9a9966b19fa0", "indicator--f3f0e933-0e08-4722-a01e-2ff1f24e71ee", "indicator--e21c04f0-2d7f-4dd7-9886-ebcce8a20c90", "indicator--ceaaf066-af0e-4caf-b0ec-efb6f3ab169a", "indicator--31b4f03f-7621-4ac3-aaaf-a1b9b56130a3", "indicator--7e213a38-32ca-4fe8-9950-9e50abefd04b", "indicator--3d26d4f6-facd-4184-9358-ae76a435224b", "indicator--0f938279-f87c-4b37-b483-fa6091b59179", "indicator--eca39f9b-9bb9-4388-bd99-c5f5f20c32f8", "indicator--1791ec00-9a14-463c-837a-890a2c7e5706", "indicator--4d6d174e-294e-413a-8be9-e6f84ed15661", "indicator--5338476f-11d8-44c6-8a5e-8f40cb2380a3", "indicator--70ac1b40-8587-433f-9357-04f19d3fb19d", "indicator--06c47f90-b80b-4a9b-b834-01af9cc21e11", "indicator--f9285d78-7cb6-42de-8e79-c0fff0394635", "indicator--69d1bd56-6db9-4a50-835d-f2058df0eff6", "indicator--910ff5c1-8d82-4adc-b3ce-e6efb27e81ff", "indicator--cf7139d4-393f-4ee7-bf55-f9a23a638b66", "indicator--400397d1-28fa-4675-a7c9-81f1f466074d", "indicator--4a445fdc-5c13-47cc-83fb-85b2c238cbf2", "indicator--0d186543-6087-4105-94f2-0e5354d644b9", "indicator--891e10b2-1540-49c7-ac71-f55a2eb35b21", "indicator--70506a15-edfa-4a13-87ef-10f385541143", "indicator--eb97bf1c-e63d-440d-a1d0-68814c8ba0b3", "indicator--6bb34ded-d30a-4aa2-9220-4a47a7e4e8cc", "indicator--731e1a1d-918c-4439-83bb-9dbb77688cfb", "indicator--7ae92b81-b4dd-4d1f-9cb0-dcc6d1db27d3", "indicator--53ee7fbf-2cb1-4380-ada7-15eaece17d0d", "indicator--8cc4a730-596f-4d5e-8e61-6ea1a0c68138", "indicator--415a40be-fe04-4efd-9587-de3c495247b4", "indicator--83e9dcee-0dab-45b3-9895-c71a83e18470", "indicator--1d6a2888-0c76-4752-ba7e-36d0d4b59274", "indicator--61c83e51-e473-47f5-97a2-ff0be5f28292", "indicator--97e2cdd3-ca67-4d5f-b548-39ce94d86dec", "indicator--e90d95a0-b8a9-4a45-9f04-836cd803829d", "indicator--d679ffbc-0115-4b10-ab6f-3e3243ba5da0", "indicator--434ce068-444d-4f8b-993f-48464e11d624", "indicator--f7bda419-7792-4407-8aec-151df93e930a", "indicator--3aa1680d-ae0f-47f8-8e4c-70b36250e41d", "indicator--a842d862-fa74-4515-8593-4228705d093f", "indicator--2b0ca666-2f2b-483a-ba9b-feea33757e6d", "indicator--e95c4a76-3387-44eb-be15-175a945e8d63", "indicator--d12e2608-502f-4e2d-8d54-df07a15ecc12", "indicator--38ad46bb-79fb-4be5-ad59-d3910ee823e8", "indicator--bd70daf2-c9c9-4c98-9f4c-9ef3ad38e616", "indicator--fb7a073d-350c-438b-a42c-f17c65ebf243", "indicator--c4c51648-4db7-4144-a94e-ab99d81cf304", "indicator--359523a5-2610-4115-9724-3fb71509d246", "indicator--7e786653-0fd7-4e0d-8cb6-73d780ceb1b5", "indicator--b23ea0b7-a56a-42d0-9e8a-ab42bca00cfe", "indicator--98d03c9c-6246-47d9-9155-266d8eec3866", "indicator--af7d4f7e-59d8-4984-a343-a2096aedb521", "indicator--e74e3d02-1388-41c6-8504-78abd0d70c1d", "indicator--1b3b4e76-155d-4b31-b9b1-4872b1192788", "indicator--adba163d-4ad2-486f-a561-a7323237f286", "indicator--2d857422-9d88-49e8-bd41-c6c59d9cc2b1", "indicator--84c92371-73ce-45dc-8993-e736cd373fc4", "indicator--6bdcab2a-7ede-4353-90e8-4a855462553a", "indicator--d0ba19f8-e386-4f0c-a95a-3ddd4f311ce6", "indicator--8414f348-f0c5-4649-9484-326fcd5b9e53", "indicator--63c30561-b465-4dae-b036-34182e877fa1", "indicator--d9a6bbdd-6b74-4fc5-bbf3-709d5d1ffeab", "indicator--92bc1829-6bd1-487d-8408-054e5ce31df9", "indicator--4bd28ceb-2870-46af-a558-9eef34dfa81b", "indicator--c343d411-7ee0-41fc-a772-b963e0a28808", "indicator--69f8afd5-072f-45a6-a80b-abd3288facd1", "indicator--a23e676c-2bc4-4417-b214-7942bc030fbd", "indicator--e758e2ec-36a6-4ce6-a107-51ebf54ab54e", "indicator--f5aa2662-43e7-488d-8dfa-6607c2f2c173", "indicator--3c2927a2-28ca-466b-b818-b5f826c94881", "indicator--7764174c-6efe-469c-a7e1-589547b5f5c1", "indicator--586f5534-1906-4876-ad96-020d8e532fdd", "indicator--b8610cb8-6e04-41fa-946a-8fe3f20aad28", "indicator--2bcc194d-d870-4c56-b1fe-4434639d3e81", "indicator--5a3be02c-2cf6-490b-9ebd-36078ffded22", "indicator--24d57d3e-02eb-42f0-aa6f-810e5bd32203", "indicator--4e6e54eb-e3d8-4cf4-b11c-34528cce1802", "indicator--ec2c6b20-efc5-4ec3-9da1-eeae09beb9a1", "indicator--2b65f100-e8f0-48e9-8887-c349a2481614", "indicator--4d56331b-f3e4-4f25-bcfd-a5feec9a72cd", "indicator--04aafc11-404d-4a36-9403-d04450cc9afb", "indicator--0081b297-ce20-4639-a5ef-92c32cccc4ee", "indicator--2fe26e36-7cd4-4d7b-b958-26bcc0bac27c", "indicator--03975857-aeae-42c5-ba9d-7852a9c2bced", "indicator--9a5e1b01-83dc-4dbe-9ee5-89636ce4f0bb", "indicator--5671c3d2-c5e7-43fa-80cb-68570d4cae91", "indicator--8a7b0e1d-4796-47f0-aa39-a467601e046f", "indicator--5f4e075c-5da9-45d7-9390-92c9af4d411a", "indicator--788fabd9-f642-4985-ac9d-6e10d2e8a02f", "indicator--640d159a-52c3-4b37-a991-edf96e45d5c3", "indicator--2662aeec-d6f4-487b-b5b9-e5270943899b", "indicator--b1731deb-a5ab-44ce-9f79-3eac7813d765", "indicator--784579fb-a564-46f6-8d69-27a7e42b6b72", "indicator--80c20a92-1b3f-4e61-9493-82af7a54d6ce", "indicator--4217adfa-b12a-4c89-b8ef-62b1f75a1da6", "indicator--d00a9350-6d0f-45c5-9688-191066e20625", "indicator--a5b262a3-bd10-4979-9256-e611c7383cc2", "indicator--18115932-01b2-4bca-84c5-206289d8c7a5", "indicator--c659481b-6c7d-4757-9149-dc56511e6159", "indicator--20947368-77fd-418c-969c-5f821406c4aa", "indicator--620861ba-db80-43c1-b65d-a1398df8decd", "indicator--77c3537c-c0da-4a91-92fa-e78cf8adc9d1", "indicator--ae63aede-dc50-4598-b745-a9d8b9448de1", "indicator--64effec6-8cb3-4899-9151-318cff3e16cb", "indicator--050df8e8-b55f-499c-8262-440300a1d15d", "indicator--b9cee763-9d0b-4475-ae5d-60efd25c34ca", "indicator--c95c0a04-7ecb-4ba3-9187-4b90574db090", "indicator--7bdc043d-7921-4874-a27c-b8e005305921", "indicator--e7982879-26de-4cca-9e29-8c39a01fc5ec", "indicator--c6e10692-cf68-4a4b-8854-07b725acfc8b", "indicator--ca51b1e2-1204-4879-8aee-c2d57ac8676d", "indicator--10fedbda-9f1b-489b-9a08-03386ddb4306", "indicator--57664e86-eb9f-4d66-a10f-fdbad01825a7", "indicator--6f15e6c1-cabe-411d-9d66-1264f6354963", "indicator--285e0b9c-9320-4c83-82c5-06a2e612e06d", "indicator--6525a4f8-9716-4c2e-871d-a014a9e017ea", "indicator--885b166f-ee3f-4cc6-a693-3a6b66abbf30", "indicator--416b8d00-b019-434c-b07a-803eb6b1e767", "indicator--b8b52bbc-8109-4060-8d5e-9d3621e4c3da", "indicator--739e209e-4727-4747-ae31-f7c91340b3ec", "indicator--75468548-484d-4079-be9a-341c18326148", "indicator--5c31b366-7264-4b05-853d-8c4a8de32687", "indicator--ddd294fb-3cef-4c4d-ae5f-c2dcc74656a4", "indicator--b4c69b16-3fa8-4526-9f5d-d14b3167ac71", "indicator--289c9a09-308c-4bf0-b53b-6c12bbca1224", "indicator--85acb6fc-1041-425f-b1b3-d49301ae04d8", "indicator--0c09f97d-1252-4a35-be07-d4bcc7eef2cf", "indicator--484656f1-411d-4491-a7cb-397f01100b90", "indicator--ed3b88d1-7c96-41b8-ad8b-8ff3f8b33741", "indicator--f092d630-c03b-4972-8af5-13c1576ad986", "indicator--d886fd6f-5475-4e48-888e-8c56f72434f7", "indicator--b29fa92f-2c09-4078-ba78-fd982302f491", "indicator--43835990-8e1f-4a83-97e7-1c6d23cbf67c", "indicator--a0ff8880-41bf-452d-994b-c6855f8b3f21", "indicator--cb9598a2-6b91-442d-8f58-c16841bd9af8", "indicator--79690ba8-16d5-47a9-8ccf-fa40007275bf", "indicator--ea3269d3-b877-4492-82e9-6fd889f06967", "indicator--bdf983b4-df7a-4304-a255-81ae27206a70", "indicator--cb9da5af-dc53-486e-80e3-ed0c06b12ce6", "indicator--f69f9386-c906-441e-bbc2-a5381f66fe31", "indicator--188040ac-fe54-4d37-9af3-3b6fdaaddcc8", "indicator--5e71bcda-049a-44e9-9ee1-4994b32a4717", "indicator--285a05b5-7727-4edf-95e5-00c92c709635", "indicator--26162e32-d8a2-4622-a47e-dbf69ae7fe4d", "indicator--95cf9853-1954-4251-b731-249b48453cf7", "indicator--9cc68d79-60c7-4f80-af55-b7623ea8c6dc", "indicator--d1d1ed49-965f-4003-ae58-e3d5908a7610", "indicator--eeb68ee3-c97c-44f8-adcd-a97f47789b4d", "indicator--0ee68201-8bfe-46d3-ad61-03b70847aa2e", "indicator--1121db87-f77c-44ba-af56-704ea3cb9ae5", "indicator--1e7a07c8-dda1-4fdd-92c1-1589c768b7df", "indicator--1ca9a8b9-76dd-43ef-a781-be2347cc5146", "indicator--58c81f48-962b-4b12-b450-bdac981e8a71", "indicator--a2865733-345c-487f-8d5f-e12620d07ee3", "indicator--c4e11784-b1d1-45c0-8d2f-17d0d64d8280", "indicator--dd1b9cf8-8fb3-4942-811b-e5b9e6a89c3e", "indicator--7b0e4c08-7413-4217-86ba-a90bb6407633", "indicator--70c9f7be-5e97-479e-bc57-87330493fb60", "indicator--26a19f2c-9a7f-4781-afc9-b4820a51db8e", "indicator--554ab1e5-09c9-4db7-a838-98a985f89221", "indicator--06a0d8a7-0e06-41e1-a3dc-01fdbc5d6925", "indicator--b10a25e8-bdaf-4103-b593-bae33b08ac3c", "indicator--2bb6cf94-137d-4e3d-8604-cf585d03d6d2", "indicator--92117665-097e-4f1c-96ef-abbcd1b599b2", "indicator--1efe3551-be8e-4b5a-8d50-40c347eaf8a7", "indicator--2dfec033-4e04-4270-a980-1859e9999b44", "indicator--ce90b853-8c3c-4a4d-974a-2d877ed85b28", "indicator--de98abd7-54a6-493b-9383-1bd6bf1a29d6", "indicator--589a4e78-654c-42ac-ac5e-8d7585897520", "indicator--f3bcd222-a9d7-42cb-998e-a4f17e50fd57", "indicator--1b172f6c-fe6f-4163-920a-7f9aeb30e0da", "indicator--6f474ba1-da23-4f0b-922e-83a92976edbd", "indicator--bf6c08a8-9d49-4d20-a3d7-da256a92cddf", "indicator--c208d79c-c5ed-4678-967c-8f629d315250", "indicator--6864b15e-703d-4911-9505-51990f4733ba", "indicator--40beb97f-ed37-4f3c-bdd6-7b83c1f70279", "indicator--a9817b46-caa0-4513-8685-2bcc4ca58b3a", "indicator--a9d557fe-7fcc-4338-8ab2-f2a4d24abff9", "indicator--57b10ea8-f55c-48af-b479-c0800bf453cd", "indicator--50c9d296-f0c5-47d7-8501-821656a56976", "indicator--1cbd51d8-ffed-4aaa-9495-f0ad7a129521", "indicator--b0ba8f91-386d-46a1-8a9a-7edf4acd3527", "indicator--133e203c-002d-4c39-aa01-34a274238175", "indicator--0ad27ad1-f9ff-4dab-93a4-eaeddba96939", "indicator--8c86abb6-8c20-4862-8b5b-b48fef3595ea", "indicator--7d36db2d-b74c-44af-8048-d084700629cf", "indicator--27243250-8bea-43da-84f3-acf1e6c7a059", "indicator--fd72882c-c397-4416-8500-70ddf6d4a087", "indicator--c2a12544-c73d-4071-b3c9-7e450efa7f07", "indicator--1241a5cf-1d9f-4ddc-be59-1399074ee33e", "indicator--11c0eb80-2c95-4282-b2c7-e1939f349985", "indicator--4f3eaedd-15f7-43ae-9a03-179a4bb844ee", "indicator--24ff63e6-cc03-40e7-b8a6-16748e8f67d8", "indicator--0112bc7b-fe63-4c50-9d57-a2995f709299", "indicator--6d32716e-f12f-43f7-8850-1be215ad6378", "indicator--10163a79-aa55-44b6-8732-72775f695832", "indicator--b1cce7d5-a3e5-4d5a-9de9-03f2c832830f", "indicator--e19c806e-518a-4f91-99b7-275cd71e3aad", "indicator--208acecd-2745-48f7-a9c2-615e92cf8c0b", "indicator--00bb3428-d2f1-4bb5-9d30-130f442f7323", "indicator--1c98fda5-025d-496a-8ec3-14fff6c7a28b", "indicator--8ccca694-1994-4a6a-8452-8be4b53602ae", "indicator--a0b58784-ba04-4627-bb47-786ea73212e1", "indicator--f386eb97-efae-4cee-80d3-91bf181415e1", "indicator--b1504516-32e8-4f89-b25c-b7f6f8c31625", "indicator--930d5fe7-2fc8-4964-87ea-9e24c7981810", "indicator--9a38a60c-eee8-4037-900b-d496d9477d9e", "indicator--ffb9ea43-d6b4-4292-9ce0-18d856d6479a", "indicator--0fc2c294-571f-43d0-9370-0e999e7a5c65", "indicator--7174bbab-a9bb-4cd6-8434-57151f5691b8", "indicator--aa956e9d-f1a7-447c-a740-5ecb7e52f4bd", "indicator--0ec61e75-78ff-40ca-a932-3014700af422", "indicator--f7d2afa1-0bcf-4fe7-96d4-c1433b8bcde7", "indicator--52006bcf-ed1c-40e9-98aa-3d735e0b2617", "indicator--98ec37e5-7448-4c1e-9748-739a82d69403", "indicator--abe3e5d1-9817-4f96-932c-f515fb682e33", "indicator--d37648ae-5ba5-4cec-8759-a85cae752b34", "indicator--fd5705a0-568a-4c52-83ef-454d82beca30", "indicator--13b12a61-c83d-4f77-9afd-9a9cf92c26bc", "indicator--00b20505-e998-47cc-95db-7fc59bd2ea36", "indicator--49f1dd32-25e6-4611-b917-01818dfe2696", "indicator--e0513cb6-f763-4198-9bd9-0b2db26dd869", "indicator--cbe52c4e-3981-4b44-9564-f52a2d316f25", "indicator--435a60a2-b4a4-4364-a046-db40c673454a", "indicator--03dbae90-020b-48b5-85b0-cfe38b5e5a57", "indicator--6f8cbfad-7314-40ea-a8f5-fc8c1f6448a7", "indicator--f2176c3c-8384-49ce-8fe1-41f54a1cd9bf", "indicator--0d044740-7b3f-4182-9d35-38fd403a5676", "indicator--df1f25c2-90bc-4cbd-bb06-0db824ea08e2", "indicator--7d61ad47-c3ef-495e-9d8a-ec0404760211", "indicator--7e2af878-be51-4c3e-88c1-8c2b037e5adc", "indicator--709b142c-2a2e-414f-bf30-9dd6ac595f7e", "indicator--795dfe72-ae03-4010-a574-f5c533de2805", "indicator--34acc3d0-961c-4a23-aa80-738f1c44329a", "indicator--427ce06f-fb67-48e3-b086-a99fcdf4a628", "indicator--92c219e0-5796-4749-9b34-b82417c8ed87", "indicator--04bab4f5-df90-4ab0-b2c3-261ff94597d7", "indicator--a04ed4d9-7df2-4ad4-bca0-50cc29476da7", "indicator--a53cb136-be63-4b75-b253-4a3fa0375f16", "indicator--a07aa8c9-75c8-4c63-b583-bc7258c515ec", "indicator--d297cf2a-76ba-4edb-bcf2-a6dfe40ce4ff", "indicator--23725faa-a510-4c2f-9498-f3ef2734394c", "indicator--e3947a7b-b969-48c7-a2bb-d7a718e8c550", "indicator--95004164-f494-461b-991a-decb0502110c", "indicator--475df440-62f5-43e3-9363-3fa6f05d0315", "indicator--dc98c3c8-f273-4331-be07-95745b74d0d9", "indicator--ac1be0ad-4c0f-4002-aeb4-8ba6b53441fb", "indicator--d43e8b71-36e8-4743-a16a-48df19bc3e1d", "indicator--8f3e3e65-7eea-4062-b73e-e50cd4daeacd", "indicator--c054345a-cc14-4bf4-bfb9-24831e48838d", "indicator--2125ea78-7d0d-428b-990e-809eaed63195", "indicator--b3aaa576-cf6d-4cd1-ad05-0dc1deda8133", "indicator--19767a7f-3d7e-426c-94c8-28fe57571891", "indicator--d84b314d-ea20-47e9-bb3f-fff5fdd54567", "indicator--96eedb09-0d2b-4509-93ea-c53e6ca0d1b5", "indicator--42ad2e1f-dad6-4a0b-bc16-31f0e30c4aa8", "indicator--6766d7b1-bf0f-4ea2-85fa-8b3a56defaf2", "indicator--7a7b8489-93fe-4ea7-bccf-bb557fbf6c86", "indicator--c6cc9bbf-48aa-430d-b745-2579306695eb", "indicator--a35896dd-7c75-48ea-b791-054949eda3ee", "indicator--3871d0a8-675a-4d96-8da3-aeffdf5cd208", "indicator--86ab9070-cddc-42c2-8c9e-47764de25599", "indicator--c893cc58-632d-451a-90d1-08df9f383834", "indicator--ce33ad52-fdc9-4dee-a580-dba928e3c4c7", "indicator--b068be19-9a09-4e2e-8dd6-1257de9ba50d", "indicator--890a0738-cba4-457a-95a9-c85d2f74492a", "indicator--d632f8e4-5ec7-47fc-8f1e-e6953612efa2", "indicator--6270e08b-9359-4534-840c-e2188ea638e2", "indicator--bdf8bd8b-432a-471f-86b3-7b26f4562830", "indicator--83ec267a-07a9-4359-97a9-dbf3dd5587de", "indicator--b1f1d141-cd0f-4444-8b11-ff8627d45e30", "indicator--a7d8873c-881c-40f3-a988-9bdabca9fa75", "indicator--90c71c99-02f9-484e-b10c-1ed45684020c", "indicator--96564bfd-9de1-43e1-9746-8390c761e815", "indicator--c8ddff88-2a34-4618-adae-d8b756113a62", "indicator--97610536-c5c0-4580-acd6-29d610f9f969", "indicator--705a1583-58c8-44ca-956c-dc02239180eb", "indicator--019e3639-a51d-4fad-b9c2-e3b57cb7c69c", "indicator--01077c2b-61d9-4689-b7ff-b7e75dca6138", "indicator--6b91f7d3-2abd-454b-a59a-8c6a491dbd0c", "indicator--2728086e-4cee-41c3-b54e-f3891b7457de", "indicator--bbeb79de-1c23-4bd4-a335-4d0c632da015", "indicator--bb377f46-f44e-4f5b-91a6-91f2b7b1f716", "indicator--df422033-ced9-4440-96dc-791b63fb0f45", "indicator--26227ebb-4a04-48f0-ba8f-ae11beb13e70", "indicator--e0866c70-ffcd-450b-8c73-c264f45a4716", "indicator--cdaa26d8-3c2c-4cca-a059-11a30b3eb820", "indicator--4c68923c-856e-47f3-89ec-958775a6b81a", "indicator--aff9abf2-74c8-4976-8308-a3069822e156", "indicator--1238ff2e-95ab-4471-aa38-fa1c5bf1ba57", "indicator--b691eecd-f6aa-4ad1-82bc-f17abc284c26", "indicator--ab560192-9afa-4482-a10d-42dcdc0525ad", "indicator--e4c7fa58-8ed9-40f7-9a52-47de7927c222", "indicator--6b211a07-dc46-411a-9f57-5a40b40a510b", "indicator--15610f3e-4ff1-4751-ab81-00a242ef8515", "indicator--f34324e6-19c2-4097-8b4e-1fe3a9ee12ea", "indicator--42fa509c-4c4b-4a7e-ab6c-167fbaa0df28", "indicator--7f0899e9-61ac-4d11-8b23-7e962822b787", "indicator--ce7df5a3-e4a5-4f60-9543-e681dea264c3", "indicator--e48a9a97-e01c-409f-9e40-5f60517ef668", "indicator--7a0b9f5a-22b6-465b-ae71-356f9d96eabb", "indicator--f10926b2-5ec2-45e9-a68b-bf1cf07afdf0", "indicator--726acf02-b75f-4300-b271-66ea1d613153", "indicator--89d13b1f-8fa6-4589-9a68-5a739560a26a", "indicator--04a9a494-7420-47e8-8cd2-70b9bcd1a2ef", "indicator--93552d84-4b52-4d2b-a520-a3345ab2c139", "indicator--b601a6c3-c475-46d8-88f5-bfd2969b33d3", "indicator--7c30bd98-3656-472d-ba97-c53640951524", "indicator--781b29a0-d5aa-4b52-972b-1d14003fd9ee", "indicator--2e987046-0d58-4223-ab46-b39c9208b9d4", "indicator--a137b0b5-ec34-4d4c-a5b8-8e3acd339618", "indicator--5bf69c4e-8c09-438a-aad2-1256db268e23", "indicator--e893a656-c106-4b65-a05c-4a9bcecb672b", "indicator--64edb837-8fec-4ce0-a65f-a4dfea509adb", "indicator--c2dbfaea-d073-450a-9f40-8df13f149da7", "indicator--5c1bd9a5-66bc-4f7c-af58-089250f6bb37", "indicator--60bd2f39-172e-456d-ae67-15b53c96f4b5", "indicator--692a7130-7181-4424-bc07-e05cf1ea1b57", "indicator--a1d8e589-ff76-450b-8ac6-c3b7215b7c30", "indicator--1b43abb0-c05c-4fc6-aa29-0b1102ed5af9", "indicator--b7c860f0-cd5f-4dbe-8137-f2c133815a09", "indicator--bc1c019b-3f3f-402b-82e7-461fa91bc5af", "indicator--18399ef1-27a3-4edb-8cff-bce7b935eaab", "indicator--f9c6b133-02e4-43f6-af81-fd0e5dace6e3", "indicator--d2235a7a-3c72-47a0-98bb-89f91bf8d2df", "indicator--a3e9bf35-ef2f-4e90-aac7-507c328fb6a8", "indicator--1306fcdc-2391-4334-b04a-cfeebda1696c", "indicator--c74174e6-685a-4d7a-97c9-27f751556aa7", "indicator--633481ee-cc15-4353-9088-4bd56af73b70", "indicator--f05f63b9-a64f-4bd1-ad49-c2b55d1025a5", "indicator--003fa2c0-29bc-48a9-8108-b91c7c57eaa3", "indicator--6d5eb088-c6ff-493e-9d71-365ca4ab9c1f", "indicator--63a00934-d864-46e3-9b31-da051818b2b3", "indicator--4aad4ad6-5be9-4749-b81c-65e88693126c", "indicator--c57c1939-aa34-4aac-97b7-b312d11dd72e", "indicator--27d4a201-6d76-4fa6-b946-0af21e58d142", "indicator--bde80cc5-73ad-493d-a43d-e0ea001b23b7", "indicator--127f89c7-ee02-4e36-97f5-c3f0ca237f3f", "indicator--a9ef91f3-9167-4ed6-b031-edd5dec146a3", "indicator--7f58d8fc-57f9-436b-9340-7733bcea8aa3", "indicator--74275488-7c8e-4887-bb9a-8c1663f8cd7a", "indicator--e77ad06b-a211-4ada-92a8-2f7f87d408a8", "indicator--9ee63b4c-d980-4057-b105-3ff408b60506", "indicator--e1e87a9f-0805-40f6-b4ce-61a2391dd17e", "indicator--879e5aba-d1fd-4cfc-b542-99bdbe5cae61", "indicator--e010ecb4-2962-4e32-9ada-d398bb64803a", "indicator--6675ef04-c51f-411c-b095-3d6bf5fe5589", "indicator--eebb1100-ac6d-458b-b7c8-58c8db0802bd", "indicator--6414c83d-e135-4da7-a7fb-1e5bed4425e5", "indicator--68af717c-2fc5-4a2b-891c-2b86f00a6346", "indicator--766939fa-c99c-4aaa-81d8-0f19b9022981", "indicator--ee023452-e73b-4bfe-9773-9f46db936c96", "indicator--b597776f-b0f7-4623-91f3-daad2836012c", "indicator--1f9e584b-f4b3-4096-b47d-b9da6022844e", "indicator--4c02af08-678a-44a9-985f-a50b62c2ce63", "indicator--2b3bcb91-55a6-4f4e-9937-0239bae37f63", "indicator--3ef3f0fc-3b75-4fbf-8733-943e2013b6a0", "indicator--36e4c4f7-a8b2-49f3-b64f-d6b08a85d527", "indicator--769e6bb2-fcdd-497f-a37b-0e7f76ae01fd", "indicator--3dbb0a6d-24ae-432f-94f0-ce5f49f87a48", "indicator--384d755e-de36-4169-b106-95101f3c40ad", "indicator--ee282c60-a743-4a88-b6f8-12d139ab5bb9", "indicator--3641bba0-db84-4c18-96f6-367986e7662c", "indicator--3b271f90-3337-4f96-b4d9-80d2bfe06103", "indicator--98f99ac5-d595-4429-b86b-aed3b3eb0ff6", "indicator--025ec0eb-dcb5-4635-9a83-4963a7be2810", "indicator--cbf7b624-ab6b-428c-806e-a2f7c06008fa", "indicator--c690e043-46bf-4283-9a57-21f2fdf51e69", "indicator--3c099169-0514-47cc-a572-0a0afd0d7031", "indicator--5d7f8737-e1c0-4c73-9915-8e0b2ea10d04", "indicator--df69b423-b68a-4e37-81b0-d430c3982d66", "indicator--2a640f6e-155c-41ae-a6b1-436719f81bbd", "indicator--3841d2b2-5388-42e0-a3e6-32f61847cc05", "indicator--a265c5da-d4cb-4f59-b568-a65b9deaf7ea", "indicator--d3f18987-6e04-43ba-8491-852d888fb2fa", "indicator--c43f6cbd-2519-4c90-8eab-2abf57bedeb9", "indicator--b543399a-d80a-4de4-b014-b1c5f063e5e0", "indicator--7e1ac742-9392-45db-a360-9d9dcce3dd96", "indicator--b817eced-b60e-461e-b039-27c619722e40", "indicator--ee69054d-4830-4a95-9838-2632101f3dd1", "indicator--7ec55aaf-9b5a-418f-b92f-0d51132226a7", "indicator--01b60f30-e3d9-4e15-9bc7-92f21ba27cd7", "indicator--18b71e60-e06b-4d16-a831-e51007e96a8e", "indicator--44f8496b-c0cc-4c5c-bc5e-f94975dd1d4c", "indicator--8899210a-5b9c-4633-9f5f-7f540d977774", "indicator--9fd2ce06-f2a4-4ac3-a1cc-ca8fef4da180", "indicator--2b112e1b-14ca-47b4-b3d7-0882df48e5ae", "indicator--fab2f4c5-82ff-4a42-8207-0f65da01d9fc", "indicator--5e204b13-3d01-4be3-bd63-ec02af34bc80", "indicator--86bf2583-e566-48c8-b36c-3397ac5e0d46", "indicator--9f28ab28-3a88-45a0-bd48-980b348bad5b", "indicator--64f49835-8c11-45b0-bfc6-c13438ffbbc4", "indicator--b00b62d4-4345-42e4-ac49-849821298ff3", "indicator--3c13cbee-e954-4164-a4ca-7c4be0c3f181", "indicator--cfbc32dc-9b63-43c0-bbbc-38b77dccf1f9", "indicator--d64b7dfb-af85-46a8-8465-89237ce76ceb", "indicator--18fd0dc8-2862-4d9b-be75-b6eda8bda4fe", "indicator--7caf9cbc-9ba0-45e2-be3a-177a319a8b7d", "indicator--6364718e-7d5a-4265-81a1-6a7ea407c6eb", "indicator--06a96224-eb33-4d74-86f0-1d02eb415a4a", "indicator--5bc017fe-b772-4432-a5af-c8737db1e90a", "indicator--ac6bb5ed-7185-4db2-96a7-8a321f04f366", "indicator--71eb0e8b-fb32-49ec-916e-a77ccbb4dfa5", "indicator--772df92d-6ab9-4985-b138-0d695e45a674", "indicator--75e25599-3122-4d0c-8b64-50066ea24658", "indicator--54e5279f-c0ae-477e-b852-9da33e8ad8db", "indicator--9a31c6d3-b6e4-4e4b-b085-2609e824a824", "indicator--fc8791aa-070a-4fbf-abdc-637ab52a4744", "indicator--6588ec2f-3433-4ab2-a621-8a63c96a50d6", "indicator--53ad7c51-e655-48ee-ade3-1d71a5cfeeea", "indicator--e0ef66cd-fee0-427e-ac68-7f788ed2f323", "indicator--f594aa1e-942c-4669-97a6-6a5ebefe96a4", "indicator--da981757-7267-4985-9528-8594ae3f2769", "indicator--35b698f8-5763-4637-97e3-7074a315434a", "indicator--671252f3-40da-4ec9-996a-c518f3b96229", "indicator--1033682b-1926-4a66-a296-5f9a913dc5d0", "indicator--0f0d4fee-b867-4fea-98c5-8212710d8933", "indicator--a3900fbf-ecea-42b4-ada1-6ce434d54155", "indicator--d373e756-b38d-450b-be06-720d4ecc1020", "indicator--73784294-2231-487b-a040-d579bf32929c", "indicator--b52a9267-73c7-48d3-9062-a4c4912a73f9", "indicator--35df49bc-9e05-47c5-8f70-478392283101", "indicator--82561833-de0d-4a23-91ee-30c0e670de69", "indicator--974e021e-17fe-4953-bd73-aced6823cccf", "indicator--2708e8fe-baa7-4bef-a502-b6aeb7ef28d6", "indicator--87bc7867-1aac-48d1-8396-16a5d62b1793", "indicator--51a186d2-2a23-49c5-b041-c9a1c0e535ce", "indicator--b019eb0f-7b09-4107-a0a1-54c2bdf98edf", "indicator--f46dc4a6-1a1f-47c3-bdcf-4f569d3ae751", "indicator--20888c10-639c-4b5d-a5d0-4772bbb5c695", "indicator--6b4207f4-f282-4650-92d4-45aea90cdbd6", "indicator--b4bf9a0d-86f1-49db-9042-790e1713674e", "indicator--cbd971eb-a714-4a89-bef1-57b0d6955880", "indicator--6a3ea107-a15d-46cc-95b0-6f6960ba3422", "indicator--6db74deb-f706-4d7d-8d36-c8ce6b2a5803", "indicator--8deaf3c0-fc6f-4ca0-a728-278c50c4bad7", "indicator--b59e0ac4-fdcb-42dc-a462-e6b4b3ecae28", "indicator--d463f8a9-3082-4332-a462-861225d6a878", "indicator--2eb35bc2-8f48-4722-851b-64e5041a806b", "indicator--01fa0bb8-06c9-4107-a264-313bc96b13cb", "indicator--e03d430b-0691-43fd-b0fa-4bb0aa3b2527", "indicator--ec1a41f1-4769-4f26-9954-8de780e60b39", "indicator--894a595c-c06a-4498-867a-6ba5f6091705", "indicator--a1ff4b71-ba2a-4c40-8347-e2671d6827b8", "indicator--9a721ca1-f4d2-4c34-8f27-0a86c64bea8d", "indicator--bdb3c418-b643-47d2-be02-2334bc2daa70", "indicator--4327700b-4e73-4df2-a8d8-6ebc8ba3cf26", "indicator--b1a0330c-81ff-45a6-bdec-f4639613505a", "indicator--7676b479-1278-4a13-b4dd-9d9ddb670fdc", "indicator--93d8ad5c-3216-4241-8674-3b90e40350f1", "indicator--409073d3-d1de-4005-9d4b-f85baa97c79f", "indicator--16f21cc8-1ce7-4d5b-99a9-ff8213e3510d", "indicator--bb90389d-060c-4619-8f19-2a240c520393", "indicator--9090fdd5-812c-4f19-a11b-2f5c923b4a4d", "indicator--032bad56-fae6-4a2e-96e1-bfbf8ee12c2d", "indicator--f15b2ae2-d053-47e1-90ae-134a2cc0d8b7", "indicator--12d513be-41ac-49a7-9ba3-9899b6d68a61", "indicator--14291562-c332-4302-9cab-f27de77a5a44", "indicator--49ec28a0-f114-4d76-9cef-925afbeced30", "indicator--9a8d13cb-e89f-4e1c-bc88-86b95e84c848", "indicator--c4eb143d-23b6-43d7-ba06-04121878d538", "indicator--d27c086e-483c-4c24-be26-75e88f2cab0e", "indicator--db952b1b-2692-4443-9e09-c01ff8dba8a2", "indicator--7c30a85b-e0d8-4712-9959-815844407945", "indicator--f70a5657-e1cd-4c75-be52-0ff3658772c0", "indicator--316bdc43-02e5-4d6e-9572-b418c0fd5c6a", "indicator--a11080df-c074-4db5-b91d-eb5d7708403e", "indicator--a13f7146-43a1-4d36-a66f-6b154713ac50", "indicator--4357efe1-33c6-4c28-bb14-ef99ce041128", "indicator--5a6dd070-9607-4dd6-be4f-4f3ac9ea8128", "indicator--a082d4a3-be1e-4ea9-b1eb-faab1fa55976", "indicator--4b11ac78-88a9-436d-9210-47e1f960f225", "indicator--d331d078-0c97-471f-aff3-7d8d1ab2a247", "indicator--52dd21c0-5d8b-446e-a2ec-aacca394406a", "indicator--947f719f-213b-46cf-becb-8505bd1f8bd6", "indicator--8e55cc27-08c5-466a-9d6b-8423c3fd20c7", "indicator--eb016fcf-9789-4248-9c95-812bbcbd4dc9", "indicator--212cf202-2ed3-4568-a0dc-eca03d4088d8", "indicator--5c4fc80d-6cd8-4ed4-ac6d-e7c0ba078139", "indicator--19b7c495-61e0-446e-baa7-db44b3fd8859", "indicator--a9dde82f-cf89-4537-8133-2c95eddea673", "indicator--88fabc30-5a57-4a22-a410-f7d8ba105fcb", "indicator--3bd51875-e0ed-430c-82d4-61bea2d0962a", "indicator--3c263ac5-bcd6-4954-bc10-7897b50753d7", "indicator--0888072a-4ba3-4990-807a-702f9b400b14", "indicator--c7a98117-8a3a-40ac-80a1-eccf319a04e4", "indicator--1a5a398d-fb16-460c-bc27-462250bd5a82", "indicator--fb7522ba-cbd8-4b7d-978b-b99f2e1ae2d6", "indicator--5f0e7f31-14d2-4055-9b21-5a91b2f35c1b", "indicator--5ca2c253-496f-41c2-9390-4df75d9a0556", "indicator--9cb3d356-d188-4624-937c-aedbe8ea6ac3", "indicator--bce84ffb-b58a-4c38-abd9-cc27327c1046", "indicator--bacec5c8-072c-4a50-bb70-389a73ab101a", "indicator--7631430a-e04f-4d60-972a-605136ad7764", "indicator--ce267791-25cf-4577-a0e9-b488d2117030", "indicator--fbd050c0-fbd6-4a38-a005-24817f60ef25", "indicator--54a12353-e8ad-4baa-90b2-9321ad9a6ccf", "indicator--b0d61417-99bf-4c46-a654-aa9a7ca2eea8", "indicator--e2db4f85-1b91-4cf4-9644-1e1248d33f75", "indicator--6dabe29d-cc35-4b7e-8d54-4b26f3ff8505", "indicator--b3545238-a484-4f3f-aa30-ecf3caf6513c", "indicator--4c2a18d7-5431-46b6-9fcd-dfe83a254f29", "indicator--12e623ae-645d-4f8f-ae19-cb0b00704d4b", "indicator--a0e8c31d-d33a-4c19-8e4f-19d255bdf65a", "indicator--53de487a-7ec0-408e-b1d5-b1ceb46abf4f", "indicator--998dfaad-12dc-4865-a1d5-434121d0c128", "indicator--7d82a3f7-99a2-43ea-8f49-fddc5b5c9f9e", "indicator--4b357f69-5814-48d0-987b-cf3f74229f31", "indicator--ff1d1da0-9635-4f0d-a402-f4c2de82b133", "indicator--2198a9c1-ab9b-4e09-8570-58e5d0c1f35e", "indicator--b3d1d9ff-e89a-4d67-8e06-05f690673e3a", "indicator--59e8e86f-d803-4b23-9338-14f66a55f465", "indicator--4b6f18e2-ae80-4a96-91d5-6ba4dc4bec42", "indicator--92fc85ea-58b4-4918-9b1b-8407a27346c0", "indicator--86b9b129-5bfb-4fde-af5a-36c8f202e1d1", "indicator--cbcbeaf9-0c66-4658-ae98-0c862821d9ab", "indicator--14420031-ecc8-4c23-a0e5-2bc59b9e77cb", "indicator--7973518b-d4e6-4ee1-9230-45b2a84d3960", "indicator--36216e2f-2271-4ea0-b9a5-6abbc5c70655", "indicator--caa3269a-acd1-4fd4-a205-c9569c11af65", "indicator--23aa84ca-d734-4474-acdd-fd25a23c26ef", "indicator--132d587e-18a5-4101-89ae-08db368b0c0c", "indicator--4ca9f20c-0b29-4b24-88b6-38a96028ac24", "indicator--bbfad868-c4df-48d1-af8c-e5d405c5a8c9", "indicator--f3638ba4-ea93-4530-bf53-1dabb5160dea", "indicator--c5fbfdff-2a66-44dd-896c-82efce04740c", "indicator--f7489d0b-b645-438f-b8d0-67ad400652b9", "indicator--601f9de7-c1d4-44d1-9b4a-faa765f9d7a2", "indicator--59a77528-d691-416f-a921-4d5e3e843f80", "indicator--0eba1621-c497-43ee-8ee1-8b731ca9155f", "indicator--74c5bf02-7968-449a-bc4f-33805469cae1", "indicator--1c716de9-9b75-4c62-9c1b-8bab934b5513", "indicator--7a9a75da-4fc8-4abd-aee5-167ce2b56cdf", "indicator--4a07f4bd-03a2-4955-8d91-574dda775340", "indicator--fa83058d-4e49-4de6-a8ce-51ff91719e0b", "indicator--401657b4-e059-4f85-9254-6ee7795e3ac9", "indicator--1dde8378-7efa-46a6-9123-8776d14054e0", "indicator--980e524e-a2e4-4353-a6ef-baa80fae8b89", "indicator--73bbec8d-da7e-4a7d-afa6-3bde55f21444", "indicator--22fddb9e-279c-459a-92d1-de8109d7e811", "indicator--dfff77e5-7524-4143-ab77-604ba1b54bdb", "indicator--5add637a-9052-464c-8c19-fa1534d973a6", "indicator--05aeb047-4451-469d-9459-81c4e65451b6", "indicator--16558bed-648b-4564-83dc-e64e838f60f7", "indicator--936d64a0-405d-463c-a1ff-08a39946fac2", "indicator--da3a3582-790f-41e4-911c-3288e6bcd05a", "indicator--75e10255-105e-42ae-87de-048c5e3e5e18", "indicator--ce57ce8a-8d97-4de0-9535-4d57534b900b", "indicator--df3d2fb4-3ab2-4cf4-a3d2-5ceddd8d29cf", "indicator--f7aa3cd2-ba34-4bf2-8a46-fe800f55b3fb", "indicator--72453a89-543a-4893-8134-cebc5edcb11e", "indicator--9423c4e6-42dd-4bc9-9801-782e73c047b1", "indicator--e2e96622-8acb-4721-b271-60c70d1b6343", "indicator--2f810074-a13e-4e3a-be0c-c69ecee7385c", "indicator--1d361b8b-f457-488c-bd85-e356defb902b", "indicator--5446ba47-d377-4f12-ba15-e5e6fa38ac06", "indicator--c7c243fe-d7dc-4c03-8c40-0977f923dca3", "indicator--69623131-0305-4682-9426-414b869e252f", "indicator--113d3b06-f559-4a15-8fc9-1aca1a633b75", "indicator--4dc35e82-0029-4443-9d18-02736e424e5d", "indicator--d8c17ac1-1961-461d-b2a2-124c5dd4e890", "indicator--a9ef2a97-966f-46eb-bb82-2e80c8759724", "indicator--bf760f9f-6813-444c-b1a9-a4d4f7ee5994", "indicator--d987861e-e5d3-4f1a-aa5f-32f110479f9b", "indicator--643e68cf-6cb8-4c3a-aef2-1a9e43e6686b", "indicator--b45e2815-e8da-4f71-95b8-f5feb5fb1782", "indicator--489fa19b-2502-45b3-a0ee-26b31cf13e5d", "indicator--426a257e-6ac3-4820-ae31-e0ab7b3485bd", "indicator--6331fd5b-31a6-4ca6-9e3e-486a67194b83", "indicator--1f3e9158-238a-4b8d-8b4e-7ad0e906b089", "indicator--2d731709-27bc-4c58-bb61-4083625f5c1d", "indicator--c9cb09a5-932c-40b3-a966-d08a956e1f36", "indicator--99070773-66dd-401b-810f-7e02b19d7560", "indicator--e47f194d-c225-4689-9d45-612e3170582a", "indicator--49cdaf91-14c7-4305-8a4d-8eb474d8e03d", "indicator--644b9a8b-a211-4752-be88-89fa034a64cd", "indicator--360dae37-2718-44e3-8529-cbd629e5b30b", "indicator--d97143f5-f587-4327-af2d-b704c9868a60", "indicator--d23747b4-4369-48b3-a6cb-ca610e0acdc3", "indicator--0275407b-15e8-4d16-938c-e947fb5571b4", "indicator--0ba39a44-bfdd-47d5-929e-68010d0664fc", "indicator--118a8af7-b61b-436b-89da-147dd431c71f", "indicator--7c885ca0-fa1b-4502-b332-3a5c083bab2a", "indicator--49be491b-530b-4850-90cd-d72132bff50c", "indicator--057ebff7-7e21-4012-9094-23695c1b83ad", "indicator--29f036a3-c02b-4382-b99a-9e56e6b68df5", "indicator--9b4cb814-ea7a-4129-83c9-017e2d609124", "indicator--abef78d0-0ea8-479b-9fba-dd671bdbca9d", "indicator--0275a427-6ce5-4c38-81f5-62424e4d570c", "indicator--3e1b9cf1-bfa9-4035-8b8d-db92e231ab9e", "indicator--587e51b1-1000-43dc-9f28-a484265454cd", "indicator--607d1f1d-0195-4f9b-8047-cbd234da466f", "indicator--34173513-0467-439c-b70a-a894997b3554", "indicator--2f444cdc-3066-46ab-a3f6-857b2a7453b3", "indicator--63c7fb69-f6bf-4431-9d08-a0bdc98c6042", "indicator--122970e8-1357-4b7f-a13b-3b4dd9d54ef9", "indicator--2cfc3d49-21ee-4b5e-a42f-0677b91b1d05", "indicator--faa1f2ea-35e3-40d1-bc8d-b943edec3ecf", "indicator--62e8b60b-262a-4071-a6b4-c139fc1805f4", "indicator--7edbfaa8-1793-4e31-8af0-91430ed0dc23", "indicator--044888e3-83dd-49ab-95c0-d8cf8caebb2c", "indicator--4388e95f-e02e-4c4d-b17f-aee7db6478d7", "indicator--2be04857-6b91-41ec-ad1f-c424a6804317", "indicator--e7765dc4-074b-498b-92f9-4c268e5ccd08", "indicator--28a88c6e-d547-4b43-93a5-cb53b71ff42a", "indicator--3b1406b0-2488-4a9d-ba7d-cdba9cf4c7b1", "indicator--142790d5-8e9a-4ca9-9006-ee319e956d38", "indicator--009b7bf7-0e3c-4648-b8ac-cb329b0b0ba8", "indicator--8550cbb2-7cf8-4e28-b5bb-7725c556e5c6", "indicator--2bd790f8-925a-4ee0-805a-4b3d19f73177", "indicator--79d6172d-9acd-418c-a93b-85ba31814ccf", "indicator--33ddf616-4eed-47bc-8127-45e5b7c0f77f", "indicator--36c9f31b-8ade-4575-84f9-52524a229851", "indicator--fd81730f-dcef-4072-8b46-8f206ba75525", "indicator--63dd92b3-00c8-446c-a452-45f11f903298", "indicator--de533dd6-587e-477b-b96a-f0f27a843570", "indicator--d4633ddf-d412-4659-9d38-c81d5fd056c1", "indicator--cec621e4-e0db-4b03-b87c-02c727692d16", "indicator--3b64287e-5fb8-42de-97e2-54f076988c0b", "indicator--deb722d9-6a21-4287-b265-239fc971da69", "indicator--140010ce-12fa-4dfc-b077-eceaca9ab4ea", "indicator--67bc09d8-7118-442b-b3bc-b75a2525a0bd", "indicator--4de80d9b-dfe4-4530-983d-4a5fd9c80c56", "indicator--081f0768-8aa8-48db-8079-82513a3afb8a", "indicator--e8369216-e40f-4069-8996-f65b653a9460", "indicator--a257ba80-b25d-4ff3-b075-a663b31d7799", "indicator--c7104b58-3454-4b97-9b6a-da29f9a22945", "indicator--df9d55b0-72b0-43e6-a1e2-39812cb940d2", "indicator--3d22aa76-5f91-4857-afd3-333727f42a02", "indicator--8588d9f3-0e4b-46f6-baa3-5d8f06e44524", "indicator--ae7a6547-892a-48cb-8be1-067f6d23d056", "indicator--19d41e17-d3ea-418f-af3a-362fa43625be", "indicator--cd83fb76-f160-46d3-92b0-5507ab6372c4", "indicator--58afceec-36a1-4688-8c8c-ca7b75eb74ca", "indicator--6346cb48-9d42-44a2-aedb-820d54ca90ed", "indicator--b1318b85-beb8-4a58-b95b-9eeca8fa64aa", "indicator--fdb5b861-00fb-443f-a1a2-b60babcf9639", "indicator--df5b168c-f215-4ba0-b556-bb9334ba6c41", "indicator--9e589c21-c7db-44ab-ab6b-a6d9b638f845", "indicator--4178c2ae-3d1b-4848-b204-f12b416a1e1e", "indicator--fbb61e4a-56d1-46da-bd45-75d47901f2a9", "indicator--0b5cb097-8e2d-4518-8185-d9032d2393e6", "indicator--04d90e57-1d79-4848-91cd-caae0f0c5483", "indicator--c61c1f31-e2c8-42e0-b8f3-63c961f00626", "indicator--6ece1589-7661-4b58-8f58-0137f82ece27", "indicator--4e22ac86-9e12-44ae-9ae9-33a380b59b2d", "indicator--f43a71b2-6460-4958-b8a8-6e7c6009041b", "indicator--9def0dad-cd1f-4818-8d54-1735e5b50951", "indicator--3e86540d-52c1-4726-97a1-28c13e240389", "indicator--94384216-b8fc-4223-9785-42aca0aeb11d", "indicator--08b66be0-ed34-4a17-b34a-03e6cae08670", "indicator--c278a272-98a1-4ef3-9832-486f85a8103c", "indicator--a82ba55f-c333-496a-98b8-7cfeddfded53", "indicator--93d6dbcd-47fd-4b8e-ac57-98c2484a1a01", "indicator--8857dd1c-f8f8-4d5e-bf64-953c3984c8ac", "indicator--96834f41-50cd-4a11-b841-041094bb87e8", "indicator--2a74fde5-16ff-49c5-a67c-630145841137", "indicator--83fabcd0-d7b1-4eeb-8757-345456d98073", "indicator--8a330f64-860e-4cb4-8abc-dbdb7e292a8b", "indicator--fc1efce1-f670-4c61-9217-35d43d70bd54", "indicator--084ebeeb-6c1c-4213-be64-e422891b940d", "indicator--fa547d75-5546-4068-a7a6-d35faa7cf3d6", "indicator--48e9fc31-a3b2-4312-8d6d-f4b6777e3d00", "indicator--f328d893-f7b5-4145-b68b-3693fcba7769", "indicator--4ad446ea-28de-4008-9371-b937c2af14df", "indicator--b1f246fc-a903-43d6-984b-4a96408688da", "indicator--4e5e6ba9-2c7e-44d5-8f23-3e0714fc0d30", "indicator--5b1085c7-19c6-4de7-a5e8-ed6b4d15d325", "indicator--55c6d6d3-9aa4-4eec-88f1-5417860368ba", "indicator--ac0fdc09-5dcb-414b-8ec2-f8556b74aaf1", "indicator--0522bf3c-22ef-4a0c-b531-02593f2951b1", "indicator--b22811fd-388d-43f5-82ae-3cf9c683c304", "indicator--9306bfa2-39a6-4d7a-b265-11f507ef9dfa", "indicator--88fa581e-a3f5-4449-8f45-e9c21ac14508", "indicator--4500c84c-79a7-4f64-a494-0265ecb165a0", "indicator--04e95735-afe4-4d9e-b8a0-5d434528c1bf", "indicator--36078ea7-b5be-41e9-9ef7-a5022d699807", "indicator--d04a5c1d-089b-466d-8718-cf230ed5389f", "indicator--05e47c78-9cbd-471f-81ea-45b73c510f56", "indicator--cfcdf4aa-1c47-4db3-9e6e-c42530dc3ed9", "indicator--5fe1b699-6179-43e6-9d2e-d2dddbb5cc05", "indicator--b515079f-c374-4e05-a30b-b94b7a965c92", "indicator--048d2778-c1c2-440f-8cdb-5b3c62b033f2", "indicator--711e2866-b396-4e77-8a08-b881ef4b1f1b", "indicator--82c7433a-4d02-4fcf-93f6-c0f179b484a4", "indicator--d0eb89f7-ce52-4292-b223-fde411c3ad80", "indicator--366e9ba7-b39e-45ef-a5f8-e76a87823d59", "indicator--4c0db490-b1bf-4ec4-bbb3-a80bd1236036", "indicator--06915231-cf22-426e-b5da-3f8fc2c4cbfd", "indicator--31a92531-0a6a-4ae1-b052-7b3311ea5e07", "indicator--f28868a1-375b-4150-9f39-f01daf47b446", "indicator--fb65dccc-7b90-424e-9ba3-33e7d749a099", "indicator--5e467f2f-d2e8-45c2-a0a7-e531c5de6947", "indicator--b95e4546-65c6-4d1e-9279-4fdc72250904", "indicator--e3a228af-337c-4b40-aa15-8bd8019068e4", "indicator--5067ae9d-7ff2-47b2-b72d-fa9d17b336ad", "indicator--86897e3f-72ba-42d7-9514-3a066f1faac8", "indicator--12e22ded-7074-4fde-aeda-1d3e855d08f8", "indicator--4cf9e23c-84db-46b4-85a2-bbfc3d33192c", "indicator--832fd344-e7aa-4de8-b0ab-f481777703f2", "indicator--4829d0de-3c24-4c9b-a13d-092b6a85a30b", "indicator--4cec8062-a13e-4e0f-8e5d-d50d92588f02", "indicator--451d1cbd-d0a7-4658-a149-570e9c4814c7", "indicator--488ce061-d0e3-4a6e-86b4-623b500e1f4a", "indicator--b4fd79e1-71d0-4829-a6e2-cd0e611b3446", "indicator--58ab3b2f-ddd8-4811-8817-9af69f245e06", "indicator--d64fdb98-8702-4b4b-b486-489518f9ee1d", "indicator--1a66ac85-21e7-4882-b9e9-7f4f541cc93b", "indicator--f613f115-1e56-4d05-bbfa-42d02758fdc2", "indicator--46528b65-f79a-47c0-bece-8eb673f4fae3", "indicator--2e4ae6c3-4bf4-4e54-8c87-e2f3f1d03cda", "indicator--b769d02a-ada7-4ec9-91c8-27b3e0f57260", "indicator--84615140-318d-4740-ac42-c9e9c4f6b28c", "indicator--e9cf9732-d3fc-4932-b908-263a65f8a085", "indicator--3cbb6191-deff-43bb-99bc-9776a6aac0ec", "indicator--6dbd7be7-d98c-4f9e-8418-4b1eda944c27", "indicator--87a2bc2e-b13b-4f4b-8bb6-9dd706f9dbe0", "indicator--8ff487ce-8bff-4f98-8184-96e68f76fe33", "indicator--9e06b86e-e58f-4198-988d-2a819aa23892", "indicator--0e671ffc-7417-445e-8801-7789802903f5", "indicator--45143d12-3e63-46b4-b6c7-a9ac82b542c3", "indicator--cd34565b-fac9-4d78-b677-e922062e927f", "indicator--4614a66f-eb81-49cd-95b5-76e337758a18", "indicator--0e484bf7-e93d-48f7-9984-2a87c009ba87", "indicator--9b4d6617-d956-4dea-a3b9-1fcc48faace0", "indicator--8e12e38d-46b3-4b25-9c37-a44ad61894a3", "indicator--dee4a653-9352-4b83-b58b-40a0f4dc709b", "indicator--52bd2c80-0567-41ab-b42d-76263ff5c2d2", "indicator--591081e9-e540-4e49-b861-376e1858552f", "indicator--e647475e-0efa-4ff4-911e-b61cb3d2bcb5", "indicator--bcfc4ecf-f87d-4628-b6b6-68aec90b90ea", "indicator--a974c3cf-51bd-495b-835c-32d436cc7696", "indicator--9ad09752-f606-4f5a-bfdc-1362bd3d1cf4", "indicator--288409d8-dd53-4f50-87be-39041c8f1e4d", "indicator--7ca4f658-ff24-47d4-afad-1e194bb1e280", "indicator--13778dc7-ebf2-477e-895e-1cad667654bc", "indicator--6d158436-5f80-4ffd-80c2-61934b3eda6a", "indicator--8b47e671-a55a-4fbf-a837-158bf1868c6b", "indicator--d4f1c74d-f754-4c75-9c24-44c0132204f7", "indicator--a3631047-7df5-4074-97dd-9a1c9f03d48e", "indicator--378b3e24-d46a-4728-9139-4ce91fcdb59b", "indicator--69a53184-a780-49c1-8d07-01af6abc6baf", "indicator--986f1e02-f307-404a-8aca-96a441b500c7", "indicator--a998a89c-a67d-435c-ab06-cc5259dfb5f0", "indicator--5fd3d0db-80b9-49c7-aae4-b5c382501af0", "indicator--e37d45a3-8d7e-4e69-af9f-c0680954f98c", "indicator--46dc6032-0536-40f9-8410-7525a5979102", "indicator--4c1db07b-aa2b-4b9f-9381-874c17d82dd9", "indicator--329a703e-b82c-4edb-be12-396f29c00edc", "indicator--d509264f-c9a8-4b4a-8d00-cd3a54a03c20", "indicator--c5c6f8d5-397c-4dde-be86-b1b06087fd64", "indicator--9e9305cd-4160-4eb3-982a-3084940391f8", "indicator--9482d68f-cb24-4207-9407-5b79f9aaeac6", "indicator--0a87d90b-2bde-4565-ab45-227ca0f96339", "indicator--88b4f49e-d800-4d35-becc-4ee9492717a1", "indicator--ab67ae37-44b3-4060-85e7-eece13885476", "indicator--b7931048-e5ae-4910-bb1e-9d0c93ac8d29", "indicator--1a6ffb2c-b108-487a-91bb-31660a346e93", "indicator--ee88b27c-c2da-4093-8fdd-5d7ac6788053", "indicator--d1c09c41-afcf-4f4a-b789-73916979d80e", "indicator--6a5da5fe-061d-4644-8f72-57718f761341", "indicator--2f095ab1-8fad-4b59-b9dd-4c12f7856b38", "indicator--1c600d60-79ba-414f-80fe-aeac925e5a6c", "indicator--85f67905-355e-4eef-bb6d-5da91e2169eb", "indicator--21e99d10-c0f2-436a-9434-5741f58f221f", "indicator--1e6ad9b0-3a33-4cb0-be8a-656286c497ef", "indicator--2763fc94-1200-4a1a-840a-0734a5afda39", "indicator--62e660dd-644f-4ae1-b90b-747032dc59b6", "indicator--360daecd-64e3-493a-a74f-c7019074ce74", "indicator--9aea8fd3-a02c-45d2-afd0-3b0e288d847e", "indicator--889a4357-a0df-4f18-9bb8-075023769229", "indicator--e407ae50-dd29-4645-aa13-9604dc86f94e", "indicator--b55103ca-a2fc-4ca7-95dc-a3a08321f1a7", "indicator--3ef20428-8bbc-4df8-806b-62d11cca8402", "indicator--7d3cb80d-0d8a-4880-972e-c8f7c32d91ff", "indicator--14705fb3-88e4-4cd8-8e8e-1b3311085c06", "indicator--8c292be3-c843-4e9b-bd15-b44255989fd1", "indicator--437cb869-15f1-42f4-8329-d6309cc44f37", "indicator--0f702da7-862e-454c-9470-521e62a8f582", "indicator--2a64c3de-daa9-4aa7-b005-5063d54730ee", "indicator--44a08672-6d2d-4dfd-ab1c-f7bc4805c65b", "indicator--43b62acc-ec7c-4dcd-9181-31a963a1c196", "indicator--24cd4e56-5bc5-438d-9114-72e4a7cd1767", "indicator--d67e8672-af4d-4a41-b929-b96a79994d7d", "indicator--e1f75c02-3dcd-4cc9-ac7d-e689de3e63eb", "indicator--1ceb53b8-eafd-4607-9608-c5e0e7c11525", "indicator--92dd08e6-f94a-4a41-97a4-2556cc0edf56", "indicator--16e582df-6c26-4190-bc87-40a996e20b21", "indicator--909aac69-e4af-4462-ba72-31c3e6dc89ad", "indicator--c0897c1d-5aa8-4de4-91fe-e48dfd4bebed", "indicator--af5e153f-be9d-4fed-8969-22a4a032cf39", "indicator--1e846e5d-bda0-4d34-9417-6e39e7eb6986", "indicator--842a084e-b79e-4104-adbd-ee3818d4c83f", "indicator--35920130-d94b-40d2-8b55-5e32a35ae863", "indicator--70be6d0f-1a44-4a2b-953c-b3bc22744702", "indicator--99562523-730a-4add-b83f-44a2f76e6ce6", "indicator--077a8c44-2655-4257-94f7-b10281aa404b", "indicator--76fee6d2-3849-42fa-a605-eb878e9d1209", "indicator--8dfaf947-a2a0-4941-bc85-0a147fb7c2a8", "indicator--27a0ca3d-f9b1-4e2b-89ae-aed7c55d14dd", "indicator--1a655ed1-8393-4199-8921-c5769d0a0313", "indicator--d3a1b8d7-6afb-47b5-b92a-ba789752f8a6", "indicator--0e8ced30-eaa1-4440-a726-76b759471e6c", "indicator--e6a24eaf-008e-46d8-b093-d3f84e11927f", "indicator--8d3bb166-f7ab-41b9-89e1-785ba780e9c8", "indicator--2d3517bb-8b7f-470d-a819-722ec525b78a", "indicator--7fa01595-69b1-4f56-973a-05a01823f847", "indicator--d6ea76ca-8500-4809-9f3e-357a507744ce", "indicator--35e05bf4-0a2b-44a8-bf89-19afb54dcf97", "indicator--e8f70e68-5691-4d10-a356-6adbd679a22d", "indicator--6a3e7b94-8a98-48bd-a460-ddfcd9b77515", "indicator--c181027e-34d5-4bb6-8eb6-70dc75c97e50", "indicator--0f48a96c-63bc-49c0-a0b7-54748448afef", "indicator--551c55f1-6c7b-4127-9683-018bbb040e28", "indicator--a552d652-de50-4956-bfb9-acb0e8f6fd00", "indicator--d1c8d174-5ab8-4f3f-81c1-8f6985766f65", "indicator--1384a616-a1b2-4c07-9ebb-b0fdf0e9a8f2", "indicator--e4fb03b1-fe9c-4c24-8de7-17b189b79588", "indicator--d31d9882-d03b-417a-bc1d-c8977f852847", "indicator--be064b44-cb89-46d7-891a-753753cd400a", "indicator--9849e459-e596-4e04-959b-2a2340515eb8", "indicator--4e053d8a-c8fc-4bbe-a89a-346e2f395d14", "indicator--87c7725c-ffef-46fc-84ca-c578f5f1134d", "indicator--2b3f05d7-2e22-4be6-bc5e-1903a796df58", "indicator--92e0a497-d57b-46a7-ac98-499575541c15", "indicator--d23b6607-c524-4f07-a960-a8763529daa1", "indicator--9feac244-a47e-4739-9c48-5da99948cba0", "indicator--a8c42187-6259-40ee-9a74-c42da1bf390e", "indicator--44303264-abdc-4c62-8b1b-9f573451c329", "indicator--361b4e30-78c8-4039-86a0-e93d1706b5e1", "indicator--6b3d22d5-7c12-41b0-9b68-9828212202ea", "indicator--fe907821-915a-4147-aa7a-6fd1da1e6c90", "indicator--a72cb4a2-d5ef-4c3f-9b86-ee65a002003d", "indicator--a354f89b-67cc-4fdc-87ee-c7f9186260fb", "indicator--de9551a6-8012-42ec-931c-1e5b14c38a40", "indicator--022b5c60-e933-460d-9ce0-a8366751b181", "indicator--f4549b02-9539-4fad-835e-e5ec2336d3fb", "indicator--01cc5b3a-9f39-4412-a08d-e088ea93817f", "indicator--3215926f-2944-433d-8d82-24a2bb57eb02", "indicator--10461da4-96de-4d3a-be45-a4b61c686abc", "indicator--5021f12c-2401-4f3a-a92e-830d93ab9f12", "indicator--2e558a9d-fcac-470c-8ab1-6e2e638022bb", "indicator--38cb7568-296a-401f-8e2b-e8e78778375f", "indicator--8ef26e40-e8f5-40a5-9895-f1771a2582fe", "indicator--f07c11a8-0030-4604-b7dc-4c5bed352798", "indicator--fe1ba458-1465-41ba-88fe-5b80bca17732", "indicator--9085e349-2ef8-4b53-9f47-18dd50a3533e", "indicator--7d93129f-b76e-4297-9bcc-e441a8dd3bab", "indicator--ad59c3ef-8b9c-4c2a-9eaf-dfb3d8646d42", "indicator--f2bcddf3-b039-47f4-9b7f-7e1405783494", "indicator--f8c73246-339c-4f51-8015-f6400a4e9ff8", "indicator--a1d83335-5113-489e-8aec-7a8ddbe97c36", "indicator--d8e0ad95-fbdf-41c7-9648-50c10d9cf7d0", "indicator--87962dd4-0516-4946-a3d3-c4cbdce6cde4", "indicator--009c8d88-15e2-4f60-bc7e-41ef3d2d49ce", "indicator--51369c07-d4f6-45e9-89e3-718b7b0b8f93", "indicator--ae9a4b43-0525-4462-a1c0-5107989f0ef6", "indicator--c24376bc-8cbc-4efc-91c1-5b2e47af75e8", "indicator--b0f0533a-b4e2-41db-8645-951d675471ab", "indicator--087378a6-c8db-419f-acfe-dfa7b502bdeb", "indicator--31b414bf-471b-42fc-b61e-9c30350a8046", "indicator--c4f85e08-9f0c-4001-87b3-38e05371e7ad", "indicator--9c28a3b3-91cf-442c-ae28-b3ad2fdf2a86", "indicator--448c827b-51c9-4125-9d8a-e0bc194f15cd", "indicator--41b686e9-29d4-4d87-b198-a9bc8ab90935", "indicator--472a801f-a631-4bf1-b20b-6da56ea81d88", "indicator--4e70e068-2a1e-4b15-a9c4-d97f3d566e63", "indicator--9c3960cb-62d5-424f-9f88-67fd639ece67", "indicator--1c1650f3-8478-4636-aa77-50bbece04c0b", "indicator--cb3318a9-194d-40df-b6c2-59ea80c0fa3b", "indicator--9195a7bf-b4b7-49f7-b0a7-81daedf6280e", "indicator--6efe59c1-cca5-460f-a77b-b08329e732ac", "indicator--a4a401a9-7555-4e35-95bc-7e31780247d5", "indicator--b4e4ee72-7380-4f34-886c-8020d13e73c1", "indicator--02de9218-e909-414b-b954-30378bd3540e", "indicator--a8b858d8-261a-480b-8b61-192ea45d7e7b", "indicator--fb5fe4d5-7d40-4989-af3d-0776523e4c67", "indicator--23e25a8e-3dba-4b4c-9e5e-0de52f391bed", "indicator--92bd1012-26ff-42c5-a151-461f56e2340b", "indicator--cfd32db3-3465-41c1-8b77-169e59fea386", "indicator--457d50d7-b709-41b8-99f5-535e64521277", "indicator--725376b9-f4a8-4747-9f06-4fccb0ffe1bb", "indicator--dc610730-df11-41fd-aa6b-6679a477fb3a", "indicator--5cb5a44f-25c5-42ce-b29c-ac9e81ddbe69", "indicator--aa545357-5fed-47a0-bc2d-d0246ee281a6", "indicator--527228a4-1a85-4efb-85a6-5c46b187ce13", "indicator--57232b8f-d8f7-40b7-9ac7-581783554b00", "indicator--29df77d9-53c0-4d53-aeef-341580ce51bf", "indicator--cfb42e3b-e622-49e0-94d2-aa0e41398a0c", "indicator--d43d0e58-2061-476b-86ca-31e658651b71", "indicator--ebfb522a-8e5e-4119-9c75-027acb58249f", "indicator--4b39c9fc-abe1-466c-8d3b-f672f9d6bd20", "indicator--df4dd698-a9b4-47c5-8b01-2ea35ac56b41", "indicator--4e136888-fa1e-4c39-8407-43138e29ebbd", "indicator--a06ef8ab-665a-4521-96bf-dade1ce7d7f7", "indicator--8c1e1ba5-f464-48c6-864c-a3ac50dccd49", "indicator--d837d015-2df1-4853-a6fe-f3fcd3e44401", "indicator--a65298e0-3ffa-432e-870d-70afab876007", "indicator--3a3aa9ad-ecd5-485a-a707-909f622f009f", "indicator--5e10e2e0-df84-4f3c-9847-182db4a719da", "indicator--70616421-0e41-4cc2-aa97-146055be5a11", "indicator--8712eaae-04d1-4712-97ab-bdf1bf2a8f20", "indicator--14b72221-5027-424a-9266-c8cbf13b88a0", "indicator--1cd3796f-dcb4-4696-a2de-06b8369e01a2", "indicator--2c955141-17e3-477a-8470-8c0e501aad76", "indicator--f98effd3-e777-4742-842d-757b9568d86c", "indicator--573f2115-8aeb-4366-b264-ac336a94ecdb", "indicator--338aa082-b3af-4163-bd27-577e00d71dc5", "indicator--d43ddb8b-bac8-4fbc-b4ec-15f932d1f53a", "indicator--0ee957c5-fbf8-4801-a98c-89090eff16d7", "indicator--988c36b4-eed6-4ba8-84d3-47373948b43f", "indicator--9b322704-91c3-44a5-9727-9da73384a334", "indicator--ac39b3fc-c9b8-4b61-a310-31bd5cad8dbe", "indicator--27dff473-7618-49d2-a590-e14e23a41dbc", "indicator--979ec573-b1ae-4009-9208-9f2970eef132", "indicator--e67d33d6-2fdf-48d4-b93d-82f0cc338869", "indicator--df24fdca-1ac1-456d-a8dc-22430506d44d", "indicator--dddadc76-7e7a-4633-a2ff-a5f7fcd08851", "indicator--0706a42e-3c9d-4f7f-bede-f24196f7b5c4", "indicator--56a012eb-3011-4079-a1c7-684dc343c679", "indicator--0460ea85-5140-4e6d-b6bf-6be761148408", "indicator--7e2d966e-1338-476a-9e12-d05db19eb8c0", "indicator--219067e8-e0ab-4e95-9bf1-a430d7a287af", "indicator--5a961ed1-56e9-4e43-8f11-40c831da813e", "indicator--ee391551-f9a5-4ef4-91c1-4f4812d04291", "indicator--5ccaf45c-39c1-4c96-8b3f-fd8c7d51df45", "indicator--edd18fad-a6d0-430b-8e12-e0b02f098455", "indicator--e782e3c1-7d66-479d-85bf-8a870095b21a", "indicator--48613981-bdaf-4837-bcc4-14176369b49a", "indicator--f0f87b6c-4b02-40dc-bad5-70c1c9733add", "indicator--13287db9-472b-41d5-abd7-f5006028a0c3", "indicator--2b3b4558-410f-44a0-84f4-7e0d236139ba", "indicator--e74f497c-afb0-4b7c-932c-1f6ac381e275", "indicator--61bda71b-2fc3-42db-897b-cb8b387ae730", "indicator--0e8562b6-4764-4f34-a0a8-4f325fab8f67", "indicator--c23b5a70-79fe-4fec-b53a-6f67a526c2bc", "indicator--de265336-50c0-4443-9e28-3fef659e4666", "indicator--7e20b6e5-08fb-419d-a013-ce062627e4c1", "indicator--58cb871d-7237-4ad9-86b7-e4ba2db39586", "indicator--edec3d0f-a057-41f8-87c7-d1ba11bbaad0", "indicator--c70ddd06-faad-41f8-97e3-4cc2bbb1b2ef", "indicator--444120dc-0a3f-4c10-9f57-7f0edcdccc47", "indicator--cdac6523-7ba8-4c36-9363-2a1b0d73d0f0", "indicator--efe9b382-f80f-42ca-b356-c846e9b0feaa", "indicator--3bff6bdb-8e5a-4ce9-b966-aee221b0473f", "indicator--9d33e952-abcd-4ddc-a307-d474e66693a7", "indicator--51b1a662-b380-4e3c-87c7-6e2d886856ab", "indicator--35be2474-97e8-433d-8340-c9f09d7a38a7", "indicator--e84cb4dc-d4dd-4b90-a7ec-c9c26360093f", "indicator--7f1fce08-6572-4d4a-8ad5-16ce7bb9f05f", "indicator--fa1928d8-8c55-4c43-b6ae-2c97b13277c9", "indicator--a0fb018d-263c-4afa-8642-bcd187d0b9d2", "indicator--f1619900-d2b2-4f26-b292-ac10abbcb500", "indicator--c543d4ec-1c21-45b9-a4eb-30e1423a558f", "indicator--77b4cbab-fc66-4193-9aab-e02d8a97dbbd", "indicator--dcdf23ce-4c7e-4ec4-a513-f97b653cda47", "indicator--5e7b236a-345a-4b75-9cc9-5c3668917faf", "indicator--4c07d3c3-3332-4702-bb34-80b14fd83634", "indicator--91051924-5927-4e05-b8aa-acadbabcfa7a", "indicator--30ab7613-e3b8-4a69-b2ba-a3d840bcb422", "indicator--f4b25d13-3277-466e-b691-9878b98e3a71", "indicator--5ea0c10f-483e-44b1-a988-c315d042ce1c", "indicator--e204b5c7-64f0-4df7-94b1-2f78c0108410", "indicator--39b1663d-9147-46e6-b761-d8085579e908", "indicator--139eb534-ee02-473f-b99b-ccce1c8824c3", "indicator--edb21405-2ae9-4f65-8b9d-01e9a0faf410", "indicator--fb7d13ed-0ba9-41ed-b679-106618744173", "indicator--2c4ee772-c7f9-45f7-850c-1a5d9022b7c7", "indicator--055e7382-0ff3-4fb9-9d6a-b013d48592a7", "indicator--240ec945-fe2c-466d-8b82-e93664286afc", "indicator--88b8056a-6c3e-4d86-a9cb-569838a5b3a7", "indicator--2e42b123-9ddc-4503-8564-dc4df3e09cb1", "indicator--07319293-f045-4ae5-aae3-7b9bb2a86121", "indicator--a49fdecf-7034-481b-8717-fb316aa407e3", "indicator--43c84c45-6386-405d-9b1d-63393411e05b", "indicator--e15bc77a-e42c-4b60-8988-e7bb10ba42c3", "indicator--af736c70-5fc8-418a-8561-8f3d7267c0ed", "indicator--dfca0f20-891c-402c-a8cb-aea1e381b746", "indicator--24d672dc-501d-4b43-a010-7ce6b7c8eabf", "indicator--9c89cdc9-d515-408c-8fa9-d3b1fe68de12", "indicator--5382a55f-5074-455a-b121-51d276d3abda", "indicator--cb4bcfc4-b8d9-4f3f-a54c-89f578f806cf", "indicator--cef2c23f-947d-4e9f-84ab-6d13541effe6", "indicator--c293421e-c9a6-4bd9-bb88-fda14d8d65fc", "indicator--c19dc975-fc0f-4b91-b33e-af2e158e7d61", "indicator--9f985d91-1984-410b-8127-6484f3ec767b", "indicator--d4e6956c-5ef7-48cf-8589-4878ccaf6016", "indicator--c1673951-b98c-4ad6-8e07-25dcf9582b04", "indicator--ffb26a65-1f56-4ef1-9c31-d879e5e621e9", "indicator--9c9265a0-2681-4168-ae30-0c2a10cbb3e6", "indicator--0e6c6be4-4766-4d74-86e0-d676d57c0917", "indicator--9d2fa191-b340-4b65-b261-e964244fd3db", "indicator--c95450f9-710d-4142-b114-5de0e5de63a6", "indicator--8217e8fc-a220-463a-aebe-e826711fafce", "indicator--817fb348-67f7-4442-b334-7ce296a6c55d", "indicator--d557e4eb-6495-4d1a-a23a-ea0d6fac2981", "indicator--957419c3-cbc4-4321-a6a9-7fcc425e5f80", "indicator--8dca2ef7-195c-46d1-8932-3fa88b284fa8", "indicator--c3ec0051-fcc0-4b35-a670-faba21b9a606", "indicator--4a3bea2f-3e82-4273-9292-3de732d51542", "indicator--9d67a159-23da-4512-ad5a-f8c0dda8f001", "indicator--4775b66b-7c72-4d3b-b02e-54b409c04f39", "indicator--07038454-7198-4ed8-b642-f0c4f4e5f37b", "indicator--7945ae6a-a559-4be8-b343-1f333df371cb", "indicator--f8e29ffb-6e50-4bb4-8b7c-c2fa1e0b1928", "indicator--5ceffd41-f182-4f1d-866c-000b41acb389", "indicator--5bb31d0c-cc62-4684-8ff2-7a41d216e10c", "indicator--067c6587-cc15-442f-b200-c2f36d0b8ab1", "indicator--ffc415e6-b63f-47c4-8317-5518aba1a99e", "indicator--6b232b1d-faee-43b7-b193-698924670400", "indicator--2733a87e-61ea-4cbc-9bb8-37cf49984747", "indicator--b192dcbc-73cb-4800-a1fe-c0c0e9dd6947", "indicator--a629c7ce-7568-4d63-ac1c-29ba61686d15", "indicator--247e5ccb-fceb-43f9-9a18-94ee0beeb4c6", "indicator--0825cf83-e8b5-46d8-8edd-22614af593b8", "indicator--0eb94579-fa8f-4f0c-ab7d-01b5f9ee262b", "indicator--24f08195-41be-4ed9-94f3-043f2217cb3f", "indicator--686913e1-9b3d-43f5-ae8e-38fc9912e6fc", "indicator--5dca9442-793e-4835-907b-d6d85e9149fd", "indicator--575c4cc0-89c7-4868-89fe-1f04ea73b878", "indicator--f220f11f-491f-4d38-aea7-2dda52d744a8", "indicator--875d6ee0-9e36-4cb4-b955-40355bb4de21", "indicator--7a35eee8-5d85-411a-870e-c73fce7b7e9b", "indicator--51563f20-be65-4cae-9e4f-2eaf70ef6528", "indicator--5652f30c-34b1-4424-9e9b-d3fbe664266c", "indicator--637a78c6-01da-4ba4-b1ae-e8342348b362", "indicator--325a9b70-25ed-4210-a801-fe4951905f5f", "indicator--2306eb46-9004-47e8-ba09-f5fef26a4189", "indicator--2d52c634-1a8f-40fc-9bfe-bb73fc969b23", "indicator--789639ab-7b9d-4025-ac19-15d6704deeb9", "indicator--1bc6ccec-c6b7-4e79-9689-2ac99c25eb73", "indicator--85090123-532d-41c0-b9fd-346661d9f6a4", "indicator--140d3235-188c-4dea-8fd9-c2938f865f40", "indicator--4a13c762-30cd-4886-a6b0-46a600327f94", "indicator--92603ac1-dbc9-4c10-8919-d99cf93952a6", "indicator--7c080283-c19f-47a4-b206-8061e9616121", "indicator--2daf3a37-e2f6-47e3-8133-46373c2edd31", "indicator--fcd9c225-c158-493e-ab38-cbfb7f52bd1f", "indicator--1a88a491-c15c-44ca-8fab-03819363fcb0", "indicator--d5653036-9d9d-4e75-8c1f-bfb6e38c3f2f", "indicator--24aadb6f-804a-4c4b-9137-4f3f485ecdde", "indicator--1d4302e1-e565-4e25-a069-82e0eb79451c", "indicator--a6da8f5c-3f75-4a9e-aeb4-dc575710a8c7", "indicator--6129010c-1a44-40fe-a1b1-9e82bd2d01c7", "indicator--a3e5f7f7-484a-4bae-a188-497d953b15b6", "indicator--9b264eef-4925-4f96-9f47-0239ea801e14", "indicator--e5728480-3928-402d-a0c4-24d7a104dae9", "indicator--d2a3aaec-98f9-4271-99df-af0a3f84265b", "indicator--fb897448-ee82-4d87-9c48-9cc91373f605", "indicator--1cf059a4-3644-449f-a64d-d6ae510ec2d4", "indicator--ee00476a-9166-4c54-b263-ae51f85606d2", "indicator--ecc7180f-380b-4966-83bf-c36d0e4c67bd", "indicator--a50d6f4c-4066-48ee-a792-4b99232477ff", "indicator--aeff1a9e-cc4c-4b53-ba30-2cf575a306ea", "indicator--c8df733b-d48a-4eac-9fe2-0c48aeb3b0a1", "indicator--d736763e-ca85-427a-82bf-4c1d5b6464b1", "indicator--d73686f6-b3a1-4b33-b68f-3ab90caedea8", "indicator--e7d452b5-6b53-4d89-88fd-44a18989b9b4", "indicator--61ed47b8-1aeb-4b09-9805-3cbb49eaa474", "indicator--e7d297d3-3d7c-437b-83c2-65a4ecb51da0", "indicator--0c4ee44e-d3cf-4dda-832a-ba057d34cacb", "indicator--640c78a6-1be4-42d4-8fbe-d6d5e0dd22df", "indicator--9cc0e803-f21c-4577-9cd1-4cf115006b2e", "indicator--f2dfaab7-836f-4527-825b-507a056c25a9", "indicator--0a8c99c1-3c47-4aed-a0f4-e95611b5ec3b", "indicator--5af31f6b-e80b-4d28-824b-9323c7d9cfd5", "indicator--c2879868-1fbb-4d73-9a93-09e8155dcc5a", "indicator--311c9634-9178-43fd-bf0f-5782ed17ad63", "indicator--9a9dfdf5-55d5-4e27-b09d-8ec355e32acc", "indicator--c5691bc9-8f97-497e-a8e1-d1fd12508cf6", "indicator--37a48858-bb54-41f7-9314-6ca9f1a7ddab", "indicator--ad26618a-bde9-4fc0-bb83-45facd0f8525", "indicator--3e6c66a6-b64d-4f28-ab41-147b2948d76b", "indicator--f28eae1f-4e3e-40ee-a08b-430c7f046571", "indicator--33d02a18-92b0-4073-aab8-7fe064b3c232", "indicator--8583b1f3-48d8-486b-9b05-d07cdf0ccbcf", "indicator--64e4cec4-6c5c-4f0a-8bd1-f93e9c6ade1f", "indicator--fd5d9be0-de11-4b1a-934d-c7022d18c840", "indicator--d4e2332b-e5fe-4244-a452-22a465271016", "indicator--b3bb5316-452d-4f84-b639-724ea4fb4e29", "indicator--a895e0b3-33b3-4d0f-b0b5-0c03a2b070e3", "indicator--4268f09f-aadb-424c-87dc-4f004cd6c286", "indicator--f7b9ccc1-b4f0-4909-8ef9-76d70716ed60", "indicator--16eece29-9ea2-4cb7-bb5b-bdb54b291e9b", "indicator--4dc49934-d7f5-4d2c-a7a0-3630d9516df5", "indicator--6013ae0a-aed2-4d4f-b062-ef2b657d7713", "indicator--e83d5718-9470-4ddb-af3c-41e3dad5b126", "indicator--9c1daeb7-a9ea-4591-a0fe-18b4786f9ba2", "indicator--242ec82c-6b64-4dc6-a820-4efa92f17fac", "indicator--b1cc4037-9f9f-4feb-b3c1-3e1184551718", "indicator--84314046-400d-469f-832e-0317b9039392", "indicator--ef5a333a-ace1-4ff2-8bb4-3c978a50ae67", "indicator--1f348de5-6294-4c0c-98b5-28e1cf87fe93", "indicator--bec57089-ae96-4ed4-b909-ad1c0b84a919", "indicator--dd50a180-ea2b-41ef-b2ef-a39b4c84fd66", "indicator--5707a964-13c1-48aa-871c-2919d1580183", "indicator--24f33296-7f16-449c-ab29-49c8de73b4df", "indicator--3fa2f704-9751-48bc-8dc3-99c67ae75bc1", "indicator--863ea5f6-6fa6-4479-815d-71de090792aa", "indicator--9b3b359c-5deb-468d-909b-871cb26ade2b", "indicator--6f00f908-4571-4377-9090-d42a4f0af28b", "indicator--fb63a2eb-c12b-42e1-b4e8-25e2936a02ff", "indicator--3cbad259-2366-4968-8389-e12520f314f2", "indicator--6b5c7c0b-2134-455c-a1ba-4098d83d8d45", "indicator--5af5aefc-a4dc-40b7-8ace-866bfbbe01b2", "indicator--145fd0a8-51c0-4e3c-b49a-163288cd122e", "indicator--966e95cd-bf0b-45d0-9859-40871ece975a", "indicator--d76b55d1-76ab-44b2-9c97-6da7b49cd581", "indicator--3ee01fa5-83be-4838-839e-c50e2154cac0", "indicator--f5598d0b-22b5-47dc-8a44-b73ca9be3502", "indicator--6d991028-86e3-4082-947e-07fefeab3170", "indicator--5fadff6c-a82f-4251-ace1-50e22221b31e", "indicator--85d4ded4-beeb-4fba-b0d0-89309198dc14", "indicator--8f56255b-3e84-4773-bc3a-930f560f6024", "indicator--50fe17f9-5d03-49c2-8f06-425e447b3d97", "indicator--bd948076-cfe7-4f4f-8fb0-cff8216ccff6", "indicator--79614be7-0a5f-4d28-b6bd-f4b0cb99d5f3", "indicator--3404bb3d-d139-4ad0-a87c-e87e73c747d7", "indicator--7260a4ce-be02-4e55-8d1e-a572103c15a7", "indicator--94806ab3-7fd4-4ffa-a5c9-af4beefcc8db", "indicator--7a716bf4-08ff-4eb0-846c-6c6aebc43e29", "indicator--ef54607d-1e69-4905-ae92-927ff8e2337d", "indicator--c1752621-1217-4aa6-a5c2-18ee428447ad", "indicator--10c32c75-ed1c-40ae-a853-7caa9f68ead9", "indicator--f2e42388-6b68-41f2-a63d-b1c721eca8b0", "indicator--ee2f6e22-574f-452d-9f10-1eb7f285d0c6", "indicator--09e7dc0e-a066-4810-827a-5fe433090c77", "indicator--c7043b4e-246e-40e5-b16b-099f93f10f0c", "indicator--9caa0977-f80f-42d2-8b90-509200c3a900", "indicator--6b7892b5-ce42-48c9-aea3-9e0a5c682958", "indicator--54915d02-d8d0-40eb-b16e-a5f9a364b206", "indicator--cec612ee-9369-40af-9643-ca4415080367", "indicator--cf876ec6-9af5-43ff-bb66-f707d14791fc", "indicator--61b8569f-9ae1-4ed5-b57f-9221bd7b90c8", "indicator--e537080f-5a41-453a-99ef-058ab597578a", "indicator--091ae75c-0441-4f8a-86c8-cab0cbfb6c2f", "indicator--bbffb351-8778-43e0-9e8a-cffdc9bbc414", "indicator--67142f24-0df1-4ffe-bb1b-6ea9d7975fe1", "indicator--158264e8-ee5c-4d7c-80e2-621709467dd8", "indicator--20cdf2f4-2412-496e-978d-c746721a7b0a", "indicator--f6ec04e4-0a51-4a77-a26d-b078b28236ba", "indicator--82003d0f-768a-4da9-bc5e-cbee15c3273b", "indicator--8c9ea422-8109-4e79-904e-c46848e318b2", "indicator--fdcef3a6-c1cb-45ec-8338-c1ca51c2040a", "indicator--cc0db8d0-bb0a-401d-865a-6d6d238e944c", "indicator--3ae5d809-8572-41ec-9690-1e9952654966", "indicator--a37b1780-17f7-46ec-95ac-6f4f7457e6fc", "indicator--1b5656fe-af16-42af-a09b-12ce39a830c2", "indicator--a032b3e1-834b-4c6c-a757-898720512acb", "indicator--93847a12-173b-4c1f-800e-82d8cc8216d3", "indicator--4b1ba79d-dba1-4a79-94fe-510ccce2aef6", "indicator--ea5560bc-c345-41a9-8853-367353527dc3", "indicator--92ba2760-fd40-4c65-b1b8-7cb39c24b660", "indicator--1a316ca2-5987-47fa-ada8-0b8e79c1faa7", "indicator--f2533773-c6f4-47a7-ac7b-d3fe58bb66d1", "indicator--48717683-e75b-4591-8114-4df1ab633e4e", "indicator--09f5df67-1f93-4af0-a477-a0a3926867a8", "indicator--c81a0a3a-820f-48b7-aa05-52f652511f9c", "indicator--01fc594d-681b-4fde-af16-9056f93d2a1c", "indicator--b2bd0856-ec56-4776-b757-086769371af5", "indicator--108ccba0-7b0f-47fc-9937-f7aac2aefe49", "indicator--75e1b64a-f5b5-4225-845d-fb03abbd195e", "indicator--d7331b65-aa7f-45d9-a48a-b2c31b05bf7f", "indicator--609ad75c-f781-4d09-a497-d1afa3b4d5df", "indicator--c9be6e48-0e07-4946-a324-7316991c57c2", "indicator--a0351c01-416a-4db7-a608-14fe79f485d9", "indicator--6a5f83ed-ea81-4f3c-98bd-679a4483ddd1", "indicator--2cad2a10-bbc2-4062-b364-8c23d30eb574", "indicator--ce46005c-c6fe-41f9-9e8f-7b1fe9ab3d64", "indicator--1fa32997-a528-4314-afd9-3926c4ae4529", "indicator--ee38ccfe-bdd5-48f9-9756-3e11a7a2661a", "indicator--39effb3e-4283-450b-8aa3-f9d9827b7165", "indicator--d3428517-ac66-4aac-afe8-55db4b8991e5", "indicator--0331f61f-8e0a-4d8e-a373-4069e48e5ba9", "indicator--9cf90e33-9b1d-42a5-9ad6-c1bb2b2b2f90", "indicator--5e417e11-1eb9-45c3-a809-91939f4ae4d0", "indicator--1bdaa3d6-c5d4-4f6a-9fe9-34fc4624bb8c", "indicator--9d1c3d38-6fc0-4f12-a48c-806f13518ce9", "indicator--feb0393c-642a-424a-8cbc-9f8ea25cdb69", "indicator--8290fefc-17f5-46a6-ad3e-6c2bc9846794", "indicator--ba56a8f6-746f-4331-b6ab-ae797d5e0874", "indicator--00c69f7e-0af7-4cf5-8bea-a941fbdb71c7", "indicator--a53403d9-e616-41d3-aeff-b3360183c5b8", "indicator--450fe5db-079f-487e-bf82-e495c70c8217", "indicator--b4bb759b-874b-484c-8a0d-5ea4e97a00ab", "indicator--e634c44f-b6f3-490b-9ce8-d807dcb55ecd", "indicator--d19eebee-7674-4a36-b699-b485dffda822", "indicator--9d4d4ebc-53d5-492f-affb-3b0b1ba5ba21", "indicator--2e08ac8f-c0f5-45f3-ab08-0e9b497cb9ba", "indicator--5eb0807e-ae90-4ccc-a602-b556b4ecd1ba", "indicator--1758e7a6-680e-4f06-a6a8-f05212c44f50", "indicator--31a3044c-3e0c-4a68-a499-97d1508eaede", "indicator--289a2f81-c15e-4e97-a215-e447a919f5c2", "indicator--4cc4900b-2ace-4738-ac1d-b067306f6e8e", "indicator--43685eb0-5ed6-4730-a1f5-47e635bec792", "indicator--e7e7b1eb-0c9c-48aa-b0d4-c99331c2b532", "indicator--83c2f583-2a4f-4ec7-8bc4-c10a92f1ee01", "indicator--e858dbe3-59bf-4c52-8bfc-4eb2304a19ef", "indicator--4a09aa23-f9f9-4789-b48f-62de5df09cea", "indicator--d50824b5-8b0f-4f9a-a3ff-f400173fddd1", "indicator--2c7619b0-bf9b-42eb-91f3-74e684119c7f", "indicator--06855963-118c-4b0a-b6d5-def768c199ee", "indicator--299829e1-232f-4a45-9a8b-b42e66c9de5a", "indicator--69d897da-d20f-4643-950e-2b27f4c6a5f2", "indicator--7bb8c0b5-d568-4e2a-8e70-062471cfc389", "indicator--e05e1e3f-222a-45fc-8b65-94b5975ec9b5", "indicator--c81c7824-28cc-4862-aa2f-910943a9611b", "indicator--dafbde2d-c49c-4047-bd70-2089ad3090f6", "indicator--c1851509-09fc-4157-a98a-c9cc23e4e027", "indicator--f4904c4d-18a7-4a3a-8f0e-64a4001e8842", "indicator--7a69f543-75b9-4954-a3c8-8560d46ced03", "indicator--4bba262c-a0a9-4728-a8d0-2f92f3775c32", "indicator--a859915a-7af5-4e7e-b049-9b8f64cf5f64", "indicator--c041bbb4-53e7-4899-b9f6-b92227d4a644", "indicator--f608d634-e6c3-433b-abbe-07a67dae3f54", "indicator--4f7c4168-db67-4aaf-8406-0991f6590b03", "indicator--d42f0dca-291a-45c0-a250-7976c99ec189", "indicator--f5f55419-c720-4052-ab00-dd3c1e3b2868", "indicator--4a794b63-f0db-495c-9cc1-a541a61e2c39", "indicator--8127fcaf-c41e-4ca6-898b-6c3a3b2cd75a", "indicator--e81dc01e-f43d-4964-a521-4c60477fb395", "indicator--062de773-563b-43ab-bedd-668dc9f52621", "indicator--83e55b19-3953-4a1c-b514-e7e64e28d2fd", "indicator--28373823-c6d5-4da1-9cf7-ff7a05620a14", "indicator--67985e70-ecff-4f73-9358-5492d81d032e", "indicator--def855ca-fdd0-432c-8157-c609e33ef395", "indicator--42e6d867-1143-4fc8-8e2e-e20ec17f82ef", "indicator--0849d3fe-7f9f-4994-bd1d-535f3a3ffc1d", "indicator--327f5b4c-8b23-4d48-be38-21e77a11be16", "indicator--7b7d4f1e-103f-4b7e-ae0c-11a82818a114", "indicator--09829bd4-5ff3-44cd-b4d5-a080e0a83411", "indicator--b8cd8f4e-a73d-47a8-9fa3-3c7fce68c325", "indicator--cbdc9870-7429-40a6-b183-5078fecf2854", "indicator--396e7473-c630-41b1-9ba0-529f35e17157", "indicator--f1b8a8ad-0631-4d57-99e2-c43cd154b4ee", "indicator--d53fa20c-8775-4b3e-830d-8bb7d0375afd", "indicator--247e4894-160d-4bc3-8c5a-2ff8c520e5d3", "indicator--016b3437-d0df-4882-9b91-9451efc8abec", "indicator--306cf8c3-fa92-43ce-b486-9b2d1d4a10e6", "indicator--82bdf212-2eb2-4fe5-801f-d68f4187ff91", "indicator--d8bcd02f-8728-4245-bde8-3d2d472b782c", "indicator--66556583-ba7f-4e54-a88e-3db75218dbaf", "indicator--2c4e7733-918b-4cfe-9025-58fe9d7711ce", "indicator--421946d7-8773-40d9-9336-c3cb0d5c4f49", "indicator--481ca315-8c30-4699-b9ad-43055f1302b6", "indicator--28cbcaf2-6bfb-4690-9b3c-319226d3d596", "indicator--214bdab8-008e-495d-8c56-7ac967f9db2b", "indicator--e95b2743-2750-4666-95e7-a9a975c16409", "indicator--e34823ed-5c92-4cb0-88eb-be99afab5065", "indicator--42893328-f0af-4202-8510-4d7edfeb9117", "indicator--69769228-3684-44ff-9dd3-3135fd20678d", "indicator--10ebb9fa-c3c1-4921-a615-70eea1a9e63a", "indicator--08495301-d937-43ea-a35c-0ba358e91b95", "indicator--a3dff02d-51c6-40b1-b743-0cfe0bf92155", "indicator--f1e3b43f-0b41-4ee0-a6af-8e04416cd245", "indicator--af0b765d-e40a-462a-af09-f2e5583e3a6d", "indicator--f515013a-c9e6-4016-b91a-0182fd651e83", "indicator--ac6b16fa-8a31-441c-84d5-e86bd81a965c", "indicator--e461cc7e-5842-4e49-a00e-8fc4c4ceebbb", "indicator--1db501a5-568e-4535-92d3-815704de2bca", "indicator--8aaabb20-21cb-41d0-aee6-6acb70eb8acb", "indicator--b9a83661-45fd-4e6a-ba68-bb4096bc7d0b", "indicator--f0aeaefa-0ca4-4490-84f3-582f4d38d38b", "indicator--f3f13fb3-0444-43c2-a504-82f1f0458ff0", "indicator--ae464636-d676-4f41-9ff6-8deeed198983", "indicator--b967698f-13b5-487f-b810-805c83290aa9", "indicator--5a190c84-23ba-45ce-a61b-79a1ec5b6d04", "indicator--0bb4ec45-a224-44fb-b235-c68a4c891e32", "indicator--b4b362a7-200a-430a-abbd-9dcc64f99419", "indicator--2148f236-1872-404e-aef7-bedfe82e29d7", "indicator--49041585-b9fb-4690-a16e-acc67f220c1f", "indicator--cb72436a-2c09-4c4d-bb6f-aff38d98604d", "indicator--32bf61c3-b7f0-47ed-bc9e-ff6ff725607c", "indicator--5c60e333-eccb-4053-a639-aedc944bb444", "indicator--31ab7f70-a146-4e4f-9817-e38c189ea564", "indicator--1c6db099-1a38-4704-986d-c2773a67b54b", "indicator--9acab6d8-0a17-40b7-b6dc-de0e2368f42a", "indicator--8c655395-5be3-4d9a-976a-d366f527dc8a", "indicator--aa2ae955-0af3-4196-bd65-f7d3aa3fb093", "indicator--61d54d90-b704-4d36-a069-07fbf2fd7fd2", "indicator--f136a9ad-51c1-4af3-9b2a-a7c4e29c84ee", "indicator--1f826a43-ab73-4bc3-be76-0f5b4077b084", "indicator--05335bf1-0c07-4a9e-8a14-7003b4e5924f", "indicator--050ba679-18ec-4f7f-a540-95c02862c543", "indicator--158cb517-2956-4d59-b078-8fb7854b1409", "indicator--20b2a85b-6879-404d-baaf-17094ae2c9e3", "indicator--c44fb784-d01d-4369-8721-a9ac37b77e5a", "indicator--fd12355a-dd94-4d2d-b8ab-e14f81b1358f", "indicator--ffba8755-6eb9-42d9-9caf-1416ac12abb7", "indicator--247a8ea5-4871-4803-a65a-b517d39ed9bf", "indicator--d2ee258b-dfe4-484e-a6ff-391153dedf4b", "indicator--44db7a71-dfd9-4451-ad4f-3b9eec68f19a", "indicator--9113ed63-8375-45e1-a0a1-2bbb0d0d7a68", "indicator--3464e902-5931-425d-ba76-93cfa1fda77e", "indicator--d06d7e88-4725-4e0e-ab97-afaf7ab6ae4f", "indicator--6e67a776-93a6-43c7-bd26-2a1dbe129c3e", "indicator--1fc5a67b-1135-4cea-8178-78d8b2992a1a", "indicator--0101694d-b317-4d62-aa60-a44ad6e79024", "indicator--10d01d5c-1eda-47af-9333-f1ea42a50f5a", "indicator--39d39090-673a-47b7-ae4f-319ca7c1503e", "indicator--7e2fa6dd-7e38-47cb-aaa2-0ffecd1a35a7", "indicator--c7a07c02-1710-45fe-9852-5409634a5bfd", "indicator--d7288c8b-7b71-47f3-b461-49b5f5b5cf00", "indicator--10ca3ced-5c87-4947-ad2b-e388bd470776", "indicator--6edb3e00-54cb-425e-af94-d21b67614779", "indicator--70861214-296a-491d-ad79-a0288320ef2a", "indicator--bc5cea99-52c8-4381-8829-6efaaed8c516", "indicator--5e693259-cf55-4655-8a20-add3282daf69", "indicator--c0eb50d4-d1b0-4071-b26f-67d8252b1333", "indicator--ed39fa05-d338-4e48-82ca-17678c125a54", "indicator--abed30d3-138f-4437-8522-e5f2525af3c0", "indicator--48012127-7ad0-4eb8-b42e-d11a8bd65732", "indicator--805be56c-fc4c-4477-9525-d55f9a8a4a2e", "indicator--87732ba3-11db-4981-9d45-c1d2b7a98c28", "indicator--cb113470-30ef-450d-af10-089d967f88b5", "indicator--72cd47c3-ed79-4080-bd21-ea6724daf7c1", "indicator--ea382184-9883-4a2a-9d9f-b38740b32b9f", "indicator--dd402606-de89-47bd-821f-a4445337e441", "indicator--80bb6215-86e1-4073-b633-4c5517f78255", "indicator--72a36db8-149c-4ac6-bb61-552e8257499e", "indicator--b7f5aa8a-d099-4ea7-978f-7d9938f49f8b", "indicator--fb166f3b-b44d-4582-8e8d-4406c587e086", "indicator--de4ec458-2c2c-43b8-8fd0-e59a95ca6ce7", "indicator--e78e04b0-d413-45e4-a3d4-677e64bdaa1e", "indicator--1b7ce7c2-3187-420f-a728-621c357bd0e7", "indicator--3215fd88-258b-4065-9f34-9bd466f5bdf7", "indicator--18beaf7f-2637-4261-beff-0cf353923398", "indicator--5ed1d4e2-e5c7-4484-b623-376d785ae4b7", "indicator--0c7f9608-868f-4dd3-b3b2-6168d4fb6a2f", "indicator--be857834-3208-4332-b639-0dd3935f9f0a", "indicator--5139ffba-653a-41fb-a754-0a89b5ce1d68", "indicator--08a7938d-b109-43fc-b639-f69e24092cfc", "indicator--5994545f-1a5a-4596-b2d4-c0c13b636707", "indicator--79e5680e-db70-4526-a4c9-894e23ffda72", "indicator--4ed024fc-a7f0-4d9a-b750-e17c7d688f9a", "indicator--a8d1595d-87a8-4ad3-ad4d-541188ffcfd7", "indicator--f6301a15-cdaa-4f51-aa29-2a142220ffea", "indicator--cea52bf4-5292-46ad-943e-8644a3fb9df5", "indicator--b89c2f3d-32d6-4961-b1b8-3825904a7490", "indicator--df1222ff-f72e-40b9-b614-8b10e5900abc", "indicator--d6d3cf3f-3959-40b0-9bb1-fed58965e174", "indicator--c327e18f-a853-459f-9d95-97caba66f79b", "indicator--dd32cc3a-b4ff-44fd-9c25-0cb542a48e72", "indicator--fc555af8-bd13-4ae2-a03b-79dbe9c679ea", "indicator--e7f54ad3-27cc-4b56-b084-54af5c433373", "indicator--f545f2aa-ee07-49ce-b360-94e39d320646", "indicator--75f93024-ecdf-405f-a9cb-565048061458", "indicator--6b26669d-071a-4bf0-963e-2bdb713e853c", "indicator--9037c4e5-3631-4437-b940-0b1da1e6605c", "indicator--91e2bfe3-84de-46cc-8484-3686801aaccf", "indicator--43ccb0f4-af12-4977-801f-25afd3f4f931", "indicator--01ee596e-6fab-4e44-a3c6-27b921cf5f34", "indicator--5238dea3-34a8-4d9b-8e94-c08c928e603a", "indicator--806d794f-d295-4377-9849-979c46415fd9", "indicator--cbd4c786-d606-4811-92c4-e4421f4c6e35", "indicator--6de13974-7de7-4f3e-b069-d0dc6b2ff287", "indicator--1655b4c7-945b-46bd-b8cb-e05005ce4c05", "indicator--ecaa8601-1d02-41c1-9194-c97a72cef5ee", "indicator--b2facf92-8743-4320-98e9-979071e515ab", "indicator--2a4952f0-5db3-4bbe-9761-042d5bf597d8", "indicator--18a49651-90f0-40cb-89d5-de3313ccd865", "indicator--3bb1e888-fc10-4587-b7d4-dd522ff2529a", "indicator--7c9a0fb2-0c70-4702-93b0-3340a67f91c0", "indicator--31e2d62d-7989-4d32-a2c1-7fb002142d63", "indicator--452ebc2e-fd10-4579-99fd-ffc26fff9172", "indicator--1383728e-7cea-4877-93f4-8ba534680c55", "indicator--ddb04dd5-5d35-4613-89bf-18b207f9a643", "indicator--185d0628-c8ba-40f0-9746-caa5e525dd20", "indicator--1817f072-a5c8-4455-9caa-897536d10564", "indicator--61c090f8-24ff-497f-a7a8-bbe9b117b8b9", "indicator--248835f1-aa60-406c-8ee6-3b1adad7ab2a", "indicator--27a10a7b-15b6-4f0f-8b35-3e128bce8595", "indicator--a93084e6-70e2-41d8-8fb8-728af2cbb231", "indicator--621a9b9f-a6fe-4a44-a2ae-5675b7beae7b", "indicator--a744d813-75bf-45b3-8935-411077525318", "indicator--18381df5-1e77-42b5-8956-a9cd1cd6ae9e", "indicator--28c81981-393d-43a2-b3a9-0fa14f96ec53", "indicator--0cb01d52-1627-4fe9-a607-5f5295547f49", "indicator--647f7a5c-efb1-42e3-90bb-98ae91f1c92b", "indicator--6d9af1a3-a8e3-4f23-9cb2-c4f19a7861ea", "indicator--948ab7a7-91bc-4865-9d9a-fd8790737474", "indicator--d263f315-a132-44b1-acc0-2cf488d117f1", "indicator--cccb4b44-6bb2-459b-ac7e-5492590ff810", "indicator--8ae4ce15-fbff-4507-8976-92eadda14aef", "indicator--17372608-d9f0-4207-a56c-0f0c4dea71c5", "indicator--08748c33-7460-472a-b6f2-d43a15f993b0", "indicator--b7bf2144-e0c6-487c-8fa6-ced52d491628", "indicator--d59205ad-44e6-4708-94e1-c1e572094bc4", "indicator--62a9c06d-e7ec-4410-8e68-f7e9f01718f0", "indicator--b3ef2c9f-0a61-4d3e-a099-0bd4bf7979e6", "indicator--246ac5d9-1f0c-4f64-a76f-fb9dbcefc333", "indicator--b57d1b95-91c6-4daa-bbd6-3ee2aabf294f", "indicator--7a8980ac-5850-4dcb-b262-decbe1db4f8a", "indicator--de07529f-09bc-422b-a30d-e0bbdc39ef44", "indicator--fd39cf43-cf16-4a17-bacd-73d06925e1a2", "indicator--e7884d25-9a84-4ea1-8851-a32eebba0bcd", "indicator--8d42f086-d362-4094-98c4-5362623357cc", "indicator--0e752448-d931-4f25-a2a5-a6e83fa3255c", "relationship--59f59260-2b2e-498a-bea6-3afa428e11d7", "relationship--1ccbfb96-d0db-49e6-b64c-b3107848034e", "indicator--68121536-e032-4b0a-ac0d-337b771a4e60", "indicator--083c7afc-18ea-45d9-896e-d8b0708d378f", "indicator--18d5644c-a11e-45a6-bce2-213d7676eb8e", "indicator--d8fac7ee-3723-4bdd-a500-2c3f0aead15b", "indicator--ca8b397a-e78a-4793-999a-c9301f3d158c", "indicator--1d92a7a4-71b6-45cf-9902-228b34b9b8eb", "indicator--0558775c-dc7d-4a43-a662-5d98af23d756", "indicator--0885a44e-fe6f-4085-b7c3-16680560b38c", "indicator--75fa6eff-afd5-4a39-b8d7-73aabe3c987e", "indicator--8033e5c2-e004-4920-b10a-c066a86c7cab", "indicator--6bdb9c9d-7ec3-4b30-91d4-835206e91e99", "indicator--9c8d4441-b5e9-4355-85e0-6090aaa983e4", "indicator--5ba34c16-7fd1-458b-bc96-4264585f4cae", "indicator--81d07355-f995-4f7c-8357-f7e39c93237b", "indicator--fe627bd3-135c-4fd2-9475-8ce75c5433d6", "indicator--13da691d-79a6-494e-bd12-58ae75242b9b", "indicator--896aae72-6862-4a57-845a-2101a1e65335", "indicator--a6923769-18dc-483f-a461-5273353de766", "indicator--312a2b34-469f-4cb4-8cc4-528e42a978bc", "indicator--2fb51b36-61dc-448f-965a-c0131600c8d6", "indicator--369cf743-a5c0-441f-9d17-56a434b64ffc", "indicator--fe6e7a03-8575-48fa-a725-aa70feba668b", "indicator--93068d3c-5017-4a2f-acad-bd8d7633a672", "indicator--baaa1928-1ed3-4641-acfd-b48743e2e128", "indicator--270f275e-0e5b-4c1a-8062-7368432fd0b4", "indicator--436c55c6-4d57-4322-8d35-64f97dbab1f4", "indicator--9b5e3da0-f558-4ecc-8f15-26074f4e007e", "indicator--92aab19f-3455-4313-a753-a961e1efa761", "indicator--9458336c-45e6-4b1b-bd7a-3d613078dd8b", "indicator--a5ef650d-9441-400b-bc00-a629de85b7ca", "indicator--53ba0c18-b635-40b4-bfaf-8dc490f0aeb5", "indicator--9b0425f3-7f49-4d02-a502-9e0024a4f3da", "indicator--a8bccdf5-5f23-4d51-98b7-16e5d1d4543c", "indicator--877a7515-9d57-46b8-9dc7-c73a84d2dac4", "indicator--ff8669b7-74fc-4682-98ff-09023a664b88", "indicator--c100399c-78c6-4b47-a6c2-885928a95a07", "indicator--e7be67c4-0811-4314-b33e-d20f1420629f", "indicator--eaaf976e-1031-42cc-8077-443f05f39ea2", "indicator--c3e5b5ae-5872-40d8-a6c8-2472fcc10496", "indicator--fa4e58f9-b26c-46c4-95bf-b97257dc9ec2", "indicator--ba4a6167-c83e-4ea3-80df-b2de23e38eaa", "indicator--807fd24c-b236-4f64-8c14-b8e649c9fb3a", "indicator--32273db7-d81c-4244-8e5b-53c10f46c262", "indicator--bad34645-4599-47c1-a49a-4a7de06253a8", "indicator--41e53f8b-18aa-4533-a984-4c09b4862c88", "indicator--81836e84-2680-4858-b752-c16571116ca9", "indicator--12314d57-b0e0-4a7b-8814-f2067fca1dc6", "indicator--2faa16e7-3b8a-4c73-ab7e-3a47f732b5b7", "indicator--658527c2-0a33-47ee-a0ad-dea378ce06ef", "indicator--1e3e7a0c-2763-4be0-a5b6-1bef143f7db4", "indicator--d179988d-3a5d-4397-9699-11539d49da48", "indicator--6e93099e-511b-490e-8561-276c90e942ed", "indicator--592d09dd-7fbf-4e69-9bdc-2f66a559e6eb", "indicator--869a9522-aa4a-4157-9ac6-c638106e56cb", "indicator--7b63305a-e1ef-487c-8dde-97e9db2eb079", "indicator--e6cf12f7-67b5-445b-b17c-f3995e2c5106", "indicator--fa1291ae-92d7-40d6-9e44-7d9f7949ed4c", "indicator--9b8f058c-8898-4da5-9385-b54e772389d8", "indicator--678be8ac-fcfa-4b41-982d-7b73f8663317", "indicator--2c5bfbe5-b529-4dfc-8c34-86343ec43859", "indicator--471cebbb-b1a0-4389-aa8d-f603e0e1dd04", "indicator--fd338e6a-9aec-42e5-9639-93f9ac1b508b", "indicator--548477a7-83d4-4af9-b196-6026d98b5f1e", "indicator--b357b680-fa5a-49b0-8b16-01ac3fd76574", "indicator--3efa4503-e74f-4801-a3e1-5b5f4faa331a", "indicator--b44fd6ba-08b9-48c0-a571-e867f61bdcc5", "indicator--2292d235-e3f2-4fb8-9449-e7ad80c7a92b", "indicator--cd49eed8-abe1-464d-8c0a-454b0e0b77f5", "indicator--b0faaf30-f180-468f-a673-886fdb1d44a7", "indicator--e572ca38-bca3-4676-919b-dcadf2b3fe08", "indicator--c5b4deb2-2c19-4a05-84de-cff97c1f184e", "indicator--d1f1147d-c174-453b-af21-98221388e9a7", "indicator--de330676-dca2-40d8-a35d-77f28ee280f9", "indicator--1ada66fc-a54b-448b-a1d7-9175b00631ac", "indicator--af7743d3-6bc8-428b-8d50-98053c8efd64", "indicator--ab778779-5e5b-4618-a1ed-e69d6e1e1342", "indicator--6e7f7715-7f8a-4396-a84e-3544b4314571", "indicator--ce48732f-590a-43f9-b3a7-036fb9a01d36", "indicator--c526860f-660f-4a1c-b18c-03c462757438", "indicator--1420de56-f6e9-4686-823d-a502598f6aeb", "indicator--cd7787f5-918a-4a1f-b30a-c03eea63c74d", "indicator--6209a9e1-9089-4dda-b85e-3c85c40ed20c", "indicator--3e3f96e0-ec2a-4259-a2ce-067bf0a0e79c", "indicator--9d1a6d3c-37aa-4ef2-b6da-336c0b58fa88", "indicator--433423e4-e088-4a24-843e-ec1b163e6f26", "indicator--d60a5dcb-dd2b-4752-a6b4-833b7c6d0882", "indicator--bc364e0f-bc13-48e8-be84-d457710cb7ca", "indicator--ec1bb778-193b-47fd-80e7-3b77364664cb", "indicator--ff3608e7-c01f-4d22-9298-6dbaad79c532", "indicator--3c916752-97b8-4eb5-a91b-35f1e9efc892", "indicator--17f3b9fb-0c54-4417-850b-afb2cd5d8c05", "indicator--a607e550-a2a0-4359-98f4-1a3e1a2c1927", "indicator--85c9246e-6b95-4392-8a69-263d95ee04f3", "indicator--f7932f7f-53a1-4c75-a05a-baa872d122bf", "indicator--c848ce83-a786-4350-b12f-77484f9d43f4", "indicator--84f1f4f0-b6f9-4649-b15f-689945d950b2", "indicator--de6afde8-ff0e-4847-929d-6bd53ce4404b", "indicator--8e585575-1624-4b87-9656-b847ef595049", "indicator--6fd5ea81-bfa6-403c-bc84-00655a964d01", "indicator--625269ec-3e88-4237-8393-3998425923b2", "indicator--716e4e50-f730-46bb-a33f-e2e763fea0be", "indicator--a3aeb93e-3b71-4266-85ec-cdc5a9f12218", "indicator--c30dff70-6299-4927-9b96-9ea80e18451b", "indicator--ba4cbf7c-e3fb-4d81-acad-0f003cc40b83", "indicator--e250c015-2397-4a7d-9847-c2e8f3a0ebdb", "indicator--ebd2d076-3dc8-4bf2-83a7-9f2b00e6f27c", "indicator--a9e7a97c-0ffb-45f3-86c2-5ffeb2122e12", "indicator--dfe757dd-b291-4b3b-81d6-43c53cd46e92", "indicator--b4e6140c-c0da-4d60-9ed1-ad11524fc665", "indicator--97d44d0f-b867-46cb-8842-df1f26292a44", "indicator--6ea85100-5c5a-4cc0-a833-8afa0f86d7b5", "indicator--6c86d3d9-5afa-4c95-8610-db23ee45a03f", "indicator--8b5f48e5-92b8-4e21-b2c3-860ff0b05e6c", "indicator--1dd1cc85-29d2-44e5-a1f2-451e78127b33", "indicator--e2b3f0e6-9d21-44cd-aefd-17e673ff0e70", "indicator--4b174d7c-fdf5-4ef1-9841-dbd3ddcb9258", "indicator--c8b266eb-728d-4707-831e-593119dca944", "indicator--a2bf0af6-f31d-4ece-94af-c80b82a9d706", "indicator--a6692775-ccff-4a93-85ea-1caf78e53053", "indicator--760b2aa4-73fd-48a0-a7e0-35b580501f03", "indicator--b11ef8c6-bdcb-4ac5-a810-34ff7b2b3428", "indicator--97f13eec-c4c4-4abe-85a3-49a3b6f33ee7", "indicator--cea30397-ac4b-4991-a612-dd4a62d275df", "indicator--5f97e9c9-bc2c-41b3-9583-9cfc198c5992", "indicator--b23de41c-a3f3-4385-a70b-aa97337f7a34", "indicator--ffcb4830-6bfc-433c-b0d3-5eea1443ebe5", "indicator--965fac85-9c5f-4f58-a6c5-5e1bea67b77d", "indicator--eb0f50f5-a76f-4640-a74a-c292640acbc8", "indicator--eee6d7f7-3fd6-4358-9c3f-6309a3c3c57f", "indicator--321f6902-d1a2-4917-8904-37cf675d4f96", "indicator--6748ef5e-ca70-4de7-84b4-949e93a09a60", "indicator--7e80ac39-28f1-415c-a5d1-9fcd5e417ee1", "indicator--8be46493-cf0f-4ce8-ba5d-aa5dc04f6aa8", "indicator--12cb50b6-bf7f-45dc-9df4-6db0c0625b8d", "indicator--f4c5a1f5-0319-4ad6-8c86-5fd6b40daf06", "indicator--de2e683a-622f-42ee-a3c7-6039a21e2530", "indicator--6ecdaead-ec44-40a1-9940-66dfb92db640", "indicator--4efb644c-85be-4824-be6a-7b6c5103e14d", "indicator--9cb0b1ae-081c-4d44-b5d1-c991fa11412e", "indicator--df9f4ee9-2418-4489-91c9-755f2618898a", "indicator--868e8609-3703-4c40-8f7c-608d738982d0", "indicator--c09c1907-b3ef-47c4-81ce-02912279d465", "indicator--01df2286-9c3e-411e-8c07-e9a03a40ffd0", "indicator--457f375a-ead6-4a78-b9f2-c65bf838ee4d", "indicator--d88073e8-8670-4a6e-906f-071415b862df", "indicator--6b22548f-8caa-4c86-83a1-42cfbd0a7495", "indicator--fc8ba4a3-cfed-4ad2-8dd0-bcfa4ffb05ec", "indicator--6b68e236-f9d6-4f94-949a-4afee8ca4b57", "indicator--419d156e-ccee-4bc9-84b5-73e3dc2e0a1c", "indicator--81ebade5-b489-4f35-a68c-17dcc4fd4d9f", "indicator--eeb85837-b609-4fda-9d67-18f20df54955", "indicator--d8329a8e-7fe5-4114-91ef-36cf2fadb029", "indicator--9a41363c-ff2d-4e75-8bf9-68a0dfda2c82", "indicator--8812d0ad-60de-4437-b88b-78c03b770f3b", "indicator--effc105c-a105-439e-8e14-f0e5db598394", "indicator--c9625977-0585-4c9b-bdd5-bfd891e28636", "indicator--a98a0043-14ca-4d4e-92ec-9b7adaf956a8", "indicator--75241ebb-f01a-4ca2-8422-0b1913dd28e3", "indicator--f9aa4cc1-3192-45d5-974c-9a1ac3c0a5d7", "indicator--8cb88b30-7d07-4ca0-8bb9-548889ef54f4", "indicator--e6f9605a-3c9b-4586-8c3a-52846b1f87f4", "indicator--5b65b9eb-f65b-4af8-86d3-6e27f130092c", "indicator--0a8085ac-5bcd-4004-a3eb-56cda0393c8a", "indicator--fcc8db64-a160-4057-8a59-5f60aee023c6", "indicator--755749ef-54f4-473a-aba4-f7ecf4217221", "indicator--541b12a4-c451-414c-afec-4c787bdb438a", "indicator--ff7bc2ab-07f1-42fc-b986-743d31bab5dd", "indicator--3b68cb62-ad29-491e-8296-8a085b320ae6", "indicator--2a0432d7-dd3b-4dac-afaf-2d9e20ea2eb6", "indicator--92e78e76-47f1-4023-a14c-0f797eac698a", "indicator--91ba25da-d51c-416b-911a-b25651754c7b", "indicator--5eeee3be-e688-43d9-a9ff-5ad1be324f36", "indicator--9b661ccf-54b4-4f7c-adb4-4c975221d4c7", "indicator--9d851dc9-e07f-4d97-9e77-be61cb33429a", "indicator--4e680757-288c-4522-a9f2-0550bd39d6cc", "indicator--d4379335-2de3-4ece-b56e-396aeee5a2b8", "indicator--abad1bef-a84b-4611-b9af-035a1d0939a1", "indicator--eae60317-9a2c-4c5f-9388-3498605f4d48", "indicator--6300d64d-09d4-45c1-82f3-ae5f1f46d58c", "indicator--66f1a152-9a9b-4e95-a1b0-bc774242124f", "indicator--45d0a0cf-2bf2-4dce-b246-c6d96c71888e", "indicator--569f51f6-19f2-409e-bc1f-f2c2fe0d76c4", "indicator--4a457f3b-58bc-4afd-a093-f3697a5d7a7d", "indicator--9223e239-4976-4b5c-a1a3-29c9fa62dcb2", "indicator--0f6cb4fa-ed79-4186-886b-c0879ef8e878", "indicator--849da8cd-9f64-45b6-9bb9-9ef74ee39e85", "indicator--2302d028-1675-4150-a434-d650f5b9340a", "indicator--7781d4c9-bc0f-4acf-a734-43de04e87aa2", "indicator--6744a748-672a-4b22-bcf3-aaf216718011", "indicator--e58eaecf-e89c-4cf8-9c56-21912cbaf4d7", "indicator--8e4c65b7-f802-412d-95a9-c8efd79caecf", "indicator--b2bd1aec-3aa4-4e2f-880f-06477f136fe0", "indicator--93bab5de-2e94-4899-8b9b-ee3932a28065", "indicator--0f7bd116-4229-4a3c-afb8-478142042cac", "indicator--873f252d-6407-4c9f-9a33-0370fd855611", "indicator--27bc82ea-5532-430c-90b1-e514375462a2", "indicator--a75b96e1-cd42-4654-be74-06e5887b70a7", "indicator--c93af32f-c0c2-4b9e-9c26-c5ae480ab111", "indicator--c234281c-41fb-4392-9163-f6253e46f176", "indicator--99e13fcb-a8a3-4c65-a4b5-8b4f18045fa9", "indicator--adc847c1-3f98-42b7-b331-5765f914858b", "indicator--d79ba7bd-4dd5-42f1-904c-d0e6f6aab676", "indicator--991d4225-9be3-4a9b-a540-0bf7d7ee953e", "indicator--c4ab9f2b-6ed3-4d14-805a-1e315e3f8bd3", "indicator--2fb13b57-09ad-483b-8fe2-1ac784ae258c", "indicator--62c135c5-0aa7-44e4-93d7-9e8221946f47", "indicator--32a4d63e-7859-44c1-8644-c8b139320ab3", "indicator--a8c2decd-df4e-4091-be27-6888d90be613", "indicator--389b0ee8-6ca3-4d6e-a564-3943975a7b67", "indicator--d173e6c2-91d7-4c5f-a38a-fb68a946aa43", "indicator--ab80f1f6-cd16-4375-9b48-1c74a2c4f489", "indicator--69ad06aa-69fe-42d8-b361-889092a28a7f", "indicator--ce342624-ec94-4da5-88a9-4a3a50ed2475", "indicator--93cdeeb4-655c-4993-8e33-3afdf012d76d", "indicator--73997dd0-e903-4823-8b4e-d5b51644f44e", "indicator--8d6275e4-155a-4283-813e-011bcfda98bb", "indicator--3c123ba2-1b2e-4407-bc56-4224d70d2357", "indicator--4cbaa1c2-2479-42ac-b59a-667ddf67fbd7", "indicator--85bd4ebf-7771-44b7-9216-a4545c95b26e", "indicator--25a1df3d-a78c-41a8-a2b0-4e3a3e944764", "indicator--4c310712-4274-4221-b029-a44e6671393e", "indicator--99b863d4-c9e1-49f9-9cbf-2d360eb4e6dc", "indicator--b03d534d-b590-4f17-9e51-362e783fa3f7", "indicator--8eed75ab-74cd-4259-938e-ad6ddd4564c2", "indicator--1a73afb1-eb22-4103-a528-4b59781f2589", "indicator--fa9cbb84-7bc0-4448-98f7-c59267c45960", "indicator--f69af5dc-52ce-4d18-9f08-43ff24fd74a8", "indicator--a6bc7f30-f536-463a-b215-45fe22a20e4b", "indicator--6b971512-3aae-433b-9fca-31c478fc98c5", "indicator--5aa601ec-57c0-4b56-ae01-d8d08f48309d", "indicator--8c0fa4d5-55b4-4003-a05a-86b2988f8f72", "indicator--114449cd-1491-4a55-acef-692119be7be7", "indicator--f1ff3115-a482-43b5-8e79-6b7eea3b29a0", "indicator--4a9147e6-659b-499a-a6aa-f3e5b370089f", "indicator--4c331496-8db8-481d-986d-0e27f0627e27", "indicator--4804acd9-99ad-4162-9ef4-a5510a783c02", "indicator--dfff63ea-da6a-447d-a46a-1d82825daa0d", "indicator--9d6cfaef-71b7-429c-913d-aa4b872e81ef", "indicator--09644c07-8730-465c-b573-4f260751b8ea", "indicator--7d088eac-fe96-43be-9895-81918be22277", "indicator--21ca60bd-a15d-4b70-842e-763d21541c75", "indicator--e636ec5d-7849-4371-abd3-3463b1d0d787", "indicator--e5f8b562-c9fa-448c-9516-2618bb35b96e", "indicator--a227caa8-dda2-45bb-a3e7-950c17838ec1", "indicator--a639a64a-f667-4ba4-b8c8-0e7a548d198c", "indicator--5da775fc-0815-49a9-8554-4c34ac9cbd58", "indicator--8bc9f241-0385-4c9f-b5e1-33f34c438671", "indicator--bf5334c9-91e0-4b14-bd11-21d29fd79db9", "indicator--1c1c682d-80e1-4fab-b88b-6b84de77a3ce", "indicator--52d66ced-640e-4add-886d-a1f1624d92f4", "indicator--28e3f3c9-3d4e-4fa2-8b70-dfc40fb5cc31", "indicator--042636a1-bbf8-4104-b2d8-8ab8ed91c37a", "indicator--ebe929b7-6c1e-4ecb-848f-3dac7e3e7265", "indicator--5ffde38c-ab13-4562-a5eb-38d32982bd84", "indicator--81711349-1e79-49ad-b5f9-d80ee835c55f", "indicator--0a501424-3c70-45a8-b1c3-27dc6521ecff", "indicator--30fab9b6-dd7e-439a-b330-23a7e15b6a86", "indicator--2df7a761-228a-4696-bd43-a05108f77f51", "indicator--6ed4d03d-d2c7-446c-a670-a53fa2ce95e9", "indicator--f9ec58cf-791b-43c7-8ec8-d117ae56205d", "indicator--51deeddd-a5c5-4384-b4cc-997160c08ffe", "indicator--9610a7c5-a334-440e-9c9e-6c0b8dca069b", "indicator--09480171-eddc-47c8-84ad-469dbf5ed293", "indicator--802a211e-dcb3-4dcb-a528-09c8d9b5ce8f", "indicator--7a74f0bc-ce68-458d-9ecc-f8dcbb6f199c", "indicator--3a303d41-f4bd-4e16-9841-caf63e46f5c2", "indicator--cddd218e-8337-4335-af67-d5061dddae05", "indicator--6b509305-e41a-437d-81bf-35de70a69f50", "indicator--11c58ec8-074c-41fe-a119-d18f00a0c40b", "indicator--8bf8a824-282b-4b9e-adb5-d9102b9168bd", "indicator--94fe9ec4-3183-41a4-bab2-6ba97095e2b2", "indicator--d8fd04d9-3336-4e3c-a320-df0e7b301155", "indicator--ad828466-d02f-41ed-8832-7647298832e7", "indicator--d45359f4-0bf6-4ed6-badf-61b77cb6f8cf", "indicator--b123d5ba-e41b-4349-a5f1-bb741f7a797e", "indicator--97ced920-d1b2-45f9-9ef7-ef59145d9fb7", "indicator--94ffbe8e-dcdd-4469-83a9-cda7e2be4bf5", "indicator--e0646e04-c754-4cda-87c3-33250898972e", "indicator--645469da-0706-4abb-83e6-50501680f62c", "indicator--9e694084-aaa5-481e-b29c-9e914f4736a7", "indicator--72c8f5cf-0c8e-4949-8b5e-6ebf290b46a8", "indicator--f1403f35-16b4-4344-bb95-213073e9f156", "indicator--3661db79-1bb1-4977-86d0-1384a4457a84", "indicator--d162e7d7-d5df-4038-bdfd-008057e7641e", "indicator--02c29760-2c5e-4c58-b529-bae8ce04d9ee", "indicator--81c74b63-2868-49ce-98ea-5d67976b3e83", "indicator--03976a9f-e7d9-483e-8a22-c659556aaeb4", "indicator--fbfaa0ed-83bf-4e2a-acc2-1b30eee90d02", "indicator--1f276346-bd43-42e0-b418-9d19c9e11788", "indicator--bb741327-d449-4873-8d16-e9ab1090dcd7", "indicator--29e3cbd9-c003-4a6c-ab45-f98341099937", "indicator--d0b2848a-e9ad-434b-8449-79978cd29fbb", "indicator--ddb02316-aed5-4ad1-bc2e-713501c89f8f", "indicator--45ef26f2-785f-4a0c-a5ed-640a47bded10", "indicator--42e7beca-d3ad-4ec1-a49a-e25204147d49", "indicator--f9065e59-da1d-48a6-83f4-a2d92951ad48", "indicator--6dc58d21-63d6-4dc2-b7a3-7d61b1f594ba", "indicator--bc66f44d-d6f3-4506-8390-a245bdbdbb7c", "indicator--0fecbd58-2f20-4b6e-94ff-9e44bc909910", "indicator--972c1042-77ab-45d2-8138-7a3efabfbda2", "indicator--caa7bb3d-d29e-4ecc-ad54-4c9e00f9146f", "indicator--e6a0e7c4-4170-4de9-8fac-09188bd90118", "indicator--708fa617-035b-430f-a4db-4cd39ec04221", "indicator--da4082e5-c4eb-4dc9-a0f5-95b56cdba5f9", "indicator--d3985ff0-bd95-4b22-8b6d-cf7ade5f476e", "indicator--4a150f5d-32a9-4035-99f7-431c17104e05", "indicator--1a08ba03-7e52-491d-a303-067dff05f1f9", "indicator--051be5a0-3dbb-4a51-a165-688f30d4be1b", "indicator--b1b1d742-7f99-4284-a9dc-1dc22b31dc4e", "indicator--c28f1672-eed6-4bb0-b2d4-58e2dd27ef80", "indicator--b8b00cd8-f929-4bd4-a206-4123f0dd8a4b", "indicator--bb42f481-c5b7-43b1-8055-1efd238736b5", "indicator--bf475bfc-afe1-41fc-8ef6-f057c2bacbc9", "indicator--59774fb8-8cd3-4a85-806c-186f78c6d78e", "indicator--3272f8a2-a59f-4df9-a86b-33f4d2188774", "indicator--ae5b7ca7-f55d-4d7a-99c9-516bc5af560b", "indicator--82185c95-ef0b-4dfc-a8f6-99c54be13039", "indicator--7d0f8a96-74a4-4d2c-8b93-bca6182cd850", "indicator--b8d9be1d-b461-4dcb-b15a-e0cff91d4863", "indicator--91104383-b8b0-4b70-8445-7e16e14a3574", "indicator--c4511a18-fa56-46b9-9efa-f9ccfcad433d", "indicator--c1e6a0eb-9110-4ec1-87e6-39ea40aa9750", "indicator--191a2700-2d78-4917-b53e-e6bd61b91b32", "indicator--d994e8f3-a20c-4193-8d4d-638e7503dfe1", "indicator--7d4313b9-f2e2-4a35-b7ce-4aa842c93500", "indicator--9e1dcd92-1782-4847-96e4-3d77d410c84f", "indicator--7f91299c-d058-40f0-a401-ad3bc38677b5", "indicator--435a8d21-8cea-4242-9131-517118af8b02", "indicator--c176f81c-5efc-4925-88e8-c71554cc7601", "indicator--843a5b81-3af9-4d3e-8537-f40c9e592f6c", "indicator--bf0cdaff-c9cf-4615-96ba-73d14078b27a", "indicator--1cc8c8c0-4c19-4b9e-a0ba-50d994b388fe", "indicator--97533e27-27f1-4c29-94ba-20a8fc76a748", "indicator--eac466b0-ae8a-4cf0-b3f3-8c2c046cce9a", "indicator--b98d17ff-b7e0-4ce1-9234-cd9014606219", "indicator--7329f733-16d8-4fc7-8913-487fe6f15ba0", "indicator--3dbc2e01-b67d-4a5a-88ed-5e1a2142eb74", "indicator--a3bc9f78-95be-4fca-9aff-83e432e88367", "indicator--55abe92f-40f7-4ae4-881d-c243631f6eef", "indicator--39a576dc-abbf-439c-bf9e-c448c0d37cab", "indicator--d3c0dcd8-c926-45fa-9351-42aa40c8ebe7", "indicator--d84bc798-29c7-45e7-9a7a-addf2f3f7fa3", "indicator--2eb90df7-ccc3-4bc7-acef-0210b99cb861", "indicator--4358f4cb-ab71-4c72-afeb-753a970cb0ce", "indicator--9fcc5131-46aa-4f69-8429-7359b221d2dc", "indicator--1666b99a-5a5b-4f8f-a470-88456e05702a", "indicator--5f8c6b9c-fdc6-4d59-a06c-fd3fa271974d", "indicator--4c80236d-80e4-4c34-b7ca-df9da04200d2", "indicator--513f90d2-4b94-47a3-90a7-11caf6ef4b58", "indicator--4bea5a81-941f-449b-a2bd-f3a77f3c7ad5", "indicator--809b414e-9828-488b-880c-89f369cbc2d1", "indicator--12be9234-4363-4a1e-ba74-8070bc47561a", "indicator--accd46be-e84c-4d00-b02e-07b2493d9568", "indicator--eb6be877-f98a-4a6d-884c-d9b5a0a6d70b", "indicator--3bd8b336-987e-43be-881f-13da32455009", "indicator--009a87a9-2ef4-476d-b5b8-c6f1042557c0", "indicator--5dbf3b4d-d052-4cf5-9ae9-7835364aeaf1", "indicator--69151f8b-99a4-4db3-9c3f-ef23a6d22b9c", "indicator--708a789d-1835-4d0c-a132-11b3873fbe7a", "indicator--e4b4835e-d4a6-4138-8ec6-8fda63a20aee", "indicator--f967ed72-65e7-441d-80aa-324ddb8b8d5d", "indicator--401978b7-976a-4518-98a0-e9d54b2520d7", "indicator--d484ba56-0540-4923-b776-5c8a4292d7d5", "indicator--9e52f484-02d4-49fe-9c22-2c4f7b2c887e", "indicator--21e05d5b-301f-425f-bc46-e5ee3e4e4ba4", "indicator--8f5087bd-4497-451a-ba6e-8e7c5937e1bb", "indicator--b4d1c95a-4ae3-4120-b1f1-81e6db3722e5", "indicator--3b5431bd-45ad-4284-b9b6-e9584fd215c4", "indicator--78daf34f-87d0-4b94-8296-ae56b5263696", "indicator--179ee929-2ed9-4f07-bbf3-6c15b2249847", "indicator--da614d4e-4497-4427-a45d-59060d7a9a69", "indicator--c080222b-bb3b-46ba-9b20-ec7a97e6132f", "indicator--8a7d2dab-9fdd-4c43-a38d-2ce13e960cbc", "indicator--9a0d56b4-b520-4327-adfe-a199de58ebb4", "indicator--4888b1dc-905b-48a3-bde7-0f8efa7d1cdf", "indicator--cf005541-7f96-4bfe-b8ec-5ecc4d6b1cd7", "indicator--35471a22-5149-41e6-a43a-5c400c46f059", "indicator--89539f3d-9c73-4a25-a0bd-0c10353ed4de", "indicator--954cfd35-57d8-4e34-933a-b2beefd0768e", "indicator--3a0593e0-5312-4d09-941e-b9eebd3023a3", "indicator--3b32fdd5-01b6-4d7f-8286-8e64a2256307", "indicator--baf75566-10f8-4d19-bfe6-f1a451b1d29a", "indicator--6b7db93c-40c9-418a-812e-1cd4f5908b0e", "indicator--993e45bb-23c0-43f1-9ba8-5c310c837b6e", "indicator--76998f1e-0952-48fb-8f4a-8e55593e4449", "indicator--282bad07-3578-4668-8d23-63f48fb6bbd8", "indicator--029f69bd-765b-4090-b831-38a2cca01a0c", "indicator--cc612db6-eb11-43e9-b085-50a7cb0f5d4b", "indicator--425f0e7b-0d98-4273-96df-bf0ef3521d60", "indicator--7e34fda7-f71c-4bbe-8cd8-6208cde064d6", "indicator--088d2790-d0ae-4d34-a4fe-e97f142620eb", "indicator--70dab74b-2b98-49f6-af62-c0c72e7dffcd", "indicator--c6673220-e973-4367-b7af-cf41b41ee8da", "indicator--6984ead5-6ed4-44a8-9ec4-d7adda649905", "indicator--bd420dbf-2bb3-44b8-ac86-ee25b54adf1d", "indicator--2e159c2c-345e-445b-8dba-4f3a04eb4e7e", "indicator--17475683-6de0-4d61-8089-afaea9dd86db", "indicator--6c1551b3-82c4-4b47-bb22-ebec2219dac5", "indicator--542fd78d-71e4-4a32-93c7-53b66e25ec33", "indicator--19e8d556-0425-45bd-bc4e-aa73e95e80e7", "indicator--6a560573-db57-4730-9cf1-4e567fa49bb0", "indicator--7f849286-9c9b-4d54-9507-f9080f445c4d", "indicator--ef7b29d6-d978-4925-940c-8ffa6c77b62c", "indicator--7ed8b34c-cebb-4b87-92f9-9c12359a2c71", "indicator--f243ca42-3e24-4cf1-9252-ed4d817ff16c", "indicator--16ff73aa-97fd-422e-bcfe-d85c4c81ae22", "indicator--566c254d-f1d3-4449-9863-bc3ad233c4c5", "indicator--7e4ca37f-3c75-41fb-b991-f5413dfbfb16", "indicator--19c948e5-5a08-4008-a2d6-c83ab4a3c0d3", "indicator--08d3fa35-a3bb-4eeb-a1fa-3e62e57d9924", "indicator--ee1b1a0b-fd47-400d-9567-4e956533783c", "indicator--688e9825-1945-4a22-b456-7f9cbe2c957a", "indicator--1c310c6b-194f-4e98-a88c-4b058ae998d0", "indicator--72956d61-3073-4650-a106-e589a2d91919", "indicator--a56dabe9-79f1-4f31-8c2d-e49ccc326cec", "indicator--adcb2f5a-3c32-44ce-9285-164e2ed1afa4", "indicator--10d0ef5c-5a81-4e8c-b9b3-df893fcc91f9", "indicator--71b04d3c-c49e-4d15-8650-0c512257e0ba", "indicator--d186b7c6-bbe3-44bb-8af6-845b892565b7", "indicator--6ff509ab-4a9d-4c33-b479-e8ceb6327e04", "indicator--50109cbe-6246-4d3a-bc49-f3cda1572776", "indicator--963e6603-81a7-43ac-8f89-0f3d93ff14b8", "indicator--ab473946-23df-442c-8329-b869a9860052", "indicator--3f6eb130-bd3b-4f7d-9956-01fbec916593", "indicator--9b2fe46b-b246-4955-862f-f27f378ee86f", "indicator--9d2f64fb-3812-4264-bef1-b60665a47836", "indicator--51ea35c0-43aa-4c0b-94df-c2bcb268c566", "indicator--bc41592a-d856-4c97-b020-372ecb2fbfcc", "indicator--96ed8548-b4a3-4610-9e6f-188e43385f11", "indicator--12c5e820-ba8d-493b-a1b1-9899187a43a6", "indicator--66b36f73-34a2-4bd1-9ff1-5a2460ff76f0", "indicator--f7a2ea8f-8011-439e-91b8-99c73e7bb543", "indicator--5d7a0727-d75b-454a-987b-4dd9a21f9bc1", "indicator--f60693e4-00d9-48b5-8da1-316b6a82300a", "indicator--3cdf00f0-1ae2-47ad-98e1-fd2b7eae9b0d", "indicator--a74eb0e6-91f9-4fbb-8a29-efa0162c27f5", "indicator--1515bbee-1f51-4b56-86b5-35a50948a52d", "indicator--5ee99b45-3401-480c-bd3c-2c7fc358b016", "indicator--1f9a0ff1-28c2-413a-8dab-8bf5a9d2e225", "indicator--440c5f7d-610a-4d98-a202-ab519e55611c", "indicator--e4ecc192-b0cd-4018-a6ce-a0681b9f5081", "indicator--11746605-2d05-41b7-b57e-88b7034d052c", "indicator--abdb8db4-5ec0-4261-89c9-d7b8966d3102", "indicator--47ea90ff-3457-4aee-ba62-0c18675b66ca", "indicator--d3ba286b-65c6-4144-9b7d-32f7d73d70d1", "indicator--2e675045-0dee-44ee-b1cf-e1d1c578e650", "indicator--79dd1d99-93c4-4262-bf11-ba10f3049bef", "indicator--6461b4e7-37b9-4278-8add-4d500b153f9e", "indicator--860a24b6-8fb6-4519-86c4-bf8129257df0", "indicator--80c76150-a280-4834-bb23-9ad5bd12cba3", "indicator--9576e2fb-0aca-4412-8577-db4305055759", "indicator--f0a55812-a215-470a-9948-80b84564c297", "indicator--2b9414c2-aee2-48e8-baeb-f9b8b000db36", "indicator--c54d3435-2292-4be1-a623-fa08730ced3e", "indicator--9d1d0ee3-e2da-4e51-b08c-021a9f0420da", "indicator--014d6cef-894c-424c-87fe-9fd8dc497cee", "indicator--45829d66-cb76-4385-b3c3-5dc0e8946ccc", "indicator--641f03b3-67c6-4aaf-a2a9-276ccef20d23", "indicator--64efa9bc-88a3-4954-a971-5287481ef945", "indicator--636a6391-010b-4dd0-a4e9-2e026bf87e3e", "indicator--e5b732e9-9163-4113-87f9-5e05a2b401b8", "indicator--35c2b97d-8e25-44a7-ae0b-da4abf81fcee", "indicator--23e567e8-5c26-49cd-8cf3-1ae9583f7af8", "indicator--de30deb5-cb5b-4d21-9c6c-e7891a7b3c80", "indicator--c3571c91-c4fc-48d4-a49a-330f0a502f12", "indicator--f2977111-0645-455a-9d78-a90bc7fbf3f6", "indicator--ba483d83-9a7b-4be5-bebc-51b24ff0695e", "indicator--cc923afb-4b97-45b9-9cc0-57921cb84548", "indicator--625f843a-dd65-43b3-b2f7-514c319492f5", "indicator--379ff4b2-0dd7-4543-be8b-971aba397fae", "indicator--ef9e1c64-2f90-435d-ab60-11b02af3480a", "indicator--8469205b-baef-476e-bc72-96188c0d1ec0", "indicator--5c131c61-82ad-4cba-9231-33b230e11714", "indicator--ad3d3363-4525-4b99-afa8-61aa0828b8b3", "indicator--c1a643f7-b1d8-493f-92b5-955df0c693ad", "indicator--3648d1ad-5ebd-4c3b-a6e9-75529cee11a6", "indicator--61477f7d-a549-4f1c-8628-dde782bc97d2", "indicator--c379aba4-6e36-4bff-80a7-9439be34cdc8", "indicator--140ca483-1f3b-41a0-9b00-215e49f17792", "indicator--c54fd624-4810-48c1-87e6-4533961ab37b", "indicator--556e7aaf-a66b-470d-87bb-5c51927b9e11", "indicator--79336bb4-43f1-457f-a8ec-fdbf64716093", "indicator--36da54ca-1d80-4e14-8041-07dd0b6eebde", "indicator--d9cf2a73-0610-483d-bd87-cf92f9315a19", "indicator--7c1a05b5-ed6c-4e82-9f82-5d1aa7baa64b", "indicator--0eebee71-068e-4d49-a0ba-d8ea2eef56af", "indicator--1b79c443-4f45-477e-b794-0f2509ca8c5a", "indicator--80be6d4e-cd2c-49e6-bdfe-86480a71f258", "indicator--d4d52332-a16b-45af-882c-db20effc84ab", "indicator--109c50f8-4f51-49e1-9db0-876f48ab91e9", "indicator--f9e9bdec-ff87-4566-82e4-b6c0f17dea4f", "indicator--59a099b6-c947-402e-a6c1-4d14b71a00c2", "indicator--1a5ddf5a-3e77-4862-ac0e-ab459ef44547", "indicator--52b12012-3e1d-46f6-82a9-b87b2cc8505f", "indicator--99059c46-a0a0-4cee-9904-75f92323aa61", "indicator--c08e660e-0f93-4935-b589-bd5436beb8fd", "indicator--52986f96-b42a-4e03-b146-0701058e7745", "indicator--1ee10e4b-2ae8-4ceb-8258-7939ffb1a630", "indicator--2726a46d-e001-42bc-ba09-b4ae011c0622", "indicator--007aa988-010c-47af-8edb-47bb0120a77c", "indicator--f7d19620-3e9b-4cd8-8f31-55eaabe8a12d", "indicator--1b496829-8801-472b-87e1-d20002392183", "indicator--a5662963-ebb9-439a-a8d7-cccaae34047a", "indicator--4f0a5132-c317-4a6e-926e-f8d4fc9b22a0", "indicator--948475e5-5c4d-4456-8457-67e580d7d071", "indicator--a9fd2c2a-a266-49fb-95cf-4c6d8bf09cde", "indicator--57b416d1-4857-4fdf-9c06-d6da4e974cc8", "indicator--3e325fd8-39c3-470d-83db-be22b2633a22", "indicator--1f47151f-fc38-4d69-906d-5404891d3ba9", "indicator--1154c3d2-665a-41e4-93b3-9c821ef5bc05", "indicator--86d16758-36fa-42c2-9bc7-14ae835e1ce6", "indicator--c5cb5563-1d8b-40b8-b649-1b5e59239870", "indicator--5eb2cd53-4deb-4c29-b229-5c52324b4a3e", "indicator--31a53ff1-3e3c-4651-8906-82b2aa61a00d", "indicator--6c42e8aa-b7b8-4fda-9b06-586416843b49", "indicator--e0b73163-a39d-4928-81da-32c38b63ce95", "indicator--e1953ef2-02f6-4f9d-9da2-f6727d299b20", "indicator--3635e5e1-1ecf-4238-a721-c38134ce6136", "indicator--358918bc-b43c-4690-b6d5-1f7954046a26", "indicator--2a1a7912-5cfe-4e22-ae5d-14d56c1d2e38", "indicator--d4ae645c-73a4-4b78-be6b-dfbd37f9916f", "indicator--2947971b-83a7-4c27-8f16-5de15ae54e16", "indicator--5f857b7c-0de9-4eb1-a397-85db266ece63", "indicator--817b050d-b5ad-49b0-ae83-610c794d5001", "indicator--bb3571b5-1161-49a9-8ae9-1bf32b27335d", "indicator--9322ca3d-b260-4be2-b4b4-1d880a2a3f57", "indicator--4d5202ea-df33-4057-b0c8-a5b3667c91d4", "indicator--132677bf-46ef-46ea-82a0-b670727956e9", "indicator--ca1c0649-a2eb-47c3-a10c-5d0ecb832576", "indicator--5a80aedd-b83b-4bfc-aa28-659a806d0642", "indicator--5ef9088b-fbdc-42fd-b416-f06f21301f16", "indicator--23d3834e-a0be-4d8c-9e37-6e2c2d061fbb", "indicator--15585acd-6a72-4b89-932c-9b2a93496549", "indicator--9b78790e-b697-400e-b265-976252077ba2", "indicator--413e226f-fe4a-4f96-b128-d312deb659cc", "indicator--284e6b6c-ee17-4b79-af42-c07114e0b219", "indicator--5959f6fc-544c-4089-a840-613c7e099172", "indicator--cfb77845-3a84-40e6-b4f8-7a0a316b0c23", "indicator--9a1d415d-df03-4b02-915e-3f6c9381ad7a", "indicator--82965395-a3d8-4cc1-b94e-81e39d761eba", "indicator--d6ae17c0-9a7b-41c4-b1f2-2abaa4a4b720", "indicator--31364d72-9336-4ac9-aebc-31f6b026671d", "indicator--82e5c292-4d62-4e87-9b6f-3889971f9727", "indicator--7c277ab4-f5a0-4525-b888-9f71814db761", "indicator--d1fba24c-fb0e-46bc-93a3-6f2ce9d302e7", "indicator--7a19bb06-b3cf-4a02-b502-1a8bcf9670b1", "indicator--f78cdddc-8ee7-4319-aed3-6c9478f98f48", "indicator--4c0f474c-fc1a-4390-94c9-aa3603aaee62", "indicator--037f9dda-a636-47a2-89b5-ed2fa78e7158", "indicator--ef7ff4e6-7ac9-48ff-9b94-16f7af5616e9", "indicator--2c858084-bf97-4e1a-9132-4244ef37f59f", "indicator--cce57435-12c3-4ff4-be40-885d2d94578e", "indicator--0c0a087c-f1dc-4b45-9d06-757ac836a516", "indicator--866aa5e3-c0fd-41a4-bd5c-48ad090ead32", "indicator--9526307f-cf86-445e-8dcc-30cc59707606", "indicator--28cbdafb-2d32-445c-be86-dc254095df58", "indicator--98bf51f1-8271-44cf-b532-90872b8b955c", "indicator--e23aa920-08a8-4592-97ce-579504f6a3de", "indicator--9d80ffbe-f237-4511-ae5a-b56b7bc7bac4", "indicator--57f50d13-ffb3-43d7-ba1c-98b2a9db1618", "indicator--57e70c90-d6d8-4dd2-bc41-2917aaf8677c", "indicator--d24df19b-0c89-4700-8cf7-4e272d4839a1", "indicator--12beb8d7-4420-4ed3-a494-401adde197c5", "indicator--0c4884f4-9c1f-46f9-8a86-7e8b3e4dfb36", "indicator--758ecd01-2d34-42ce-8a27-35104a83eea1", "indicator--06275a04-ab9c-4e85-ba23-9161fd767055", "indicator--9db7890e-8aac-4491-b9bd-d98a648c58cb", "indicator--d13949c8-a619-4641-872e-a8a36449fd7f", "indicator--ca4aef0f-21f9-4972-8c4a-6012c552ea9c", "indicator--8b1c8752-6b1b-4153-9313-726f13f562b7", "indicator--1f33250f-197e-4712-a4bd-75c6ca45a20f", "indicator--8436ba7e-11b8-49c2-926e-ee6e4133b331", "indicator--fe1a48fb-c46c-4391-9004-816def3fd163", "indicator--b76da523-4d59-44f2-88d8-624614388e44", "indicator--f3a76cf3-a235-4755-8f56-dfd324ae1767", "indicator--3a479b04-9f16-4faf-b7d8-1a370cd37930", "indicator--7fd11183-bbff-4bad-a9a4-9d5f846b4795", "indicator--3814a445-a47f-446e-ad54-58f95c528db6", "indicator--f70e1e17-f10c-4cc4-b952-1626b35c2058", "indicator--5a83d6d9-fdd4-457c-9daa-413fad793279", "indicator--4a07c9ed-9989-4242-bd7d-d304254fad0d", "indicator--8490dfe3-1b66-47e7-8c36-e37678c3c8c6", "indicator--d3c3082f-cedf-4f06-8fbc-ea5ba9e31f1c", "indicator--c97f3797-f21f-4f64-9a77-18fea91f7bde", "indicator--39a304dc-4a92-4e1e-8dfe-5751114b1e0c", "indicator--75731a76-b520-4937-b161-4a55f6c278ed", "indicator--eae7be58-8a3b-4feb-bff9-5bc5279c890f", "indicator--36b9ec9a-de08-4907-95aa-3c62daf7e878", "indicator--e34cb762-98f2-4ccb-96db-e0bfd039785c", "indicator--c040aac9-15a1-4054-bb54-c3cc287b70c4", "indicator--736bbaa3-db32-4dc9-b0e5-074b95911f3f", "indicator--38ed8f03-1a5a-4806-97d9-49a248567b88", "indicator--b9ac7053-d7bd-4703-983a-4c7a42b83f41", "indicator--6f91211b-de6a-4ab9-8ca6-187ac0d6288c", "indicator--310459e4-48a5-486c-97dc-edd076a7d750", "indicator--c2109507-67a8-46e8-bba6-e36816eec8c5", "indicator--216a1fc6-eec5-4811-ba20-54a868c33a88", "indicator--6b9b3641-844a-4902-9271-a1b2ec0ab135", "indicator--7b9ab12c-bb69-494a-acb9-07c42a55b77c", "indicator--765fb971-6cd3-4a1e-b50c-ccecf903306a", "indicator--0231ba53-e6d9-4084-b18e-3aa530a043c6", "indicator--b57c57c4-3f48-4949-82c7-856a7df3f13f", "indicator--fab60c93-daff-4146-8cc6-081c9b16b0d1", "indicator--25c1b28f-da23-4f3a-af12-5518356b28b3", "indicator--892ea0b0-be27-4435-a9ae-cdd6e9ed1eff", "indicator--3bd3688f-8a8d-41ef-bdb2-7c6c350a7b14", "indicator--918c9c70-817f-4f08-9bd4-7c6dbfd17cc3", "indicator--66757979-f701-43e1-995a-98249ef9cf3e", "indicator--d10bea0e-238f-47bd-8386-ce1bd531fbbe", "indicator--4317fea0-b013-40ab-bfbc-bba5c94dbe9b", "indicator--824f53e1-cd79-4356-85ac-90863da5fadb", "indicator--3f43f9ad-4c20-4c75-b535-d8239039bb1e", "indicator--8cb99dab-10c0-45d7-a587-79be8e98946f", "indicator--837cafaf-8ca5-4a69-8d98-e082166e6b61", "indicator--edd117fa-2b2d-41f1-9d79-2aabb6ce70fc", "indicator--69f2f0fd-330a-448a-b190-44ba0923ffe0", "indicator--ab272214-10df-4b8e-bae6-de0c46f1cc14", "indicator--f694f816-7b74-485d-af82-99ac4561d235", "indicator--4be561a8-2154-4d94-90be-9c0e894f77dc", "indicator--7e2bc4a0-0048-47a5-878b-607b597b4e30", "indicator--20a2a8b9-a0af-4f72-ae67-4b292de4e9c1", "indicator--40338e25-0d0e-4d16-8d60-117a184acaeb", "indicator--89407358-5a1c-4560-b71d-939e7f7e64b4", "indicator--2df52018-7243-4057-ac8b-b424a6c9fef5", "indicator--95b1efe2-1f6c-4eb2-aae5-72ce5fecd110", "indicator--e8bab539-511a-4b34-939c-ecffa318bf63", "indicator--87d2a91c-2789-491a-9ad0-65231b52112d", "indicator--39b3ef53-a3d8-4cc4-8ee3-1975fd0cebdc", "indicator--d983a950-eae1-43fa-863a-97fbb30f6a9d", "indicator--ef6eebe8-4854-4e1b-914e-a42f6732a0ea", "indicator--44aeb186-04fa-4eec-8cb0-13836aa44767", "indicator--f65907cc-ccc0-42fa-a0db-9ebae066590e", "indicator--294d7bb9-8318-4e26-a3bc-bb0825f0e8f3", "indicator--d5f1c32d-d715-46a7-8631-ae67d2772f54", "indicator--d80d6b7f-88c9-4b94-9967-d04233d67dac", "indicator--8bc74da0-97cd-4d10-9973-de08a502f550", "indicator--00278fc0-5382-4e37-b30d-e86b83cca8d3", "indicator--7b257545-2aa8-4aea-a12b-077faba4868d", "indicator--018cf780-f2f3-4d26-afc3-4127b9754baa", "indicator--79c7123d-6fcd-4d53-840b-82d2420b4936", "indicator--d2298b88-2928-4ac8-a976-450a1db97e20", "indicator--274a4d61-7e93-47bb-ae13-f68a2780b956", "indicator--bb23b0f9-8dd8-4f22-9843-8616481944d5", "indicator--d25b9400-85bc-4fcc-8537-f52833f8cef8", "indicator--00f4acac-d687-4271-af24-76836e4b7198", "indicator--a6e70f9f-3a4a-49b8-b514-664b8e23d255", "indicator--14179c83-5de4-40eb-a4ab-38bfb0096e24", "indicator--f05b60fb-d043-4990-93cb-6a76c954f918", "indicator--44ae36c8-923c-432f-96e0-6e85593f47d9", "indicator--528978a7-9291-4ed0-a77d-020e3b73c66b", "indicator--d14ecbe5-a3d4-4116-a504-471375ecab70", "indicator--78935a0a-fd40-4d92-b37e-37f047b2c5d5", "indicator--20683714-e8bf-4311-8e83-918ea52d9f35", "indicator--0bcdc4d0-97e2-4620-aec5-29604ed73d2c", "indicator--f22c5a1d-6c19-43af-a558-9ecde079584b", "indicator--3688704f-0391-49fa-93ad-1c12da612d6d", "indicator--94d796b2-aa46-4141-8962-8d9db760a65b", "indicator--f2bf54bc-e394-4311-b0dd-e5b1044479e2", "indicator--4aff282f-d360-43f8-8b00-8cf28e970308", "indicator--8fbfe79f-cb30-4476-be91-f72f952cab7e", "indicator--fec4364f-1930-4796-8a92-7b66af4bae60", "indicator--40a1b64a-e926-4617-9ef7-d760c4b1b062", "indicator--49e1944f-b358-4684-b3de-f11014e80425", "indicator--fe383491-8127-4deb-a2f2-7af2f37930fd", "indicator--495fcb11-2ea8-431a-88e4-c588234d43d7", "indicator--758abd94-60e9-4087-87c7-c03a07760bbd", "indicator--4d2a4014-10b1-47f9-bb58-fc79296cf52e", "indicator--7f7644cd-8729-4ff9-bf70-67189eb35624", "indicator--03caf950-5ed6-4ab1-8d25-1964f59e79fb", "indicator--b09ab7fa-1e58-4a93-acf0-c427783350ac", "indicator--918699d7-3af7-4687-92d7-d024dab0b536", "indicator--e4dd0c70-2ef8-4d46-803d-8001a5512b3f", "indicator--d6116d81-2e3b-414c-9090-9ca2720825f6", "indicator--7da0feb7-88ec-42e7-b546-8e9c0907727b", "indicator--5e3d215f-7c97-4ebd-ac4d-aa43fa46d9c6", "indicator--5849431f-865a-4f05-b5a0-9c51585d72a8", "indicator--2c67a9af-75ee-493c-ac2f-03060ccc43dd", "indicator--2744b19c-3a89-49df-81d2-9884432ab3fd", "indicator--337fb15c-c1ae-46b0-945a-22467ae6117c", "indicator--70a33e66-9c47-43f4-b8b4-9a8067d13877", "indicator--d79c36c8-1861-4635-a96e-bf549b7a58f0", "indicator--2c2cad28-b231-4ab7-b259-0d393c506ed9", "indicator--e2a9998e-1236-4102-8ceb-d63e2f5c9168", "indicator--cb0826a3-8094-4efd-8bd9-7f7b85127142", "indicator--2a3115a0-23d5-43b3-b2a4-1330d3de0d65", "indicator--f4c39d00-f950-4097-a782-e39a2989a92b", "indicator--b373196d-b8b4-414c-9554-a286ae749dc7", "indicator--d8572f66-42ba-4056-b3ea-ca1ea5d8ffe0", "indicator--c5928263-e366-451e-964d-b96202a70e2a", "indicator--1a707284-4bc5-466f-8248-9811c7079ed5", "indicator--3dc0fd4a-11b1-4e67-98ac-e71f038f339a", "indicator--32348e51-4b0a-4753-851e-6b4249a90259", "indicator--e5cb4844-5bed-45c1-b093-38ef189728e1", "indicator--54b9b2e3-c89e-4a19-9417-6cc3ffcf611b", "indicator--d6b2b083-72b6-44b0-984a-35ca73ef2f34", "indicator--d4974499-5344-453b-8be7-0aa0b03af292", "indicator--3f9cb072-b35c-4f4e-b253-d2f26848bc8e", "indicator--46b9b22b-374a-42c8-8102-1e31d5e0c01f", "indicator--6aa120b0-7373-4ed1-a2fc-9d879a8b0995", "indicator--50d7c8a9-025e-44b4-ad57-d43094b33bcb", "indicator--56dee3e2-f968-4b04-9ca0-2672ac09ab18", "indicator--1f3e6172-6806-4f00-bf7f-28ff4e4405c8", "indicator--972d527e-2b3c-49c4-b708-277c756de5a7", "indicator--6500a874-3615-42de-b04a-1e3aecfd6591", "indicator--d7e0c895-2f31-4aae-8bad-e3fa73df98ef", "indicator--a30ba7b4-8af4-4a13-b6cf-369f843099e3", "indicator--f92093ff-c82a-4e88-94da-13385292e274", "indicator--0681101b-3557-45d4-8932-c2d0b80830ca", "indicator--87490af5-e024-4086-8ba7-8b61a155a358", "indicator--b094104d-299a-4954-855c-53fb224d923a", "indicator--4e10ba38-3bfc-49e3-afc4-e768183d41da", "indicator--e5ac83e1-32f1-45eb-abf9-aac392685b73", "indicator--55134e94-caf9-4e37-9d2a-9229acb79fb3", "indicator--afdb76a1-95ec-4788-9d2a-8173aedca9a3", "indicator--e85deb7d-3008-4884-8dda-a12618758d43", "indicator--77e19801-f583-42f8-8b11-8871124127c5", "indicator--27198cf9-f1c6-4b79-9a35-f0ff5a84bbbe", "indicator--824ce722-6b49-4667-91c1-fca03fd50602", "indicator--f40d2723-18bc-4c5b-bb59-4d111fd641ba", "indicator--eb153cf9-fb22-4201-bc18-f756055d78ae", "indicator--158bfd51-2985-460d-9e4d-56871c323163", "indicator--700526b8-906a-4465-8819-ab3f812cb70c", "indicator--8b09c5d7-ce4c-4013-b6d4-afeb5f2e284e", "indicator--a7f691de-782c-4a8a-be95-4dfb10fc13fd", "indicator--d6f8693e-0555-485e-bbb0-3e9518549403", "indicator--7084da1a-e7c1-4964-add6-18d6a85cd157", "indicator--09d9d3af-75dd-4a96-9e91-b1ad5c2577e3", "indicator--b8a06c71-206d-44aa-a16d-f74b07ff8746", "indicator--30abbb8b-756d-4f57-bdc5-a67973820b68", "indicator--d1695a46-91b1-4081-b6b9-191e396d9d81", "indicator--5e1db22a-c65c-4eaa-8325-6a8d6af7cde9", "indicator--7bcfe762-c775-4672-82f1-80ac6700f751", "indicator--1d9447c2-8ae6-419b-856a-db2e784d090c", "indicator--75b080eb-f984-48e5-97dc-604824939a5e", "indicator--ebe61a2e-e21a-47e6-b5db-559e50a5fa89", "indicator--56d3bef0-942c-4af9-a5da-f9765835a86d", "indicator--fcba25d7-a099-485c-a2ac-73ec5c183a4d", "indicator--dfb330f1-6fbe-4268-b6c3-1d506b0fe11a", "indicator--276559e1-bc78-4dc8-b4ac-cfee0eff7648", "indicator--e01c13fa-15a2-4a7e-a5ca-f70120bb6cb0", "indicator--9fad1ad0-a3c6-4cb7-b33c-c74da22a9859", "indicator--8293bca2-3331-43c7-b8b9-fef1abafa6b8", "indicator--cb91fe98-1990-4197-b90b-6c0a11f83baa", "indicator--5f79e22e-345e-4246-90ee-97d21b3487ee", "indicator--3be11379-bb2f-4e71-8bd5-156937d1ba71", "indicator--48a85058-7192-4a3b-b975-02612951efe5", "indicator--b3d0f46d-36bd-4290-a53d-f409b07360a4", "indicator--646aac6c-7247-46fc-b9c0-3782109abc84", "indicator--838c81f7-7969-42e3-b273-0ab412e83e24", "indicator--779805e7-39ac-4162-8705-5aa7686668c7", "indicator--8c0ac22d-7c4a-4cf0-9188-fc0938e3922a", "indicator--c7df1767-34cc-4c71-a860-8671f74be6f4", "indicator--046dcc25-38ae-4df9-be65-15d0394934ad", "indicator--5dc8883f-cd82-4b2e-912d-02e7a288e40a", "indicator--6c8c8d10-6940-4f9b-a1af-cf8bf414420d", "indicator--e61f09c7-ea2e-49ec-a25b-370755a23e03", "indicator--43b0542d-51e4-451a-ab73-f1fad96a5c1f", "indicator--e26e50bc-791a-457b-b052-73c73c2864eb", "indicator--ac3acc99-fd3f-4766-8127-e7f4470707e8", "indicator--2edd0e09-ca9e-4ac2-a760-08778f998930", "indicator--e05bf311-90cf-4767-94e7-94298afeaab9", "indicator--00d7e8d8-0dc4-4463-9785-f7051d535a72", "indicator--cf1ed018-b645-4ffc-a56f-210302e595de", "indicator--256ccb62-19a9-444b-88f2-270f586efe0a", "indicator--64d6416f-c683-4d6d-a6d4-9e936415361f", "indicator--a3367a0e-403e-49de-815b-91bb379a3658", "indicator--8ec2d707-bbc1-42cd-9fdd-f9d1699546b4", "indicator--37ea2624-90f0-4f1d-9738-026547288b36", "indicator--6f8746ef-841a-4367-aa6e-6738aa392944", "indicator--611a7613-d514-484f-9e51-a9be1c0cc92d", "indicator--8ca4eb0a-18ae-4884-880d-568163c6498a", "indicator--cdd1f5b7-c4a8-4cbd-94ff-0dd411b30654", "indicator--580f9350-07f4-42f5-9425-31ae0e904a59", "indicator--c2513504-c480-49c0-9a80-357a32f2f76f", "indicator--efc845f9-2e57-40be-aa7c-43bb43305971", "indicator--01ba00ef-183e-4c3a-aca0-48d7921a61cc", "indicator--0d3c6408-6ab8-4dd6-9b57-3d43b145e059", "indicator--e0b24f82-6423-4ebc-98dd-12f1f5230db5", "indicator--1e8d79f4-4950-4f1a-8337-6aa76b108140", "indicator--0cf299c9-9fd4-46e2-bd02-280363368f08", "indicator--0188c256-ea39-4b23-b293-70b66164d374", "indicator--749ca2bc-1cc2-4d08-ab43-d34f709c1cb8", "indicator--85da315a-4056-416b-bab8-245d4aa30a59", "indicator--43e7ecd6-b242-4d36-8c8d-e5dc2a7b90c8", "indicator--cf2b7bc8-846b-4a3a-98e7-4cd5f7a35c00", "indicator--b848c75a-bc4a-4790-aaf2-02097992128e", "indicator--5cd00a27-bcb8-4eae-baae-85b794b466c1", "indicator--1400a6ce-0dac-49ed-ab0a-873ac50e808c", "indicator--68b0731f-8036-46a0-bee3-4db72ad21fd3", "indicator--fe172abf-a1f1-4f5d-965f-32429d5246a2", "indicator--d5d17519-90f3-4072-8e84-b671e7155128", "indicator--88637ffd-6bbe-4d4b-8f66-5c4529b7ae18", "indicator--97ec6d7f-786c-4c8d-8c61-d24931d85e42", "indicator--2d7358c0-c40b-44a4-ac17-bfdde0fcde31", "indicator--9e62e2a1-7d66-4622-9ac6-033d2b502cfa", "indicator--dab64c61-f9e9-4ac8-9ec2-2b1dd07c1b0d", "indicator--fc1ac22b-02f4-4e93-9509-b23d50d14cef", "indicator--d90a3638-c8d5-45e3-b96e-ea049db17911", "indicator--f944af08-636b-4992-9606-21ee8eaf9563", "indicator--2e62cb0c-fb84-4f1e-b10e-450f8252ebed", "indicator--f3b1a908-fca3-4aa7-bf59-30450aeb8877", "indicator--d4fed952-5c21-4bea-bb06-c87b72b21491", "indicator--36e8890d-11d9-4c0a-a0a8-3ebe408d8174", "indicator--462a02ea-a763-4ac6-9be6-64df225dff38", "indicator--9c615f10-8ec6-4fed-9144-6f5740983bf1", "indicator--18cd7503-1b4c-4d94-8efd-14eb09c0160d", "indicator--6197d53c-838b-4f81-a733-2597069741db", "indicator--98bee3cd-a038-4c4c-ab84-36ac24873a91", "indicator--07edaefe-d3cf-4c9e-970b-9b7b06ff70a5", "indicator--75c52ffa-e190-4988-91d3-68299e043722", "indicator--06dbc723-821e-484d-8576-be36c064def7", "indicator--9c8bd21a-7db4-4936-adfd-2f00fe4ff023", "indicator--02c49c82-a8cd-42b2-931d-ef88f3b63519", "indicator--8b4fe40b-ecc8-4af7-9761-7fccdab231f1", "indicator--66cd61cd-2f56-483e-bfb0-67d4ac68946b", "indicator--e6647944-0f0f-4949-876a-23c86676fd9d", "indicator--4b2a3d64-5861-4b07-8753-4bed5d2287a7", "indicator--bd00fef1-7f04-4454-91ed-41ec6984b733", "indicator--901ec2e0-421c-44d7-8b10-7bdceceb048f", "indicator--f7914cfc-f5e3-477d-8644-16948e2b02af", "indicator--fe6294d9-bb56-429c-975a-8f0c2c4f8866", "indicator--93ca8947-fb7b-4639-87b7-9ddfcd09d1b4", "indicator--e2ea75cf-3f33-415e-b10b-7bbaa941298c", "indicator--76157386-f9a0-41ed-906d-b4cdf245afdc", "indicator--80f3db5b-288c-43e7-ab17-46c14b86e65a", "indicator--960b3506-73f6-4616-9333-dc08b42c6729", "indicator--ff546a91-faba-40c1-971d-a9bb6cef3b9d", "indicator--bde83248-a434-4b57-af81-f44b4351f3e2", "indicator--f919f7ad-ab07-4a58-a0d5-451530d9ad3c", "indicator--12d5d3a9-40ee-4221-9e41-515b6200c1bd", "indicator--b5340a9c-4f45-4012-86ae-f7431915b392", "indicator--fa7faa41-5954-4d3d-b2f0-58092fc51559", "indicator--06856d1f-1743-43a3-abda-0aed75dc2045", "indicator--5353b0c4-bede-4508-8da6-3a6ef49dbe26", "indicator--d564a539-d952-46b5-a546-61c5ffd16d8b", "indicator--91850e8f-1319-4f94-84f4-ebe571d09592", "indicator--45b482aa-ba1e-4b38-bcac-eac4b6cec2ad", "indicator--60b2ab02-1298-46c0-8a8c-806cfedebf34", "indicator--944aabec-9926-4918-8771-e8ca121ff63d", "indicator--0bae8a06-c69b-47b3-8543-2e3be81bd118", "indicator--1cf9482a-2b77-4986-8900-4d45e3bb5ce2", "indicator--4f444a53-5011-453c-9444-2425d5694152", "indicator--35f05761-44cf-43ec-82dd-8b0ded396fae", "indicator--ba402238-9778-4e4e-bd90-1ed2ee6cdefb", "indicator--b2318554-66b4-4563-a45a-cb85930a3aaf", "indicator--919c21e0-c762-435e-8331-e018e17c6e47", "indicator--9c81db92-83de-4fbe-8695-f85d538c6093", "indicator--da9d6e1a-fa78-497a-9dd4-18ea8e23adb0", "indicator--81ab8a1f-9e2f-4c20-89ed-07800656d488", "indicator--8378eec4-7109-4021-8440-9d8b942783e5", "indicator--bcc1a978-3483-462c-9bdc-95853ae1f7dc", "indicator--1031c920-aeb7-4e7c-b82b-19888fd1f71f", "indicator--d0aaa32a-2d27-4654-b9e7-a044fb377f03", "indicator--0076c778-c376-400b-be3a-cd2ba39c7a7b", "indicator--245b587d-41c5-4d54-9b1c-ba42a0c76956", "indicator--be350efa-f780-48dc-9933-fe67f12e1a38", "indicator--61bc6f5d-5d0f-4165-978a-4d49a360d834", "indicator--0ee799ca-2853-4e06-897b-9d1210022443", "indicator--9cf6ddcb-5af8-4f18-9117-06a9a6059e94", "indicator--bf3063b8-2d73-4975-9400-007118910efc", "indicator--85a480c7-4b99-4751-a5ec-56f71aa1c608", "indicator--43567f30-72da-4782-a108-db79e36e0209", "indicator--c1770cbc-7e62-44e0-b316-b60ab9559e4f", "indicator--9137b5a3-6fbb-4ab8-b83f-ed073b4bb4df", "indicator--ad734d9d-58ab-4bd1-967a-9ade647794de", "indicator--81c7b275-f815-4aad-9acc-351df8aaabd4", "indicator--675be940-65fc-4831-b920-499554b1ef96", "indicator--610d9038-8609-4f39-b778-5e81b9ab8bcb", "indicator--12559b22-ee4a-4ae9-8f35-9eed0122f171", "indicator--d60dc096-c56f-41bd-9972-0f29a95fd36f", "indicator--851d91f3-7e62-4225-8685-b7b715882118", "indicator--4d27d384-d4b1-4f24-8753-009871a7aec7", "indicator--396f3d57-506c-4d9f-bea1-8f6b88947232", "indicator--c951d1a2-466e-4b93-aa07-bd1a88ab061e", "indicator--4c486b16-db43-43a9-bc41-063bba8708f9", "indicator--17fe91df-5202-418f-803b-1b16eea75c74", "indicator--bb0745d8-e9ab-45eb-809d-36b3b34111dc", "indicator--7871213d-1238-4bec-9bcf-5da139b1b17c", "indicator--ffaa85dd-a421-46c4-911b-e094cb3d563e", "indicator--58e7eb91-3108-459e-8de2-1646cdac102f", "indicator--32913c11-887e-4d98-bcaf-b11374f2cec2", "indicator--b57f2551-3b31-407d-b482-948090c24dee", "indicator--d0555794-b034-4f2d-bfce-1dcdabe05dad", "indicator--72e56054-9b0b-4b96-a107-9f71b06e4f28", "indicator--2ff72e3f-6c59-4e06-884c-b5a4dd5c4cfe", "indicator--c99435f8-4b54-47d5-b2dd-d48fcd744e16", "indicator--cef7807c-0963-45d9-ab14-d61df2d5715c", "indicator--67d6843f-f4ed-4727-9c98-5167a5c6bed5", "indicator--68ecd531-68e3-49ee-a821-d91866229227", "indicator--572d5bf2-8fd4-489b-b357-dbb578b8043e", "indicator--2d1024dc-13fc-41cc-8ced-9ce401855bfa", "indicator--ee454d3b-6b8c-4d22-bc32-5016f9c6241c", "indicator--081a0350-418e-4f85-8660-404751d290c2", "indicator--4ab61a32-bcf7-4eea-bd43-f635faec3b4b", "indicator--e55451c7-2965-4d07-9e25-717600270b39", "indicator--78ce0d67-b459-4d3e-9c3b-e1570e96fc23", "indicator--118028ec-206d-470f-8922-921bff735709", "indicator--b65cd5bb-c982-458a-92cf-ccd47f22f3da", "indicator--0f19304b-a22a-4469-b7b0-9bb7cf67dc9e", "indicator--6ebe0529-2a12-4887-9040-5e21526316a3", "indicator--1019e66c-17e8-4f3d-b5e4-cc1c788da536", "indicator--e2ef70b7-a4b7-429b-9d34-4fe04296818a", "indicator--df44fdbf-5d5d-4366-a937-7c478711a4e5", "indicator--2fcf6678-931e-4b4d-bb3f-92bee7866f65", "indicator--887ff742-2834-4c6c-8c38-44e342eec739", "indicator--c3098683-c6c4-41f4-988e-3319ac68d0e1", "indicator--4bbc4c04-d6cf-47ac-9980-ee12c143e53e", "indicator--9c80e73c-3f2d-4e6a-9f14-9cdbc7d5f181", "indicator--b99303ff-01ee-4ad0-947c-76d1d6963ad0", "indicator--2e6366c5-6a36-4acb-973c-a924c42b0fee", "indicator--739dae27-95ff-416b-a95a-0e735c27a9a2", "indicator--71fa23a8-6288-49ec-84ba-89f755554f94", "indicator--a47a8e20-100f-4cfd-b190-a89713da2372", "indicator--79bd4c5c-c9d6-4bba-bd84-fd760ec399f7", "indicator--d7db60e1-f30f-4536-8864-dce98ecd92c2", "indicator--d3021b2c-aa30-406c-8305-71fed0d24a4d", "indicator--41ff6736-599b-4574-9f09-b3717c2ff62f", "indicator--3262ebbe-688b-4a4c-bb7a-f1cd6a5944ed", "indicator--2be0abc3-907a-4166-9636-945f67c31943", "indicator--ecf33bc0-3a0c-4bb3-9416-caac93a5c73f", "indicator--32b622d5-9bbe-4682-9f9e-39c31e111cb1", "indicator--1148ab54-37fa-46e8-b737-03f21d0fb6c5", "indicator--0451a328-7a0e-4b9e-bf5b-a4d93a1d7cc0", "indicator--8ecacc1c-c1a6-446c-8637-8a3f151ea0ed", "indicator--ccd34279-b164-4a9d-950a-0e444ec2a7e6", "indicator--e888ea57-5a3d-4700-bb30-0ee2f4c01abf", "indicator--8a264e05-903e-4659-a6a8-c9621f2ec716", "indicator--9580d078-c425-4dc2-9341-c1a943840972", "indicator--bb45c673-27cf-4d87-8cd7-e817fa193b38", "indicator--8948971d-799e-4d9f-bec0-d5dda7fbd5b7", "indicator--f9cee43c-8995-47bd-8fec-c6cccbcb0fd0", "indicator--05788f0d-9391-4b46-9c91-f80ba0bbff9e", "indicator--4d70321d-5252-443a-ac1b-8a423fecdb51", "indicator--4d660a31-c530-42ea-b943-a9016de15198", "indicator--8ce0ca74-b3b3-4f07-8f79-443885d084a8", "indicator--12ea5a99-acdd-4e9a-842a-8c4cbfc097d9", "indicator--6e815bff-2057-4203-af2d-5cc9d350808d", "indicator--dc29365e-1f69-48d4-810f-53b0877e81e0", "indicator--32df7e6f-ed4f-4780-8d89-7baa78c89829", "indicator--78ba29a8-9fef-45c7-bbdd-00f0a4912a79", "indicator--eb1b9f9b-6b3f-4439-b995-cfa98359c46b", "indicator--4ff27b58-2338-4567-923b-cae59b6bb08b", "indicator--f855b08b-717c-4c82-9ed2-f13a40725e1f", "indicator--3819c205-085b-4f80-99fd-8a5d2db44960", "indicator--0bc5b65b-404f-4a85-a98f-c55bf8b32c84", "indicator--233f882a-d02a-4a12-8096-61615c1f614d", "indicator--edb782d9-8928-441b-a834-58a4d17b0ce1", "indicator--a66ebce3-cf87-40fe-a029-c3b166d8638b", "indicator--d59afdc0-64f3-45e3-b274-9a376642543e", "indicator--f9d4726b-1cd9-42df-a7cb-013c3bf33b20", "indicator--3d608347-7378-4f4f-87a9-18d8fdf0d6ca", "indicator--aa93262b-692f-4b94-aaaa-3511ee8bceb0", "indicator--639b559a-8e9b-45d6-b245-b61f3d4238ae", "indicator--4efdf28f-f928-4d2e-bf01-0171c5f6c400", "indicator--cffe35ee-8e88-4c4e-9947-c6a338ba6dd4", "indicator--32fd616b-3602-4725-a472-755f6d2abe33", "indicator--72ca705f-859e-4a48-bd22-6464cf3912ae", "indicator--4b6f6d15-62c9-4181-a2d9-6db0393cd1ba", "indicator--be34fb69-3d85-4fc1-b989-44e6a4842f18", "indicator--3f05d0af-46bb-41ad-89b2-991ec8c3cfea", "indicator--f153afbb-8518-42d8-8935-ae25edd5efc8", "indicator--a218b75a-325d-493d-b109-35b7ef3313c9", "indicator--a63dbd36-9e9c-4666-be0a-24975e33a5c1", "indicator--317166d5-50c8-4253-90d8-0eaf82d57532", "indicator--f3fc98f8-0fa7-4899-9328-65b68ed85889", "indicator--aea26725-bed4-40c7-825b-d6c7b0b147d8", "indicator--decaf552-8046-4750-ba4c-3d1270920ea0", "indicator--901f6f9c-96dd-4c5d-8348-ab2c843ff58c", "indicator--361ca14d-b6a4-4d5c-a01b-3b9618160a94", "indicator--7762019c-f075-4721-b43e-a54b4e4b050b", "indicator--29efab41-f79b-463d-9663-b9dbc828c4ab", "indicator--5c8c7272-d856-42ca-964d-097e7ffb5ebc", "indicator--dc2c527e-b254-407b-b186-b52085190f77", "indicator--a0fa6ee3-c300-4707-90a1-24828183249e", "indicator--0d07298e-fa82-4311-9a23-6bc1eb862ce1", "indicator--23293d91-1bfa-4975-8495-c74f880a7996", "indicator--1af14816-f539-4ab7-9b30-07183a1f2dd0", "indicator--a082504f-e95e-49d1-a920-8b529e08a704", "indicator--0c447e7d-c8ca-4436-9532-4d2a835fbe26", "indicator--9694ac8f-020f-4bca-9507-d0814b0662c2", "indicator--1cca0497-a582-46c0-83a7-0b221178f4e5", "indicator--bf6747ce-0762-4f8e-9b1e-7f3c40efc480", "indicator--83ddfd80-bcc4-4496-8ebf-7caf520e433e", "indicator--aec786ef-7bd6-4c22-bed3-3889205be7b3", "indicator--312fd881-4929-42c7-bcad-24bfd684ba85", "indicator--ba1e2d86-964b-4787-af7c-b73fafc0b337", "indicator--f735137e-0342-43ae-87dc-a463d95ee8d9", "indicator--f720e872-f307-49d4-b11d-4959248ee3ac", "indicator--a892142c-9626-4c79-8221-f51b20b9d249", "indicator--8c2be4f8-9d87-4ffd-9fb6-1a5ab5a007d5", "indicator--2bf52291-6fa4-4757-84fc-3fac180c240c", "indicator--ce835ae8-e44f-424c-b722-230e5e184134", "indicator--e6c6e676-ac6d-4ea0-85a8-207861edb74f", "indicator--cd01adee-24f1-49b7-948c-a059d5e9dc6f", "indicator--d7903b9a-c739-43d4-bfb4-da86b75723dd", "indicator--bbaae1d0-16ac-4302-9323-1ee61dc3b413", "indicator--858be4d3-4e7c-433f-805f-576e931db4c0", "indicator--746d733c-3476-429e-b592-dbcc15b7aca0", "indicator--4a52815b-37d9-4de7-82d5-41480725fd03", "indicator--3c1bd07e-a154-4433-a98c-555178e18939", "indicator--550d106c-464f-4420-8fa4-3218c4f6d66a", "indicator--575e3446-4d5a-4c3d-954f-5818ff196070", "indicator--b71f37e9-2f96-462f-8fc0-3cd9336fdd4f", "indicator--d6adb976-9fea-4151-8298-3742a49e7adf", "indicator--45a6d1f4-e21d-4bd7-b4ff-edc0cd8944dc", "indicator--fea7ca9d-180e-47e9-9cde-37376e0261c8", "indicator--9bb6f4ee-cbda-4395-b827-db4b2de923ef", "indicator--71eb1aa7-e891-4e4c-bc95-9d4f69350763", "indicator--77e4660e-ef56-4a51-9aa8-ccba00fbaa7e", "indicator--11f5161b-c49c-4194-8098-b07571fc637e", "indicator--3aaab5c0-2db4-4021-971c-51325ca6cd7a", "indicator--39e1158b-daff-4fac-82ba-d00714e59bf9", "indicator--d4eb0fa5-8e3f-4637-a134-95192ee64dea", "indicator--c3bfc53b-d41f-4b43-bb89-137136e60b6b", "indicator--9cf69165-4adf-495c-a271-a3f75ebea966", "indicator--9365b6d9-14bd-408d-84c0-d74bba30ad2f", "indicator--18e52519-c6b5-4ef4-ae0a-aa082f2f5e05", "indicator--48172a21-9d17-49b4-acc4-d069073a0966", "indicator--be0ff690-50bd-49ca-9260-edefd40e15c8", "indicator--af614fd2-747d-46db-8435-25baa17379db", "indicator--23ab905f-b1e4-43bd-bec3-84979af495d6", "indicator--af10e645-4e76-412b-a832-e9d47e37ea3a", "indicator--5940f12d-c2a8-44a6-90d5-7b4282c052a7", "indicator--68f88093-789a-4b5f-b80f-550334345a6e", "indicator--9395dd97-9744-401b-b4c4-84c201dadb69", "indicator--725bfa46-55e9-4ef2-8394-4bc0cf8b429b", "indicator--f2714f5c-36d6-4cec-8186-19956f4959d3", "indicator--31620df4-c542-40c8-bc9d-7eaae4734728", "indicator--800b4430-3150-461e-b07e-3c2b27189968", "indicator--8b17384d-b2d3-4840-bda5-3c3d52d2a437", "indicator--f1fdf67a-6e5c-4956-b39f-92d980cf233e", "indicator--48e796da-dce9-4388-b9f3-d8d73c354297", "indicator--98b77d96-a6b9-4d6b-98bb-0fd8db725ecd", "indicator--7d9d728d-a11f-412d-a94e-690e48d29fa6", "indicator--347cdcad-5031-4555-bdf3-ff242b9d722a", "indicator--a483ce02-2bd7-4b52-b871-111c6dee8211", "indicator--d341dd52-8cfd-4956-baae-09243f0ef8e3", "indicator--be59aec5-e1e3-45c7-a0d6-cd0b0a8d3234", "indicator--7bdf5ea8-4dbc-41db-995a-fe3127dbdc14", "indicator--dc0a6b9b-df36-4b84-939e-8a9eb9afba68", "indicator--f306a9ab-2868-4278-8283-2bee892dc042", "indicator--b6ddff1e-4f4f-4825-a97b-6100116074c7", "indicator--c6181887-a02e-41e3-937b-83954d41fa90", "indicator--97eedb35-38e6-410e-9509-d84e2a2f12ca", "indicator--7c157a29-cd15-4089-ac94-45cb156a2221", "indicator--c363cbf1-9d27-4115-8c8b-f6de6cb8d593", "indicator--0aa59706-2827-4322-86df-4e1c1ee778ab", "indicator--bb19fbf7-7495-47e9-9b9a-f95772415c8a", "indicator--6e531a21-51fe-4ce9-b1d1-73fedd5e5c22", "indicator--4512d9f6-a860-4d4b-8f22-04d96b001161", "indicator--e6eb2288-e876-41a0-85d5-860481ca91e1", "indicator--d257b6a1-fe1b-4c22-a539-d0a8d4fa3b93", "indicator--db8693e5-7fc2-46c7-9792-a83ac301a9fa", "indicator--6a638b6e-e8c5-46fa-ae02-6cdee2af4e11", "indicator--58a26c6e-5266-4470-bac9-070ee4b74d98", "indicator--6c4b53a1-2289-4fb1-8916-25079b93fc27", "indicator--806661b8-9ef9-4a5d-8989-1f17824b7c91", "indicator--11296961-4480-48ed-8291-30f68f354eb2", "indicator--3d0f1d74-536b-4885-b2ef-1944692e00c9", "indicator--aaa5e793-d948-4dbd-b0b9-3cbbde4d9c9a", "indicator--c73703a4-c9c2-4f0d-afa9-a1bfa1b4de40", "indicator--26ce6005-3adf-45e3-a20d-05abd8165e80", "indicator--0949fbe5-3237-4070-ad3a-048201d7f4d0", "indicator--43013205-b769-42d2-a4ec-3931fe261890", "indicator--29a6c5f1-a181-4d88-870c-d18ae40d6ec0", "indicator--271ce435-c2d2-4840-8d70-fe525ad189b5", "indicator--ab43b590-83da-4ab9-93a2-3727db2a9605", "indicator--6cd7f353-bbf6-4a33-a634-5de143200c42", "indicator--b25d613e-e902-4210-ab5c-79636c89a776", "indicator--8f857a7a-3020-493d-9f52-bbb9a98972b0", "indicator--9b82a8c5-e484-4ea7-9460-7dac6dee8598", "indicator--1da455ff-d9b0-4b8c-a8d7-03e08621b805", "indicator--95cd9cae-9a3c-40d6-8b6c-93f058110e61", "indicator--1e4af2d4-a489-471b-a673-56b5a1a23f40", "indicator--da36e71a-cf2e-4a59-9031-0d5debb87705", "indicator--c700a364-3dce-40f0-9215-a09c6fe7e7fb", "indicator--ff9e1047-8053-4411-82b2-9b085b866b41", "indicator--6f968d2b-9ff0-4d7d-b30a-6d1bfd45fc74", "indicator--0834539d-6a95-432b-be4e-58092d9ad3bc", "indicator--caa7dd87-dbf9-4a7b-afc0-14f0723368d7", "indicator--7b1396b0-db55-4b9f-97a3-d86a5322336e", "indicator--30bc1caa-2abb-4864-91f2-2dc3af08276b", "indicator--29585d90-b353-4ad8-b263-6f0cd5ed2713", "indicator--ab3d4250-8606-43ab-a9ec-39c8ae2639a6", "indicator--133b1c28-e5f7-4ff4-84ae-d2888d387ac2", "indicator--c0ed96ea-e873-45b1-9e8e-ba921d63d561", "indicator--01dafadc-f301-4ebc-81fa-fd51d61eb985", "indicator--cb9c0109-b390-4182-9d28-3f40abe63fb3", "indicator--73883bfa-867f-4ff2-a487-68441d036697", "indicator--13d4640e-8bb3-417f-b6eb-0232176c3100", "indicator--73ac94a9-1af8-4ecd-a412-73bff2d47669", "indicator--9573ede0-7224-463c-9419-c30439f450bf", "indicator--0d99b097-f23f-4d5c-b202-6284c0a3a00d", "indicator--6b255448-8bf9-4c47-b903-0451527a5146", "indicator--6165c35d-ade1-47b9-8a15-7e1c49a6d4d2", "indicator--537781c8-e710-4272-9b25-f3c455aa5ea2", "indicator--124f5044-5ce9-465d-83c1-3df6b6ee3252", "indicator--4ba1f078-09f6-42ed-ae10-c5a41da652d4", "indicator--db8b630d-bf58-4e97-9648-693640854038", "indicator--68971a2e-499b-44a4-b408-249f565e1d62", "indicator--233ab25c-7db4-4b18-8bca-68595b242368", "indicator--bc91d2cd-0223-4378-adaf-981ca072f1d5", "indicator--b49a5e0b-0866-423e-bb71-bf7bffc3270f", "indicator--ba973fe7-6b24-47f2-83e5-afcc14f05366", "indicator--e8c06a7a-c71e-4299-bd89-e2e240cbb51d", "indicator--2c054178-f48f-48e7-ba07-620030e9e71e", "indicator--03a6031f-78ae-4aeb-a960-0ab8b988aa25", "indicator--f2d8405a-cce7-4d03-a373-9f1887d9d031", "indicator--395c3f35-d938-422a-beb9-fa7d7828db6f", "indicator--28a68a3f-bf83-4c91-928c-afec43b6599f", "indicator--c901c2ce-bebf-421e-8842-e6bbbd9ca196", "indicator--033520ed-9f96-440f-a584-8930c6749a7e", "indicator--28965dff-e018-45fe-835a-65f6aece73d4", "indicator--4de6c576-185f-489d-bbab-6a27594a6f74", "indicator--af5f0ecc-d951-428b-80ab-7cc8b89171b2", "indicator--4ebbc0f6-f6cc-43de-820b-53c5654c6f84", "indicator--7f8971b7-7654-491c-acfa-0e7762851b2e", "indicator--9caec566-31f3-4c10-bef8-ad935a005fad", "indicator--7f703cb5-b65e-4408-9bbe-7c530a700cdb", "indicator--973ef4a4-8fa5-446d-9c6c-203668688601", "indicator--1ad7cfb5-e2ea-4550-93a1-825c5bdaca3b", "indicator--afb2e8ce-8a32-4438-ade1-37ad8404d3a3", "indicator--fa357b98-0054-4a3d-bbcb-1009f0efe519", "indicator--317f3ecd-da42-453d-a63a-e57e2c9d4551", "indicator--17dfa955-a663-4b41-8f3e-9f2be4e62013", "indicator--1ba1e394-5c28-4411-9a03-9dc47049e345", "indicator--90ec25be-9781-4065-ab4f-e2b22b2b83ba", "indicator--bd9f2542-7373-48b6-85ae-872fe9fc9351", "indicator--505969d8-db2d-4a83-9b65-d1a92ddfecda", "indicator--5e88452c-45ac-4384-8fad-45e24d932d1d", "indicator--48f2c6cd-c681-417b-ada6-262f0f53656b", "indicator--260fd277-d6b0-45ef-98db-c959ab7b841c", "indicator--728edfb3-fb45-4a79-ae46-b37fee8e4431", "indicator--e21a978a-5973-41b6-b33d-209c8fd7e5a6", "indicator--7a101953-b024-4344-b183-58ca93620c65", "indicator--8662f4c5-367c-4a52-aeac-881f44a2a6f1", "indicator--3a671845-2f58-495d-8e18-44afab41c62b", "indicator--88bff93c-1535-4cae-8c8e-55771f04f3db", "indicator--a929cb53-14ab-4220-a4ce-b1d80e9a8759", "indicator--f6746fe0-a134-444f-a1e7-7e62444a7941", "indicator--6d7c403f-de04-435a-a5df-0ee397d576ce", "indicator--1cd4dd5d-cc52-439a-aecd-610f1f50f583", "indicator--e135a71a-9620-409a-a475-1c68a68d5e0b", "indicator--77fa878e-d441-4a33-b956-55fc9ea40392", "indicator--5fede048-ec7f-45a8-b696-dbaa0a5ba085", "indicator--1e81b804-b32a-4a3a-86d7-68f29b4c7855", "indicator--c272b084-f87d-4bb2-84f1-8404b899e898", "indicator--ecb014d4-af26-452a-913b-55f55b55d0ed", "indicator--f38d84e9-6d9d-41f0-875a-2b0940c4e709", "indicator--4e6cc0ec-52a5-418b-bb95-afd1327df04f", "indicator--85977fdf-b724-4660-a1ad-cb397ee98a98", "indicator--97bd3c8e-3277-414d-b4ba-aeea88d130ba", "indicator--7173981a-ef5f-4092-8bc4-d04a02a60db2", "indicator--f39de9b2-cc7c-46e9-add8-5c156b2734cc", "indicator--31443be7-467a-4f4a-b5fe-d4f26e89e963", "indicator--9c69417b-97d4-4d1d-85a3-2c1805895607", "indicator--ed5723c9-ead4-4df4-9a07-ceb1c91a2842", "indicator--9dcdb3b8-b447-4d69-8fc2-18a397555ebe", "indicator--c0c6c693-5262-4336-9b6c-76ae2f67a96c", "indicator--cccd2f7c-0c1a-4186-b28f-cf922e34f03b", "indicator--11ebc682-bb6c-4857-9f4c-40b72d923b27", "indicator--1f28d501-2ea7-4fe1-9fd8-a6dcd35b656a", "indicator--b8bbb89a-0cd0-4bd2-b021-0be580966b24", "indicator--cb01a816-4059-40f8-b480-1d2145c9a1c2", "indicator--fd51f225-6ed7-44fb-9a2f-95f27c9dd61c", "indicator--ea38cf62-5203-4bf4-8f49-339fe542bc5a", "indicator--24ca4859-4927-4c54-84a0-184e3d5c1e20", "indicator--3fd64df0-7e04-419d-82f3-bdcdf3daa126", "indicator--f0e2bc53-e2ca-4083-a9ea-c813f73c279f", "indicator--a8167e95-5a60-42ad-a024-68f10d3572bc", "indicator--1114687d-d484-4570-aa75-97d490c78080", "indicator--9f95764b-d2f0-49d4-94c8-36ab44f178cd", "indicator--a010b1ae-cd9c-4507-ba73-0dbb29f262c5", "indicator--fd9a90bf-1cb6-436b-85d4-6563d5a75e3f", "indicator--c429baff-b1e9-49cf-996a-b278dcc43701", "indicator--8d8f66a2-abc0-47cb-919c-07922745f004", "indicator--5b1f2772-3b3e-4589-8ae5-4a3aaf4292f2", "indicator--64026704-c3d6-4cd2-a2eb-7052244f1867", "indicator--4d178f78-1fbd-47ac-8ab2-6bb430c9483e", "indicator--a8c60ba7-0414-4816-8e37-d76be945deff", "indicator--261c75de-9503-4b30-a5d7-75883ba1b57a", "indicator--e7732be8-9253-4b57-9726-0b35d7cb86d0", "indicator--7a56cd70-64c8-4662-b7ab-1b6c03066307", "indicator--029cf950-fc93-4022-b364-eb4df08c9a00", "indicator--740ee86c-1402-447d-94ac-eb64ae185b03", "indicator--4fa28e5e-7d8d-466b-971d-cf7ecde2f546", "indicator--c4ca7aff-7724-4ef4-b567-1f20ca5134fb", "indicator--17a92b3a-cf3f-48d2-8cad-8a025df3d726", "indicator--c79080b9-d3e8-4311-8898-0651afce4760", "indicator--38702296-e0ed-4349-a436-3cc838376e3a", "indicator--4076cfd7-0dbd-48ba-88ec-bfd90bb5d186", "indicator--5818bf3b-a692-494c-bc42-1021e70bbae1", "indicator--aa7edcb8-80db-44d4-b140-f7cc404a2716", "indicator--f64320ff-c0c4-4e5c-8e0a-dc68d28492b9", "indicator--49653b88-0141-4143-a420-9c90ed578a91", "indicator--b84dc9f4-116f-4247-976d-515be9f3a6c2", "indicator--7cb9c6f4-5cb2-4ef5-b220-0e058f4cd294", "indicator--be192c29-0970-46af-a74e-ad2f1eac6f94", "indicator--0bb6926e-e2dc-4539-becf-a98754c2f282", "indicator--9fdb47aa-a7c9-4a69-ab9c-f010f8a4faa1", "indicator--a2a6468e-33d6-4e00-b507-31b56d7c4add", "indicator--23e23b20-a453-44d4-a352-c608622cd0e8", "indicator--9bf3f8a4-859e-4833-a303-3519378a2891", "indicator--def307c4-db1c-4970-a265-0168b8834c0f", "indicator--2c8e9ba1-8509-49fd-8f01-4fb2f0d35a3c", "indicator--590e288e-30ad-4a85-b81e-417b3b574332", "indicator--89c709de-e3c4-41b1-98c0-fd4233d9def7", "indicator--63fa8b81-d4bd-4384-bb28-77bd696c36d3", "indicator--015ae8e2-1972-4848-9834-5913f9744ffe", "indicator--a6c37047-cc52-4b67-b487-d41cfbea70a4", "indicator--4e6a0b84-8ea9-46c6-901f-f69dcb65863d", "indicator--885f2e17-e8c3-414b-b618-4031c0c81145", "indicator--64082ad1-0442-4fc3-97ce-b3edc4ae315e", "indicator--75439022-4c3e-47ca-ab3e-ad61fbd871d3", "indicator--c4a7cc8a-1462-4b1d-96a3-1bc5ec5b065b", "indicator--d66f907c-19b6-4b3f-b7a4-a1d5584a2a3b", "indicator--c1252fd9-db73-470c-b965-ab55eec2e573", "indicator--41f07bb4-9ee9-462c-9596-b7e74ff9bfd2", "indicator--4b0a0c93-d252-442e-9856-dae8044c398d", "indicator--04c744b9-d990-485d-9117-a3952daa5e68", "indicator--5677fdfb-da84-4ab4-9c96-c2e921639de2", "indicator--b8b36c0a-6caa-418d-b1c6-eed6bbe4d157", "indicator--ed5858d2-bbe2-488c-b878-675b35d8fe13", "indicator--7a5a14cc-5038-4d5d-8a04-e9960b1d357e", "indicator--e7773d04-f0c9-41b0-aa92-6e05e6414ff4", "indicator--8aac2629-a37e-41d6-9348-c9cc53a0b761", "indicator--88919133-f896-4730-8f8b-5311b6d2435f", "indicator--9dfbfe1f-f3d2-4f53-adff-9e2d65945213", "indicator--7b789c55-c448-4507-a8f7-f613d53f3b83", "indicator--55514a64-3dc3-454a-8ec3-cd41725a487f", "indicator--512d09af-bec9-4d5c-8048-083bc4b6c6fa", "indicator--c491eb3f-86aa-440d-a716-bab5e3faa44b", "indicator--192a435d-60b6-4b8e-ba2f-700d8e4082e2", "indicator--fbd762cc-4ecd-446f-a229-1b337526c2d2", "indicator--061d5c9a-fb8a-4570-af7b-9ef3f793551b", "indicator--b5095163-97d9-44cb-bec8-8f04acbdba2c", "indicator--4f0ca758-2565-405f-a6c2-29a3f5b5e3ab", "indicator--aac7024d-e8e8-4965-aa65-10c877743bf5", "indicator--e60bfe97-1820-42d3-ab35-3bdbd223afa9", "indicator--8de919f3-8a8a-4be4-8ba3-413ec491f291", "indicator--9ce6db9d-c57e-454d-825f-0ce5ef4d378b", "indicator--9d16e67e-5db0-4227-b7d9-f6a1787039c6", "indicator--f1b121e1-d0bd-47aa-991d-45f152dc3ea3", "indicator--821ce22c-40b2-4770-82c7-da4699372a3d", "indicator--a421eca6-9d67-4292-8775-440eb56f18af", "indicator--75367b73-832f-4533-aeb7-7ced3fe79fb6", "indicator--c1daa350-c666-4f66-8bc2-7fa7e39b1ced", "indicator--a5a58f6d-68fe-45a4-b88d-9217d0ec9214", "indicator--ed88f777-dcf1-4e29-9861-acf9ddc90ba3", "indicator--2976d3a2-43bb-4468-a2fa-3edf94d102a4", "indicator--3fe893ba-b33d-4361-aabe-a66013a6dbac", "indicator--fd73fa50-975d-48ac-9705-4e5db4d9b8b3", "indicator--f802d880-ef13-4875-bc69-ed30cd4acfe7", "indicator--887595ca-d152-4098-95f6-ae1b34393910", "indicator--7df7ee82-0361-44e0-990a-5e640691554d", "indicator--d3e0a2c2-5aa1-4e1e-9200-a0ba87a3b2be", "indicator--1072ecd7-46f0-44e2-8b16-3dd454d34229", "indicator--8bd84216-5712-4a8e-a81c-d609b89bcb18", "indicator--647360e8-5b14-4a4f-84cf-5b3f529d1b17", "indicator--ee3d716b-5904-444e-a495-ed25e510adab", "indicator--92252c5c-bc59-4a64-993d-68af003bc071", "indicator--0d53d603-8e3e-42c6-a7e3-83720d1ba4cb", "indicator--0cc43422-1bcb-4838-87b7-6e9fd8679db0", "indicator--56c43b16-0f86-4efe-b530-695755ceee67", "indicator--ecfa93bd-fa6b-4b04-a910-94c55c605b3c", "indicator--8a59a860-e9a4-4fad-b835-a4d39957bc2c", "indicator--d5a26fa5-39ae-49a3-860a-4aafebbca6a9", "indicator--bb941689-c685-451d-bbba-ef530925a11d", "indicator--4d723957-0a0f-4e19-aac7-3c8f404df075", "indicator--c759e10b-ffb7-464e-89bd-d2d4f72b6efe", "indicator--f8bdeb3e-4cb9-4cf3-920b-60bdd57078d1", "indicator--60e884ee-69a4-4482-a2cd-4764c9b6d4ce", "indicator--735673e1-617a-4406-a36f-c24d66141be5", "indicator--de2e8ee3-fde3-4346-a2c1-80fe7a83da93", "indicator--a7c1e63c-196d-4972-9ee6-461888b511cd", "indicator--16a752d9-546d-491a-8c5a-b0bc7f6a9b37", "indicator--a3710d1e-d79a-47d6-8bc0-9111274c42f0", "indicator--9b767e65-f87b-4321-b212-64efbf5486fd", "indicator--0f5f844f-0c25-4ef1-a232-3980fb139759", "indicator--9ab099d9-2a3d-4518-b1b1-54fa843a3a5b", "indicator--bed653d2-f05d-4d1f-97ef-8966e215d944", "indicator--f92ed6ee-f7ab-4cf7-9479-768d03d0c7d5", "indicator--7b462edb-ecbd-46d2-8838-524bdb688397", "indicator--4c4b19ac-1eaa-4bb8-9b51-bbcd42a9a677", "indicator--98b7b106-57a8-46ae-ade4-3435d413e8f0", "indicator--1f8b1eaf-d0cf-4a45-b1f9-e5430b02ca38", "indicator--b1affb81-edf3-45a4-a830-2041e62e699a", "indicator--5305f178-4ff3-42f3-aab3-b9fb1eaf5b22", "indicator--ce27f8ac-2ef1-46c8-bec2-0518eb91b8bb", "indicator--452a3cf4-1ee4-4283-be14-800f89a46363", "indicator--d85908b1-7112-499e-b921-fe55cf23fbbd", "indicator--569abfba-083a-4c1d-8346-ce05e03f66c0", "indicator--bd84336c-a283-44cc-8997-c8cfeabd1767", "indicator--18dd3241-ac08-4a9b-a222-7a7867775da7", "indicator--8ff750a4-dbd7-4a6e-a0ba-ed9c39430ef2", "indicator--f7b7988c-421d-4047-95da-42c34f65af40", "indicator--2c69cca7-d3cb-4239-a47f-5646b18830ca", "indicator--e231932b-2287-421c-a112-df84e492543e", "indicator--db500ada-95be-4d6f-b5e7-461c2a227e50", "indicator--aff2bf06-b9c9-4bf6-a5d6-1180a4aeed2b", "indicator--3fba49bd-68c5-4971-8db1-935335e25435", "indicator--54bb5480-133e-4ce1-81b1-c37e29bc6c51", "indicator--a5d099ed-b3c8-4b10-a06f-a8ff18d79510", "indicator--ef69592f-47c1-4a99-9770-4e54a2c8002f", "indicator--1cfc85ec-0bc0-4ad2-9035-8f1c87ff894b", "indicator--3e69ac83-0ac2-4fe1-b91b-871bc30789be", "indicator--3875b62d-608d-45b7-9f25-e7c6016e5b12", "indicator--c50a4a96-e531-46b0-9a23-b6e09ca45644", "indicator--e00a5612-75a8-47ac-a4d3-98081bedcba7", "indicator--886ff87b-219b-4323-9e7a-a2396be26d63", "indicator--4b449db2-3faf-4e0d-b040-19121ebda9ab", "indicator--5ab7f6e7-6ae6-4c5e-9a47-eb7385a40cab", "indicator--98363730-9feb-4ed6-8182-b0a2601aa916", "indicator--e7663913-c0ae-4ca1-ba90-5ea334f530b6", "indicator--ae29cf0a-004b-44c1-a02b-c492889f1ff4", "indicator--ae9eb607-252c-4120-aea3-1e416809cf55", "indicator--098594fc-dc17-4658-8c0c-3a3f81b0d4a9", "indicator--37e57f8a-7d02-413b-9ff5-3d28e947c71e", "indicator--a6dde99a-ea56-4755-ae3e-16f33504d426", "indicator--883d78f4-d626-4cb2-b1ad-827ac88eb49d", "indicator--4f2de164-0ff9-43ea-97b5-7816b8ef34e7", "indicator--f5d21533-7518-43dc-aa67-1a007140928e", "indicator--1d65e238-e64d-4150-bf92-d230e72fa445", "indicator--23ac587b-938b-41b4-868e-489237d3eddd", "indicator--6046b1f3-f76b-47b5-85b5-3fa2a3de6bca", "indicator--31f8fd8b-8083-4149-a13e-89f730b87c34", "indicator--316d0106-7d7b-41c2-bc39-85e21eb5054c", "indicator--cdd1a256-d5fd-493f-85a2-adcaf632e9ee", "indicator--f211c7a8-a353-4034-aa2e-7f0f664189d7", "indicator--6917098f-eb2c-428f-89cb-95ee8c67f644", "indicator--6bc523cf-7b58-4296-9995-b34e9b52df42", "indicator--43804fb5-4062-42a7-8728-24c0360966ba", "indicator--d10c3d82-72db-449a-9210-f7ea0b93105a", "indicator--ad11391d-a3c0-4881-9501-ccc01e5687da", "indicator--afa72fa4-c0f0-4d61-a241-8ecd3c126c0a", "indicator--49789aaf-49b7-4562-ad97-0d921165c364", "indicator--8eedf982-9a0e-4b5e-83d4-bfd5f7922946", "indicator--d26a29bf-328e-4b38-a29a-5395c3bd796b", "indicator--303298e3-c055-4f2c-82a6-0f95cc1190cb", "indicator--453804f5-c9de-40b7-9a5e-819ef4ea124a", "indicator--f3251637-ea12-4bf2-af9e-1787adfdfba4", "indicator--800a1f1f-48dc-4535-8a66-a13007ce7f2e", "indicator--c001834a-7b11-4c46-bd90-b546fbfb511d", "indicator--468cf7f9-23fb-4bd3-b384-4375676487fc", "indicator--909d256d-4c70-49b5-a911-42c39ad4a5fb", "indicator--9b7dcf4c-799e-4da1-a040-b91b627aea5c", "indicator--b488133b-52db-4f4a-86a1-b89c29e177ed", "indicator--504910bf-8833-4821-93b4-1f67c91c9e75", "indicator--2077d76d-4fbf-45cd-86fa-4e15e85059dd", "indicator--5c35cf85-e65b-4ceb-8889-e35a8850b5ff", "indicator--e2906cca-4b0b-4734-b2e2-6e2ade94950d", "indicator--e83a5f28-a670-47f3-a458-9b975f3365cd", "indicator--0f1c770f-9658-4a20-91ff-fb005ee2c72a", "indicator--d2a8eba0-3904-4ccf-9785-4b6230e5b37b", "indicator--1fcc91d9-d624-450d-8ac0-80b2f46c8e8b", "indicator--27522362-182a-417a-8bdd-8f63d3bf7341", "indicator--dbe42201-ecad-4eb6-b048-a6d04003f7d9", "indicator--44963794-6dde-4a43-acdf-5e137270b83c", "indicator--7bd65158-207e-4bc9-961a-0ff05821cfc8", "indicator--ba7fac78-d329-48a3-bb92-f5f1b47ae6eb", "indicator--ac5c51a2-ea92-49eb-b980-df67ee0e4f34", "indicator--ac9dc51a-dc40-40a8-bbf2-865ab2b56524", "indicator--60c26cbb-9bc7-4ea6-8864-b410c3a90e1b", "indicator--307e6d9b-ec7b-4653-a498-977be3fed7d4", "indicator--c418dd8c-3b1d-4696-a8a0-1d2559f5f933", "indicator--384bcebf-a47d-4e92-89ff-4a963089274e", "indicator--cd8c4703-8ea7-4c78-b0d6-ec5c0887dcc4", "indicator--065cedb3-c567-499e-bd5f-7d713f91ef10", "indicator--dca72923-2e0f-4058-ace6-d9f55d5f160a", "indicator--09e97834-3658-43c5-b3e5-31096e4c1703", "indicator--0cda402a-7c29-451d-ae90-1f33c6f9570c", "indicator--40f5c7e3-b523-41a3-941d-e4efb2033ca9", "indicator--8cab4406-8aad-4d00-86f2-ae83c41f9d67", "indicator--8cbfcb56-8a00-45de-b08a-1c3ba8bcc503", "indicator--940bf3dc-401b-4e50-83f6-ce258dabd466", "indicator--f8c21ead-7173-47ce-bb5b-5b1170955956", "indicator--f35eb999-2c79-4721-8df9-daa2f2ef0a15", "indicator--7d1c62bf-d991-43c0-8931-c4acfca334f9", "indicator--a15c61e4-f2dd-48ac-9e52-b92cfae80f9e", "indicator--08fdd849-a3b1-40e9-a53e-c819a9d9e4bf", "indicator--36e1fe58-fcf0-43e6-9ecd-f7bb88bdc520", "indicator--63e29177-73fe-4a0c-8441-8108364cc135", "indicator--1b4a622b-ec87-4e03-b1ce-8750c0f75c25", "indicator--6753d9a0-94eb-4e92-92d6-21011e5110f1", "indicator--76f46a77-7e9b-4a1a-9ba6-2edcac2a6db2", "indicator--51368919-340c-476f-b28c-c512d7f7cab6", "indicator--7f0a09c0-8a76-454f-ac1d-473592c009f6", "indicator--82487948-4b2d-4d16-bba3-9e7c8c59b2a2", "indicator--960d4d69-7218-45e3-a5eb-2aad6937d2f6", "indicator--e17871b7-9b8c-4e71-bdb2-ff51d442a106", "indicator--0b69cf54-8fcb-4493-8d2b-7ad0d2862022", "indicator--f84f04ce-f60b-4321-9668-c9e7c4394741", "indicator--1fc2c3c4-dfe3-4cc2-b695-0872000eda44", "indicator--d8d5d7aa-b43f-4d11-920b-9d09a9559843", "indicator--e71460f1-f62a-4b1a-86bd-1af9db132a30", "indicator--ab026b12-a7cf-4364-910b-e372390324f2", "indicator--7ee49be4-0d49-476d-8573-ec40567d42af", "indicator--cd126311-3a1b-444b-a07a-ae29777c5fb4", "indicator--735122d2-e3a6-4a0c-8d1d-5a70a0c10938", "indicator--0af3c399-8d19-4472-8316-671efd9b158d", "indicator--cde198b6-e6c0-4579-8f68-582f728dfff1", "indicator--ff575ea7-bd7c-48bf-824e-bbff7c16628f", "indicator--47fe2a37-0ac3-413e-9b48-e1b86bfe108d", "indicator--77e2d3d9-9ae1-4873-bd67-2cd1fe0bac86", "indicator--f6422397-6be3-4955-9d1e-13d0fd5bb02d", "indicator--24ceb01d-aaf0-49c0-9700-0e64cd729940", "indicator--59ee30c3-0bc1-47e5-9f69-f6fe876e46c2", "indicator--76545f38-ca24-4557-850c-5cc688cb93e3", "indicator--9a540ea3-c34a-4639-83e6-f9a2e56c6c26", "indicator--365e50aa-d357-4ca4-b2af-c9d9c1035d7f", "indicator--cee7dee6-680e-41b2-8812-dca3bc0cda15", "indicator--7fe8c9aa-590c-483d-81c0-7f5861ab51a7", "indicator--5e5e5771-589a-43a1-a32c-033bfd8031d7", "indicator--581a1414-e252-4baf-8d44-87ae5a99872b", "indicator--5e915960-b59f-4493-9273-80297a49c301", "indicator--6cad8346-12f2-4185-b069-ecd55581d617", "indicator--81ceb0e0-3502-48b3-8553-f3d521f1223c", "indicator--c6bc8b1f-2278-469f-8809-273761bb53d4", "indicator--cef59d21-055a-43a9-be56-0988ad50ea5e", "indicator--e4ab35f5-e3f6-4c11-9e30-b02947a43734", "indicator--c2cad824-205b-4c99-9f97-d9d19eff6674", "indicator--809deaae-a01b-4f79-83c8-341ee201f91c", "indicator--d7f7c53a-512b-4f65-9211-a0b7c7dfa6ea", "indicator--3480698c-bd59-4f7a-bcd0-fcaf87d702b7", "indicator--7f5708ac-0431-44aa-8afd-db6e93aed58b", "indicator--1403504a-2df1-436a-b3c5-a3f3cf0923c4", "indicator--8382e2f7-0b21-41d1-89c0-7d587d191753", "indicator--ec07b625-2e26-4158-bbc6-588165ab83de", "indicator--6f5cfdff-3ece-499b-bcf9-c333bc8cd8c2", "indicator--b29b5ad9-59ac-4b57-b096-bd5b25b438ca", "indicator--e64a2cdb-2923-4e12-a88a-bf8e61f70b5a", "indicator--61635572-7d1f-482a-8013-6d62a698f966", "indicator--1488e6cf-2e90-4331-b3d3-63626338dd52", "indicator--792d0dbd-09b6-4efa-a086-ff64bb088629", "indicator--b11a3583-015f-4dd7-bc68-b4dabe3fbfd7", "indicator--f4840fcd-4391-47ee-baa0-75c568d5eb64", "indicator--25c2c135-843e-4d4b-85cb-030ef78df54a", "indicator--c00f1c75-1f9d-486d-b549-3e717dfdd367", "indicator--ad60ec77-3c91-48fc-8d5e-9cf39ec7e68e", "indicator--25434a08-7039-4c6f-be40-ee108bfc4278", "indicator--922d5384-891e-4476-917d-2d0ec70c9dee", "indicator--03498a67-7474-49d9-97bf-bf15c0ed8895", "indicator--12ce7daf-7dfa-4719-b0e0-37f29518cab1", "indicator--05eeb271-d0fb-4995-a23f-048445087439", "indicator--5683534d-20f6-4993-8f46-247874e7aed0", "indicator--9254deda-8aa9-4f1f-8f15-692178f3d65a", "indicator--51f956be-cb58-4b02-8f33-c56cb0476989", "indicator--a846ec58-ee7f-42a7-9d22-7916429c6705", "indicator--b4663374-9a56-444c-b468-3943453a9123", "indicator--6c4b82e6-93e8-4ca2-94d9-b1dd17339b59", "indicator--9b44e96a-df19-4d7a-9d2b-beface1bb857", "indicator--54a4b99d-c72a-4e43-a017-e2f53f063bc4", "indicator--9bd5967d-1a2b-44f5-93cc-32fd1c0832f2", "indicator--10d75c9a-4fb7-416a-bdf8-03de050ebee4", "indicator--92fb7718-2e26-4047-bae3-cb911a9fd0e0", "indicator--5b90b90b-467c-41bf-b63b-68961f31bc45", "indicator--3677b7ab-90e9-456f-a4bb-b7413d87d09e", "indicator--d2e59de7-debd-4bff-9d7d-3deb7eda9727", "indicator--5e5ccdf6-bddf-49b4-b118-b87e2303f426", "indicator--e0ba055f-d5cc-4393-a9c4-684fb24e4c5c", "indicator--a18da63e-cf2a-4b96-bdbb-a064ebfeb79e", "indicator--f1c07b72-d892-436d-911c-69d8cf8623bf", "indicator--3536652f-dc62-4e3a-b0ef-97ad0fbf56d0", "indicator--b7de5fb9-60bb-40dd-9a2b-ab940c8d9c7f", "indicator--ed9ad92d-d70a-4581-b662-5db6213321da", "indicator--1a4cc914-c19d-4a8a-93f9-62a0efa96b87", "indicator--70b55ce4-d6f3-4693-b59a-14e74928657c", "indicator--30358af9-bff1-46f5-8cb7-95f052a07783", "indicator--df44c664-4f25-4e90-9cba-ccc7ac20e72c", "indicator--52c56ad9-4525-4124-af3d-911f015010da", "indicator--dd01b4e0-9619-4a35-aec1-4978b85c0bee", "indicator--33d3b6b2-245d-4a48-b259-ae8e397fbd9d", "indicator--d4909ba4-6885-409e-a3eb-6afca705dd2c", "indicator--4b285457-4efc-4652-a524-0bfc0470cea9", "indicator--d96527c2-46e3-4254-a2e2-c32e262a732e", "indicator--9bf48dda-e4b7-4c0a-941f-dde89700fd99", "indicator--84ff4ac6-5d63-4ab6-a7c1-79ddf8857814", "indicator--1c59f581-29f9-4689-9152-2d369a4bf233", "indicator--489c38c2-17e0-4161-8fc1-cc966d73bf36", "indicator--23dc8cf2-ca3c-459a-b7cf-15f657b936e1", "indicator--63bb5b49-e230-4747-9233-d71e600e12fd", "indicator--1667a38c-46a0-4c9f-9083-7f2e820ed51e", "indicator--614b6af0-7f42-4013-9447-55376501ff3b", "indicator--b6beda05-e1d3-44af-9d07-b811bd56d499", "indicator--ac34cb64-6dd0-474d-a831-e7e7e01e1d73", "indicator--0e5bc2dd-a07e-4765-ac1f-6c49958f850b", "indicator--5466864c-84bc-4ad6-ac28-fcb2651f17aa", "indicator--37bfbcd6-e4c9-432a-a6d7-44349d8f83e4", "indicator--a51d8a35-f93f-4406-ab6b-502fd5a3ab87", "indicator--59912fd5-64fb-45db-89f5-9bfeb39f014c", "indicator--8c2ad5ee-fb3c-4237-a9b1-2b827be03d7c", "indicator--be2dbf14-afc1-4e25-aec2-4457ac026998", "indicator--649baedf-1ae5-4a0f-b2a5-e5c6451a622d", "indicator--64cd84ed-a189-4936-9026-dd6d2b7a47f2", "indicator--a927dc77-6f18-4dbb-921f-62d08b315954", "indicator--5f93d4d3-540f-4564-b978-ac20612db944", "indicator--10330266-1851-4a33-b5c5-9c7b05ce3ce0", "indicator--3790deea-3d79-431f-85c6-318306cef619", "indicator--a9cb9695-1ec1-4729-b982-eb43bee0fee6", "indicator--cf269c75-00b6-48cd-8b8d-bdaf28f5ea84", "indicator--176168ca-a31f-4387-9971-4f05a300e830", "indicator--2dca74a9-0347-489e-bcba-805f98adaca1", "indicator--2c42544c-990f-42bf-be1e-22bf68a76860", "indicator--2b2c2f07-3cc1-4ccb-9b7b-d12af1a3b18f", "indicator--ba774897-1dff-4c61-a656-fc37036f256c", "indicator--9048e8a9-9018-4043-98ff-e9c9c9863c9e", "indicator--70b07de9-cc86-4899-89fd-0af0882d3353", "indicator--6158dd8e-145b-464e-8d9a-4267462067cf", "indicator--f1a31dcc-336a-4974-9494-6e3549c0fa10", "indicator--c65d258e-0b6f-4fa5-885f-9cfa1ab7dd7c", "indicator--8022aed9-9eff-4d39-be19-193401209c04", "indicator--4cd8e924-ab69-4536-beb6-455f51e23f7a", "indicator--ff12bf8a-8aee-41e0-9ba6-207c745ec77f", "indicator--a17b9111-b67f-4f88-9129-686025bfe717", "indicator--29d816df-5bbc-498b-b41a-754d762f4aab", "indicator--51c42074-f270-430a-b739-3dfa48c6fa0d", "indicator--281bc0da-4e5c-410f-b559-2ee9598fa63d", "indicator--55690985-b984-48c3-9027-6dfdcda04eff", "indicator--5f0b01c9-ecb7-408d-9620-b0d33b79831e", "indicator--65202163-7d83-4d2b-b0d1-4d56c0544a74", "indicator--c57c8ce2-9780-4a61-b07f-af377abfde13", "indicator--6f456d5e-7e02-46c0-8982-e72583c6f5e0", "indicator--fff01595-7648-41c5-a99d-2c47eea5edf7", "indicator--e387c979-2271-4edd-8080-a3e14b7423fb", "indicator--e239402f-68ec-4102-b24b-b7d4e7edf939", "indicator--703320d6-f4db-41f9-8a6d-b66ba8f41315", "indicator--b5a399af-3d80-4260-a8ec-e81b570fca77", "indicator--a19ebcdb-8e27-4b2b-93d3-7d4ad484a4b0", "indicator--a6e266bd-e894-40f3-9281-e872d4e71e99", "indicator--9f203341-0b95-4006-86eb-c241235cc42a", "indicator--4413f869-09d2-4fb6-a46f-e00331b6a959", "indicator--563720cc-c59f-4b90-9d42-bea6bad8736d", "indicator--a336b1e6-698d-47f7-abcf-37921d4b37b4", "indicator--b982556d-33d5-45fa-be1a-866ed7eeb3b1", "indicator--045550ec-5601-495a-bc74-507bb3e659f5", "indicator--5a04493c-d38d-4c9d-b292-e633273dcaf3", "indicator--a11f3145-1675-476f-83dc-72ab532b97e9", "indicator--015384d1-18d4-40ae-abc9-acfae56a71a0", "indicator--883411e6-46d5-459d-99d1-14074760c6ff", "indicator--f884c1f0-ddff-47b0-8400-daf4dc47f736", "indicator--2d5e8353-c18a-40c7-baf1-1c58e095944e", "indicator--c207f91a-cafa-403f-b46e-862d13b1acc4", "indicator--9c949014-da23-46b0-8df4-caa8c9e9d3ac", "indicator--c409bd35-7588-4b09-a5f0-16ef4bce46bb", "indicator--8afb6307-0942-4706-b662-590437882f64", "indicator--4d2999cd-29e9-4a0a-8235-4df4c78639e9", "indicator--9b51f465-ba8d-4519-94ad-98c14635f987", "indicator--e41a8a8f-8754-4486-b978-734a6c93d262", "indicator--7c6a35d7-69bd-49bc-b84a-9b3c4269e11f", "indicator--ff6c1cba-0e27-47aa-a462-ece41ee26442", "indicator--20a9aa7b-a666-4ddc-8928-81a3138227a0", "indicator--b5bce57e-657c-4f36-8d07-1894306be0b3", "indicator--f940f145-adf3-4f09-90d9-fbe0a75937f6", "indicator--96aa7459-8716-4d4f-8b81-162c22cebd8d", "indicator--4d4afae1-bf56-48a3-834c-55d4a1ebdf46", "indicator--72469e57-9397-41d9-b8cb-a8920b4da9b3", "indicator--46ccb5b0-a87d-443c-865a-75e5de5a53cd", "indicator--d117a03a-bc71-4b58-80d7-e626e881e97f", "indicator--3d11faa2-3e03-48b0-993a-6e924ee5fdf9", "indicator--d7b0a05e-0ecf-46a8-b709-bc3b22d4d8cf", "indicator--08b027a0-fbb0-4882-bb08-4e930c0ac1f5", "indicator--6b060d97-2ca0-463c-a208-e5cc850ef371", "indicator--0bb533ab-df63-4e53-9c41-ff3f860cc7bc", "indicator--d3fd53e6-829c-4e03-b683-9f2c1d46e76c", "indicator--23e766a8-747e-42fb-b2a1-88d379e9f76f", "indicator--55fe5bf1-017a-4bc1-b087-64a38ef37816", "indicator--83390ac4-9df8-4307-a7b2-4764966ee8e4", "indicator--73fdf655-1ba9-483a-9773-15618a4c24ce", "indicator--e79eb67f-4616-4de1-8635-9be214bfd8f6", "indicator--2773e14b-0efb-4164-969e-1b74af31de48", "indicator--982ec824-ee2f-4add-bfd2-98ed5aeae90d", "indicator--1945c1a9-c71f-4958-bf7a-edbafb8fb2c2", "indicator--414c3168-7c33-4f60-b7b5-0e0a64a8473d", "indicator--dae72580-6a34-4487-a68d-bbb77129d4a9", "indicator--df42e3d3-8b90-432e-934a-801a0b3c0e2d", "indicator--9dad8a00-4d64-4c93-9af2-141811f00d1b", "indicator--d61bc583-9962-4a48-83b6-a0a80cb4682b", "indicator--a131547e-b8c4-49e7-a92e-af31199bc6f5", "indicator--1a69e096-4894-4828-9de5-9ed70d49becb", "indicator--20087e2c-9524-462e-b2f1-7897941c92a5", "indicator--043c36b1-9a44-4748-b73f-e817fef876f5", "indicator--8d972baa-2187-4afa-a203-1bef6f116086", "indicator--c05e5448-0902-4b50-932d-a831b730d741", "indicator--457c2069-e3e4-4ba4-ba01-fb9ee2df64a1", "indicator--b02c55b7-315c-4dd1-b453-d62799f1a66e", "indicator--2f873ea8-1890-4b4d-af2d-32d5057d56ec", "indicator--b03d2a0f-f8f3-4d3d-9b64-7daad5fbaae2", "indicator--7974aea6-e576-4d06-a8ae-c07b86b54599", "indicator--444aef53-461b-4052-8906-a0519410b8be", "indicator--360c042a-3106-402f-a2b3-bae03caf92a4", "indicator--1b94a0ff-3781-4c40-a026-915eccac76fe", "indicator--71daaa38-d51d-46cb-b361-921f87a177b3", "indicator--617cc359-523b-44a7-9880-5e290b044d48", "indicator--99019d80-fcf4-4fd1-8488-89987b1e943a", "indicator--9ca4d425-d310-41b8-8c16-51ef3661fa4a", "indicator--31e66f18-2f7f-4d79-b9da-ea1ed37f0b5a", "indicator--ca842f88-65c1-43eb-a0ec-8819e65d20fd", "indicator--2d499906-b09c-4c7d-9107-0abd362f6ceb", "indicator--ad825b2d-92fd-4b26-9d82-126726f481db", "indicator--3f8013e6-8697-49a7-aa88-301c01084207", "indicator--37117d7f-80f6-4fa6-a696-15366c755127", "indicator--61906494-4f08-4808-8cbd-9a6645123b5c", "indicator--a71fab58-9002-4e31-bb07-7f1bac6e1ca2", "indicator--42d9a4cb-a3ec-4759-93f4-516a6cef27fd", "indicator--538061d7-8a25-47d0-a68e-7a70d39c773e", "indicator--91554f3d-d77c-4656-bb3f-24628afb127e", "indicator--2a3bae49-c4d1-4533-b84c-6b87091cea13", "indicator--2cc54d2c-d65b-4b76-8b91-625741e94674", "indicator--a4167048-9dfd-45ff-a01c-39565ffa9690", "indicator--60fe79de-4dfe-4e6c-9f94-a210f1bc68c8", "indicator--2f5ad139-3e0b-43f3-be16-c9577020b9a9", "indicator--cfaea674-2a48-48c3-87f9-855a70a4abbf", "indicator--ec23f718-bcf5-4634-8037-50ed1367077d", "indicator--a27dd5fa-3839-461b-a5ba-499f07f853ab", "indicator--ca905bef-6e02-4657-92e6-fd1a4efec9b6", "indicator--e13c02ee-3236-40b8-83c2-e4379f1d6fe2", "indicator--35ab08f1-1bce-4e1f-91ec-587dc7f5191a", "indicator--ddf9a91a-81b5-4bbb-9f1a-610a77dd6871", "indicator--65222d0e-f7c2-46ff-9fc9-116aef577380", "indicator--052818cd-56f6-4a4f-81ff-35290c3fe9dc", "indicator--2836ea1f-9aa4-4077-84f1-c9e5f20cb03d", "indicator--cf47be6f-00bb-4472-8404-30b44b71824b", "indicator--65aa860f-417d-4769-8676-0c605b72783f", "indicator--faec26a5-fd6c-45ce-8f3c-2973b71bc3ef", "indicator--9ce13589-7949-430f-8eb1-f75538e0f4a5", "indicator--6dd180f3-73b8-46cd-addb-7ccf054bd1dc", "indicator--2946f5dc-8635-49e1-9565-5d340ffe6c85", "indicator--4cbd92a0-3dee-45eb-829f-98ed28bb40fb", "indicator--179a9a0c-0d68-45b5-9e75-6b9c54cea693", "indicator--fc962c52-f3d0-4881-a63c-ff3ea1ebe72f", "indicator--b8da9054-0702-498f-8f6f-99e90383df87", "indicator--bcacc047-024c-42dc-9ed5-3a41c0324d08", "indicator--77390568-874f-4750-88ca-8a303c537ee7", "indicator--fc49cefa-3a2d-45e7-a47b-63922adbddd1", "indicator--b7fcb66a-39e1-43d5-ba7d-0021d8c46c44", "indicator--018a3c05-f5bb-498a-9b56-121e3d3a35a5", "indicator--cf2ce79f-f07c-41cc-858d-facb3693ad3f", "indicator--0538d704-6e25-461e-90ee-ffe2e214a94c", "indicator--1693da6c-e96d-4d33-9ea9-6d02513ddba7", "indicator--23dcc50d-c57c-43f5-ba9a-0f7f6534521b", "indicator--9ec340cf-db49-4f20-b190-fc196bf4aa51", "indicator--651c1db6-3577-4a73-bce1-f7396ac3434b", "indicator--31d4c4b4-d993-4971-b852-d4cb4c019bb0", "indicator--f7c215aa-b9ed-462e-8ccf-2e2191ab67dc", "indicator--f155b3ec-b6f9-4b08-a10b-9e2384dbb4e5", "indicator--fba16a02-0764-4670-a350-3495f32a4894", "indicator--1f8555a6-7d72-4746-b88d-a1a50da8bee0", "indicator--671fd6df-d634-42f7-982f-badb16beb7d6", "indicator--8fccbf41-ac14-427d-bed1-6be6dff7b1dc", "indicator--da34b051-a6f3-4ef4-a805-3482f991f7b9", "indicator--9eb47f54-1bc6-4244-8c83-c2945de776f3", "indicator--be6a2f39-641f-48c6-af6c-c33c197788ec", "indicator--0ec0d087-9d31-41e9-8eec-c841eba4c62e", "indicator--81eedf38-e141-41c2-ad0a-fb3fad07dbca", "indicator--c9af648f-92e6-4cb7-ba9d-134f9f648404", "indicator--1d1a2392-af07-45ce-a5ad-bb2329a4c05d", "indicator--f709b652-b2d7-417e-85c1-231dcb893b6a", "indicator--a119d93e-37ac-4ae9-a9e6-349ba2b2a249", "indicator--f4b21cba-d6d8-4953-a260-e5e4b6c9f020", "indicator--a1318c90-5027-43f0-bbe6-e12562128066", "indicator--49625922-fe6d-4f2a-af92-9317906f220e", "indicator--0771e353-67f0-4071-8793-3dceb677c4ae", "indicator--1bdeef3f-0e6a-458c-9057-c94b4b731c2d", "indicator--38da3f1d-270b-4178-a5d9-c84b1f9ba89b", "indicator--21bfd8fc-1db6-409a-9cee-4519df184a1c", "indicator--9c94172d-484d-4d04-92f9-26e66576699c", "indicator--205213df-bd37-472b-8a01-6b445b2cc2cc", "indicator--a6821e97-73d6-4267-b6f7-4b9ac72bd844", "indicator--ed8447cc-d8eb-4766-aa88-2cb16dbb76b5", "indicator--3285a625-7f51-4c4a-b94a-3f766e4dbe7d", "indicator--9f4dbc82-232d-4ac5-91a7-b8509aae08f8", "indicator--e79fe16a-64a9-4d26-801d-97e44737e557", "indicator--d95e2b01-2ef6-430e-b9ad-b85ae1224aee", "indicator--c6cb89ce-666c-4f15-8d43-f8622f964a81", "indicator--5d5968db-6fdc-4cd0-aa7d-e2548c6680a4", "indicator--a2518c6e-0854-4b17-a933-bb6496da4d94", "indicator--691a199e-db71-4980-a189-b90aeebabb84", "indicator--59d2e22d-4fb9-4c9a-a565-0acc0edb4bd9", "indicator--73696a20-5fe0-4ebe-985f-66ebc07bc2f1", "indicator--ccac6f19-50ef-4ecc-9467-6efad53f7d30", "indicator--c37babf0-6ffe-4ab6-9ef0-2b0f066807f2", "indicator--a8a953ae-6001-49e5-badd-68c03744a13e", "indicator--42be1894-e9fe-4ab3-b8f9-809ba6eeb6fa", "indicator--79832c0a-dfad-46bd-86ba-397cfb53dcec", "indicator--38ad1f4e-126b-481e-8260-3dd1b070df62", "indicator--00b0a2fc-f844-49e3-b594-94eebdc443f1", "indicator--f7f5a91b-88e8-4fb0-b42e-a46fb4d040ce", "indicator--a5ee2524-593a-435e-a2ed-afde6e5ebc2d", "indicator--f8af4e5c-2e0f-4484-9bfe-82eea2749890", "indicator--f511dee7-ad24-4d05-9338-63ee439694fb", "indicator--b15e6d37-980a-4423-aa2b-a4e8490df026", "indicator--81d0f355-e4ae-4552-8cbf-805dcf02942b", "indicator--87b6eaf6-885e-42df-892f-22ffcbc397bb", "indicator--8257e402-b356-4780-80f8-4ebfab906f79", "indicator--0e326943-72e9-47cc-a171-16769051cce6", "indicator--d3206114-837a-40e8-bfcf-e4f34df9b10a", "indicator--dfd219ff-04dc-4501-a7f9-7cee90d27896", "indicator--0f01fb0b-05d2-445e-a65c-68beabc805eb", "indicator--369e42a9-109a-4299-8f54-c102dbdfcdd2", "indicator--bbb48737-4659-4c56-9482-c9b140369723", "indicator--0fa13d5a-1816-4881-882f-2ef5175a7614", "indicator--00284048-7d53-432e-a946-7d2fff41d03b", "indicator--8abadb26-4637-49d2-afaa-4e570ca7f3db", "indicator--a590033a-81d9-4fe5-bd41-6f0d95b5f746", "indicator--5311ed4f-8268-478f-85b1-b7272be1a5fa", "indicator--94ccca58-498a-4574-ade3-bbd23be12f1d", "indicator--a8231a42-1490-4278-92f5-7399173034c5", "indicator--4e738c3b-b4d2-453f-97f9-68f213fbf960", "indicator--802c4270-bba9-472b-aef0-7fa6e38c2166", "indicator--6c48b996-db63-4bda-b01c-f2dc3f30902e", "indicator--2c75b5bd-f9a2-413b-86d0-32ffd11d71e6", "indicator--03cd0b73-00ed-43b5-8f63-1b06670b0057", "indicator--9060d513-e0d5-4ba9-897b-db9931e62ebe", "indicator--5acb0746-012d-4290-871a-b8b0027f04bd", "indicator--7302ac24-d387-4372-98a0-dbb5b9c5f6a1", "indicator--c1430160-973d-44a1-b8a4-b609c04cb38a", "indicator--570d5288-54cb-4cf3-ad7a-e9d542c2e26f", "indicator--320d83d3-ece6-4c84-b7f6-933cc4e1c7d1", "indicator--275296e9-143e-49e4-a239-d2f8292cc7ae", "indicator--b6842ec6-d7e3-4a57-9b31-015ff4266341", "indicator--c86dc362-acca-44c5-ad5c-df87503210e4", "indicator--3228c05e-1107-4ddf-a0df-897b8f69f723", "indicator--e5db7fcd-4cb7-470c-8bfa-1f84fac85ac5", "indicator--2f48bab4-0073-4a80-be15-894ee0165c3f", "indicator--1435ae14-d6bd-4858-a126-c8bc1383c31c", "indicator--a3c4c923-0c9a-4093-abc9-f2246a5e92b6", "indicator--01c2de1d-7c48-47d6-8b61-d535e1661882", "indicator--cef43648-2348-4f7b-9669-159da1d9d36e", "indicator--77c0f11c-be6e-4a67-a6cb-57784d136c90", "indicator--82ff3de1-5e5a-495c-8f40-9cb233e0acc2", "indicator--659e0f5e-5cc4-4d9c-8afe-39bbc733e48b", "indicator--510d5e19-b9cf-43f6-ae58-ca440ce11098", "indicator--9c376d6d-1e8c-4012-84e7-9404b6a4dd32", "indicator--8758744f-ae5b-430c-af86-400545dbf083", "indicator--c598d110-da1e-427c-ad1e-c2346127a132", "indicator--3717a8f8-7e41-4996-972d-536ab28fe72d", "indicator--bdff78b6-68ec-4a7c-96fb-b61967284e1b", "indicator--2410c1d8-5f4b-424c-b071-94db0f1a73ed", "indicator--3bf808ac-8ab1-475d-9c74-69952491581a", "indicator--3478ea25-4970-4b07-8160-b5e462c01136", "indicator--168b6ebe-952e-477e-a3f6-808daa5e7273", "indicator--408674a6-b431-4228-a2d1-b36b92a9711e", "indicator--ab403597-01f1-4c7f-8f4c-666c6f52330b", "indicator--682e22f9-c780-4049-8783-562824ec3969", "indicator--c8269e2e-6898-4973-9ae4-a3416851c38b", "indicator--c84ce2e0-6196-4723-ab79-fc1dd18d1685", "indicator--e154890d-73c9-409a-b65c-8e04e1432166", "indicator--46003313-42f3-43e2-8502-e1f2443f1f20", "indicator--d4f07976-1855-4dba-a856-4fc8c48cbff3", "indicator--e71c89a9-c2ff-4155-94e2-b2d03a107681", "indicator--06e52de5-e05c-41e5-9dad-c76ad0d058f2", "indicator--adda91c7-0bee-4caa-9842-ed4c91f908c5", "indicator--1696f5eb-d840-4ccc-8210-432481049d27", "indicator--675d8aeb-bef0-4d36-9fb4-90601c5470fa", "indicator--76290a7a-6070-47c9-b25e-87a95ce54b8e", "indicator--9eb7d492-658f-4e40-9804-01844d3820c5", "indicator--0ca47d51-b53b-4cb3-9ed6-6133b268be14", "indicator--0dfc5859-4157-4a82-9059-20bff5c2f7e1", "indicator--7ee9ddd7-0208-4fe9-a5bb-dd4aad993939", "indicator--09e5fc63-bb4f-4f50-a5a0-cec667ce314e", "indicator--148a7620-d853-48f7-b392-8ce4040eb51b", "indicator--22b3eb0f-e2b2-4251-9be3-2ead90b52a1a", "indicator--c7b0f6e9-deca-4f17-9b16-a28352b8edde", "indicator--a8a940c5-9d31-4b31-bba2-f523c4baf965", "indicator--76c680bf-e1f9-41b4-a1da-9fe5f40ccf5f", "indicator--3aa31e58-803d-4f2e-a54a-9b9492001453", "indicator--ecd14817-c03c-4498-ac83-bc72f5e7ac0d", "indicator--875b9440-ee41-4bd9-a0a6-4001166e85b3", "indicator--fa7cceb0-ecd7-4f9b-8b10-99cd4eee6f0a", "indicator--753650fc-a4ce-422f-90cb-044f039f00f9", "indicator--8d1aed42-7fd2-441f-a4f5-3682863387f9", "indicator--d9ab8ace-d67a-480c-8824-26dd7f26adfe", "indicator--6d795b85-1fef-4e0a-b30d-703dc80fb6a9", "indicator--c83e2349-6af2-4db5-a29a-cfbf8cec94bc", "indicator--f7192193-6cc2-4bb3-9438-335a4be02f3f", "indicator--30796240-ea9d-4e9b-b62e-5a6572b74e51", "indicator--99086b3b-de14-4d80-9249-62b1532ba17a", "indicator--20a09d62-965a-4640-978a-bd87fa785e36", "indicator--9d420764-2797-4fe0-af5e-7e2b2ffd2cbf", "indicator--55ec2c6c-54f5-4004-a179-fac81e1cb225", "indicator--b2a93f17-c604-4ea5-b1b5-7f504cf620ac", "indicator--e0cbb44a-435f-4e6f-9434-d6cc50e4b8e4", "indicator--00e27541-ce0d-4450-9068-023d1316d6ab", "indicator--86db42b8-ec0c-4dc6-8f0e-14e573bb23fb", "indicator--81bfdfc5-431d-4de4-9d96-2c5754e51628", "indicator--84ecf9a7-06a5-4bfc-ad57-ab2306efa8e5", "indicator--8a80554b-8710-46d3-bd9e-f96a623069ba", "indicator--c587d882-bba6-4b2f-9c60-630bf654cfaf", "indicator--fa591802-8191-45ca-a9eb-dba5cda8f9a5", "indicator--913e723d-7b84-4d81-ab28-b2d06d88ed81", "indicator--b4a6c1f0-9acc-4064-9a7e-9dd94178e15c", "indicator--b9f37e03-0352-4017-90d6-ba89419657f9", "indicator--5b5a02e4-8b5a-4f58-84cd-aa540e54be32", "indicator--4f43f2cf-05a1-4256-bec3-11754dbb3171", "indicator--9955e9fd-59d8-447d-8600-a948846be5de", "indicator--44ef476b-cb9f-44c0-a5e0-94066dffdbc6", "indicator--f75b9c35-5990-44b9-b35e-b22e2ea0aa5d", "indicator--8afee985-9d8c-4544-a6bd-6aa1f9f62671", "indicator--7658fced-b0bc-4b9e-8d68-627473ce0d78", "indicator--7f04c6f8-c961-41a9-8625-0ed35251d147", "indicator--ce39eb5e-4e03-49d8-b5df-f532c57e37fc", "indicator--ae831980-e1e7-4fec-8b8e-5c6df31874d3", "indicator--dc37c2a2-623c-4a9f-9057-ed36744a635d", "indicator--4b2b10f0-b2df-458a-a668-bf6423ebd1bc", "indicator--8786a45c-4fe8-4c8d-8688-bdc016619948", "indicator--14f9b4a1-334a-4631-b4bc-389872b51cef", "indicator--6f3574cd-a3a8-4b12-9edb-e5f955ab976b", "indicator--f3ad1d1f-7d55-439c-98fd-d24c5ce8bb74", "indicator--8627a264-3d8e-444d-b37f-91c4c3c841a2", "indicator--3c205d27-06e8-4237-8cc1-ed44fef196bb", "indicator--baad7e46-6c61-46a8-8675-6732a4dd4390", "indicator--6fdd3bbf-5368-4006-9db8-7bb4181351af", "indicator--f8a21ee9-2e4b-4cce-8110-0ec10fd90fdf", "indicator--0487b8eb-31c3-4a4b-9e99-935df1c5da20", "indicator--9d0302ae-e58f-4c36-ad3f-12f2df4d40a4", "indicator--223ac1c1-13f3-4d3c-9fef-22cd6b8a67e2", "indicator--2a0c2944-8737-4e66-857a-5da41d55501c", "indicator--9693e321-42e0-4ba8-ae16-3363e6e1bdfd", "indicator--931d9f03-b994-4865-b34c-4e91e9be94f5", "indicator--17569027-50d7-48b3-b643-e8bc591c9fb4", "indicator--42448dc5-082b-4d22-adec-fc7169d4a001", "indicator--ee362607-1d74-46ed-af0e-9bd17a448fac", "indicator--31879967-c071-48f4-8700-dc0949f252b0", "indicator--d381f727-cfcd-4c8c-b2b5-ae3fbea9da27", "indicator--97575b48-918b-4848-8fa5-2cfe3f514bbc", "indicator--b67541dd-2409-4487-9414-d5ccb69507ee", "indicator--f6132555-ba5e-483c-9820-ee9154b1f251", "indicator--3814a00c-4ea0-44b8-af1e-aa78a5ca6738", "indicator--45e150f8-aee2-41e4-8dfc-4c3fdb096bbf", "indicator--049336e8-4976-434a-b9cf-f04f333d4be6", "indicator--5531bfa7-88b2-4e17-9ecb-3f7917ee57bf", "indicator--0b287226-9b23-4750-b794-554e8a5276ce", "indicator--95deba9b-cd9c-4b3b-a520-29b6386be12b", "indicator--52cde3e3-7de6-454f-b033-082455e8421f", "indicator--f34f2154-4e03-49aa-8ddd-60eccc4ceb4e", "indicator--4727c8fb-ac33-4a73-ae71-e74eb033bf07", "indicator--6779d5b9-b69c-495c-9a87-c8f5c466b852", "indicator--37e9991d-78b5-4a4b-b414-ff8d028ca7f8", "indicator--a4118224-a4ea-41b4-b4a2-5ff9d97d714a", "indicator--0f6fcdb7-855b-4c54-9ed8-dafc572ab66a", "indicator--afad4b9f-a62e-4991-b195-a522ca6a0c2e", "indicator--81eb9f70-6c96-4022-86c0-402a43515d3b", "indicator--d4bd9c97-4125-4608-a992-6242c5dc51f7", "indicator--7536b825-4170-4a84-8628-f4a30c536e5f", "indicator--8c690bcd-36c7-4adf-a082-144e522e9060", "indicator--a5cdde58-4a03-46f8-a1eb-b1671a865a26", "indicator--8024d50d-157f-4455-aac5-2ebdb4748296", "indicator--e9dfd38b-6943-4a94-8219-95e56a3ce58b", "indicator--3a4cf642-d78f-450c-873a-a6e52aca7a7a", "indicator--612479c6-9340-4dd3-a284-325b3dbb76ee", "indicator--dcefbaae-9ac7-49ba-9f6b-8b01e6fb365a", "indicator--03eda14f-9a61-4073-87d0-c9b17b0a4109", "indicator--de521615-50ba-428c-a13a-d19b1c27d7d0", "indicator--af593f03-9972-4b83-aa16-e7127bd0b5a9", "indicator--2a1a978b-6c86-4e82-a772-dd619f3c1c45", "indicator--2e92b287-bdca-416f-87f3-4c6adeed81b0", "indicator--c1d40df1-0a51-4505-ba2e-70719f2cb93f", "indicator--9f96635d-be11-44a1-88ff-19464f0ff004", "indicator--ceca3bd5-9925-4479-bc64-3730fd5a6c1e", "indicator--8ba6a080-81c9-407b-8806-6f6f66f2d2a9", "indicator--a3a3a190-caa4-4ba4-b90a-8da98eeab867", "indicator--4d1bbea3-3839-45a0-86fa-c8d5502570ec", "indicator--5b5c9258-1022-47f5-8480-42e69cae56e2", "indicator--105f90b3-e77e-4e70-89fa-2024908a4a88", "indicator--21420ea8-0ee9-4127-8b7e-eb155ca3c7f1", "indicator--7ae43719-45ef-411c-8b76-f4a6e79e9144", "indicator--1e1ebd4d-8fc1-4358-b6e2-fa830859c63c", "indicator--79fa4323-038a-4d4f-838c-a1b8a52b302b", "indicator--0837ed43-f970-4496-832b-5dfd6fd3e343", "indicator--fde1c517-1275-46fa-ae49-8fc6544293cb", "indicator--d87f97e1-cc91-426b-bc54-5d45bc883cb7", "indicator--d4f2bf5b-cd89-4145-ab75-93a48137eed3", "indicator--303d0258-970f-4d2d-9421-dce347fab54f", "indicator--a601abc4-3641-4fd6-bd06-f07738cfd3f1", "indicator--e66f80a5-0455-44cb-b8e7-d854cbacbd67", "indicator--c2b91995-afbb-4f46-8733-d7f8bbad0aa5", "indicator--fcb109ab-81bb-413e-843d-04e250a50129", "indicator--eebdfcc3-de43-4b90-baa5-d91dd32e3bb8", "indicator--789f2de8-c802-41f7-a2e6-f62254d21d1f", "indicator--e441ab4a-98c4-46df-afc5-da66f2c75ba1", "indicator--d76f96c9-0c6c-4353-b49d-a488774bfc06", "indicator--9d947de2-83d5-40ed-a264-bc2d96585882", "indicator--82cf75f0-8784-4583-bd23-3f86d36b22da", "indicator--a9e18902-1f8a-4e49-be4b-09b16d0256e2", "indicator--3ebcdb0f-5c85-4fad-a989-6bf8304f8033", "indicator--a28a1add-657d-4049-92b2-e6992f07af04", "indicator--98276da1-5199-4bdb-8e11-7948ced50c88", "indicator--5d7165ca-b215-468f-9568-2d8422791c28", "indicator--efa60cea-ecd1-4d8e-a0e0-93f50db2b3ca", "indicator--89731c1e-c7cf-4540-958d-f155c60378c7", "indicator--dade2438-2ad8-4e2d-b3a1-41e9bb909d84", "indicator--03ef0eee-a6d5-4d66-a52a-f8882e8b12f7", "indicator--bfa18a9e-972d-4f99-b9d7-e290b8b527de", "indicator--195fde53-6ef7-40ca-851e-5d58739c2a4a", "indicator--efcff708-c566-4728-b637-4b70e4e72f1a", "indicator--345da2d2-9df2-4c17-a73a-41a99dc8f0e0", "indicator--68618a83-15e6-4773-8cd3-027e6a8b64f2", "indicator--d3ae8f11-26a4-44d4-82fc-9b3c0750840e", "indicator--3f28bd3f-239e-468c-9bfb-6914f4de770c", "indicator--d4db0b12-d9a0-490c-b88c-64dd3f155003", "indicator--9e164aba-6d3d-4dd8-925d-f96ca4bbd5b5", "indicator--5d97141f-8838-49b2-b8cd-904a3ddbcf50", "indicator--ccdd6736-f5df-4ed3-90bf-8898323581fa", "indicator--56775b98-e8c5-4e45-bd1e-482023cae45c", "indicator--17f04c60-4d62-4de1-8279-10c34412356a", "indicator--287e7db3-0cef-4285-8685-5faad70f8fe6", "indicator--5b2303a5-4320-40fc-999e-46fb92d3236c", "indicator--887e0fd8-3c92-4c8f-ad85-ce606cbd48d0", "indicator--4cb11290-a8d4-42b4-9a7f-86d78b454c60", "indicator--d3580188-b335-41a7-b899-5039309c1ac5", "indicator--cc6ac6ef-4384-4bef-a9ae-ebe23ca3d161", "indicator--263eaca6-436d-49fe-9663-c82f65aad2ae", "indicator--c343748f-e72c-4b64-8bc8-930a1fe442dc", "indicator--901145a2-122b-457b-9f36-ad2803f2dcaa", "indicator--a30532cc-17bc-4ff3-90f4-0b61f58a10ed", "indicator--a3676240-191e-4a38-aba7-fd343b1d9cc3", "indicator--4815f8e8-bbef-4183-91a4-73b490c0f231", "indicator--087baa9e-f21f-42a8-badc-28a2c2e1611d", "indicator--421521c7-7980-4185-84fe-77dcfaaf70bc", "indicator--3c42ba69-fb17-4ae7-921b-5403669c86fc", "indicator--e525faad-ed93-424c-9d92-0c42d7b4beac", "indicator--4e1d46a6-ec02-4bdb-886e-b3f127e86c7f", "indicator--91adaec2-bf82-4b64-b55e-e7b6a809a6bc", "indicator--818b055d-7552-459b-a17e-79ffe67b6886", "indicator--0eefa1e0-d41f-4956-968e-7789e97dbbf2", "indicator--48696b47-9ab4-4770-9a47-7996232c6945", "indicator--69cdac98-ef79-4dde-a704-e272f5b6eb6c", "indicator--5ff65b18-baf7-48fc-ae3a-1d61ab8cfb73", "indicator--e9e45c48-13bd-498d-b919-556b02824e0a", "indicator--8bb1b3dd-904a-4565-a0e5-ac073915729a", "indicator--8f4076d2-7c60-4417-9bac-c2035adf4201", "indicator--a27fb848-c281-4e47-b33b-027005947805", "indicator--556668a6-48b9-4338-a79a-e8e7611bb93d", "indicator--27a83840-02c4-4470-8f8e-e6d3382596fb", "indicator--aa09efe2-baf7-4c83-a4f7-6134bca0cb03", "indicator--9e6b7415-8897-4022-b3fd-0540b5fe7385", "indicator--93fe372b-7c91-468a-bd29-7a53c404356a", "indicator--dc7524d8-34d8-4c4a-a411-0ad187646e33", "indicator--afb5a9b0-a0e1-4e74-bd5f-a9c8a116e6c0", "indicator--9bed785e-4d7a-4528-8056-caf3042d469e", "indicator--d1c3a641-a0b7-4e42-b237-f16398263b75", "indicator--8583e6ab-0e4f-4601-b480-1369e1c12946", "indicator--fecf0395-1e55-4ca8-994a-69583a5bf566", "indicator--86b8b10d-3d3a-477b-a6af-ee5d5f661adb", "indicator--1543d43b-14f6-4919-847f-320c553a5a86", "indicator--03736f04-e0d6-40b1-9759-ff1965b4ea58", "indicator--6f85742d-7e4b-4d7b-ab17-a35bc71bf1ea", "indicator--a7b60602-6ea4-497c-8d05-151b0a4aeaa8", "indicator--faed994a-945c-43be-b6e2-249793032d28", "indicator--50f00a5a-7a85-4c15-8d8c-3dd2dc8c4b2c", "indicator--2cb5d6f0-382f-43e7-9d1b-8ec8163fbe91", "indicator--b51f705c-22a2-423b-acac-34d4b220d958", "indicator--faa4858a-9fad-424b-ba34-7044b6e521a5", "indicator--c5bc2692-8ad0-44d2-ba9f-d9b4ef3e9b59", "indicator--3c123306-3ace-4e4c-b826-6eabca168148", "indicator--1cab1dae-e624-4521-b9ce-9c63e741bd9f", "indicator--3444dad8-e08d-4aad-8acf-4bd52a1ec0df", "indicator--9cb7bae3-c3bf-4fb9-bab9-697fab0a4f9d", "indicator--c3380b9a-9d5b-4f8d-b58a-18e5049f42e4", "indicator--e3e725eb-6dc4-4ca4-b0f2-40284dd772f8", "indicator--6cdb0f25-43e2-4f86-8bfd-a5c53faf261a", "indicator--efadc7a3-58cb-419b-a236-b07c49218ddd", "indicator--22713628-0aa7-42fe-8759-6220a2cbefde", "indicator--042853cb-797a-48fa-9a3a-fbe541d3d27b", "indicator--5949f87d-cbcd-43a4-9bfc-e779fd606876", "indicator--3ce49b2b-82a2-4aaa-a952-dd6b21379a77", "indicator--7cd610c1-be55-4b1f-96d7-6e55fcc4cb13", "indicator--9ea7ebcd-2bbd-4b15-95ec-832fdd2e51d6", "indicator--8f3248ee-864f-40a7-80cd-a631b72faddb", "indicator--5a8606db-def1-43c2-834a-0b2938517c26", "indicator--1fb2c62e-78d9-4366-83bb-cb6646e1a4a7", "indicator--af2077be-4f5d-4ce9-a913-a803060406f0", "indicator--b1896617-d028-42c2-b9f0-fbdb877dcd4a", "indicator--025a6658-0c9b-4f20-97b0-740c061d9920", "indicator--0d8f09e4-774f-4075-9aa8-bf035eb38b4a", "indicator--1b178f8f-3258-463f-8a6a-97c81c8b0b61", "indicator--c45a4232-e1fa-430a-8bf8-7fb7376c704e", "indicator--b52ff872-3fb0-480f-b1e3-f77c5f5527b1", "indicator--8a278fe3-d6ac-41a7-af2e-22ce7f0ad839", "indicator--0ec4a338-be07-449a-851f-73257b1991fa", "indicator--b387126f-af57-4ded-bc6f-9cfe48d9aa06", "indicator--b422a670-d094-446a-a8b3-819eb497d22a", "indicator--11e90fd7-f09b-4bd0-8366-d11774e68961", "indicator--6c30b0ae-d4fe-4238-aa7f-4903c569820f", "indicator--c21b719b-6aad-4f70-a4fb-ccec38b19cef", "indicator--73cf49f4-2da2-42b8-9727-7a2e5dbd1ac3", "indicator--389eca7e-7aa2-46ae-95a8-5984cbaff5c8", "indicator--31866b39-cc31-4aff-acb4-8328f27aa8b0", "indicator--68ba99f4-0634-473b-9ce5-71a53802634e", "indicator--657f29e0-175f-4128-960f-9bd55752043f", "indicator--d533f212-cd78-40b9-a298-a3b308f8dc75", "indicator--e7c74c21-71aa-49ea-bd85-e2f5a63b6af6", "indicator--90aef04a-1401-442f-aa82-e451d6910ad7", "indicator--28897aee-fbe6-41a1-93c8-c5baa38c9252", "indicator--3bc6e32a-d9a1-4eed-a012-a48c49276678", "indicator--2ac356b1-48d2-411d-9133-e0a7088c12be", "indicator--470b0a46-2697-4a2f-8755-933a4535e805", "indicator--8332b211-c88a-4b9f-8f0f-350aff1ac0cf", "indicator--2b56ea88-064b-49ed-b796-e03866eca6f8", "indicator--3d6c9f9e-4a23-4c12-8113-075a6d1ed7a4", "indicator--63c1e55d-6df3-44fe-b7d7-cb5e632a0fff", "indicator--b9d92712-b31e-46e8-afac-a7b52a648c5a", "indicator--07f59e41-50ba-4696-8b2f-a9cdfc8cc985", "indicator--9aabdc93-350c-4d8b-afed-a17f65879b47", "indicator--53ddb31b-84c3-4a9c-81ff-2fcd72b25cab", "indicator--73b8b40d-1883-4437-9d36-3d1415a10786", "indicator--66dc4647-7af6-498b-82b7-14f4b7e193a2", "indicator--a2534c89-4e71-4559-abb4-1d9814b9de1c", "indicator--85e37476-68a2-4447-b209-abb309536801", "indicator--7435d251-f3be-4d34-bd58-161080c60f0c", "indicator--81cb0144-911f-4d42-a976-37fdfb0ff7df", "indicator--a62b4f25-0588-4e27-82ec-59a258f0d702", "indicator--24fee239-ab3f-4d54-9fcc-18d920eb4711", "indicator--e200b572-1004-4e98-9b16-c7f93a01b919", "indicator--01188c30-ad50-4625-9554-ca32ca733a47", "indicator--6b7235e8-c1bd-4116-a1af-9ceb0fb41e6d", "indicator--397ad448-22bf-4512-909c-3e2d3457864c", "indicator--bf369c3e-3334-458e-853f-1575a791ce97", "indicator--faced307-df4d-485e-a40e-62a13c0d2b3c", "indicator--fb6729c8-e65b-43c8-8edb-9b340bb4850b", "indicator--328702a7-6843-450d-82d7-13da7861730d", "indicator--5e00ff13-969c-4f69-a20d-6e905ad101f4", "indicator--d6f2695f-f89c-44d9-a214-f8caea393432", "indicator--83e4a57b-65fa-41c3-af54-83e077e83ac6", "indicator--5a0cec3a-8062-456a-90fe-bec974072326", "indicator--1c3fe92c-7013-4d96-aed2-748305e723fe", "indicator--0cdb8136-5e50-4723-a282-d4c192390356", "indicator--cc3d9d80-e112-404b-a2e7-5481d724637b", "indicator--3fdb6cfd-e839-4557-a571-2e7bd16baae3", "indicator--8c7274bb-7081-4b28-83ae-04680826ebca", "indicator--240a4d1b-46d9-4fd7-875b-0466fa7324a5", "indicator--bc0b1070-3184-42f8-b7f1-0b800cb5ada1", "indicator--62558f43-a065-4fbe-b483-829020a6af70", "indicator--425b97e8-68c1-4ed0-b0a8-e6882b062481", "indicator--d3aead1c-5b99-42b9-a1c6-053463805000", "indicator--1283b618-7de1-402f-829a-57037d1016d6", "indicator--fb839e8e-e68e-456e-b091-93470b1a253f", "indicator--324eaa7c-e776-4968-8bcc-f5c8543c4380", "indicator--b0ec4a4d-a2dd-43df-af59-529e9a93aac2", "indicator--4a628574-9051-46e1-be13-a619ec0a0268", "indicator--f3030b00-f31c-4190-a80f-c505ed4eeb97", "indicator--953d87ef-be75-4fd0-88bf-2c8f48c496c1", "indicator--24684b0d-86c0-4159-982c-2ff4a53d419a", "indicator--2c18f711-bb83-473f-ace6-6023f33e188d", "indicator--d51a8bc5-f02c-4235-9099-eaf5ae730deb", "indicator--9b9be148-8f65-43f5-b95c-a5da852f1357", "indicator--2c123ac5-529a-4c0e-bf02-9db0f1456871", "indicator--a87a67cc-eef3-481a-879b-e5fc54f5c5d6", "indicator--6f6cf066-1dce-46e9-a94e-2fb35ff588f9", "indicator--eca5e130-194f-4da0-835d-250733cdf95a", "indicator--1c4d8532-eed4-4364-bb6b-d9c24b010de5", "indicator--78aa4074-d3b6-4c84-8c35-250dc129120e", "indicator--7a04d174-ac63-4f7a-be44-df1875348bd1", "indicator--ab90154c-212e-4fe4-a98e-b8dd29c2484e", "indicator--b8d3c5ff-2606-4bdf-a8bc-f6581e55f070", "indicator--2fb5d627-413c-4a64-90e2-c58ba0f23b6f", "indicator--95825a89-90ae-46cf-8b5b-07c9c79453e4", "indicator--2c3350f1-79b8-4947-9cfa-687f5c0be229", "indicator--a903a5b2-c540-4e83-99ee-641833432f6e", "indicator--cf65bbd9-727e-4de7-9ae4-56f5aeac9ef4", "indicator--557adb0d-15a9-4c5d-af32-b2c27a73c539", "indicator--e40ef739-87ba-4312-8bd9-d47eee80894a", "indicator--5ef7f498-888c-4969-8043-9d499d32569e", "indicator--2da4aab4-0d07-40eb-ba4a-3f2708392ad0", "indicator--c6e590b0-f0c2-4ba7-bb2a-9fec615882bc", "indicator--bdf08607-e45b-4903-8160-253a2fff8a6d", "indicator--2f3f3780-430d-4885-afd1-5b3d6e88a8f8", "indicator--2e312dbd-714a-4bfc-82cd-843d1968e7ca", "indicator--16f613e5-00a7-446c-a02d-d3757b0fab1c", "indicator--73ceb7b8-a18f-4485-b2e6-06bc724e3fee", "indicator--a3ef5ad9-d525-4004-8251-51ee5fa52326", "indicator--fd2cc010-cd2a-4278-9340-c95a66c28ef8", "indicator--d843a784-5a5a-40e9-be00-fa70bd126710", "indicator--7198d794-7d4f-4a86-b38e-caa2b0dddc6b", "indicator--a2eb309f-67ce-49d9-a004-6b12d887da4f", "indicator--2489c093-d789-415e-9d5f-0aa6aeba272c", "indicator--0ce766f7-ba42-4a66-b23c-3064b36a65a9", "indicator--f5e442a8-0c84-4134-a1fe-0fa2af1c8d1c", "indicator--9aa79ed9-7737-4976-b802-02fe3959444e", "indicator--c9728801-546f-403c-ac79-e20696059d01", "indicator--1778e8df-168a-4c4b-8e51-44c2178c4204", "indicator--aaaef807-9837-490a-8ce7-f17cd69618ac", "indicator--a69892dd-ca9a-499d-93f6-7b29ef1ee50b", "indicator--e7e13245-f42d-45e1-9a58-2df8bb8b65ed", "indicator--bf4a6444-f2c9-4f1c-a867-33113653d1fe", "indicator--ef1d43ea-1e22-49d4-8a73-6ce294d37759", "indicator--61db8fc0-ca6e-4d43-a7c5-637009e42415", "indicator--a4aad552-95fc-4d6f-9f66-00e48dc11bff", "indicator--0b52612b-5a20-4b2c-b9fc-7c7f94d735a9", "indicator--23c8c76a-16d3-43e8-987d-214da6b85344", "indicator--d4b4072c-b69a-4d38-b111-ba2f77710ae4", "indicator--5348f2ee-50a8-4125-ade4-ed040760789a", "indicator--5673ec5f-046d-49bb-b5ab-a6b93b0b9c98", "indicator--e76f8077-fb54-41a1-842e-d457f45393f7", "indicator--31eb8f75-5b0a-4add-afd3-07868811d391", "indicator--9e18506e-7bc0-4333-8689-956909a163b8", "indicator--10b66e81-45be-4913-937b-62fc692602cb", "indicator--605d4504-e4a3-4b6c-adcd-bf7d4e569f85", "indicator--e15c417c-c90b-4a1a-8177-b0ea4d29e404", "indicator--559e9644-ffd0-47b6-911d-9cebc7d45f74", "indicator--8233a1d7-9fab-42b5-9b96-b6b64706515c", "indicator--5610edf0-1035-470c-9bf8-a663c3b96b6a", "indicator--4d8d8241-41c4-4f04-aca9-4db2b026eabb", "indicator--50e25d65-11d6-4fb4-8ee2-50ae3aa27bee", "indicator--07608083-91e8-4d86-905c-4a2f28c377fa", "indicator--e04e3f1b-5738-49c3-b833-595d4a4ae93f", "indicator--9d79fcde-e1d9-4de3-82bb-7a9e225b2d83", "indicator--098e0245-a31d-48bf-ba0d-a6fbe5b0b371", "indicator--62d6687e-00af-4221-ab07-03528cbfb162", "indicator--d008e76c-a92d-4ea3-9fa3-63ba4696547f", "indicator--907e70a1-1564-4c4c-8335-ba654fb5ef50", "indicator--b6c075b7-7316-4391-8d99-3acf740885b7", "indicator--e26c782d-53bb-4fde-a685-2a749b6f5f18", "indicator--0f11e054-44a8-4862-a5e6-f6d5089febc9", "indicator--48df9e20-86db-4547-93e8-a45803f8e8f3", "indicator--7162e483-de79-4b81-bf9e-63391b950fe9", "indicator--7a4a1475-e44b-4fda-9540-5d8523721014", "indicator--8a471f4a-af74-4db1-be4f-b96e0ca43213", "indicator--f542ed9e-7227-45bf-a189-41fe3dede4dd", "indicator--04e5712e-bdda-41a3-89be-79526decd032", "indicator--2c6b28ed-819a-432b-b736-f1732c76122b", "indicator--05add764-4f89-420e-9049-5396e7f24e14", "indicator--71185290-9a57-451c-9b2c-c3b9fb509c01", "indicator--38a66e95-6d70-48cd-a9ae-9990c6ee37f2", "indicator--3b022c91-5037-4748-98de-a7b9e6e78b01", "indicator--634e36fb-9a94-4c6b-aa70-7937bfeaf5b9", "indicator--21b74e54-a529-4d80-afee-1839901262f1", "indicator--3328d677-30f8-4e56-8704-fad100afd5c4", "indicator--392a051a-2553-4526-a59a-d93b1fcdc214", "indicator--848a13f6-f8d8-4e21-b0aa-ad98240f62e4", "indicator--9f45dee1-38c7-442e-b0b3-34104c8ff4ac", "indicator--781c33f7-a109-4e3b-8257-09bd198f00d5", "indicator--820930d1-c87d-40d2-bc7c-533a86171b71", "indicator--26fb0ee4-be4b-4da4-971d-63a605d846d6", "indicator--f3616978-39c4-492c-aae4-b212fab9a54c", "indicator--5574ae83-5756-45b7-8bb5-d2eae424e6f1", "indicator--798ffdbe-e739-45c2-9724-8f79bd78b17b", "indicator--5cb8b9c4-af78-4bde-bb24-a65b7b5e79a5", "indicator--c0ea8cc4-78b0-4c70-9127-bb1f62f9f077", "indicator--7fc4e571-12b6-4112-a6e1-19aae44b8c9d", "indicator--06444876-df46-46fa-8bdb-6148d834682b", "indicator--8edbd28b-af31-430c-8911-bd2b018f1a9d", "indicator--8173c27d-5393-49b0-ae28-71f13983d002", "indicator--7beefb1d-56b3-4bdf-bac6-17b37e2819fd", "indicator--ef112a8c-fad2-4eb6-b6ac-40edb35b8bd5", "indicator--5b44528e-cd12-4de7-9c71-cc69babcf4e3", "indicator--f0a95e6d-9352-4f46-ab38-5ff59717b6e1", "indicator--8835c260-4666-489a-ad7b-16fce5f86d2a", "indicator--4fc9f53d-c7d3-44c5-b623-37aa10fea263", "indicator--5558b103-2110-4cbb-94c9-2c4769efbd5c", "indicator--bfc56a2d-40e0-4c48-b1b9-95b6f76b362d", "indicator--19237793-b829-42db-aefc-82f96937ef34", "indicator--a3192bd1-bca6-42a0-9dd8-d8b1c770d1ee", "indicator--8c146f52-e672-4c39-8f8a-89149173e0f0", "indicator--9ccf18dc-601e-4dff-9073-553758e0e66e", "indicator--667771b0-197d-472c-8500-6dc3194910c0", "indicator--1fc860b6-29f9-45fd-b41e-9a1c80eda0ff", "indicator--3b41335c-ed93-46b1-a4d7-f10c014771c1", "indicator--9b247bee-6386-4827-b88a-d2750254face", "indicator--f820bd8e-b08e-4117-9273-afdd47637c4d", "indicator--5bacbe01-cef6-4e16-92f7-a48239ba9196", "indicator--27d20667-b0a6-408f-b4ab-8653a5a47990", "indicator--ef357b6c-e14c-4d89-bbd2-9bf1e0374e69", "indicator--728f75e4-2278-40f0-aa09-7609334fb7f7", "indicator--01e8bd9d-bfa6-4ec6-b8c0-c22cbe4fa50e", "indicator--635454da-8919-4622-952c-477b61aa07f6", "indicator--6700eba2-7b72-4e48-9141-9b339a9cd4c7", "indicator--db2dc573-8783-4763-965e-090a5485cfd5", "indicator--05ad0772-d467-4d55-8db9-98c24f017c96", "indicator--fd92cb00-dad0-48bc-81ea-c6a988d600ce", "indicator--d30f44eb-43cf-4495-b460-bdb197d7dbdd", "indicator--b0c83df9-b827-4464-91da-add9ffd3fb60", "indicator--17a8335a-9960-4c34-82d6-270f20d8e235", "indicator--f429ce94-52e9-47d9-b2a4-883f7c9a8ecd", "indicator--02622934-f1e1-4fbd-9957-aeddb002f376", "indicator--31f0d73f-6eca-40c1-837a-9af77d793b95", "indicator--e0154a73-9b65-47ac-a9fa-783414483005", "indicator--9adbdb9b-594b-424f-a4e2-b7794a250bf3", "indicator--b3ba85aa-2887-4fe4-8d18-ea1dd73f82e4", "indicator--10ebce87-0792-4cff-a810-6478fb4abf91", "indicator--c939be05-b966-4d23-a210-6393951b6ea8", "indicator--489bf7c6-4560-4cf7-954f-bf502e0873bb", "indicator--48fcd12d-cc6b-4154-8631-d85c7ff48a72", "indicator--52a2ceca-9ffb-4b09-beaf-3da5a20073de", "indicator--2b8c0567-a939-43c6-ae17-8a4040bc68da", "indicator--e36835a1-37e8-4423-b72a-ab79bf73eebe", "indicator--bd825d3f-b824-418a-90a7-79edd1beea01", "indicator--82b39f63-de1d-4ccc-9486-525eaf05d05a", "indicator--a3bf9a14-d8d4-4505-84f6-aadc162da8f1", "indicator--eee034e6-7faf-4c7e-a4fa-107c4fa1b730", "indicator--e75b3e17-4dde-4c24-873a-4a16f683ae14", "indicator--8d4dc70d-33ed-45e9-abb4-81851a398621", "indicator--1982a43c-0fb3-4302-bcc9-56bbfecfd83f", "indicator--4a873a14-80dd-4528-bc11-ab93c8329de0", "indicator--6160afdb-5311-47bf-90ab-f49c8acaca65", "indicator--4c985de2-8438-4f5a-84fc-b544bbb927b4", "indicator--58a24a70-dc7d-42ff-abef-48dd074afdcd", "indicator--d10050f9-2be4-4d41-ab4f-378b038e92d4", "indicator--a69c3292-d288-413d-8ef3-c8466dfd285e", "indicator--06da9956-a4c6-4e49-8425-d9e5cf516a15", "indicator--a2bdb294-0109-4ade-8869-44505c3e1026", "indicator--21160aec-08cf-4785-b61c-d8f7fa728f01", "indicator--d701cc0e-e2b7-4481-9948-677e644dfbca", "indicator--7166d8ac-1fad-4730-ba46-e548ba6cce3f", "indicator--f059d95a-0ca7-4ede-8411-32917f898824", "indicator--83a47de8-55cb-4bdf-a31b-44dcb01f052c", "indicator--ac42a6d6-aa3d-4a3d-8590-a279616afbfc", "indicator--7dfd9d1e-ef00-4443-b424-aae9bd265fdb", "indicator--0c2163ef-ce74-4a22-8a76-bceff058d4f9", "indicator--04b704e7-f5ee-4b72-8ddb-21476c9fc3a5", "indicator--fce662ea-0dee-4872-8899-9d9d517f07ee", "indicator--6cf1f704-3f23-418c-8ec9-e8e13bd2d65d", "indicator--e4e12206-5f00-41c5-9d91-fc5f6d292a1d", "indicator--30da6bef-d808-49f4-9a9e-a69761c96393", "indicator--f5aea54c-0cd9-4222-9a10-1eb1be50a6e4", "indicator--0d5fe17c-f0f1-4e37-9277-a6c17559cfb9", "indicator--c2ac8311-949e-45be-b935-d9841296c445", "indicator--421198fa-10d2-407c-be0c-8327e6f940a0", "indicator--b63a993a-833d-4b37-8dfd-c11e1b3575f0", "indicator--845720f5-4881-4960-9570-a5b939bc7b77", "indicator--8f3fa333-562b-41da-9dfe-150c4234957e", "indicator--fb2754f2-2f9b-41ba-917e-7cb16e407f85", "indicator--35d50bf9-9e15-4989-a786-01bf6272ce7e", "indicator--dc345082-e5f3-4f8c-b57e-54e9cd8c6dc8", "indicator--69bd15c5-34d9-4d53-aeb7-8e1aa606017c", "indicator--39b9ff31-7f43-4111-9dfe-0aeade08d0ad", "indicator--7d37f872-da99-4db2-b129-8ed93de4ec82", "indicator--a309f9b2-c6d5-47b9-89e5-b3c7042ec8b1", "indicator--e507af78-9df8-45c7-b6dd-17863680b8a4", "indicator--89c113e2-4553-42b5-bde4-868975b80bdb", "indicator--384b8fda-7c49-4a09-93ad-64fb9ad224a2", "indicator--dd380d5d-30ff-4e4a-83c1-d4f7d5dc006c", "indicator--770d7b0f-8785-41c9-bb90-8a2334bb7c51", "indicator--fe5fce33-da59-4ec0-89a3-efc16ebff57c", "indicator--aeb2446c-c131-4a32-9e44-313a6c5c96f6", "indicator--35391b9f-dfcf-4897-97a1-670fbf8799fe", "indicator--9a854ba3-cd59-4c71-8705-4657248c08ba", "indicator--9e74a94c-b1d4-49cf-acbc-127015a3edcb", "indicator--cdf2d4ab-a8fb-4fdb-97ae-3e0813530c4d", "indicator--6b2a5b68-1966-415c-b22a-223f683cbc50", "indicator--e2960e22-76f8-4da8-b6f7-5f6fc9fd5362", "indicator--3207f583-b3fd-4bbe-9f85-38ea5ae50d56", "indicator--9bb4f728-6eb5-4d66-9dd5-4a210a923dd1", "indicator--0489b5a4-4cb4-4fe6-8d4d-1fedb292512b", "indicator--4a4abbb2-a7f0-4682-87e8-6a2e65bea9d0", "indicator--414d4ce6-4d4e-496b-93d5-cb2973d2745d", "indicator--5a232d5e-1c05-4b32-bb0e-1ea7d5817ddc", "indicator--a4a7d723-0e3b-4ac7-954d-17c0fb6ab545", "indicator--1bcdf163-0902-4034-9444-fcd82e2d3bd9", "indicator--66e6eb51-a637-46de-87d9-011c681d74de", "indicator--83e9c1d6-e6d4-4643-886e-4ba3c1023b44", "indicator--b5516429-94c1-4a42-b3ab-93919ada8ebc", "indicator--5bc8778c-436f-4bcd-960e-a35e6712ba33", "indicator--de4079b1-0536-4c64-92ed-dab1cbf87147", "indicator--f58ac243-eea6-44d3-a49d-577bdc7bac49", "indicator--9f69f9e4-4b8d-43a8-800b-790bd3113bc0", "indicator--f5c06d87-8e20-4f4c-950d-db803b8fb94d", "indicator--7131c043-8bd4-4c6d-9a2e-ebcf81d08117", "indicator--47b7120b-bcd6-4d94-9c82-87ef36530592", "indicator--90dc587e-3505-402a-8263-323949135e41", "indicator--9b012092-9143-4262-919d-882572dc248c", "indicator--5caa4295-6b7b-4b10-83dc-4bf5b4b0d1a6", "indicator--53ad13f8-8b7a-4d7d-869e-d94854fea491", "indicator--201797b6-743d-493e-9540-586564572855", "indicator--a8659e2f-92ec-433d-9b21-21adcc0946e0", "indicator--ea3ea2aa-7083-4d9e-b576-b71ebb890644", "indicator--73c27a46-1dea-4cb9-986a-4842a73a6da6", "indicator--565391cf-be76-4106-8d6c-6136276b9d93", "indicator--16f1084b-f057-4efd-83a1-8b10e6a4a716", "indicator--fac167db-63c2-4046-b5b0-347752034351", "indicator--1e3e19d7-1919-4d55-81c4-b3b3cf103a06", "indicator--691d9560-28ab-4863-b27b-3dd4f47d41b8", "indicator--e0401c5f-eb21-43d6-a732-b354460de176", "indicator--9a39f721-2a83-4630-bc19-160f88d978bd", "indicator--028ade0d-27aa-42c2-88d0-a0540b42578f", "indicator--e574c9eb-7ea1-4865-9a11-f59dc385acb2", "indicator--fc02e2e9-8271-41c6-9944-7ec638875c79", "indicator--78cb0c20-554d-44f5-bbee-c83fee9e7b0c", "indicator--3e478d5a-8ffb-4d16-a823-14235dbeb567", "indicator--3abf8db8-7348-4fce-809f-ac40b0475d5c", "indicator--61db45e2-90da-45e0-bd9a-7257d735c0f1", "indicator--fbdff913-1e93-4f59-86c9-3b3b3a45e047", "indicator--68ce9d3a-9778-44eb-ba2f-3d0d37d61aca", "indicator--1634d410-dbdf-4992-bfa2-58e01b3a7eb2", "indicator--91752442-70d7-40e0-aa00-4e9637ba8915", "indicator--3c781aa7-b31a-44eb-8273-b17a6589a5f3", "indicator--c465b1a5-04c9-4fee-9a97-f3bd893074a2", "indicator--aa0e956a-7411-40b5-b6b8-6ba4a519b579", "indicator--a6c9ea83-b7dd-41e6-9bee-d6f6e081f2a7", "indicator--7d4c48d7-6d59-4ccb-bc68-45d49014faf7", "indicator--f6581a3a-a3a4-4184-9321-c6269ef166d7", "indicator--047b3fb4-971a-4989-9596-e4731f70e1d6", "indicator--752c1c57-58d5-44f5-9f47-3e0d00895cab", "indicator--1cc67fbb-1ac5-4d3b-96f7-e3c0df4b3ca0", "indicator--31c8a549-8654-424a-a2e8-bc5833972926", "indicator--5173edc8-ff9d-4401-afb2-d91e39c19e67", "indicator--21a81461-e170-4c9a-a4cd-9f05069098e3", "indicator--79134dc3-4289-4365-abc4-a8c9546e69fe", "indicator--29dddba4-f8f1-4367-a08a-fb037b01dff7", "indicator--7ee45ef6-16d5-444c-a73d-ef1c3b5e9a78", "indicator--a6d4ceb7-c384-42b9-8ac8-5ba845d590c3", "indicator--eb1be741-85db-4a53-894d-f6ed1fef74de", "indicator--bae39fdd-0ff9-4cbd-89e4-6234dd35785f", "indicator--c857634a-eb49-4b33-ab01-380a4650b740", "indicator--2904883c-2034-4002-add5-9ee8d377b22d", "indicator--9aaea23a-127d-4331-b4f2-83386b2f067e", "indicator--a2f3a866-736c-4801-b349-d0e9395d3c4e", "indicator--b7826691-84b2-4ce0-bd9f-90b4ac998dde", "indicator--1c728614-d83b-4c84-9d95-02c9da535bd1", "indicator--27038819-921a-48c4-9dc7-a581362ee781", "indicator--4794a58e-b5e3-4e8c-8e28-6cf70b18db48", "indicator--a26c74c6-0a1e-4dc3-8bb1-9a650f70b564", "indicator--a73bc5d7-a68a-4d99-97d8-86cb162c434a", "indicator--85bfbc6a-b930-4948-b01c-0ccfeccff443", "indicator--cc377976-8ed7-4eaa-89a4-01b58ae6608d", "indicator--0c0e2235-3c16-4882-8c8b-89912ecfeec4", "indicator--ec180639-3880-4a0a-a9b1-80ebded03b80", "indicator--fe5a963d-2451-40fb-aced-b96ff9951fff", "indicator--ded6b2d2-16fd-429a-ae04-e047008504fe", "indicator--6ca4fdea-9e30-4c06-8495-4c67f72ae211", "indicator--00770860-9222-499c-8448-dd8ff250f258", "indicator--10c52770-fc55-4fc8-93ee-f9718a22ae13", "indicator--81eb0c28-ff03-4030-a6ca-2a284ad7952b", "indicator--4233474a-f948-4a5c-b41c-a2dae1b813c5", "indicator--690a203a-6f71-46bd-b965-7b995d4790cb", "indicator--1adbde7f-c724-4163-89ca-82aa1644c654", "indicator--87ffec38-ad43-4244-9504-8b968e7cc2c8", "indicator--05ccf62a-c742-49cc-bd76-976c32d1d97e", "indicator--0a194ee5-8620-435a-a4c8-a4641e73f7b9", "indicator--d85f9b17-d34b-4191-8553-049e9ce207e0", "indicator--6c938b4d-1bf9-4589-b0ef-263f4b1fdc8f", "indicator--c0c29b9a-464c-4f9c-b5b8-04509be60efb", "indicator--b9d385b9-ebc4-4e67-8f0e-cdb91d958aea", "indicator--fa80d196-a7f8-4f5b-815e-10907813b7c7", "indicator--aefa061d-10fd-4e0f-b260-b03fb040d800", "indicator--f2b88c35-793f-48fa-bbc6-a5ae5cf5c64d", "indicator--ef606fa0-8012-4399-b79f-0d4d2493b2c3", "indicator--b00913e1-64ce-437b-bf37-27c77f91e7e5", "indicator--e6db5b16-d62f-4f55-98d7-0568cb382863", "indicator--ce3e3014-cfec-4ef3-b0a1-91eef53a364c", "indicator--261b84be-b998-4334-8162-cddb4c7e057f", "indicator--9dc6b757-97ac-4fde-8b8e-ea41d50251fb", "indicator--97afb36f-58ad-49b6-806a-c07c8ea7f888", "indicator--97c13d1b-6650-44f9-95f6-ec4a8c0ca33d", "indicator--deb5b6fb-69ec-407a-9351-68562e7a8e90", "indicator--aa79bc63-3a98-4f5b-a1af-159b01c3cd55", "indicator--bdf91ec5-3cb5-4bfc-ab80-c37d00f6e1ee", "indicator--9d4fafe1-ffd2-4d23-9e5b-403c105be67f", "indicator--a57d6719-b57a-4291-a049-3199367cc73e", "indicator--c1d3ecf5-b263-46a8-b1b0-4d83b464c4e0", "indicator--43fb46aa-157b-47b7-b60e-6b524311f4f7", "indicator--9e32f38a-8b42-4559-9a58-957ed2f4197c", "indicator--8105b1ed-2fb4-40bf-833a-90bbeaa036c5", "indicator--4840ac46-856c-447c-8dec-5f31719ba8c2", "indicator--a64e6ea7-8352-4ab9-927d-ebf1e33583a8", "indicator--9b57c636-a5ca-4c7c-84dd-29684361864a", "indicator--57a918e1-20e1-4588-b9c0-99ca7bc60a09", "indicator--691b611a-7709-4bc2-9595-59aec1e4828f", "indicator--4fbca7be-3304-4de4-8c2e-c6e98cb3fb89", "indicator--b78f43ad-ffc5-4188-8288-56746d65c85e", "indicator--5be2f165-acea-42fa-b8b9-dab06a828aed", "indicator--3f833643-bf92-4074-9ce8-76783d3fbaa5", "indicator--1d90eeea-201a-4410-9123-fe4c4863ea74", "indicator--b2d18b11-caa5-4b0b-aa09-2dcb1938c835", "indicator--48695076-38d6-4074-9ae4-3ca59046b6c0", "indicator--ac6f19ac-d052-4029-afbe-f033634d91c6", "indicator--81baea7a-d6be-4715-9dd0-355c41db50a0", "indicator--7d745c03-2767-4f51-8501-f19e3a60fe68", "indicator--9bd457c3-2590-4df3-9924-e0c58bf45ceb", "indicator--f8191b31-123e-4556-b467-ec61081693cf", "indicator--930eaf82-5a4b-4b20-8ce2-e75e7feb6a88", "indicator--de5a93ed-df76-4e62-97fc-a43e7c669f06", "indicator--3d831162-5a20-4c21-ae1c-af07303a7aa9", "indicator--8c3b8420-a8f1-4434-a1f1-f03999a691f3", "indicator--8cecd299-bca5-4577-a5de-4fa0b18de0c9", "indicator--3bc0c102-12f3-4bef-b0cc-16e5b76e70df", "indicator--e0c91653-8e0f-4a0c-abad-170f4a849ba0", "indicator--8e27fec5-5cb9-4d90-a661-f7d88f26fc47", "indicator--4ee6897e-7fb4-4784-9de2-3a12c805943d", "indicator--91ff1837-43dc-4f95-befa-0ad7c2a1037a", "indicator--0d25b70b-c0af-4e63-bde2-bf37f609a624", "indicator--566605be-c9cc-4a21-9b7d-da55cc0340d3", "indicator--8cfdd08a-415f-4fd7-a6a5-3b24d797e030", "indicator--e02f68ee-9806-465c-9b63-0ebb511f836d", "indicator--b469bf4c-a7e5-4ae3-8249-cd3b5ce2c6b6", "indicator--ae7ce23a-904e-480d-8f7e-dabe4a517422", "indicator--c15c6f81-4a99-4595-846f-2fd6db0f5e98", "indicator--139c5030-a545-4d5e-9224-5964660d5322", "indicator--50379fc6-c117-43bd-aca1-8ef033dd3d9c", "indicator--1635f2fa-8fb7-4ef7-8982-25adc21fce41", "indicator--0e2eaa8f-a822-40e0-ae7b-6c65f87af673", "indicator--29de02d4-1091-439f-b069-0575811f893b", "indicator--479f25ca-15fc-4813-bc07-617ae5a292a8", "indicator--e03969bc-c281-4b12-bc31-09fbf9524bd6", "indicator--90726829-94b0-4f85-9eb2-e3ce5c2ac091", "indicator--dca11602-89c7-4e68-b64f-f6075103fa9a", "indicator--5b687003-5e2f-4570-bcc6-48942a7f1677", "indicator--10635709-3879-445c-895e-0a696575c4b6", "indicator--e54184b9-4208-49d2-a566-73e6aa89081b", "indicator--9e70ea84-3207-43bd-9125-d044a17208ab", "indicator--5f51b9ee-5f8c-4c87-9fa9-8b513ed61a64", "indicator--b36b61b1-3c01-4b2b-a28b-7edf07b2b075", "indicator--4256553d-6887-4335-bfdc-c0a34ab4a0a9", "indicator--a8ae8718-4d0c-45ea-b301-e48160bb7117", "indicator--39128491-67b2-41c0-ac22-0a82728e4728", "indicator--1193e338-4300-46a7-9491-153e00f23e34", "indicator--14081ba2-04bd-4d08-8ffe-d3dfe46b0e7e", "indicator--7329b22c-b32a-43b8-933a-b96e08a65185", "indicator--44cb2987-383e-403b-b6f0-0a520d3b8d4f", "indicator--f539a7d5-d257-418f-bb33-99b7d2eec18c", "indicator--b208e26e-dc47-42a6-8223-4b2d56ff510c", "indicator--f0e5fa5a-a980-418c-a3c8-79167f728aa8", "indicator--02fe353f-4cce-4c2d-ad58-c767ac73d5b8", "indicator--5430ae90-37ac-4c73-83d7-d653f3c9d30d", "indicator--b92dc2e7-291e-430d-9a25-e7cddf3acb21", "indicator--ee6f20ab-b129-4228-b421-fdab2cb609b7", "indicator--02de1940-f475-43b8-aaf8-98ff5cf7b5cc", "indicator--d42d0e64-a649-44ee-947b-505973723ca6", "indicator--58a840a8-f735-4435-a170-708f719bbbd4", "indicator--92f68649-92f2-400c-b9d1-97eb2d74eb05", "indicator--8942475d-b8e1-46ab-839b-9dd874c537db", "indicator--523ce342-1930-47fe-91bb-4c9bf585b05a", "indicator--852454dc-d659-4c87-b689-bf329e9af708", "indicator--a8843027-7af4-41ed-886a-4d2347b29017", "indicator--757c8855-5917-478f-ab8b-6e30157519a2", "indicator--79344f97-a97c-46c6-ac33-22e9727eadc9", "indicator--5da4b8b5-583e-4098-9576-dbcd0811962f", "indicator--42dfa98f-2bb6-4e7f-8309-364eae000bcd", "indicator--1b5d93d4-31c4-4dd2-88fc-4f8094dab203", "indicator--d9d78292-055e-41a8-83e4-2c51c1c3b174", "indicator--25aa666e-58ae-4b78-9080-a19b8185463c", "indicator--4ddf3af6-0811-4fc1-9de8-b7cce37bc970", "indicator--c6ff6ae3-6865-4031-a428-3d4872d5140e", "indicator--15efc460-6cfb-4e2a-a496-5355717be0f1", "indicator--9a4dccb1-8c18-4a56-8288-b7e24e584d42", "indicator--d64e666b-d661-44d3-8abd-e3239de460c1", "indicator--0a6d4cb6-0842-4eb0-87b1-83446e974c59", "indicator--c291fbc2-052e-4a7b-b219-c8d70e82fff9", "indicator--07f02c48-be2b-4849-82d8-a0d33b5cbb49", "indicator--72cb921c-3961-4b48-a1b1-f145885e7dd6", "indicator--6f87e563-1f82-458d-929c-c1031c0e1600", "indicator--60d4c5d0-5d49-412c-acd3-1217a3538c47", "indicator--bacc3aa2-9215-40c1-9dee-37c239ce20ea", "indicator--96111a3a-c729-4a41-ab2e-692ab78bd2dc", "indicator--6cf5f336-14a2-493a-8544-23a5ce5d5d0c", "indicator--463936ea-35a6-41b9-a1a5-84d9bc9676fb", "indicator--90ae8bb8-0835-494a-8393-9eda0e05e2a6", "indicator--503ce8be-c352-4248-a453-4d7e15e8d4f3", "indicator--d30bcbf6-5c6f-4864-b7a5-0653d550ffc5", "indicator--06acddf9-ba97-4a4c-b9bd-8f09ac39883b", "indicator--8b72b904-300f-4ab2-8620-5daa041210b5", "indicator--86c039c8-2ac4-4780-a344-d144f58da047", "indicator--b03e0df1-d025-4ee9-9414-eb6339fe067b", "indicator--7355d3ed-ba44-4239-a1bc-4693ab3b55f8", "indicator--012b862a-b87e-4936-9d2e-bfd6f3c15091", "indicator--097c7844-b6fe-4409-bab3-4eeedd6ddaf8", "indicator--a8c04c95-98c9-4ecf-95e0-28e47e18b0ab", "indicator--a3eecd3e-7735-489e-901f-598d4d959084", "indicator--5c162bf1-2cc1-454e-b783-3de681e20265", "indicator--243184ff-a651-44fe-bd4d-0ae297c9f49f", "indicator--5f15ad90-a391-4eff-a1f5-b88029275b51", "indicator--09494e43-8a2a-4400-9d54-622efddc715a", "indicator--9fb22bf6-e446-4960-a642-570b7ff0dc8a", "indicator--723c59bb-ea31-4b8e-890d-8ba7cc95ff8c", "indicator--351edeeb-fcad-49b5-be7c-88417fcd8427", "indicator--68976601-83f7-4749-9c57-78b34dd00a9a", "indicator--7413e9cd-6101-44c4-9571-945acd36a989", "indicator--822eaf04-4d7d-403d-b838-fbba6547557d", "indicator--6164dcff-157e-4658-95ab-7df7722f68c7", "indicator--c4636304-bd8b-4a49-a663-47b1e9246d48", "indicator--a4bbd42f-50d0-4f0f-bfde-a2a9dc708ca5", "indicator--0106ab40-87d8-4e02-bb45-8d79232cbc1b", "indicator--1078d346-fbf4-4241-89ed-22244647cb2c", "indicator--a671dcd0-c3a1-41b0-8ad2-b724ef74a6df", "indicator--ec21a2c4-40e1-4122-a2a4-d3d8702cfebc", "indicator--efa7b163-043b-40c2-aeaf-f75fdefb1d15", "indicator--d677d9a5-fde8-470a-9ab7-2a2d494c131d", "indicator--7398f11a-ed4a-40d8-9b14-8fc808bb8d83", "indicator--0aba218c-2155-49a2-9b4f-2554ad31a642", "indicator--03ca859a-ebc5-444f-b131-7f770f14fb26", "indicator--78408c26-71f8-4fda-8754-65d6d0a13d4e", "indicator--b8aaf7ff-f7d3-44cd-b39a-708476daf83b", "indicator--960fe3d5-8669-4a10-9e06-c4efcd822791", "indicator--c5b16ba6-21cb-4bfc-ba4b-0e7cca404273", "indicator--7526ec29-f81a-4553-bb06-a3ca6ed2b6ec", "indicator--3e203a29-6238-4178-ba9a-2e18c5709e39", "indicator--14168e9e-97be-4dc6-a631-4a624f104055", "indicator--275649e2-3091-4068-bed1-07896d4a377d", "indicator--a877ca3b-6950-4ee3-9e52-dd29d2168ed5", "indicator--6da7cf94-5bfc-490b-ae54-ad970092279a", "indicator--35276183-150d-4a2e-af9a-3ca20a268af2", "indicator--8dc7c359-0ff1-4e25-9f61-4cde9813791a", "indicator--626626d7-fcfa-4736-98a9-a0ee1f61c51d", "indicator--e94a8b33-4e26-40fb-977d-0cbb5ff6e936", "indicator--b7266617-53e6-4a12-8f9f-2bdcc9ab7c21", "indicator--30b464ba-1ad8-468f-b2a5-f50374628e0d", "indicator--a1041455-59cc-47d9-80e0-aa278c200bc1", "indicator--d108598b-0ebc-4952-b0ae-934f76377941", "indicator--41f9adaf-abea-4465-8f5f-a272fe074656", "indicator--bc13ff62-47e1-4219-963a-19d69ebffea1", "indicator--ac221b88-59a1-4ad5-8b08-bf8bf0195876", "indicator--74d793ad-ffcc-49ac-a075-74eadcc1dc02", "indicator--4b66fa36-eb13-4028-8c9f-4e97746f2253", "indicator--8860fba0-8703-4789-8032-4af8f29fcc6e", "indicator--e46e3c03-f7e1-4ab9-9ab2-78a08e3c3f86", "indicator--8ce4c947-b232-4098-a71c-73f8f3bd8f44", "indicator--69c04fcb-99d4-48bb-af90-baac310e9604", "indicator--dabf36b8-1eae-4f57-aba2-a0e7a566ee72", "indicator--61374c85-42e4-4454-aded-5a7674587105", "indicator--b9418d3a-2376-4d87-b707-bae89d886e74", "indicator--046b9e6f-c806-40c6-9848-768bdee139ca", "indicator--b8f7180a-7e4e-4816-833a-a7999f9c7147", "indicator--efc3da04-124d-474c-ad00-a985fab7c846", "indicator--15363d3a-2cf6-4230-85d3-d188e62c9666", "indicator--9f3edfd3-ebf8-446b-a488-74addab7bb6e", "indicator--9ad9de06-cb62-43a8-9b12-1994cfa9691d", "indicator--cc904cf0-6f9a-4fbe-a865-25c8747bffd4", "indicator--feb9c002-e415-4a4a-ac55-dac2e86b6ec8", "indicator--424794d7-6867-4f08-9319-1be0a852478a", "indicator--af53a0b4-a911-4a67-95f2-27291c5044f1", "indicator--89b4055e-b157-4d1b-9dc3-05a0db9a534c", "indicator--8189fb77-8384-4dec-b76e-b8d3775f995e", "indicator--f465f43f-5442-49de-a4e5-f8a0d16605ad", "indicator--29684821-b315-45aa-a5bf-7b7504e20307", "indicator--4e043d80-0077-42e3-879f-b97c946395d4", "indicator--931e7c1c-cf4a-4c79-a1f2-0ddbfa538684", "indicator--b5f9043f-31a4-4f11-93cc-8942d5b347f0", "indicator--e7bd3311-5103-41d5-9c61-96cb122b9538", "indicator--8871a59b-7885-4820-a960-3f7b1bee3e33", "indicator--da398643-e770-499b-ab6e-bda3b7f66364", "indicator--91bdb6f8-5b41-40eb-acc9-62d07056e981", "indicator--310d11c9-aaa5-48d6-bed0-8f8838da3daa", "indicator--476dc535-fcfc-4d0a-a69b-12f329a75b4a", "indicator--43f79ae2-90da-447f-b8c0-118ec65cb35a", "indicator--8bc55cdd-eef6-4f49-a684-11d38e25f0c2", "indicator--fb93e60c-c9d5-43ed-99ee-68d01e81508a", "indicator--3f3b1a17-e24e-4a36-8185-f692c218943b", "indicator--0d0c3f31-f65f-4f24-872f-3ecfcf0767ea", "indicator--4ca6e21e-193e-4788-85bd-2d636e2bf6d3", "indicator--00298f4c-adc1-48ab-9d25-ce85dd02284a", "indicator--8bcfce1d-ba51-47cc-8d78-03ac0b263d49", "indicator--e09f5e8c-70a7-43c1-8282-888a1ade4efc", "indicator--cf24fb52-e39a-4c19-a1d8-12d0d6368b19", "indicator--a498ecbb-2114-4e84-bb23-604f1ae814e8", "indicator--0b6d604a-23c4-41c1-b133-56b635f2f712", "indicator--9b8a3706-a7f8-49b6-8cde-65b089ae2e28", "indicator--ecace8a0-c4ea-4836-9e15-6476d9e3272a", "indicator--3ebad0f1-a3f8-4070-b991-5318db409aeb", "indicator--610f301a-38b3-4e42-834f-05fc4b855451", "indicator--c53ab321-469c-4dc3-88be-ca04678eb9ff", "indicator--2bf1051e-d34b-4338-a2c3-938cee19ceb2", "indicator--431f2236-8b6d-4734-afbc-953dc01d9fb4", "indicator--3f7eea42-ca18-4663-b6c8-feeb45273dc7", "indicator--f48fb54d-32e6-45b8-abae-8b439d6b2c66", "indicator--b5d6cc38-2c1a-4296-b8dc-8f1f14d17825", "indicator--5f3e9d32-3ac7-45d4-8e21-1434cf5f1951", "indicator--f2b24976-f3a7-44d6-be37-755d18e08f67", "indicator--5f544c04-d5d5-4b60-9b54-f509a98b6bd9", "indicator--6b833c81-2eb3-451c-a076-13d290c90b80", "indicator--19dbac51-9d8e-4216-bac3-ee7f8470541d", "indicator--86021518-85fc-475d-b9a3-1cf0387b30bd", "indicator--ce0e2fe7-7fae-43e8-945f-be594fe4af68", "indicator--519309af-53b6-4f02-8002-2914a5b0465d", "indicator--965d7335-6337-46a2-9fbc-65842dfda742", "indicator--bd0d787e-4cbc-4e62-b9f7-167047998103", "indicator--72ad4c97-6ffc-4fab-b5ac-043090e75aa7", "indicator--848b338f-88cb-486d-a780-3877781af5b6", "indicator--41e26619-8aaa-4de9-89df-154e38a81753", "indicator--bce95590-e63e-43c5-8923-88e257571b50", "indicator--8dc096c0-6bf1-4205-a646-5d1228cc1285", "indicator--d5919675-fb36-4ec5-b4d4-9ed15d2ea668", "indicator--919e470b-ea89-45a7-9197-349a7bf0e13d", "indicator--f869d03f-d2c2-44ae-b037-3610be556639", "indicator--bd39b2c5-fa37-423e-865d-89488a317d35", "indicator--7cfd02b9-e911-435a-b2ee-421dfc43bd23", "indicator--74028f06-5100-4d6e-a6cf-70a947575020", "indicator--ad428e78-3951-4f53-b9ec-31ebdf98be92", "indicator--444eec93-011c-49c6-9ccb-e727c6faee00", "indicator--1bb9c053-6686-4c74-8e6d-f7cb31cb226d", "indicator--39fded65-d9e3-4f89-af80-43d7e4d9c687", "indicator--9933f7bf-69f8-44f5-a263-5899ec9495f4", "indicator--d670e4bf-e297-4db5-9256-c6040752f389", "indicator--10582f9a-a8a4-4607-bded-27124a7d03a2", "indicator--0fcf6c4b-5785-49b8-bed9-6084b7454b46", "indicator--a0c418bf-c015-434c-b6b4-5560a51e7c57", "indicator--9527ea8f-39ee-4973-9e37-c4aa4aaa8ddf", "indicator--9826f40b-ca03-41ef-94cc-490936f04de5", "indicator--a71cb2ef-92cd-4155-9d45-b51b23dac1c5", "indicator--04cfab1a-7635-431b-83aa-ebe6c4c1e354", "indicator--44f24f9a-545c-4bce-b85d-a7794b6517cd", "indicator--bcadaa99-ac5e-4966-ba1d-b3a86d892a6c", "indicator--60ad7104-ecf0-4d9e-be65-043499ecbfff", "indicator--fa049944-984e-4df6-a0e6-3c9e5f852632", "indicator--2513d7f9-8330-4409-b2a9-b07951c3c804", "indicator--da65d615-b30e-4308-8d46-948710c1a694", "indicator--5bc2f132-a599-48bd-8b25-9624f1366db0", "indicator--afcd052c-eaa6-49a4-a426-af5761cfbe2c", "indicator--888aa219-cef7-4647-99d5-f0a3dcf4aaa0", "indicator--c0a87722-8118-4ee7-a18b-6db650d66404", "indicator--567f36a8-462b-4145-887c-7d33919e3e1f", "indicator--f729a64c-4a51-42da-875d-5410aea1decb", "indicator--359d13bb-64ca-4beb-94c4-97c81e968416", "indicator--9cba9c05-a2d6-460b-a3dd-e55db98e0117", "indicator--16143dd6-a9c7-412e-b822-82da19ece9be", "indicator--b63817b6-d1f9-41e9-9f68-60a11bca5e44", "indicator--34858672-a870-4b68-88ea-41d03291f2fb", "indicator--0f7752de-e06d-4a38-a1a6-fe7dc99e25d6", "indicator--be2999fd-6865-46b9-a9a9-d7a119b8544f", "indicator--8def3e37-333d-471a-bc93-3154dd8656a2", "indicator--24d8166c-435d-4da5-85cd-b8caa1c76b4a", "indicator--f5d728d4-41bc-4990-b379-6735e2ffad32", "indicator--8e349746-ba78-494b-b382-0cda89ed26d0", "indicator--d2e1135a-2760-41d7-af54-f6680df0b861", "indicator--4b57d67c-9eb9-47a3-a8b1-e501fe951a39", "indicator--bceba2e1-db40-4ddd-b2f9-acbd6e081a09", "indicator--1dd3f8f6-35c0-4f4d-9302-a37fee434216", "indicator--db0ac1ec-dbc8-4192-87d3-8f08a4802182", "indicator--572b9cb0-161b-4f5e-a4c0-00554e7a457c", "indicator--2844210e-c726-498a-8497-a1b96777bd90", "indicator--35ae63e4-3e9b-456e-a6b7-31bac66dae74", "indicator--e3ad877c-eaca-4761-8eee-f6786dfb2319", "indicator--bc3c03f2-39c2-4a4f-b0ec-2b6a9daade4c", "indicator--28d2a43a-495e-473d-8bb2-81fcd9895019", "indicator--6c3e4d64-1e7b-4998-acee-117d0b8f8323", "indicator--5b48e42f-8cca-4c7f-8b0c-aa12d2470397", "indicator--0ef62c44-a304-4529-9c2e-d3d8a8edbed6", "indicator--3eef0530-1eef-41f7-80ce-8e64b8b730ab", "indicator--6118c541-a47c-4bf1-a5d8-4d7fa5f66b74", "indicator--469bfd6a-6b95-4072-84d9-2c2a42975297", "indicator--57f84919-5b83-48c1-a36e-370c6c578af4", "indicator--92a84824-59af-4ec2-804a-070d269180c1", "indicator--b32009dc-52eb-4db2-8e84-82490ac487be", "indicator--4c782a0c-623e-412c-994f-e2d0c257b600", "indicator--0982eaf9-1cf2-42eb-aa90-a47ea3727443", "indicator--6b1d394d-7851-41f5-ae04-bc249e70b1d1", "indicator--0606c224-03a3-455c-9808-952fd3c67796", "indicator--7cb987d5-ccff-41bb-98aa-63293bfdebdc", "indicator--be7c2f71-4202-497f-a237-86511542addd", "indicator--5f708294-2a1b-4849-af97-3b0ea2401027", "indicator--85030a35-fb84-47f5-9073-f78477dc87f1", "indicator--e6d98474-0052-4fbd-b4d9-77d78e35578b", "indicator--f86f8ecc-e00f-4dc8-98fd-19552d606342", "indicator--2c9fb9de-ea4b-4241-a76d-c141cf591a51", "indicator--be070324-536e-4b93-a2c2-5d3c6aa6e598", "indicator--6be0d8d9-9817-4cfa-a864-02ca2c487073", "indicator--5c8767f7-36b9-40a9-9491-8f924a83d43c", "indicator--a8bc17e1-4039-4876-8991-bde0657a577a", "indicator--f6ce49ab-d57b-442a-850e-64d471398d07", "indicator--f87236ba-b5d7-47c4-8eab-4c9774c7e961", "indicator--1716ea28-1429-4983-bc44-c4db33d6ae70", "indicator--775298cb-d013-470e-9a5c-0029a5622e6d", "indicator--e0efac3e-827d-4bf5-be85-9ce18a751ec4", "indicator--f32ee0df-6ad5-4863-9cae-4a73aff9bcaa", "indicator--9c76fae7-f647-4a33-851c-8a982e88ee96", "indicator--eb911958-4d1a-4d83-86c3-cb5764267a21", "indicator--18faaa3d-b295-454e-a3c7-bd4b17df344d", "indicator--dcc2aaa1-6c2e-4bf1-b2e8-db7820eb05f1", "indicator--6e599c5f-42b8-4e94-b6f5-41b64070b5aa", "indicator--f3a80d2a-23ac-47fe-ac2b-833d3d4aa0de", "indicator--5497f8c9-b188-4758-b545-452f7475275a", "indicator--44714506-9224-4ffa-bde0-fe7615cfe4a2", "indicator--0988ece7-921a-4c9d-b4bf-286a95fa2499", "indicator--605a63bc-3f48-4642-968b-e40d0a092691", "indicator--399a9768-75df-4c05-a85e-b96bb1d41c48", "indicator--47626fb8-9df9-4ada-8313-fffe41de580f", "indicator--8c694cf0-35f3-4369-976f-491154ebce99", "indicator--5a32545c-eb97-48bc-bae3-cced71e460b5", "indicator--bad733fb-9438-4092-8e77-0621cd48f597", "indicator--78d8ad93-6418-46ab-b7fb-65f513c17777", "indicator--1a38c298-368a-49d4-b48f-b641b22cbce6", "indicator--91f8b4df-15db-44e8-b3ac-103d573fbf33", "indicator--f49c73c9-52a0-4134-a026-b0dd69681ba7", "indicator--1ed5e9b5-3920-4cd0-9e10-35061cb68b45", "indicator--473b4946-7cac-4a0a-8ddc-fbe0e069844e", "indicator--852a24c1-e7f9-479f-a11a-496964f61925", "indicator--dd000319-712c-465d-adee-ba47fd2e6487", "indicator--c08e051b-35aa-427d-a0e2-3f2d64e9d77c", "indicator--6a8357e3-0173-4622-8ddb-c5fa53507dd3", "indicator--bfb8e193-8fac-42cc-b9c6-fdd7fdfc754a", "indicator--3cbb9607-334a-43ed-98ca-e7dc468e0f42", "indicator--7ce36277-9c96-4af2-869a-69f61a131b8f", "indicator--bb4ee25a-5306-46ec-941c-de683c8c4a42", "indicator--aa801c39-f0e7-4d91-a1c5-940662e379b8", "indicator--9a484155-47eb-496f-bd23-dc92c87afbfe", "indicator--05e3cff0-d12d-4f4a-934d-84b32208549e", "indicator--33bbd36c-2752-42fb-87f9-c578962a0faf", "indicator--d4632e99-8a17-4a91-bbab-ea48f2926c90", "indicator--82c52c03-473e-4f88-ac3d-cd51b4af1639", "indicator--87f857b9-2063-4822-84db-4168d83009e9", "indicator--c5a59263-29e4-4267-863f-61cbeab3b250", "indicator--ab0297b4-c2fb-4e6b-9dbf-42871f95eaea", "indicator--106a3a2f-0b78-4e43-97ed-86577ada2e2f", "indicator--5db9c3dc-f640-46a2-bd8a-20a9b6667416", "indicator--894aee50-e40e-4d67-9154-5ffbd935315c", "indicator--f477240b-5498-4842-a3e8-be16e6be1350", "indicator--8bddf756-ca9d-4eb3-9ce2-b2853465fd6a", "indicator--bdacfa2f-5d56-425b-b509-d4afe27693e2", "indicator--2a46dd95-2600-49b5-97a0-9de7cd763c7f", "indicator--7a8ffdcb-64c2-4468-9562-f5dfc15b3b5a", "indicator--2b99e318-4200-4ea8-8934-531080d2f610", "indicator--0f628d7b-9a6d-4bc4-a282-ac853a4ae9f0", "indicator--da0443b6-dd62-4fe9-bc45-b790fbe629bb", "indicator--0bc482d0-fdc0-4f67-9931-265c2615e0c3", "indicator--850218d6-626e-41dc-b9cb-391fe74750e2", "indicator--9029096d-668f-48c3-a68e-5ee7797293ef", "indicator--56cc2ed4-58d4-4013-9c23-10e698d48590", "indicator--e9782ff5-b792-4934-98fa-c9d01543b42c", "indicator--9647aa7e-4644-4376-aad6-621f0cfd0835", "indicator--0b467a95-3e7c-4ead-87f0-60f5f7a9182b", "indicator--52448e93-7b02-496c-9719-c98c13ec8b05", "indicator--f29a86fd-59b0-4674-994f-a6457474fb1d", "indicator--1c4b64ad-3850-4eb0-b5c1-447236febb74", "indicator--84e19434-03eb-4924-8a2d-939983a6c3f6", "indicator--4ac89856-ccb8-4124-909f-b0fd31533ede", "indicator--7991b85e-8331-4770-98c9-962fb7c9c89e", "indicator--8c6a9a8d-971b-42b8-b18a-0c2b9383e21c", "indicator--c497313e-bf8c-46f6-b36e-2fbe1f1800fc", "indicator--05f34144-84eb-4386-a799-fa1a8bf19aea", "indicator--e35759a9-ab15-4434-9c7f-27e378822d9e", "indicator--6b69cf2b-eb60-4c2e-b953-33868b20222a", "indicator--139f380c-c918-4ad7-936d-d1eeb70cec85", "indicator--d9f003f4-9c1b-4696-b7f5-62414a52b065", "indicator--9543bc36-95ba-4f03-8772-1a7ba0d8b607", "indicator--93d61f80-5af4-44d5-b28d-b6079bc92d70", "indicator--bc1736ec-cf15-4955-b71c-7fe23914f164", "indicator--e6b5be98-f915-4c9b-9618-aed65a352310", "indicator--a746530a-a8ea-44a1-83f7-5280bd173054", "indicator--bf9c068c-36d4-4c0b-a112-cf4e0aea2af3", "indicator--665a1059-21c7-49e9-8012-afb2b6fe8acc", "indicator--313ba55b-91f4-4ad9-b88d-52bd25808f11", "indicator--8a3eb3a8-403c-4511-844a-259fc77a93f2", "indicator--86ab1493-a8cc-4a12-806c-f940b6daa750", "indicator--18ca6064-37b5-459f-8fe1-a0b595962633", "indicator--8ac106da-5feb-455e-bb2c-e44aba9caef5", "indicator--4d76b26f-2c68-4ff8-a784-5cdeb2fbd2b1", "indicator--f24b4100-b5dc-4664-872b-50ae36a05b82", "indicator--38aeebb9-5735-4f46-936d-3d020c462892", "indicator--9d83e6a3-64f9-4d44-a84b-6f242fcf2b2c", "indicator--270d6716-bcd9-42ef-9ad9-afdedfceca76", "indicator--cc8a58a8-c5e1-4709-88c9-2f451055f832", "indicator--cb5b7f9d-ec04-4169-9422-a2920ab531f9", "indicator--9118d2c9-1b46-4200-bc44-3f4c47c03865", "indicator--c04824fa-e636-4b7e-ab80-980177f3d8c8", "indicator--b14a328f-33f1-45e2-83ec-9bfac365fbb1", "indicator--e4653617-a58b-40e6-9054-e1562f2faa72", "indicator--c546dce3-40b7-4849-bb33-3025784b23c1", "indicator--ea29f9f3-93e9-434b-a601-024e2433633c", "indicator--1d657fc9-4e4e-485e-9676-e295d6ccdd6f", "indicator--b9d543a6-1b39-487c-b858-838782c280ae", "indicator--2b3dc9e7-0376-4fae-a8e8-3872f6348379", "indicator--d4ca249d-716f-4ad2-8b1a-189410a7c877", "indicator--8c420f56-ca6c-4657-b4dc-6ce6d78d30a8", "indicator--d473de39-a16e-47b4-8875-a03d6e722e0f", "indicator--222c2fa9-551e-4fc8-9ac2-e7d6cb4bd833", "indicator--3362351e-9b64-4c05-8274-a6ae2835d26d", "indicator--028db128-2bf7-4230-af29-f25ff4d6a9da", "indicator--9fc8c4d4-d9ab-44a0-aaf0-f303622a5ef2", "indicator--2cd48615-09eb-4f50-9882-7b1d53edda2b", "indicator--f3981989-fdd7-4315-a0b5-b1ce7941816c", "indicator--60c7ebf2-7105-4eb7-8308-49a6be47f2f3", "indicator--d46726de-f31c-475f-bf25-5d8f206b886e", "indicator--4676b003-9a6c-46c8-96c6-73ec7bcdb8b4", "indicator--ad7b82d8-5765-42aa-a50f-ec1a7352f587", "indicator--6fdab5db-d880-439d-bad6-0e103803e15e", "indicator--b0da6d0d-90b3-4965-83e6-b2c4ba6cbf77", "indicator--1274ecbc-57ba-4f48-bb28-23657c7eac2b", "indicator--d8a59601-99fc-4b7d-a696-8085df3f32aa", "indicator--39797c0f-6194-4cdb-bef7-5d2649129b6d", "indicator--f0ec75ca-d189-440a-acb4-aab10b636ac6", "indicator--4dbe53f4-8b44-4cc7-a5e5-ff31d579d0a1", "indicator--bf34848f-49d4-4247-b500-21e3e284e16f", "indicator--1006f75d-88e2-42e9-ae01-e7ee3d8b2fab", "indicator--f4b67518-9761-4f73-bf3a-2cb9d4b10868", "indicator--34852680-6766-4976-899f-a7cc3971b58a", "indicator--07ee2a27-63ec-47e0-88d9-14cf3e308460", "indicator--5cc8b4c9-3d69-4ffc-a1bb-43a9ff97cf71", "indicator--488a1b02-4005-4820-8030-7139c12bcb48", "indicator--e26c355b-a0d1-490b-b0ee-3bfd622eb296", "indicator--00698efa-e7d5-4ea3-b37f-fdd75c40176c", "indicator--2e41e098-5656-4bae-97b4-23b1bfcbd5e3", "indicator--3e10ec34-2ca8-4dc9-b1e4-2401d6c8e4ab", "indicator--6ae1ef4e-6945-4779-98d1-90090268836e", "indicator--6a607f6c-0161-485d-9cc8-53d845d5aa9e", "indicator--55cae410-6dc5-4899-b552-6776d3a6945d", "relationship--4ca03d64-2a8e-441a-8d7d-be86d8042fb4", "indicator--31929a5b-3d83-4953-953b-2f8136eb3af0", "indicator--1c103559-fe9d-4d8d-ba1d-8fa67932ef8e", "indicator--38b4a8d5-b1cf-4913-a8fc-24b005af00a5", "indicator--d9925d3f-9bac-4bd4-a615-d61432dfcb6e", "indicator--5c82def9-7979-4577-93a7-4f47afb3f3a4", "indicator--922d330e-e6c0-4083-a8ac-a8fe3ae9bfef", "indicator--e8fd11e7-6514-4740-b20a-2edb44930b43", "indicator--84fcfcb6-dd90-4dd5-8b42-b854930d9340", "indicator--795925b5-e6b2-495f-a1f8-530da90d1b70", "indicator--c427ed8c-d84f-4f93-9599-a47ac210e0a0", "indicator--52e1afd8-2328-433b-b9d9-d660c1d27e21", "indicator--8fe8c6be-8c75-42ad-ae35-5f38de94bbd7", "indicator--65be12a6-e8b9-448a-b449-17e66fca41c8", "indicator--4c0370a8-678e-4da5-b829-3396ada150cd", "indicator--0c78b055-b9d1-4f59-bbf4-90a04a4def37", "indicator--fa20d5bc-d9d9-4880-84ff-6eda6dfc37e2", "indicator--6f2e524e-c700-47fa-8e1b-ca97daa500c9", "indicator--8134c9c9-be32-41c6-85ee-17eb8cec66e1", "indicator--c94a6439-9922-4e44-9a7f-ec8812f798e9", "indicator--ed1a1e91-630e-46e6-85a1-7ee993a47194", "indicator--6c40c889-c4d5-4807-a3b0-6ff57377de45", "indicator--f34cc094-a8c4-46c9-8be0-5280b63c90b3", "indicator--746fa124-d81b-4e9b-9ec5-9f707ab8fc61", "indicator--b4f4a5bf-dbb2-472e-bb68-54becf4149d8", "indicator--bcb42b04-a181-4a00-815a-ef5202126b0c", "indicator--63d9c0fb-0521-49fe-bc83-317f39c18440", "indicator--c81b8f86-4cb6-463c-95c7-e929fb140026", "indicator--1d0cf122-9a95-4da7-988d-45a6555265fd", "indicator--57fc9af6-8b68-4a96-b0c3-6d70e431b1dd", "indicator--f42e7314-f8b4-4a6a-abfb-a3ed0990d530", "indicator--659b8daa-c94b-41f3-a230-7ebfb2efd243", "indicator--02c7b056-835a-455f-a7a5-707edc0fba17", "indicator--eebf7a9a-710d-4da9-86e2-1c6b57d21180", "indicator--3705de12-44dc-460e-8f97-ca78f874aed3", "indicator--fa69413e-6b4b-4c30-ab63-24d0c553e302", "indicator--dfffac06-931c-46d8-a0d3-8ca470cb2629", "indicator--1b0a795c-77b6-439e-babe-d97ca4e706b7", "indicator--3fba0d18-ef59-4079-84a5-08b20a39c600", "indicator--23aa6c8f-a3a3-4827-86f6-97e2de4f1907", "indicator--c01fdd3f-6ee5-4d5e-93d1-b5e3880bca99", "indicator--45629d3a-c67d-47c5-8e5b-d52f93ab9273", "indicator--e7e74536-35a5-4e97-a22b-8e06d5170268", "indicator--05d2b083-4bdb-4986-a370-e1f3dcad25dd", "indicator--c77d6514-259b-48c7-acd7-112bdb614d2f", "indicator--72737e6d-afb6-422c-8336-5e093350f771", "indicator--dd26942a-1506-4a24-b69d-8c85de4cfe3a", "indicator--a5ff166c-9657-4931-b26a-c7e232cd1fc0", "indicator--ed332c1f-700b-47cf-a341-194a53b39814", "indicator--4d812993-f50e-4d69-85dc-f1b2f28a614f", "indicator--6f9300ab-0e66-4136-98cd-782b61657d93", "indicator--f8c14e0e-4282-490c-b387-2dd6fd304b10", "indicator--332b30e2-76a9-464e-b8b5-acbd7c95030b", "indicator--55fb0774-d78f-4abc-b6cc-8992230120bd", "indicator--a81d7e44-9810-433a-9d37-5bc4aa610ac6", "indicator--c78c7890-4f4a-4a6c-8b9e-520bf23cf03a", "indicator--25790f47-ed58-4b7a-9250-4c5cd9019ae8", "indicator--d20cc5ad-3d2a-4315-94d9-113263e62cdf", "indicator--04c7e033-8a5b-4a31-938c-23383633cf91", "indicator--029d0590-7c86-4352-9712-e99056aacf8b", "indicator--19889743-3b32-461a-81bc-63f815b1abda", "indicator--3e6c8b81-f235-4966-b427-166904c2c864", "indicator--3b66dcd1-e527-4951-b13a-c4147b7073f8", "indicator--8939bb71-f17c-4ed3-8a78-2c54f6adaa70", "indicator--d5de4332-32f6-45e8-990c-6b75cdc064f6", "indicator--4784a203-f196-4bee-b2e1-7d16cf4963e4", "indicator--e1918695-89dd-43e6-bdb2-aebd746d3453", "indicator--7a707c3a-453f-4287-9831-8e852ef7a1ac", "indicator--a852be07-969c-4363-b388-4579a5eec403", "indicator--6d1e363a-c2cf-4c22-a1fd-4238a41588b4", "indicator--d1ccc79e-a435-4548-870b-3d47d9c8f51e", "indicator--fdd6951a-a29a-42e5-abce-43a1af9d68c9", "indicator--53a350a6-95ba-406e-a57c-22063b2d6188", "indicator--109434aa-b706-4334-8690-aef4de0eae6d", "indicator--260d7eb0-906a-499e-83f2-825f137b2af7", "indicator--045d1fe7-f53c-4067-8740-471c514c2c72", "indicator--a65e3eff-cd41-4774-9288-f0308735852c", "indicator--6e70d879-24ad-469f-9be1-a5891b937d69", "indicator--c59f131d-2a32-4ed1-9545-6a016de27173", "indicator--f2f94bb5-6540-4283-a359-5c07235d3a49", "indicator--5a11c19a-cda3-4e1e-838d-93b1dbdf4bd7", "indicator--932c81c2-7e89-4f2d-984b-140ae6a5ac13", "indicator--15ede8c5-9006-478b-84bf-8fffaea07189", "indicator--cb58ddf8-e2ba-4f1a-84b7-850b32d8a38d", "indicator--ccc69210-8524-4bee-8860-35a3af02058d", "indicator--b3d720fe-91ea-4cb8-8ffd-2923efd72841", "indicator--6432c25d-1ec8-4f54-819b-a7fbdb87e665", "indicator--46a85329-dfd8-49e7-a7b6-d7adf8dcf7b7", "indicator--48be0f4b-1038-4659-a30f-c96d23201413", "indicator--90c66e77-d95a-4d37-a874-bbdef222f75e", "indicator--70dc4ff8-82e6-4dae-9200-d597931d990e", "indicator--6c1ef76d-0eed-49b1-b133-c2aec0e9b7fe", "indicator--a29a557e-a911-4cd9-a3f3-d31168a53e07", "indicator--4f167b66-4e9b-4b9e-bb5b-8f960c81c8ad", "indicator--40fe5dc9-ee43-4ea4-bd01-11724547f8b5", "indicator--a057dadd-3670-43df-adf8-3a112ddcbb1e", "indicator--5fad37ec-73d3-45b4-8087-20c65d395651", "indicator--c0dc1ee3-2e11-4bcc-a5df-dd6fc0e32ae5", "indicator--f7e091f0-3093-4878-95fe-b4ec81c32ad5", "indicator--36571563-e34c-4115-b997-fabecd5b9ac3", "indicator--3a91a895-fb1b-49f1-872e-0837ce869702", "indicator--f6978c67-0e0f-4371-8c1f-8868b8243805", "indicator--25381a48-21d5-40e7-b542-57a8e2f589da", "indicator--81d676f4-583d-4c45-b4be-89fd64030a5a", "indicator--b0873c8f-8772-48bd-95f1-0eb6978b7f25", "indicator--8a40bde5-4219-4f9d-8a8d-8260559caf30", "indicator--83717c9f-1c8f-4b73-b023-f78488c9e1bb", "indicator--05cfa586-362b-48b1-b959-2b8977985f97", "indicator--e4b2fc06-833d-430a-832e-d783bf2b5248", "indicator--885dc8be-4fc4-43ce-a3b1-51db246db4b5", "indicator--b95e1377-9f2c-4b2e-9d2c-0438ab1023ca", "indicator--a3cd08d1-7163-4b4f-a4b2-a765b4b24d59", "indicator--6ec9d2ee-2d56-4beb-ad56-8f946a55a996", "indicator--3efd3d7f-f387-4d64-98f7-e3bc9c2ea85f", "indicator--dcf234ae-c8d5-4d66-b8fe-50c66226b1a1", "indicator--5257a9fe-084e-4a56-9ede-11d8a767a7a5", "indicator--c11db26a-df90-463e-b9a5-ec7239d2eb1c", "indicator--66c867f1-4895-4812-a0b2-80a526f1c6c4", "indicator--790a9133-7346-4039-a627-a673ead64bc0", "indicator--27329047-258c-4ce9-94c1-009620806a56", "indicator--78bb031d-2dd9-478a-8743-02fc2607d3eb", "indicator--3a6d01da-a378-4b90-b0d4-3912d8814d0e", "indicator--577a09aa-4c5f-4d5d-bb9c-fdee37ff74ce", "indicator--9ae509b5-482b-4151-9701-faac8e3b4ee2", "relationship--fd39bb98-087a-4a26-8f77-385df46cc7f1", "indicator--22c99d2f-1877-4abb-91f0-110a6c53f45b", "indicator--4f31a8af-0851-4b08-8705-2d4b0041529e", "indicator--9fe0bdc2-db52-4b1c-a048-f852cf3bda15", "indicator--cc10abea-3e58-4346-a8fd-ac85845c6983", "indicator--c4ace237-5e16-41c3-bf30-1cce7eb265ef", "indicator--b8802208-77a4-439c-8e6e-e6dc9ca4b1c9", "indicator--ace722e2-8071-431e-b80b-248d50c4228b", "indicator--9fdaf78b-756d-40bb-8212-9389332501d3", "indicator--813470dc-7d9e-4832-ae88-657c499c5b98", "indicator--63ba1fdd-b0c9-4db9-9ad4-98bf5d8e382e", "indicator--2cf65dfa-a888-4fde-bc62-49db55e46ceb", "indicator--9519187e-80d9-4c71-adc2-ca749d869ff9", "indicator--f1d67663-5f8e-4aaf-9e64-9fdf742e4f82", "indicator--22d4adec-679d-4b6f-8999-86fef02be052", "indicator--e44f7dc5-9b82-4786-8dc0-035537664e47", "indicator--1eba108a-2004-4ab8-93d2-1674d8e74ae7", "indicator--a07b64ae-4e7c-4272-9fc6-2f70b9bfe181", "indicator--61dcb61b-1cff-47fe-a19a-607b14f1db26", "indicator--22cf6309-559c-4903-8a9a-e9a189075916", "indicator--18971d9a-5c88-4e7f-a99b-aaba67d06dfc", "indicator--030357ac-590f-4ac5-ba02-d11e183bd3ae", "indicator--cf82054c-b314-4ff9-a862-e05f78cb5e4b", "indicator--ea9679c0-b7ea-4d43-a0f1-48180db49ce4", "indicator--ab5501d2-f1e1-4d3f-8823-1788925d029c", "indicator--b0794061-e9bd-4dbd-8c43-474c37703bfa", "indicator--0cf1dfb8-9f73-4b2a-99b1-810d634b0f75", "indicator--0bf4a96f-81e0-499a-9237-a706f647d543", "indicator--7465dc10-be41-494d-b450-e2d41c48e6bb", "indicator--13b815a7-28b4-4af0-a79c-c954214203c1", "indicator--14a01dc4-be78-46f6-bcd4-dd911829325d", "indicator--5ed937e8-f8a9-4761-98ed-e61be8dbf27f", "indicator--b1edb956-f7bc-4fa6-942e-a2558d677db6", "indicator--48e56eb7-0559-4dbc-8cc1-f8af22f959d2", "indicator--51408a29-e315-4088-a687-dac28b46e032", "indicator--091fdeb2-46af-48c8-907e-c556d16867f7", "indicator--c279b668-bc66-41ae-9b1a-9ad94f4ac310", "indicator--9915f651-f1bc-4e50-8245-1a9672c47665", "indicator--9c0a7a2b-1305-48d4-b65b-d499448c98ed", "indicator--8661feb7-ffee-4dec-a916-7fa1b43d1d58", "indicator--a8eda109-7e6c-48e9-8743-d7d3a6a5562d", "indicator--b6a53aa8-963a-46e8-8c35-cbe55ca77160", "indicator--77522347-d3a9-4008-8a68-81e1dc4b96da", "indicator--6d2433a9-d81d-4aef-b960-cce7a04d6014", "indicator--a1c73b3c-c97b-4aac-afc9-3592c910ce66", "indicator--6d83d1a7-87ef-4ae9-9e86-06e5182ee419", "indicator--6023a21c-3d90-4ec8-919e-029016ca790c", "indicator--cd651a8c-95eb-4310-9502-ef8f280e7c2b", "indicator--7d774b11-cd11-44dc-b5da-cde4408f4b93", "indicator--9b9ebf42-afe8-42f1-8d14-35416e011f30", "indicator--f4b4ac44-9011-4959-aab8-e25e829b7a68", "indicator--f259c4e6-2c4c-41d7-8df9-c9fb0d39c0f5", "indicator--817f08c3-1390-4d28-97bb-6751cc6cdcc6", "indicator--f2a77441-9e4f-4b18-9508-34e1d72ed453", "indicator--1df21331-e7f2-49aa-b55a-e18618960d93", "indicator--b5a3e6f0-cf46-481e-bb18-8af5c2d4e768", "indicator--c1097a91-2093-4d8b-a4a5-f0d179d10fb8", "indicator--1f97c45c-08e2-4c43-b83e-5cfaeac46273", "indicator--aa6d3756-5847-4df2-904d-2e02cee5cbc1", "indicator--796aab86-1ba6-4a22-8f71-e9ca4a927bc7", "indicator--1acae0f3-7319-4eea-8f4f-83288e61126b", "indicator--a9ba6bd5-9261-4e93-a9d6-8f56036ac06c", "indicator--f3516e66-47f0-418b-94de-757fabd25685", "indicator--a45c0e4c-d99f-4140-ae53-8d650818610c", "indicator--1e357b7c-fa2a-4a8a-870c-f57212734592", "indicator--73c94317-faf2-46fd-bc8d-3b0e437053f5", "indicator--aa86605e-8f4c-42a4-95d7-499e30b43ef4", "indicator--3f65b580-1049-476a-8864-a5bd167ff071", "indicator--3b70a9e6-ac5d-4503-983a-0091f5c703e3", "indicator--691284cf-ab0e-4717-8bf8-6790933bf51e", "indicator--67164a53-aadb-40d4-ae47-09fdef160198", "indicator--e5cb5df0-0274-4cb4-b90f-fe346429b830", "indicator--aa04314f-02f5-48da-b137-0f40124197b3", "indicator--7d971489-78de-450a-b62e-249681b0f6b8", "indicator--995ca612-1d3e-4a5e-86b1-62b5faa1a0c0", "indicator--35517104-ac65-43a6-beca-68d02ac3c3b9", "indicator--8a0c0d9c-24b7-4036-9758-6ac64ef58398", "indicator--5cabf244-23e6-461d-a2f5-08a8c8cf02fe", "indicator--03fa135e-3a83-4d98-9b82-1fbd70133499", "indicator--d1f43300-2573-4615-98ea-b5732e53495a", "indicator--cc6b75c5-a44a-41f5-9973-d4bf460e10f9", "indicator--4c6d3f17-948d-47d4-9249-c24cc5208f50", "indicator--62c029ed-f14d-403c-aacb-806ba671eb56", "indicator--5f88f51f-8fac-4d6f-85e0-8fbe43a5a54c", "indicator--dde708dc-6b1c-46a7-98d7-afd02451d5c7", "indicator--2dfa69d6-528f-4287-801b-ca4dcf42be0c", "indicator--6d652def-32d0-47f0-9ac1-3edd371e4da8", "indicator--c830506f-1f7f-4ef4-8a2a-764c0295bbd4", "indicator--c23817d8-ebf5-4985-bc02-b2f37e068cec", "indicator--387d938f-d64e-4099-b5f5-327966dc9796", "indicator--3d290566-9988-410e-9c91-dc64aced96e5", "indicator--1e30fe02-eb97-41b2-82b1-0e07fc8b976a", "indicator--109118b9-3bb6-45b0-8330-5b3204c11aa9", "indicator--ed82d502-f480-401e-b404-2fd0b823e004", "indicator--43082bc7-e6f4-430d-8f31-f2c69bdb3a73", "indicator--22d92866-9e5a-44e6-8acf-5ef718cc5e7e", "indicator--0c5e853e-c27b-4adb-b469-cf138f44c60e", "indicator--b372f1fd-153b-4bb4-b2e6-25b67f090029", "indicator--8ddc219c-9cc1-4bc0-9851-6ba204598cd9", "indicator--ed9b7026-7046-4a10-aad8-e5d6317b19b3", "indicator--33607715-6007-46ad-a0ab-5a7be22ed125", "indicator--07f2f9d6-71a4-4548-b670-ea0f216bbab0", "indicator--b28a38c1-7a69-4a49-8bdc-a660d3c3cae6", "indicator--9f4d4af9-8a46-4ae8-94ed-d0e1b72fd032", "indicator--42248e1e-bf12-45b2-9976-fc520f0354b9", "indicator--f5e4ca0a-1c67-4983-a0be-8b3f24bf97c0", "indicator--8f82a2c9-5d3c-4b60-bda5-02dc022dffe4", "indicator--aad8c36b-3e21-4939-8303-223ea2f7217a", "indicator--a895f37f-dd33-44ac-95df-112f4f5b6b9d", "indicator--69968580-1855-4ec5-a984-8b222ce74f67", "indicator--061047f2-697f-410f-8d34-82344ebdb872", "indicator--f36c4750-c21c-4b3d-9adf-48ac8e6dbe88", "indicator--9e26652d-ffa9-4cfc-a906-858794cec246", "indicator--5f31e3bd-cf5e-43c0-a01f-89525b3dab91", "indicator--eae22f2a-3354-4833-b377-3f766f624d74", "indicator--f6e11142-825f-44f1-90ed-e11213ad90d5", "indicator--03add598-d3f4-432e-9a68-0f6abef0482e", "indicator--70e3978e-ce8d-4911-b0be-505bee78733c", "indicator--64f8cd83-5b23-4b21-9f39-9a4311374bf1", "indicator--8196dfc7-bebb-447d-b262-99129a8a82c9", "indicator--7bf97d60-2974-4e77-afff-8412a03f049a", "indicator--b9a01e62-11db-45d2-baf1-d5810d4b2541", "indicator--798030cf-6bc5-43cd-ac7f-a4284d876aed", "indicator--d3262abb-81c7-4920-8762-20409b9a03a2", "indicator--61fc11a8-8f10-4c5e-a436-9ce299584980", "indicator--57255c00-c14d-4b3e-ad8a-e6f011af5786", "indicator--813dba59-eec7-4859-a0cc-109c0c0776a6", "indicator--ca3cb76f-d0c6-405d-8830-08298e3803de", "indicator--0fc712ee-3621-415b-89d0-e7d4d6619623", "indicator--865a5f72-1d89-40a7-8d21-bb5c716b5221", "indicator--b3c739f0-d97a-49b9-ab76-e3e9b76d850e", "indicator--d122aaa7-ee9b-44a2-8451-fc1e07a91d9b", "indicator--c75e27fc-a582-4a9a-b32b-d2c9ae3ed51b", "indicator--acc7c65c-6d6a-46e5-874d-07aa21c0f76f", "indicator--747e44f5-c49a-4fd5-99a0-4b0c7a478a2b", "indicator--5d9529a7-29fd-4da7-9004-c96f694ecc18", "indicator--a762d245-38ed-4afe-aa02-9fd9a7dbac95", "indicator--86bc12a5-31c4-45ec-9cc8-78ffd1da62f2", "indicator--a096e80b-4bb9-4870-a754-5238fe5bd9b8", "indicator--1450cece-accb-4e69-a4b0-071a46fb0db4", "indicator--5307019d-15f6-40ce-ae39-0b6cb21ca945", "indicator--0e57db1e-5a43-4f48-88e6-219b45be18bf", "indicator--29f572e1-39f8-4990-84fe-23dcec2a3252", "indicator--150f65f1-9e6c-49c5-aea3-74133daa3349", "indicator--8b38693b-76f7-4f8e-b1f8-6fb2198a81c0", "indicator--ee41667d-adb4-4221-b0e1-72f0887f52b4", "indicator--0e8d9809-398e-49d3-89f7-31c66dd63b01", "indicator--ca321942-fd8c-4c4b-971e-c91d45c8cd3c", "indicator--756b9938-267b-44b7-a072-7606bda293ec", "indicator--a059ba63-103d-47ac-9326-c1309829a583", "indicator--5a21f99f-77ec-4773-99ea-2cb7acc1ca79", "indicator--829547c9-1bd4-45db-9e63-fc64c8465915", "indicator--463f2790-7b73-4ac7-915d-4136ef387a61", "indicator--5977eff2-fad2-4f68-823a-438899b9b3f1", "indicator--c92d014f-3b44-4785-bcba-a09c9e6eec9a", "indicator--d21e09f4-52c4-43a4-bf4f-8db20273c049", "indicator--83b9ce40-249d-495f-b048-2fe50cd17a4d", "indicator--a7ffddd5-c2e6-4950-90dc-99006012bc6a", "indicator--fe954bd8-108a-4240-9853-e30f608740d6", "indicator--de6d9774-f582-43ee-b1ed-ec9696ca4f78", "indicator--f1f32fdd-1b3a-41f1-b069-b91f858f1656", "indicator--2ee15bc0-2285-4488-967c-7bbbafa7c083", "indicator--ff905356-9ac4-4413-bceb-290df1e3f1aa", "indicator--4bff1722-dedc-4b9a-8a9d-6f325690540a", "indicator--e32c8728-6c1b-481c-861b-91231e3b0c90", "indicator--1b5a9eb1-5215-4f9f-952c-79f1fd2f0c7e", "indicator--a2876dc3-a697-4541-a63d-078f7b3c8244", "indicator--da37ed49-b1ef-49bc-a523-3fc7a2b1e09c", "indicator--1e2e8c22-c06e-4eeb-937f-99e8688a68b5", "indicator--12b8dcba-f9bc-482b-b696-b1bd1b08b166", "indicator--6c839d84-0801-4775-bfea-80aa6f757927", "indicator--a5516302-2a7a-463a-a59e-019c36c97e40", "indicator--6e612833-158d-4589-90fc-17e4d8b782e6", "indicator--79723b8c-7182-4eb1-a9cc-23b52164223e", "indicator--785a4492-8986-43f7-bc08-43ae90f1013f", "indicator--e25448c3-4efa-4d82-a6a7-3d00ff368a3b", "indicator--78266c67-6e84-475b-a654-682eef186ca6", "indicator--bb69505c-0557-4b6d-84ce-60bd319e4b57", "indicator--582b30f4-768a-4fda-ab8a-573d931b7646", "indicator--ef975db8-637b-4af3-acc5-11e2f88a4f3c", "indicator--0363c632-7deb-4f88-b530-fff08f1da497", "indicator--290b70a3-b1e6-45a7-b164-4f3c72415ec1", "indicator--fe93799d-1a6c-4465-8c5f-c37907898568", "indicator--8004aeab-34e3-4604-a4b9-12edff8d00fb", "indicator--9b0122e4-3e05-4e54-b166-73727a2dd0aa", "indicator--93862034-7219-44cc-8732-b6234f045746", "indicator--7ef61aa2-2551-4db2-aee2-ab7548a0abfe", "indicator--c2b7ff72-2465-4af1-9205-6c116b2d70a9", "indicator--f9f56f8a-2fa4-4ade-8246-768a433edd09", "indicator--ed833562-2346-46f9-b76b-0820480eb080", "indicator--b3667dc0-594c-4faf-ac24-6649287b3e2a", "indicator--86782012-1d1f-4962-8f4d-04f76f9bd374", "indicator--6081e279-dfd8-4c1e-bf50-301a4a79cd11", "indicator--a9226511-0416-4763-9394-f8485c34acc5", "indicator--eefae943-91d2-4f2e-9dec-d9a17ba66334", "indicator--f9cde042-db18-4c26-9b59-813255263878", "indicator--7fdde670-504d-4496-bbcc-83f5587af889", "indicator--93566a67-f409-403a-a958-5df179731c06", "indicator--6a1b0340-4005-459f-a322-2e9858b955cb", "indicator--fa55aacf-f5cb-431d-ac8f-e05456c014aa", "indicator--c5904dc9-3dc7-4767-a662-09f449f311e3", "indicator--585d4500-760c-497f-96b1-4d33f701265a", "indicator--9b0592e5-56d4-46be-a65e-a18febe8aa23", "indicator--7ce8f240-6c66-448e-9562-0c3884bdfb06", "indicator--fb451cfb-4dec-45fb-9f8a-7ed427e9f416", "indicator--85fb46cd-73e4-4798-afb1-e1b350be70dd", "indicator--87e5d8db-2b40-4e91-951e-ff5205fc569e", "indicator--cd780b2e-6df6-4c8a-a48b-5bf2e3779571", "indicator--bd6b3b69-b4d8-4f4f-8f42-f68a30dbd3ba", "indicator--ca1056e9-c70b-4dca-8538-49cb1735653f", "indicator--38644faf-7168-4022-97e4-9aab4cc14dea", "indicator--6fe43eb5-8eb1-4d18-8b4a-0c622de89446", "indicator--5d1d22d0-f6b1-474b-92d2-ed347685a944", "indicator--e517379b-2c8e-4b7f-9f0a-f718d2741343", "indicator--5f87e58b-e834-40d0-9f28-1a99be39dd2f", "indicator--df5024e1-d575-430f-b9e3-abfe5b9af147", "indicator--aa12921b-676b-4f93-a456-af4b37963377", "indicator--22fbe02d-82e2-4f53-add2-e158276380a1", "indicator--fefc022b-f11c-43cb-aafc-0463b6b7faa9", "indicator--8a3f4c41-dbfc-4090-8674-0e916467901b", "indicator--cd800ca6-0399-48bb-aba4-e1bdfd312312", "indicator--c31bd3a5-35c0-4cc0-a2f1-147e6e26360f", "indicator--c29ccd9a-c46b-4b73-bc63-3c419b4f2ef7", "indicator--3c1bc182-bf33-4149-8a7d-007a71be85da", "indicator--2bb1878f-9500-42f1-8465-da243816cd81", "indicator--1bf8be68-33df-4050-b9d1-f0eb47361992", "indicator--a75f6023-d5f4-48e4-92ce-be1301a4efc5", "indicator--5e5c5733-b42b-4cad-ae2c-16499c77fe91", "indicator--37140848-6699-4753-b16d-e7b6d9caa66d", "indicator--a40e3324-4370-41a1-91b0-d361ad67d357", "indicator--7f22c32f-3618-40ab-bdf0-9055effca1f3", "indicator--8e63647c-f9eb-4d92-97e1-003b2b98249e", "indicator--a57d32da-e5e3-4bef-b927-7f5cfd945f38", "indicator--9d16d382-73a8-46a3-a21c-e45cb604aa03", "indicator--b0bfd30d-abd8-493c-b6bb-93a912241164", "indicator--282c8ecc-b446-4b9c-b88e-856056ab8b97", "indicator--13918cdc-506c-4bc6-bd59-d66ee39312ba", "indicator--eb6ab51a-42bf-4e8e-9a97-b6c8dd113b7e", "indicator--ebf73c3a-c723-482e-beb9-ae60cbfb521d", "indicator--6dc9999f-0a5f-4392-8848-7002a6219b16", "indicator--5ae241c2-122a-4822-a738-e323e6786d3f", "indicator--839f540d-d358-4871-83e1-979d39cda26f", "indicator--e4f1efea-e859-404b-832b-5cf008239ae4", "indicator--a85f3931-8378-4f99-ab7b-87afd55d5ee9", "indicator--f69a4dae-a1f3-4765-a5e2-d20c092c41ec", "indicator--effa69cf-dcd3-4d49-88a8-480a0b129b72", "indicator--c7d9fb95-0b77-4c89-ac78-197a8a976738", "indicator--f4e74c64-235b-4584-b433-62e4995bdfa7", "indicator--7ab81e13-a14a-419e-acba-90894ede0b35", "indicator--5c8e131a-b910-4b4d-a26e-51b25bf3f59d", "indicator--71e1e481-bc2f-441e-af24-a2e089e21149", "indicator--127851a2-ddfd-4041-9c75-4bc4aa468f4b", "indicator--c5eecc96-2853-4e93-b68c-9ea6f09c7eac", "indicator--88aa9196-4515-4b47-ac9a-32e0b27c1675", "indicator--c50e2ef2-bec2-4e23-957b-07e758627ad0", "indicator--6e38a2b3-7cb9-4b57-b9cf-bdf407528d02", "indicator--8f9aeadd-1ac0-4409-8871-66e7afd8f10b", "indicator--3782dec7-4162-4667-bffe-326cbf0baf69", "indicator--d337cd1f-f53a-4e96-8e8a-c7512a9efd60", "indicator--693747a0-362f-4c33-bfeb-a514c00dd510", "indicator--2950bf0a-379e-4c38-ae88-5ada8e505af8", "indicator--27bce278-8ca0-4694-bd25-a34ec25eb905", "indicator--f05bed82-0fcc-4078-91d7-4a0a836d76e5", "indicator--ca75eb55-7d19-481b-a32c-0d3d0c658d1c", "indicator--cfa9da3e-1cf3-4b35-ae26-5378270aeacb", "indicator--a10d85eb-8f7a-4d0c-8e56-02814da1bae5", "indicator--e7ee4c1a-1bcd-45a1-872c-89f585d25d5e", "indicator--2d71d48e-a613-43bb-aa8b-f05dd8d90f15", "indicator--b81911a9-4457-4c68-9121-c033c93c5c5b", "indicator--f67f7515-1d55-4fa5-8fd3-e3830999cc8b", "indicator--6e123b61-45f9-4312-a9f2-5c52b2fe55a6", "indicator--a7882f85-27b3-41a1-9a89-935ece6ea2f6", "indicator--6e84b28b-ca9e-47d1-adf0-9074c6c76de1", "indicator--7be80ce9-9e1d-43a5-866c-25c570c8336d", "indicator--338ff113-5e7d-4d66-8026-6e33685a1233", "indicator--723a653b-0aa4-4277-b206-014c8503a6f9", "indicator--b8156654-03c0-45e7-b1d5-96553e42d2d0", "indicator--c5de30bd-cf51-489b-a3ca-07977df6b8b4", "indicator--198d0687-af73-465c-bb04-b2a5481ab837", "indicator--724c6636-d0c7-4fab-8615-098dec71ec08", "indicator--4909ca99-ce0f-464f-ac0f-33df4432acbf", "indicator--2b6f862b-a94e-41f6-a0e4-8790a1c1db7f", "indicator--23237ed5-5f38-4774-b8f6-c15f10745ae6", "indicator--a2c24383-2b26-43be-a301-d85923e3cceb", "indicator--659049ed-5ee9-444b-a90f-c9c0ad1f3d4d", "indicator--e978e97b-978c-4a9d-a2fa-d4d8161a512a", "indicator--0d442568-5cbe-4e3e-806e-a9e0217cf723", "indicator--1e4bc622-e276-4226-8ab4-c8550dcc4aa0", "indicator--912c2c6b-4b69-4331-baed-46a0d80d1c98", "indicator--6871aafa-8d4a-4e29-8a55-7189b663a860", "indicator--f013c7f5-0c1b-4aa2-b909-396fa2308f8c", "indicator--b74a341e-d521-4773-a6d9-71299bb6446c", "indicator--125ffa8c-74e7-4048-b819-a7597452e303", "indicator--c1e16947-5750-48e8-9492-92db69ac0212", "indicator--798c8160-822c-47b9-9043-eed8c8a5d628", "indicator--eb648c1c-e613-437b-a32e-d096e4402195", "indicator--8f2f06f3-41c8-4131-ac90-2c243e5c1d6f", "indicator--8c8bf1fd-3d7f-4d0c-ba38-db06d4ca5f59", "indicator--f1ec2fc3-8e89-44b1-9cb9-acf56e3fd500", "indicator--6e54d83f-3875-4fda-bc92-f7b041a2136a", "indicator--7b184ef6-ea76-4856-958f-16c135471fd9", "indicator--261991e3-ca7b-4668-8950-26e9b45080fe", "indicator--37ac77d6-13bf-40ae-be45-74eb6f46bcee", "indicator--e8a88f53-62df-4c87-88b8-9a0bd5c0131a", "indicator--438022ed-66ea-4815-b98f-9e4c9331d0a6", "indicator--a8e4e298-d59e-45d6-bd30-acd200b50dbf", "indicator--76deaaec-dea2-4e6f-8b5f-1668396f8527", "indicator--bb2831d3-6b81-4b66-9a51-754aabdd5da4", "indicator--467b99d9-10d2-4a1f-b727-d5b0b8f352df", "indicator--52ed735a-310f-4494-a21a-81611754ebd3", "indicator--d00aae0d-8641-4bd4-9a42-22da07030629", "indicator--33b6d497-bf42-4aa1-8c99-efa8f8cecfee", "indicator--11a1a3d7-a6bc-46ef-8fe9-f8ddedfb8ea9", "indicator--eb67382e-8918-46cd-a734-2243a9f0e229", "indicator--6ad59d23-795f-4b3b-938e-6ccd56eebc85", "indicator--3633d57a-dc8c-4af2-b62b-8e8f951e7005", "indicator--6ac5d342-b679-4bff-a0c5-32c548c37018", "indicator--9ad3f74f-bca6-4f7c-ae3a-e1085a8b98f3", "indicator--2cefca30-9ea5-43b5-8d9b-def0bf3a9f3e", "indicator--357b1a72-6c74-4213-b19e-25158e5c4c83", "indicator--3ae7813b-f658-4bea-a914-63bed68905be", "indicator--58c058e2-9de8-437e-8842-3390f972c05c", "indicator--f5f9d955-2f7c-4fb7-9365-6bd14666b79d", "indicator--fa09935e-d8b3-40f7-863c-aab92e1fc202", "indicator--6f2fc21d-e033-426a-8f43-e2f474b9eff4", "indicator--4979b49b-805e-42eb-8be0-df89d022dd1c", "indicator--f64791be-1b77-4c10-b73b-6916d89bfb41", "indicator--fd374c97-71ad-4a47-9d81-2780c6a74d81", "indicator--61971c44-0189-4947-a006-fb656821fe83", "indicator--170dc00f-93e0-46fa-9115-aaa2b44ffb70", "indicator--4bf57985-7b66-40b5-873e-5db4c4b6c83e", "indicator--2c2adda6-de53-4b93-9a4f-3c1379af9076", "indicator--d145470a-a5f2-45e4-8e10-a045635974e8", "indicator--c073f6f3-a69a-4a99-898a-37507c4fddaa", "indicator--5ae993de-1d16-43e9-b174-b1a46d67058b", "indicator--ac2ed324-fd89-45b0-bccc-3b22a0fd931b", "indicator--da79d12c-766c-4f5b-9bba-04aab42a17d3", "indicator--6ba17bd3-ae76-466c-ab1f-83c3dc9051e2", "indicator--e8fd263a-2689-4b0b-8d06-119992167524", "indicator--f9f23758-0665-4c18-97f6-0748662f3159", "indicator--e2c4f5a8-bca5-422a-813f-d31ab11fa357", "indicator--2c179595-17f0-4058-a66c-a27f284e8a35", "indicator--d23951d3-6ef6-493f-ab65-2532e7cd9db7", "indicator--004b8784-a69d-49d8-872c-9b65c8a2794c", "indicator--f6589cda-9ea8-4a83-859a-de03665aabc1", "indicator--46a5d296-1f18-4b9b-bb15-f3b5cdc24f39", "indicator--d3d15cef-2663-4e84-ae2d-d0b6a43ad82d", "indicator--95fdce6a-1fdd-4517-93ba-ebcd8d700bec", "indicator--41c8b4ea-46a6-4a75-9f39-8226e9e0811a", "indicator--13720424-90aa-454c-a80a-16a9f849c622", "indicator--60a47f23-0d30-4493-9416-7916ec75b085", "indicator--7f71e4d1-b20a-45a1-8785-463035e32c02", "indicator--8187f3c2-1816-4106-8a62-f850a24b73a7", "indicator--997ab689-bdea-43df-956f-13bdbc975b06", "indicator--8afe6113-0d61-4c49-a0b5-3a1c0a1a0b47", "indicator--c32ceb4c-0484-4da7-9ca3-35498f3514a9", "indicator--74dee308-4d8a-4c70-9fa7-6ddc61b0b1be", "indicator--3995b5e8-07b2-4df5-9e54-eac98d7e8a44", "indicator--78a95d15-3b31-439c-9e4a-a3caa1629cc8", "indicator--860d5320-aad5-444a-a82c-0e69a1c4b1e9", "indicator--e37bbe36-9a68-4a7f-8551-88c6df0326f2", "indicator--53130bdc-afbb-412d-8c97-055c8e0d197f", "indicator--3e828802-ddd8-4141-b65b-e2873162aa65", "indicator--415b367b-ae7e-4651-8c9a-225668f207af", "indicator--a099e6e7-419a-440f-9eeb-abdf5af21b7f", "indicator--f8428510-3847-42f0-9740-39070c6b45ba", "indicator--1a906060-6f7b-4b6f-8fed-72a02aff0400", "indicator--9e736598-7b4e-4ddc-8856-099e9e8afc55", "indicator--23df29e5-b182-4acd-a987-2bc758973e06", "indicator--4add5573-186b-4f15-a2dd-9b67f7773eef", "indicator--9461d66a-514a-4605-95f5-b9f8319afacb", "indicator--018f27c8-8fcb-449c-96e9-bec5c1bb66db", "indicator--cb880c90-acaa-4b37-8be1-d96f00e48570", "indicator--2e8b23c7-65be-46fc-bced-2262678a0708", "indicator--6aeb11ac-3df8-430c-a62a-a4db4b4e096a", "indicator--3dcd1555-dafa-4788-b03c-0c3f029c9295", "indicator--f7d501bc-d80e-42f6-bd49-5fccb8db4294", "indicator--9d9381f7-f847-4444-b3c8-9407fae0daa7", "indicator--45d77c67-5740-40ca-a6b2-f4dc03b4b555", "indicator--a0b7ba65-55be-430a-af59-b53f17dbac3f", "indicator--caa30b58-6db3-4af9-90ad-3d2a74baf347", "indicator--408d5e35-2d1d-4b0a-bfc9-e2082ffd9eed", "indicator--01facca4-930a-4d80-a316-d65c8d81e0a0", "indicator--e6f55c18-6914-4443-aee4-63bf8760e739", "indicator--4d81077c-b9b4-45de-a082-0cfa95e1a5b9", "indicator--561f958a-6862-47ad-9abf-66e17ed5c8f5", "indicator--8f192ddf-36b2-4c85-b0c4-91128264d836", "indicator--a6956985-5039-42d9-a42a-813521dc591e", "indicator--b25c06f5-1051-4513-aef0-ef8b506218ab", "indicator--ad2a3d60-dc27-41ef-aaa7-e097d94ec9a2", "indicator--75835cc6-372f-4320-bfc6-bb0c2ebf96fa", "indicator--17f3ddc2-f288-4397-a58d-3bc1c9c9fd8c", "indicator--111553c3-c165-40c0-b4c3-db698f35cc99", "indicator--d7313f38-ee94-4b67-a5c5-f8431060491f", "indicator--9bbe4986-d4ff-4aba-a093-2e4aa686bfa2", "indicator--056cc718-2bba-4b6b-96d6-565136b8ac97", "indicator--23a88c16-cd24-4b92-831f-334c7924b291", "indicator--7c2f29a5-4a7c-4a08-a15d-b6387e814759", "indicator--0d99352a-b7d0-4623-a9ac-26849984f6fb", "indicator--17b2ca3c-b35d-4ec6-a2b2-8374f99d13fd", "indicator--539f71da-e530-40d0-b269-15c02bafd14a", "indicator--f41d0103-5ac6-47e0-bfa4-3be367105e68", "indicator--278e864d-b9ee-4da3-9a11-e82638c3263c", "indicator--c8a3c5d4-7ca4-4ed2-8af8-0295b7f0ef0f", "indicator--3dc5bf5a-d441-4efa-99c6-05298a3a2a04", "indicator--21bd1abc-1960-4b31-89b7-84424de8e84f", "indicator--205af7ce-9ec4-416c-af33-37b6332b1f8f", "indicator--845c36fb-8acf-4bad-88d8-21b8a88accaa", "indicator--7b6db264-2ba5-4f6d-8c5c-15ac949dc89b", "indicator--42c88733-1c7b-4e2e-b0ce-999240a55f08", "indicator--d265fa11-c7ef-4048-b77b-7d0141f7b56c", "indicator--77e3efbd-c518-47c1-bb5f-b088f15c0abe", "indicator--39749ac4-68fd-4a5c-ae8c-1fac18ba7886", "indicator--1188e478-a03e-49ed-8ae2-d4a278732832", "indicator--45b35e71-79be-4d97-a0cd-b500b922afd2", "indicator--f220f011-f1f8-438f-82de-73ea2d41df1d", "indicator--e67f6a38-cc25-4d23-87d0-be76af180049", "indicator--d7667e96-5642-4ea9-878e-bf3121b1085f", "indicator--64c75411-8bf8-4354-ad8c-cecc0b9d0e64", "indicator--55335b29-b974-4224-a3f4-d2ad8fd5ac1e", "indicator--1431a40c-a5b4-4431-bdd0-ded0b1432a9a", "indicator--af0054bb-ff2d-4f89-a0fd-0bfe46615384", "indicator--a483b7b2-32a1-41e0-9655-594a1358e940", "indicator--271ed4b3-b706-44f0-9e37-7715e3387338", "indicator--1ba6e279-5cf1-4ea5-b743-7ffd89e83db3", "indicator--bf2b12d6-e519-4e4e-916b-b217abb6eee7", "indicator--c7807ea6-c03a-45bd-a0d6-65b3248168d5", "indicator--b5017469-9f8d-4f5b-9e4c-4813e06ed0e5", "indicator--5205fb9c-1fd4-4ab4-940e-0e29b4129c39", "indicator--9447535d-75a6-432b-9ca7-0a439d71fd49", "indicator--edc9003f-3033-4d79-89b6-99e2e9e18041", "indicator--e037b30b-97ba-4b28-9426-df408b40fb96", "indicator--396d4fb8-6596-43ff-b1e7-2335de4fb7b3", "indicator--850ec679-9af2-42ff-abce-59abe6aefba2", "indicator--3557906b-a0ae-4487-b476-55e55e2e1b6e", "indicator--051da828-5263-45f9-a1f0-0607f60d496c", "indicator--f306fb6f-4b42-4a4e-a2d5-9158bc0b8b08", "indicator--dc05a28a-805e-452d-9ef1-c708429523a0", "indicator--90451f06-1f25-4f45-a040-6f0a39e60655", "indicator--87d5dffe-c707-4d4f-baf6-7dd397037c06", "indicator--10716edd-7026-465e-be04-dfa1d1b9cb9f", "indicator--dad86f33-65aa-43d0-927a-7a92e7662211", "indicator--f1ac2bc2-eb28-452e-8113-4493e4cd250c", "indicator--12dc9261-a04b-4c70-9a42-5a45c558861d", "indicator--b98d023e-c1bd-4d42-9249-108a863cdfd6", "indicator--dd7b304d-cb56-468f-a9a4-e13458208851", "indicator--ee45bb79-271c-42cf-a0ef-abaa5d90b5bb", "indicator--5311caf9-1069-4e78-b8f5-4a9e2dcf1a7c", "indicator--995f6632-940e-44c7-b10c-23b872b27730", "indicator--68bd084f-bc37-4b0c-bdde-23581be6ed68", "indicator--d52b58a9-db90-43d3-bf43-daf102615da6", "indicator--18dd03fc-c09d-4621-ac03-6c668e43d663", "indicator--a6e55f20-8fd0-4587-9551-7797b5d8b356", "indicator--d5464d03-e8b7-4538-bdfc-9b07c3d4fa5a", "indicator--9f935d4a-c53f-4627-b1d3-496b4d779f46", "indicator--daf9c213-7769-4fb1-9998-62a4640306db", "indicator--98f7d326-e81b-4a55-99d4-31e4353ce86e", "indicator--3d8dad7a-301c-4191-a8fd-39b8e57d50d6", "indicator--1807130d-153e-4b8d-ac85-0b3f3cf15b2c", "indicator--b5598fdd-72c6-42de-afc0-2abf5824bfea", "indicator--7d876e22-de43-4824-9b45-0ba4c9ab795a", "indicator--c89d1611-25d2-411d-8aaf-e04a50ced129", "indicator--0148565c-932f-45de-9bee-4b0badf86d8a", "indicator--fbd2a58c-dd4e-49f9-8718-b127deea5637", "indicator--c73f8c7e-8e1e-40f4-b2ce-795424a69a61", "indicator--298b2565-8156-46d1-9206-f1165366dd62", "indicator--a535ce1d-84fa-4a00-9166-c99373222824", "indicator--0c869682-a227-45ec-b406-92d66c803684", "indicator--bc30e40f-ab79-405e-a9ba-5ce2d4dbfa83", "indicator--cf1dcf89-dee8-460a-826c-2e5f0eb6a1aa", "indicator--94ce234f-bae2-49d3-bd75-3ec0ceab6dd5", "indicator--c9bb3f80-2c22-4de7-887e-1bf5be90e0bd", "indicator--6b522f55-29ff-4be6-9694-965d9dc9270a", "indicator--50f77262-87a5-49c0-b97d-91f30ddd90a1", "indicator--6ec29626-5745-4932-bb6c-38510abc7df4", "indicator--f206bcf7-68af-4475-b37d-e0a4616f8dd8", "indicator--2ba41f22-c270-4b50-9c82-4ca868a791bd", "indicator--f4de6486-253e-4c73-898d-6f4d5f6e0f74", "indicator--c38e869a-3c45-449c-adcf-19803ac7fabb", "indicator--f89a3687-03da-43b4-a135-c69e9b822877", "indicator--2515e5a7-e712-45c7-986f-bcc6c33c85f0", "indicator--e61b4967-be82-46cb-86b0-6832a93f090d", "indicator--bf93cace-cfed-40b2-8f66-6a92c2e7638d", "indicator--127202d6-4b6e-4bf2-8a2b-db3a94495bae", "indicator--c8586e75-1aa6-4994-a2ec-12780f21606a", "indicator--855cabdd-4806-4579-b243-a22669027083", "indicator--455e517b-25b1-4ba2-a40e-c0e89917b9a3", "indicator--b3a25ede-f786-4610-93b9-49432d82fc4e", "indicator--7cade21b-d729-473f-b66e-32e201be6d91", "indicator--6afda620-de3c-4f94-9417-71f63bce6ab3", "indicator--e8efaf41-1ee9-42ea-a866-785027840896", "indicator--9a7fca20-0126-45d8-9771-e224715d66f2", "indicator--08d90473-adf7-400c-b307-f5c863363fef", "indicator--7f0093b2-a9a9-4320-940b-7529bcf6062b", "indicator--f22b938a-9608-40e2-8793-c5dd46f8b476", "indicator--80fd769f-a27a-4e40-8e1e-cd4d4c7caf7c", "indicator--4d62a6f8-cbe1-4f17-83d8-a8213b148bc9", "indicator--7679f3a3-b404-4e0a-b475-99010454997c", "indicator--1e3e519a-8413-40f3-88a1-88a86b822cf9", "indicator--cbb02cf5-d7ff-4265-a8cf-9f323bb845f9", "indicator--7d69b17b-526e-4387-80db-c3b869b17280", "indicator--04ba7b97-cefe-4774-95f8-c50b6c8cb09a", "indicator--48a7812f-f3a7-4018-9bf6-06b41b357afe", "indicator--397a000b-10f1-44bb-9b80-6fbd6ecf9905", "indicator--d5eff047-e8b0-4797-a424-c93f0b95a8d4", "indicator--9ec6cc35-8a9f-43d1-87b4-cfe5b056fa9a", "indicator--b7f3d61d-fb77-4c17-a2a5-a69e54f2af0e", "indicator--81c1cb7e-238e-48be-839b-7ebb290dc11d", "indicator--f2bbd59f-c321-4395-b385-67a2c6ba0bd7", "indicator--2b01ba82-ec23-41b1-9a1c-ddbb9436b2b3", "indicator--344b5a4a-face-4c22-bbbb-05fc2d3c12e0", "indicator--ea7c5723-3cd8-4057-8dd1-60659fc57dc5", "indicator--db9e3203-37cb-4c21-bb20-9eaef3d6727a", "indicator--8c7d34f9-c2e9-46e9-8355-b5a8da8a1c56", "indicator--bc3eae99-eccc-454e-a0d7-3cfb925f1691", "indicator--d5a4ca89-add8-4492-8841-1f16d16bc283", "indicator--972d000a-b55e-42b3-86d7-f2340676b657", "indicator--1dc42617-e704-4d6b-bcfc-357e5b25ef3e", "indicator--6cc7daab-c362-4136-bbba-a1f736325129", "indicator--4d88a940-a8bf-4e98-97e4-4cc76f4bc40c", "indicator--ca52e65a-f936-457b-aa13-a9cd9c5dc91e", "indicator--0a3fb823-ac72-49fe-9405-4d09f2d795bf", "indicator--3ee10383-72ca-4576-94b9-0de8ebd4d34a", "indicator--fde05a75-7232-4733-bffd-5ea5651511d9", "indicator--1dc00148-463a-4701-bf9d-f6c17179a81f", "indicator--900c4ed8-cc5d-43d7-8749-b684edef07bf", "indicator--9659368c-0894-4673-b3db-dbccc06c64d7", "indicator--b6ca2bcc-3217-4f24-aad2-e8935960dec8", "indicator--3032e18f-2e62-4cfd-8cab-7b67fc7389ad", "indicator--dedef178-efe3-4e34-bf36-0e2ba1198b04", "indicator--4045e589-b84e-4a4e-a44b-ca3d42c8bef4", "indicator--e994d4c2-ce01-4958-a7b4-685b95a818e6", "indicator--2705ab73-815e-48f6-ab63-f9b19b398212", "indicator--ff984958-8cfd-43fb-8b5c-e38a1f345d24", "indicator--b33b2776-fc65-4dce-8a1d-6902b7bf9ef2", "indicator--6ec3be34-cfeb-4b05-aa9f-5c55c63cd93f", "indicator--7520c7f0-f04a-4598-a3d8-f951ed0c9ee5", "indicator--27a941b3-3e81-472e-90d9-d79399720900", "indicator--53fd56f1-5df3-4339-bdcc-33dd2e5a468f", "indicator--0add9531-ec0d-4e85-9448-571f25e4aee0", "indicator--89541f6c-36a2-49a3-9e49-c44b7ed867a0", "indicator--f3413bd0-e749-4571-b82e-16a397539894", "indicator--05ed6d09-48a0-4f3e-9369-947487e6bcdb", "indicator--2c653ec9-3f1e-4afb-8279-91b5cb15f254", "indicator--e996970c-2d5e-43f7-b32c-de5f33f7f4e4", "indicator--faa7dd01-3487-440c-ace9-66c6189114ed", "indicator--371cdb3c-2fcb-4538-8446-1f2929b8f9e6", "indicator--f98cdd84-cff3-4878-b19f-3967fed2cf9b", "indicator--0e3fca76-3ec3-463e-a355-cf17bbd5112d", "indicator--8fa3b280-4229-47ce-8494-acd270871b95", "indicator--f29b3496-1f81-4100-9d81-02747552036b", "indicator--11b0f416-f152-4117-9862-9d6f5ade2651", "indicator--2c46fef7-9695-42f5-8b41-5c8aa89812d3", "indicator--9ab931a5-0155-4b07-9f83-81474b591816", "indicator--340fb372-2e94-430e-9051-417e53dbe7b4", "indicator--5e768223-09d6-4464-a108-3af05951a7e2", "indicator--04388393-e4d0-4f86-baee-3defdacaef7b", "indicator--50c539cb-a8c4-4800-abfe-8c5c3e0b9b71", "indicator--aeee4733-9688-47b1-9687-7cb1d0a0bebe", "indicator--d8adb506-e0d4-4375-a879-e1642f615c2f", "indicator--8cb178e2-aabb-443a-9b8a-653ebebd6857", "indicator--c5fe9f82-73f9-46d3-9b0e-f71f08749830", "indicator--43551eb3-bb4b-4e76-9861-3c5fc1a17a59", "indicator--6491342a-d99f-47fd-8f06-cf0c9f239569", "indicator--ebae3862-5767-4c8f-be66-aeb39adbf762", "indicator--a074d8ee-802f-46d6-803e-4e711955865d", "indicator--f829d185-07ea-4287-82a2-bafcaaf748a2", "indicator--63c7c1d5-f5c6-4d39-818e-7b9356b0d835", "indicator--b842a845-00ec-4b3c-b2ce-53611a3025ec", "indicator--7de71b6f-e9d9-408b-9898-a69c1d882103", "indicator--86ed64cb-aede-45a9-8e01-208e8a632da1", "indicator--c8e28f11-f975-4d38-84a7-10a402061dc9", "indicator--d15461d8-71f8-4320-80d5-4c9c570719fc", "indicator--e846e458-3f91-4ced-b28b-3e761577b902", "indicator--05590c5f-6393-465f-83b2-f7845373165c", "indicator--7d4f57e1-3c96-41be-b81c-2b1278da70cd", "indicator--28259927-09e7-4347-aad3-c8cb3b41f74a", "indicator--3ac0d191-3667-4fd1-b50a-58e92fcef4c2", "indicator--a11f9261-2a05-4d88-9e70-e46167d02c30", "indicator--b9319623-4c1d-4a21-b0c0-996407c02e82", "indicator--692071ae-ab3c-4a9f-9eee-4d591b7aab56", "indicator--cd8a71b0-285d-42b1-a721-05257002f0d1", "indicator--20581193-1943-4ee1-82c6-6e1a61d60e24", "indicator--6b502b74-90b8-479e-ab06-9aa5884c76d1", "indicator--3c797187-0fc7-4b20-9944-b55bf22953d4", "indicator--34deb946-732c-49ac-8815-7a1d7d5b8c4a", "indicator--aa9fcf31-a003-491b-a1d7-13ff64c5163a", "indicator--f8318739-8d67-4989-93ab-59dc7e5792d5", "indicator--454a2865-9aac-4491-bdf8-510af604898b", "indicator--01aaa019-776b-4051-9c0d-7481cbcad863", "indicator--e57656ef-6d19-431d-8930-1627e713c870", "indicator--9c82e01b-00fb-4106-a581-16e782ed0c42", "indicator--55d5681a-5eb3-4e0d-a887-ca5f413e26ab", "indicator--d5f95893-a0de-4703-9097-090cce333780", "indicator--e333a106-3efd-4aaf-aa33-61d1a1594387", "indicator--dd779130-da98-4001-9d10-0938b804730d", "indicator--109f861d-280b-4f02-b0bb-5ab68b8b8bd6", "indicator--7cfac5ea-0a20-4246-b361-128de366628e", "indicator--63423e77-dbf6-48f2-a4d6-1d846b211de0", "indicator--1068d5f4-a05d-4176-9fe0-1b83ea527765", "indicator--82fc724a-6012-4602-a2b1-034f759e43a4", "indicator--275a1fc3-858b-4f88-bb1e-0d03939d3fd9", "indicator--fb5d0d7d-4aa2-485e-9b73-451989fda326", "indicator--fe05607c-c35a-48f8-9d36-a6a97016cf84", "indicator--ba28b0a6-5563-424f-997e-13674942af60", "indicator--f9f8e612-c5aa-4160-9a1f-199af4bf15be", "indicator--0e2b5efd-c653-420c-b6b3-b362023268a3", "indicator--a04dc2f1-4750-4253-b1a6-5d786a8d553e", "indicator--00a45ab1-faa6-461e-8c6c-a38cecaa3738", "indicator--b456f235-9dbb-4d86-aa21-8f4aca8aa2ba", "indicator--f139f02b-c85f-443f-aef0-0dd02344249b", "indicator--a06b9de9-6b5c-416a-9241-76ec99b1aad4", "indicator--f26f7202-14ec-4815-9539-07bd4d3ec92b", "indicator--156e4783-0dc9-4e24-bdbd-53466d846e0b", "indicator--09f38499-1d03-4b08-afe8-81ec39cbc6c2", "indicator--97579d77-2305-413d-9551-7ae0188ff63d", "indicator--58ed889a-4334-4d98-bb28-ffa064df7f29", "indicator--41857de6-a19a-4cf5-b084-04e1abd15557", "indicator--d2e42ba8-e7c5-40e6-a331-c927abd791ff", "indicator--758001f2-e9ba-4714-becb-aa8a49fc2620", "indicator--672360e6-ab43-4fc2-9d78-f63ffd707f61", "indicator--1e310ca6-e44d-4557-aa28-dcffe57be826", "indicator--18c86ec1-2de4-4507-91f8-695d2c72a266", "indicator--a64993d7-59d4-4e2b-ad03-0d71d704fa73", "indicator--d2ca2d12-82b5-4a1b-acaa-568f80088284", "indicator--261e7add-57c5-4423-aa43-d7e4bbd92b97", "indicator--45c351fb-9eab-4745-a4c7-661b593eade2", "indicator--13ef4cdf-5008-4a7e-b3e9-5c1d8801c6ef", "indicator--0677e50a-156a-485d-8f69-be9dc6c46880", "indicator--40a0487f-c5e7-49e2-81eb-ac3a026a055a", "indicator--25be5c02-1b10-474e-9fd1-2415f97f10fd", "indicator--69248e2b-f0a9-4018-9aab-1e4e284fb918", "indicator--1d8bbc8a-a85a-4e1d-945c-a01fd7a565c5", "indicator--c4b60779-1b7c-4205-93a2-de1b70731500", "indicator--0697c26b-ea2c-4cf6-ae8f-663f4eaf7124", "indicator--4ceb4a2b-6695-45be-aa27-cd0b8f6e8dbd", "indicator--c3a017e6-71af-48d1-ba20-912d59ac35de", "indicator--24e94680-a31e-4d2f-86b2-c74006700e28", "indicator--ded41125-ac7b-4b03-acc2-3b22f139b0a7", "indicator--787920c9-899d-473f-8d18-57d0ecb8bb77", "indicator--99dc861b-f19e-4ce4-ac50-460e4a30fe4f", "indicator--2a06fdcd-d30d-4745-bded-155fa83fd285", "indicator--85c6c881-e1e9-4639-ad4a-4e9c3241ba66", "indicator--62fb5082-2cf6-4d92-934e-2b23a2dc17cf", "indicator--49819e41-da2e-4f9b-80d7-f531f371cdcd", "indicator--1392e6d4-d4f1-43a4-a3c1-218a4cb611d9", "indicator--6e8d7715-e8cc-4467-8879-86dc00041126", "indicator--59a2a4ff-c53f-4ae0-a7d4-d48240aa53d8", "indicator--5814aa6d-52fb-4012-ad9f-95b522b9d829", "indicator--6789c6ae-6f97-4773-aa2e-8323da9298d3", "indicator--b9443d8a-e170-4d40-9145-fd4fa26c4c1d", "indicator--534f79ad-5226-4739-b46f-a2ee83fdeebf", "indicator--07173078-35d9-467f-9b29-010927775c6c", "indicator--34cd2fce-a7cd-4683-b9a4-1b79fde800a7", "indicator--9004bd6b-2c81-48ae-8414-f3779998d43d", "indicator--f53078ab-9c48-4c5e-a985-c1faca0d56a6", "indicator--98ee36e3-ce20-415a-adb2-3467ff905dc7", "indicator--27cef85b-9eb5-46be-894e-5058ba448281", "indicator--112fa203-dbb0-4187-b327-de7c4b8b1e8d", "indicator--47c8a1f3-0ebc-447e-a831-4afe0c09e549", "indicator--03f9ae61-14f9-48dd-b4c9-c39d5ffbdf19", "indicator--1f523d96-8af0-4090-9272-ea94c521b6a7", "indicator--9ad15444-43c9-4ee6-b411-c157d0889900", "indicator--f1a041d3-e3cc-4941-884f-84eb67d59c11", "relationship--02f81aaa-0559-4ba1-8a25-54c4104c7de5", "indicator--19374f4e-5f52-465e-a87e-63331efdaad0", "indicator--d296d69d-b1e7-4a07-9276-68916d6a2b82", "indicator--0350d368-901f-47fa-b9b2-4276dbc70157", "indicator--5dbc9244-b60e-4ab4-a032-09b6a0bbad96", "indicator--1d76ab1b-4f0e-4c41-8e37-de7e3f5c2bd8", "indicator--9c9cd17e-aaad-4786-b662-b6ea48e3e232", "indicator--3ec07242-d429-4b1a-8d2e-04e4d6264518", "indicator--068be53c-277b-4b46-8e76-4f4ac6d00bd6", "indicator--f8d668f3-64d5-4af4-bbcf-915dbd01bb5d", "indicator--4149cbc3-f1f0-4cff-85dd-8648ec2ededc", "indicator--353c1ed4-df7b-4c01-a0f2-f11228a7af3b", "indicator--bdb3031d-14ad-4e64-aee1-3d1a641d506a", "indicator--4aee8fcd-0a3f-4e26-858f-afe2a6f42b44", "indicator--a85ca7a3-cead-4ef8-b54a-4ecde7f895f6", "indicator--541dffb4-f4c0-48e5-b9a8-fce3cca74aea", "indicator--69f3d2ac-bd70-4b94-9ef5-2f18f6ba16f7", "indicator--9e61d32a-dd51-4db4-9d9b-f1e149557d37", "indicator--7da4f3a6-d555-4fe3-b1a3-f54d2804cd00", "indicator--84c835e4-5c66-42fa-a1e6-16096b6d1a84", "indicator--aba97597-8449-4bee-b2bc-690abd256146", "indicator--7e02aec6-92ef-4462-adcc-373fc94c562e", "indicator--86876ea8-24ff-4f5b-a2cb-0eefcd77cf43", "indicator--98c9478a-837e-4e60-846e-99ed939d0f66", "indicator--93e7a48a-676d-4a17-b56d-17a802154d9a", "indicator--bd32c343-a4fb-42d3-bd98-32284987261c", "indicator--6a9b7616-590e-4236-816b-897407960dc7", "indicator--4c641d2f-6bda-4f2f-9d9a-9f1e4857b767", "indicator--17c84abf-b633-4839-8ffd-b0492faccb6d", "indicator--040087b3-3368-4c84-96a9-d192bae266db", "indicator--4c30a653-4fea-481f-b08b-8d90256870d6", "indicator--b630d17a-8bea-4659-8f89-d268bda34779", "indicator--d18dfa33-2ba3-4b71-b88d-56eb2d247d42", "indicator--7ce52056-0531-4fe2-9604-ec0b85d3fcb2", "indicator--c46a0abd-0218-43e7-bb6a-b611b33c6b8c", "indicator--91a97e0b-8d67-4e74-a14a-431b457b0f6a", "indicator--f50ad7f1-7b64-4261-ba68-0f6de3737644", "indicator--333f9368-c1c5-47e4-9dad-8590cfebfeae", "indicator--4f085b36-14fa-484e-9992-3add553b6202", "indicator--db67a760-df7a-42a8-bcb3-385b985f06d7", "indicator--f893fc91-c77d-4b81-b4f4-2aadd289635c", "indicator--f2195329-ab52-4794-9d21-60d05f279cb1", "indicator--88c51cc3-01cb-4e1b-a130-27cc8d0c7dfb", "indicator--022780c5-d4a7-4486-8590-311ec71d7ecb", "indicator--9542fc2e-c63e-4f1d-8304-a4476687e854", "indicator--f146617e-102b-44db-bc4a-6787893df9f1", "indicator--3076630b-8379-4127-a178-f95002c43192", "indicator--ccc2dd24-ac24-40f4-9b56-8f36a03c130d", "indicator--688fa6d1-8e7e-456e-8f0f-686fa65ee74d", "indicator--b8032379-a5be-46e6-8054-bd4caa819836", "indicator--03b1b9cf-4530-4f46-ae08-d9ce6f3bf309", "indicator--61669914-a216-42fc-ad45-3a2cdddd0b3f", "indicator--fa6c8089-4a24-468d-bcef-48a84ce2679d", "indicator--5dbf9581-716c-4575-b0d2-4f6a16290d07", "indicator--c363247d-adbe-44c5-a643-d83d7fd5b5a5", "indicator--c190bf73-1542-4ddc-929b-e3ba00efde5a", "indicator--86ed9e96-bc9c-455d-84f0-164e4fa62c26", "indicator--0b9a6dcf-66bd-4451-aca0-ef65bdd42e80", "indicator--d6605f1a-4aea-4731-b2eb-eb25067b471a", "indicator--14e99245-e01b-4be1-ae9e-df109ae8d4b0", "indicator--db10650f-1150-442b-b723-d52bdc716267", "indicator--ae4b2e11-d5b7-404b-a65f-5819d74f171c", "indicator--a2360898-fc79-4349-9e51-1794b62be0c1", "indicator--a582c067-11bc-49b4-a116-3bd9bd355b0e", "indicator--bb96c033-aec3-4d88-9f5b-09cd19a14c73", "indicator--c2996be8-b9b0-45bb-9938-43aecf33d39c", "indicator--72ada615-688c-4c83-bfbc-147e3f5af844", "indicator--0daf9387-13a4-40d4-81d0-58310c7d672e", "indicator--e79fc291-2349-4ed4-9cde-350f854fc1fc", "indicator--33d44b95-52e1-43f8-9ec0-ee7d20b9dfc4", "indicator--d0c8281c-14b8-402f-a59f-5f67e3b2961b", "indicator--27da79d6-83d5-4b50-b062-715aef0b16e0", "indicator--ffcbac19-b74a-4fb3-8a6b-3dd36c2ac24f", "indicator--f91b6a58-bfec-4f1a-88dd-3e94c147355b", "indicator--a4ad1a4d-1e67-48ee-bf22-e1443deffb55", "indicator--7ec56bf3-2858-43a4-a468-8551dd2681f9", "indicator--55cf923d-37ae-4319-81c1-dbdb2eb680f5", "indicator--254f70a1-36d3-4a7c-bee9-147a4e786a5e", "indicator--2462ef63-73b7-4514-9d20-2f11bf9e8f9a", "indicator--88d4daa8-b4b1-48fd-9f48-cfcef9bbd8dd", "indicator--e73fdeb8-90b3-472f-9ea2-bc481d0644e9", "indicator--c4b3c735-6a02-49c0-b22f-ac46308de448", "indicator--a61da36f-9e97-4907-b093-1627742d482d", "indicator--4f73caaa-9e76-4b78-acf7-907ba9987950", "indicator--2375c7b0-d6ad-4712-8f90-59959f7085ed", "indicator--28dac6d6-24fd-4cfc-8174-c2106a2890f4", "indicator--273fcd9d-7ff0-4a9e-915f-ee205f8235e7", "indicator--60f8a6c8-7ce5-4f6f-9011-3f549f323488", "indicator--906de05a-6d16-4a5b-a62c-afbf9bcc153c", "indicator--bf25baae-b7ee-4ddc-bcd4-0c69eec665d4", "indicator--908ecaad-a149-4e1c-ac84-16901ba2ff3b", "indicator--604b8880-3ec2-444f-bd81-79eff908a84c", "indicator--516c2394-c99b-402f-b8f1-0feca4b9f8fe", "indicator--0e5dbec2-f041-45aa-9037-9284e89074c8", "indicator--a5f903d7-a2fc-4c70-b0eb-b441607535d5", "indicator--816211ff-5518-45e4-b507-1ce69eb66c14", "indicator--f9b5447b-16ef-4e6d-867e-29dcb341ae1e", "indicator--09d46da6-ab58-4dd3-82ce-0f3ef1d0cc25", "indicator--c334a2e5-7605-420c-a8ab-dfbefadc7e3a", "indicator--1a8fc571-f1e5-430f-90f2-181b8bce380f", "indicator--49d7628c-633b-4155-8601-99792b861546", "indicator--d0b18973-42c3-4fc6-8aab-6b6f853131b2", "indicator--48e7af6a-2e53-48cd-8ff8-6c0f3ad9bb04", "indicator--6cd00430-d8c3-414f-be64-7befe1188b81", "indicator--64282a5f-b451-4f59-a7de-454a64bf9759", "indicator--e519849e-50c6-4dd5-b490-918c5257f619", "indicator--3b656201-7e65-4c4d-b952-a2aeea50381a", "indicator--25440780-d01d-45e0-a5e1-ff925a6ddf50", "indicator--a34b3d37-7338-4ffb-a5a4-40ae22870411", "indicator--a35fae7e-64ac-4d94-aee1-4c3c357259ab", "indicator--147b9df8-61e2-4f19-8458-ddfdb7a4a696", "indicator--7fc41e9c-33cf-4139-8f40-e7f9848387e1", "indicator--e87630f7-7861-4a28-a07a-956cb9981e0a", "indicator--3f770658-662c-4edc-8737-1d30e49ae635", "indicator--bf038aa2-86dc-494e-b701-ffda6995b23e", "indicator--acd4c9e7-b098-4063-96a1-7f0311092b4c", "indicator--c7872162-af6c-42a2-9ee6-927b5f67695a", "indicator--71cb2a80-8f4e-4e9d-9e89-5b2f516739b1", "indicator--35a2a72b-c7ad-4080-a25b-dc3dcc8c778c", "indicator--4aebf9ab-3b6c-49bf-a3dc-fdb4c2bf0873", "indicator--86a37076-7291-4f47-8212-3b7f5ba7edab", "indicator--e077c68d-64e3-4328-bd86-2b02cb5efd18", "indicator--cf4c7b85-bce8-4940-8037-75926eb41aeb", "indicator--a2d02d7e-05f0-4ce4-b2c9-4db793c60f12", "indicator--3a5851a0-a319-47d2-8926-09e66fae110d", "indicator--fab56f5d-5ec1-468d-a7a8-d4b559843c03", "indicator--02eab1aa-5a28-44fb-857a-2bf2966e538c", "indicator--fcff7d79-d4af-4736-96f5-7228b555c6a8", "indicator--4d975907-8885-4720-b6b0-61916a009b75", "indicator--5b398bf6-7deb-4c08-8d8f-71bc87439aee", "indicator--a53e0016-b7fd-4303-9efd-adf78a46cfb5", "indicator--ff80f7b6-b381-4622-9be2-147f7c7929db", "indicator--ad1f7105-493d-4640-922d-1ac787e5fac3", "indicator--6c914c7a-97ba-4e71-9e25-ab7cc33a7417", "indicator--92339650-286b-4c08-8cb1-d5c966c8a4b8", "indicator--a737e9b0-fd1f-4346-beed-c15e0a74ac60", "indicator--d491f42c-55d3-4953-8e26-5eae8ec2f77e", "indicator--656720c1-9ddb-4999-9526-5689a3d815d4", "indicator--bb4514b9-cb97-4683-88bf-5330b14ef9c9", "indicator--795c6936-a9f3-46db-bcb6-624a10f2f844", "indicator--13d7635a-9ed9-438e-9059-3e7c0269154e", "indicator--07229302-ff29-4b75-be3e-2be15ba8624e", "indicator--1d297e58-eff7-4cf5-8cf0-a2b1f894857c", "indicator--d3cdec0c-cbc7-44de-851e-f3c89283ce48", "indicator--ed3a5dc6-58bf-445f-a2d6-5f9515256925", "indicator--5e269ad1-7867-4627-837a-631f9cfd3e2e", "indicator--06c5f990-4f47-4260-a0ce-a5be2a80177a", "indicator--0b306fd1-f8ab-4e02-b8a2-5e751166fe00", "indicator--837d9283-44b2-43a8-a17d-19d5560bed7f", "indicator--97161ca7-1c72-401d-81d5-334f14e71970", "indicator--b0a16cc1-3241-4f59-bd64-e9a87709d622", "indicator--10e89a39-f2ef-418f-9f5b-8e51d4dda332", "indicator--b6814d60-e3b6-4ca8-bf09-665f109245f1", "indicator--d0bd5271-966a-4035-9163-5bbf42fdf7cc", "indicator--139e1fa4-1981-4d81-b0d0-e010d98577d6", "indicator--6fc308c1-1d76-4737-9011-90b8fdf8a0e5", "indicator--467e0f6f-b51a-4b58-925d-defa99f079c2", "indicator--5ade2f55-6160-4293-8168-3475077f7800", "indicator--959292d3-ef53-45ae-ba2e-822a9c5ef39e", "indicator--b39319c1-fc7e-4ca8-8521-546932d8b96e", "indicator--0738e64e-749b-45fc-86b1-c437eafb89df", "indicator--19d6ca75-6b3e-454b-937f-e288f806ffee", "indicator--17a2e4be-b4f6-4de8-8235-55a1ceb911a7", "indicator--579d8a6e-9931-4dbb-8d2a-5188d1a2acaf", "indicator--39cf4eef-be51-4483-86b0-958c128947fe", "indicator--a98612d6-39b9-4131-bb45-73917b26c27e", "indicator--e1c35afd-e5c8-4df5-a777-b256ec00ea00", "indicator--51929ee2-e19b-4cd7-a366-675fa2e87af8", "indicator--d5304a2a-3310-43c9-bd54-a95074634be1", "indicator--b9fdc033-bc87-4164-b03d-cf49b1f7537a", "indicator--e6365975-ebb9-4b46-92d1-d3410fb3d064", "indicator--02fdab75-f21b-402e-89cb-923be0d182af", "indicator--c8aa53f3-b65c-4ac5-8ac0-52c40528367e", "indicator--00424159-716b-4504-b6c8-269b822ade53", "indicator--ba82d826-faf4-4710-92d1-e88461a7bc63", "indicator--3ff974cf-5650-4ee3-bb19-b1b9fb6da826", "indicator--27d1ba40-a7b4-489f-8479-2ed3934cfbac", "indicator--5f1e847d-51ce-447f-a562-6a45f7af443c", "indicator--a7a05097-e236-47fd-8c18-b690a1b7703a", "indicator--898ea1c1-9b0a-4a0d-8f09-a93f1826649b", "indicator--2de34636-2f50-49e5-96bc-386e919ed4dc", "indicator--69f0890f-fe3e-4e00-aaf6-7c41cc528cfd", "indicator--4ebd07ba-7679-4c96-a248-b77669432b13", "indicator--62b08242-86c0-4327-b68f-fdd2408b9ccb", "indicator--8f164ab4-90fa-45b7-93f4-24fd9f8a0918", "indicator--cda6ba1e-6220-494a-8a97-1bccf4e72e5f", "indicator--e6ade11f-d3d7-4fe9-8d8d-d5b321f6e043", "indicator--2e8657f7-6f2a-46cf-b65b-4ace3c714117", "indicator--7cf351f2-bc9d-4b3b-b7b7-4f07e75f8e01", "indicator--f8575bb7-59e0-4d1d-a419-14ba058b7c18", "indicator--5884b9a4-f355-4983-9f63-8f8e7a7ee0e4", "indicator--c417dde6-2b96-4d70-b6ee-c5758b0131a2", "indicator--eb4718cb-bca2-45ff-83b1-7b471ec6adca", "indicator--d8ddd80b-2d19-4d59-84fc-7bf8109ca57e", "indicator--cc760457-5548-4d85-a303-6a12dfe7151d", "indicator--8b0d8732-000d-4d6f-a836-093ee6099e70", "indicator--9a41d5a6-3901-42dc-8b39-7f07d80ba125", "indicator--00640a16-5f25-4fa3-864f-ec042041f193", "indicator--36df56cd-ace6-485e-beab-ba6465b889f5", "indicator--d98b2041-1356-4793-ac26-af29372452d1", "indicator--198d77e3-1ce6-4798-b0d8-35fa97c098f1", "indicator--167298b5-f269-469d-91c7-1442261e5b92", "indicator--1caa55fa-3f81-42fc-9b1a-59f9e0d8cb8e", "indicator--97e20140-446a-43ee-a74e-f95331727844", "indicator--71d07dc3-02c8-490e-b404-19457c58d93e", "indicator--b7d1a48a-62ef-4c17-b770-3d9e99a5a372", "indicator--0c9883b2-8b4c-4ca7-aeb4-c572830dc591", "indicator--3be51589-b32b-4222-8ed7-b22490bf16da", "indicator--cfe1b93f-b9bd-4807-85c2-6efdf5a32b7a", "indicator--717307d7-e67d-430c-ae0b-e6ae6ba646ff", "indicator--3edc232e-a7b4-4759-a71a-e8edea76f728", "indicator--15a715f8-7783-4945-a211-3782364bc8fa", "indicator--66d9d988-684b-4c78-b7f4-6a0969aa3862", "indicator--afdc89a9-320d-4d10-b259-a186da977ded", "indicator--1f579218-3e6b-4e40-8f37-acd756be4638", "indicator--12a8a494-6a22-4c8a-b205-415112586981", "indicator--688747d8-3ff7-4c4a-9f5f-fae5ef331807", "indicator--7a858a5a-96b8-4686-9e74-8091bc55036c", "indicator--b3af4f1c-71f3-4731-a312-8d0213aa51b0", "indicator--924977c1-e293-4739-8574-46849f8ae39c", "indicator--9b08958b-f8cf-4a85-a114-0c1fcefc9ffb", "indicator--52447a9b-daf5-438a-8e99-7a7c8a4c1185", "indicator--17da7b89-3c94-4fe8-ad3d-a372027f7b2a", "indicator--bd7fa53f-a880-466d-81a8-95d1082c2a07", "indicator--d2fa3dd3-58c8-4676-81e1-5070badfef71", "indicator--ea8ddec3-bb8b-4664-8ae4-55be021e88b5", "indicator--f8a4e1ab-6393-4404-ad24-3a9cd469017e", "indicator--aa70f06f-689b-4677-99ab-a7f485e46fe2", "indicator--6974bc6d-15d8-49e4-962b-452bfd15fae2", "indicator--31bc316f-3e6c-49a6-b882-dbd2fa5f5193", "indicator--c56e7137-c206-4423-bcfd-90c9c3e91ae9", "indicator--4b6dcbfc-7dff-4b0f-b1b2-6bbd72b13cd4", "indicator--a9f29435-0400-46ec-8d9e-e660e6bcce6a", "indicator--d46050a4-3bd5-49b5-8f13-431e6cdae70b", "indicator--a73d43e9-7454-4e5a-b102-7a356d55b82a", "indicator--6c70ecd4-ccf6-44eb-b30d-2faf5ebf5c08", "indicator--010d446d-0cdb-49d5-b0cf-4a0d4d8adb8f", "indicator--9c32dfa0-3733-4b68-82b3-6e1428998cd1", "indicator--a5a5a085-91c3-4527-907c-0c2e78a676b2", "indicator--1132a0a1-ad10-4981-8177-b6ba9222c7af", "indicator--24551275-e2f5-41e9-8527-d714b06ae908", "indicator--bb5fa403-964e-4bb8-aea6-856955646463", "indicator--bceb4365-8d25-4b0a-ab65-d6a20afd1e4f", "indicator--cc123dbc-9ab3-4229-89b0-a10e868a54f5", "indicator--bac244d5-d02c-43c8-aea5-02ebe520cd68", "indicator--c95aeb33-ef1f-4808-8c65-236ec6f07bb0", "indicator--9328e74e-9b0c-413e-b881-8c50ea7219c5", "indicator--4ee0cd81-c371-4fe6-8f21-b2319caaefda", "indicator--3bee292e-4a1c-41e3-a97e-ab8aacbc6c8c", "indicator--9019c29b-b46f-4911-aff1-d1399443195a", "indicator--88d6fc17-2e9e-4e42-8b22-bf9574ec1380", "indicator--2f0a4465-d526-4f4d-9b8f-0de8e66a3bf5", "indicator--71016d4c-1c78-471b-b257-765965090156", "indicator--2d3eca14-5941-42ac-b5f5-6fcd3e26391b", "indicator--ee15e545-93c1-4d85-96ca-91a8e1f12761", "indicator--556f70dc-3f05-4689-9dab-3ee9591fa51f", "indicator--c645e749-fccc-474f-8cdb-a435c4b7dd9f", "indicator--5d5ce0bf-92d2-44e3-8042-e1d67c69de25", "indicator--b609b362-b8cf-44f2-810e-2ebc4251be2d", "indicator--108141f1-d765-4173-a446-a01246cbd335", "indicator--e1be8553-f261-4d7c-9d89-60305d7d2229", "indicator--09f58c21-fa8b-4d50-8dc2-defb5df54850", "indicator--8f157e90-ad21-4474-901d-323b26f765a8", "indicator--3dc4374a-c4f3-4593-b9c2-5113cd764d48", "indicator--a0cdd834-2a1f-4263-98f2-7c26daef595d", "indicator--0763161d-360c-4c74-84e2-8ac57bb9b9a6", "indicator--150d4edc-fe15-4b27-8970-0608a2cc93d6", "indicator--ab98901b-35bb-4afc-ae6e-e9410712b453", "indicator--e3755a3f-17b9-4db5-b531-3482bdb86f92", "indicator--68acd535-a19b-4c00-8027-6718368dd916", "indicator--61d64886-5e49-4f62-99c2-466eee463732", "indicator--7b0548ae-6684-4456-a3d4-6ad050a185de", "indicator--a2511dae-a376-4455-afb5-488b0b648652", "indicator--86172b9a-4af7-485b-9080-869d498b63a2", "indicator--c277f8cc-d287-47e1-b908-0c7a161554a4", "indicator--9809dc6e-6383-416e-a116-fb73e3824972", "indicator--7b42b04c-1dd2-49c3-8e24-23dfcf5866c2", "indicator--b93c0e83-dd5e-4d8d-ba7e-ee6596bd6823", "indicator--4aafcc5f-c05d-4137-94e8-c80f21e22020", "indicator--47319c19-884c-4f66-af78-e683acd2ea7f", "indicator--b6399f1f-d1a6-451a-a883-fe5a6d4735f9", "indicator--d6193252-2065-4084-927e-e2350aea2f21", "indicator--bf1933a2-bd35-48d2-9ae6-956082a996c8", "indicator--674808b2-ef5c-4ce9-94ed-a194298f8be0", "indicator--0678fccb-b557-4eb6-8fe9-1d83a0dbb2bd", "indicator--fc1d8d88-a01f-4244-bc73-1c422f117e62", "indicator--3f6f555b-19b1-4e11-8c4e-8da09ce83a64", "indicator--c1c14ada-2be1-4814-a23b-1934a4b8b5b8", "indicator--5de182c5-ccf4-4be1-ac01-c71edb0912d1", "indicator--02775879-5a4c-4912-90db-61c5224af158", "indicator--293d38aa-3391-44f9-9c08-8489f42b7a4a", "indicator--f97676d7-7265-4ff1-86cf-a1ea50467b69", "indicator--f8a70500-c7bb-459c-9321-fcbba9d6c5b7", "indicator--3ec58cb7-f2be-4dac-bbc1-9bc6acef5e2c", "indicator--556b2f98-cf0c-45ca-93bd-2d4ef0d3bee7", "indicator--9f23c5df-c64d-44e9-b69b-153351f780f8", "indicator--f3ff3219-b621-4919-b7f1-1d572d98edc6", "indicator--bc353bd1-23f9-45b2-b3bc-5164cb18ed53", "indicator--3d228ea2-6229-45cc-8c49-13bf75ad15d7", "indicator--4706289e-24be-4f26-ab83-7c9591f698c1", "indicator--096c554f-ca63-40ee-8f15-938f225ee8e4", "indicator--0188ff66-b7b1-4a07-90bd-67fc16b3a6cd", "indicator--daf94679-3360-491f-8142-25e1bbb01ae5", "indicator--48fb8406-3a21-4087-9ec8-1ae251a91bf9", "indicator--3ae74843-ce66-423a-9f54-4cd1e5602670", "indicator--608cc898-b83e-4c46-a9d9-9f6b9aecdd49", "indicator--dcc8d49e-5f08-49c0-9247-e1d78d0b5771", "indicator--12fbf0ff-32c3-46aa-9cf4-e42e85fa04c8", "indicator--c1946bbe-d8be-4ce6-958e-f540f1c26c32", "indicator--4fe73720-6e41-48f5-9df5-ce76fcc49f17", "indicator--4c61d96b-bad8-4a51-a858-dca1d85aef32", "indicator--d0693c8b-9bc8-4136-b4e4-230278abb67c", "indicator--ec4c671e-b016-43cd-9ec2-c30a4b68482a", "indicator--e49ad318-755e-4c45-adc5-9116e4c5cfb2", "indicator--7018ff3f-dc61-4682-8ef1-3644071745f4", "indicator--4fc87d8e-1cdb-4f5b-9483-df276a96fd6a", "indicator--f5cfc9f1-8c95-47cf-8477-adb124e6a388", "indicator--07ab6836-af2a-4112-8ce0-f45548a08eea", "indicator--f5fc717a-be16-4088-8080-05812152e8be", "indicator--07262ee3-f5e4-4745-9768-953f4de5f43f", "indicator--16c4929f-2ee1-4eee-adb1-8d1545aa9462", "indicator--4aa6ef59-5fb2-4695-9c13-c3da1d35c30d", "indicator--fa5c1773-e5fa-457b-b4f2-ac6774ffa2d4", "indicator--eaea9bb5-c00a-45d4-a556-a196bb28f770", "indicator--8f3dbd5a-8e61-4d51-bf6a-eb00cfedf642", "indicator--9ff7560a-e84d-40f5-b1a5-4fe48d15e92b", "indicator--0e6aa95b-80fe-4570-b84e-f3caab676a3c", "indicator--0217b007-749f-4226-820c-199b6f2cf285", "indicator--6766c4eb-e675-4c5f-a13e-2356c24cecf1", "indicator--4324db73-9925-47e7-947f-e27160d7e972", "indicator--36b77f70-fba1-40aa-8014-cad1a7121855", "indicator--7fc271cf-d827-49aa-95c4-e0e23b68488d", "indicator--cfc6202b-a5ca-45d5-801d-8fc7279072b3", "indicator--1d5b7899-b477-417d-a666-4beee25bdae4", "indicator--ee4da25d-9b56-452d-a8e5-b93c69e4d9e1", "indicator--b6cda26e-1721-4a0b-8b07-4a5cf291a04c", "indicator--9e6a5c1e-4111-493b-8b96-871ddb75c427", "indicator--0a7808db-7181-4f7d-a28f-15507b5d41b5", "indicator--3650ac61-fb50-4a95-ac4b-293c6197883a", "indicator--8b8e2b5d-dcfe-4c73-bf3c-bb7def48aa44", "indicator--b404dc08-186d-4501-93ff-48b2ef7a305d", "indicator--1b221ba7-a8d1-4f30-a7fd-2148572dee99", "indicator--dcbb6a9e-373e-4f9e-bace-a3ed88b92171", "indicator--c0e7252d-f514-4f64-b2e4-42989fc64a35", "indicator--7d4b0079-7f91-43d4-bada-640bc91ed2fe", "indicator--85c86e38-fa6e-4116-bf46-c8db317171ed", "indicator--fbc90fa1-6f40-4c0f-ae3c-7925ecd5a0e4", "indicator--c782c4bc-efc5-4bd2-9cc9-c15412c90d0b", "indicator--7ba26a63-cc21-4995-86f6-448201aa3c9b", "indicator--d04765cd-24bd-4dcd-a322-7cc39f8b0a2f", "indicator--8584c9f9-78dd-42b9-b9a9-f7d60d97a9d0", "indicator--bae48227-595c-455b-b210-c0b3d643a5b9", "indicator--083db267-a7a8-47db-a8ab-54399caef5db", "indicator--715b6075-8c62-4099-bc98-a0106685976f", "indicator--01e1cb39-86c9-44e8-b28c-46e5d9be4bdf", "indicator--f846ae02-ce07-4ea6-9550-f076e1ad1620", "indicator--5c506eb9-e17b-46b7-ad52-7bcdfb53df08", "indicator--40330068-8529-45c6-97d9-df0f5250b02e", "indicator--e168d4d9-4c98-4ffc-97ef-1d536f487632", "indicator--de449b75-f2e4-495e-a966-c66e8487c13b", "indicator--2a0bca96-cb03-4bf3-82b5-7fd5a2c97d84", "indicator--8e1ac128-6021-49c8-9999-240317fe0bf9", "indicator--6be14f20-cec5-4202-8c53-603495004381", "indicator--ce5cb220-6f42-4aa7-a776-b954b9135142", "indicator--db8f3281-c02d-4002-a07e-1249273994b6", "indicator--a5c0cb94-8d6e-4716-941b-0fac57081b73", "indicator--0351a557-73a3-45d0-9ecb-34e360303a3b", "indicator--55b725fc-6288-4485-b4b7-c180f121bb24", "indicator--f24219b1-0bee-4977-bc9f-8350dc941736", "indicator--b059e85e-0a7a-4c77-85fa-d8c355e7b43f", "indicator--29fec213-71ed-4e54-b853-0087d123c21b", "indicator--a85bbe7f-7cec-49d1-aa17-02d09018f6b4", "indicator--03734610-e21a-4746-8e9d-4aea4d6b19a7", "indicator--3fc0ebe5-61e4-4730-99c5-8f1fc97886c5", "indicator--503ad570-8742-4593-abea-e4789a8926e3", "indicator--f931f306-a8b1-432d-85ed-40946f8eee1e", "indicator--cd868455-0cd3-4960-be2a-0edd012b8421", "indicator--17d3e0c6-6a1c-4acc-ab24-4954959fb28b", "indicator--07d94c97-a59a-4bd2-80b7-c2f96d729444", "indicator--7c242d4e-04de-4d35-a0c4-3383788d228b", "indicator--021c4ef5-6390-49b7-b6bd-11d510a088db", "indicator--2fe8f657-e00c-4b8d-81fb-05a2fc0bf8e6", "indicator--14881d05-2693-41f8-bea1-658a9c26baad", "indicator--7e276c99-f1a5-4374-823f-e6a9ea082375", "indicator--53b49dea-46c9-4218-a9a8-e0015c045899", "indicator--38fb4720-752d-484a-9b31-3ee51d1b4000", "indicator--04be1c91-dcae-41d3-a583-d8e19331f3a1", "indicator--d6078155-939e-4d52-99e0-14cbba5265de", "indicator--27bc8b03-ad4f-4ddc-91bc-b5b703f4a04f", "indicator--34413b80-bdf2-42ad-bd61-ef60d99751a5", "indicator--084be486-4bea-4082-a0fc-f5a40e0e0f31", "indicator--dcbdfa8c-44e0-4a92-bb75-ee51f8753ce1", "indicator--dc63a358-4e7f-41aa-a7b5-ef8ccaa03a6c", "indicator--0a068d93-2b44-493e-b9db-179d5b61b3ad", "indicator--3220331e-c204-41c5-8705-a48ef40b9f8b", "indicator--daae0e1d-2393-4668-a0a8-e8e52fca7600", "indicator--e31791f8-db33-4c7d-a84d-75b7813abd90", "indicator--677719ec-f21f-4aa9-ba43-fd7cd1250549", "indicator--269210a5-428e-4a2f-9053-23e5e28c95dd", "indicator--d37b205c-7d7e-4966-96fd-fabff4953873", "indicator--f8b7aec4-8204-4184-9812-575b3e6ded98", "indicator--bc49cacb-3ddf-4397-b848-581027dcdfb3", "indicator--019a9787-c921-4e95-903f-0853d6f28505", "indicator--5ed7b5c3-11b5-407a-9d44-6ee9ded219f1", "indicator--fb686ebf-de4d-409f-8d59-ced83b008664", "indicator--125303f1-ef13-4820-a332-2f9224e41c0c", "indicator--9e66d390-648a-4131-aa1e-8b6a3ceabf57", "indicator--02b36a17-4f78-4c79-a6e2-57af98147fb6", "indicator--7569929f-e37a-410b-8269-7df028401c74", "indicator--0774f6c4-4cb7-47cd-a5a9-f299ce8d6f3c", "indicator--aa3c457e-ee99-4346-b814-d7e4fa21c06d", "indicator--ca6e0045-2eab-4987-bea9-fe1b89448162", "indicator--34c86d4b-2df4-4f49-9b4d-98ef9d694b74", "indicator--a93fd103-31d9-416b-a423-18ed214faf17", "indicator--fcd530ed-2a6b-45b7-abd4-9f5259b5b3a6", "indicator--f5de3e26-858f-480e-90b0-091fc78c4c5b", "indicator--3bba8859-b4db-4cf2-97b1-d91a3c50200d", "indicator--d8dc1bab-c81a-4622-88e2-0d5fcb8bd1dd", "indicator--e132fc64-88b0-49fc-9273-fc8769f9b386", "indicator--062e0b8d-8860-4e63-93dd-4a3d62e061df", "indicator--51c25835-ca12-4fa5-b3e9-fbc02e7d800f", "indicator--ac9ab6d9-6f40-44de-808d-ae0e063c4450", "indicator--f7886e45-ec95-4639-b59a-5a7cca38c62f", "indicator--b930ff11-5f4c-41a5-882d-47ced3e4f1c3", "indicator--2a8f4870-2a34-437a-8c68-f5fd2fa30434", "indicator--dd6e8296-be7c-4731-aa23-1a191b17a4cb", "indicator--cea86467-2cc5-4d9d-8417-69d90e9eaeb0", "indicator--51396f0b-3590-4a84-9445-efbbedd16f8a", "indicator--61af188d-7d51-40b7-824e-836d25d76c69", "indicator--4000d8c9-51b7-4e5d-b0d9-ddce3c9c6b62", "indicator--4c9ada51-b2c6-4c3c-8904-9fd022f9dc49", "indicator--2d6af547-578b-4d01-9bae-a32e1a3da939", "indicator--352bcc90-0463-4c0d-9b8d-ca89e33569ac", "indicator--df754b90-488b-4fd9-ba46-a2c5af4a1105", "indicator--df1de191-79dc-475e-9985-f804f1a3dfca", "indicator--93be0fd1-e850-466c-a7a5-34f0cf77fcc8", "indicator--2de505e6-4150-4880-81e7-d8247471f76c", "indicator--61342a31-307a-44a5-863e-056c166ff2f2", "indicator--7c1676c9-6f81-46ad-bd48-31a84cb2e8df", "indicator--125958af-a016-4ebc-9386-360062c52a9f", "indicator--8712d66f-e982-40ff-a868-0245f673186c", "indicator--787e46c4-a253-42b4-af71-9f8ef4412c06", "indicator--4ef675bd-4ee5-431c-ba80-f0943c3e00e2", "indicator--a62afc60-7210-4f33-b036-4f1e92db065a", "indicator--ec0a22e4-b7c1-4655-9312-0fb028f673a0", "indicator--692a7308-85d4-4920-a272-1e50c2ac2295", "indicator--d4a5f78b-0a35-47a5-bec0-5d32e2a72cba", "indicator--37fdb0b7-ae7e-4bb8-a8cc-45db6aae21c0", "indicator--96b71e91-d4f7-4ce3-a4ac-50e44dd805c4", "indicator--71fb4e74-6a98-4a41-9a26-cc2b03c219d7", "indicator--bbf46a22-71aa-4435-9d4f-850e058c5ca3", "indicator--27b73e3f-7cac-4fe9-9161-4dd2083d1581", "indicator--5e54db9a-94c3-48a7-849f-52cf518e3518", "indicator--93698e4f-cf0a-4660-bf29-ff3d93a67a43", "indicator--acdc11a1-6a62-4c07-bf27-0f4d15d66e8e", "indicator--404139ac-c323-4079-a1ce-9ffc8dc1366d", "indicator--a7ef3b92-4c11-45f0-a655-6d50f326ad91", "indicator--08f09bca-e50a-4e41-ab04-1a673301cf9d", "indicator--e88c5371-e1df-4953-a15d-084f6f143b8c", "indicator--86c90343-cf66-4dae-87ad-37c449035542", "indicator--3ec80c04-820d-4e6d-81f5-b2f3176865a3", "indicator--5a362371-6878-4f5f-b229-1f9d392cfb6a", "indicator--4535d72d-6803-421e-aaa7-d4b1ad273827", "indicator--887a0c19-ba79-4156-8568-83cd539209e1", "indicator--51aa3f46-f458-40d3-a2b2-681a31cfdbbf", "indicator--4446ea82-8900-4e0e-8317-9f0a72d993c1", "indicator--7ec8e021-228e-4540-8ecb-9029f96e0e5e", "indicator--bcd0f3d1-e250-4866-9b6b-f6dee0866565", "indicator--4c84bca6-da82-4499-8573-642829a25ef3", "indicator--fff49f4f-0901-455e-879b-d8d1ad1daafd", "indicator--125eabd4-e2e1-479a-bc2e-5fc443a7e25d", "indicator--8ff012f8-9190-4de3-9611-457bfc5662de", "indicator--1a977848-5dc0-46b5-bfb5-7ce984e3204e", "indicator--9c76a345-0c6e-405e-a97d-11fe8cb1a66c", "indicator--fc25d22a-11fc-42af-be35-44a8cc72f4cb", "indicator--d7084a2e-c3d1-4d5c-b4fa-08873e3c817c", "indicator--d361ad81-15cf-4e49-8c9d-450d0e72e697", "indicator--559a2d27-e83f-4a21-80de-d529bf9b19e8", "indicator--7cb760d6-778e-472b-ab33-34e2efe02e40", "indicator--6ae775e1-c661-4a8e-86d5-279435a045eb", "indicator--2d1f0ce1-cfb5-4e64-abfd-3cc8e7905fbc", "indicator--18e3dcf9-68c1-4922-b175-51c0ac5eed51", "indicator--ee1b0808-a6cd-466e-b18c-37e8fee69436", "indicator--7d655a87-5d43-43f9-8c60-28e0af5f49dc", "indicator--7d601356-3f9e-42a7-a12e-fc0ea82dc6dc", "indicator--281d8dfe-78a1-45dc-97b4-44b94992f218", "indicator--edb8437f-4da9-48ef-a866-f11833613ec4", "indicator--01695e1b-03b4-4a7e-a5ea-a8e66c268050", "indicator--82d548bd-9169-4473-adb7-0dd5002452df", "indicator--88781e13-2696-456d-99cd-119d3b0f1f9d", "indicator--b017a5c3-079b-409c-afd7-75520744d3ba", "indicator--d68fa3cb-b2b1-485a-8a52-453f333d0ba7", "indicator--85a47578-2e95-4ddb-9e25-144b5809c4ed", "indicator--71412b24-b915-470b-8b57-c78e63f328e1", "indicator--d9af1138-c848-45bb-be69-aca3bf9e7832", "indicator--6af3caf9-c6a5-4415-9f68-2049a964c610", "indicator--540915f2-e688-48ad-aa9a-14a3b4628306", "indicator--3807e86e-12f0-42c4-adda-4b3b02720739", "indicator--79bd2826-08df-42bd-9518-6b2e3b8148a8", "indicator--dc8997e8-c07c-49e8-a243-b453ac7ba7cd", "indicator--047fc916-1d9b-4946-b68d-197a2a15c585", "indicator--9eb8af87-431d-445e-a78e-4f4172f34d62", "indicator--891c685b-9c80-4d4e-8bac-f960211517cb", "indicator--16ed31f5-9c8c-4305-a759-2ce298c37a73", "indicator--65ec33ea-1f3c-48d3-86b2-7a3585c82ef8", "indicator--a123c17b-3291-446c-8084-391a74cbbf9d", "indicator--e61414f2-8666-407c-aed9-82b96aa5d552", "indicator--0d3b2ba1-978f-4b59-b8ce-02f9d82d835c", "indicator--d120ec98-10f0-4c20-9c34-33806f5eb9aa", "indicator--8e09713a-72d0-4394-8a7d-92d26598f067", "indicator--b9cd1613-f2b7-4a96-9349-3c586f2be77f", "indicator--ee0b7d31-cfc5-451c-820e-2fcdaec266e5", "indicator--49a4603b-0b78-4d0f-a8e4-1bfe8fe1bb18", "indicator--f428852a-8858-4ace-a14f-462ec286bedf", "indicator--70684221-b35a-4cf4-87ee-443593c6a3e3", "indicator--f07442f6-2d99-4b20-b1d4-bf21934d5c16", "indicator--3510f94c-cb2a-46ff-b2d8-c4a0c910a76d", "indicator--3aaeb115-b88a-4ac0-9b73-4120b235128c", "indicator--26b210f9-58b1-42b7-b2d1-4cffa57b45fe", "indicator--9bdc4faa-9020-4fd5-a0f3-67b4a62942f1", "indicator--13b81cf4-6407-4632-9284-7ea4d2b6c8d2", "indicator--dfb77cff-dd9b-4d35-bbdc-83bedb8e37ac", "indicator--28024657-2450-4286-acba-a7e12b31b044", "indicator--82e4d35a-f4a2-4626-b51b-f29c93fd69d0", "indicator--a1a4bfaa-4fdb-46e4-ab0d-ca5132e09ae1", "indicator--1e7f5428-dde2-41a7-8ce8-114059181076", "indicator--e4907457-898d-424d-a615-ef70c193b739", "indicator--3ad9991b-745c-4ca3-818d-5e2fd5b0fa75", "indicator--9525eeb3-e2b7-44b7-b631-753a85e5ed11", "indicator--28e1c5b1-3738-4cc3-aafd-e6221c4afad1", "indicator--02e2ae19-8fa6-4071-96a5-e8ef3dc8b966", "indicator--0020ce50-7de2-4339-8ee3-8b3ccab811c7", "indicator--b899d730-8a7a-44d8-b617-15cf4c7a7f92", "indicator--8972320a-4289-4002-8d40-ebb73035038a", "indicator--951ab96a-94c9-4aac-a525-5e21bb01b434", "indicator--63c6458b-0314-43cc-aa60-c582f74402ba", "indicator--2f4ae42e-47a8-4cd9-916d-840955e7f195", "indicator--549a9742-3f3d-4c4b-81a9-09a7fd814114", "indicator--55540f54-345b-4c05-8aa0-216b31ce59b8", "indicator--568f189d-939f-419e-9ce3-fc6629c506a3", "indicator--702da781-80a4-4b53-8422-1500eb91409f", "indicator--a1d1964c-6d7b-4efd-ba99-30bb1c4e485a", "indicator--f9c4b3d1-3c27-4723-9cc3-7dfc0de85bb5", "indicator--1d7d873a-4c5a-46c3-a9f8-0ebe12779d65", "indicator--ca4a8fef-6d66-4be4-b515-f065b7ab4ade", "indicator--d499d970-396e-42c7-b71a-f0f4be32919e", "indicator--a14d50f3-8b63-4cf6-b264-ddde8e7f8f0a", "indicator--555c90e0-68e0-46fc-b7a6-03e85e0bfc9d", "indicator--41391dc8-6e1a-4fdf-8ab3-6433a08a7a1a", "indicator--e942b4b7-d4f6-4b13-8409-435cdaaaaed5", "indicator--8d6bef97-0d37-4899-96ec-131613c304d3", "indicator--6a5faa10-0573-4e1c-91b0-26dc08c1a2ea", "indicator--573946fb-3acd-40b3-b569-41f2c2837786", "indicator--80e6c074-1bba-4f33-b631-59cc3eaaef43", "indicator--6503e8f0-93c4-4cf7-990a-1b9090c2abba", "indicator--30df1d26-5dd3-4af7-b53e-bf2c75d5c681", "indicator--e582e073-ea3e-4873-afd1-0d6c2fdaba59", "indicator--5581875c-91c7-4db1-8bd3-9d975ffde335", "indicator--2e58e3f7-00d4-4c5c-aae2-91624e676235", "indicator--eefbddab-0e02-4e8f-8da1-63dd89c4124c", "indicator--eb175e9a-c314-47b4-b70e-6214a2f54be2", "indicator--7258c53e-5295-4e58-8c23-1752cfe6394a", "indicator--e81b4014-30b3-4d8c-89f4-1bdaaf6f7362", "indicator--9a3062e8-1366-4128-8abf-15ca95bfb9b1", "indicator--2ca9fd59-030d-42a4-ab9d-b5cda265e179", "indicator--ab00f3ed-9d4d-4b7f-a40f-b0f5fec915fa", "indicator--6e7bc4f4-191a-4c83-a5c0-1d9afd760c5f", "indicator--47d46124-1445-498b-bf2b-12ff852b7d09", "indicator--f1280657-0c76-450d-9070-e679d246d2e0", "indicator--23663f93-e27a-4405-a121-a88efa2cfd41", "indicator--5c74f320-8ba8-4d34-9189-850cf5147b78", "indicator--cd81f3ed-64f2-494f-ad34-4886a1e73957", "indicator--88d9bb2d-a428-4040-9239-d25b88cf99b2", "indicator--f5dbaff1-497b-40d0-b3cc-23c2057f0285", "indicator--d2ddc254-551e-4330-8a4a-0187b9a2bbeb", "indicator--b002c5cf-47b4-40ae-811b-dbb6299d191d", "indicator--738cf66b-9763-4bd2-b1cb-082d75dfca86", "indicator--e5b68ac5-bc65-444b-8d84-62be91af5426", "indicator--04052560-9bff-4034-a405-4948c0db1335", "indicator--83d21094-61ac-4e38-b33d-c2a93a28d905", "indicator--b59b9394-d124-4fbb-90c2-218fcd01a7fa", "indicator--fdbab814-7621-410b-9c23-b4fd84dfb0b3", "indicator--0f36f01c-3a94-4370-81ef-b8f61b082031", "indicator--4f90446f-ab41-4cc5-863e-6fe65ebdd2ce", "indicator--c3816345-7532-4123-98c7-dc5a430c2a89", "indicator--2d0e29e6-443f-4a64-9f55-5da9803ea5d1", "indicator--083c8bb2-2cc0-4f1d-b897-ff5503e191d3", "indicator--b378a08d-ff7b-46ec-9d9c-c4ce30f2aee1", "indicator--ad1b82a2-5670-4e06-8aee-34e62e13bf1d", "indicator--2451b13d-3835-4e24-a06d-6612e99dbc51", "indicator--16911613-b5b0-4c5c-828a-2085e1576111", "indicator--a5251cb7-f0f9-4343-8597-ce68731e5b02", "indicator--24b8e4c2-f3e4-4aaf-b336-2e5adca526f7", "indicator--b2cf2151-32f4-4a32-bc4a-3614cf3ecdb7", "indicator--f99affc1-a038-4f53-a667-137a003f90b5", "indicator--fef8e1fb-5b79-406c-9468-4208479a1802", "indicator--b7c38f36-d20f-4f42-b7e0-cdbafc334e10", "indicator--f7bef5b9-1ea5-4ba3-94aa-09b420812ce6", "indicator--991d9f20-4a2d-480b-90ed-36615c892974", "indicator--e2a49a05-7a8c-49c9-a1bb-eeacb13207dd", "indicator--bb77e094-91b0-4f9d-a837-f1bef09c31dc", "indicator--34c22c22-70f1-4e78-998a-d14ac4e99f51", "indicator--5a940790-88dc-4e01-990f-85bea6f50704", "indicator--a93271b2-0988-4103-8b16-eb79c180ef8b", "indicator--3db0d4d6-999f-4f14-8474-3bba58002858", "indicator--9c603e7a-dcf2-47e1-80aa-ce6fe20d514a", "indicator--bafcbcbf-d5e4-4265-aa49-a1099e0e27c3", "indicator--f924e468-eccb-4d37-a98f-1f60648a6f9c", "indicator--ca6ccf2e-84a6-42ad-9670-8d399b536cce", "indicator--23be63ff-75b1-4785-a4ba-2b3a6e415c28", "indicator--f06564fa-c0aa-4383-aa61-43edfa01d19c", "indicator--f3bac733-5490-43b7-bf95-8470e3c03619", "indicator--61d251dc-0d95-419d-96f9-0b5bd7565554", "indicator--4ee51755-64bf-499b-a723-a7b7b75dbd05", "indicator--fd1c6a9d-e420-4969-9dad-4ad36ec5c646", "indicator--8ecc8b56-de02-4c28-887f-593d9b85dd36", "indicator--40c615ce-bcdf-43b9-80c9-5260f899bb11", "indicator--779c3ed3-1ff0-4fa5-8394-53706435545a", "indicator--64f8066d-542d-4e26-80ca-f61dbdd2963d", "indicator--643850cf-133e-4ab1-883d-d7a66632f63b", "indicator--59a24df4-2795-4b3c-a861-6aac10d030dc", "indicator--7bde4e0d-dff0-4a05-96ef-3b3a20f29427", "indicator--e739f423-0c10-4df6-840f-920f6711444e", "indicator--db1ecf6e-964f-4b1d-be8d-3c49e14edf8e", "indicator--08812c8c-60f1-40f2-bb8a-6b5292d0b115", "indicator--405b911f-c9b0-44a8-9455-5e90b258572f", "indicator--dc30204b-4c05-4be1-bfa5-5f50074d3c27", "indicator--771daf84-d5f8-4a1d-9223-4198aabcf005", "indicator--610b6821-e1ac-46a3-ad54-4f4c9d99eae5", "indicator--5ed33ca5-3ecd-4428-a698-d1d30e82e57f", "indicator--cdfd5557-4a36-43ee-b4bc-d3f4070aa314", "indicator--416e44fc-556b-4ae1-8523-a4ba36582bcd", "indicator--df9f5b5a-0e8b-4ee3-8afb-63ec512f3818", "indicator--e0628b07-cb42-4669-a59d-97c2c9320fd1", "indicator--3ce35a02-0cc4-4f5e-bfdb-a5a89056c1a5", "indicator--287b4556-a28e-4a79-b8bc-b3ec00be35da", "indicator--abc99e9e-2447-42d8-b4d3-38973e52ce5b", "indicator--3ed239b4-328a-4768-869d-5c3d6ff8c984", "indicator--54e9b950-bc97-4752-9b00-96409264c7a4", "indicator--1a1b4f09-be5e-491a-b23e-8c2f6ce956a8", "indicator--d8aca8db-d9a5-413e-8ba0-e8aa11a2371c", "indicator--74699804-d5b2-4c39-8bb0-99d3de147840", "indicator--e1ca5e56-097a-4674-9f44-26d964e41052", "indicator--ad115976-fbae-45c0-9eb5-2c2a5277ea8c", "indicator--2fc8ba22-1989-47c4-8865-881292ec147b", "indicator--30baa8a0-c593-4747-bfb6-951982a1b489", "indicator--1cfbd210-2576-4235-aa7f-a261f3f711fc", "indicator--4a09466c-32c0-4894-a618-b2c9c10aa690", "indicator--dba18bec-b200-42b7-8f8e-6696d8353daf", "indicator--8f15ad6c-6714-41ff-868d-ba9b3c68cef3", "indicator--1eb14b0d-7882-4546-b4da-eae7eaaf55ab", "indicator--97d2a2dd-4d6f-41de-9176-b8435ee2471f", "indicator--573150a2-4b7b-47dd-abce-b5871401df83", "indicator--d09ea946-c7e3-4a7e-88cd-67d51a805d59", "indicator--0bd55055-4280-47e4-9d3b-7900975191d6", "indicator--2bc8c35b-bce7-47f7-9e2d-c3b3211da137", "indicator--409f93ef-2ae0-4f1c-8981-17c7713689e5", "indicator--460ff503-01a0-486e-8f18-207b9c6b5cab", "indicator--3cb80e45-8d81-4bc0-bb6b-0aa12f6f188c", "indicator--a268b899-6eb1-4ec0-9953-c0afd4576cd6", "indicator--c058ebd3-0908-405d-8d07-ef364f158d1f", "indicator--fc8dbd04-16ef-4279-835f-ef19fc0d4ceb", "indicator--ff63125a-aada-4bed-ab78-5262239f6ffa", "indicator--c987b608-9e59-44a5-93c8-151e9484dedd", "indicator--784a7a70-1e49-4591-9f49-658335316f9c", "indicator--3a3f5b0b-b521-43fd-af9a-2b5efff14169", "indicator--bc655676-e4de-4cc6-9d23-704176310a92", "indicator--bbbb01bc-c0fa-4fe6-9237-335f26d3d228", "indicator--b5259a25-79e4-4e75-bbce-97040ef10e92", "indicator--a9311a59-5591-4f28-b0b9-07dd97706674", "indicator--30f7b776-6788-45b2-a5ad-4d3a2cdccae2", "indicator--d8b836b4-6756-45b3-a8be-5e8727f93be0", "indicator--37e512b2-6e2e-422d-aad5-9662a637d623", "indicator--840e1ec2-35ec-45ee-91a6-99b6ca4db0dc", "indicator--8982663b-8632-43c4-87cd-3dcec573cba8", "indicator--d26f6914-af70-41f3-8f3d-07dadd05e579", "indicator--2415b9fa-e7de-4da3-8733-d4ed8aa79e2a", "indicator--af1cdbc3-7b3b-47b4-93a0-591dd8afdb9c", "indicator--450af27a-97ab-4181-9abb-0de40aba018b", "indicator--66703c73-ac2e-48ba-87ec-52cacf30fb2f", "indicator--6b334c37-b47b-49bf-8253-054f98863898", "indicator--b2d735b3-42a2-4322-b5f7-7075c8458151", "indicator--66d18fe3-b9b4-4bb6-87c1-1c5e3074ab5d", "indicator--767fd463-7b68-41d0-ab50-5676d21c9c98", "indicator--c69b4257-d4df-4c24-875a-d86777bcf45f", "indicator--1b937093-78df-4521-b4d9-61596b77a202", "indicator--017c9877-560e-4252-9559-3dba1d1fe292", "indicator--b040439d-0800-4856-ac13-b31c6695aba6", "indicator--f27e3ba2-ed86-412f-91b4-31c050472773", "indicator--96aa854e-abd4-4fc4-ba99-9e30e8446690", "indicator--1faefdf8-ea87-49fa-af4d-42ef17c1e570", "indicator--4648c958-10ae-43e9-8f7b-cb46a83d7e85", "indicator--84ab5257-d4cc-4fbc-8658-2423c04d40ba", "indicator--71ba4f92-63f8-477f-935f-ff341afbee04", "indicator--e791dfe3-fedd-4671-ab0e-a6a28008b67a", "indicator--1eb96b7b-f839-4cc7-a9b6-184a1533d023", "indicator--1c136b8b-60fb-4f3b-a06b-27bb4310af97", "indicator--bdd05522-47c0-45e0-9bba-f8078af2d1ef", "indicator--1d1e6e0e-7a6b-4aa0-97db-45675bf8c2f6", "indicator--c07000d7-edc7-49dd-b40b-81b95df86588", "indicator--06a75f88-2bf1-4408-b0b8-d7dc8e4540e8", "indicator--b5883a37-c25c-4030-b297-96382c871d20", "indicator--3e87df30-116a-46f4-b385-99bbae1e2cf1", "indicator--3043b38f-f591-4b3c-b2cc-1f01596f9de2", "indicator--75e057e0-fc45-4302-90a6-43abd71cf155", "indicator--6582035b-9f76-4941-b0e2-ea827f753b3b", "indicator--edbf65af-7a03-4d19-9ba7-88efb26d80f7", "indicator--79d73a92-12af-4605-a656-fcbb534223d7", "indicator--459d7fa4-7ea8-4b4e-b8c7-c7285151278a", "indicator--9f40f5ae-3eb0-4d58-8695-68335ad13bd6", "indicator--8ccbd46a-4ddf-495d-af5a-37387df23e16", "indicator--c952dd4f-0151-4ed5-afb9-a8e4074ba853", "indicator--026beba1-8a64-48f3-a522-d7e643cb2a48", "indicator--d5549a0c-979a-4c56-97cc-d90214d582cb", "indicator--cecb3936-2866-44a9-b418-a9c9f86f26dd", "indicator--0654ec10-4024-4708-a8e5-52a540f5913c", "indicator--a1cd30b7-b011-45f2-84af-789b49ef120e", "indicator--65f87115-f4ee-4154-8515-51071c42e544", "indicator--d27ee589-5905-4e06-86c6-9a4f1d3c7302", "indicator--cc5bcb55-7e4b-4349-99f9-043361f3e477", "indicator--9a2d9f55-6674-45b0-961e-c171c73e4e79", "indicator--f1c177fc-c013-4f65-b321-8eb42bfb2cbe", "indicator--602ce9a0-8520-4399-bd57-2b00ef680766", "indicator--6789f021-ffbd-46c1-b710-06affc7eee88", "indicator--ee3361d7-1e58-4363-a212-ad4495ead15c", "indicator--35a6e08a-489c-45b4-ad35-2c075032c9fd", "indicator--1cd8dd03-50cb-44b6-8637-904538fd512c", "indicator--15bf6f07-dd4c-411f-ad14-135f9ab481ec", "indicator--53632be8-8703-48e9-9a47-f2799bea2b27", "indicator--5c0e692a-54be-42cf-b4a0-042370d02570", "indicator--3d9c1330-4d84-4cec-9b4f-1daf1a413149", "indicator--b7d72476-bc21-4feb-aaea-18a80f51034d", "indicator--fb7ede2d-b299-4db9-bfb8-64568ca47193", "indicator--58f7b5d1-efa6-495f-94f2-74e9b6aabdac", "indicator--2e25759b-ba9b-47ac-80d3-bfd128f78346", "indicator--d272cdac-59aa-4ed6-8ddd-732018084c3b", "indicator--ebb08da4-3f23-4b64-9198-ce37f3466b85", "indicator--44b15224-a007-4ba1-b2a8-5c322aae0dbf", "indicator--e1960aa4-02d1-47e3-903f-1e4a1502818d", "indicator--1eb0cf66-8f5a-43f1-9b68-0529ccd87a14", "indicator--40e4e8f9-e1a1-47c0-9f1c-7294e64e064a", "indicator--32aa5bf6-d049-4313-818e-ddaaf2840163", "indicator--1485f458-b88b-4fb4-bab2-b5312ebaf64a", "indicator--b4009336-2a49-4a61-95e6-01aca3496e7e", "indicator--7b23e5af-b63c-403d-8ef2-4e2c8b2349f4", "indicator--14ff8b08-e5f6-41f4-8fee-9a42733509f4", "indicator--f9ee7b66-1ff1-4ff8-9899-9d5321f8b52c", "indicator--34f8a9ec-ddeb-4c1b-b262-770c6dd57346", "indicator--a8e12ff4-0845-4837-8dab-d918cffc19b5", "indicator--1de9d8ff-4655-418b-98df-94c38f563c58", "indicator--be02795b-737b-4ec1-abc0-80a9d053b1e9", "indicator--b95ccda1-dd7c-4f04-8b7b-6e16c3d7d4af", "indicator--f6aace3a-8f74-4ee8-b44c-2cd6e2942356", "indicator--bea9484b-5b49-4d01-8952-0f45388283bd", "indicator--3e7fe41a-0623-4708-bce5-4cfbbf861408", "indicator--9c47d9cf-47ab-4f5c-a8f8-24b12829c090", "indicator--a0029200-d61c-4bf7-b63d-ad0645f78b09", "indicator--3b683706-f10d-453c-9a9e-235769c13074", "indicator--dd49c0a3-b7eb-4578-a57f-029efe0f821d", "indicator--19947581-efa6-4f50-9ae4-57bd0955044a", "indicator--90879c7f-1045-4594-9b03-a83429f81d5d", "indicator--946f28fc-2b72-4b0b-b101-02fe9f532680", "indicator--7929fe8a-7c13-4c38-92ff-96677728e8ef", "indicator--1b648b75-45a7-4415-a61f-b30548acdbaa", "indicator--bfa13694-2b66-472e-a7a1-a8dcadb79e33", "indicator--77aecd1c-88d7-46cb-956d-75b5c6b54bf2", "indicator--4631f215-98d2-4aa9-8aca-cea7d3ee22b1", "indicator--7af7a420-6b39-4d11-848b-1c22a52242f3", "indicator--781119f0-a319-440d-bc17-cddbc9c97ddf", "indicator--72c0736b-050a-4165-bc9d-5c5470ddebad", "indicator--2efd01c2-f661-48b6-838d-918451d2e87b", "indicator--03bb6bc9-cd93-47f4-ad1e-1892f9a3e03c", "indicator--96ade721-cbd6-4b6b-bc21-75b332b3f49c", "indicator--efa1338e-abe1-4d2d-a055-19c8738ec37f", "indicator--be01314a-3d0e-4cb9-86d6-47c14a134cf9", "indicator--b4939ff6-11ba-4ab9-b51f-232e82c21f8a", "indicator--f0b18cf5-a8cb-4a07-95db-8dceab9c6773", "indicator--176351cf-cec8-4bb6-965c-32af599e7a4b", "indicator--301347bc-2369-44f4-abd3-d585ec797054", "indicator--f502b8f0-e9ac-46e3-b8f4-b323cd0bbd3d", "indicator--6fc0bfae-a27c-4cb4-946b-444bddb85d47", "indicator--5bd45b38-3817-4dc5-9ef5-43eb7045231e", "indicator--b6ea387d-b9fa-41bd-b26b-af2e6cb6bc85", "indicator--02e70757-cd6f-43b8-be59-dd94fe3d633a", "indicator--cb032004-0a4e-4584-bf25-086fc6e1bbf0", "indicator--295b2464-7740-4008-b1d3-871b855fc0fa", "indicator--e7192f76-11d5-48c0-8ca5-42951b17f658", "indicator--311dec46-a591-45d8-a26d-b7a270b6de34", "indicator--95505713-2d61-4b40-bb05-b9493aa22a77", "indicator--c941bab5-64a3-4222-be71-c371add47d66", "indicator--c0ee0c2b-1184-498a-8d52-74b290296530", "indicator--63e376aa-ccfe-4407-8521-0f9d9662861d", "indicator--c15c6313-6901-4b8c-9078-f5f924291829", "indicator--12fe50b7-cbb5-4b90-a497-3b232a1df250", "indicator--9c371ef7-8bef-4a49-aeb1-554b8f2ae79c", "indicator--44cbfdab-cfb9-4bbe-838f-4dccb0c2ee34", "indicator--e3c7fa42-2bc9-4749-a035-c01e077c6d9c", "indicator--122af1f9-72fe-4bb0-9123-9c1e54e6dfbc", "indicator--808d501c-a9da-410c-b98a-3208dc53bdca", "indicator--4ca9fd65-9d98-4896-bd9f-433dfd240aa0", "indicator--e4cbb714-6c33-4518-beca-c87198f71e11", "indicator--c5d6220a-226f-42b9-b5ab-66b41e1ae316", "indicator--16a43dcb-0586-473f-88f5-048a89ed2bf7", "indicator--cf066418-d827-438e-a8f6-cbeacaa6fcb9", "indicator--4529055d-dc48-4264-a84d-fd01696b8b80", "indicator--f9f1c059-f414-420f-8cd0-dfed467c66fa", "indicator--fc0003b0-1c8f-4f87-ad5e-a7169ea53c6c", "indicator--6dd370e2-d85a-4b7b-aa15-66890900ee5d", "indicator--d7b992aa-e7e0-49e2-a0d9-f6989b891915", "indicator--7b8f4507-ab7a-4db5-a0e4-c4acdf51c752", "indicator--6ec10d62-15d2-4b8f-91d3-2e36a61bd3c2", "indicator--3e71f60e-b2f4-458c-a91a-3225f30b0ff4", "indicator--2637f6fb-f752-4b2c-843c-1b26abd91afe", "indicator--fe175bd4-db50-4851-b720-993bb823e805", "indicator--1d0094bf-0389-4885-ab18-37b039b95627", "indicator--cdaa41f9-275c-448e-922c-a945103428fe", "indicator--22d8a295-118e-4636-9c06-ca931bf70659", "indicator--233ba7c5-9b64-4d58-8613-f0b8bb31f05c", "indicator--f567939a-4d49-4ae8-b0dd-173eff28e2e1", "indicator--8eacf598-7644-4634-8a36-ab0093857356", "indicator--b2104b94-5fcc-413c-8437-30f2663407d9", "indicator--4c3bdc56-8354-45cf-957d-26dfcc57f8d4", "indicator--02f4f9a3-8934-41f3-97f2-a8903aacfd08", "indicator--1589f8ca-0bee-43da-a2c9-5a9833caaaae", "indicator--bf378e31-549d-494e-b41a-6071730274c5", "indicator--796edc15-f38b-4ecf-93a0-caffbdf71309", "indicator--6365abbb-e117-4629-983b-b8424a3b73c2", "indicator--f0321b78-c885-4052-a9f7-4b6c8f683d01", "indicator--44b9e417-a728-424b-ad95-e7cb3cbe5456", "indicator--a60b9c7d-1365-4ba3-bc46-f1a0d8a8bd6a", "indicator--128b2088-0cbc-44c0-8632-7edcfd32f293", "indicator--ede2618d-bde6-4d49-b225-01b3554f0e20", "indicator--23c16e18-2432-4d7a-9955-92543d25e45a", "indicator--775ddda3-c2a1-49b1-b329-35ac2cab48b7", "indicator--0f5bb490-8a8f-4ad0-a2d7-7b54127a1845", "indicator--d69f1e36-f008-4e27-8439-af031e03f69e", "indicator--be1cb7dd-bd30-4d0e-82b7-d1105ee31dd0", "indicator--d5351269-f78f-4d3f-87c1-c19ceaa706bd", "indicator--a835621e-0038-48ad-90b1-33c93a309eb9", "indicator--3f671094-7730-4668-9ca2-fdd6c3b0ee76", "indicator--c02e6a7a-080a-47c9-8d2f-4be8859c107b", "indicator--3fbab4f8-e833-4c8f-baa6-e1c74320eda2", "indicator--86c18644-7890-4d6e-9453-d1ae90069bef", "indicator--70253518-7815-4301-b452-e388b6043a19", "indicator--731d79a7-871b-432b-b7e3-d30f453c44ef", "indicator--a0e25fe1-bcf0-4f01-a62a-6cabed5ec60f", "indicator--c1f3820d-a87c-4386-8572-3f35613f054b", "indicator--59e8c8b1-8e23-4b11-93a2-ee0f06e6d35c", "indicator--a8a55d4a-1e5f-48f4-a93b-4b1cd3285ea7", "indicator--1b7f49d1-f85a-4e19-a40c-52dfb8ec5de7", "indicator--641b4085-ff34-48d4-8dd7-3705c53da55c", "indicator--a28d53fd-822c-48d4-845c-6eb24317a5d9", "indicator--ad920731-11b6-4798-8fba-9c4fd1259076", "indicator--d2353219-e113-4a1b-ab04-3d7ae9673f57", "indicator--ea3da112-976f-4acd-8e59-703f91ed19cc", "indicator--52408cf6-6525-4a35-8ce0-c73304db900d", "indicator--85ca6c7e-c64e-4296-9c68-ae8141311065", "indicator--c2d79d3d-36f2-455f-971e-743216e1bd59", "indicator--348fb667-bae9-4ddf-ba1c-77ad464c7118", "indicator--f2810a56-2efd-4481-a015-04857985b54f", "indicator--a933739b-23d0-4b44-8ca9-ec33c862ea75", "indicator--b29ff6ab-f2a7-4a63-85ee-7e294a88eca3", "indicator--2febf460-f7b6-4e01-894e-3c0fcd4534b9", "indicator--8898e527-9258-4af4-b260-17bc26afd202", "indicator--6ba617eb-5812-4728-8c77-6353332afe05", "indicator--ee6017f6-2f7a-42f9-85d1-04ddc2498729", "indicator--474453eb-5c8d-4d6d-8987-89c7a0aa143c", "indicator--ad5d3752-bb52-4823-bc7e-0a52c09774c7", "indicator--1674943c-535b-4075-b653-d8c2d29c744e", "indicator--fdbf65da-b3ba-48ad-8cad-241c400e901c", "indicator--a1c84ee7-6a4f-46a7-8628-bf314c2497cd", "indicator--6f7fd804-0e28-4cce-aec2-a0c9f96b2433", "indicator--703af44c-b8ce-49a2-a695-6d16c0d04fb1", "indicator--6acb5c81-5f88-44a9-b776-fd6948d8de6f", "indicator--ad36b5e3-9695-4708-bbec-21a2ea99ee16", "indicator--c0bea3dc-f481-4b33-8677-28e447b1fdaf", "indicator--50096945-0724-4d18-9e37-5c7184b878a5", "indicator--b568d9ad-0385-4851-be80-fb3fe176214d", "indicator--0ba0a60e-e132-4b0e-aaba-0ce717a44a45", "indicator--661fd09d-bbe9-4328-a73c-94155d058bee", "indicator--7456461d-2a65-403d-ad9f-0a44c10f2246", "indicator--69710ffa-7e4f-4e84-a61d-c20b8c94527c", "indicator--4ae6f65e-ee7f-4bc8-aa15-b9b41e43e765", "indicator--3d23151f-6e69-4fa0-a995-c7091a2c0eb6", "indicator--dc841144-85d2-4782-afde-98f0779687ed", "indicator--bdfdb5a4-9977-4e0f-a5bd-f73175a6017f", "indicator--a9d9688b-26f1-4ea8-aa0d-639a5c9641b2", "indicator--64f0d175-5c4a-49f7-a667-039f9106f130", "indicator--92e9ecdb-33df-4935-927f-7dd579d0fa2e", "indicator--763434c0-4f70-4867-8ca0-6be8a3a4071d", "indicator--698036b2-15cc-4970-ba7b-9fa0bedbb015", "indicator--dbff6902-febe-4eab-8333-9ac706dd1452", "indicator--b1c5cfed-b65b-49f7-9607-4bdbf7c83a95", "indicator--355f1e82-7afe-4d4b-92c5-1ecefe3ef5f8", "indicator--3922edaf-4229-4858-ac48-a1de4718343c", "indicator--45f18702-84d1-41d2-8b6f-e3e72f6f1221", "indicator--b9325eca-128b-4d6f-aeb6-2f9f5b8cef16", "indicator--61cf4034-653d-4eea-abc0-b08c8605e846", "indicator--e2217fa7-3ce1-4b40-8e4c-5b62afe173da", "indicator--b6af6ee5-d4f0-4474-983a-d78b416e48dd", "indicator--8d05246c-8ca3-4e54-b5c1-df6ef47cc0c0", "indicator--45617822-fea5-495a-9aae-b474e102c6cc", "indicator--c9df36ee-23c3-42e9-86ff-f308ffe50548", "indicator--c1cfd068-85f9-410e-9f1c-62add59b1eeb", "indicator--304c1656-4601-4886-b959-780ff2d8093b", "indicator--772b101a-11a6-4139-8b28-968f4392f8b4", "indicator--97a72396-f814-4811-bff7-5b9c12a09ccc", "indicator--6c862939-dc97-417b-8887-c3fdd7d9763c", "indicator--8ba679f4-af85-480a-bf8b-c8695c68f355", "indicator--616d691f-0a8c-4472-8452-2b6277464cf3", "indicator--e0e2a975-24e9-40b8-a3a7-5baf725c0dfa", "indicator--92e5fa08-a64e-417c-9ee0-01859f5dbadb", "indicator--e8dbd155-3211-4a41-accc-620b5159df95", "indicator--78e020f4-b92d-4a9c-ab78-bf99d7319043", "indicator--7cff79ad-a40f-4a95-a5ed-ce3471e825d2", "indicator--a5b68de1-5f0d-472d-a7cb-f408f148f38f", "indicator--c8da7b1e-de56-49e1-8c81-5e6c21065526", "indicator--4c12cabf-76fb-4c86-bc57-f0b40cd8c7b4", "indicator--581b82d3-8401-449b-b970-821287782eeb", "indicator--79a2847b-4b07-4706-8a74-c60ff94cea07", "indicator--e672f1e5-7b14-4d26-b5b0-d96952183ebf", "indicator--244eab86-71f4-441a-b368-4625c2c2c881", "indicator--d0eced80-92e1-49b3-9dfc-a040608ef7fd", "indicator--8201f48e-e856-496f-be42-7284b2285f4e", "indicator--d255f0a4-581f-456d-87c6-e13c10db062f", "indicator--c656dc14-2ce7-43d6-917b-10ad09edfcc4", "indicator--9df0392d-9419-4f7b-8375-84356460377c", "indicator--163c0730-13a0-4e95-9aaf-635018133d96", "indicator--dc4decd6-d5a6-440c-8c46-fc15baa8ae95", "indicator--d3cad005-e1a8-4451-be81-2f30dab08a61", "indicator--36ddab70-ceab-45c4-a8b0-6f0804c0720a", "indicator--4d43360d-5ddb-4e8e-a2cd-e8db6ac1ea93", "indicator--e463cd7e-e67f-461b-9dcf-670ebefcec6a", "indicator--ee2f125b-aa30-4a27-ad1f-513d33182200", "indicator--20c297ce-b997-4bad-b9b1-4b87b8051943", "indicator--a6047508-7223-41ff-84aa-2d35daba02fa", "indicator--c6ef832d-a32c-44c9-8cac-c12e0f6f91a6", "indicator--2b03339a-264f-40e6-862c-6358f6072cbc", "indicator--93fa4fbb-e796-4da8-b7cf-39eef1aa5849", "indicator--e244ed38-02d5-4135-8fb0-b25d7348aebd", "indicator--b33a47dc-24d8-4d16-82e4-9b656cd76214", "indicator--82dc44c5-b58c-4237-8198-9ba77b047b6b", "indicator--92f9369b-01ba-4eee-ab97-9101526c7867", "indicator--2816d6e5-11c0-4176-9120-4c3ad54d2b98", "indicator--2ee1d6fa-396d-4db2-94b0-8abb4fb87484", "indicator--baf1dcf7-cb1c-4754-9a18-abd759c08ded", "indicator--dd026a7e-7e75-4650-87b7-dfe7dabef839", "indicator--967d6cf5-a412-4d58-8dab-5e36bae26174", "indicator--ed6a5ffa-ab60-48b7-8359-517e2a1e02a6", "indicator--df218ad2-dac5-49a2-8340-1154b1609326", "indicator--6ad07dbc-0001-48c7-aadc-920fd68b7ad1", "indicator--42523800-fee4-4622-867a-e7544a7f6307", "indicator--10b38e08-67e5-4e4f-aa32-58a6b3ed7f89", "indicator--4aca74ce-fa35-4703-bdca-56bdca5373cf", "indicator--e8481fa6-be99-41df-9fb9-f3b4388db525", "indicator--78d6ea04-213f-4b4d-9caa-01ac5f9ebb20", "indicator--749672f9-34ee-422a-bfa2-e70d84b52273", "indicator--f827f75d-be8f-41b3-b4d5-e00ecc7f6e26", "indicator--6ed293bd-f8b0-4343-89bb-b6cb39a0a361", "indicator--f85543a5-c69d-4b58-a158-5d36e1951547", "indicator--b4126927-99c8-439f-b816-4fbc6435a033", "indicator--a545dca3-85fe-4395-b50b-592d5c68685a", "indicator--7a35eb8e-4b8f-4abc-9759-579286e40b69", "indicator--5fd7a26a-b69f-4b5a-a0d2-eb3afb847f42", "indicator--dd9acbca-6bdf-408d-8168-674a4a4ee352", "indicator--02f9592d-7dc1-42cb-9320-458fa78550d7", "indicator--71b377cb-7cb1-489d-8717-8e23caaf439b", "indicator--4df1b46c-3c3a-4405-85bb-c2a0ca0480d2", "indicator--24125de1-2fbd-4943-99b3-1446d8f7448d", "indicator--44fb61c7-fea7-4446-8b49-aa87fffeff39", "indicator--604b781d-2d41-4fc4-a8ac-16b74ddbf24f", "indicator--489eb853-c933-4bd2-b649-7e1f2f3c7532", "indicator--720c9998-4a61-40e7-ad83-dc645c2dafb0", "indicator--32d8e705-a108-4c68-ba7c-85892f78d359", "indicator--e290a9e7-f0dc-4f38-81fd-1a227d0a8e50", "indicator--169018aa-5ca9-4645-abfb-a87e2adeba01", "indicator--7fb16f12-432a-4cbe-aa44-8e380ad4cfe7", "indicator--d428560f-88cc-441e-b7ce-e857a9c78fab", "indicator--f68d4cfe-0158-4318-9fb0-413cc7ff8de0", "indicator--fceed736-a947-4ea1-8b11-e96f3161d845", "indicator--ef206dea-0891-4266-abb3-61d31cc803a3", "indicator--1689a6d5-db04-4e43-baf8-7ffe716aff5e", "indicator--cf1adc46-f48b-4739-afb0-4a04080962a6", "indicator--e3479e48-6aee-4211-ad28-43a3ef1ace39", "indicator--a5752067-076d-48cb-b2c3-8fc23789ae71", "indicator--aa9b36cd-7bf5-410f-a936-3a8502d7744a", "indicator--efc0b453-c6db-4b16-a075-0f6d5e15e541", "indicator--52392f56-75e0-4296-ace0-bae835fa1ee2", "indicator--22eab69e-5595-496f-b5f2-b08c297ac4a2", "indicator--fe65c98b-0c05-47c6-901f-6a605c520f7c", "indicator--485efb2c-6c19-492e-a062-cae1a8933975", "indicator--2ec67518-be23-4c82-8311-80ed76d9cfac", "indicator--0e32efb7-b452-4f5e-bd07-c405442b3835", "indicator--2267f3ea-9d73-4627-a013-1c1741e27d60", "indicator--3d261609-b61a-41bd-a5a5-e1e37d112feb", "indicator--c3dbed5d-17a2-45b7-852a-57afee81dd87", "indicator--73a73554-1811-4a19-a2e0-6bd554608b9c", "indicator--faeacc59-1bb0-4c74-84f7-f2baa23a6d1e", "indicator--ade28ac2-3ea9-49de-90da-433c2e130b6c", "indicator--5846d141-fc17-4cc9-a58d-b3666a6e453d", "indicator--f04b426b-9a10-462a-8af1-4b1b0064b3e8", "indicator--cb4f12e8-8cba-4b27-9b25-e180888d38fb", "indicator--44ff9244-58ff-4cad-843a-7db780ac7f34", "indicator--a6910022-ea10-460b-aa46-246bb0b2cb84", "indicator--273410eb-209d-4211-9d68-0091723615c9", "indicator--199317e2-7553-4891-bcfd-64c26f38ebe7", "indicator--2cb6fd1a-e6cf-4264-935d-907e81751813", "indicator--ba48934a-6bf6-4d83-b4c4-9bc1c9e38e4a", "indicator--6892b09d-acd4-4cac-b805-7cd6fdbf8b06", "indicator--822a303d-20a1-424a-aa6f-80214166b435", "indicator--59500fd5-a7c6-47df-883b-087420702195", "indicator--a02fe5c4-f576-4248-8398-0bcd5f2ca1f2", "indicator--13cf8e48-1ba1-4940-974f-da13939fdf11", "indicator--885ca75a-0d06-4e18-9b52-4827b87e3e65", "indicator--1ddcb392-aa8e-4307-b510-ab94fbc08e6d", "indicator--999d0383-2ae8-49f5-b371-d3da498257ec", "indicator--7bcfb214-4c4b-4502-858c-aa0d8bb79df9", "indicator--c435f00c-294c-4bd1-95ea-1327535387f3", "indicator--6069b661-a693-42e6-ab7b-ce0f3d9d5b50", "indicator--732b167b-f99b-48fd-a840-4209b87619af", "indicator--1f3cb5f2-6ef7-4f48-b558-b4f9414b0481", "indicator--61b7da8f-6dd0-4580-a30e-823cb9646baa", "indicator--509da66b-fe63-49a7-9edc-d2715fe3e91e", "indicator--5fee2f69-7fb0-4344-8ed1-666c7c4490e7", "indicator--ac97babe-90ae-4da8-a0c0-40a66b2b0812", "indicator--c229b829-73d0-44bc-8a56-359109a146dc", "indicator--12397275-ea10-4168-b6af-40733e0345ed", "indicator--0a9aafb7-781b-4e0c-8e46-db163ca95e87", "indicator--8257be29-bbff-4624-9e2f-8f59f552b796", "indicator--279c1f0d-dee3-4ad5-9153-045551d7466e", "indicator--132794bd-cecc-4e49-a9a4-16e0e2b081c3", "indicator--12a1a2f8-3b9c-41e6-8eb2-56ccae568554", "indicator--5a97a9f6-e883-4b00-9973-18a42d10a260", "indicator--5e0fd868-1d26-4500-b8ca-9b832250bd2c", "indicator--10fa27fb-909c-46fe-b11f-152371375464", "indicator--053591c5-6440-4410-9483-0c3cae414fc5", "indicator--1dd64b3d-d004-4b70-96b3-1b656b4fe937", "indicator--16f50442-7ecc-4779-8ba3-4ca88913d5f5", "indicator--46d8b77f-ab15-4cf5-877a-37573564be32", "indicator--9afcff74-ee53-416d-b8a3-bf4a848d18d4", "indicator--c38c0261-faad-4234-aaf0-f40ae5986583", "indicator--b7a8da6a-9597-487b-a644-369a488383df", "indicator--5efa97ed-e617-4d48-9515-7f08666856be", "indicator--c090c314-9bf0-4d34-a4fc-fb991950ba44", "indicator--bf865e20-4cde-444e-ba47-96d0f1001f3c", "indicator--65d97a59-aa99-4117-b92a-ebd792afc101", "indicator--b78dcdf2-abf7-40d1-b502-f3d008a94b6b", "indicator--864fe953-6f16-47c4-8996-c133cf274555", "indicator--e04b6de4-0bee-4f9b-a1ae-387d8a69c430", "indicator--3733e932-8654-4070-8688-2259a49b449e", "indicator--847bc4c0-7bef-4e61-9400-4da0bf8d25b9", "indicator--a51aeefb-b4d2-4a1d-b867-93b62463985f", "indicator--970fb2bf-b928-49c5-aab0-09a15459bb98", "indicator--dcaeda1b-7072-4776-a191-cd4aef803f14", "indicator--0491d95b-8efa-40b9-8393-367b87cf4933", "indicator--43ca95f5-835f-4f7c-8cbc-01d6a79caea6", "indicator--06860312-e3b5-4fb8-891b-0ae20d2d180c", "indicator--b3bb7714-a500-4384-849e-977c666c08e1", "indicator--33e49323-54b2-49f5-b494-bcae50409bf1", "indicator--e33e595c-c232-425f-80c3-5f60a58dd8f9", "indicator--ed74f688-d475-411a-8c71-b2a3d4464728", "indicator--7f796288-89b7-4acc-913b-a3f7a119a32f", "indicator--0a87a81a-dfd7-477b-8268-ba985c7e9538", "indicator--df55d6bf-1aa6-45ce-9f7b-6326258ee790", "indicator--dd580645-7b0d-48dc-a7e8-e5262996ee28", "indicator--53d82832-135c-4119-8e8e-5dcb2a3ce5c3", "indicator--2e5aeb6f-4abb-4a36-bb45-dfb7c6746bce", "indicator--4fa93da9-1652-4116-8671-dac28cd4063e", "indicator--faa26e64-81ac-4e70-9b78-99ed61664b10", "indicator--99647c0b-997a-4603-829e-6d08a1b06eb4", "indicator--78a66fb5-761b-4ccb-9ebd-b18c0778702c", "indicator--79914878-02bd-4a19-863e-25c4257574db", "indicator--6fd34231-a05a-4944-b908-e925a6119d90", "indicator--e60f9a58-8f90-4709-af40-a9e1b5e6a940", "indicator--cbe479b5-d10f-44cf-bd9d-ffdb23395eff", "indicator--a72ff583-b750-420e-87de-6d0e9d41a753", "indicator--1b7b2235-0c42-4aaa-809d-cf71a0ecd872", "indicator--7bc0edcf-9cce-4e87-aadb-e45cad32d0d2", "indicator--7ac8a406-f7ca-4437-a614-1e7fc4055667", "indicator--ad6ca370-2121-4f58-8f33-a0d6b9d25142", "indicator--f1d7d7a6-96db-44e7-9d75-1f39b477042a", "indicator--474a46ab-e05a-4f22-9811-797bcc625958", "indicator--6694997e-4ccf-47bb-b8af-2ef1d4db7b59", "indicator--701a7534-57c8-4ac7-a4f3-caa8f57b14c6", "indicator--8ac5173e-70f8-487e-84ed-b588dcf54446", "indicator--b0e013ee-ff5d-4562-877d-145c6b2ba533", "indicator--364e2a0d-f3ac-471c-aec6-22d2706ede3b", "indicator--657f49b7-f7c6-41ef-8353-987478e10d3d", "indicator--f5308993-5742-4928-97d2-af1cb0017ef3", "indicator--e14c02c1-2a86-405b-8b00-96922c2f2df6", "indicator--6257dec7-2a7f-4d97-bcf4-31d624662b70", "indicator--a55ba0c2-01e4-476b-a567-3bdac50b19b1", "indicator--11145df1-5b29-472c-b28c-9e82b5a1f93d", "indicator--8fd499a2-9230-49da-9198-3a9cb31c0cd9", "indicator--c6edec1c-ef34-4c2e-88cd-624ba062491e", "indicator--80ea7b73-655e-4aa8-81ae-723d9db7b754", "indicator--76824b45-e678-41c8-b8cc-c4517390394d", "indicator--adb80d3f-4f05-4434-a399-c2f0beaf40c9", "indicator--f73365f1-c992-4c9c-a979-8fadba6b3008", "indicator--a38bc780-201a-40af-9cce-b9209099ee54", "indicator--912ff545-906d-473f-a3b9-adbd9c8ca26d", "indicator--0c59f65c-fcd1-4d37-995f-35f0b8fc2180", "indicator--84c7c428-ced1-4cd5-a671-e80bb2d199ee", "indicator--0b5ab919-e571-4870-9819-61b54ad8b3a3", "indicator--a3b35b4f-da19-4b4c-bd69-71deae8f86a0", "indicator--e542bf02-c917-4ded-a453-d489f773e2f0", "indicator--be1207f9-3404-4be4-bf1b-0e0ae8614c3c", "indicator--3e9500ce-2d0b-4230-855b-0177a47a8ca5", "indicator--b0907a18-3d92-4a16-ba2b-d6613f5a4d11", "indicator--969cca5c-2137-4f39-84ad-8304a3e366b0", "indicator--252c2cb2-ec56-4b16-b95f-4c3560cabbfd", "indicator--48ff1974-a580-45f5-8703-2467be6a0209", "indicator--741951ee-b7af-483c-8feb-1c0e01687959", "indicator--fc660b96-554d-490a-bcdd-bb30de3c6929", "indicator--e5f4d751-adf9-4dc9-bd0c-011ef3a6b4d7", "indicator--5e102712-5efb-4cc3-8c00-2194188f6845", "indicator--07446e97-5159-46a8-89fb-286be81a6312", "indicator--29fe309a-c22e-4af9-ba9b-90a63cff8c08", "indicator--922758c6-1544-4e54-af4c-3df1d8a251d5", "indicator--c04575db-88bb-4175-b2df-ad4ead337b65", "indicator--498ca5a5-142f-407c-8adc-1393412ec768", "indicator--061c7a1b-20ad-498d-bd60-4582e60b7b52", "indicator--23b9a1fe-17f4-4d71-8c42-bf936206cb2f", "indicator--eb6ad8e4-56a8-45ca-b13b-f8d55e0e7bc7", "indicator--0f63048f-572d-4986-8f8e-40c28f947ced", "indicator--6f1040ad-610b-4e26-a16f-4f47b7175cfb", "indicator--64c5d378-799b-4cd6-8878-081caa9e5072", "indicator--6fae15b7-d318-4a41-b2b4-50ef2fac2734", "indicator--819d6fa8-c819-406b-83c9-074ee979b794", "indicator--7e4afcbc-1d1e-4f70-ab02-7d8a3b990e4b", "indicator--302039ec-109b-4e63-b3a0-0cbf86ec14fc", "indicator--a6bbde7b-4f05-43ef-b30a-8e5b3a9edb15", "indicator--6673c9be-e4cf-41c7-b4ea-b1ba9f677cb5", "indicator--9c33935d-c109-4e18-9908-a353b1212af3", "indicator--eac832ea-3c8a-4020-aec0-5c8e594e18f7", "indicator--56b821e6-fbec-475b-9dc5-584fba091756", "indicator--524b3e17-ee17-47f8-81a3-3ad32d617a5d", "indicator--bbfba443-03a5-4616-a530-ebc2d99c6c57", "indicator--b7dc73a7-ce2d-4ba2-ac1c-2da3c8cfa094", "indicator--514dd89a-f2a4-4869-8579-e0a46b60456b", "indicator--ba4528ff-2d9b-4c64-99f7-903f32deb2a7", "indicator--15d2e201-9b59-4ec0-87e5-9f68afe72d77", "indicator--5ddee840-6900-4d7a-bc14-cdd01ea41549", "indicator--b48d3de7-c301-4762-9c69-11a46599275d", "indicator--0768fd03-9997-479e-a0dc-09ab71864afc", "indicator--d3976484-6d85-43e8-96a2-6656543dd557", "indicator--cd601aa7-79ff-4559-b5ea-78f6bc0d3f62", "indicator--eb065179-03e9-4bd9-b6a4-bef210b0f087", "indicator--2ec4d065-56c4-4246-b3d2-d8761ffe9973", "indicator--d73fa674-2255-497a-bba0-309df4a4e2dc", "indicator--9630a66b-805f-40a4-8193-bf0ae59b5333", "indicator--6157d5da-d840-4575-a401-5d9034f03b7a", "indicator--57c85b25-d4a3-4b1e-b7ec-940ef161ae48", "indicator--27e771ca-cd18-4d90-8fa2-b054ddeab930", "indicator--1013d819-c1c5-417b-8f9f-3b49c4d9dd7e", "indicator--f36f2c55-f5bb-4392-8599-02c07a2ddf78", "indicator--68907170-cf17-4528-a0f5-33c817762314", "indicator--1f9288bd-ff81-4d61-98ed-1f8f754e836c", "indicator--8e21e05e-871d-4a36-b21d-501ebb67d447", "indicator--6179ad31-f8bc-4a5e-8060-77caf13c6210", "indicator--7661f701-2fef-4d6c-bd29-b3ca60d77510", "indicator--4eca5be3-47a6-466a-9599-916dbf28584c", "indicator--e47e6044-7a90-46cc-8402-c0de2e4e505b", "indicator--c9ac4ca8-46e5-4c71-a2fd-b888bf2945b4", "indicator--9eb4a16a-c8aa-4d2d-afd0-b409efbd398e", "indicator--25beab99-e3d1-485b-b1e0-5b47a6696ce8", "indicator--43324b02-a62f-4f8a-958c-9a8e32a349f6", "indicator--a997ac2e-c4a3-4397-b28b-78a6968cc303", "indicator--72cea7f2-1230-42fa-9950-d5b149813f98", "indicator--c8a14558-1b70-44f5-9be3-93fb747a13b5", "indicator--c8b37d33-42f1-45f9-8fc4-6bba80fb7fd2", "indicator--0c6e604a-44b5-4f77-99f8-bf9c880a9a21", "indicator--9e5ee8ca-966e-4f69-825a-1b7e89d12a8b", "indicator--86c09ad8-8a34-4e77-b10c-0f26b296c5b1", "indicator--513798c4-9436-4291-8824-133684e554a9", "indicator--fdcf2549-10de-4e21-8ba5-2382e3a231e7", "indicator--2f6e1a45-ff78-42db-9669-146ee5d52915", "indicator--7ccdf2b5-cd9f-44be-bf63-149cafb9f202", "indicator--cdf8f4f3-27d0-4186-83d5-9504f10504dc", "indicator--0d0433e3-c6ff-44f7-88cb-822cac932a72", "indicator--72cdc55a-86ec-4ebf-b17e-2336223280b3", "indicator--d2b89b31-ce87-4650-b4a8-dc924121e08b", "indicator--d0c1251a-99f7-4eaf-94ec-c56588637b26", "indicator--0e66d83c-56ed-495f-8a07-567c35dd9c72", "indicator--b3cc5ac2-55d6-4bc9-bb33-b68ab35fc5e9", "indicator--bb491220-86a4-4946-8b5e-7951190ea8c7", "indicator--6a307489-5b41-4f4b-b69b-55e44408ca99", "indicator--3b6724dc-3455-4012-9aac-df93b4e78e1f", "indicator--6c2885e4-36c5-48b7-8190-d1a4ea0c7537", "indicator--313572ae-4567-44dd-bfad-f2145b7774ac", "indicator--ea8ad9bd-5103-4a57-b707-4ecae0dfb810", "indicator--7768875f-9da1-4313-b39b-f49e6dd27e2d", "indicator--7e50c2d6-1e51-4314-a2b1-3897d19b1b12", "indicator--1a2f675c-1520-49be-b2d3-1166ce69e55e", "indicator--d6b06de5-5d91-4835-ad92-7aa2dcffbbd1", "indicator--a85a0d41-5ef5-43de-9b5e-12a628cda946", "indicator--0287d9ed-ef4d-41f2-9ddf-63d87e395cde", "indicator--4a976be9-cc78-4faa-a9dd-19a4622c6a98", "indicator--4ed4d4a3-63ac-44c3-9e18-598defb0418b", "indicator--ea866de1-5826-4a16-854f-230a78c0fd00", "indicator--0145c2f1-80f9-4e2a-a7be-f8c1e9b54f7a", "indicator--e7cb3536-560f-4b5e-94dd-84f6eae6cfa0", "indicator--5d3900d6-499c-4c4f-90fc-7d9eef069069", "indicator--3402612e-4580-4766-8732-3f756fcb757a", "indicator--c14b137c-ee97-4335-986b-a04d0274f1fb", "indicator--1a56fce4-af1d-45a7-bc73-cc5850eb71e0", "indicator--c06c08fc-613a-4692-87d5-72f672ec1c19", "indicator--0ea9898c-d691-494b-8943-75659a4129ac", "indicator--226d0992-5837-4fb4-bad4-d225939650be", "indicator--9b7c5e77-b703-466d-8109-9a58e8844d04", "indicator--73a2da5e-9f51-4f63-b760-38727dbd6a32", "indicator--a012eb90-9f35-4e88-a934-9c72dacd0fbc", "indicator--ced3058a-85e5-4a51-a9ac-9498b45a9bd6", "indicator--8ccb2cab-9752-43d3-90dd-e8a175ad19bb", "indicator--cde2fc0c-8152-4262-abba-646d44d29523", "indicator--632d5c52-e25b-43b4-b89f-e7691afdcc85", "indicator--797d8ebf-b7c9-4df8-b5da-93d802491d68", "indicator--12b4c6f7-8634-4262-a960-d84d03babba0", "indicator--cbd93235-a362-408d-9d76-33e251934efc", "indicator--2dbf77ce-87d8-4ff7-8cbd-c38995311fda", "indicator--5c0eea7d-68d4-4184-a2d3-9021af1f85cc", "indicator--1e0ac750-813b-4ce2-8d43-e59c207feac3", "indicator--648067e8-6917-435b-beeb-3735afc264a4", "indicator--7c38f2ae-0e50-46b4-9805-8c909c32ffaa", "indicator--7df40100-d0b6-4fd6-8ec7-fadb7cb52645", "indicator--2d1c9b5e-31fc-4c8a-a782-a4ca85f445ef", "indicator--45a7c5bf-da80-4aae-b689-1de4dcf466ce", "indicator--bb19031e-a9ae-4936-8fcc-76b68fad9133", "indicator--18abe81c-4141-479f-a8f2-fc4b1d357d53", "indicator--ae1a6dc8-718b-46d7-a0c5-fd7efac0f496", "indicator--83e80480-63ae-4629-bd0b-ecc704c3ef2e", "indicator--c0926c13-f5c6-4a31-beda-0eb1fb051b10", "indicator--1d1e0e3f-14e1-4c58-88c6-01720c8ed182", "indicator--a0902bec-7744-4e35-9ab2-217c715dea6d", "indicator--006b24b1-817e-4d53-b4ee-9cc18941be60", "indicator--7844d8ba-e81d-4184-9c95-b49f3e3bc833", "indicator--a288db3c-d729-4704-b0ff-da66af191e04", "indicator--68f5df92-fd0c-4242-9a03-e606827547fc", "indicator--deef4c52-be28-4b78-94af-c92b04fbf8df", "indicator--7cedf5b4-f588-44f0-ac8e-bf9bf5b4a90c", "indicator--bdffdfa3-54d0-4ca6-87d5-39e03924874f", "indicator--49ca17fe-ac59-4adb-9982-985b70c4281a", "indicator--1bb36c26-8301-40a4-9d29-c0f56416875b", "indicator--61063112-6634-4736-b783-90dcd87fce67", "indicator--9acf633e-800d-4c48-9fc6-c9b44aae9789", "indicator--bb5dfee6-5953-4a60-bc0b-7db006ed95d9", "indicator--3fe8d179-9c52-4fcc-b278-90a36bc52dc3", "indicator--8c1401b3-b653-434d-83a3-369cc3fdca3c", "indicator--577d7a7d-97f8-4633-82cb-2ac214ad5705", "indicator--db6cd88a-a30f-4e99-b43e-8eb20e30d566", "indicator--6cfbfe9e-362e-44ec-831c-c4e8c18f05c4", "indicator--303dfb9c-a7b3-4fb7-b1e5-341e8278498e", "indicator--198699a3-960c-4858-bf33-0a49191399cb", "indicator--391b5cb6-3fd2-4ebe-9301-67f2703a1c90", "indicator--5b59ed49-8b06-4c8e-a6ee-23608871a47a", "indicator--62951726-8101-49e2-b545-fb56c14d64e6", "indicator--cd24cafe-bc07-4762-afa2-11efb0290938", "indicator--a77ad5dc-472f-447c-a81e-484a56f38c3c", "indicator--44f1e31c-c6f2-4381-872b-9ba9d86b68b5", "indicator--dab8fe3b-c027-4cfe-b59c-8027ea3010d6", "indicator--3b5599b9-0ec9-4dd1-b6af-3a52b864035e", "indicator--a8fdcd19-3510-406d-9941-a69d553f6fcc", "indicator--5d29b6e0-bdfd-4c7c-a075-af420c4d88a8", "indicator--e52dbeff-5353-4897-ac08-94aa5ab1e891", "indicator--2adaaecb-8bbf-4420-94da-ba440a2ffdbc", "indicator--fb6cdbf1-56ee-4c58-94fc-343ac428c17b", "indicator--6ef5ef77-e404-47b0-8a13-7e5f80bc1e22", "indicator--3e9f015b-923d-44b4-a044-8c0bd8a3891a", "indicator--2e6bda9b-e575-4c30-b850-750fd97bb6f0", "indicator--915430b5-1aea-4f06-a7d5-7505f53c3524", "indicator--e05de312-5fe1-4843-bb47-0822ed52f578", "indicator--8d260993-9f96-4540-8b1f-d6c7bfef4495", "indicator--bfa8029f-3ff4-447e-ad88-fdcbd800a33f", "indicator--72af7377-3976-47cd-bbad-c06bcb2f28c5", "indicator--6a64a719-6c6c-4f5a-839d-feeff5a36a73", "indicator--fab6ae1e-f1f3-4b08-b1ec-9bb4f4b8e7c1", "indicator--364a87c2-1a5f-41bb-be6d-0701bb85fc59", "indicator--5449f3d3-ce87-4d8d-a7c5-3ec07e46d114", "indicator--2f11c641-72a6-4bf0-b36c-7c149841a84e", "indicator--633ca12e-b0f4-43da-922e-7cf280d32449", "indicator--c0519899-0b2c-4d0d-bbc7-58183bf2cbb2", "indicator--5faf6738-14c8-4888-bf4d-405a2ff06e3c", "indicator--7c13bcc7-1437-4af4-a0f6-c7d96383e4e0", "indicator--c93a1f10-33ab-4880-8b84-92e1c70c3a81", "indicator--ed7df7ba-943b-460d-a9f5-1614d47932c1", "indicator--002e0c94-653d-4709-969b-d1930b045461", "indicator--9c1d9702-70e5-42d7-8ac3-e9744fab658e", "indicator--320c1f18-7d00-45ab-8901-fcccf7d26593", "indicator--a32d378b-df82-4451-8a32-386fdfb1817e", "indicator--5d9f7580-d19c-4d01-a264-5635d3424d21", "indicator--d4dbbf7d-1eeb-4d99-a9f1-22d28600a948", "indicator--0dfcf637-179f-40d1-8847-7391690255ed", "indicator--c704cc92-a2b1-4725-adbd-6dfc04db8289", "indicator--9ca08903-bf67-4d03-9761-4088bb5014f9", "indicator--15720a06-8d3a-4df0-9e82-101d8bfd1fd9", "indicator--d67aeab8-7e97-4761-9411-a93c6706bb80", "indicator--68122561-6cba-4b19-9f87-7214c3c3dd9e", "indicator--7d9f52aa-f4a1-4e88-835c-8b67946cbb55", "indicator--3abf0551-0eeb-4aef-b0b7-40520429c64c", "indicator--e7cb02a4-09b4-43b2-bd13-774cb344d72b", "indicator--55d0ddb5-914a-403c-bf61-8df6b642a775", "indicator--819d680e-4f69-4db8-9165-2e827298b0cd", "indicator--947bb494-9d2a-4117-8159-36233b32f9ec", "indicator--765ebd17-db19-4b8a-a26d-39633627cec5", "indicator--5167cc2e-cd05-44f8-993f-7c1352874418", "indicator--7991d5c3-c7ba-401e-9bd2-ed03ecbfd120", "indicator--7ea9d9c3-7bab-4daa-8534-866398f29124", "indicator--85150144-4381-43a4-8ae7-60b0f4256cdd", "indicator--d063eea2-210a-41fb-9981-226eb5e26eb1", "indicator--271d1fd3-4998-416e-9f36-d5d2acc6b9c6", "indicator--1e32602e-c32d-4d0a-b170-b405e9f32a52", "indicator--f068f029-3983-4be9-a71e-4267d631f857", "indicator--719d796e-27e9-4b62-9f8c-a09bb3413e41", "indicator--c4478041-55fb-41b3-8770-e43f17c5fd95", "indicator--c063d2ca-20d5-47e1-b440-f4487126c21a", "indicator--a52ea8db-6ba1-47f3-82b2-26a47f7444cb", "indicator--8563324d-6116-4d01-8efb-84f63d3c4b6e", "indicator--8a77a9cc-664b-4ccf-8c88-2d0ed3ab8c65", "indicator--ded23d3a-71fb-4f1d-bd60-a844bae82eb5", "indicator--149428df-7bf6-493b-8bd5-212e6dea25a5", "indicator--3133ff2c-a883-4a19-9dac-25ac0faa968a", "indicator--b4cba85f-1fe6-4c4e-a704-830f4d732ca3", "indicator--91cb0ee5-5611-4bb9-803b-aa8ac60ebd47", "indicator--8bf589c3-f1b6-494f-9ac6-2e70f2ed85d5", "indicator--f0adec20-3f46-47c6-adda-336c8f00a47e", "indicator--86c81532-3f80-469a-b3ea-40a11348b500", "indicator--424b5c6c-a006-4c27-8a7d-4830ec53b1a0", "indicator--49d62e21-825d-41e9-a46a-952511181d4e", "indicator--f3d6af4b-b233-4350-a1ff-995667432b77", "indicator--84977e33-620a-47d5-9d7b-4fbe2d949bbd", "indicator--9b635855-8332-44f7-9a2d-d38a7814f198", "indicator--1501bb48-3422-4b3f-9634-e4983b638b7b", "indicator--aea7228f-6fbc-47f5-8a1a-4d79e8f39962", "indicator--f90d0f1c-70e6-4117-a2cf-1405a2ed36ee", "indicator--255f5811-3717-468d-92b5-947f1d6ca4dd", "indicator--2d7ce9e4-f2ee-439b-9ae3-0919307d0218", "indicator--25627ab3-619f-4ad1-94d8-13fe4f1465d6", "indicator--fd3fff01-8885-410a-8b21-8c4ab2e9b29c", "indicator--ac7f11d3-07af-4fd1-8e90-9a1bbb714bbe", "indicator--4343caa3-017f-42ce-9faf-e110d906d5db", "indicator--2b5c81fc-4a15-4380-82cc-fc7cea13e721", "indicator--6b66c267-9856-44a9-ab20-d2fae325a51a", "indicator--9f1ae11a-e1e4-479d-8a18-e6a04c932df8", "indicator--8ff88165-56b9-4b59-95b2-d9596cb7808d", "indicator--16cfa1d1-6760-4043-9a11-d02a3717ea24", "indicator--255bdf6b-bc78-4dfe-ab54-3df5e2135460", "indicator--2626cd8d-4f7b-4412-bbda-cee7420b66d4", "indicator--978d9706-3ed0-461e-a09a-39e83ee89460", "indicator--eb6dda89-d504-4f29-88e3-68be1e7be80d", "indicator--66eee73b-9fd9-41d6-a124-2523dcd4daf9", "indicator--6c57d447-7390-4de5-9ddc-d0fdf89ceaa9", "indicator--0fa3656f-8e5a-4824-a8a9-b0d2fabfa7a5", "indicator--aa8a15d4-fc87-41de-9c56-13920152013c", "indicator--84597d36-b47b-4aac-b0ca-dbfd8ef554ca", "indicator--f782c314-0d3b-4963-8d36-3ac1ddadd4ba", "indicator--ed874402-c9c2-4775-8692-228fd4cb2370", "indicator--4235088c-8e5d-4942-ad99-f5ac2c25af2e", "indicator--9d2d0d7d-4ee7-43a6-a9ca-f515729502d4", "indicator--c74478e4-84f9-4a08-babc-398f4abed88d", "indicator--41aa63f3-b035-4241-916b-2c7be19ae19c", "indicator--f30110c0-9212-4be9-8aa6-b2a0383676c3", "indicator--6f6a0d4f-1312-4d0c-b1e8-8efbf998271c", "indicator--ba92406c-60fc-4676-8b14-3686874aea5c", "indicator--0356335a-6721-4b3a-99a1-e78918145a9e", "indicator--41c47eee-c929-4dbf-9d50-0539d59c6063", "indicator--b11913e5-175e-4b39-aa6a-a22517092fda", "indicator--c9999e6d-cbf4-4ed6-ad34-92e915649cfa", "indicator--b4203c49-7444-455a-841e-c120facb8da1", "indicator--3959d075-e2b5-4114-8144-5befabee62e9", "indicator--ecfdfef3-3d22-4656-a538-b8388fde1f08", "indicator--b0f2052a-f139-4e24-a0ed-79669577432c", "indicator--c6cfa7e6-701c-4cc0-b1d2-28fff882795e", "indicator--f7d8aa9f-3133-43de-ad6d-046e8bcdad1d", "indicator--51209b4b-d608-47bd-af74-4a8a6c5566ed", "indicator--82a1fbb3-705f-4cda-a985-9999c05ee0ad", "indicator--15e311b7-45d3-4725-80ae-09ebddf4aeca", "indicator--7c4c7b57-9139-4462-bb73-4d8a1e462563", "indicator--b2478834-dbc0-4cf9-bc72-ab2ece9f30a6", "indicator--816cf1ab-9c9b-4b60-a6cd-aae5f059a751", "indicator--7623818a-582f-469c-aed2-27ad24e48e57", "indicator--ee39310e-6e47-4734-97fb-4f1337c4e36e", "indicator--42af2fed-55fb-4269-adbf-7d596b2ef3ce", "indicator--5a2c2352-824d-4563-9f92-dcd832cdc0d1", "indicator--1db81082-4eb5-429e-bf99-c1c23fce021c", "indicator--5fb36428-6345-4b57-951e-18fead2bb60b", "indicator--f24e8ea3-1283-4c23-b6a3-573163abd06e", "indicator--faf86fe1-bfea-4ea7-9d0f-924327278d2b", "indicator--07c9b39f-69f6-4075-b494-5a60ad247901", "indicator--502655c8-52c9-44f8-82a9-bfe12fb49ec7", "indicator--9b7172fc-0eed-4e75-97a4-f0c8368d242b", "indicator--f904d6aa-1357-49b4-984d-97984198f159", "indicator--1c074373-b58f-412d-943d-a6f236534594", "indicator--f2f92133-84db-4eb0-9911-eed586922919", "indicator--3794c54b-5138-4cc4-a9ee-d04c4c723a97", "indicator--b1a63f85-e503-427c-ad9b-44141f17ab19", "indicator--c76a4dde-227b-4431-888d-269f379d41c7", "indicator--812dd3eb-88d8-4837-a0d0-25837de64f0b", "indicator--d2d5e617-286a-4b82-b5d2-7ecac663eab0", "indicator--78bc3531-ee05-432c-9e79-e57b36ba8af7", "indicator--d9558195-b0ef-4ca3-af39-8af85d35a702", "indicator--bb46890f-e80c-4653-92a2-3d9254a51433", "indicator--c291763b-b692-483a-b336-f70001f06ec2", "indicator--2a6265c3-bcdf-4a7f-ba29-01eb953dc810", "indicator--70cfefba-9808-46c6-9bbf-9bdee88d41f7", "indicator--285a1d31-0105-4b06-b2d7-6c513e4fb080", "indicator--72446ed4-f860-4e1a-8870-28a26252ccab", "indicator--9cc11c7c-5339-4b21-93f2-09fa04d390f7", "indicator--cd960499-fe3f-4087-99d9-faf22d6fa371", "indicator--bc73c7fb-8cf6-4aec-9a01-17c64326c00a", "indicator--050d4f24-f92e-4337-aa00-dc4d92988b7b", "indicator--3a585750-624f-46c6-86f5-37bd8e40776c", "indicator--d5cedf21-107a-4a55-9aa9-b8bc7a975674", "indicator--4604af9a-345b-4a6f-ba9d-5315c7a67c3d", "indicator--8440c349-31ed-469a-ac0a-bd0dba0d3d76", "indicator--50f04a98-5f94-4264-8180-2a367adcdc80", "indicator--4a2c1e90-d698-46eb-98cd-1d7a9e35e829", "indicator--a6f3f3ed-0962-42e9-8d99-c153f8c089de", "indicator--386b8491-853a-49df-b8d3-f9ba4b0133d4", "indicator--b55d42fc-06f1-4ec8-ad79-a7f46e89a285", "indicator--6466718c-99a5-4c83-a2f9-3e5fe42ed0ee", "indicator--4dbb814c-584c-4d8a-b851-516bdecdb184", "indicator--f910429d-c8ed-4182-b771-76907c340007", "indicator--380263c4-1841-4931-af21-3fd82e203e01", "indicator--34c2aec0-7613-48b6-9e2f-cbed9aeba4aa", "indicator--3dcb27b8-432c-469c-812d-9e4699f8c3d0", "indicator--5a201556-61a3-45f0-abfa-9eaf699cbc07", "indicator--aeb7428b-8502-449d-8ea5-5bd1107162b8", "indicator--b21f67ba-6f9e-4686-a88a-ac1f4788c8c9", "indicator--6401a481-aef3-4d76-bd7e-219614651eff", "indicator--6715b9d2-54bf-4e3a-a5eb-64c4a21e9743", "indicator--0fb10f62-08f1-461a-8a0c-28bdcc96f120", "indicator--37fb9117-de83-45b1-b93e-1d8e6176288b", "indicator--4aa65719-5572-4e57-a746-baa529cff6e0", "indicator--6a7a2a29-760b-4403-af26-fa72e3784943", "indicator--fa862fcf-d5f2-4e4e-ba41-40222c4b052f", "indicator--297322d6-81bc-4599-967b-caf01c85212b", "indicator--0810c102-54d3-48a3-80b5-093d63a657f9", "indicator--0990979b-d166-4f86-a4b6-9a306a1faf4e", "indicator--3ebc1ccf-c44c-4c4d-84f2-b68747ae82df", "indicator--1d1503b6-96a4-4fb3-a62c-bbbb2a34f431", "indicator--d051daf9-e123-4ae4-9aa4-9f3e02cb2ad2", "indicator--575328d9-17ec-4280-b190-c2486683d17a", "indicator--ce58870c-a44f-433c-9faf-6a6818d72193", "indicator--4efca2d4-75bc-4fdd-85ce-5752e009e655", "indicator--f056a877-63be-4a76-ad14-d744aaab1f77", "indicator--4f418f70-9914-4742-8fb4-67de8286b6d6", "indicator--49de6a06-b76f-4c73-b91c-911b19646787", "indicator--27a8f0a1-5943-4bf3-899d-36f4eb3bcaf1", "indicator--b8895690-efae-4446-ae3a-a4912224a0b7", "indicator--ce2ac814-4361-424f-b971-6132537c8c94", "indicator--97c27b07-3e08-4f27-8078-8cda3bdbfc4c", "indicator--73a6be3b-31b4-458b-b98f-8203665d5d0a", "indicator--49f49cfc-c6dc-4d57-a981-793434b6d1d2", "indicator--0f4ab617-3832-4b11-b395-82d1b06a416f", "indicator--d100713d-e830-49d4-8a34-84a477fa0ec4", "indicator--31fc7291-62db-4626-82fb-cf0eaea390f2", "indicator--b288d49d-fde2-440f-849c-49ffde52c7e1", "indicator--0b76fa9f-3f04-4f17-9c08-2bf4ee9b57f9", "indicator--14d11d78-8a4b-406d-bfb5-d820c35c2b5c", "indicator--dd92ad8c-1b02-4d85-a6e2-73b599492585", "indicator--fca3d228-1803-44bd-b953-5e89f301e503", "indicator--4ab83643-c81f-4db5-bda8-c1c0d93da11c", "indicator--96100fa2-4195-4cca-bb30-9c540342fa25", "indicator--ce6bd065-35dd-4efe-a84c-697b10f84787", "indicator--33c40805-606b-4ca9-b534-a0d3096da85e", "indicator--d09a7043-c99a-43f4-ad08-12148a76d773", "indicator--f57093ab-0b96-4848-99e0-5cbcf2c54b72", "indicator--ce57e7c4-4f1c-42ac-bc49-61d198a31b11", "indicator--f3418d4c-8c8b-4fe3-b937-86ea5e4377c7", "indicator--9e747cda-ab86-4659-8ef2-bbb8fec56a22", "indicator--ceec25b9-0252-4b14-879f-ff9bd9466755", "indicator--4f12136d-344d-4be1-af02-6f714332d878", "indicator--63589573-9906-45cf-b35f-9724aca585c3", "indicator--e70022bc-9ec6-42dc-9797-3a090dbff48d", "indicator--481500da-dda0-4c73-a775-7ae270dd2320", "indicator--f9aba9c8-f84a-4e96-8e63-295587152749", "indicator--c8f19ac2-c361-47e0-a66e-040eaabee05f", "indicator--5e05836c-4f65-4ed2-a234-6458acb57329", "indicator--6443cc98-0ea6-4b78-b001-550410338c42", "indicator--b90f57f2-3978-474d-b2c0-848b58068654", "indicator--9bb21f23-ef4b-4bed-999a-dc977cd21e52", "indicator--2e17320a-f82c-4e76-a43c-d51cd59bb039", "indicator--29ed7b7b-fc68-48e8-875a-6f1716e13b2e", "indicator--d501f9db-11bb-4b07-8342-6c02ced30c1f", "indicator--08b647ce-9f27-414d-919a-17ae07e3758f", "indicator--5790962f-7451-4413-b7ab-137f61f38cc5", "indicator--4230cef7-167d-4c4f-90e2-0f767291ee6d", "indicator--ca6c9e07-92c9-4ab4-9f0e-180543096d2f", "indicator--61763d91-1982-45b1-9ef5-8d9c31e3c4d4", "indicator--bdc879e3-1b95-4680-b276-2d46ac6f7b02", "indicator--18507f0c-d356-4558-9a0c-60820aebe43f", "indicator--f34806e5-a4a2-4062-8f47-5fe5c4f0c656", "indicator--85c5a6ec-b356-4ac7-911b-00294dc21b26", "indicator--5c50d691-7060-40eb-bddb-ab274939ffb6", "indicator--e32b36ab-d793-4dd8-b74a-f2789234ac91", "indicator--f1d190a6-53d1-4dbb-96eb-fc27b048ab81", "indicator--f078f86f-cf32-48f3-8841-5514d865d45a", "indicator--eae06799-14e4-47da-b307-de9a1f52d888", "indicator--98607146-b8d6-4642-8800-679f92fd1fa5", "indicator--9c132a05-225b-48da-9143-17bf1348117e", "indicator--585a21f4-3f5d-4e95-ac51-77f267b288d8", "indicator--a72a31b9-977f-44d5-9457-64fc23d4c7b2", "indicator--3912a301-900e-49d0-a518-6ca4effe3ea7", "indicator--68f117f7-b7b7-4a09-a1e6-228c21789732", "indicator--a95fbadf-5ced-4a01-ad49-57caac71132b", "indicator--1b33b8c2-2417-466d-af33-93658441b499", "indicator--e87793b2-f284-4492-adec-817072df3007", "indicator--f58aab18-25be-48ac-84a8-c8697b8849f8", "indicator--1390d9a7-c846-4de5-b5e6-ced8493fc607", "indicator--3e9fed77-895d-4b13-8325-ad80e4ba170b", "indicator--4fd769a3-20ef-4c6b-ac0e-34b6a249d51e", "indicator--2270fd90-73a3-4a1c-af23-8fed67af5d80", "indicator--01902ebf-82a3-48ad-82af-8dbf82bf6940", "indicator--53e87462-b915-412a-8c18-bfef0430b04f", "indicator--b187b58a-a78f-4789-8598-b3abb813045b", "indicator--8cc2289f-2089-46a4-8984-dba73dac315e", "indicator--0a43fda1-b08e-4b12-bd75-79cfbde17b10", "indicator--71502160-fbcb-4de5-a107-8197e9484678", "indicator--966805b9-bc96-4c91-8a8c-587a6d12f0fe", "indicator--7849e050-8705-4c7f-a31b-8345e4c9b910", "indicator--04ba346a-7abd-461d-85de-afc6dd2bf4c0", "indicator--69e7ff95-8880-46a3-bca4-250cfc41185b", "indicator--17fbb553-6751-4283-8618-b0d5489c68a5", "indicator--30b08858-d9af-44f6-b2c4-eaf630153e61", "indicator--b1166bf7-d1f2-4fa6-82fb-4029af026f0c", "indicator--908087b8-cfb7-47b1-8181-9a6026d76719", "indicator--a843f13f-f53a-42b7-8fc5-419d2309a95c", "indicator--e242bb2a-c6fa-4231-8713-039d6ae16bc6", "indicator--c0696d37-decf-4ab7-a19e-ca1cf1ebf9f1", "indicator--12501879-8624-419f-ad26-9aa2aa547737", "indicator--973f7143-ab6f-4a9a-bf32-b8df878aeb58", "indicator--df89edcd-b5f4-4c9d-b3be-7f512dc6b421", "indicator--857648b7-9b97-491e-92db-cb4706717d59", "indicator--2f09be99-6b41-4889-812c-04793a4ab10d", "indicator--b1d31f11-c1b6-43ff-83c6-5cc0c422f78f", "indicator--ec572263-6eec-476b-8192-6e540b9014e9", "indicator--a15a5704-f541-4847-b2a6-1e1885d454bc", "indicator--2103cb7b-6a99-43c7-93ec-01300935f4b3", "indicator--672b6d61-5631-4bb9-86a8-d73b50bed0c3", "indicator--dcdd722e-139e-4c0b-b18a-8bcb6c707beb", "indicator--85a8fef2-a433-4f81-b7f9-f087551a7f5b", "indicator--e7af0b5f-0bf4-4c3a-b3a9-83e713e1f7ee", "indicator--414f90a8-f698-4416-b4ee-7fcf7a49b203", "indicator--e5806fbd-799f-484d-a030-7542f87313a8", "indicator--59539d09-f23a-4b10-aecb-b593634caa33", "indicator--095941f3-d937-4fc7-80a3-1fe9b9e5868d", "indicator--bb0e0e7a-839b-46f2-b89b-a33b19fe796f", "indicator--53cbc558-4548-4e60-980d-1fe405db5a9b", "indicator--a3e39901-0cdb-40e5-bc3f-339f3ee9c3bf", "indicator--97dc6bc9-95e3-4ea1-a9a3-edecf8c21ee1", "indicator--10da9044-ee40-4c5e-bdf8-130f6286e1ba", "indicator--917e38f4-25de-44be-bfe3-ede73f4aca12", "indicator--15c573df-79e3-4ea7-b0b7-b802c7c8179d", "indicator--3b053755-67cc-4b5d-bc3e-87c4ddeb8487", "indicator--11715d94-bb53-42f8-80d7-08cf05651ad1", "indicator--4e7a332a-ae75-4b10-a082-63d3d86378bf", "indicator--7fe384ee-d726-4692-856d-ca7d822c7f72", "indicator--4a00713e-f66f-4585-9ece-6f8e1c0b78c3", "indicator--620a6b08-f6d0-4164-a8f7-a87d4ff24d33", "indicator--8b4d7712-55a1-45ef-8980-d904656a12f9", "indicator--613c324a-fa66-4d45-ab2f-8a2ac56ea755", "indicator--33e5bf00-056b-45c4-9649-b2a178d94189", "indicator--bb080ef9-4929-4680-99cb-ee71a57dbc25", "indicator--1057a541-4dbd-4358-a189-293a3bc7062c", "indicator--69bd8df7-97f9-46a3-b868-b2f679dacd5d", "indicator--d348dde2-0eb8-4cd5-97b0-b59507c4fe1e", "indicator--665c8778-68ca-4ec4-9e2e-926fb1846e5f", "indicator--1e9ba845-8dd3-4037-a00a-fcbf58af2f70", "indicator--55ab9c62-62c7-4479-a6b9-696925fd0ae1", "indicator--2649523e-1607-4a03-a4ff-a36086b8a412", "indicator--78124e8f-06b4-4a75-8e56-af11bbd30df1", "indicator--3588a1a3-dec8-46d5-9dbe-3865bea7f8e6", "indicator--e6684ac2-1790-4545-8df9-5301690c4df3", "indicator--8a0bd956-d613-48fe-ad16-9b06815019bf", "indicator--c31030ab-ad82-4741-9b47-708edf08e06c", "indicator--6e0e1fbd-ab83-4437-be14-940d7d5d731b", "indicator--664d5645-e1c8-4e23-b375-ff8ab966dfbe", "indicator--9a870c6b-cf74-413d-836f-349e72d7375f", "relationship--74a05c51-0a05-4cee-a0af-2802d963b881", "relationship--203200aa-2333-4613-9103-7f7467105266", "relationship--27b8498a-1125-4f53-9846-a88124d80094", "indicator--448b1124-7f3e-42b1-a342-cc82bc424972", "indicator--1009e6b2-0eed-41f4-ab0a-1bd8bb373b24", "indicator--0aedfe6e-5be3-4cb5-81fe-e17869e12790", "indicator--599b0962-6ca8-4f42-9067-387e5a1d1e3f", "indicator--c0338e4c-7a74-4bbc-808b-86965566afe6", "indicator--2efc8432-cdfd-4ecd-9a34-48a04ec5b573", "indicator--319e90e8-99d1-4218-9e70-5df8cff53310", "indicator--2eb6bf60-3e6b-4b03-a2db-1386704ace44", "indicator--51463fb0-e878-44b3-a09d-c08129092cb5", "indicator--d6d81d2b-e4b7-48a4-80b1-8cf0017a5689", "indicator--bd260765-176b-4de1-a459-4ebd884aa34e", "indicator--dd8181b0-c20a-4eb6-8ce6-234c2b42fa46", "indicator--1833e2b1-6459-42ac-9a72-23dde3749f8c", "indicator--99a8eed7-d290-4c05-a0ed-20009d9890dd", "indicator--1a7997ed-d5a5-41da-91bf-36ee979b2b29", "indicator--f0511974-86d3-4564-8f5f-3e99fb895e04", "indicator--00a3d829-27af-4af2-bbf1-cc8661ade8a9", "indicator--a51abcee-4419-4cde-846b-7e70c1ab85c6", "indicator--2baf79c0-1174-43d9-8225-c96f7cf2533d", "indicator--771bc866-2cfc-4085-b71a-52e1f1452e6c", "indicator--d8cea6e2-281d-4a37-a423-aeceedb523fc", "indicator--cf46a27e-8644-41f0-8cc2-34884e2d548f", "indicator--1bafa5dd-2649-47f3-848a-045e7ad0d8fa", "indicator--2f5adc7c-7a31-45bb-a6f9-d5c4209a560f", "indicator--9e04a496-dc97-4ad9-858c-bd3d8bff4e57", "indicator--6584a1ad-3060-4190-abbd-e23837397a64", "indicator--e20b702d-8b3f-4949-a3fe-5ea6464063e8", "indicator--b070d13b-05a6-4014-80c9-317c668754b5", "indicator--cce0df60-c4af-42d3-b04e-2f003de3e921", "indicator--ea2506d8-e0b2-4ed1-be59-7c26c1956d05", "indicator--4fbba399-3b6c-4fbd-97fd-926964644e74", "indicator--0eaf07cf-81ad-42e3-b8e4-5691978bc880", "indicator--6fb3c05c-48d1-4a14-9f1a-42eae73316cc", "indicator--9dfa000e-cb36-49d3-884e-0216976d7a5f", "indicator--ddc2dc1a-b8d6-47b4-aa47-84a4e1629d45", "indicator--de5aca21-9b5f-44e5-aedb-f3637e722637", "indicator--87d214bc-de19-4dfb-a7f0-329a137da42f", "indicator--34540d71-55ad-4c66-afbd-8b2d1722f8eb", "indicator--3b5764ed-8e2f-4582-9cd2-a5c16db19c73", "indicator--cec62ccd-2e71-47f6-bfd6-729c7be47288", "indicator--55bc0c92-ccec-43ec-8704-bf0e8b3a2ec7", "indicator--ffc99b74-bdad-455a-b9e3-f9f1326c289a", "indicator--332934ea-a796-43c4-b27d-bafdc1add710", "indicator--53c21876-fb64-46b0-ad43-9eff1986b091", "indicator--abffe604-e677-40a8-807d-6f1828d92a6a", "indicator--1626e3b7-ae7c-41d0-96bc-02721c9c641d", "indicator--e273ddaf-8296-44c8-a793-2f2c35c068ce", "indicator--296b360d-fb74-48a9-b646-fd5d664a8a63", "indicator--9a9711bc-b402-4ba1-9db5-8f86371c2bf3", "indicator--f2f941ba-d0ab-4630-98a2-25d548635fca", "indicator--4e8f943d-1317-4605-b2d3-3b9f59ec7ea3", "indicator--96dfc251-3360-4dd3-803f-224c1eb27b59", "indicator--052ae3a1-1adf-40c6-8811-e9c7853ab40b", "indicator--d541101b-d12e-49b4-84aa-d6881a36ae61", "indicator--aedb66be-5b76-401e-acb4-f93074fd11fc", "indicator--277a414d-0ab9-4656-af2e-6d5494048184", "indicator--20411edf-5fbc-4291-a5ed-7f747f2140dd", "indicator--f3e21796-5451-438a-84fd-91cc713d888e", "indicator--cedaaa4f-7a46-448e-bf10-66445cc6c3c8", "indicator--e95f0085-7b19-4ea6-a9a5-761d6e45b891", "indicator--a53a0b70-63dc-46b2-a3d2-9ae38c8cae10", "indicator--6fad1afc-b1bc-46f9-bc6f-0dfcc03083ea", "indicator--08827aca-e1af-4222-b317-e8b1b0c3fe44", "indicator--e65d1d68-ae18-4c8b-9fba-078d01288777", "indicator--adb8200d-cf0f-42dc-9f25-59b18efd8d69", "indicator--2a9b685c-1253-4960-b987-4300bb637de4", "indicator--123505f6-8d4e-4ddf-9430-b6e77e169d48", "indicator--32a1c208-faa6-41f6-b29a-12fdca4d4030", "indicator--5c1845bf-edce-48b2-ab6d-8186c3f88ec7", "indicator--02243780-0f3a-43f4-8ae9-07fc69b28ffe", "indicator--628cdf89-8ac3-4629-a096-70b154c81767", "indicator--5fa3933c-bf01-4ff9-9862-0e66337ae081", "indicator--90d6e895-9259-4a77-8817-1302dd72c88e", "indicator--da78ea70-5c1d-41ce-b4b1-6a701771aea9", "indicator--084aa53c-c448-464d-a7d6-5442afc31150", "indicator--0c44ff25-561a-4992-aecf-9aae9431f7e2", "indicator--045915d7-b53c-44eb-92d2-4f663fbcc012", "indicator--9d5caafc-cad4-4568-88a7-23643f6951db", "indicator--cb9f32b4-2e5a-4f97-911a-a2d993bb237b", "indicator--9ef0fd4e-a4be-403d-84b2-054489615aad", "indicator--93491693-2bfe-4fae-8c3d-509dba412f2c", "indicator--df7b929b-c4f5-459c-822f-f13453e37d81", "indicator--b283ca45-7696-428d-b1a3-01b504026f29", "indicator--d873f0ec-fad4-450f-ad77-ba8af52d1111", "indicator--29b1a4f5-433b-4553-9f79-8ceaa9f94f04", "indicator--fd2d6d51-5cbc-4cbd-8b04-d0bc3217645d", "indicator--1a6e6dde-5f71-4d89-888a-74b9a98fe26e", "indicator--18eeb7bd-9e33-437d-a7d9-74f5bede1adf", "indicator--96546ea6-ef65-4985-a395-abacccc6cc31", "indicator--fde1a190-6b58-4133-b0c7-3d99d9ddfa68", "indicator--bc3188ab-e415-4800-82f2-cace64145d82", "indicator--083da6a2-8fc4-4e09-bc33-a6f718a235af", "indicator--b2e381a7-6ad2-4b0b-8423-37d869038910", "indicator--144d5c9f-dd21-4dad-9e63-19aaf36f0d96", "indicator--1f6e0cb8-2d65-483d-8499-22f5865f767d", "indicator--9a28ad2a-01b2-4697-8546-3a0be083d4ad", "indicator--228f02ca-e558-4f49-b082-1e59f89ddc3c", "indicator--bf6aeb31-c46f-491c-9b9e-1106f714a33f", "indicator--a8891257-a965-4ffe-8911-4676814923d1", "indicator--7dd39ede-300b-4ca5-b935-daf41c1259d3", "indicator--a159acd1-f170-4e05-9c54-3c40815ee5bd", "indicator--8ec6cbf1-4b89-4de2-a36d-7ff4f41b16be", "indicator--5d3cf98f-c2d5-4da3-a2c0-6d32ef850527", "indicator--a6071d2a-8691-4dce-9a27-91d4fd4e5241", "indicator--69d1f0c0-4461-4531-9172-49e6de78413b", "indicator--9c437065-aecf-47aa-a037-5db0573d801e", "indicator--46a9d405-4cdf-47eb-9839-9abe5429aa6b", "indicator--a93f3224-6503-41a3-a83a-6ff32176f182", "indicator--bd3e7c81-bb1a-42d9-8c1a-59f8931fbce7", "indicator--be648e8b-20d1-4162-b1b9-7aa931750141", "indicator--7b49dfc2-677c-4059-92c3-4fd2fcc4599b", "indicator--a13502f5-4a13-497c-a5ec-4a67baa09e13", "indicator--f02474a3-2001-441d-b1b5-49b30e2598b7", "indicator--fd03cdd1-fc24-4f30-b7c0-20ca2403aed5", "indicator--5911d455-d0b1-47d6-9b0e-f289366ffa2a", "indicator--a379a6de-e5b4-4c08-ad61-b94f6c632359", "indicator--a51b5857-0b84-4151-b8ec-8e6ed012ee18", "indicator--5d56ce49-9a2a-43f9-9cc1-5e3147d42981", "indicator--71f3cda8-6a69-4920-8823-61d7ea911ce6", "indicator--61ea0518-33d4-456f-bbe6-0535d3cd0ec9", "indicator--578e5b6d-30cc-4eec-bff5-572b1af35821", "indicator--929ea7fc-e65c-46a9-8e6a-b364564f5216", "indicator--4f7da2bf-bc38-4bc9-85f4-d5a97cc47f6a", "indicator--22298b60-3c51-4c36-99a1-2f497fd39c1e", "indicator--04ae3256-007a-4efe-9eea-5281d27dc761", "indicator--7a2e3000-fe94-444e-b616-e68171eb291e", "indicator--2e22a8e4-ffc9-4f62-bd40-fd6b11361564", "indicator--2ec16411-ecd9-4918-bcfd-82f43be11e11", "indicator--6fb69c92-2d8e-4e19-a1ba-6c3747c7912f", "indicator--89ee262d-514d-485e-b446-ae1ec00e9fa7", "indicator--7687cb34-0dbe-4b5d-ae7f-9fbb19ec98f8", "indicator--b0bff521-6dcb-45d3-a781-3f78655faa8c", "indicator--73cafe6c-5805-49db-940c-fcaa6ab2019a", "indicator--1efb59ad-1e12-4234-a371-29012a985951", "indicator--c02e7b71-7143-4f51-a317-ff0df207a1eb", "indicator--a109ac76-4f99-4a82-b5fb-238f283816c7", "indicator--2b6ea216-152b-46ce-a276-57fae3fb69eb", "indicator--be05a9ad-e528-441d-942a-e1be502a49c3", "indicator--d5b0e002-2e0e-4ae4-8cfd-8432cf0a31f7", "indicator--716c0ee4-40e2-40fd-9ccd-7eaadb05175f", "indicator--09fcadbd-f069-4b32-ab2f-a39f5ab77e21", "indicator--2d1e0d5f-9429-4272-aaf6-14a14ece343e", "indicator--c3569229-eb89-484b-a068-96eb970b89e3", "indicator--607e6da4-0e10-44b1-9769-7d5d683f3ac0", "indicator--e7a89ff5-c5ea-44a6-a15c-df272148fc6c", "indicator--0160cc52-bbbe-496c-b740-55ef025680db", "indicator--507a3c7b-5a2e-4b8b-a573-a2ef12bb2763", "indicator--8e83a98c-0bdf-4488-94ad-0e79303a532e", "indicator--ae1877a1-1171-400b-a0de-d779edd54bc1", "indicator--30f7d285-3e72-4744-b4af-6e157bd26b06", "indicator--d99d03ce-050c-4837-9ed3-f0ed7a162b1b", "indicator--b5d4727f-be13-4e27-ade4-852af79b8bcc", "indicator--8cdbe4ba-a377-41e6-b04d-44d46e29867f", "indicator--52688796-0740-4d30-9a39-c7d650056435", "indicator--8c73fdcf-3a52-4dc6-b074-b774021fad02", "indicator--c86a4b6d-81eb-4da9-940e-e4df74ed9f7d", "indicator--af0859a9-28f6-4769-904e-88833b55150d", "indicator--76362a67-52a4-49df-a848-5b90df427e73", "indicator--492122b7-1461-4896-9b05-3aa412e0c783", "indicator--ba110675-a7af-49f0-89da-04874b275de4", "indicator--5b4b2ea0-ecc1-4053-8ac7-1ba6913ce025", "indicator--e02867f5-d831-49d7-b0a6-f6bdc9be2455", "indicator--f3998e21-eefc-4953-9b2f-177f6bea4845", "indicator--516167cf-df67-460c-92b7-309bdb356be6", "indicator--ed2bfd37-3c8a-4b2f-9512-cd8d4742959d", "indicator--d701e5b1-815f-4dbf-942b-3dac12b966b7", "indicator--32ce1942-b972-4d04-ada4-7086b0b37f3e", "indicator--c1792988-6482-4aee-a80b-42be9f50b57a", "indicator--b5eb4af2-ebc8-48c0-8103-ff25cc7dd655", "indicator--13fd4851-1169-4ee9-9c52-30175e11a01c", "indicator--4e830151-20ae-467a-b412-dccd39208b24", "indicator--e0f5b253-fb69-499c-bc07-adf8d2b26003", "indicator--47d611d2-966f-4f94-a97e-848ed744a152", "indicator--e1e2796e-5baa-4b7f-aa5b-9e8610448b85", "indicator--96b83993-17be-4c28-8e65-94f24a955401", "indicator--48c83ebb-627d-4265-8f48-ea10fa9d01ce", "indicator--1398e658-0579-408f-9c37-5e967c284e09", "indicator--f6d85de4-ba5f-4526-b06a-81be1b6b24ae", "indicator--9f845e1b-f1e7-4b6e-9a0d-a29311ebdd0d", "indicator--ee68f622-8eb9-4dd5-9380-22db8aab5344", "indicator--ac3ddcf2-a278-424d-ba7d-35a59bd16fb8", "indicator--d81cc3d1-c637-49ff-8612-f0185c0ea53e", "indicator--7979d362-cc81-4cab-b564-ceece1181d59", "indicator--150f1868-767c-4c2e-afd5-d686f9c08a49", "indicator--5316da02-62a2-4f05-8cfc-18651f4d72ba", "indicator--732dff85-b5cb-40de-8b35-500371206712", "indicator--68d0d640-7a0d-447a-8b86-7fbb0ab0965c", "indicator--55e9574f-e55e-457d-8313-9d7cdac57ded", "indicator--c4a8ea68-5953-49a9-931e-310f604da876", "indicator--e6b963cd-5f85-4e19-a86e-10e729f272c3", "indicator--df5df6af-9d23-4003-85c7-10a90fc32797", "indicator--cf2610e1-45a2-4309-93cb-2a8901772646", "indicator--3121072b-525c-4607-97fa-8e67c14b0522", "indicator--404fda82-b503-43d5-b1d0-4be3a2bedab1", "indicator--3738f7e6-7b0a-4fad-a5b1-45de6ffefea7", "indicator--122fa5c8-440a-4a4a-beab-80b0bc42289c", "indicator--0779afcf-bf23-4961-ba6d-880cb5b05569", "indicator--df9dc150-d6d5-4462-afd4-3496ab2dbc01", "indicator--988504b8-9c7a-4865-bc9a-b451f48ff913", "indicator--b692e3f4-6604-4016-b2c3-5df5a6f806db", "indicator--3d3a389b-4b98-45ba-b0b1-dafdefee4487", "indicator--62ddbcd5-9d91-4400-9b56-e62597fb940c", "indicator--9ee5baa3-ed77-4eff-8332-5c5b24eca92b", "indicator--86a0592f-8b54-460f-9c2d-b5ab50583932", "indicator--04f288ab-c2a0-47aa-bcbe-de72d7775d1b", "indicator--b8280c63-57e1-41a1-ae03-9cbd4b18d945", "indicator--57997b45-ed14-4e17-a5a1-e6c091a852e6", "indicator--22862abe-b330-4f69-bf43-12df38dbb787", "indicator--eae75d59-5b4a-4fa7-bacf-0d0d32665f7a", "indicator--4ddd8071-7a9b-4f92-94ba-26386c64b62c", "indicator--e91bcf6d-f659-4135-be0b-826276f0da06", "indicator--2c435c58-75a7-414d-b223-74ef74d4bc20", "indicator--59983d56-34bc-48f3-8390-7a52304ddef6", "indicator--03c1c150-aaad-43f1-b479-e9a475b3b4f0", "indicator--93a5c655-269c-4dd3-8292-b5adc0b4a470", "indicator--822e2720-4ed6-4ea4-8ade-32f5f7a55501", "indicator--877729c6-6d84-453b-911e-347a57dad488", "indicator--5eb7135e-8c1f-4c9f-be02-b6802e2a6482", "indicator--2d2ab7a5-faf3-4453-b9f1-9c1a20a1b97f", "indicator--b68934b8-3bba-4fef-8c9e-09d707bd952f", "indicator--beb71ceb-6b7e-4562-b47e-c6edb50b8269", "indicator--c7d1f90f-0ff0-4d67-8ca5-55f2075ef0b0", "indicator--a50d8665-73f2-426b-b0de-5eb5aecde54b", "indicator--f550e545-734c-4c57-bd9d-d68349a35f2e", "indicator--278ded78-d2c7-4391-9744-e3d3793661c9", "indicator--ad50f827-3061-4e8f-a14b-179da379e615", "indicator--ff660440-4279-4910-9465-2b152611c841", "indicator--95e609de-fa4d-461c-9716-031c5ee7162a", "indicator--7141f469-b314-4305-b724-d828d58b9491", "indicator--9bbecc82-d4e4-4df8-9a23-d06e654618a5", "indicator--b21a77ba-1396-42f0-a5d7-db41447588ee", "indicator--64830d9c-6739-4c6e-b0a6-702ad7c32f00", "indicator--4af3d2f5-1914-4832-a39a-01192bd5890a", "indicator--38948c5d-a1d0-449b-bc9c-a456540e1bea", "indicator--97279b2b-5ac6-45f6-ba58-f27988c93b01", "indicator--bdb37bbe-e0c3-4401-9929-c4c9ec3d4296", "indicator--9ebc1fe9-1841-4d92-a4a9-2ae3c88da8ed", "indicator--cfc68db4-4d77-4c85-bd0a-aeddf2b4cdb2", "indicator--a200725b-7d54-4b78-93b5-095ba57ad24b", "indicator--3a8bf645-3e97-4a88-85fd-7f9572220ca1", "indicator--8148f2e8-8fb7-4139-80a5-a5c4de349eb5", "indicator--98d3c602-4c62-4e2c-8dd2-6f1cdd1158b0", "indicator--27749653-58aa-4613-b463-63de08c16a41", "indicator--ccfd583c-9445-4c15-93c9-343e03b85701", "indicator--f9903446-044f-490d-99aa-e43143cb2910", "indicator--936fbefb-b6c8-470d-8dbc-6a57dd149f32", "indicator--96aef7d9-5e5a-4af8-8eb0-c5961c9b2f8f", "indicator--41cea369-8554-40dc-a7ba-6bc8e708e27a", "indicator--a14835cd-f63f-46f3-8b85-0da213bbd438", "indicator--0291d52c-587e-4e3d-a463-14a3f928aa6e", "indicator--530cb0c9-e9df-4b1e-adf5-c2022f93cbf7", "indicator--bd90af8b-2baa-45e1-89b1-fb6a6641c6e9", "indicator--26c5107f-bc75-4a78-af70-a4e25f7d2f60", "indicator--65fa1f9a-819b-4441-b68a-f4d7a952c02d", "indicator--0da0d298-de33-4d7e-a450-c34946893e0a", "indicator--fd59985f-e594-4a9c-8ba4-08f6b64e884a", "indicator--58dc9ba6-254d-4b18-bca0-d55975cdc1f9", "indicator--c0ce8a5c-99b7-499c-97c0-27962aae65e2", "indicator--a325de6c-7ed5-40b1-b751-571b3fa25d54", "indicator--8d0c19aa-7702-4916-a67a-7840f8dd7884", "indicator--48b9f06d-4648-4d62-8b1d-4151108cace0", "indicator--446b726c-02df-434a-98ee-96b5ef603bc4", "indicator--ac7bdaef-8563-4c60-814f-3b6dce53868b", "indicator--3943aa17-b8b2-43e5-b48b-16575a3ad300", "indicator--d8a43507-8ef7-420b-ab10-204cc6fe6495", "indicator--5779c505-f87c-45b5-a6e9-ce551c07dc96", "indicator--3fdbc106-3d97-45f2-89fb-f230677d899a", "indicator--7ade8ec1-b929-4163-a1f6-67f00e78407b", "indicator--70fdce42-d0c4-4c50-bf7c-86a273f2ac7f", "indicator--1562e5bc-74f9-4d28-8983-515c7fa9ebda", "indicator--cd56db90-8ccc-4951-a798-c0ad70a3e8ff", "indicator--dd35bc87-3637-4273-aac8-3ff3028200ac", "indicator--b147f9dc-a13f-4e58-b2ce-73707bb9dc00", "indicator--8567e0cb-133c-459c-9093-97fd8b7e1846", "indicator--ef5443e9-6764-4226-8e0f-d94ef70b4ade", "indicator--4af323c6-53c7-4cb6-bb15-ea5cf7f9e729", "indicator--e425c388-0a6c-49cf-b76d-13d36f5bfc98", "indicator--d6b789a2-4587-4640-81d4-2e4f66636e13", "indicator--f9a2be58-d612-4ab0-a8ca-6c705d3dc1f4", "indicator--9b63fad0-d121-437c-bc0e-55a7dbe0d0c3", "indicator--1a3b7659-15df-48c5-8704-963787481f23", "indicator--c9633584-235c-4fef-b216-b4856be97ebe", "indicator--fd333269-1a2d-4f37-b5ed-141e38fdaf5f", "indicator--5389f42b-b3c8-4aa9-b809-5069e800fcd3", "indicator--b56fc32e-42db-40fa-b1cf-9aa58f0c0f1b", "indicator--67c31d0a-c082-490d-aeb6-df14ee0574e4", "indicator--4d39d2f7-9f7e-46f5-9d41-de6800af251b", "indicator--baad7858-6339-42eb-9bca-8afd36794f1e", "indicator--1c4702ed-e0f5-46bb-a5be-0df285fbc925", "indicator--5f7603d5-49d1-4be0-953c-a80d17809e94", "indicator--3b8adfce-b6f3-41de-b66d-4d90805e2769", "indicator--2c31a38f-cabd-493f-a8d2-15dbda9d8f62", "indicator--bc24e6a4-9951-4aeb-b3e5-d6120c40e745", "indicator--a30e87cb-a937-4170-bea0-ad7fc41caf5c", "indicator--bd700b46-8d29-4312-bcb1-715ce8b58441", "indicator--cc60d1ed-9b74-43f7-a673-3e7a6c22c725", "indicator--ad2bf0ff-cbca-45d6-ba00-dee6eee448cc", "indicator--83f03199-308c-4467-9fc2-35b428ebbf29", "indicator--e8b39447-0111-4475-945b-dfe8b7e1dc10", "indicator--4a535a87-dc41-4331-b437-f3b3d9306c9d", "indicator--fd466aa8-7305-4e5f-a3db-dee4f7b39b1b", "indicator--9d05b8c7-c739-4a4f-900d-13bd05c3087f", "indicator--962fcf38-0622-431f-a863-14cd761fef5d", "indicator--cd4da819-5032-43b5-a6d1-4f4d888c548c", "indicator--6d3b4c2a-8fb3-4a43-9aff-fc0c8d00c8cd", "indicator--86ca8501-16a6-4445-a933-17933b13ca5e", "indicator--6713cdf8-dec1-4f1f-b31d-9706f9b99f63", "indicator--7c5442c3-7892-4d66-8de5-5c307231ed05", "indicator--09162f33-16c3-4027-8707-3b36dd8b3025", "indicator--ab3b5b90-3912-4bc2-8b52-3e0989440d06", "indicator--a6046ad3-722a-4d41-b5da-b1d8e1bbeef5", "indicator--845d7f5b-0dbd-4594-9015-47afb113b565", "indicator--6843749e-1405-475b-b748-a42730929936", "indicator--5538444f-9418-4f0b-8176-d6f14110434a", "indicator--bbfccb96-ba71-4009-8142-cfdc588d6cdc", "indicator--7a0c5232-58c4-4f98-9f6d-f95c4e02baee", "indicator--df5d7a7d-261c-428e-96dd-05c19f6a0aaf", "indicator--4a2e302f-bd63-40f9-b3f7-ebbb38cff0ee", "indicator--14b2cdcd-0200-4658-b920-5690bc93db9c", "indicator--9e7539ad-d864-48d1-be4e-b5fd17abf1aa", "indicator--b4084617-23d5-4c3b-b952-c04ac5702d4b", "indicator--6442dd42-4519-448a-9860-3e86e42ef162", "indicator--7346e7d1-8d9a-4463-a1e0-e7116da421da", "indicator--b9d994f9-5808-4d35-98cd-63664398c9ee", "indicator--ec33bcf7-ae4a-48b8-9506-9e17305b3dec", "indicator--a54b8901-aa46-4ddf-a3be-6258cc4265ab", "indicator--f8084d6c-20f2-4922-8938-b1372d3e0ae6", "indicator--35cee13d-9f9d-474b-aa9e-73d2df7d0065", "indicator--c059575f-9fb8-4801-a164-b027c69fccba", "indicator--b516ae06-069d-46d7-9ac3-d7e573481e26", "indicator--34bb6488-ea93-42ed-b05d-b51ec319349b", "indicator--4ecfd861-7011-403f-9946-a3a127bdcbc2", "indicator--578d454b-e637-4f5d-a0fa-1380c5e11962", "indicator--682ac017-9bd0-4463-b5ad-75c3762a0db1", "indicator--4ef6b3fc-34f9-4444-b0e0-6c9db0cc626c", "indicator--f425fbfb-708a-4b28-a500-0b8511f61691", "indicator--541ddfff-0257-4a25-900b-7336614edb9a", "indicator--c5d40a82-bf05-4890-b1d9-02ad3b1c0710", "indicator--4cffe236-e783-4625-bab3-8fe7e76e31df", "indicator--8b721988-73e7-40af-82ef-a6f0d8c0fdb1", "indicator--6dca071e-5fa4-491b-be47-fd3d1d57f49c", "indicator--1b186910-e291-4985-809f-25eb183d92ce", "indicator--6d3c72a0-2b93-449f-9c06-7393ddf9316f", "indicator--7df3f938-504b-4513-bf8a-e5283ade00da", "indicator--9d66036c-09c8-4aea-b937-8d5a515631a8", "indicator--d1fabcdd-de3e-49b5-a7a8-40c16d201044", "indicator--6d5984e9-6bc9-4627-994e-aeb2618e5f2d", "indicator--b3d49bc4-fbcc-4011-b4bd-408539caf4f0", "indicator--cfb77013-8cd5-4907-b70b-861581424d5b", "indicator--41112f32-4da1-47c3-aa29-6602dd59aea6", "indicator--76629cc6-d614-481a-bdbe-9b26e83b5efd", "indicator--ee5ab2e4-a9ee-461c-9b4d-9a15e2f376d1", "indicator--6defa6bd-442a-4271-85bb-1e51ba22f2b4", "indicator--676713a6-8d1c-4ad9-8e4d-a31212892468", "indicator--bb241e8a-8350-4975-a1ec-ba0b1c861fd7", "indicator--5400c8e0-2e41-48fa-8943-47cfa4e382e2", "indicator--cfd5f2a5-af2a-4e31-93a3-47bac9a473d7", "indicator--aad538c8-a438-4ba8-9cbe-ad20e445b097", "indicator--3c167b4a-b759-445e-ba2a-20a7cb03e1a4", "indicator--121dcd09-368d-4736-8cad-394265485a34", "indicator--68f8808d-72be-4f20-9f39-dac173835e55", "indicator--4834a12b-be5c-46bd-ad8b-c91bcf4bec4d", "indicator--e1583fd6-61d0-492f-86d5-72763aa34e1c", "indicator--b7f08ab7-2a1e-4874-8a64-06fa440f2bf9", "indicator--7d4ac8eb-b502-458f-80d8-18ff0c1146d6", "indicator--2d44a7a5-aa30-4216-980e-4aa96e995e9c", "indicator--e5377157-2535-4b6b-ae6c-4e37b358eb60", "indicator--1f1ad632-99b0-47c6-9e3d-2b13d6f9e6c3", "indicator--d909e048-bc04-4021-bc9e-25e57890e5dc", "indicator--1c280b23-9fe1-4a09-90e8-557cfcdbbcbc", "indicator--fcf76ed6-6540-46d3-8ac0-2ccb26934431", "indicator--ac4028a8-1e90-42f5-bec6-bd4b77e43f08", "indicator--1d4e8ec3-dc6e-402b-94d3-56900d97a832", "indicator--5a8d5fa4-8718-48ab-b3ab-65400efce7af", "indicator--fbd882af-4041-410d-a42a-e57f7eb116c3", "indicator--669d54e5-a083-46d3-b500-835bddcfea10", "indicator--fa7f4a03-296d-404e-83e1-344e76c57eb5", "indicator--20d48543-0498-48e4-af3f-e51891add9b6", "indicator--2b5b7729-89d9-47bb-a4bb-8979e34b2f1e", "indicator--5ebee04e-03d4-425d-b6c9-15b156f94bc9", "indicator--f33ea1e2-8a14-4607-a63a-ec1794b4d06e", "indicator--070c01d1-58c9-4578-9cbb-28d47260fbcd", "indicator--43c29989-6b45-4881-a86c-54eff960124c", "indicator--4c2447c5-16dd-4929-8294-6659f7b99a42", "indicator--52164281-f6de-400d-bbb7-051ed4a04ac9", "indicator--6f1bbf0b-02a5-44e7-be1a-8770f111f0f8", "indicator--5831f2a1-1b50-4294-99d1-2911798772b6", "indicator--8fbec615-52ad-44e6-848b-cee1a011c1d1", "indicator--16d4a418-65da-4383-8b33-1da06b0a7571", "indicator--48075ffb-7833-43cb-a508-75d2259701bf", "indicator--5dd43ac2-1feb-4aff-a789-5d5c7117dab3", "indicator--f4c5a2c1-d2d0-4047-b3ff-bbd1fa5ce9a5", "indicator--a4a97cfc-d7fa-46e3-879c-1442e8530c2b", "indicator--cfd174ba-ac00-4892-ab08-fa83f4a15165", "indicator--cf89ad4f-1101-4ca7-a767-10e8a1c5bb69", "indicator--32e5f81c-7983-4e33-83bf-636bc4e2759a", "indicator--ef9d6c7e-13d7-49f0-a8cb-33ad0d7773a7", "indicator--50c3f9b5-9d81-4252-a1bd-04f657eabaf5", "indicator--8ca6f8ef-0d71-44c5-94f2-9b674a5ecd7a", "indicator--88604dc2-ab8e-4fa3-9d22-2c37c754bf1e", "indicator--f07dad04-475a-48bc-8270-0ca1ddb9a42f", "indicator--27a3842b-3a90-4db5-a5e8-af1c104df856", "indicator--d45bc8a9-dfac-4f84-b688-0bf472682bd2", "indicator--a3e598f9-514b-40b8-b798-3099029f5a1b", "indicator--84fe2798-e24a-4550-81ad-cf4333ea84e8", "indicator--5c01ab75-ac30-42de-9b6a-d6e7a1d22e5e", "indicator--471d9415-eb4f-4616-9376-c719ab005887", "indicator--3a669f9a-ff02-4b9e-b427-0d959f8901ab", "indicator--2f9f7ce1-33fd-49b2-a187-9ac70467dc4e", "indicator--3b62e1f3-a5e6-4fa6-9127-ec61ca9e0c7f", "indicator--4c97fb7d-06c3-4e29-bfab-aaf91a6a967a", "indicator--00feead0-6a42-422d-8f43-a6f6fccee0e5", "indicator--6e046c0d-f259-48c2-968c-8c6b3152f473", "indicator--659c0b1e-58ce-477b-b2f6-f238a2887dc9", "indicator--6e040af7-12f9-462d-b9fb-58ff1efc7fa3", "indicator--857b1528-c904-4815-b857-b079a6b6edb6", "indicator--a8cb5b58-df3a-4d58-92e8-eff15f4c9608", "indicator--ebd61bb8-e625-4acc-8a8c-e9dc9132a73e", "indicator--a6c95093-c841-4c6a-9479-6242dbe69d3a", "indicator--a1680352-8ee1-447d-bcae-7c3dca5ef6e5", "indicator--27d4cdde-9c34-4962-9718-d896b23ebfe3", "indicator--ae1aed70-44e2-425e-b9c5-24a3fc40e59b", "indicator--d22555ef-f381-45e1-b421-4737840dc838", "indicator--a8c3d2a8-e02c-4b4f-8811-fa527c71e39d", "indicator--fbd374f0-2a1e-4347-810a-12507d1a718c", "indicator--34a3d531-423e-4a07-a0c9-5027eb3afc99", "indicator--389b03a2-fe9a-4d09-926c-a29bd1ccd840", "indicator--6f71ecee-5d38-4ca5-b9d7-acbcf2cacca8", "indicator--8b73c63f-24e2-410f-b167-c9fdcf8ed2bc", "indicator--a8001011-1c57-4d11-9443-7fc4fd8a359b", "indicator--5335d5e2-9fb9-4d7b-aece-e091caa67ff8", "indicator--64e5d878-a421-4fd6-bc24-a7228d303a9e", "indicator--00c69f45-9c42-4c7b-b543-a553e09f9883", "indicator--787d00fa-129d-4ed7-84cb-ca899a2afd6d", "indicator--da0688f7-cb39-419c-939a-012198c04e34", "indicator--a22efe91-0f92-4878-b5e7-b2eb5c55d1fa", "indicator--c2b088b0-928a-4592-adda-3358d98c01ce", "indicator--500cbdfc-9342-4a72-9b2a-d3b25650e822", "indicator--33f6c06d-ed72-4e84-9d94-00f0ec568d65", "indicator--5206c717-b096-4f5a-b7df-974864a591e7", "indicator--eddae4b2-3015-44f5-b9e6-0ec80bd570e7", "indicator--6edc7b79-7f0c-4722-8ea4-b1856041d243", "indicator--a432652d-86d6-4313-8372-2e0060951bd3", "indicator--f6f9b80b-6c26-4a62-8f09-6b126d2a3d16", "indicator--1bf4a338-0e5c-4214-93a0-0fce49e025d0", "indicator--a5ae1aa8-58f4-4890-b905-d1f245e13537", "indicator--80c59c33-9791-47f6-86fe-a0a3c6b3aeaf", "indicator--0d87a6f2-b059-42c9-b874-bd5adb91352e", "indicator--b0859b30-8d2a-4ee3-b1bc-2be8f509c77c", "indicator--2628bb0d-61d1-479c-a0b9-327c8ed912e0", "indicator--6c5bda23-8f32-49fa-b59c-b005c4f28afe", "indicator--e1a1c495-825c-41be-8ccd-852905e9d942", "indicator--b48f24f3-eae8-46d0-b469-8923dc6b2ae3", "indicator--63df1519-ba3c-4a38-8bb2-1b65edf3c225", "indicator--20ae64d6-c2ab-4b7f-a122-a29c486e62cc", "indicator--c261ec62-2330-403e-9b24-6496153316f3", "indicator--af08fce6-0b1a-4795-9de7-769c0b5e4c06", "indicator--84ac0129-dc1c-4e41-9b08-097bfec659ca", "indicator--2d36b60e-06e8-48fe-a1c7-b19b5590e648", "indicator--aaeb531b-7cd0-4712-924f-aa9d7e1cb2ad", "indicator--ac9c308d-0c6c-433e-889a-daff86098ee8", "indicator--e589f22f-23f7-45d8-a200-db5bd2b625a7", "indicator--ea96661e-bea7-4ddf-bbf6-39ac6511246d", "indicator--be498a6f-a580-45a7-b785-8641f314ed02", "indicator--7e9657ec-7181-457c-8d0a-40bf0f8bc6b9", "indicator--9f9ff773-c163-43e6-bb0d-ec6f66b05ef1", "indicator--091ef02d-a44b-444b-88ca-67a9de2eec6e", "indicator--4ce4fac7-8b76-41f5-a097-e5a302d0a2c1", "indicator--954d0cd0-d2cb-4425-8829-f04d71dc9dd9", "indicator--12d938ab-dd4f-4553-866c-c3f6f949260a", "indicator--348c268d-336f-405f-ad47-66cdcc122527", "indicator--ed9d9a10-7510-420e-9904-7a2562a1cc99", "indicator--760fa9ca-1da5-459a-84d3-c72d713e83b4", "indicator--3afd8277-413e-4086-9350-468b1a980b78", "indicator--8ebc5fb1-914d-4d78-8cfc-eb4d7e68ecfb", "indicator--709557f4-0d6e-46d3-8c42-6bec2cce0052", "indicator--6931e102-7789-4bd8-8887-7b7f0a89e525", "indicator--e09a2d0c-5143-46c8-a741-495b32078bca", "indicator--7b0c33f5-c31c-44ca-bfdb-0bd5b222ed77", "indicator--fa48a654-6821-465e-95a5-1c548395f003", "indicator--8005da45-8283-4166-9755-5a1a69f026f0", "indicator--23894086-4e15-4c3d-ba9d-edd786242ab6", "indicator--6d1e8361-c65d-4501-b84c-358498665d5e", "indicator--6fa6303a-aa2c-4bc3-8ab2-453f5586e675", "indicator--fdcdb27b-a10f-4526-9f2c-3f4d207c7011", "indicator--b39a3197-59c4-492d-b11c-43304610b648", "indicator--da63ec99-d3f6-4e7c-a81b-fdc1b0147a0c", "indicator--1c158641-cb52-4f8b-baef-f999cf07260e", "indicator--4261bdd4-a20e-4190-9735-62a678ef0766", "indicator--d90f6faa-5125-4637-afc6-d23257955e54", "indicator--17ec8ee7-bbc9-494d-8580-f96b782e0908", "indicator--c4a27bfe-8077-4a27-b1c2-e9c721105c54", "indicator--287ac833-596f-4cea-abcc-5f973aa96899", "indicator--2894e338-9110-4da0-ad2a-ceaf74b23c92", "indicator--1e6f5381-7a6d-4aec-9164-fbddedbf3b67", "indicator--04751154-99d1-4ff6-9657-71b6bfb32e83", "indicator--ec9273e0-08b2-474c-ac42-8c5f95a4cc61", "indicator--ab46fb02-5d0e-4233-bab7-cff21ed3eed5", "indicator--3c1c46be-c96f-43fb-8868-07b6bb74ffa0", "relationship--67b81c38-40bc-4682-aff0-0959737a6416", "indicator--c9e534f6-3b84-413a-86f8-0d520ce7e987", "indicator--193a7be2-69d7-4a54-9595-988c57e0aa46", "indicator--4625a267-e97a-4cf1-8a85-bece37e5cb6e", "indicator--d963cf5d-af2d-46f3-a16d-9a3e61c14a8e", "indicator--af0b1172-2357-4839-be10-34b8557c6214", "indicator--104a3f1d-6594-4708-91be-346c475fa90c", "indicator--fbaca125-a093-44ed-8a15-139a96d169a9", "indicator--ef20a906-dc1c-4a0b-8c18-803b9541e409", "indicator--03728f99-dfae-4639-8f29-2ebd151d962e", "indicator--c41661b8-4c41-4cba-9351-2d30a8439f2a", "indicator--c27b6851-a661-4835-a70a-1b79b5682be7", "indicator--f00c6adc-e228-45db-8092-f01f466012b4", "indicator--dfeb8db4-cdab-41e1-904b-634a11e5bf3b", "indicator--7844f9dc-1424-49de-b421-ff100ab0c616", "indicator--6341971d-6a36-4f25-b96f-7c5156754437", "indicator--e38fad28-28b2-4a52-b747-9e8e9403adbf", "indicator--11f90a26-6506-4931-bde3-c0bb905f80eb", "indicator--1902cea7-c691-4bd0-a163-8eb0fa5bde52", "indicator--7e800bdb-e625-4004-8d7c-c5b62720b947", "indicator--cc7ce845-299c-497f-a3d7-96058dd3224f", "indicator--e54bfb34-07b3-4cba-b3dc-2e2164630fbf", "indicator--520e1e4e-e2dc-4507-beb8-c3e8ba8c30c8", "indicator--d3e07842-6f8c-41ca-997d-f73bca23e359", "indicator--d81b0a8e-766e-4ba0-95eb-7d2f72679212", "indicator--8b95e6e8-70cb-4e60-9a4c-45ec5622207d", "indicator--03d88593-03f9-47d6-a7a0-3a81825b3bfb", "indicator--a7a5cbce-e7da-43e4-a399-500ef20162b8", "indicator--82daccd9-0c8d-47da-adbf-919330489e84", "indicator--16dc3ddf-6d3e-45c5-9452-cfa2a8b3be71", "indicator--c159c962-61da-4187-9205-7cff4af04551", "indicator--0063d842-adf6-4bf9-9e53-3f12c3a7c82e", "indicator--c92b271d-fd7d-40c8-9d20-5f6a1a9bd46c", "indicator--9a564030-38ca-47a3-8b27-8667c1d30e1a", "indicator--46d29df3-97f8-4b51-8afd-dbc45a4a91b0", "indicator--7afb2684-f02a-4827-bb40-b64d4ea457a6", "indicator--7716c011-6a8a-4c0c-a89d-15a2241b1eae", "indicator--f5a654fc-03f7-4a24-a4ad-de02a5a3a9b8", "indicator--10569888-3fa4-4ec3-be83-81e057060e20", "indicator--03540422-a0e5-41c7-a8fa-ae5e6debaa98", "indicator--73c4b52b-2ff8-4585-bc20-d74b391d195f", "indicator--b8846cbc-2ccd-4baf-baa9-c525e962342b", "indicator--7ab41794-aa6a-4bf8-ac9d-aa35eea9a070", "indicator--750c7ce6-519b-45f5-97a6-c75cba662c51", "indicator--2cb989e4-02f3-4b57-bdc0-93e48733c7ff", "indicator--59108bcf-f1f4-44f3-8286-01041cfb3b02", "indicator--708dad8d-b4c5-4385-95e9-de565a4674c4", "indicator--fd32ee03-440d-40e8-9fe5-450643fda3ff", "indicator--77da802e-1753-4f2d-8f4b-4a77715994a5", "indicator--bf1e9946-8c49-401c-80d4-f58952a22b29", "indicator--d91dee79-f869-4080-9d75-462bf0430336", "indicator--52f0fd57-b4fc-447e-977c-798c224cab98", "indicator--99b01af7-57f6-42a7-b839-bd3c134aac3c", "indicator--c9e71e79-d484-49c2-b223-5c12fae7224f", "indicator--b5e1d021-3c27-4d9c-ac83-0fe512c3bdb7", "indicator--7485790d-fb6f-4ff3-9f09-a57032dd6e99", "indicator--e9b0e448-7904-4190-8787-d9c406002d23", "indicator--546d80f4-0322-4de8-a3b0-7139082b22d5", "indicator--c135f2fb-e2cd-4518-8796-0b4ad05d131c", "indicator--58cfa979-2f27-4cbd-be91-ed8b897c728d", "indicator--86fa948c-952e-44e5-8919-3bb930e23453", "indicator--dc2892d0-2c23-4ce3-984d-738457aea123", "indicator--348cec58-d331-4425-94bc-96f6596129d5", "indicator--147da42c-8bdd-4736-8d87-b4c4c6ba4e0a", "indicator--0faa3560-9eee-41e0-b558-37634fd3b69e", "indicator--c4c0cd07-2103-4d98-8051-d1c2b47ee585", "indicator--01dfb482-63ad-4d8a-b260-2de408efcf16", "indicator--b9b9f5e0-8fcd-4e15-986d-efc559c36a1b", "indicator--7594577b-802e-4903-b745-c8d3acb9188f", "indicator--5046fbaa-9062-4aeb-87a2-267c726a5329", "indicator--adf71839-7aa3-429a-93f8-ff6ce3635827", "indicator--875c8152-860e-4875-bfef-f80ef48ec252", "indicator--7fa6b456-4e1d-4065-9703-7d5f7c4d6fc7", "indicator--6fc122f8-651d-43d8-bfd7-a9ef6c0183f4", "indicator--964420ce-d015-4d8a-9ce3-b3096f063aa5", "indicator--95f32f95-4188-4e94-b851-3f58cecfd1b9", "indicator--76b1c791-9e5d-4741-a66b-3419e1ce1eb9", "indicator--82a52af5-8673-4f30-9d71-7fc2afec4288", "indicator--2cd79797-a156-46f9-b198-e5df7a418cd7", "indicator--4e39ea10-2e63-4989-b71d-6222a4c0fd4c", "indicator--aca9b34b-70df-45a2-a8d1-894a479287bc", "indicator--52cce5fe-38a3-465d-9c43-ecea8ec67281", "indicator--7ac4fb0e-9329-45fe-9f12-ff2c863428d6", "indicator--3c8bf4b7-6b69-4ae7-b069-343e9f6c5ced", "indicator--e77af6ce-994f-485c-a444-5be3d533aa2b", "indicator--1b5b889f-e91a-4b09-9be4-38df87842869", "indicator--473cede5-826b-4cc5-ad82-056846738045", "indicator--6b597f1e-cef9-469f-8fde-0d01452f035b", "indicator--36866f9d-8ff7-4b23-a788-1e5765c7fc78", "indicator--7bbec021-1a35-45cb-b534-b14c377245aa", "indicator--409e324b-c7b0-4846-b9bd-e50713d7fad5", "indicator--7f1ce4b7-8bed-4627-962e-e4e116e4877b", "indicator--958d3fdf-d3c1-49fa-9529-c73150e08328", "indicator--e31f8c76-0632-4fc1-84d7-13726dbbf109", "indicator--1cdc8e37-a5a8-46f6-8e3d-206a9e2f44a9", "indicator--5f94e9a4-bb51-450e-a665-779f2a08a369", "indicator--91e1f5c9-73cf-419a-960d-d8b1c240789b", "indicator--c1739129-b083-4a3d-8349-20206b2b8d55", "indicator--b4f84bc1-4c07-4406-8266-218298e88034", "indicator--b0d5a347-6f9c-4548-9fb0-bdc42f5304d4", "indicator--6c3a9723-a8dc-4360-a465-d5c9363981f0", "indicator--bf4ca924-f2ff-4444-a2fc-ef6bae359ce9", "indicator--824aeb42-1306-4092-a5df-ff808e12341e", "indicator--3c18227f-fb5a-46d7-a04f-d44ebc864d85", "indicator--b8019434-85ae-4532-b36a-5bf727fb30b2", "indicator--f5e42b3b-6b3a-4304-a198-67a7cec9807f", "indicator--61e7f715-43c9-4c43-a817-5d37b2b72774", "indicator--cebb70ab-b66c-46db-ac1c-6c4c521ece81", "indicator--1fcfec8e-68b5-4823-865c-8fc5bcd70aec", "indicator--f6d864bf-4a6a-4810-bbf8-d48e19f032cf", "indicator--4f52b19b-c485-48c8-9521-dbc3cd053f84", "indicator--8a79bf65-409c-466a-934d-eea16a02c494", "indicator--b8894dd9-b9d6-4081-929c-3184913aa91a", "indicator--a41b4f42-0224-4fb0-b129-eb5ae8213180", "indicator--dedd4f7d-bc7d-4842-bea8-e8c7791a1256", "indicator--3a05d954-c71c-418e-8bad-230fda4011e3", "indicator--f517f021-35d8-4213-adc1-54c81a7c01d0", "indicator--0d50487d-ebe5-4476-8599-29908642f737", "indicator--45226b18-7d47-4c91-a92f-24e8647b9df8", "indicator--451728ed-2d75-47db-82f0-d1d48928ed4d", "indicator--ee83f056-bcc1-48fe-bead-a2e5a1110e6f", "indicator--b4446847-c0c9-44a2-82bd-dfc3a0440f1f", "indicator--e74bc09e-1ab4-485e-bcc1-8ea3c5b28f58", "indicator--4027f838-6997-44be-aaa8-75ddd21a91a3", "indicator--d33a5b05-3ebf-4dab-98ff-89ec2f282ccb", "indicator--814ffde6-5301-4fa5-9d3f-67e8f41c7676", "indicator--3fb7a303-77db-412c-812c-4e0ce7a551cc", "indicator--e0624faf-c6fa-40d2-adf1-7c2ff6966edc", "indicator--12171e4f-0e7a-46be-b2f5-204290205d4e", "indicator--f3eb4d4c-1cbd-43e4-9c5b-bb81322e1a84", "indicator--84030ed4-a25b-4694-bdfa-b6bc1931eb3e", "indicator--7e165d9a-7ed0-4d0a-8bd6-8c5f9e61f369", "indicator--e2898a60-3e4d-493e-8705-bac0f43cb09e", "indicator--f8107069-deb7-4a28-a935-9f21fbb57c2b", "indicator--37eea0be-2b55-413a-8b43-52a6a1171668", "indicator--850ea200-2869-4af3-b21c-835379beb577", "indicator--69207973-5d5e-48e7-9d21-ae92407e517c", "indicator--281e0582-485e-4ebc-8e06-d582b3b4b41e", "indicator--64ff7810-8b58-47f7-b18e-d272a184f15a", "indicator--bcaa5380-26a1-479f-abef-a658b7a89b1d", "indicator--07ec59c6-77d4-46df-bc00-b2d0b7637769", "indicator--e5dbaf18-4b17-4d5d-a3d9-a8f92cbbad3d", "indicator--483090eb-5326-441a-aa1a-b4449233f79f", "indicator--9f4f39bc-4291-4afd-942c-b56e3bc7666f", "indicator--397c3bc2-7e32-4880-9edd-dc7ff9db17ff", "indicator--4b056956-86e3-4de2-a75d-4354f0dcade3", "indicator--d3969688-7ae2-4a8b-a9c5-697b7e06dbc2", "indicator--22b6d7ca-d16d-4073-81c9-7199ee60064b", "indicator--6acc29e4-2a5c-4c26-98b7-dff92e395798", "indicator--dc4fc8a0-a1cf-4f19-8a7e-b3ecd156370f", "indicator--92fb9eca-108d-43cd-8004-242318ff50d1", "indicator--7f8edd49-e21b-4fdc-be62-39b49e6198b2", "indicator--6e6d95b5-c70b-4672-979b-c94e1c0299f9", "indicator--6e48e354-decd-4dd1-8de8-171504314c6d", "indicator--a32a29e2-ee38-45ac-9eff-39c90a72828f", "indicator--13d058d0-cdf4-4531-9e18-4f48e4eaad10", "indicator--f0cc926a-39fc-438e-8d0d-589f92a5400e", "indicator--12e7b4f4-fbd4-4847-80aa-318351686df5", "indicator--94d543da-0f24-4f9c-af01-86cc5003f09c", "indicator--8cf3a010-c504-486e-b6fd-cc85f8683c19", "indicator--89aa05dd-db94-4334-a9af-30d6c2790389", "indicator--79bbb7ca-94ca-480b-be3a-e00931113589", "indicator--0a00a10d-98f0-4e99-8e20-de8609c9a569", "indicator--4369389c-1abf-4f80-a81f-a9dde084d321", "indicator--7bcad3d0-508f-4084-8602-b7c3b57554a8", "indicator--523f4dcb-1517-42e0-9b3d-cab508383f73", "indicator--a339ccf4-1d36-4a7f-be29-6106fb86e0be", "indicator--17f1ad47-bd6a-4084-ab0d-8c8e69c35862", "indicator--2209c9df-f8ab-401d-9a68-a730273f85a1", "indicator--1d1a781f-7e64-4b8c-8945-436694593c40", "indicator--c94b453d-0a22-4366-9bb2-33620bd14170", "indicator--e7318584-d414-48be-a0fd-d5b128e80c4f", "indicator--052e7a3b-4c26-439d-ac68-e8ba74caf0da", "indicator--20618cc5-e53c-4b23-8602-592bb19ec66b", "indicator--dbf2e73a-1e44-4f87-8a3c-a6eb7d5d587b", "indicator--2b0e8b01-1ff0-40b7-b0e1-146060dba8c7", "indicator--5beb2452-b12a-4b27-9c63-fc74843bfec3", "indicator--16a07fed-0064-446e-9f00-ee413c44d253", "indicator--fe317b18-59be-4fc5-a9bb-cc97a983ad85", "indicator--f075cd6f-0b5c-4f37-a908-c8a45b9e8c67", "indicator--907efbcc-d9c4-4512-9304-3575332c9622", "indicator--28eed2a6-7ad8-4efc-949b-68a18021d2f3", "indicator--e8fa19d9-075d-4cd2-be3c-479ab07154c3", "indicator--7e0b09ef-4795-411f-abea-b09e8df022f1", "indicator--2f6a61a8-ab61-40e6-bca5-b7abed163904", "indicator--4760877a-acb5-4e54-ba1d-6b298cc426c1", "indicator--2845ecac-825d-45c1-81f3-2301d99dcf90", "indicator--5c346e5f-3cce-46f8-9a53-ee73eea21d40", "indicator--c974505d-6f46-4941-8cc8-c357b4e13a33", "indicator--e9f3a36f-047e-40cd-8c7b-2c64b666b2a8", "indicator--4d084256-847f-42d3-9a66-cf65a05ee4ab", "indicator--f5db485f-a6d0-4775-82e5-d7323030933e", "indicator--18401edc-7b86-419f-9dad-469b41ea9aab", "indicator--6e8fa392-c918-4e61-b5fc-cd416245e5c6", "indicator--21222601-6fe5-4f83-bd8e-969305c74272", "indicator--42533508-08db-41c4-8db3-4533ac283f78", "indicator--0a314939-0c09-4247-8af5-52c424b99a27", "indicator--01b8a2e5-b767-469e-a645-5cfa28191256", "indicator--2e178e0a-4870-4d3e-93f4-2caa1053b91d", "indicator--f3ed9989-b808-4922-864c-86bbb000f1f6", "indicator--b90f5a43-c209-479d-a918-96e00854e21a", "indicator--1fa9a7d4-e4e6-41c8-98b7-d042f39f1e97", "indicator--cce62c1b-3532-4a37-9e9b-b3731e19ecc8", "indicator--e1da02dc-edf3-41c4-8c15-10dee69eb3de", "indicator--145b94d6-a883-4473-9ba5-13a642a858fd", "indicator--8f46a5c8-8fe9-4e5f-b132-3e7064daa88a", "indicator--d405e310-ae93-4144-85dd-91bff00cd423", "indicator--16c49c1f-3c5e-4a13-8a94-10295442d207", "indicator--1c0c7c04-691a-4e18-8f9d-5291b7adfeaf", "indicator--c221dd8b-a4a5-418a-bd19-307bb7488732", "indicator--9f3615fe-49d7-498c-a399-267cfb0590cf", "indicator--261e2701-f4ff-4711-8dc8-4c520530d181", "indicator--7315d00d-c1a4-415c-b089-4e775e2dfe65", "indicator--884466c8-e0f4-40fc-8717-84e1c13efc2e", "indicator--e9bef60f-f06c-4889-a2af-6713e0d77b19", "indicator--76668746-b252-41f7-ba88-9847a44b6bb7", "indicator--bcdf51b9-0662-402e-afb0-a902052fc69a", "indicator--cbdebf56-7f16-4ff9-bf70-42461af5aae4", "indicator--e4f0dfd4-7ad4-4c37-8ada-4dea6bcc7b6c", "indicator--65b0f550-433a-4bf4-827f-a927b1c65185", "indicator--60e79183-537f-417c-8587-02b8b74c6e64", "indicator--b6b92733-c2a7-4197-8fb0-60d26350f6f0", "indicator--a6d9556a-368c-4859-abde-ce117f5c857e", "indicator--5fa3a95d-de65-408d-a1ea-ebd9c6798ce6", "indicator--f9738c99-b340-4f89-a750-b090fcb9212f", "indicator--210ea0ee-f927-4b4d-a124-92258f8271f3", "indicator--5d1c8d67-b9a5-4213-ad43-c270a42e84a7", "indicator--d3e1d36a-27c4-4695-8459-261053333b7b", "indicator--ad7debdc-477e-4ca4-8b30-d540f37b8f58", "indicator--c5e80057-4cc8-45b9-80e5-e5202a1e6cf4", "indicator--6ead6657-b536-41b8-bc63-580588a42c24", "indicator--d9243489-cddf-479a-af4b-1b58aec80ad2", "indicator--66bc1372-01b5-4dc3-9518-0f244d3271e2", "indicator--66f0c74f-e17f-4dfd-a7eb-d67253bdea93", "indicator--773a5e90-17e3-4714-8165-cf00e868153e", "indicator--326da7a2-eea2-47d7-8609-a0571baea744", "indicator--7a4ff379-16a0-4a60-a513-a9ef3c722d60", "indicator--812babc4-42b2-4c18-987e-10d20578d4e7", "indicator--c5f4955c-8df7-484f-9525-938fb2261f07", "indicator--5a87c8cb-083c-4bef-a5b9-756f8a5b87b3", "indicator--95fe5888-0411-4a50-a9c6-3b55dacd9cf3", "indicator--0da0185e-5b0f-4e4b-b577-af4934e31e01", "indicator--7bbd3497-3771-40e1-a7cd-6ce916330c85", "indicator--ac1c931b-018c-4c88-a237-f71f61831f24", "indicator--6ac706e9-ee43-47f9-a2cb-0b6ce6016c6a", "indicator--003010be-6499-413b-9b71-57b9e8d41862", "indicator--a637b4bf-26f0-4f51-addf-a2405d6cee3a", "indicator--1a5df659-bcf6-4739-a5b8-0dde1ad63fb5", "indicator--3ec01457-1eff-4f86-8521-6fe669171e84", "indicator--2c4f3f5d-4d5d-41a0-a088-472b3d3ff482", "indicator--6f6426ff-96af-4592-99b9-1933818e636f", "indicator--c491ed85-262a-4bdd-b136-1d041463edeb", "indicator--838309e5-4dad-407e-a382-642093f24766", "indicator--10f00965-dbae-467b-b9fa-e21ce64a01f7", "indicator--7988ff76-49c3-4284-a316-9b6eebd7ebce", "indicator--bbf3f529-6539-4fc0-ba85-263f95935f83", "indicator--0bbf4eb8-d5d9-4e6c-b550-1f0375e53c93", "indicator--a3b2fc92-48ca-452a-9f4b-a2b309479579", "indicator--42e9393e-f1d0-45a9-be7d-e2ba995cb118", "indicator--5d176bd5-0285-4498-8e59-dde4308c9640", "indicator--f4bdcac4-f4ab-4596-98b3-fc0d6b8eff36", "indicator--3fd17fa6-2f32-4a5f-b503-292adc4ee402", "indicator--0fb7eef0-69f1-48aa-b05a-5513bf45ab12", "indicator--a0622511-f544-406b-ae9f-53d8b4fde6b7", "indicator--5475a657-8aed-43d3-8a75-432cb6d80020", "indicator--cbf67d2a-7b66-492f-8e5b-5db8dee5eaa5", "indicator--6bcddf4a-5df0-4760-81ef-0b8ecf87611c", "indicator--338f8e02-ccd0-44d5-9576-6696c8ecb748", "indicator--ebcd0838-5591-4286-8a59-7dfd0e492a2d", "indicator--5668a2fe-d2e7-4245-a09e-16c90dd1fd4c", "indicator--03848ab6-109a-4a0f-aca0-8a5a95856e09", "indicator--dee7c0b2-72fa-4f6f-87f4-1114a80aa26b", "indicator--fa9c5cdb-3a76-4c59-bc41-d0670edb4551", "indicator--2754ea8d-21d4-49d4-a4a9-9e1dfc0c827c", "indicator--67af980d-623a-4ff1-b66a-bb35682dae39", "indicator--b817d263-1558-4a31-b551-c2deea36eecb", "indicator--d452a175-5a77-4271-8b0f-c4db966e461e", "indicator--ccc2a43e-e4c5-49c1-8236-db0406e1beb4", "indicator--c29258dc-bb9a-441e-8519-bce2649b6a8f", "indicator--bfb73933-442d-4cb8-b0c5-58b0b94b5073", "indicator--f8445737-2740-46f3-8903-6f4a2e308b15", "indicator--d679b365-76be-4f40-8e16-853c6d5bb682", "indicator--65a5aee8-6419-45a0-913f-f5b57658de5a", "indicator--3b929a52-030d-4b8b-87bb-c594d01fd609", "indicator--46b1b9ea-b2d0-4d19-a6dc-45937df27f1d", "indicator--d4d4dbf4-d955-4ad2-aa3f-3b7087c06b22", "indicator--43094739-aa66-491f-917f-e0cebc686ae5", "indicator--30e5d843-542d-4cda-8d0a-5275d6b2eab0", "indicator--9f0b3845-87b5-42b7-809b-0f3a94b74c78", "indicator--2ed34ed4-9707-416a-b11a-469b5459e11c", "indicator--590ed080-7c12-4fdf-b2d4-5f9116a2fc82", "indicator--763844db-7a3f-408a-96ee-3379e40bde2a", "indicator--06883354-edf6-43d0-a02e-869aed023914", "indicator--4f02c064-220c-419b-9981-371e20f84c5c", "indicator--1b784cb9-fe72-407e-8ba3-ca64d19927a5", "indicator--88d463d5-5821-400c-a1dd-7ab757a1e3ef", "indicator--7a0891f7-9d37-4390-b505-fea2997de3a6", "indicator--9abc48f2-0451-41ac-b067-99e474fa2618", "indicator--faed46b7-d754-43ae-b920-8c15f4505615", "indicator--ad5ef4ac-3288-4753-a8dd-776dde1fd96b", "indicator--a5d364a6-2318-4eda-9b26-e0cedfd3447a", "indicator--cc00ca68-f304-4283-8a26-18bf7460a0b4", "indicator--e88cbc49-601c-4362-b640-4c07bee09185", "indicator--ec804a93-7621-43fe-a731-2ab0a44a1435", "indicator--6e2624e2-6b8c-4c46-b2cc-b08c87e69e25", "indicator--60310052-6394-4d43-8a58-adae362744d0", "indicator--e7eff689-d55f-499e-a790-eaff74f3ea51", "indicator--5a121325-4672-4712-8daf-7d6db308535e", "indicator--caa21cd3-084d-4a3d-9cd6-d86c0dea21a0", "indicator--d17af847-ccf9-4ab8-a7b6-c7c0a026a6e4", "indicator--2fe223a0-6716-4530-8c8e-7fb6cfe527b7", "indicator--ad971628-767b-4666-a659-94cb29a3538b", "indicator--31c83d09-b626-4389-8df2-626af5ef0666", "indicator--883da01f-6f02-4e98-a710-f063d8f74453", "indicator--a4adf6b6-72dd-4e50-b3f5-727f1633f390", "indicator--0273089c-028e-401a-b230-ea6a5b194e3f", "indicator--b0fc1a8a-a9a7-4097-b97e-1c0c73fb62a8", "indicator--bd5a5af0-0b6a-486f-945a-0819943c9213", "indicator--51b2af93-dff6-4fe7-9ad7-aada30bb597b", "indicator--17904935-7ccd-4b91-b26d-a31350e28125", "indicator--efbfd188-f31b-480a-a922-055d11cb2f4e", "indicator--9a7a8f4d-6d97-4d49-bd7c-5bcacb662edf", "indicator--3d0d946a-d738-4313-8698-08ba6052298c", "indicator--b04a3250-4cac-4002-83d6-fab2fdaebc84", "indicator--7039fb0d-85c6-414b-ae72-8b61c92169c7", "indicator--c0bfa08c-18a2-4d40-b92b-809af278694b", "indicator--0f956b4a-1451-4fe3-b737-ec6e52a38e28", "indicator--accba0ea-6089-44b2-a67b-44595301ef27", "indicator--0aba6d3e-e03a-4bdb-bef5-c881a553fd53", "indicator--cedfe58a-a1bd-4cb4-a58e-6b25abe1aba5", "indicator--f3921859-1c3c-4194-a4af-70c6210e0b8c", "indicator--47beb4f9-4755-4098-97ee-960d92fdd79c", "indicator--d025bbaa-54c9-4fdb-b8ff-2cac7a2b4930", "indicator--e32456bb-3271-4e50-af6d-9a5cbb4c11fb", "indicator--d263bf58-3e02-4269-aa36-eb920e085f14", "indicator--95b082fb-7bac-485c-841c-e480806fa69c", "indicator--29f98e21-969e-4d15-b5f9-9670ecdb76c5", "indicator--2d25b969-04e3-4fdd-9b39-2e09827c7c71", "indicator--84ed7a38-4c2c-43e6-aa8b-cf801d541256", "indicator--c76b46f8-6940-414d-94bb-cc0771107104", "indicator--bb7ce6ce-1dc8-4aaf-867c-d7c3809cd8e3", "indicator--a9be9cf2-8ba0-417e-8d9e-2e42e1ed4886", "indicator--bc8c1aa7-045d-4c8f-9094-8ab1e852fbce", "indicator--a9c6eb2e-a563-4008-b3f3-fce2010a4d96", "indicator--884d955b-b051-41a4-8ed5-33d973d6c0c6", "indicator--39c10820-9dcf-4a71-b9cf-79c8ec6565ee", "indicator--b69b3a1a-8379-40c3-902c-b1337ef1a432", "indicator--72e9410a-5b25-4f3f-beed-ef00ee089b9e", "indicator--010d1c3c-5155-4891-ab73-d41f2e2a31be", "indicator--90b71c86-733d-416e-9c02-afdc652653ea", "indicator--36d3ab6a-bee4-443c-8d72-b767593f1e13", "indicator--48fceca6-12ae-4aa1-accc-579098b35945", "indicator--f89e24a4-b369-425e-bc5f-01aeceae759e", "indicator--a5255603-e5d4-49f3-954f-e5d23ab1525a", "indicator--446ee71e-a3a1-4847-801d-d46e6693b369", "indicator--66e8559a-47b1-4be9-9923-0917b38efab1", "indicator--cdeeb7c0-f662-4607-bab5-a5c9c4fa5672", "indicator--ad451fbd-e464-4980-ba47-099646d01bcc", "indicator--78e9bdde-90ac-4abf-8013-44621d54056b", "indicator--d9950947-1e64-4dc7-b490-af24a774d207", "indicator--3427b3c6-6f21-4be6-87f0-cfb536f75d6e", "indicator--ddec6102-f881-4181-b4a1-01e87f0323a5", "indicator--e402db57-9a2d-4b1c-992e-1cf562048434", "indicator--10bc408f-a812-4f02-a807-5a8ef58ce3e1", "indicator--c79aba9a-861c-4798-b6e4-7cb3d71f5a30", "indicator--03c9ec08-8c4b-4d09-a974-9c7086f9cd45", "indicator--4e7a4e5f-ab85-447f-a5af-7061ebb21e53", "indicator--a66eda70-79fd-47e8-a48a-2bb350509905", "indicator--dcc13145-16b5-42e1-9c5c-e3440a5d6790", "indicator--239ffe38-b065-443a-8f5a-84e2a91602e0", "indicator--c4ac6a80-e839-462d-b3e3-c5fafda112f6", "indicator--a95ecf3a-ff4a-4f54-b632-edcf3d732ea2", "indicator--e19eeab1-8716-4d10-ab35-2b6cbff914b8", "indicator--66e84884-96b1-45fe-8c40-39b505444652", "indicator--85227189-d5e2-49df-84fb-8803653f602e", "indicator--ee2c912e-88b2-4e1b-9079-9527ca232b74", "indicator--51e719ba-7160-43c9-84f4-5234917caf28", "indicator--835c6e0c-6fe8-499e-86d6-896b03a6260b", "indicator--2330de53-2e81-4337-8d1e-e66fb5638fea", "indicator--c1f6d29c-34b9-40b8-9c08-afb333cc0e66", "indicator--5e2a9255-3ca1-4f47-94f2-2bbcf7744d8c", "indicator--4946c05f-8124-4fd4-b687-fa6d93b37aac", "indicator--ba0f6198-536c-42bd-8896-a237d89d6a8c", "indicator--c2fd28d2-b374-4cd6-bb34-55b313912d58", "indicator--9f395fed-3cde-429b-a0d4-a811b3415296", "indicator--5a05e739-374c-4664-89db-b14afc8739d6", "indicator--7b5851b8-0eae-4a78-bdf4-78b746c26ef2", "indicator--4a2094d3-341b-4a58-8c5c-37042df0303b", "indicator--43c8d7eb-4086-4523-9f3d-d008d57e1b83", "indicator--0d761736-dce7-4893-a20d-1832caee7101", "indicator--b6229b6c-04e0-4016-9f31-5560261b4fde", "indicator--07ee30ce-26af-4e3c-aec7-3a3415e3016d", "indicator--374b2fcf-9800-4ae6-82f3-a010d93ec0f2", "indicator--ce63d52f-ea57-4cdc-8a7c-d8d9666f61ff", "indicator--d709b9b7-8334-404d-b778-900c4c125cb6", "indicator--25531140-7eff-4b20-96d5-89b7e0914a36", "indicator--7e40c605-a6b7-4bf8-b7b9-fdc16745bbc4", "indicator--3183be9f-31da-4494-abcc-c9dbeb31e815", "indicator--b9a69287-7629-495b-9d6a-fff87328d84d", "indicator--699c6c86-1982-4aa4-bad1-1af66ffeb5af", "indicator--0f1bb3ba-6d21-4893-88bb-d11ea74519a6", "indicator--759c6869-81c3-4113-ae69-bc83c8df28d8", "indicator--74267652-7431-43b5-b945-97cd4d8c8a3a", "indicator--c8968539-3d96-4ecf-b518-3ed02d2e70dc", "indicator--125948a1-f5c5-47f8-820b-9231787ae421", "indicator--b6480a27-176e-4325-bf4b-09d139af86ff", "indicator--9807b73f-0ad6-4b6e-ac2d-d6f6fe4daa46", "indicator--d25b4c37-b750-43c9-8c68-7aa04d34ccc6", "indicator--327b1fb1-6ee0-47a0-9b04-c5ddeb4dc7fe", "indicator--7dc2ae45-e6fe-4651-bb85-7bc7ca357315", "indicator--dbafa1d0-7a89-4533-bfec-0bb0b30cd370", "indicator--c72e4282-7b6a-47eb-8a8b-26f7ae563cdf", "indicator--36f923a0-45af-405b-bda8-2c0da7ea6aca", "indicator--4618b693-4788-4668-9f36-83e904d04ef4", "indicator--92bd9f4f-77c7-4ebb-aa21-4ad01881cb26", "indicator--84fcc857-320f-4166-9813-5fc577953a4a", "indicator--9539aa15-c597-489d-b505-f8572d90d269", "indicator--77336ef9-c5fe-4a6a-971c-1850221145cd", "indicator--e24acb1b-676c-45d3-9e3e-1d9c79ec1e35", "indicator--de75e311-3fed-4771-97ca-d9582e682677", "indicator--5ff2c4e7-8008-4021-8ec1-6ec06d62924b", "indicator--3d0887c0-05f7-4fe3-a9ac-f4e2c2ea15de", "indicator--79816fb9-1721-4882-8779-f01e40c98ce2", "indicator--dfb0d790-79f1-4a4a-942e-8a6b3fb736ab", "indicator--4d9f42f5-4ad0-4025-8319-3522f253e124", "indicator--71cba46c-8b40-4f26-bc81-e2c3a9f22a51", "indicator--c94ea23d-2109-43f9-aec2-a0ad37c4f400", "indicator--062f3267-8ac4-47dc-b00b-cfce6ac76d9b", "indicator--88c5f81d-83ad-4453-b677-676e7dfc36f7", "indicator--63572c17-887f-489c-ae28-6b3a930097d3", "indicator--db70fc08-a9be-4235-8412-199b728c2a5f", "indicator--a5e2bee5-c3ba-414c-b49b-37dc128459c7", "indicator--98596cc9-c3e4-4abe-b31d-9a5a96e8ae2e", "indicator--00b4b5d6-5d4b-4869-aa65-caa28e75055d", "indicator--76fee752-f694-4c3a-bb23-1075d31b5f8c", "indicator--3456f856-bdda-4951-b714-d4c30675be17", "indicator--2b915758-f98a-4579-a1fb-4cab5500bd3e", "indicator--77ff4c60-a2bb-44d5-a944-07bc62f73afb", "indicator--b0dfb6ff-e512-41bb-8a54-dc00cc94647c", "indicator--209cef79-877b-4288-9928-9380377441e3", "indicator--f6371457-8185-4dde-8449-3eae13063f11", "indicator--18af9dbc-56b7-4286-9132-b33b846aae5b", "indicator--cd6b7836-2ff2-415a-8ab8-d27254366129", "indicator--bb2de44a-e623-4dc8-b201-91603b116779", "indicator--7f7b8ef2-013f-4240-bbde-9739b05f7bb3", "indicator--484397eb-a7a9-455c-b8f1-5fa30ef524a5", "indicator--ca2ba974-a98c-487b-82ec-ae20b1281a2a", "indicator--748585cb-dc39-4307-8ed7-75992ab7a37f", "indicator--05e2840a-1b81-4e3b-92d3-25842d83cf3b", "indicator--a69c4116-4b32-408d-936c-e244dc3f90bb", "indicator--54838aaa-dd1c-4c97-90e6-cbb3e116c2f4", "indicator--b9e2d93d-1515-4cf6-9064-90cace885ed2", "indicator--e5db80cc-0a92-42e3-9077-f2e62ca2e3cd", "indicator--5becafe0-6a14-4249-8776-e7bde3bf7b58", "indicator--4543e214-9094-4a6e-9497-6f1f0196c4b1", "indicator--f8066783-68dc-43c3-b32a-9af16fa8837b", "indicator--c768bf6a-4c4a-4eab-9fc2-0337df5af794", "indicator--5712ccb8-36d4-40a7-82ae-98ddfc8af245", "indicator--014c4d77-96e5-46b2-b6c0-05d1cfa92f15", "indicator--75d7851e-75a5-4426-830a-56d94a3f9384", "indicator--d500653e-48d3-4c59-b7c2-ef979b4bb5ec", "indicator--ff06489f-58f0-4224-9042-64b1864476c4", "indicator--1742fcb5-6035-42c8-8eb7-d39e48e95514", "indicator--f506aa94-8a10-4ec2-9901-be88bc13699e", "indicator--0d77d853-d037-4c80-bc80-3c22889ec30c", "indicator--f1de9315-f04d-418d-ad44-2a3ff8bf962f", "indicator--b22f410b-e772-4477-93d5-91b69cda45ec", "indicator--c254257a-1080-47c7-b71e-8d3b870c1b0a", "indicator--4b1159d7-516f-440f-8866-1b57ec17e748", "indicator--31907180-4d72-4945-9e0b-f1efae54f121", "indicator--1a06db81-96ed-4509-a81e-c2439ae777df", "indicator--659ad974-baa5-4670-9397-545209978e93", "indicator--a2f08cca-0891-456c-b8e8-507251ca3aa8", "indicator--fa41e30f-3cd8-42b1-aa30-f1ebd417df46", "indicator--6e8f8d94-b206-4885-bc08-20b024f3469d", "indicator--7bf78136-3a5a-4806-9d57-6d631420546f", "indicator--92ec8756-5b04-4c44-a3f0-c33bff8e63e8", "indicator--54e3a7f5-d993-4dcc-b368-03fd41488a76", "indicator--abc7de49-74e2-40c5-af5f-6b6579be6943", "indicator--75bc0715-ae19-4ed4-920d-ceb5f02df4ee", "indicator--b979edfe-f517-424e-ae09-79c2352313dd", "indicator--ced28a9b-406e-4168-91f9-51cb401c30e8", "indicator--74abe4ea-cbb1-41fd-9a6a-23819562bf5f", "indicator--8e3a1e4e-f9d8-4b76-9a33-0478263d2ba3", "indicator--48453ffd-3193-46f7-bc2c-175a6f24aec2", "indicator--6bd591c1-14ba-4bc3-af07-18d4af33282a", "indicator--70f3de77-c0dd-4a33-9338-a153d5316667", "indicator--623c010a-9e45-4a1c-8686-1ce41f701c51", "indicator--60773fbc-87ed-4294-8f8e-ff4ca1b432ed", "indicator--65318ce5-4fd8-48e9-819f-1b9cc6f26fbe", "indicator--bf343046-9662-47f6-a140-e6c6716624d3", "indicator--3c53d74c-36d4-41cd-ab74-b249ac6e34bb", "indicator--50f4638a-02d3-4fae-8213-7c0ea9d75c84", "indicator--2c251faf-fc7c-452b-94dd-78fe9f4edd7e", "indicator--7b45351b-b6f8-41fa-965f-cceef07ad9d6", "indicator--8c740b42-73bc-4b6e-b196-c1eb5c18e2e3", "indicator--67f5d091-4f16-4376-9788-80fa61a6af8a", "indicator--ff308f9f-05a7-4409-8a0c-ff95a80da6c6", "indicator--57c45b40-a32c-4de3-9a68-6cd27af3ffb5", "indicator--7d88c6ef-8304-4a41-9731-dee123ec7164", "indicator--3f4695e6-db95-417c-be93-ac14cd66227f", "indicator--2558ea2d-1476-4dcd-a1b9-9c87e5322be5", "indicator--814b603e-9f34-4387-8178-8eeb0a957e94", "indicator--e1a828d8-da54-4088-9f6f-4382b0fd41e8", "indicator--a164bd0c-5e0f-407b-b1b6-6ea8e1567656", "indicator--e19517e5-aefd-4a58-83c0-b30de46e2df0", "indicator--9c9bb7d9-d12b-40c3-ab9c-faa4b3b7ec31", "indicator--8fb5f33b-2800-47a1-a656-ca3bf2e73d1b", "indicator--d9fbb591-5554-48e6-9286-c862aa41888f", "indicator--1857b404-0489-468d-a153-934847713138", "indicator--935cc626-f528-4207-ab14-81e443142d74", "indicator--ee69be46-16ff-4596-804d-64ca145edc42", "indicator--1e2c5368-5690-4aa6-a4fe-3479ec292434", "indicator--957d5014-634b-4db0-9630-52044ffd1e04", "indicator--f30c8eea-b9a4-4db7-bed5-fda30ffd0a13", "indicator--9fa5af2a-805b-45f8-ad69-b196f383a910", "indicator--4bad58fe-8858-4e42-8390-5dff8265b7f3", "indicator--d5a525ff-30a6-4b53-821d-6f16dcd3acdc", "indicator--03991148-f9b8-4ba8-981c-5028ee40bdff", "indicator--0475bd7f-6617-4419-ae57-2b523f056f11", "indicator--11f72199-e3fb-43c7-9f1b-0e275652f017", "indicator--3db7b4e5-4e88-43cd-8727-3661aabea560", "indicator--69320c99-2bae-4930-a53e-6058eccf3cff", "indicator--fc416f39-892d-4617-8996-94f64616c353", "indicator--734e7e87-5195-4fcf-84c5-e0e3c44d51ad", "indicator--4147bb5d-0354-45ed-a064-5d0abd61c7a6", "indicator--2d455d16-42e1-4ba6-83de-fbc750b0a52f", "indicator--6c906a05-b60d-4fd1-83c4-bcff23aaf5a7", "indicator--2bef19e0-2c3e-461e-99ed-a63407b75068", "indicator--360c7855-acb2-4a50-8d28-ecb72a9d9f0f", "indicator--90d6b61a-181d-45c2-b451-5c72ba001f60", "indicator--4d641eac-9539-4626-b20e-6ecf194bcd05", "indicator--1896aa69-ff0c-497b-b8af-8cb09c82318b", "indicator--2a6b643c-d084-4088-8cf5-4d5170acae72", "indicator--751bfc77-7147-41ae-95c6-486ff2df9a9a", "indicator--902b0ccc-c1b6-4b18-8a7c-2b1a85595134", "indicator--fbe8cc80-240d-457d-9155-aea240cc5b4b", "indicator--e4084415-1e7b-47c1-9699-4c559d096f1f", "indicator--d39b83c5-ba1c-4ec8-b2bf-ca70c3fde175", "indicator--9274ab28-70e2-4d1a-acf8-2eae170377de", "indicator--a2279892-f94c-4350-9e90-9a0b12d96f99", "indicator--8dfa5243-51e2-40bd-b230-4d548ee1da82", "indicator--47d00a42-d879-47d5-9d35-db4e8adeba03", "indicator--25441971-06f1-448e-9171-052c9e482670", "indicator--edda9f4c-55fe-4225-b122-e312b9ea8b93", "indicator--1f3ae017-0e15-4dbc-9671-d3421b49b740", "indicator--f8c35ef2-d2df-4e46-a0bf-3d4c5339f924", "indicator--fcc032f3-4f2b-454f-9643-5e4828c073a1", "indicator--545ab5db-44ca-487d-b96b-ed9f639448aa", "indicator--36dcbde2-c9f0-46cb-af4a-5f613545641b", "indicator--de3937a4-6e9b-47b3-91b2-37843ec770b8", "indicator--75118d24-406a-44fd-8243-8680f2b3a3b1", "indicator--e1cf27cb-1495-4bc3-9789-4ffd325e541f", "indicator--ecb4dba8-5eb0-47cf-adac-da8d99825361", "indicator--5ee1ad08-126d-4fb9-adcd-1bae70e2a332", "indicator--5a8d9252-0942-4d8e-85bb-5441528183aa", "indicator--e4ddba79-7591-4652-b2cf-ace52ba17ccc", "indicator--958cd815-f6c9-4e3b-84f7-b3ba9eb1529f", "indicator--8a874044-500c-4b47-a37e-a73466b72256", "indicator--a8117ce4-ad7f-4f1d-b698-ac63ac31e2dd", "indicator--c25763a2-fdad-47b6-8b08-ed814e3d674a", "indicator--72b47bbd-a7d3-4438-bf55-3e86d3db9c21", "indicator--5e3a7219-fdf4-410e-b093-19accce3ef80", "indicator--84840c7d-bd32-4615-a13d-88fe9894a906", "indicator--6693bfd2-1b3b-4402-a555-57e4a5a726bb", "indicator--e0f38c35-ca4e-4ddb-950a-66d4172c77d7", "indicator--4f0f127b-5165-4bd5-aa39-9c37e40e1607", "indicator--dee5a664-a85c-4e04-b66b-20b30b010859", "indicator--b945464a-5a7a-43a4-ba5e-760fe5f502d0", "indicator--4afb26d8-e021-4d7e-b869-6379f2d4a1b1", "indicator--d936bf3a-ce0b-421c-b646-3637c062db18", "indicator--27d48fe6-9904-4405-a7e1-5b79ea9aca2f", "indicator--a9c41d68-0c30-4c46-93e8-470fa9f1150c", "indicator--6dfc12f0-df33-4bee-80e9-18f1c22c8060", "indicator--346c81f1-0f54-45b1-b7c1-b455e4a5083c", "indicator--7313466e-c43a-4148-b4c4-c395d82ec038", "indicator--0433bc7d-3528-4d08-8a90-a00a32814a6d", "indicator--4eac8591-0d41-40b8-a6bc-f6ed6b26f255", "indicator--3e766b24-a8e8-42d4-b0ee-8639180ecc7b", "indicator--0cdc542a-b8f1-432d-83ea-78c70dcf34e4", "indicator--2828a1d0-eea6-4b62-9bd5-0e3e83846f3f", "indicator--866919de-ea30-4d42-9992-82192e1a3134", "indicator--88745e0a-c63f-46eb-8525-53748e91bcde", "indicator--be9a6bba-17be-4fee-8ca6-e343730a8a90", "indicator--ed4069e3-55a8-48df-b512-556f6378da89", "indicator--680b5c23-e37a-4056-a343-87196c92115e", "indicator--60c19687-cf0a-4cb3-807c-245f7189cbac", "indicator--4b70d224-92cd-4187-8ff1-87eafe2bfd2b", "indicator--d558c41e-52a3-4be8-8e15-1bd2ba0354f4", "indicator--adf550d8-c580-4ce8-b6ad-cbd0a04b448d", "indicator--71e60825-0fc6-4522-a25f-230ef3e7755f", "indicator--0c33c4ff-f4a0-44fc-b6fb-fb550967afd7", "indicator--cefcd620-ca02-4716-ba01-7cca3d418800", "indicator--248a88c6-5707-4d5e-8227-7e9b38b8f14a", "indicator--1cf18d1d-f49b-4518-b9f6-631071250efe", "indicator--0c9ff5eb-657e-4788-8394-388d731dbe2c", "indicator--b9bb1ffb-819c-4e6c-b71e-72dc6ec481f8", "indicator--20f9c647-acf9-44d1-afc9-157a992e7dbf", "indicator--5de1f835-094b-4061-b680-113c03b1ba75", "indicator--973eaa86-2212-4258-baa2-168ccf65fbae", "indicator--e347fd8b-7352-4cc5-9849-544da465d019", "indicator--6c6d01f6-3242-4750-83db-58e22e591401", "indicator--3ec8a4d5-8460-4152-9e95-c4ed5682953e", "indicator--bc1072b8-31eb-4150-91ed-10b9764b4a67", "indicator--d57b7100-bc96-44a8-a27d-b4806706c969", "indicator--47891171-f2af-42cc-9558-c02512671066", "indicator--fc804396-f8eb-4334-afd1-e0bef69ebcbe", "indicator--b32d8c32-369a-4ca9-b9ce-5ca1dbd5a472", "indicator--d0f5dd34-1a13-41ee-a2e7-1604268efb13", "indicator--8506f17f-4645-4d0e-bb43-c77c8206a5fb", "indicator--2c942190-4a3d-4570-8b8f-caa8ddd2664e", "indicator--87ca6e0b-42b0-49f1-86d9-e15c7d98b3c7", "indicator--6f377582-10ae-4f42-b444-5a8bc02c0013", "indicator--3e1cd944-c8c4-48aa-af51-65f6ea26e6d9", "indicator--45ace3c6-a17b-4f5c-a742-29026fd2185d", "indicator--8a1d7f6c-09b1-499f-a834-03555cacc6bf", "indicator--4f690ee9-dc7d-4627-b356-69651d1f23e1", "indicator--57a226ed-4e81-42de-bbd0-029a49f4ce2d", "indicator--3f3246aa-e4b1-47a5-9929-db669e82a4ee", "indicator--a6afd0a9-18e6-430a-b321-7317e55d7e07", "indicator--e971276b-3b4d-4792-b438-c05d4735f9e1", "indicator--6be6833c-bd23-4e5c-bcd7-ca6e3590338e", "indicator--44f6f4e6-68b3-4479-a3b7-052cb424f454", "indicator--63447e6a-8726-4653-ba5e-803ff80bf658", "indicator--cde0432f-cad7-4978-8e49-1abeb041d832", "indicator--14679b22-02ee-4e99-ac0c-79cdf89077a8", "indicator--9ef1a21f-14a3-4dd2-a5c6-da5b52ef4b55", "indicator--bededbee-8adb-44f8-9181-696587741c5b", "indicator--4008ad7f-0efd-49fb-85df-ad5a4b321db3", "indicator--d45b42f8-e109-4568-a969-105c850484ee", "indicator--0614aaa3-dc41-48bd-b655-9ba22a8969be", "indicator--5e9a87f5-13a0-4399-88a3-d4fe3aba1c72", "indicator--166da3cc-0b4b-4baf-a13a-0020d5621568", "indicator--a652ff2e-bb33-4d15-bdec-48614a17f863", "indicator--97a5acf9-dda9-43fb-8800-7ca2b9166ad2", "indicator--6fd9742d-b1a2-4582-97f0-cb513870c2e1", "indicator--5fa38f70-3ce7-4832-8191-61bfc3c498ed", "indicator--0611291f-d28f-421c-8df5-2c6832c52123", "indicator--d72079db-6ee2-4e1a-908a-d845f3cde612", "indicator--008e1672-c39a-49e5-969d-89ca3e7b45a5", "indicator--19ba7dcc-5cec-4fbc-8508-d84b21569736", "indicator--8c8055d3-378c-41fa-bc32-39092b15663a", "indicator--1ac78507-4cad-48cf-9c26-fab47094c5d1", "indicator--f9825a16-bb68-4994-9319-9fa50ada8ce6", "indicator--67f345c1-fe33-4718-8cf8-84c58d9090a2", "indicator--666f6f4a-54b2-45c1-9073-9688c8d316df", "indicator--f7d6862e-6d81-4516-b40e-574a084cd5ac", "indicator--ced0b29d-ac2f-4d60-b035-009360af0b56", "indicator--a7e242d1-92b0-4da0-81c6-5580c3a361af", "indicator--0bdc6d0e-69e8-4b5e-a575-949ae4aa69e6", "indicator--2ea7a60b-a329-4436-bc86-aff59fad993b", "indicator--92518217-2418-4fea-a0c9-eb41200349a2", "indicator--316b9c77-3086-4ef7-8a51-207b910aef02", "indicator--419aa38d-9746-4713-86e9-28d27220b0f7", "indicator--6feaa9d7-0233-49f7-b29d-e7cf7b47047e", "indicator--f500af47-9cde-407e-9a6c-74cdad731cc7", "indicator--a152cca7-2f55-42a9-ad18-c7536c2f6dbe", "indicator--e7b75c56-0f35-4798-9bfe-933cb9236311", "indicator--5ed46633-b630-439d-8439-b34d9bb72113", "indicator--3ef599fa-7e55-490d-beaf-d69386749ff9", "indicator--b271579c-ed56-4343-bbac-42d791bc95a2", "indicator--36afb8cf-125b-4715-945d-de83e6e94566", "indicator--a9b81027-4928-426d-9c67-e5fce9b2298b", "indicator--4b4cb797-9c9f-4b77-9090-9f7469c38fd6", "indicator--2385a682-9a68-4ee1-bfba-644e206496a1", "indicator--e7cb87fb-3ba4-47d9-862b-abc22f547b0b", "indicator--755e0a1c-8529-45f2-b08e-ae3578312b5b", "indicator--3c1ce025-3a61-4e9b-8a53-b138f239376d", "indicator--84d4c0fa-3b1d-4e75-81b2-077254b459e1", "indicator--78809d16-5e9b-4247-8bcc-49a336ca3931", "indicator--1da11e11-5bb2-4d7c-802f-30eb03691052", "indicator--34b9dcfe-2054-4bea-8d0b-1081c07a2880", "indicator--a151a16b-0e19-412f-aa59-b223c89b1bee", "indicator--df71cab6-daf1-4016-a9c6-1ed15ce1a7ef", "indicator--cf40f7c5-72ff-43c6-817b-a9abb9f8c9b4", "indicator--31620303-ebd6-42ed-a180-e14d70ced96f", "indicator--8013f188-d4fe-4ae8-8525-63f0dad01d30", "indicator--55c4ffe9-8a14-4bbb-8862-623f066337f4", "indicator--1f0f6c94-4aab-4dbb-9277-740d592d6ed4", "indicator--87371b8c-fb5c-4eb0-ae27-177837a2d0b0", "indicator--54db7a9e-f39e-469e-b666-7ab1cf174203", "indicator--88df9962-8ff0-4910-8b07-67fd0ee7b22a", "indicator--61f04a9d-c7b0-4b7e-87f0-e9c69bd3a361", "indicator--98b73082-0978-464d-9cba-735a045993b2", "indicator--238030fd-fc28-4299-8a20-76151c698b33", "indicator--f0b04be0-c16a-4e3d-8b10-99f9fce59f3b", "indicator--72fbef29-3eff-476b-98fe-95dd40b0b183", "indicator--dc16e006-5cd9-4c40-8ebd-92468efd1c64", "indicator--80ef4914-ef53-4d0d-bbea-b6d0be8c7a43", "indicator--0c1700b4-4926-4654-9ecc-1c4387265f8e", "indicator--d957bfa0-c963-4a1a-9380-95e8ba37b93e", "indicator--ab53b2c9-8973-4c1e-a683-da47f6df774d", "indicator--e060e7b6-7a16-4281-b7d7-83fed68861d6", "indicator--18f43b79-19f9-4201-b9c3-c6df8b458b4b", "indicator--e64c57e2-dd0a-44ed-bef6-7cb647ae20d0", "indicator--2072b7d4-e721-417d-b860-0d48779defe1", "indicator--d8f0294a-5cc9-4b2d-beb0-9bc0e6edaf1b", "indicator--7f335909-af5b-49f0-98ba-a0b329456675", "indicator--da893870-0fbe-41d6-847c-127b428a311c", "indicator--ebd1e80c-fa34-4ecb-81ac-d0da2d26f62a", "indicator--15e2b37f-01e0-4e48-9f8a-110d546c4c41", "indicator--c3679537-d1fa-4d3d-984d-e2a26fd928ce", "indicator--24b78810-1298-4401-9b4d-0a13b47da28f", "indicator--57ac50d7-f299-4376-950d-86d657ef6c17", "indicator--0e9d482c-fe15-4aad-9fa5-9432800cb17c", "indicator--bb569262-56cb-4aa9-98ca-a80fc2447297", "indicator--310dd68f-16bd-486f-9d8b-3c27d786382c", "indicator--bed69723-30ff-47f1-b1ae-abdec652b810", "indicator--ede8e0d7-7214-4a65-9ec3-9b0ad7bd1526", "indicator--1b8f365f-809d-4f46-924a-b703265bc335", "indicator--d0628158-2d90-41c3-af06-16aa22e9c0db", "indicator--7d76fc27-8942-4c2d-a225-dc12916cf9a2", "indicator--cfd7fc1b-b104-4e3a-bbee-fe83f8fb946d", "indicator--19b1b985-a69f-4065-a2cb-842526e7fc77", "indicator--27db239a-1630-49bf-91b3-effced5ec221", "indicator--4e38e368-1b05-4816-80b7-d11aad09ca52", "indicator--db86febd-29fa-4400-bf53-a5a3d3ec60b6", "indicator--a75addcb-befc-4166-a1d2-932328318182", "indicator--49c4d74b-e6d5-40e7-b175-2726e9c4780d", "indicator--953fe88e-a3c8-4aa8-a5ba-72829cf646b5", "indicator--e927c2e1-c0e0-4d95-8ea4-1e2c0d98c3c5", "indicator--7485015d-5e84-45fc-b1a5-d9a49313da25", "indicator--a15c7fe7-7508-49c9-8431-0bffe3ff8ff9", "indicator--0c2da826-4d1a-4128-abe4-2dcd13258c7b", "indicator--122d40fc-ab0b-40c1-b7d5-8a3aebb01684", "indicator--961bb070-1c56-48aa-98c3-b613bf0fd740", "indicator--bf684240-4f32-43ca-b0e1-d7825a8276b0", "indicator--25432dac-9d2e-40d4-983b-7a75a20c255b", "indicator--44151539-a65f-41d2-8a36-47038cc6c805", "indicator--1b4ae49f-3d9c-4276-989f-ae3dc99948bc", "indicator--44889f26-d9dd-492d-8bbd-bdc4d9e9b89d", "indicator--b34365e9-902f-4994-a054-d44f3d863bde", "indicator--0558fe3f-2382-424f-b07b-da321bce0a7d", "indicator--ee690ed2-49c7-4e39-8dc8-2648f99c54d8", "indicator--0e9cdcb2-b9aa-45e3-9a12-dfa16ae2640b", "indicator--4aecd8e6-eb3b-4b30-ad1d-53d8fc933ece", "indicator--f060106e-dc59-4639-8139-c7b7714cf6c7", "indicator--c80c426a-6dae-4eb6-8f81-11a4494b03ad", "indicator--0ef5e5f0-e4b1-4dfe-963e-09cd6711480c", "indicator--5871910c-5e19-46b8-8c25-507527873197", "indicator--3febf9a3-5797-490f-8ecd-a55c24b3d508", "indicator--fd7256c3-f4d5-493a-b592-7a0e50be4197", "indicator--805d07a7-5824-4459-ad29-964e3fc2e153", "indicator--1cd43614-4df5-42ac-8956-498cf5c7e0a0", "indicator--4a8c4929-354b-4871-abfe-08480c37cebb", "indicator--b553ec9c-7661-4a9e-8435-1a773583ac4a", "indicator--bda30015-8b8a-40d2-9929-779dbce029ad", "indicator--f2bb10f7-9c68-45a7-aa28-075c895a6ed0", "indicator--5dc782b3-1327-4db5-9602-54a69000eff4", "indicator--d880a489-91cf-4e56-95bc-67362050d00c", "indicator--923ad396-616d-4e69-b3de-d9845c579e6d", "indicator--b75b8c48-26f9-4640-9418-a7cffebc1103", "indicator--b730352e-a9c0-44e2-8d87-847da8334f43", "indicator--84d601d9-f67f-483f-b848-f9e4bcf6c352", "indicator--f71fa33b-1a69-43b9-88a8-b6c3ce66a079", "indicator--2c156c24-f1e3-49d2-b435-48452e7e1d48", "indicator--937f2eab-9c83-4625-ad9f-e7fe0aa29e54", "indicator--fa47a35a-cb6c-4ed2-95be-8e8868238589", "indicator--0731053d-4be8-492a-b347-9a1c7b7e8a97", "indicator--d3d8ca78-c17b-463a-92d5-401b2d005d56", "indicator--7b3498a0-5a33-435c-ad7b-19dceb0794a1", "indicator--138d1234-9937-4935-af1b-0b3ac418f79b", "indicator--b914c8fd-f497-4cea-925d-56643ea679df", "indicator--4b7550d5-fd2c-4182-9818-9813c37841b2", "indicator--2cd9e9e1-2559-4c0a-a5d4-469870a04723", "indicator--729a9798-d302-4b8f-a59c-8123dcf116d4", "indicator--3f292338-8f1a-427d-9380-9e77011b75cf", "indicator--b470c649-0489-4311-b224-7bd4808abd1d", "indicator--575594af-bacf-4228-8218-09b5cd5dfe82", "indicator--fb06778d-ab5e-4719-ae2b-50daac0d32d4", "indicator--53c811b5-0862-450c-89c5-7b608805bef4", "indicator--06d707ee-c745-4633-9543-59bfd3eff36a", "indicator--5be96d97-829e-42c2-a279-35384d6cf959", "indicator--b5fdccb4-21cb-4644-8d23-ad270c0562ed", "indicator--2eb1528b-7456-43be-aff3-797884a70dba", "indicator--7e609687-506b-4fa4-a452-685393d9af83", "indicator--52d1062d-cac3-473b-9339-ec4debbbcf53", "indicator--69b2cc71-2d95-40f7-909f-ce0a69f0ce44", "indicator--c7bf58f3-29a2-412d-90cb-b92c1b43a90a", "indicator--849f9b49-c678-4c7f-b5b4-0b6f42c6e445", "indicator--ce5d8f7a-4017-47c0-bd08-e713f674afac", "indicator--c98505f4-56f4-4e33-be6d-7dbe26414547", "indicator--1825de84-9bf5-4b08-8430-5115498c04a6", "indicator--7c64b155-64eb-4ca5-88c8-dfd5f4018390", "indicator--8d0908b2-8016-449a-b555-145b3b185ea3", "indicator--73bdb07e-4ad1-4951-a3c2-d59c470791a7", "indicator--64c3474e-f9c3-496d-be9f-89e44c469772", "indicator--3487aa02-f897-4674-b102-385adce56f12", "indicator--5ea2084e-22d6-4586-b3fc-ca3925ec3b1f", "indicator--0f255d5c-a719-4188-add2-c39c745a695e", "indicator--0897a58d-5976-4772-8589-05c843327172", "indicator--946c17d5-73b2-40fa-85e2-1e910d6fae8a", "indicator--556fa01f-ff6c-4920-b174-9377783bb36a", "indicator--11f27518-8aee-4c69-b36f-010c168d6590", "indicator--9bf242d9-5d46-47b5-90ac-38ccce1c15fb", "indicator--ecaa6a96-8437-45da-af33-8dc9c0d407b2", "indicator--70ab1a63-d855-416e-93ce-1b4991858bbe", "indicator--6e50f738-0a6f-4155-afcb-b9ab0491e82c", "indicator--bfb56982-0f7c-4d0d-b52b-16c4c80d082a", "indicator--22d9dc28-b534-4826-8079-90d427d45df8", "indicator--07014264-3468-43ae-a1ca-215b28c55ab6", "indicator--e428acdc-2704-40bf-ba7a-5092c370c79f", "indicator--a004bdd8-7475-4bdc-91a4-e45df5b7dcf2", "indicator--84579621-70a1-495f-8f39-a9c130a3ccad", "indicator--ec9c24b8-d0ca-485f-aa1a-c1ede61ded09", "indicator--40ba9bac-ad40-4d08-b384-b7f4e037417a", "indicator--93b28108-3f24-496d-a363-ec1dc2539158", "indicator--fff561d2-3e1d-42d9-ab88-e0e0cdc2bf08", "indicator--aa047420-59af-4c14-ac3e-08645cddef4a", "indicator--12b76155-e96d-4405-8bc0-513f84b0cdd6", "indicator--80172f23-5ebc-4be0-99df-c8463e098fcf", "indicator--37c07c2d-be27-4830-baf8-5b47a16599a3", "indicator--2ff6e3d6-f171-4468-a197-0dc3b2dbc746", "indicator--805a4d11-a678-40bb-9106-880f40803056", "indicator--867729e8-f7ac-41a8-b53d-df3e22c38af3", "indicator--31f381e9-765b-48e6-a16f-a9f64c2fb2bd", "indicator--5e7c5591-9c20-4bf5-8070-9894943cc8d5", "indicator--a1933d12-9b37-4ac5-827a-772da617f675", "indicator--b31bf0da-1d6b-46f6-9bcb-ef9c69847513", "indicator--507cb97b-3635-40c8-af8c-001b99793bc9", "indicator--db7346d1-ca0e-427b-9c3c-b45f94302b09", "indicator--4f2cd460-4281-4f86-b6fd-7620adf521b2", "indicator--87651d8b-d882-4cd9-a267-1147223faec1", "indicator--a2057bde-3bd8-4dbd-accd-b6175ddd0150", "indicator--ae785fe2-d198-47a8-8ddc-b59b7060777b", "indicator--9e0af2cf-dd1d-4b91-a58a-992237fc6ba7", "indicator--85d0f8e1-e482-4fdb-bc39-c8157e21945e", "indicator--4de88c84-c12d-4c50-8553-81bb8d566eef", "indicator--73c052fa-a38b-4a60-bc38-4e3c3df533b4", "indicator--2c222442-404d-46a9-81e4-96253279ead8", "indicator--04f66458-97af-43a0-91b8-259e4b4e8519", "indicator--bc040b2a-a0e0-4a71-8e41-4381bcfb4b91", "indicator--ccf0c7ce-afe0-4ecb-b7b6-8dc2ae84e9a3", "indicator--5e1aebcb-5dc3-49c3-8355-9f531edf7cab", "indicator--89fcfe02-f026-407e-ab47-3f325a63be1e", "indicator--815c6bbc-ef24-49c2-8b9d-cf6f642c1e45", "indicator--cf32b534-d717-498a-ab2e-b4577c592539", "indicator--42633a75-1642-491b-96be-1de711a66fe7", "indicator--1ee5f11e-3d87-4a18-85a1-ebd624d063c8", "indicator--09bf4d31-e3df-4d69-890f-6e52c95b6e68", "indicator--cf8b79f8-8cdb-4017-8564-0b719c0220a2", "indicator--f3b035df-2e47-4e44-a950-ec9f9c8fb7e5", "indicator--314e911e-5ad6-48f3-8967-c2f856c34e32", "indicator--855721cc-f1c3-451a-bdc4-ea3d73331320", "indicator--b93c0f1b-3691-4a01-b58c-a2a7552b8715", "indicator--e5fada3f-b1f6-4cda-a60a-fccfe15d3f2d", "indicator--0274a504-6d53-467a-85db-249dfbf9b735", "indicator--edeb712a-7e37-4026-9202-062fcfeaa081", "indicator--d98a97f4-80d6-47b9-8423-59e4ef58fd83", "indicator--cf868f2e-744d-4ab0-8749-304769a5f202", "indicator--3825187a-4cdb-473d-b2d3-65c1a7a04b38", "indicator--f5bee4c9-7afa-41b4-b2fc-f28a2df253d7", "indicator--a45e75c8-0d9a-446e-ace3-07bc14466bdf", "indicator--73ff5d27-b587-47f0-b1f8-e84f9d9f53b1", "indicator--f5cfbfce-91be-4dcf-9ce1-8674b63d9f04", "indicator--5ecd9f9d-f494-40d0-9ed2-946ef68a2023", "indicator--d31b5b93-a354-4c85-8139-275feb42515f", "indicator--ab76b1b0-592e-4e24-8219-40a37cdc41a4", "indicator--ad5fff8e-e6ad-47b1-8d42-c3998d540d46", "indicator--3b0b3846-ae1d-483b-910f-65b451d8d427", "indicator--ccd5f39b-6ad7-4a86-9e02-7088611acb93", "indicator--cabe2b17-7ccf-47fd-accb-7b44334df51e", "indicator--5d68d8a2-89a3-4e0c-a1b0-52989525fe67", "indicator--d8175213-5f80-46d3-b4be-713c40e7a665", "indicator--33b00872-57ed-4259-a69a-0a8d375b3e49", "indicator--9dc8e255-d2ef-484a-8fd4-0492145f406c", "indicator--78b4e2ed-304b-428f-861b-82b89d3db592", "indicator--f317dfca-19b0-41e1-b539-af73c5850807", "indicator--03d31b7d-d58c-484b-b2bc-9eb1eda2e122", "indicator--2477bb61-fae2-4366-941e-912d250eb87f", "indicator--8d37d54e-6b14-487b-9e03-4828761b056c", "indicator--6496bd9e-f140-485f-9b1d-4ea746337b87", "indicator--680e58ed-a4ba-4a63-ae89-2a3af98865ac", "indicator--b2513639-5f8e-4e73-a8dd-27ed14bee029", "indicator--1a3b779d-b8ce-4ead-bca2-d077f572d314", "indicator--f1b5f966-36cf-4805-b82d-ef5dc040a445", "indicator--bca17241-1244-4460-a6b0-a45d09025a74", "indicator--10118243-4093-4175-94ff-d41089849d53", "indicator--5188dbee-cef0-4d0a-ba7b-010394c5f198", "indicator--e3816578-b93c-4308-aa77-21fa838fed4d", "indicator--9423ae4e-5dc6-4911-a488-f864d83aeaf9", "indicator--bccf40d8-1cdc-4a65-b092-6c1a843d1998", "indicator--6a9cc7bf-7698-4647-8285-82ab4e3787ca", "indicator--34c9143f-6727-4cd7-9eca-f63857556ddb", "indicator--a7a0a5be-a7d0-4959-b65f-196aa4fb7757", "indicator--77e63472-34c5-45fe-b268-f4f60c762906", "indicator--205a40fb-c113-4064-a6f8-7ef2003ef01e", "indicator--f9db71f5-9740-4ce1-b24f-130caa423b19", "indicator--6254572a-b609-4b71-9491-352b80917304", "indicator--5378cf00-5d9c-4305-85ec-9b2baab2f510", "indicator--6d1852bc-14d0-44fa-8ae4-15bb4a120722", "indicator--02fd2d74-78bb-48bc-999b-85ba584e1a1c", "indicator--00a32e59-a67e-4106-aa34-1a80f3f528d4", "indicator--0e79c1a2-edce-43a4-8340-255d481a45aa", "indicator--da8a5dcf-9866-4a71-9fcd-99b89d323b24", "indicator--601ac7a8-5bd7-410c-8c69-8ecc7d4c192c", "indicator--165caf33-6af5-4504-aaa0-3dfd7a69efd9", "indicator--ef27084f-06b4-4730-831e-2f37ed798a56", "indicator--ac51fefa-5ed6-402c-89e5-f79afc000417", "indicator--02d31dee-9e89-4642-af71-f5b260caf09e", "indicator--a15ecfbd-2b14-4b01-9823-5a290f4c651f", "indicator--57b5e740-b01d-4e1e-8ba1-4ef55da1ab4c", "indicator--cd475e7b-ef4b-4888-9758-f41873b20ac4", "indicator--08eb3906-2463-4084-81bd-fc2b01c4b322", "indicator--9ef9bbff-74ab-4e00-a4ae-5b837f91bd82", "indicator--fad024a2-2eb0-4b38-84e8-1ac89042e3e4", "indicator--ebdb3cd4-6887-443b-abfe-9ae90ee6e2c8", "indicator--7bbbbca8-18c6-49c1-819a-e35eb9e966ae", "indicator--af81dea1-828d-4dd0-8c84-1764a4aa116e", "indicator--64184dfd-0d7f-4b72-a81f-cc164e8d86b9", "indicator--3a9b3310-c973-4a00-86b4-c3a6c2c328bb", "indicator--ced40692-4866-4886-af5a-df29d306a58b", "indicator--9b43997e-9ef4-4e50-bfbd-4a439b7127d7", "indicator--b7ab2d24-7b90-4368-9c97-a8e9244ae3ac", "indicator--d297dce5-4195-4a9e-b7c1-7ed2bb69d8f7", "indicator--2e6f5044-ee0f-4dd7-97c0-bf4d13252479", "indicator--87bd34ec-b95f-4835-a3f2-20d2086072cf", "indicator--0d3294ff-547e-4646-acad-24f70dc7eaff", "indicator--47165850-a8b5-4e27-b8fb-4df3e6b088ef", "indicator--f96ec133-efe2-49da-8487-8e0f0e516012", "indicator--727b963e-1ee9-4b7e-89f5-536590ddf403", "indicator--3e5861b0-787a-4cb1-99d9-f5095df418c4", "indicator--58a1a39d-2d45-4c87-9090-6b9a76da0e1d", "indicator--904ac9c9-4b82-4989-95d8-5a83dfb30e08", "indicator--cd273dbe-0aa8-4f46-9157-1f7bf5bfb29a", "indicator--5cffbd42-c3a7-471e-8477-fbf3f402760b", "indicator--69f49fa2-5a30-4608-9a56-206aa563cf66", "indicator--098e12ea-650d-432f-87aa-c4a74b5560f5", "indicator--08348802-bfd1-47e1-bb1c-80522fbfa229", "indicator--f4c623af-f826-4cbf-aa04-45de45796544", "indicator--8cd9b8ff-2cb8-4780-bba5-360bdd8e8b5e", "indicator--f99def63-2c97-4b0e-b906-c2c061596a8b", "indicator--85731c13-c83d-4e5a-80ce-cd7e1b4cadd1", "indicator--28bef902-2e8c-42be-9a97-4a69690992c8", "indicator--8d28a2d6-c7f0-4874-b7a1-8e549753943d", "indicator--ab9d90bd-44be-4f2c-b4f3-a2f750e0a074", "indicator--082b0e4a-57df-405c-bc2b-1928446d90ab", "indicator--2a963f4c-9912-4737-acc6-406f189abe8e", "indicator--9c481328-daf2-4630-b854-1168172e81ea", "indicator--09b8173a-5e69-4963-8d77-6d0ad25d2e0d", "indicator--9fe6164c-4954-4e73-a249-ad7451f55195", "indicator--7e9f0887-c088-441f-8978-8ad3664747ef", "indicator--cc606ae7-afdf-441e-9797-7ac8f1fddd34", "indicator--6a76fc69-dd56-4163-b685-80b31fc37bd3", "indicator--bd4d255d-596c-49b5-9110-8ff6d2d556c7", "indicator--8b221a0a-6f3d-4e9c-ae82-6b2eafcfc81b", "indicator--313eb5a7-4c6f-4a2d-863e-4247f87ffdfd", "indicator--6760ff6f-2658-443b-ba06-a8eff6036af7", "indicator--bedf6a0d-6d62-4b0a-acb4-1409d13acfda", "indicator--229b8769-cb1d-4349-aef8-884c7caadcc9", "indicator--0a2594f2-013a-4fd9-88b5-27daaa3abeb2", "indicator--a745b9da-ac36-4480-8e5e-17d6a0dd1782", "indicator--24246575-1a4d-46bd-82e0-d76131266dc1", "indicator--037f4e9e-0a5d-4bdc-bfca-bffd119aac5e", "indicator--18ef5ac0-452e-4377-bc6c-1d95429f9023", "indicator--990a0711-ccb2-402b-b087-e466e25e485e", "indicator--2c93d410-7567-4649-8f1a-3f91cb5657df", "indicator--a2a59c6d-1e47-47b1-8fa6-c1a1840bd94b", "indicator--aec39042-5095-433e-b580-440bd96ab428", "indicator--253e12ca-886f-4b2b-bd46-52a865d280a1", "indicator--e1c0900a-e2ba-4000-b3d9-21f33da1b179", "indicator--ec16e627-81f5-4f5e-9a07-55f448559e00", "indicator--eb2418f2-2333-4343-bb01-79a1cea7d517", "indicator--baf63e9c-1a90-4d27-b6bd-f0913686c48f", "indicator--cc9bcdb3-49b0-4057-9639-37016dd59bdd", "indicator--28fe301e-6a2d-4d8d-b34a-8793cfdda589", "indicator--9b4bf99a-b32f-4957-9734-c99345f62b7b", "indicator--9d3851da-7c9d-4767-b772-4c9bddfa4eec", "indicator--a3517d01-ece9-4266-9503-034ecfd1e8b4", "indicator--e30549d8-7d0b-4512-8ec6-9d90a8f5cf88", "indicator--1a517e5c-db7c-4bd6-9f49-20629cc14424", "indicator--779eb370-70e2-422b-a5b9-7e14f9557c6d", "indicator--c26881c5-23e4-4607-af37-15f6c6636538", "indicator--26c4d4fe-c1ad-45d1-bca9-42b92fb31018", "indicator--353f34e7-e13e-4951-97b8-f12a8975550b", "indicator--b658d9f5-eb1b-4b0d-b79e-545089cb1491", "indicator--7cc6ce30-499b-4f54-9b44-6d81c3065cfe", "indicator--72129269-2a37-40d8-8859-44f8230894f3", "indicator--8a448c63-8fa4-42de-9c0b-847992bb0962", "indicator--ed23ccfd-4503-404d-b5cf-ef4ea79e825c", "indicator--f7865453-f974-4fb3-83d6-c0b29e96e5d3", "indicator--86787d01-8f9a-4e2a-ab8c-c6e536bacbc7", "indicator--6f3ae87d-f152-4081-8a56-2427588e4521", "indicator--9dacfee8-3bad-4feb-9129-94804249f584", "indicator--ecabe129-8860-44a9-b7ab-2311d6a65a76", "indicator--9aac942c-a210-4fd1-ba46-bce31554514e", "indicator--f18ec98b-4222-47f5-b003-6e89c3f1d377", "indicator--8d8f5355-76b3-4328-87e2-3b1446e2a4e0", "indicator--5198f7c0-8fc9-4719-ad20-73fa7f832aa0", "indicator--6dd89098-b493-4178-90a8-5259f45ffbbe", "indicator--be8f1ac6-4290-4a47-998f-1950073a4934", "indicator--0974147b-62dc-4d2f-bd0c-b56c35127582", "indicator--f077f3dc-6dbc-4eb4-8f95-7e40542fdb6a", "indicator--a8d64e8c-32dc-4e2a-9523-69da7becc26d", "indicator--398b651e-1beb-4268-a58d-7d4e263269fb", "indicator--f8c216a5-edaf-4857-a97b-4ed8e77043af", "indicator--e5c70b28-09a7-4683-8baf-e71bd4b6fb3d", "indicator--392f583e-6724-4bd3-b4a6-e4fc0ffff8b3", "indicator--8917b49a-4180-4004-8261-e9ba807b7807", "indicator--e9dc3522-ff84-4823-9a06-fb39d986d410", "indicator--d2b0eb47-090a-4a06-a42c-d574db17de9b", "indicator--ab6b5efb-d732-41c1-a231-19e237223484", "indicator--e7ae02f5-d56f-463d-9654-78eca357271d", "indicator--d3ea383c-a0bb-4895-80bf-b529601b344d", "indicator--02bd8752-c75a-43ce-8c16-b026b456da7b", "indicator--aa39b4e7-2276-468f-a652-e363bd904959", "indicator--3ad61450-47b7-4643-87ea-3e5b93c912ae", "indicator--939704a5-27f2-4d64-b51b-8b41e50ea6e1", "indicator--ae57b460-ca16-49cb-b188-9b2a5df74c05", "indicator--5c60bb4f-ec33-4e28-b5d4-1570df3ffc08", "indicator--b3353956-3907-49d2-bf5c-3849fcf5e2e8", "indicator--16425c8e-b024-4bc8-ae8c-fd0926c9926c", "indicator--9a11b389-57d4-454e-924c-803cea2ea58c", "indicator--721d27ca-b721-4833-a55f-3947d325f05a", "indicator--757a3c0c-2766-42f4-a76e-d699064d3b52", "indicator--b62373d9-2b3a-4ffd-ad89-3743db2e5063", "indicator--65c95464-3b42-4d60-b483-7d3c4e92eecc", "indicator--c77a0246-b0f4-4197-abe2-dd92fc312bde", "indicator--17294975-9208-4234-a6cc-74ed67e47b67", "indicator--f813506f-aabc-41a8-8e02-dcf6ba6f670d", "indicator--0a18a797-689e-4316-9697-e51e1baf1927", "indicator--aa2c7a86-4cd6-4f81-b18b-101e454024ba", "indicator--55df8953-de21-48b3-8234-662b085e4997", "indicator--66d4b501-f956-4409-9617-e87ddaeb1b44", "indicator--b9e315c2-5dd0-4f78-90a0-fc0144d2ab5e", "indicator--6d2b8bf9-aef6-48f8-97e4-e40f473436ab", "indicator--1c1238ca-fe25-4d5b-9845-3db37eb195d0", "indicator--bfb1ec88-2457-4868-9760-59638372ab24", "indicator--d64f77d8-7926-4ffa-a455-01af3d20fe6a", "indicator--4aaf891e-6c18-4be3-b4e5-3852f0705f50", "indicator--3d66e986-4b6e-40c6-b0de-83a227522040", "indicator--9099e51c-1631-4c6f-a0fb-b40a7a97b97c", "indicator--3dcfd9ab-6025-4753-b155-e6a409b3eef4", "indicator--d2aa4bb3-7a8c-4eb4-8e1a-f34e1933deb4", "indicator--1292ab8d-e112-4ecc-adb1-583df4aaac58", "indicator--5aed645d-ff81-4fee-93b3-a859c8d67e18", "indicator--f204e048-542c-404e-97e7-d3ab0cba470d", "indicator--7736dc8a-f8df-420c-99ef-5e4e6efc698b", "indicator--74cbbbd0-c0a3-4694-96b9-cbed112b8ff7", "indicator--cfd3ba8b-ff76-4c20-8c75-8255fa5013b6", "indicator--4d17b8c3-1383-4338-b830-4408bd1392e0", "indicator--3ec11789-a6bb-4941-bab2-c763d61b7802", "indicator--f3610551-d7f9-49af-b16d-488f4389131f", "indicator--2703fddb-906f-4a66-8e8f-9a2f4d12b0c3", "indicator--2fa8cd75-7912-4728-8e4e-e0948f544dc8", "indicator--9afa080e-9a6d-445c-a7f3-00a2b92a8879", "indicator--a2443753-1d34-45cb-aec1-4fc34c7803ff", "indicator--b070aa67-1502-4eca-b6b1-36e401f5c442", "indicator--e2ab97a3-cee7-4256-bd0c-3b4730d70838", "indicator--c34a8724-b6d1-4627-8ec4-b6067f5f77b6", "indicator--5cc9002d-17dd-4906-bbe2-ba9b8f2b2bb2", "indicator--f8aa3f92-5f72-4edb-9788-993a9228d1e3", "indicator--1d4b3bfe-9c91-4d94-aff9-5687537911ee", "indicator--f25fae42-f786-41b3-9e8c-4a7a21c08f2d", "indicator--316ebda7-713c-4321-80fe-84b8f4bc2308", "indicator--52a0e805-c814-4ff8-aa35-c2cd2abdc9fc", "indicator--aac61df8-d253-493a-980f-6bb62a72c966", "indicator--470e58c0-dab2-49ba-a8a3-cf8075ffb272", "indicator--95f49482-9b0b-4457-a8d6-bb4d9fd37775", "indicator--cb9a5cfb-2c7f-4fef-ae1a-e2900ae606b2", "indicator--4d62f430-eb16-4a1a-86c0-784ff45de508", "indicator--a4146ccf-7177-4923-a5a7-200694396e00", "indicator--cc932a8f-2bc2-4061-9931-333121937b51", "indicator--d265deb5-0d40-4cd1-8645-1f0f577862a4", "indicator--19e4f092-d5a1-49c6-9173-f12d39480383", "indicator--010661a5-7249-449c-bbc7-01ea3ecc5cfb", "indicator--eda98169-0a14-4401-86fb-44935baf2a22", "indicator--58178032-6d95-40c0-998f-cf0a032255bb", "indicator--880f6ae7-42e5-46ec-9399-aa829e69e2ad", "indicator--b8b4e08b-2f0b-41b7-9cf1-8f6ee72173eb", "indicator--f697aa19-e002-4c19-bda7-4798cd42641b", "indicator--c9901aa3-42e5-47a4-a53e-6fd3c58805a6", "indicator--694fab60-08b1-4fc4-b174-d1b93a944ad5", "indicator--08fef350-2a40-499f-b8c1-104ec2bb9396", "indicator--28dd96f8-a488-4441-9ab1-74d39c3a2a20", "indicator--2d6063ef-3a52-4a9f-9111-7aa8b62ce8bf", "indicator--73f96f7c-d054-465b-b11a-2615f442ace2", "indicator--29115d31-0244-46f7-9bdc-03f5da1e1587", "indicator--b87f04a9-5178-4f2c-bda2-4bc4b34b1a5b", "indicator--d5b39a0c-77d8-4957-927f-2fb275cf3f63", "indicator--20bb2a57-d0b9-4266-b8d9-7ab30973d067", "indicator--251745f7-b594-40aa-a3d8-d2dab9291c57", "indicator--7ee3426b-5872-4828-920e-53a1370586c6", "indicator--280ee275-2902-4ca4-9c09-89cad1feec71", "indicator--74c4ba52-4567-4501-9fa2-f740ae524a1d", "indicator--c59388c8-7aff-400b-9e30-80fb9bd7d21f", "indicator--03e78daf-7bb1-4cd3-849b-228fc8c480b1", "indicator--b60c47ff-cfd8-40ca-894a-76844bc470b2", "indicator--bf3c46ce-cdf9-45e6-aed9-b476238931fb", "indicator--aa3e609e-1f4f-4a89-a6a6-6c4cfd2d0fce", "indicator--662866b5-24d2-4db6-95a6-43890a702b7e", "indicator--7d0258a9-2d47-42de-9b70-87cfd398be63", "indicator--59d91b36-f276-42ff-b04d-14b87094c314", "indicator--f8a83a6f-e27c-43bf-8e7d-c65495461f6f", "indicator--c44114cb-b698-4ae3-9e13-47a795edbbb2", "indicator--e3eab580-4d68-4fe9-886e-a08fbc577e08", "indicator--aad8ed84-72fb-4020-85a5-f0f07f87a897", "indicator--666d4dc9-08c8-4555-b861-bd54010fc4d3", "indicator--54cc12ae-9d25-4da9-8bb8-b933817cd207", "indicator--1f7d0c30-4e8b-4a69-b73c-fce5fe9c4d32", "indicator--2bfab701-dac0-4c3a-b128-d2c82ba33c1a", "indicator--07ab415d-582d-47df-ad3d-d1040b5319b7", "indicator--b95f4f77-4299-43ad-98e3-11be4a14db4a", "indicator--e25b67c6-445a-45e1-96f0-9bb79ca714e9", "indicator--080fb160-0026-45fa-bb09-e4f914b79017", "indicator--a9c231f7-2e11-48ec-aa6c-786dfa2cfbc6", "indicator--3b2bbbe2-df34-4615-9dbc-d9970b526286", "indicator--0b3391db-2df8-4723-9e77-7f7c7adab80f", "indicator--31f17c27-bd41-4b13-a8e1-5df32eaeeb6c", "indicator--9d238e8f-0fa6-43de-9001-cfadc1e5f64c", "indicator--b9f4c464-e338-4d37-8523-a3710bd6c98e", "indicator--3710bb96-9721-4325-b02d-d2da7014372b", "indicator--91d6d22a-e66e-4c3c-9604-b848fb99cc2c", "indicator--c1415d03-2777-40aa-be86-966141a6340f", "indicator--14721b44-c299-4c02-ab6b-15630144bd49", "indicator--17b6d63e-273d-40cc-96de-5855783d216b", "indicator--dc0c9c3c-a7b2-48d4-b40d-7f95bf7ea743", "indicator--83563404-0d7d-4c4e-9032-64e2e9ecb941", "indicator--af8a3aad-d22f-4839-85e3-2b9ab1c48267", "indicator--c485a265-8954-4472-a767-262b34d1e86c", "indicator--78eaa56e-8a7c-4734-8940-96d448cb079c", "indicator--e1b40d3a-a3d8-463b-aaf4-c1a4367c8538", "indicator--0a467e87-bbad-4526-b189-f9c22e3f6d78", "indicator--e97bd89f-ec84-49f5-8b90-b2299830bf46", "indicator--a1ffdeba-83f4-44f2-8b2e-76c81021690a", "indicator--e4ddbdd6-9fd3-44bc-9667-93e0289be1c6", "indicator--ba091890-6407-4167-bcd7-483d70c6d6ae", "indicator--1930cf3d-d8f6-47b7-94ef-0599806e7214", "indicator--b0850c37-7048-4a2d-8e96-2086e7c4478a", "indicator--5e1dd6bc-64ef-47cd-98d8-9aea4bf9770f", "indicator--a772a100-a194-4a54-8433-3c9a060bb499", "indicator--14f4c067-7b1e-448f-ba5a-d9d9713c225c", "indicator--0acb550c-2736-48da-ab10-37e3db9e3d1a", "indicator--0215cca4-fc9d-4a84-b131-667475cc0a85", "indicator--d46f749e-939d-4f63-b8e5-287acd20d232", "indicator--4b00d2be-414c-4a92-b0c1-2126c32fda45", "indicator--dc77c1fb-93b4-4064-9fd7-01bb33329fde", "indicator--d4334a55-1cb4-42b3-9950-e5186be7394c", "indicator--2a219022-54d6-4260-b2fd-d4179cf08b0f", "indicator--5a9cb10f-37ea-4dbe-916f-e82605770592", "indicator--6a11774f-3f57-4573-ae01-ac7c3a9ec5e2", "indicator--05d00f6a-87e9-4b64-a60c-e9a52d01b18b", "indicator--3afda2fe-82bc-4ed1-84e7-e5f931196499", "indicator--20969077-339a-472b-b709-2ab0361ec300", "indicator--90173437-a288-42e9-88fb-0d6975eaccf6", "indicator--7656ffed-fa85-493e-935e-f30c393bf68b", "indicator--11c16f30-83ff-4e1f-8f13-36b952c2c5d9", "indicator--9c717356-4c46-428c-aea6-5f1e4b5315e3", "indicator--421383a3-1a1b-4342-889f-54535122e4a5", "indicator--28847166-33bb-4ba7-894e-d65b46089c9e", "indicator--806dd37a-1bab-42c6-b299-c44e918ea5ca", "indicator--0818937c-536c-4f76-8cf4-ed60dc44129e", "indicator--347e0162-6b4a-4fb4-9386-a929f2386f6f", "indicator--7ab04ba5-f21e-4e13-9d34-1577a9033530", "indicator--f0af283d-3ba4-4441-9cb1-6c82683264c9", "indicator--da4b1b20-1394-43f4-b401-ffa0a3d27cb6", "indicator--661e983f-ac43-478b-9844-3c3a15f0675f", "indicator--23845a3d-3d40-4b19-a5d0-d0c8195bb8ba", "indicator--6900f5fc-f32a-4e8b-8d44-23f7de464f0d", "indicator--7fc3f085-ecdf-4650-81c6-b5bdd832a7ec", "indicator--6c81b8c3-4588-44b6-8049-c75439eb47f5", "indicator--77042f2b-06c7-4973-997f-88abbc79aa58", "indicator--c7988bb6-534a-4589-85b7-4322e34939b2", "indicator--ad063ad9-92b6-46d0-8211-2c301b9e549f", "indicator--b645c12f-150e-48e1-825f-119c7457e5d5", "indicator--17d9abc1-17d6-45f1-a588-d896d7077788", "indicator--2a59acc2-5787-4e80-98eb-956f1b6b1a22", "indicator--d6de49b3-b25f-435e-953f-2d1ccd40f7dd", "indicator--0e1483fd-bc25-4f7d-9d3c-a43d85d8d05f", "indicator--343a620a-afb0-4941-accb-2622a78da301", "indicator--42f98a4a-6a88-4fde-92b8-84117206aa14", "indicator--9ca138a9-8343-428d-b7a2-53dcb1057f8d", "indicator--5cc8511c-c87e-4653-9d7d-08c5af0534e5", "indicator--cf52395e-25f0-450e-86b1-656b6f005b50", "indicator--d3c92879-6e2d-4551-ab03-3143f8b09223", "indicator--50abf3e4-7076-410b-8cf1-d4d70299db38", "indicator--c6071c26-003b-47cd-ac61-cf64dc916645", "indicator--a0798b49-6152-4862-9fad-fdfd841ce906", "indicator--d372ec67-13fe-4b74-8faf-048908832850", "indicator--768018c0-e956-42c1-9627-1e887f0041a8", "indicator--0c16d91c-b738-4b02-a321-b7bb4f7c75d4", "indicator--9a27ff2d-75de-4e99-9715-039aee39bcfa", "indicator--607d30fd-1bc1-417f-9265-7f307e1ef869", "indicator--9b8ba4c9-e008-454e-944b-aaf689395a33", "indicator--84713680-a1ec-4327-ba1c-07c006b0b31b", "indicator--f4805cca-7361-4a56-8cd6-a5f58b2fe99b", "indicator--04bed743-8ee5-4c6d-8637-f1d213049e65", "indicator--7c71ff4c-7966-44a3-b01e-8e5893e15784", "indicator--de425306-201d-45a9-8e43-c4e10cfe6877", "indicator--293e370a-df13-4d9e-88d8-1278df625f6f", "indicator--17b6e377-801f-474f-aeb1-5c0dd4be95d7", "indicator--84485cf4-7f2b-4341-9307-951b70e393c8", "indicator--34f9dab8-ab67-4e9e-950c-30efd4448bd8", "indicator--99b88c5d-5a12-4071-ac1c-b207861d7f50", "indicator--ed40c934-724a-4df8-827a-72129bfef6bc", "indicator--aa2b6a32-ddbc-4386-b2eb-4864192415b0", "indicator--df5b5f7e-f126-4be0-bd9b-8005f527eb46", "indicator--80ae4544-816b-44c0-bcd7-9bb2a005cdf6", "indicator--baf99b49-5fb8-4760-af85-d84019b5152d", "indicator--43e82451-2546-47e7-a031-0a538301407e", "indicator--77a23625-dc20-4fc4-a947-98c09d5d6543", "indicator--43b999dd-3097-4882-913f-fe46eefd7895", "indicator--15e319fb-9a9e-436b-bbfa-838ae42ec051", "indicator--8e8c54e6-daa9-40be-9f0e-bd8c0a2471f7", "indicator--11c5ac7e-64b7-4edd-8f28-dea0da5a1112", "indicator--6eba771f-d589-4cb1-9fc9-991c72c2fe7a", "indicator--23f3ecbb-1603-41c0-999f-98275113d0f4", "indicator--beeacc2d-a8a0-4f1e-8a65-6b96c3643c05", "indicator--6ceea255-e71d-4e89-b4dd-089171188807", "indicator--fc166a82-54ff-4659-9482-fca8677c8ecd", "indicator--07e27f61-38fd-401e-8a31-d1bd303555a3", "indicator--3615dab0-fdb5-4444-8014-7bd6328faf3e", "indicator--aaa627cd-837e-4297-86bd-f5669ccdd664", "indicator--ea15ea43-ee13-4ffb-b254-bb762cf81a55", "indicator--da809ca1-300e-4710-a0a3-54240171a759", "indicator--afd6c454-38c5-4f8d-a2cd-2fe6e781cb26", "indicator--2330bf43-daa0-4082-872f-0e8f993a9e93", "indicator--2ce11960-39b3-4433-9d51-603152c2457d", "indicator--ab6f3e88-6435-43f4-b591-ba3b7c2c5eeb", "indicator--036fb372-0ecc-41d8-b394-4d00ba56dc4c", "indicator--81231a67-1d67-4fe9-b509-b538a5586968", "indicator--22d04c48-dd09-482f-8010-e74dd16c5e17", "indicator--4f311395-0988-4b22-913b-1884ebafd298", "indicator--bc8c121d-d1c2-447a-b34c-0aa6255a2df7", "indicator--814ba05b-c460-4c66-9bf2-4fbe437a330a", "indicator--e7d2575f-fb75-4fb5-a64c-ab4eab4a5722", "indicator--af26d49c-6a22-40a6-aefc-cfb0e0ac8387", "indicator--d2673314-45f4-4441-895d-a3c1159ffc36", "indicator--1f2da26b-c097-49ed-aff7-4ee42399d86d", "indicator--e38e1d4b-236d-47f3-a020-7e5c2d2c116a", "indicator--f8283357-9882-4043-a444-9f69ed413d48", "indicator--a8462cc9-95c3-42eb-adae-aa515266aafa", "indicator--bfcd5e94-b718-46d6-b296-50fa6a3168e2", "indicator--ea0207e4-dd89-4cda-825a-167f71ecbb5d", "indicator--16881ee6-581b-474f-8ba6-f264f5316eb2", "indicator--11ad060e-3a97-4b56-bf29-6bba45f73887", "indicator--bee7de7f-5d19-4cd5-b236-e04696f98e82", "indicator--f04ec321-4176-48b9-bb61-c546d7783bb5", "indicator--d21cfbd2-795e-4dff-b11f-71bd174b9529", "indicator--a1082908-fb5e-4be1-8a12-771f93f2a413", "indicator--8995899f-0718-4a7d-9560-a548486b34bb", "indicator--cdd47949-5a27-40ce-abe1-42f611b3a3e1", "indicator--00ce89c2-3259-4def-a120-8a24c28f6f91", "indicator--e929c1a3-68c9-4299-a1e8-8a586291e397", "indicator--5062fa21-6f1c-491d-a8c2-c80cd0e02165", "indicator--e4be0724-7f52-4eaa-bb91-d4ba5a4d9872", "indicator--1932b6db-debf-46fb-a6b3-161de716efc0", "indicator--38e305f0-5aeb-4c72-b6d5-b9fd145e915f", "indicator--8219dad1-38d3-48b1-a3df-612980080f9b", "indicator--2469143d-c543-4ffe-98b9-6b264b46bc77", "indicator--970ae834-6fe7-46d0-b065-ba438666f449", "indicator--65778357-dea6-4d54-a994-e256c15e1207", "indicator--020cd1d2-53c7-4c6b-a2dd-838ffe66bf2d", "indicator--2adecd16-3079-4a5a-ba91-be3005ed67b7", "indicator--b3863960-c047-4a2f-b41a-3ca594e07361", "indicator--b3aafeeb-3322-455e-947b-a5a63849ccfa", "indicator--a7269b8c-52aa-4e29-917d-af624d83cc2d", "indicator--be78e6ac-f76d-4fee-8070-50dc783d48c7", "indicator--d4355ced-ea5b-4ac5-9907-6ce9f37f35c9", "indicator--b2f73ccf-d300-4138-9df2-ebf3ea21097f", "indicator--72e2bf59-e692-44ae-9039-cd2f0b73ff2c", "indicator--76b59d25-e9e1-4de3-a5be-b9aedb4d128b", "indicator--2eb47f07-75b3-43fd-8e7c-c7059bb87363", "indicator--61ff1665-bb8e-42dd-b5f3-b4c33d732a21", "indicator--30eb439c-6926-450e-9e15-992f00ff4996", "indicator--82d369c6-bddf-4c6f-b83a-95c4f4c72bf6", "indicator--b88c9298-01f1-4d0d-a45d-b8059159f9a9", "indicator--6ba05daf-5b87-49fb-8de2-3f29124057f4", "indicator--fc6044d7-4324-4393-ba53-eb8d284a1ca9", "indicator--4e5daf08-1a96-4aae-8fed-3161b2625e51", "indicator--2b83a4ee-0153-478c-9c36-60e1bbbd4c0a", "indicator--147421cb-fe5d-4b00-af25-de688bbb4863", "indicator--a39f909b-685f-4c87-ab64-13c54e42def2", "indicator--173a2966-0bef-4f8e-aca0-22d877b6067a", "indicator--a0e0f057-f8f8-4a1e-b6a5-acfbd2da7b73", "indicator--af4efbba-1ed1-4c79-8161-fd4ad7fe13d6", "indicator--5059b0e4-bf66-4409-8d39-e4701b4ab207", "indicator--b474b16a-f7ed-4989-ba46-b5f22b6384c4", "indicator--e2749783-13ef-4fa2-b060-72146ac77106", "indicator--b18555f3-5c5e-4b1a-a701-0539c79b2342", "indicator--3a54fad2-df6e-4ed9-99a2-0622a717f132", "indicator--2de111b2-bef3-4b27-af3d-62f2309c8278", "indicator--8cdea345-8a8d-4f08-ab34-df021a958360", "indicator--4bb2d75f-9e94-4c24-abbc-d936b4edbffc", "indicator--323382f6-66f5-4e5f-ae37-05b8e95af8bb", "indicator--0e7da97f-fa11-449b-909e-e10f1fbb1bb2", "indicator--b5129638-f065-4ba4-ae28-591dd4ec4e92", "indicator--7ac55358-627e-473a-8d68-c3e412fe7e88", "indicator--25ee9690-d801-4415-990d-846e26942a38", "indicator--82e1c76a-91a6-4dcc-897d-5a44bef14a16", "indicator--88b8b8dd-7179-450d-bb29-caaaa7fccf24", "indicator--3e003333-722a-429d-a926-be5b34b12802", "indicator--4f04a2ce-748e-488c-b933-2fd61b2272f7", "indicator--6982bdd8-36f2-4740-9c7d-81aa2b89b04b", "indicator--ebd5fb65-2fe7-4d54-a84a-a8f5edb4376d", "indicator--2fc8372e-1036-4a48-979d-6afcc77979d2", "indicator--028df97c-22cd-4b8c-b6b5-456b7ede2860", "indicator--b9cb82fb-1f28-455a-885d-8440d335ba6e", "indicator--263ee880-307e-4f89-b389-a6a3921224ce", "indicator--b8e696e7-8e87-43ce-95b8-dddcb70be8cd", "indicator--06d5a91c-e09c-44cb-9976-c469ad23617e", "indicator--7874b053-9741-470c-bcd4-79a71af905d1", "indicator--f88dd5e8-8619-4359-82ec-887865316297", "indicator--cb45dedd-3731-4214-ae78-ebb8bfd94ae0", "indicator--8e50075c-8617-45c6-afd4-6f4a523694e8", "indicator--209834bd-60f8-4349-9f70-3fb1bdde1703", "indicator--171ce74c-a94a-4612-8b40-f62d5842aa62", "indicator--44e827ef-763b-4ac8-90b9-ee6008ed5a8b", "indicator--76942c43-0e9b-442d-b688-06d1623c87c6", "indicator--9a94668f-130f-4a83-aa2a-7ea61be269d6", "indicator--84139952-dc64-492b-9862-03eb89732af2", "indicator--cfbaff81-546b-4db2-868a-a74963e111f4", "indicator--3615c213-0960-40d9-a081-80f0447ef651", "indicator--91b16e31-f534-49a4-85f9-9b107c0ecf46", "indicator--052df2d7-17d8-4703-b876-fdd61e0decad", "indicator--adf10aea-9d0c-45ac-bf40-0920c12fa6bc", "indicator--d56634d9-464b-49a5-8522-d38848b5b642", "indicator--3af68b80-d759-4093-bac6-e1cebd7e6340", "indicator--dcf77e87-ce47-47c2-b76e-5d57b4fc69be", "indicator--13f400c0-0046-4bb9-acd5-3efab57495d8", "indicator--7aaf3713-76c7-4abb-85d7-8fd24d9ac920", "indicator--e2cb0597-4786-4400-a2a3-bef4d2b2df00", "indicator--4206da68-011e-4340-82db-b74a2159cb25", "indicator--f1933f61-77dc-4bc9-a606-84ff0207a2aa", "indicator--e8686d71-2f5e-4dde-93ad-f52544b05241", "indicator--23351e6d-a808-4e5f-855d-de03847da417", "indicator--2429a865-f1d8-41d8-a0dc-6f14120eca05", "indicator--bab2fbc6-ac50-40fa-99e6-6640d19996f0", "indicator--6c37297a-35f8-4796-a29b-71ccfe78d5b3", "indicator--7ce2bbc3-99f1-4f9e-a8b0-19fa0a206857", "indicator--7084cb87-4868-446b-bb2f-432be234bc7f", "indicator--6cba1f7e-c181-46c9-82a3-f92537dedbac", "indicator--7c2112d8-2152-43f2-b73f-cfc06509819e", "indicator--a1e31b3d-cd47-4af7-b343-5f66ee529236", "indicator--f1229970-2083-4bc0-8fa4-e04567385261", "indicator--dd97b53d-61c5-45f3-9cbe-d1ab9cb1e79e", "indicator--c6f09240-dcce-49ca-9721-1ab9fc80deea", "indicator--f525d1da-86c5-40d3-8d14-6b6b8fe19011", "indicator--5aad4fbf-8252-4133-9551-10882b48e25e", "indicator--350e3708-2b3b-4074-a71e-d6032ca350da", "indicator--cbafb9a9-5b38-4b5a-8762-fa48a5fa7f3f", "indicator--63bcb9df-e55a-48d0-9bb7-eb696dc8c569", "indicator--7ca0c78c-0c2d-4082-b74e-3b70526fac3c", "indicator--8e2c4566-5452-495f-8783-50b541f5e566", "indicator--df8b90ea-066d-4971-a623-05d4ab391e18", "indicator--d0b794c3-0f62-402b-8b5c-1d2fc7389750", "indicator--58bd70c9-3c4b-41c5-9776-0d28d79c09fc", "indicator--86ab577f-2892-4475-bf87-cae2cf52ee63", "indicator--9493a34c-ecc7-49ec-8151-38ffc5724788", "indicator--3cab0076-d6b8-4016-bb05-7b138fc2df24", "indicator--823cafa3-1d9c-4086-b8d9-55fb387db4a8", "indicator--23787c43-14b3-44c5-a586-4e8e4f74423c", "indicator--bfb63f08-641b-4617-8c5e-d2dad06238da", "indicator--0695aef3-0b52-4b44-b0a6-d6b0ec19bee1", "indicator--5930df90-7edc-4940-9fc9-528761f4b252", "indicator--ce390f30-5eea-4e3c-815d-47fc536e38c4", "indicator--ca90d5b0-22a5-4413-97cc-b23219fdaa25", "indicator--64571acf-daba-4cb8-9351-5957715d91c1", "indicator--d427365f-dd60-4310-bf0a-e6e78957ddda", "indicator--4f8f1e4f-dfae-4908-a0c6-f68467544eaa", "indicator--2d5e8513-f232-4150-b05b-9630be60ccc2", "indicator--599001c0-bffa-4020-899f-f412cbb94e4a", "indicator--76429bd8-b52c-4bfb-af5f-7c9f10455d73", "indicator--a29e6807-79ba-4afa-86a9-675eeb1bff08", "indicator--b8dd5da2-44b3-4180-b934-396b0da30af5", "indicator--434a8307-4e1d-4133-8632-b7a8929bf366", "indicator--8de4d40a-13df-43f3-90ed-f1918d38d21f", "indicator--da81bac2-694f-4b37-b311-95d1d814fd39", "indicator--f3e31e54-381a-4b49-8ffe-a31c46ff1fc0", "indicator--e2938df1-63a8-49e7-a852-4156dc429ba5", "indicator--a13e290e-b75d-4559-accf-beb1a1f72bda", "indicator--c24c7e52-9afc-479f-b3e5-1ba2fc38cfd6", "indicator--b63b1073-2d41-4fdf-bf78-f1d941098d28", "indicator--b331c753-de6d-4159-9281-a35edd44fa5a", "indicator--9271ece5-06e1-49cc-be15-bbdd9e70a090", "indicator--9948b2b3-1f4d-4f0d-8704-7aab432b5bc3", "indicator--cad2cc2f-7d73-49ed-8d58-572bb587f928", "indicator--f40a0e0c-a24c-46dd-afab-3c513982a7fe", "indicator--4369ac93-9aac-455e-9517-0bb7b101a074", "indicator--c4e73295-2499-4501-a071-8ae7e1a74c1c", "indicator--ff2d9f75-685c-4dc6-83b0-9d48e250bedf", "indicator--6ad5521c-5c3d-4cfc-9040-f003ab854fa1", "indicator--cdf5c7db-df9e-4eb2-8a70-8d40b70d9c63", "indicator--59b60b31-0bf4-4f55-9a53-7e1441f7096a", "indicator--a0e91447-500d-484c-a884-f68126e15c2c", "indicator--98b79c4a-8132-4d2c-b58e-5584fb2e7040", "indicator--8e5f2756-82e3-4159-8886-2f775db6976b", "indicator--2f948c29-309f-4fec-b6d4-8c7f8159c55c", "indicator--2a18c648-1856-4ec5-9608-50208bd0ec4b", "indicator--fe960cbd-824c-451b-b0f3-b7b03aa61ef5", "indicator--8fcef7ad-40af-44ef-9cfe-ab2b09d51a4c", "indicator--9cb1cc98-de9b-40a7-b22b-75c0a850a58a", "indicator--8561e317-f30a-491e-b5e2-2f19e7d79080", "indicator--64a375c1-1f2b-4497-aed5-19af663ce798", "indicator--76a67a14-649e-4cf9-9c4b-f9a8dac941a1", "indicator--c8c5c430-dd7b-423e-b34d-696bf5733ca9", "indicator--9e6eb819-0488-4fba-9b7b-c97a920cad66", "indicator--289b8e6e-9023-49ef-a408-be244f74ba2b", "indicator--5abe9a42-fa4e-4b91-808f-1003f63bd590", "indicator--b04377c2-1bdb-474b-8cef-80c7c730bc3b", "indicator--fbe463fd-32d4-4ab1-929d-6ea063e460af", "indicator--58f57667-1e54-4044-a03c-24d9093160cd", "indicator--b6ea5b05-6b04-4365-b82a-fdc5b29a9fe1", "indicator--4acbdce8-ec65-415f-a663-b00556532c9f", "indicator--71295a1e-ac97-4ea2-80af-e9f1e7b6a764", "indicator--eb7f566e-9741-4a98-8f84-be0f25097be1", "indicator--d7c61c55-5e14-4ed5-a11f-a398af32ecf1", "indicator--e2f47d4d-6a17-463c-934e-fe77bc048def", "indicator--c609aec6-3d30-4a74-a50e-e42dfc6f5a1a", "indicator--99804968-b30a-41a1-88b5-dd857a804cfc", "indicator--93edac06-31d8-4ddf-ba61-c9e02afb7f45", "indicator--1df9ae88-b98b-4d53-a36d-dd34d7e946ba", "indicator--9184d722-7cb9-47ab-a0ab-114a3fdfb66d", "indicator--e2c29313-c6ec-44ad-adf9-050792275dc6", "indicator--f3dc188c-bac4-4c2f-af75-837e0c075e71", "indicator--026d3f69-a5ec-475c-901b-0ef85fb38ef5", "indicator--8cadcb96-077b-422e-8858-0ff75a46db74", "indicator--9cfb6810-9833-4244-b3c7-c133f65396e2", "indicator--50107b9e-b316-40dd-85e0-751b04b52926", "indicator--b0fb7d0b-aec8-4e1a-babc-76f0efceeae6", "indicator--d73acea3-ef1b-4f92-a63f-2d09f36a102e", "indicator--27827f94-3dea-49df-921f-a628c493b41c", "indicator--b0a4374e-097a-4107-8c41-d19095f859c3", "indicator--60cabf39-f1e1-4b3d-92a4-eb07eefb3c28", "indicator--898ab323-a842-4d99-a23c-e1ed5adb5ff6", "indicator--c486557c-1484-4e34-acd7-0cb5275cfc13", "indicator--22e7ad04-f46f-4e56-bfe6-eaaff0a27257", "indicator--3d5145d5-5e5b-4079-be77-08fb4afeb473", "indicator--3b3941ff-52a8-457f-a7f2-a9d0d26c1578", "indicator--fcf9f973-8a0a-41f2-9f79-c1670f03a7ea", "indicator--228c9014-f61a-464e-8575-0615cffdf3f8", "indicator--9fe132de-2032-4356-a1d1-c1e6e8461f95", "indicator--d0a8f5dc-0067-408c-b82e-67521d28f0f9", "indicator--41bbef76-d764-48f4-a2c8-c40fdf131ad3", "indicator--7e453ac2-e07f-450c-9c7a-8865e4b88345", "indicator--d44ef0b2-e71f-4497-813f-9e67b36fb360", "indicator--12974b3d-9714-4e6c-9c87-5d58941abbfa", "indicator--695decc1-c9ab-4a52-8cbe-361a4a5f7111", "indicator--7cf07cfa-3a72-4277-9e67-9f568f8679d8", "indicator--9f112b5d-8fba-42ec-873b-88470986ae26", "indicator--9ff7e632-4642-4217-88f9-8197e5de352b", "indicator--8aa23508-746e-4c5d-9085-0cd43e6cd7de", "indicator--49f17951-ad7e-4fda-a7de-9fcf5c68aa5c", "indicator--303e29fa-258b-480b-a671-80a122b400b6", "indicator--9f7a46e3-0700-48fd-ac1a-2964705a0b3d", "indicator--053f67b7-4e4b-42e9-907d-61a478795d75", "indicator--2f22703b-4c9a-4b92-b6dc-30b89f20e60b", "indicator--a28c8f4b-6092-43da-a2e9-b6f5ea95a9de", "indicator--9e028562-965a-4858-9a28-4f205f757ffb", "indicator--22a7ec07-835e-4292-9059-971888641fb4", "indicator--29e44d4d-96d2-47ef-a836-0af13ac40d78", "indicator--6d8422b0-dd65-4d02-af0d-9587247cdb70", "indicator--c2d6e8b4-beb6-4f78-8d66-cd5719b19d5c", "indicator--edda75cd-b872-4fd9-94bd-d7b2759d949f", "indicator--4b6d1d80-9f44-48f8-a340-ccf32cf24386", "indicator--ecec6042-f9c9-4fa0-8d34-64320e605384", "indicator--972afb35-7749-44cd-ab85-9ba6d2d30149", "indicator--bdd77add-ee3c-4daa-a71a-535a1384acd3", "indicator--09ba5022-0ad0-4174-94ac-62ba009c8ce5", "indicator--ccabde46-b04c-48ca-ba1e-990b7aeff5b0", "indicator--88c53933-d8e9-441d-beac-6f480890f663", "indicator--81bc9ccb-d636-448b-bc43-00394edf6fea", "indicator--6cb89f0c-fd2c-4e54-ac35-d143773ff478", "indicator--05d9010a-6883-4bd2-8fb7-38a3ce5ec792", "indicator--57208f59-0433-454e-b24d-ceff6e41488f", "indicator--c102dccf-c132-43cc-828b-59aa1bb38618", "indicator--beefcd42-dd15-4471-909d-f4279c03ab29", "indicator--007784c1-1254-40c4-a8be-ba5134e293e7", "indicator--fd7dfc4d-6108-47d6-97f4-471b34b3b972", "indicator--6af2183c-06c0-40dc-9b8d-450e57820516", "indicator--234bf012-1b4b-4add-882a-89649991fcad", "indicator--a7fbddeb-afdb-430a-9e08-f762d9c56e92", "indicator--314ce383-b127-461e-adf2-04cbb0d4eff4", "indicator--29f1860c-9faa-459a-a893-e02ecf0516ec", "indicator--66f32902-5c61-452e-9427-3eeab7cabb27", "indicator--7120dfcc-0aaf-4ea2-92fd-4ad57398bc72", "indicator--2be5b6d1-f9bb-46fc-9d68-e99a17b54261", "indicator--c27991f3-f6a4-4f38-8ac4-cf0d992d5f18", "indicator--95e2deb7-76eb-4b2e-a1c4-d35846e5dcb7", "indicator--42e59cc5-e941-4746-b166-e944100b868e", "indicator--e7580d68-365d-4a23-a81e-45a900a1883b", "indicator--440aecdc-a3a5-4713-a687-a3272c65566a", "indicator--49a7bde7-92fd-42b2-910e-3fb2c63cedaa", "indicator--bb91f3c2-da43-415c-8279-f9f486b14669", "indicator--2a65e363-2e9b-4a37-a298-aa7d70b42f8f", "indicator--7fa83746-dbae-4f30-8d22-455128ed08f3", "indicator--b2d091ff-ebbd-481d-8107-4756f88bece9", "indicator--21d31f94-f3fb-4537-b1b2-41bde300d3da", "indicator--bd82679d-21bc-4851-95b2-ea8369f62e40", "indicator--6cd17505-5f49-4070-8f1f-ed5ca4d9f306", "indicator--90bcc446-7131-4e70-be4f-298bb72b6af1", "indicator--94dc89f5-6f6c-432b-8071-52f230a77a94", "indicator--20117569-4992-49de-9c07-e0ddeb443c06", "indicator--2e8986f4-24d1-4b30-a949-f184686b468c", "indicator--3b0b9060-4157-4306-b737-59e81e6d767c", "indicator--51d0f08a-6515-4168-98f9-cff19b1fdc81", "indicator--069cc2a9-ac4c-4e4f-bf7e-3a48f93c0f6a", "indicator--1d945ab1-971a-4815-aeaf-91f3f562398e", "indicator--21a00b4e-d09e-44ef-b2aa-6cfe342c29e7", "indicator--f2a1996b-8a97-48b4-99a0-359efba021f7", "indicator--9ab4fc32-9578-4336-a9b3-e83d2eef0b8c", "indicator--9b75c9d5-cc3a-4c74-9001-9dd8d89def82", "indicator--b51757bf-f9a5-487e-9250-f412e9cd5ed4", "indicator--9cbb2a0e-7e7a-410e-9425-4b23921ffcfd", "indicator--380eb8eb-a35f-41dd-8b37-d8b4f1617b9e", "indicator--1e66f171-b013-46d5-b8fa-7d0b31cbd355", "indicator--9e4e89de-4c85-424a-a84b-2dc7c5866436", "indicator--a9531b0d-fb3d-4d37-adc4-f3fd2ceb1441", "indicator--0b82afbb-380e-42b6-9a0f-c6bd1475b588", "indicator--58732fe6-78ea-48e7-ad35-da2d068f6626", "indicator--adf8149d-ed50-42f5-95a8-35206b5687b4", "indicator--68ea4fa7-68e6-42ff-8f1e-d4b4f28f0837", "indicator--318ebd97-6728-4551-9353-6b5c07c91307", "indicator--36744b47-7a5a-4395-b75a-0ec37b1f1b48", "indicator--5784b8ba-4821-49fa-95be-d36d9fee083b", "indicator--3f2bedf6-579d-4d40-b07a-727cd2c4b378", "indicator--cb6eeba3-55d0-49c9-a860-4726aa8234be", "indicator--fef94fe1-75f6-41e5-a870-52ec392a6f65", "indicator--2bdca70e-9100-48ad-8760-fc292431f2a7", "indicator--d51e9ee0-b1de-4758-a30f-8f7b2b08f56d", "indicator--de179bb1-9165-4fad-9037-40f5a7926807", "indicator--b0a61d24-ab8e-48df-8693-ce35df7d3786", "indicator--7c3fc7c7-111e-48a5-b6de-3425fc12b725", "indicator--74e3ae16-10cc-4e45-acb9-e3711a1e040c", "indicator--72c3b21a-5f64-42a9-a4e0-f447054252e9", "indicator--91d94da2-10e4-4db2-8897-00c92f324674", "indicator--f2a169c3-8401-4b2b-9f52-df53d312d5ed", "indicator--602a4d31-6b2f-4814-b73b-9b74fa34cdf4", "indicator--517e52a0-47eb-4ed0-8257-9b5b378e003c", "indicator--8dcac68a-219b-4c6b-ad46-a2f55f170f7b", "indicator--29298456-74b2-4980-98db-c09b57d31d9e", "indicator--6406d083-5b9a-44ba-b82a-693679e03572", "indicator--803c5585-a4f7-41d7-8313-fc55b694bb48", "indicator--ae94fc17-1cbf-4da6-a8b8-03d4c4dc4f78", "indicator--374adc34-016d-4c9f-998a-6f34401958aa", "indicator--6c66ff2a-0bf2-4337-b8aa-71676f0428e5", "indicator--0f004a65-a0e3-4c60-a874-9df54208d816", "indicator--07b7d258-4c85-414c-9fbe-0ece1e2740b5", "indicator--b064ee39-b09e-49ea-ac86-30832bea3b46", "indicator--a398f9e1-9f9e-404d-a4c5-e6ba3661d88e", "indicator--d2a748f5-ed87-4198-9f92-bc47bce189c8", "indicator--717f1fa9-0d7c-44f2-90d5-00201ce09eb7", "indicator--66702827-fd28-4916-853c-91c3ebb22034", "indicator--3da5ce69-72a6-4c81-a5b0-10ca25249973", "indicator--4528aeae-64f7-4284-a185-40c6c1802313", "indicator--fa223d99-3e83-4d88-9bcf-ab60a64f913c", "indicator--d98e6a5f-9f7e-4f44-8069-874ab5fad537", "indicator--c8c18c71-4556-4316-87b8-eff7fd6004ad", "indicator--671af8d6-f0aa-41a0-a6b0-23d2e4aca766", "indicator--5feb5d22-ee69-42ef-8be3-3f09c703fc07", "indicator--16627aaa-1341-4d80-93fc-32da27f796aa", "indicator--dc813b8d-3c3b-4ae2-b3ac-034630c20057", "indicator--282c87ed-f3af-46f7-b376-9be4580bf831", "indicator--6f6be580-5b22-461d-88e9-f4fde1053536", "indicator--760ba4bf-b98a-491f-96a6-0a526110f735", "indicator--924ff8a2-3166-44c6-95b3-44ea9bfd3e7e", "indicator--09a0d293-b19c-4dc5-920c-c7ac62d3e00b", "indicator--6f9d1553-c667-48b3-9f04-2e5621dba37c", "indicator--36131a0f-0a6a-42f3-bce5-ec649ffbeadc", "indicator--69c36095-4c9c-430e-a5b3-0da17e7ba1b9", "indicator--c5c672e1-a9fb-4cfa-9471-17abf74d925a", "indicator--ab07dc5e-98ce-4a2c-9fd0-20456ae8a77f", "indicator--2dd52161-836a-4f19-871b-09b16332e58e", "indicator--1ceb8a3b-0663-408a-9c6f-d199d60ed00f", "indicator--5bc5740b-4151-419e-865c-57e5dc0542b8", "indicator--d9c7b931-96de-4f39-b12c-da084cc71321", "indicator--0291d0fa-0696-4f23-b788-81f49293e6f5", "indicator--2481eea6-11ac-441b-8903-4bb02ef07dc3", "indicator--ab9d5f3a-7c22-46f1-925d-22ebc739fc2d", "indicator--b5f51f66-961b-47f4-8138-a116e723e16b", "indicator--9f59508d-28d0-4b87-a98d-dad76f96b223", "indicator--94337ddb-a489-4c5d-8196-3fd295a9cef1", "indicator--5a58bdf9-2b23-4c53-bb2f-3e990b198963", "indicator--32beca00-0305-4cf5-bf62-c32f52832362", "indicator--55851dc9-46c5-43ac-9060-355ed9d4dd2c", "indicator--0784f3c7-05e3-436b-bcf3-86ea806c2209", "indicator--b54e9a45-7415-4318-a8f5-42de2bcc254f", "indicator--8ad0d138-a77c-4d02-9b4e-c3499f1c793e", "indicator--8d770081-f3a2-4e60-b0a7-ecf6c7a2a7c2", "indicator--36c0510f-f0dc-4905-841e-6af4496269e0", "indicator--b5dcaa14-7a0b-4b61-a5a3-adbd840c8575", "indicator--3214b613-3fae-453b-bffc-c237cd34a82f", "indicator--cbec5abe-9bff-4d7c-9e7f-534d6d635220", "indicator--d31cf78b-70e0-467c-bb57-e0e36117665d", "indicator--fe51c723-4556-4bc7-acac-20f7fb1cf07f", "indicator--c23393d5-e4e6-430e-b59e-281e7556c827", "indicator--72cde115-3126-4b39-bf15-cf83cc40f6e5", "indicator--e7866a56-0c4d-4602-83cb-21de956c487d", "indicator--916391a2-78a4-4627-8bd2-485504e25374", "indicator--8ca52f7b-63ea-42f8-bd4b-bbf6417747d0", "indicator--6b4380d9-a69b-4f29-88b1-406b9b2a9853", "indicator--5c22024f-37a9-40f9-a6d1-a00c859d0112", "indicator--510ff8d6-17d8-4524-b12d-d23322aab38a", "indicator--54265dba-017f-4290-99f9-039a1cca161a", "indicator--2c21353c-366c-4b59-a734-6e89d5b5f742", "indicator--a5ece907-6e0e-40dc-87d5-2ce52a77afd2", "indicator--fd9bf758-6689-42e5-801a-d257bd674375", "indicator--4a15b28d-fb22-4d62-a6d8-d59efb32043e", "indicator--e8558b70-a422-4cac-a6ca-cc57f7762922", "indicator--808f32e6-aeee-45bf-b53c-9f326fac4091", "indicator--d40a91fb-a92b-443a-912b-1d8f19d390c2", "indicator--e7e72aa4-ad59-42d2-b720-35a7025e980c", "indicator--45a7e308-24ef-4faf-a40d-e7dca1004b7e", "indicator--e3a30104-564f-4dc9-bc01-fb7adf8c6bdc", "indicator--9a932421-0c8c-4670-8626-f727cda25c71", "indicator--72d201fe-f685-4cb8-9707-a666623a4f3f", "indicator--95742da9-61f7-4a2f-8c2b-1d676de43065", "indicator--06162299-90b2-4053-b28f-52187e2b36c8", "indicator--6921ce4b-924d-491a-9117-995fbe547139", "indicator--c85c3113-3d8b-433e-b59a-80f1a32a0908", "indicator--ccaa8063-3f35-4812-85ea-8c9fa5f5f22e", "indicator--8fbfa843-8522-4c31-9017-628dedf20221", "indicator--c428eb9e-dcf5-4129-8c8d-60672e54deeb", "indicator--4b9f8096-f60d-43fc-b900-00b57e57c9ec", "indicator--28728fef-90d8-4d67-b8d8-71aa8c4f9bb3", "indicator--5b09f82e-8f94-4e7d-989d-a3b545b8e6d6", "indicator--fda6a6c6-3da3-4183-b946-6f3261f9a96b", "indicator--78fa487b-d564-40ba-95c0-2cc8bc6f24ad", "indicator--f2d2c0f4-3514-4cb6-8962-2faedef7c348", "indicator--b717a2c6-e314-496a-a58f-7025b4795970", "indicator--46bd851d-3be8-49f2-a6ed-b6d9c8572ed9", "indicator--fe2b326d-8837-4c7d-b79f-d94320e71d47", "indicator--651efa44-0e0b-4de7-96b6-4e4a3277facb", "indicator--8d2cee81-f8ef-474d-8412-c1b96d9fad11", "indicator--7b4c0f7e-85c9-4658-b4f9-b7ca050520ea", "indicator--99778f30-5efd-44e2-b254-4cef60324ead", "indicator--b33f465e-c845-4b9c-8742-62a2a5619b8e", "indicator--40d0d58e-9dce-41be-a1fd-4dd21f6eb5ce", "indicator--4e3df726-4f15-477a-93d6-30058a644ac7", "indicator--e960ecff-6aa5-4e02-bab1-287ff79ea624", "indicator--ddbcd659-b02a-4d0f-b9bc-3efe33365f3a", "indicator--9248f9cf-4129-4096-81f9-8c855def1919", "indicator--b18053e1-cc53-449a-b6a0-d5da4df551f6", "indicator--89e44fee-31d9-4e54-99a4-45227a4c074a", "indicator--d9462002-61ba-474c-9a75-508b082d7a61", "indicator--b08eb209-a966-42bc-bf3f-e2a8b4a8d647", "indicator--e6e1687d-886d-404a-aecc-c4a8b5142e09", "indicator--28cbc23c-804f-44bf-9171-ca72679a3bec", "indicator--95f05ab2-7f2c-45bb-9f1e-93ac5e5f0de8", "indicator--94b6afdf-bfa3-4303-bbe8-2e9be5a8da37", "indicator--9615bf46-e011-4210-8662-28ae134c481e", "indicator--1e015610-ac95-4d56-b177-b93c8553dde8", "indicator--e6f92b64-1417-40c0-838e-7ca374c1d630", "indicator--8d9008ae-c298-4e42-99a5-499323e122dc", "indicator--6b61418c-d4b1-4936-a90d-3ad704b3719f", "indicator--cefc86a4-2d91-439c-805f-aa1e366dc372", "indicator--46ca4554-d114-45a9-85c9-ace90d5d848a", "indicator--d857c61c-9fd3-4bf1-ab11-f2bf866678df", "indicator--e0636a2b-be2a-4a8e-8d65-3980f45c795f", "indicator--ceabbd6f-70dc-4a0f-a8ee-ef5f72053bf8", "indicator--22560fba-bd86-431e-a19b-12fb0ae97ce4", "indicator--ae3c6d3a-a2dc-4e1f-87b9-d957cc3a50a4", "indicator--e882a21e-1b62-400f-8da4-6fd48c7773e6", "indicator--645b8922-12e5-4279-bdcf-a6a7d3174728", "indicator--965eabeb-204d-48fd-b0f4-23bcbecf3ec0", "indicator--8cc89fe7-b429-40e6-823e-ffbb7f40b4f5", "indicator--b65e14f6-22ef-4f79-a27c-e42fe42b06d0", "indicator--ecbbb700-8f06-4476-a315-ece74d7d71a2", "indicator--6a0b81fe-1bf7-4382-998a-d76994f3c04d", "indicator--5667520e-c1ee-45c7-b355-16881947cbbe", "indicator--b43207cb-ed62-427b-97b6-acb08865fe7b", "indicator--deaf8312-7654-4f74-a457-f179c54a54de", "indicator--98e50f51-0708-43ed-8cd3-66cc84afbed9", "indicator--a144403c-bbc2-4958-8ef9-0e26cd5e9610", "indicator--29d2d9fc-3506-43e6-8e03-cd9405e29476", "indicator--22ee51d0-51ed-40db-8578-f3e0c3b8a3e9", "indicator--a596d524-9a3d-4c28-b6f9-21145d5ee64a", "indicator--f02b4523-30b2-4e65-a69b-e8ebc0e4af8f", "indicator--116ae1e6-92e8-4f23-9cf4-4ae5e495c55a", "indicator--97c6788a-cc5d-4ce0-bf22-eda6726f8148", "indicator--15ea176c-522a-4b88-bb7e-b741ba2a5c60", "indicator--76654b50-18e9-47a9-9bb4-8be694363db3", "indicator--d35971ad-d0c2-47dc-a548-d1bc78e93846", "indicator--ff49a463-c587-4983-9af6-4012b1a4461e", "indicator--d4d95e3b-60cf-419d-b91e-d21b08589922", "indicator--0ab91855-8caa-4991-92e3-1d4533468e49", "indicator--883a1500-8416-49f2-a53e-97e56323a64d", "indicator--31894472-e5c4-4cf8-856f-2621de01ce96", "indicator--1f0c2b3b-c17e-4543-98d6-324e93fa435a", "indicator--f95c12b8-d1e3-4232-8ec6-9ed96b4e41b1", "indicator--289aa12c-d665-41b3-8963-e452ec63d413", "indicator--41b950b4-d827-4170-a139-45cfe5d53bc8", "indicator--b6fea710-625e-4724-948e-f37dcafca9d2", "indicator--c7fde12a-5b7c-4a12-8ce8-e1a1b67c6cb6", "indicator--9cfad533-560f-4f65-837a-a64f9b8d9e98", "indicator--65e5c4aa-83b5-4b56-b153-7ed8df7a08f1", "indicator--aa1d7e58-d6fe-4ebf-9dd8-740e105fe297", "indicator--a08ecdf6-f579-4028-83e8-33ac163c7e20", "indicator--860795af-22e9-4f23-bf14-b7d7b7ee92f9", "indicator--500f9141-7ba5-4300-9086-8b18dceb0882", "indicator--1216405c-af6a-4afb-b050-6a7a96eb3798", "indicator--c5489396-d5eb-46ae-b466-8dc1363cb66a", "indicator--d65a2a18-5fc5-44d6-bc57-aff8ccb6b2cc", "indicator--13e4f096-a73f-484f-a14c-59748a080040", "indicator--3f998673-90ec-4b7c-ac5c-4097b6614d2a", "indicator--071f16ee-4008-4bad-baf8-4529ae91b6fa", "indicator--aa9719fd-9ce9-4773-b8c9-6ad40a317229", "indicator--d661cece-3e18-4abf-b91a-dbabd4a71bce", "indicator--2fad7027-0c80-448b-9298-5916aa0ff337", "indicator--633478b6-ecfe-4961-b4cb-6c45116ddce1", "indicator--eedc0bab-aac5-451a-9243-c116a2d4979d", "indicator--9dc9598a-0a76-4b4d-84fa-c886a1472f80", "indicator--6c562def-736c-48d7-a8d2-b40312fbe97e", "indicator--f1416370-36f9-422a-a539-8b4082966ef1", "indicator--37f4fe56-72fd-4262-b6d1-218dac83789f", "indicator--560b3fd0-206b-4f3c-95a3-37a335fb852d", "indicator--f7e8250c-6632-47ac-b89b-747911f999e9", "indicator--bc565490-4e44-4f76-af6f-bf89b7469eeb", "indicator--d229ffe4-0263-4267-ac4d-d367444e5ae7", "indicator--ed59e21a-43d2-497d-a6ca-41584f751fc7", "indicator--44c53091-8c9c-4519-8cb2-3e2c093dfb90", "indicator--41c69d86-db22-47ed-aede-7d71214f071c", "indicator--b4e29ec1-ff31-424a-a19d-8a719ced1688", "indicator--4f387908-e122-4e70-9dd5-009d3fd75ce0", "indicator--d45c5de1-a190-4b8a-b6cf-ee738048aec4", "indicator--3a6cd5e0-31f0-4a7f-8521-c9e5c36b23e6", "indicator--dc70c192-a900-451c-a75c-889002264dd5", "indicator--78de6128-063d-4d22-828c-90b1e52d8a15", "indicator--e1b210a0-71ba-4761-9ec1-f93e70fde1c3", "indicator--9d86b9cd-1f0d-47b7-a966-416c740ede70", "indicator--3965ec14-1937-44f5-9b25-3c2a654ef631", "indicator--8b792f3a-824e-4fc1-9f66-77b03ad6783a", "indicator--342e77aa-d9ae-498c-b649-4d388ac2b38a", "indicator--7e28a39f-0fc1-4c53-b43a-380f2af80a66", "indicator--59577ca7-766b-46ea-ac4f-8d6311b2ce5a", "indicator--3181ec47-6cea-4d9b-88f2-235411d5da2a", "indicator--c1869226-bc43-4320-a511-d5f5807ebf09", "indicator--df90ff46-0839-4239-8952-40c5945b355b", "indicator--26c060c1-453d-4765-a416-023f07e34d8c", "indicator--fd6256cc-282f-459f-9601-7164bc7fe604", "indicator--1aac9325-8b3f-4ccc-a533-137cbb886947", "indicator--a8ac8c0b-b2ca-46a8-ad28-9e37b04cbd76", "indicator--7462ebd1-e1a4-46fa-b61a-789500cb650e", "indicator--320451e5-5460-447e-a674-75b10c24a628", "indicator--7c29f8f0-45f5-4ab2-ad05-15a14e1b8c7a", "indicator--28f476f3-721c-4a14-bafb-2a81d5f3841d", "indicator--a9f72b7c-0cdf-47af-b9d4-bc32a5667a94", "indicator--e1fb96df-bbdd-48ef-9b84-8155b159a5ec", "indicator--2240438a-d6fa-4225-a6ba-68be302a9d52", "indicator--deca9300-d386-48b2-ae71-0cb19ad2479f", "indicator--63930653-5289-4449-9fa5-4449bf871bb3", "indicator--d94e2a43-e2dd-4799-9066-dc5d38dd9107", "indicator--9b9fd96f-6174-438f-a0d3-7de1c8229b47", "indicator--d8a95be1-cd0c-4906-9c6a-fac306d8cba7", "indicator--6692fe43-e153-4e3e-a2d9-33a7785e3e5e", "indicator--ed71bf98-5b4a-4372-b01e-ee4f4a11f4ce", "indicator--a1c3748f-9df3-4410-8e89-5aee6d3a4ae2", "indicator--e217c910-d7d8-439e-8fb8-491d230b5032", "indicator--61e64700-a50b-4cb9-b89a-c014f457e2e5", "indicator--3755f7b9-1452-44e5-b3eb-7be8d393ac9d", "indicator--35ac48a1-2d50-4e52-b56a-22ae41edb938", "indicator--79400052-b470-4722-9a1f-f6f927066a4c", "indicator--0ea95600-10f2-48c4-9eff-49d6c7af05a7", "indicator--44a95e6b-d2c8-4ae5-8cfe-a0bf11038171", "indicator--893b3c01-a057-4fc4-ab7e-284c2ceee8af", "indicator--03ce2ba4-a453-41f7-96d3-b8487f5fad2e", "indicator--f9cbf8e8-0cc7-46a5-822d-3875bfd01e6f", "indicator--0de2a6dd-6cc3-43f2-a869-2e1bde8e054e", "indicator--3ccf86ee-9488-40ab-9345-b0bf254ab6e4", "indicator--68f9bb2d-4d44-468b-8406-c2c4a6d0a925", "indicator--c171de8e-db22-40af-b0c9-9b7b9777ceca", "indicator--7533c0ed-22f8-4c08-ae42-3ef8db93fd71", "indicator--0ca11d23-648c-4369-8b91-cadd2ff65bee", "indicator--3ca9c6ec-e84f-445d-acec-e2379655989e", "indicator--926eb348-9181-486d-b7f1-a8ec945c82c9", "indicator--5d49a79f-b395-4eee-a834-752f172851e6", "indicator--06cd4874-05c4-46ab-9087-aa2a665c5926", "indicator--9b8ed264-3282-43da-b603-ab3492768d2b", "indicator--91eb0f8a-819c-4951-b729-38c6b383c41b", "indicator--3e4b6b5e-9c3c-4cd3-be92-d8a795bcf1a9", "indicator--04fedbb7-af31-483f-9d6d-e298ed239177", "indicator--9dab0d0c-befa-4fda-8c23-9fd9c3f20509", "indicator--237cdb98-5b85-4f9c-b671-493c3dcdab71", "indicator--4916addb-0d30-4113-9a73-f29c25411419", "indicator--5d19e3cb-3778-488b-8021-0293892a5bb4", "indicator--5c9c0110-fad4-403b-b220-1571e8929726", "indicator--7d4181db-da12-48a0-967a-d3df843971f4", "indicator--02474d9b-5e37-4558-b717-659f54d409c0", "indicator--f2e54f47-e547-42b0-be91-b08f61b88c72", "indicator--a37855b9-8361-4f1a-98cb-77f510bd81ed", "indicator--90c4f687-8386-4068-8bc1-94cfd5209ed4", "indicator--3b0c3eb4-710e-412c-986d-77f6d776c233", "indicator--8c202ddc-1a79-4cd5-a4b5-9ec7c74b90d1", "indicator--00a16432-9a8b-4399-9f1f-8ed76e41675c", "indicator--7a415da7-5ff6-4d41-9d76-ed51bc3965a8", "indicator--2f9a5a47-de97-4a25-9e65-1d78259f9a83", "indicator--eddb7102-8bd5-4e84-aa1a-07cc5ce9a4ac", "indicator--73d25a39-e9cc-4f06-a491-303108e36c12", "indicator--3c9f5f85-19c4-4219-a8ea-48cdbcd705c1", "indicator--895926eb-2ece-479c-a8d3-41b191ff8b6a", "indicator--3a893093-425b-4b15-abc4-13876d19e61e", "indicator--b0a1e63e-f5e5-49c1-b004-a034025115e9", "indicator--d4da1d78-a4a5-4d4c-93fb-2c4b4185d422", "indicator--b409d2ed-9d37-495e-9335-3099244f4fba", "indicator--3a368048-102f-4df2-8802-a29304d2dfca", "indicator--1207aa33-900f-44c1-94c3-9e5dbd7dc2a1", "indicator--d356f95d-2a50-42bb-a9dc-d62efbe4d849", "indicator--c5094649-499b-4e66-aaa7-56343f8e3001", "indicator--3f06ae9f-6a03-4c92-aa44-5b8e645d6f45", "indicator--7e0b2bda-8d11-4027-9a1d-9412320545e6", "indicator--00d97db5-5e72-4110-8abf-b0290cac7458", "indicator--529ed9e2-0ad5-4902-8cc5-cb55c00d0cf4", "indicator--f25baf87-d552-4f53-8140-89ec020b2ed2", "indicator--14da53b0-94a8-48d3-9bef-a6e6f1df05a5", "indicator--a3038c3c-adcb-4988-a8c4-942c478560aa", "indicator--3eac5ff9-9a02-46b6-8d5d-e577102f5c86", "indicator--feaa3b2b-50d1-4851-8e20-1c8c416b132b", "indicator--8a410b66-1c9c-4d25-a663-6b649aa80748", "indicator--8086ef11-ff7a-43c9-b45f-57693eabbe1c", "indicator--33d7c1e2-725f-4c2f-928b-cf80ab8e2cbc", "indicator--6793e9da-f2ce-446a-a3be-148fd8d20989", "indicator--db984cb9-a39b-4613-8e70-a6b4506c7643", "indicator--7f8bfbd7-d041-4a87-83d5-569c2e0bc109", "indicator--a77ff3ee-73fc-48f2-9531-562ff3a15a6c", "indicator--b6548b1a-8f1d-4922-8ccb-6310df8a979c", "indicator--8b360549-ce41-4674-8b44-52931282adc1", "indicator--5f24fa0d-5646-4c8d-a84f-f5137eed7870", "indicator--e46bb239-bd45-43fa-aade-1300973f2079", "indicator--00b83cbd-f971-4b2c-89d9-cbab9af00b07", "indicator--0a91e6f3-c09f-449c-b11e-1b2b9cdedab2", "indicator--b68c00ed-fd7a-4085-8738-e257968dbc22", "indicator--255e3203-3a01-4049-a312-1a40463777ba", "indicator--d9da647c-8388-4035-8a7f-e141da43dca4", "indicator--213e4569-c67f-42d7-a345-d7b1bc875859", "indicator--cf0340b7-fc89-45c5-a43e-cf6e17771ddd", "indicator--c4f3feeb-3923-464c-a757-96aa32e662ee", "indicator--116f5c7a-4d4f-4f11-8742-2a7b8bbf4bf6", "indicator--3587d91b-535a-4ae9-8cf8-fad851ecf627", "indicator--d490436c-d5dd-4ee9-a347-b47a20675c1e", "indicator--893a41cd-d389-49ae-a154-ecccde499ac0", "indicator--a43f5d82-c635-49db-b2f7-e75ae8f1d66d", "indicator--c4bed46b-26d2-4edd-a3c9-bd2c35322598", "indicator--ecd81a93-d423-4218-ba4c-1ac4b8575e7a", "indicator--3021c006-0fe3-49e5-b739-1b0b4d9a3a62", "indicator--31ccab27-bb3b-471e-9271-859e37dde863", "indicator--73d38e30-2edb-4371-a555-f892398cff5a", "indicator--86050548-cf68-457d-b486-6d192eb327b7", "indicator--45eda53a-6815-4a8e-8efa-bba15bbbb1c5", "indicator--facf7325-957f-412c-83cd-7a3663f050ad", "indicator--25f03d38-0020-4c00-aed9-336bb8de7d08", "indicator--364892c1-ba04-4aa9-a2a5-ec42188b9426", "indicator--96792b38-cd7d-4da0-947d-87d3ebc7691a", "indicator--910177ad-4a51-40ad-98e1-27e4737f2eb6", "indicator--7d58674a-5407-4497-bd7c-021f806c0e1e", "indicator--8f2d2fee-c99d-4a6a-b178-63ec724b65d8", "indicator--9e8e468a-d5dc-47be-bfe9-fb0a2947b813", "indicator--c5d01a96-40f9-43f5-8a2e-b9bda8ed9113", "indicator--717ea2e7-8373-4210-84c2-54a4a765db3c", "indicator--b75a4a3a-24c5-4097-9617-622cdd98c0fb", "indicator--b0017dbd-7022-4a8d-8baa-bf1a6cb6b5de", "indicator--ed2c7e55-e706-4c28-901e-d4ad4ccc9d86", "indicator--ddf263e6-ae31-4c45-b949-1facba0dfdeb", "indicator--1585857d-645f-47cc-96e1-5c395fb1e3df", "indicator--995a2c55-b3c2-473c-b5b9-01b195288be1", "indicator--d198e504-f62a-43a0-9339-cfed08fa1094", "indicator--693df1d5-21d7-4f0f-9c79-619a76e37dd8", "indicator--35343034-e0fa-4ad5-af94-296e837f8ed8", "indicator--7ece2be5-1139-4c43-87ba-c1e2fdc66ef5", "indicator--99e1094b-622a-4879-9137-de6c1b9a52dc", "indicator--7d239e4a-c306-4ee5-afe0-de2fb54eb688", "indicator--3dee85b2-e881-41f2-8266-fbe418708e50", "indicator--6c518394-c1cc-4bfd-bcfd-3a6a4ffabc1e", "indicator--9bef8b6d-ec03-444b-bc03-722293125fb7", "indicator--f15ffe13-1c5e-4a00-ba7b-ee729cc50593", "indicator--78c9719b-de78-4fd8-b938-d2b7f01064cb", "indicator--33f7c608-a46a-4c4b-9ac1-8f46ed53388c", "indicator--291cbc5d-c95a-4ae0-b38c-0cccfc2be419", "indicator--ff542e4f-a6e3-426e-b08e-63c0c9d1bc0d", "indicator--b85a84b1-f7bf-4e2b-85c9-6636d4a00905", "indicator--7b0f3f60-c81e-4336-952a-9cad86473310", "indicator--1faa61bb-c107-4998-af2c-363e1d3ebf32", "indicator--c223fada-3a78-42a4-9647-98ecaec58492", "indicator--4612c771-14b9-4cf9-b693-ae07bafa7a61", "indicator--f29bec14-e43d-4174-957d-cec01a4e13cb", "indicator--4a916899-7873-4a85-ba94-c44d5b23284f", "indicator--0ae6d954-7a63-4536-a26d-c9424e0bc05d", "indicator--7cb375d7-02d1-445c-aadc-36cab39e3dd7", "indicator--692aca68-801a-4d38-9cf8-a6e5d6c4527b", "indicator--e9944b22-56f7-4753-af9f-41c1d46dee41", "indicator--cc9975de-06ad-41fe-95d3-242fde44bc4b", "indicator--caac1a29-42cb-4ba3-8775-63fa3a2e403e", "indicator--24ef2f4c-d708-468c-8706-46b444e22d91", "indicator--7c5d0052-31a7-4299-898e-2e8c2f1fadb1", "indicator--0abd1160-a124-4563-ac35-ffb74f019fdd", "indicator--738cf6ae-e9b5-457c-9f96-7b85571706ee", "indicator--fbcf2f28-2c55-450a-a2e8-17e5097f8d57", "indicator--a5d4e6fd-8c84-4a30-bb16-130e56b7a9d1", "indicator--fe080e5b-9ca9-4c82-86bf-839e071bbeaf", "indicator--a008c19e-07b9-4326-9a7b-2f8a8cd3c6aa", "indicator--5526fdb5-2744-4845-bce2-4b9636be043e", "indicator--99b01ba9-5872-4b80-a909-203be98d7804", "indicator--9ab214bb-7c18-467c-878d-bb2167e0a21d", "indicator--7cf31ce8-69d8-4516-9d53-30f84d6d25bf", "indicator--acdd760b-5333-47e3-9d6d-a088926bbe89", "indicator--8d89a50f-b2bd-4a0c-92c3-e52a2b4ffb65", "indicator--0b283d2f-5692-4020-8341-0a5a7d061517", "indicator--4aa1a8dd-4250-4c17-8e4a-aaafe37b1619", "indicator--e9d4c4f8-eced-4277-be02-a5cf1c1a9a00", "indicator--e0cb370f-d1df-4797-8880-43590bd520b2", "indicator--b4c1120d-dd16-4d67-9929-04fb60f95722", "indicator--1d0b90b1-ecfe-4f8d-a1d0-ec46c15fd715", "indicator--470879c8-a58c-4954-94d3-8cb742f2cb7c", "indicator--0e2de09a-7947-4308-bb50-a0d4a78b2d7b", "indicator--8e23dc3d-e593-4a0d-a058-529e17194b21", "indicator--bd57ef8b-de1e-479c-a23b-5aef42588928", "indicator--8b8d146b-6f27-4b5f-ab3b-1b631446fec2", "indicator--7b714c22-a2ee-454c-a298-eb7c8f43ed86", "indicator--38f1818a-5aac-44b8-b50c-3cf513ddcd38", "indicator--68a58de3-6e58-48e5-a6d9-27d391202139", "indicator--c9d9ee15-021e-437f-a67a-6f766e9ee472", "indicator--14b2180c-9283-4b28-9aa2-47d2503dc18c", "indicator--f8930021-8d6e-4157-aa86-2a5a369bfa00", "indicator--73a8c915-24ad-4e0e-b213-d9f897d7d8c8", "indicator--1a92609e-abc2-4faa-a844-32464c54e8e8", "indicator--50ba1b04-8263-4419-b2f0-49d00e49c5ed", "indicator--a31f6dd2-3748-446a-b73b-c893d4dd4b19", "indicator--75ada6ec-8d1d-46cb-9c33-a940f41332bb", "indicator--e53c59d9-a50f-41c9-ae8d-ccab043b1441", "indicator--faeae08f-7e92-44f2-9b2f-d63839664e4b", "indicator--2a7937e7-d097-4088-8d81-f2320efea04c", "indicator--0a11bd4a-65a3-4636-a613-e96683043f22", "indicator--ef949a78-4bea-4548-ad00-32df3710ae95", "indicator--0d94cde7-23b0-4144-9426-a204d7505fa3", "indicator--5d588728-8cfd-469b-b336-0c1f098fda48", "indicator--da4c4e15-3cd5-4804-99ab-213495114bb1", "indicator--229e6431-cef5-474a-a432-d79fdd3fba62", "indicator--1ce524d6-4332-4856-8823-5bc0a94a4556", "indicator--ebf69ae2-eb43-4523-bd82-2329a62aa54a", "indicator--7e47a65c-f711-47f3-9450-12accd10a1bf", "indicator--0133260f-eed9-4615-9d71-8cf083295af4", "indicator--ccec49da-fdf3-438b-93cf-f46809df1080", "indicator--1563dc59-996a-4a7d-83c1-b33727054f58", "indicator--4ba6f373-dc9d-437c-aef0-6d6ccf865872", "indicator--03a49f8a-cd90-400c-bdd0-90e3d12813a4", "indicator--cb2939aa-3436-4fa5-ab40-6d2ce2b8f748", "indicator--2f359b76-02e2-4d98-9e63-feaef2ef5081", "indicator--bee11034-0ff6-48bb-b223-47c96fa08d14", "indicator--70a3ac25-be45-4f27-a2d7-bf15130e28b0", "indicator--d9f32535-8d44-4195-a22a-38fbe5ed7759", "indicator--b28c6821-88ae-425f-ab4b-719e359840ab", "indicator--ef14fe6e-b418-40ac-a38b-041033f307eb", "indicator--95c1f7e0-3d50-46f5-9b70-6d446965381d", "indicator--172ceec4-9b93-43cc-9c93-c88a319c873a", "indicator--5d3d26d5-72ac-473f-a48c-b60dbe8bedbf", "indicator--b6b40c2b-5738-42a4-9f66-66e00055a8bb", "indicator--55c75785-f843-4cb9-bbcf-843b9e5f6259", "indicator--f43d48c3-2bbf-4448-8895-8ea73749c306", "indicator--4c37837d-a1a1-4b8e-9939-c3cc018e12dc", "indicator--b51cbbbc-03b2-4f7f-ab5a-131ba6525ce7", "indicator--995d5508-49a9-49b8-8e9d-7b3094163a3d", "indicator--b5103b73-2f77-4382-bb1f-2c37678a4557", "indicator--63916b78-cd62-49a0-94c7-1bb7849f9923", "indicator--2ce8517b-5e5a-40b7-8d46-a72d004ffa1d", "indicator--d22ff011-7bb0-49ba-8843-515a81096bfb", "indicator--9614c8a6-839c-44d6-8f96-333dd64af43d", "indicator--679c6420-a01e-417a-a41d-044f7f4780fc", "indicator--996357e7-bfde-41b9-a2a7-5dfe159db81c", "indicator--2e1b0243-c9c9-4d41-86cf-4d7dbbc4057a", "indicator--dc0ef6fa-c176-4672-8beb-9f6edd2cfec6", "indicator--035ff2b2-bbb9-4d2b-9805-43ae78ff62fa", "indicator--11674496-e992-405f-bbbb-5bdf115c1a11", "indicator--5fd432e0-5e48-423d-8a54-f2476bbf7733", "indicator--5c2c747c-df1b-45f8-9dd5-5247b520de7f", "indicator--cdd2c2ee-b8d6-4ff2-83a0-d688eb31df46", "indicator--28aa92d3-f7f4-473a-b26a-ca3645e8d74d", "indicator--e496701f-9591-4096-a0da-10bd606b2db5", "indicator--86d563d3-cc7d-4d52-910b-6fe2fd589638", "indicator--4687c72f-c9d3-46c1-9671-3d3a1b104896", "indicator--99d97fbd-e3b1-489f-9836-bf5822b11033", "indicator--dc771653-d7c2-4e3d-ba77-65c8a7428768", "indicator--b763942a-9fe2-4a78-9b9e-13e97cb26935", "indicator--53219ebc-2352-4607-ac04-e5f37311d4f5", "indicator--05ca036b-2883-4f37-a9eb-2ff6a7143ca7", "indicator--d4f8b5d5-bb0d-4531-875b-88bd40b15475", "indicator--cbd0fac6-f382-46bf-a3ad-07c5aec0bf13", "indicator--be09c22d-5955-4a24-b9e8-8424dee9e301", "indicator--9c61c1e7-9046-4c91-91b1-e847a4996131", "indicator--165a6d0f-fd87-4f27-b0f5-8a339dd0352c", "indicator--d699a0b9-628e-4b38-8caf-6413e6e30bcb", "indicator--34c4d024-dd75-40b5-84f6-db0155a53d81", "indicator--d6fe82d9-b034-4f6f-9dcb-f9fc7a4a1cea", "indicator--b24ca0a8-747f-4a0f-b1a3-ed303a0c5aef", "indicator--92791125-cfd2-4402-93de-cc0f02a0c42f", "indicator--7fda5bed-9aa7-4ed3-a9da-ed7f530e4e12", "indicator--10156370-921d-4e22-ad1d-18bd118cede2", "indicator--f4a6c4a7-be05-4c0f-bcc5-d3c20eefec36", "indicator--a7f529b9-7f8c-46ed-a744-5df960fbd284", "indicator--d1a442f1-aa4b-4793-83ac-bc0e2e2564ad", "indicator--e7d4c29e-1568-4e83-9592-ce675c497c13", "indicator--e8572310-1027-453d-8559-4fce2e13777a", "indicator--2cce37f0-bdc8-4fe1-ac7d-54e2930bc8f2", "indicator--ea44008f-fa70-450d-b8eb-408032115d43", "indicator--5bad7991-4ad7-4f01-81ec-a48e70efcd80", "indicator--4c384a16-d6c7-48e5-ad0d-06b6a31c93a3", "indicator--2b99728d-36de-40cf-9c93-eef345a12ed1", "indicator--83f72531-1a9b-43e4-ad49-59903ca12ee1", "indicator--22956db1-1544-4020-b133-2c260afd4cef", "indicator--6ba4e876-1789-46a4-980b-440d858ef977", "indicator--83eaa8e4-3be3-4d77-a480-822186457dbe", "indicator--26a7a017-2c3c-4260-8b21-c3bdaa15d3d1", "indicator--2cdbc448-a87b-43a1-b6ff-cd114b51c38e", "indicator--904c6726-a3d0-41f4-b2b4-357ca265bff3", "indicator--77bff57c-88cd-469b-a8d4-87a400bd8a2e", "indicator--df7051b1-ec8c-4c26-83ab-220481ddc812", "indicator--93c3ffc3-303f-488f-8361-67d8e937b77a", "indicator--772e911e-b787-4ed1-b6fb-457df8b4a7a2", "indicator--3ad39cb7-8851-48d9-b386-6e1605b7836b", "indicator--1df08a95-8b2d-4786-bc9d-84d80e8cbf52", "indicator--ade8f91b-b4d6-4d33-b90f-8e28a57007bb", "indicator--60553804-f606-4fa6-a7c1-e71a89602c2b", "indicator--a776cdd9-32db-44c1-a63d-a70142a32f5d", "indicator--31e9df28-211f-498e-bded-ddef90b501e2", "indicator--b7230f82-1357-4ce2-a49a-528152af2329", "indicator--6f5f8b21-598a-430d-8ec3-bd7e10219d9b", "indicator--508fb936-3cee-49ad-952b-62f25e90ef20", "indicator--39756a02-e5fa-4cf9-bcac-a3a24ca8e0c8", "indicator--bf076703-4107-42d7-bf93-4b4c8c2c2fe7", "indicator--3f0ff625-958f-48f0-89db-594c36e1fff8", "indicator--4eb5cfc8-1ee4-48fa-aafc-a07363684f8b", "indicator--d1175a78-7947-4d11-8549-e7e029c9a191", "indicator--8e0e85e7-d9d9-4c00-9e8f-357a3b4cbefd", "indicator--0ed58296-2cba-496a-92b6-424ca05fb1a1", "indicator--4017b095-f87e-470f-863b-866d3fb0f3ee", "indicator--8e9d70f2-37e0-4625-891a-2b9988695bee", "indicator--12ab2a81-6ec8-4195-95a5-065e2ad7a91e", "indicator--ebb8f0d5-f624-41f1-9ad4-b9527ac6f55c", "indicator--c960a45a-c081-4927-ac8b-c287fec55c44", "indicator--c5d7e805-de3a-4ea3-b57e-c6d70913443a", "indicator--f6c98e2a-aa20-40ce-904e-a4f9709864c8", "indicator--b16d12cc-e429-4b53-93b7-823f98ce0cd2", "indicator--9f453b62-1e63-487b-ba31-0c160ecc314f", "indicator--c19a5675-e2e1-4e26-9fa2-f1c51cca9ad3", "indicator--836f7f8e-2513-4eac-8c6a-413802e9e80b", "indicator--8c96fb21-4c4d-4606-a93c-76b96ec0e767", "indicator--05488931-191c-47ff-8fb5-79bc526b99a8", "indicator--ee28c465-ea87-42d8-9fca-74a8e953a4d2", "indicator--aa5b7015-42c3-495c-8a0f-aad03cd98445", "indicator--d1ec3407-63ed-4a33-a23b-eabbe113f168", "indicator--f622d7e8-8772-43e9-96f2-14af151285aa", "indicator--ef4453c7-a3cd-490b-a883-2eed08b4ed28", "indicator--491ede56-0ce2-4931-9af8-9aac41e3086a", "indicator--a6c0f97a-242e-4d8e-81d0-2b13c1efa2d5", "indicator--dd34f5f7-1c14-40c7-8221-0b9f04be7579", "indicator--a49b6e24-7012-4cdf-acab-1be0f08c98e8", "indicator--ac1f1906-e811-478b-bca3-df3fd20eb4de", "indicator--3c8d1b2a-cf3e-4d53-a415-f21cd355b1e8", "indicator--4ea92f8f-3a04-45ca-942e-163ba2989323", "indicator--3053e88c-7d84-4811-b4ec-28d203431e25", "indicator--d6a7892d-37cd-42fd-9192-a93b39a88768", "indicator--4c0e3f66-14c9-431c-b72d-cfe70a8c508d", "indicator--2af0470d-ef96-4794-bde8-ad5f6bfe50d6", "indicator--0a563aee-e717-4945-9f18-5c9f6626e65e", "indicator--85a72770-1ad2-439c-ad85-a353f86c8e8d", "indicator--130007f8-65b2-496c-8143-56e36b245cc4", "indicator--9e974221-a214-4ccc-a95d-d6547bb5c456", "indicator--d3964d1c-9d56-4435-8165-59178713d236", "indicator--bf852106-7122-4593-8be6-0a73e8e53cd0", "indicator--28cd6976-5b98-4381-879b-de089c2860c0", "relationship--a739f77d-167d-4984-bd94-6a64333cb9ea", "indicator--69dc7a49-77e3-4fcc-8385-71f51345c605", "indicator--db3df973-8cda-4193-891c-2c8d9cd2f01a", "indicator--a2b517b6-507b-458a-897e-ce68e462c391", "indicator--75b3983f-7bff-42b8-8973-2159ed8b987b", "indicator--6c625d5f-7e73-46b8-ab7e-e58b4dab7218", "indicator--5ab78365-3c4b-4c53-8873-98d3505cd76e", "indicator--d404df4a-c0d7-4575-baa3-f0187d582b80", "indicator--796015b0-e7a8-48db-89bf-eed789ca1b3d", "indicator--a34facc9-5892-48af-b37f-e216caf6285a", "indicator--fbb644ac-0693-4758-814d-80d821f185eb", "indicator--e9dda7e6-a746-4f97-9257-4fd4c5efba90", "indicator--6cb0bb5c-47e0-485d-8eca-29f860ad9c8a", "indicator--c642d04f-9e6c-405e-9090-c929880e5445", "indicator--4b3fbe70-2b97-496d-a0ff-641be697111f", "indicator--cba98381-eebb-4070-a276-88a829afadb7", "indicator--c41db4c6-4a01-4ff1-9f7c-25293885041f", "indicator--38fca5c5-4f14-4fb3-b640-973758276ab6", "indicator--b011a236-8729-4fe9-b4ca-d7f79549207a", "indicator--7f9ebc1b-19e8-4512-94ec-f601b7ad9a07", "indicator--5e719017-8c9d-40e6-9d07-b9e6799941e1", "indicator--c1454f62-cadf-4913-8221-181c86c4ad0a", "indicator--157490cd-603c-49af-abf8-1a7b055ad9d0", "indicator--ab9a95f5-cd7e-422a-b841-7e8fbb86826b", "indicator--ea7ac8c9-5330-4c8d-a405-4833251aac3a", "indicator--2b9921e7-be94-4a34-8ecb-01c0ec9594ac", "indicator--89b720f2-2155-4f0b-984b-c2f87ef28643", "indicator--fd8b04c6-576a-4979-a663-93be337cdf4d", "indicator--79065f83-4648-4486-a879-3d946762ba36", "indicator--0db64a88-4a36-447e-9fe9-e82579340c94", "indicator--f03098a7-0307-46e4-8d37-ebb1fadc2857", "indicator--a04e9ea3-ebb4-4393-878c-8c96abf27843", "indicator--a253f274-4680-478a-bd19-4265bcd1ee9e", "indicator--d369c6ba-0534-425d-aafc-aaad620a3b23", "indicator--b5d33d97-e4f0-426a-92cc-edfc73fc84f5", "indicator--02148a35-0ecd-4743-9c77-2b605545a880", "indicator--122bcace-681c-480f-9cc2-5f98bacc9d9f", "indicator--e93a2547-57de-41d4-8cc1-d3b126ee9b17", "indicator--55fd0b7a-a79e-4f49-a6dd-ae2078cd95b8", "indicator--db0a32e8-5c19-4218-9e6c-a3811179e955", "indicator--736ce406-ea62-4bf6-86e7-2c54cba8983c", "indicator--d0bd3a2c-21bd-4c0b-a18b-1bb2e58162da", "indicator--7ab77ab0-872d-4de5-bfbb-ffe79c9b55f9", "indicator--8fa43790-d110-432b-8b85-de17f0698f79", "indicator--6c6e220a-c2e5-4cd6-9755-92cd7433423f", "indicator--bc97f174-b9e0-460a-a4fe-0def7c4ef4fc", "indicator--939c14dd-7797-467d-a2c0-3873b6784e4c", "indicator--e072d301-cfec-4f01-b138-58b469364e09", "indicator--b4751fe9-b33c-4727-b820-2b995c446292", "indicator--d681e964-b9ff-487c-90d3-2e0126e42076", "indicator--ffda228c-0731-40a8-954b-783cac204a6d", "indicator--76444846-3510-4387-88fe-9949ab656594", "indicator--59e37005-8cc0-4375-b70f-455647f2627f", "indicator--b2701474-2484-4c4b-85a4-9e926af5a0f7", "indicator--349e2261-f33c-4cb5-974a-65c791f0de64", "indicator--7dd995e4-9f72-4406-a63d-d62e63c1556d", "indicator--d891f46c-cefa-415b-b840-422a05ce6997", "indicator--541df568-fcf0-480b-aab5-2545fd079e09", "indicator--662cc71e-2a2c-4a0c-a9ff-93a0b21c40c9", "indicator--bfeb234d-2c6c-4f59-bb54-bf2799f2e935", "indicator--ecebbd36-7471-4c10-987e-2afe68af0da9", "indicator--b320ff64-cdd6-4cb1-a27b-cadd7d080efb", "indicator--82de4f29-258a-4f70-93ad-fb206730a49b", "indicator--9af3f32c-c2e0-41c5-aa35-af09206a5401", "indicator--1499912c-a8e2-4ee4-97d3-6756efe4e7d8", "indicator--12ce6601-d86f-424a-b189-7903bba13e1a", "indicator--db640a2a-4b87-4a7d-904c-a51bb8ee20ce", "indicator--303ba7cd-001a-49a4-bc67-24c151d24f7a", "indicator--e0baba7d-ba5f-4003-81d1-5dd483aeb5fa", "indicator--f1db3b15-9743-462e-826d-f12c4646fd1a", "indicator--59ac6a5f-3910-4b74-a242-3022662da3f7", "indicator--9d908a30-0347-4d7a-84eb-52ebac8c96eb", "indicator--e64ac5b1-3631-4509-beed-966a2cae3a8e", "indicator--6edd6b1d-70fe-4839-b8fc-bd8710d42895", "indicator--01efd909-ca3b-4489-a5e5-547811515908", "indicator--19995dd5-604e-4aa7-ab10-627220878968", "indicator--ca184332-27cd-499e-9bdb-e7ba843c9e25", "indicator--dd88817e-000b-4576-95b1-1c2c53d9e8f2", "indicator--bfb79f45-ee25-42f5-a1e0-b1ecc238596a", "indicator--be120db6-77fb-44e3-a876-ac35502f9fbb", "indicator--064376d3-dd02-455a-b2a2-e222434b25f7", "indicator--a26117ae-242a-483e-8cfb-0311dae382a1", "indicator--d9418996-aff3-4ce5-84fa-e33c4fe8e538", "indicator--68ed346d-b603-4c87-aafa-18bc00d5a9b0", "indicator--7b81aa0b-2cbc-42e0-acf9-a6d34ebfb5b1", "indicator--9a88a458-933d-4a7f-9521-5addf28e68f8", "indicator--a58bb578-2316-430c-a3a5-1632f0deaf1b", "indicator--ca6dde8f-5908-4fdf-93ba-19a8a9d1a4ab", "indicator--7d50fb66-790e-4d33-a1ac-643416a13ea4", "indicator--3ff73bcf-2432-41c6-b1e6-e5209b8314c5", "indicator--041eb405-849a-464b-913f-bd4cfad5b8c8", "indicator--b0431d5a-dd03-4858-be2d-e185215e633e", "indicator--02965562-9265-4a89-8609-d97140af4fb5", "indicator--af4f69c3-fdcf-4c6f-af9e-d47d93166efd", "indicator--6bf41ea8-758c-491f-ba63-6af407a779ec", "indicator--fdb918c9-3a3e-438f-b2f6-b8e7d3cefc7e", "indicator--e411b266-3931-4bd2-8ab5-3287a6558607", "indicator--58443ee2-f2f6-4d37-98be-68a25d7bd273", "indicator--9b9edbc1-a823-4d3f-891f-8f3b3af009f7", "indicator--fede4c96-d407-46e0-a961-2c3a42adc22b", "indicator--7be4c27b-f494-40e2-b2fe-23f410843e78", "indicator--a0b51a90-43bb-42e0-8997-b3a6b81d75d3", "indicator--947a0738-f488-40ff-9f16-73c0d417c512", "indicator--1cc6a246-6d32-4c77-a06e-65040e6622cd", "indicator--6dbfbedf-040e-4ba1-9cc6-ef4aa35788f0", "indicator--edb89cdb-c485-4896-af47-01f58245b8aa", "indicator--c513a9f8-a6c8-4028-acfa-dff478e0c2a0", "indicator--6d59cb44-9af7-419f-a371-cea483bc77f8", "indicator--a453e7d7-1383-4b6f-8369-b4d33a4a0964", "indicator--262222d4-85bb-4e00-b46a-53ec8f54c954", "indicator--3c8e99ac-910a-4c01-84a5-c5f24a1764fe", "indicator--b33eb389-f8db-4644-8d6c-09af6b698440", "indicator--e0bb444c-0f7d-44d9-9def-4df3281df322", "indicator--2bc44335-2545-4120-865c-0297a9e997fd", "indicator--dab9f3d1-9874-4813-b399-92a4738915d9", "indicator--4c9d28d0-6f72-46c8-b778-7eb8bcd3529b", "indicator--df39bf28-4271-4010-b861-d6068a932a3e", "indicator--ad06a34c-cbcc-4da6-9f08-fd6edc10ae88", "indicator--9c847002-f494-4328-8a54-e88d170a1739", "indicator--996a10b3-5a61-4e3c-936c-b7213be7e7a2", "indicator--0cf88379-86ac-41d7-b5b6-723797e6d840", "indicator--7ed7ccfb-5d7c-4bc6-b682-3074556e2a87", "indicator--619dc1df-82ae-41a8-8baa-9c9cfe83e2b4", "indicator--58f71bb9-8f36-485b-8235-811e8ca3b4cd", "indicator--60bd04a4-736e-42f1-ad11-07813dde1753", "indicator--2b7b2f9d-245c-49d2-bd26-172cb47c5a61", "indicator--32127122-d3e8-4a73-93ec-36b3dc5090ed", "indicator--e605b299-d3cc-4274-9422-c8fc958a207b", "indicator--a44567b1-3cec-4bfa-b58f-284360b87409", "indicator--1af59998-a218-4619-8443-13e5bd963bed", "indicator--f90300f5-a0e3-45f0-948b-64bab7eee372", "indicator--e42ba1c8-073f-4a29-acb4-5f949a1b9c9a", "indicator--9679032f-f3da-4b07-815d-48d6811e8ca8", "indicator--800c57f2-de8c-43e8-9473-d94139b16d89", "indicator--697617cf-a70a-48da-bbca-e6bc4f56d679", "indicator--871428ec-68fe-41f4-b9e7-a9580d1911e3", "indicator--37f3598f-26e3-4281-930e-a89c240384e0", "indicator--8e6d7ece-3796-4fe6-9943-e8f2b62bc001", "indicator--a3125aac-63c6-49c4-88a4-cdb49d1dc087", "indicator--a0dd259d-6a34-4b01-be48-1569722b02ac", "indicator--2d350ab3-2ec6-471b-9588-645b99afa114", "indicator--44a2e65e-14f8-4b69-9a29-54c6903ad355", "indicator--8e39ec81-be5c-453d-80ff-6be4a39fdd15", "indicator--4e16019c-f3f9-49a3-8a2a-2c8b5b13edf2", "indicator--760c7274-b2e0-4545-b980-88551bf0bbfb", "indicator--6c92e2fe-58af-4668-a3ca-73e8f090b744", "indicator--0dcee3d5-17bd-46b6-a90b-df6796948666", "indicator--e92f8d87-5146-46e1-a924-5718846067ae", "indicator--d5dc737d-73f7-4265-95a4-9859e439611f", "indicator--ebe77856-9d62-4592-8707-681e071200ff", "indicator--91759d5c-1ec9-425f-a30a-c422df8d2c9e", "indicator--43727d0d-94ab-4bd8-8eea-781674c8fb81", "indicator--0e948361-1248-458e-8f55-518493613a4f", "indicator--686a1068-5630-4416-a125-64ccd58cecd8", "indicator--a204fdbe-393e-4cb1-9236-03ff68be77e5", "indicator--80969f63-392e-4c82-bf79-6c920986b2d2", "indicator--ebb7daf0-8e61-47d8-a172-d2414b4099fc", "indicator--819bb42e-e9cc-4d6a-9cc3-87031214fa02", "indicator--09de0462-c54c-4408-a6cb-c7f49221887a", "indicator--d905b3cc-f213-4f88-b7bd-6ebb2ec92687", "indicator--73393382-3309-4906-a8b2-f5b7fdf2286b", "indicator--b44bc173-23aa-4929-bb33-a58bbec1d588", "indicator--aa3b817f-1ad8-4d37-aa91-5f383ab298d2", "indicator--8fb79716-e0d3-466a-aca0-394c51cabad0", "indicator--3a71ed5a-7e3d-4c31-b53a-e87a0d65d427", "indicator--537822e2-f943-4609-b3b7-51e59af52840", "indicator--76cc1fcc-aa42-4df8-8865-9861236c2a40", "indicator--da4982ed-182b-4741-8680-9fa131f61d49", "indicator--d969ef6c-1064-4e2a-a250-99f6be5f572b", "indicator--6966d742-cf8f-47c8-9e5d-10dc7db1fe7a", "indicator--bd97734e-4471-4aaf-af6a-e12b7ab3be0d", "indicator--36ff7dd0-48b8-4b34-b9ab-47ab46e6d9c1", "indicator--5848c484-17b5-4774-a7e0-eab91f6cc9d4", "indicator--14355402-143e-4b79-9801-cd6d8f7eb954", "indicator--7846d610-59f0-4eec-b02a-6c44a5f36047", "indicator--7672eaee-66e1-4055-a81e-3a667b6e0bf2", "indicator--8adb680a-5a99-44e8-b939-998a09ea3788", "indicator--f66ec364-e5d3-430b-a6b9-efa6d5a434d9", "indicator--cf1111a7-2de4-4c0e-9f0c-223e38a113e3", "indicator--f6afac2a-aa2c-46f3-9b18-63212dee8069", "indicator--b1273cd3-5a1a-4936-b6ce-dcb0642ca6e0", "indicator--341ee233-0334-4f31-886f-4f58d0d2c91d", "indicator--f013200d-56d5-4d13-9602-36f8f0179a09", "indicator--7e69ed0a-7c0a-4ea8-9697-1bbcbe517e6e", "indicator--544ddb68-0366-4be0-9434-e12ba81c8ae9", "indicator--a099f256-6b8e-4759-80cc-66cd36e81a39", "indicator--1a74bf30-2090-41cb-9199-515344a0e38a", "indicator--657db52e-340d-493f-bb6d-48d5e61d38c9", "indicator--2622b90f-4edb-40a8-a0f9-d04936dfff2f", "indicator--2eceac04-8b59-4b06-9e41-66997b8b5776", "indicator--c2272eb0-3e8e-41f3-800f-6c40e1d789b5", "indicator--caa3d245-7499-4c82-b7b5-d7c6f19f00a3", "indicator--7e77fcef-f70f-47e2-a482-0f6915ce2a08", "indicator--6b208902-526d-4e34-94dd-4f1d11490015", "indicator--5787e674-748e-4a2e-a9e1-854d425b3e06", "indicator--777aab77-c0c6-4d50-8bed-ba98bbe84c2f", "indicator--869940f8-c780-4085-97fb-c020e022b630", "indicator--da42ed05-086a-4e53-a07b-46ad25ed3e3c", "indicator--a80a9f49-101f-4d7d-aaef-ba94e8443665", "indicator--4026edb5-1338-4db1-9750-ed1b12d6a16f", "indicator--e08d982a-aca5-402d-8c02-705e19cae574", "indicator--00ac0e21-b183-4fb3-a23f-1287a8489e2e", "indicator--e7e6c79b-3a8c-43e9-9e64-0da6385939ab", "indicator--2ea7fc62-9f7e-4914-8f86-0f6bfff5679a", "indicator--5dfb78c3-0496-4642-aaf9-ba586723deb9", "indicator--805e3f08-c1dc-4bb0-b064-66adac0ecbc1", "indicator--24c66501-49bd-4ca3-a745-ae5aa9ca3278", "indicator--ca0bcd0a-8bc6-4bf3-9681-ea120814e1dd", "indicator--41656a21-37b9-4a0b-9910-401a47e5c7f3", "indicator--298583dc-849b-497b-92e9-6fc4e13851ba", "indicator--a6f04e40-505b-43a3-94fa-d0a81fcc3eb5", "indicator--fe2a7b0d-909a-40ed-a291-b4bb40dbcecf", "indicator--6c1e72d2-b9d0-4ec4-9d8f-d2a53f364d02", "indicator--f7ba7bde-7041-4877-a188-7342409c725a", "indicator--5a92eb4d-54fb-4744-b36e-c01888bca708", "indicator--43139506-2ed1-4ce9-936f-865b1335bd2a", "indicator--def34abb-5d94-4a68-8b48-99364e2b28e1", "indicator--6a27742c-92e3-4599-b06c-098eec09750d", "indicator--8047d591-003a-4b55-a945-a3903ad7ea35", "indicator--4eb29719-6ff7-43bd-90ef-0cb4c140393a", "indicator--c9bc4f30-7d69-40f8-b7f3-ba1b5b4b9938", "indicator--e57bbb6c-97cf-49b2-94df-b108a0b99534", "indicator--c1d62279-d4c6-473c-a194-42d13ae26a47", "indicator--ce8b13a5-98ca-418a-a90a-b901698df740", "indicator--fc813d78-485e-4325-8f90-f9e5eb4d816b", "indicator--714076b7-6b94-4488-86e0-689bff86c49a", "indicator--f7fa5022-4bec-455d-a469-1ffbf74f57a9", "indicator--81059e0a-e119-40dd-a6e5-9c46742dbc29", "indicator--260802c1-d06d-4ec3-a846-ee9ba6d47cb0", "indicator--04522416-c4eb-4a40-b273-dba4f353c4c5", "indicator--dea1f93c-68e6-4d04-bb75-b2d4766c6405", "indicator--f4eede79-fada-4502-a663-3ad3985749d6", "indicator--e12fc2c7-d8de-405d-a0f9-8801769efa61", "indicator--c8a4842a-f6e5-4fbb-ad73-5ad44ded92ad", "indicator--dba45da9-6e2e-471f-92ad-23d0987f8a38", "indicator--f24df81e-decd-430d-8b8f-94545a9e2312", "indicator--26d99b85-1ca1-411a-8207-df1000a49a6c", "indicator--b0c21895-0dd4-4b33-9440-7c2e847dfaec", "indicator--082bea6d-42bb-4fd6-8058-bb62dafe425e", "indicator--560ba8aa-85d5-46b8-874f-1042ab065cbc", "indicator--d63d9dcd-ec91-4793-ad5a-9fe1d0642498", "indicator--562e3c23-ad22-46b6-873a-874bbefefc60", "indicator--6ad16e97-b34b-4a6a-91ad-5e26198cf91f", "indicator--ebebdbcd-ae9b-4cdf-9b4e-6ff9b5c31ba9", "indicator--0a84ee85-0ef2-4fd8-a67e-cd38216813fb", "indicator--9b12092b-bab0-46d0-b870-d4d1b81999f9", "indicator--039095aa-3771-486c-a5df-adf8c15cb0c3", "indicator--9556009b-dbe7-4216-9663-486526497151", "indicator--957835de-eaa6-4961-89d9-10a8a3151647", "indicator--298e2dfc-b1ff-4cf2-bc86-e918ce492955", "indicator--3c03216d-9a43-4dfe-8f2d-9fbaf9fee8d9", "indicator--6e7e7047-5c75-4c50-b71f-c93688f6e0ee", "indicator--42a08f63-758e-4210-adf3-e51835ae304e", "indicator--b5d19c6a-9c1f-4e7e-bc38-3271db0b6063", "indicator--2f6cd1c4-792f-4e71-835d-a00930eb85b8", "indicator--6ad806f2-2bf2-40a7-a266-f6211f2c7b12", "indicator--ef6f16b8-2d99-4de0-9613-aad09cb43fbd", "indicator--713a10b5-497a-4c1e-ae9d-76ec867b7cb5", "indicator--9cde9a9c-2e4c-42af-8a02-d2e794fa00e6", "indicator--64723e32-49fe-4097-b84c-abe32d365583", "indicator--d268335e-cc4c-4534-8d89-1203894e0e1d", "indicator--798835f8-04c6-491e-894e-f80abb6d1905", "indicator--d642038a-bf2d-4fa1-8256-eb2e4da0f4e5", "indicator--2c3cc330-107d-4572-a1b3-bdc14b6dd043", "indicator--eed173f4-00a9-4237-9536-b93548f28cd2", "indicator--a515a57c-f8dd-4b36-b842-d088a978d862", "indicator--89572e40-fe66-4d1a-9f6c-872b17ac08d1", "indicator--136b8492-d589-4bca-96ce-eaf4b02d836f", "indicator--66967b17-5264-4cd2-ba7a-63bf3906364a", "indicator--e8d6fff8-b730-4360-a19e-d7bac06631c1", "indicator--5cee4559-4d6e-4097-a02e-82c29f8b9962", "indicator--f478725f-39fd-4288-af2a-8ce6af941a5e", "indicator--33563c75-56f6-4bb3-ad93-245dc2e1a01c", "indicator--0a9dcf4e-9717-483b-998c-54b653d8f644", "indicator--58d741fa-5e2c-4ee8-9c11-2e185fef0158", "indicator--e49dbf6c-01b3-475c-82b6-a760e98f3940", "indicator--7a7f18a8-4f44-4838-92d0-812dee0376b0", "indicator--fcf68616-eca5-43c6-96c5-813924763562", "indicator--c7311329-a6cf-45c9-938d-aecd9f8924e4", "indicator--08b9bf17-193c-48aa-82e8-2abad71cd6cf", "indicator--c0e921da-6a7a-4ff0-930c-932cc36ea5c5", "indicator--8dc70f20-6746-431f-aab4-4783e9a825f8", "indicator--498dade3-c379-4b3e-8d4b-55c9d0995692", "indicator--e1420e8b-02ae-4f6b-a4ce-d4602c93cbab", "indicator--59e198f4-ebd8-43bd-a663-af5e1c598985", "indicator--22d19a27-f100-464a-b27b-92c6051576e3", "indicator--5bdc16f1-23e6-4345-8ef7-cbcc6d413766", "indicator--e72a0247-488e-402e-8695-a86a81e1ff6a", "indicator--2a7ffe1d-45a0-44fc-aed0-a6257825ba52", "indicator--57150d1e-463e-46f6-8c3f-f148efd28e15", "indicator--ac7e38a1-d7f0-4b37-8f98-efdfad5978dc", "indicator--a419f025-b607-45a3-b7df-07452d7c203d", "indicator--75551223-b554-4f33-be86-5a11b252e37e", "indicator--3859e25e-7c6b-4d10-8e0d-bb58c8693ff8", "indicator--be85d126-6ca3-4bdf-a56e-f02f998261b8", "indicator--892162f2-36d0-463f-8823-d9160fc9f265", "indicator--6424d834-98bd-46e7-aa7e-fd9c76a4fb2c", "indicator--0fa954f2-4d44-4917-8686-ad5ec441b9d2", "indicator--4c5b9c5e-01ba-46ea-ba7a-c86054200598", "indicator--9dcbacbe-72e7-4db5-946a-7827b31e7dc9", "indicator--7a1e4ffb-7b41-47fe-b3f4-c6d6f48622bc", "indicator--fb4f6222-a965-4385-abce-09771974d64a", "indicator--02326e36-b060-44b6-8c15-6609ba09cbad", "indicator--8e768f12-d87f-4aa4-8b92-b0befbc0d483", "indicator--25aa96dc-cbcd-4f8c-a48c-abe0f98d9561", "indicator--62e2cf30-54c2-4ad2-90d9-bdc8e10e7067", "indicator--345b23e9-ff9a-473e-ac67-0884f95bd5fa", "indicator--b684a6fa-76cd-4581-8ed3-ac542258bb53", "indicator--101ec222-ffc8-41da-922c-3659e88406eb", "indicator--762143ba-4fb3-47dd-8654-9b47ea3f84cd", "indicator--e323247e-8d78-4824-9053-08eeac2b4ef3", "indicator--4019068b-43c7-438d-905f-d8e562c1876e", "indicator--725dce4f-a0a1-45d5-8f4d-aeccef73c8d6", "indicator--359d1d17-1948-4ada-b445-b765ad449493", "indicator--50fc1a98-5b50-497f-9b87-41d29dd1c154", "indicator--810cfcbd-dd0e-48fb-aaa3-45792bd26cfa", "indicator--319928a8-a602-4e66-af80-351dc7f86ea1", "indicator--7942921c-321b-420e-9d4f-fe7ec69a0390", "indicator--c8934c63-fded-4625-80bd-ed1c09bd2905", "indicator--fad76fd9-164f-4f09-814d-a2912ce9beb4", "indicator--de71bf0c-1cd0-4c6e-ba57-ff21bbeffb32", "indicator--5c2f14cf-cf95-410f-b80b-f367db7a2c4b", "indicator--993b307b-b539-41bf-a766-c7d6a879a729", "indicator--5b7ec86c-4d49-4a21-861c-61846aaca5b5", "indicator--0a349f5c-7bd6-45ff-86fd-c80bdc69e2a8", "indicator--6547454f-4b28-4061-a8e8-5f803f191b0e", "indicator--d2d70105-d8ba-4be7-be29-c90bea719450", "indicator--192871cc-d695-41bb-b397-6923d1383c08", "indicator--00a29dec-b062-4bcf-b5fb-02c3387729ec", "indicator--de846495-3586-402e-a436-9d2b5bd20b8a", "indicator--bdcbb9b0-1731-44b6-8b50-10c325f85614", "indicator--8db94a79-c6d5-45c1-b5f3-51dcf9ae3ded", "indicator--cb69ac54-e861-4f23-b292-ad18f3c32169", "indicator--02f26aca-b7cf-437a-9b72-9797c76ba9d2", "indicator--b870ada4-538f-44cf-8df6-be6862684290", "indicator--b44be287-bf13-4677-8b6c-bd33b0004d59", "indicator--0da3f65f-9b31-45aa-862c-46716555e1ce", "indicator--dc68929d-00fc-4363-91d0-62927eefde82", "indicator--e6299903-43f0-4741-92b0-6512b6e42739", "indicator--832f9df5-82b5-4e73-8bef-0aaca0dcb940", "indicator--fd8f56a7-61d7-4c4a-a0f4-9979409a512c", "indicator--2f871f9c-0485-4b16-b6c8-3ba2b46c148f", "indicator--ca6a8614-50f0-42af-8901-507a18bdf0d4", "indicator--7969214f-2bb0-4563-a206-2291cf2ecc38", "indicator--946859f8-a59f-4a37-b6cb-2f6c886c7d0c", "indicator--4cadf8d2-b153-4789-b3f4-ba0ed1e41243", "indicator--fd3fd1fe-cd30-4e0d-8623-da162fff1e3b", "indicator--88e14fe8-2152-4e05-96de-af1ae42fc8dc", "indicator--44d89c58-d3ae-4b31-a94c-903ddaf9fbc9", "indicator--d5fca948-3070-4b1c-83c1-6724864823a1", "indicator--1d17f5bf-f791-41fb-b5bd-62b77560bbf3", "indicator--09765383-7646-47c2-ac88-2f4877a0f38b", "indicator--908b2df0-10c2-4039-a186-a272d18a18f6", "indicator--c2dc76ec-8a7a-4cc3-856f-70507bbda006", "indicator--01056aa3-7c2c-4f94-acfb-e9f6bb4d7a6b", "indicator--775b2359-1294-4f77-a79a-45554f68e7f6", "indicator--7e6f4402-1e80-4e71-8c27-32d4cb24dd5f", "indicator--2aeeaef6-a681-485f-9c13-74974a20deb9", "indicator--a7e8e33b-e6c0-4597-9f14-b43fd35f7a3e", "indicator--bed7be94-9b54-4ebb-a312-1d95f7422570", "indicator--25aa3186-1456-48a9-9dad-7e0b91832875", "indicator--32fda343-f76c-480e-8f29-d580ed714ce6", "indicator--cd7072e2-6486-4d38-afc5-624a6dc16c19", "indicator--89620bd6-b9cd-40a5-a1cf-17936c0ab537", "indicator--3fa668ee-aa52-4a73-8b1b-0e4c4d171e7a", "indicator--4d9454ca-59e2-4f00-8bdf-2181516cfbc2", "indicator--9c3aa151-7d6e-4ecd-b7b4-3c057a3184e7", "indicator--26666096-6888-43ac-b05b-8003b94bf2a6", "indicator--e233ba71-409f-48ea-9ebb-a0af1b466c70", "indicator--3cc5ef8f-60bf-48db-91d7-41e737cad913", "indicator--04b2d268-624f-46c4-a0ea-bc4dc329351e", "indicator--f8da8659-943f-446a-88d9-f9379f151b6e", "indicator--2e2fccf0-0075-4a32-8ff3-f1d19b811fbc", "indicator--1c74ade5-c1d0-4fd1-92ae-4c04c1a21a4e", "indicator--dfc2207d-99ec-4a36-8394-3a9959e958d2", "indicator--3da11206-3a70-4447-bcb0-522d85626108", "indicator--84d380eb-666f-41fa-8c14-5163e85797a8", "indicator--12b4f20c-8683-42c0-a140-ba732a4ff134", "indicator--80069d53-8a1a-4d54-aeaa-b1859fc685f6", "indicator--38cb31fa-c236-45c2-8082-f02f320a896c", "indicator--b909b8af-6de5-4de7-a6f6-99cdc0ddae7d", "indicator--ac403879-f26b-4bdc-960a-5089cd6aea86", "indicator--0951ea83-0c72-4f20-81cd-5473b5ea659a", "indicator--a57f4150-a11d-4212-a657-17903f33f444", "indicator--6229f0f4-320a-459e-865c-4ef3aa400f55", "indicator--ce37b555-abef-4b80-b17a-3c106a2e19d8", "indicator--396d3eb7-5ae4-4253-8921-eb5ef374d082", "indicator--e4dcbe0a-10f8-4b2e-ba22-7c6c13319b4a", "indicator--678e781e-3630-412b-8b9c-6433a86a395c", "indicator--850660f9-5059-4211-bacd-19aa837bfaf0", "indicator--db6ecaa4-bc55-4017-b063-5515632db2eb", "indicator--7fbfe004-070a-4b7a-a8cf-9b172f3d27eb", "indicator--58dc62d9-46cd-42b9-9c36-47d340028c02", "indicator--ea17227a-1dae-4cff-8956-e06d7693b5b6", "indicator--22be071b-ccec-4957-bfbf-beebdf24a14d", "indicator--6eb39063-5c2a-4e80-b2f0-bdc8045d08f1", "indicator--c0fa7adf-1d17-40d2-ba3c-21b0d4609fbb", "indicator--994bf824-96cd-4b03-9fc2-8affccc3ae61", "indicator--9a111e63-5820-483e-a676-b5d0896fde05", "indicator--810d711f-2c67-4abd-9d32-08c6c17b92ca", "indicator--35e696ea-eb2f-498d-a898-a2423f5ccc41", "indicator--00ac1c1f-42f4-4e48-b8df-88905ed20714", "indicator--c05302b7-df5c-4df6-9514-913edd8e8e01", "indicator--8de64ab4-5907-4c2b-9b38-f66ef41b4e4a", "indicator--05dcb437-d3cc-43ef-9a77-a05ddc3e9a65", "indicator--2c9a6e2d-0dd2-4fdd-9e9f-3418a987f468", "indicator--1e491af0-8c5d-41d3-affa-04591f87a3e8", "indicator--0ed227c7-db45-451c-a637-703495dd381a", "indicator--6aeea17d-cc9f-4cb1-a910-8aefb3e0ae92", "indicator--c849e917-bce5-4c56-b2ad-aa1363b6dd6b", "indicator--b58c50e9-7363-42e8-ac39-b3e8297638bd", "indicator--8f260510-0689-4de3-b885-ef7af390e6bd", "indicator--b6589b3a-d1c1-4ce9-85ed-b0965950307f", "indicator--70f48b22-b478-4930-96a7-9e182b729982", "indicator--f9663222-47d5-48e7-8ea6-8948a6bb4cb5", "indicator--9347c06e-4005-4aac-b849-a17c731dcda7", "indicator--49d9ce77-0653-4f1b-83b1-2f8f31e556b4", "indicator--a8d9280e-254d-4a61-8f8f-fe360286790d", "indicator--080c422c-23ad-4119-afc0-c64a4df3b3db", "indicator--1e09e823-4491-44b5-a24a-e3d5ff3e70ff", "indicator--3f438288-505f-4414-8777-1eb9d9c6446a", "indicator--0ced25f3-5747-4432-826f-cf9508953448", "indicator--134e8c43-100b-40f3-ba6a-52b10386c9ba", "indicator--f0d93681-a534-44ba-8d68-344678c034e5", "indicator--b7d89638-e183-4f06-a864-030212674aa2", "indicator--8aa98190-35ba-4a3e-9948-3492ad1dbe21", "indicator--4c9445f0-8edb-4d1f-b68b-83cf9a860928", "indicator--98a7c252-19ef-4146-b289-f68de66de431", "indicator--5e713b42-172c-4f9c-b5ae-a0d91768d8b6", "indicator--501e46e6-4276-492d-8a41-b7840849d59d", "indicator--9de26543-5f07-44ed-905b-ddac3c399257", "indicator--32dfd28b-ab25-4ab5-8ce5-0cfa77c60d85", "indicator--b437a8c1-1859-4350-8caa-af8f1a5fec3b", "indicator--363a5ee8-10f3-41c0-b884-9747d060f45d", "indicator--5da063eb-df58-4aa9-bceb-4fba9d9c6b81", "indicator--f3177427-2c10-4e19-a9c7-4b6e6b80ab77", "indicator--9114191d-80c7-4b3c-966f-6d096ec6e433", "indicator--fda3e992-c8b3-4af1-8e4b-f4811824ac1d", "indicator--5f47bafb-a4af-43a6-960b-f6547513d31a", "indicator--030b513a-4763-4914-b234-44db2a050fac", "indicator--faa518bd-0675-4ad4-be29-555da21bf137", "indicator--1f1d9cc0-d12d-42ab-9668-0d9f79d1532e", "indicator--c2f48b52-8209-4446-8e2f-3235d281c969", "indicator--653637e6-246f-415b-a37a-6009e4a787c0", "indicator--074d6034-e598-4991-832c-ed535e4a93fb", "indicator--290f8e2d-23bd-4c53-8ed1-e99c4fb99db3", "indicator--a369d2b1-7e71-4d74-b8ca-ca9a035481bd", "indicator--3cf1eca9-461f-46e0-a921-eef16d1ec1d3", "indicator--3868af04-c954-492d-96f2-e5c28ef18664", "indicator--ed21075f-2447-4869-93bf-42bc99ff03bd", "indicator--f5b492ef-98c5-47bb-a419-98f8545677c5", "indicator--55dce4cc-2721-45d6-9212-7b6d9e38b35b", "indicator--aa059b74-6a49-41ab-9be7-f33a67935a2b", "indicator--d68833c7-f5e2-492e-9bad-8665f0caa5ac", "indicator--8c062e7a-73a5-48bd-bc30-7013ca5e6fe5", "indicator--6dcb59ae-c7a4-42c2-8a8f-20d97e5498d6", "indicator--f3b86809-c3e6-4eca-88f6-ada459bb842c", "indicator--4a9dfd95-3a04-4dc0-b4dc-ae666848debd", "indicator--7de585f3-6128-40a9-8085-01f2c9edc407", "indicator--06018f83-94ac-432d-966b-cef21aaaf83d", "indicator--0a21dea0-b556-4ab4-bf61-6423bf2b63f9", "indicator--b92a6363-7241-47a8-9035-ed6c9d55b8dd", "indicator--9f1bd121-cdc3-4086-bced-0675e2eec228", "indicator--ecffb3e0-3827-4db1-939b-17c679be48f8", "indicator--ccd5de49-473b-40fe-8fbf-137b80f37c03", "indicator--a931dee4-1e09-47fb-855f-255919d68416", "indicator--c425e7b0-791c-4012-881b-89e2d647004c", "indicator--dae0d802-0188-443a-b122-94beac547905", "indicator--b2e3db02-8be8-469f-8fb3-5ba2b579759d", "indicator--d7a0c222-65ea-4b94-994f-1741314ebd08", "indicator--9df5241f-1a49-45fe-acdb-757499c92fa2", "indicator--6862db71-2c07-4107-8cb6-1061d4661b23", "indicator--1c7459ef-9f5d-4cff-b78d-9f07bb947dd3", "indicator--594f1108-f550-4771-8ac0-ae2a218014d1", "indicator--21d4454e-28aa-4e51-845e-e8010c8f33ba", "indicator--3580e600-6e92-4d6d-b8c1-e421422ba65a", "indicator--2ed880ad-c041-4eef-a939-23be1a3dd45f", "indicator--81d49df9-f908-4022-a7a4-3caf1dc0dbef", "indicator--a802438d-9a36-449d-a736-4d4cf6637d79", "indicator--c0ca9c33-b269-4f00-8d8e-3fcff0ebb2d9", "indicator--eb1ff91d-5414-4117-b2dc-e654af0d140d", "indicator--1192e490-32f5-4c6e-814d-7462b35b9596", "indicator--75a61c80-8e2d-4a40-9a63-6f688f13eb77", "indicator--4c616b45-4a52-4112-a4a1-c8075fe68dd1", "indicator--7530dbba-5a60-44b3-a444-3acb284300d0", "indicator--f484cdb3-c0c0-4b6c-9bd7-889b35cb6682", "indicator--977e7f39-b349-4539-8fd2-f05d145a2aa5", "indicator--eaa935ca-ba99-485f-8ba7-185795565b4e", "indicator--7cf0c66e-d420-46a6-9d63-124b9781b410", "indicator--378c2763-2a93-45fb-a06c-ea1fa5b3fdfb", "indicator--14450d97-d63f-40c5-a732-91d60d508b26", "indicator--b449dc67-9683-4611-be11-c071ff1df7c5", "indicator--1a827b15-d364-4685-981e-18c079f70964", "indicator--2b182698-2c8d-487f-8638-b37e6fb53972", "indicator--3065472d-d427-435d-8896-7461839b9f37", "indicator--318bd6eb-5730-4ef6-94ab-21127a027c39", "indicator--0dc13cf8-07b4-480c-a26b-fb71262def63", "indicator--0d647965-952e-4c52-8485-006849cd75e7", "indicator--ee810883-4b5f-4dba-a879-703d73368a72", "indicator--e0b53c65-aee5-4c55-ba69-9a2eb9fed70a", "indicator--aa4a6d2c-8e76-41f4-a006-4c5036202faf", "indicator--3ba67a20-688e-4e7e-8c10-f00c6c5753ca", "indicator--98100194-03da-424a-a882-74c026bb1b0d", "indicator--70d016b9-8ebf-42c6-82f4-436ae009d339", "indicator--3a10814d-c0e5-4603-8936-31fedd477cf4", "indicator--7a43c703-5706-4c0c-a0c2-436bfd30960f", "indicator--4548fb52-05db-46d8-8d30-0efaeac72a7f", "indicator--7f2e2902-875a-4271-8ada-497ff653ba15", "indicator--770def4b-69bc-4536-bd19-bc4be7cbc1db", "indicator--b99366cf-a1f4-4a1d-b0fb-e5c1e199d766", "indicator--42578f59-dc7f-400a-84a4-1775a23b3d2a", "indicator--fc5cf388-3a1a-4309-97b6-2120cf36c04d", "indicator--9bef4c20-e302-46ab-bbba-133ad1ea934b", "indicator--21baa6d5-6ad9-443b-99f4-b28c00bd8c4c", "indicator--c2fd14e1-8ef1-493e-b2f3-6e25daab7b41", "indicator--912fcb7e-7426-4efa-a439-54f0011bd20a", "indicator--70a753d4-89d7-4fb0-92a1-5aee293abcfa", "indicator--e292c1d0-de7f-4aa1-adef-1f232bae8c8b", "indicator--10dde05b-862f-4797-8c12-b211c6c33baa", "indicator--1dd5bc7d-7a90-4390-a1f8-67be35306d6d", "indicator--163eddd6-69e5-4c19-8dc0-d7ea8209ac2e", "indicator--ab739042-4bef-49f8-a237-55a8cfec1c54", "indicator--2808063e-5150-46fa-8a12-cc473fcb15bd", "indicator--615dcece-0268-4ed5-9cfb-190ff75fe725", "indicator--e4362915-f8c2-4101-84e4-a87557f403c5", "indicator--ac226e31-b33b-42e8-bcb1-ecb9dacda5ba", "indicator--225f3ea6-591f-47b9-8f5a-48cbfb85ecab", "indicator--cce7eecc-1b7f-480b-a288-c641ac9c74e3", "indicator--79f21aa9-a23e-4226-8536-e589d0cc8436", "indicator--4079ed47-c98c-4818-b8f1-292a3d460214", "indicator--8495a47a-6dd5-4e6a-a5b5-647b04c2460a", "indicator--12f547ff-7b90-4816-8d91-3f660dd8763c", "indicator--b786a680-7e5b-49e6-b0fc-def4e96e934c", "indicator--c1ff4dc7-b566-4561-aad2-7b90568a3214", "indicator--acfa320a-43d9-4a3f-90f1-e8e9769137d4", "indicator--8920cf4e-02f3-4056-995c-f1ba429813d0", "indicator--c3638159-452a-4b1a-99ac-8fe684efa19c", "indicator--85112176-4edb-4686-a338-67865a3ad68a", "indicator--f4ef38c2-3fad-4649-940b-f9404de7909c", "indicator--1feeccba-3380-43f0-811a-e9bc8ca64028", "indicator--f7f80934-c951-4329-a2bb-cb4db0a5e1ed", "indicator--61ad533e-60fd-40c6-a1f1-5b7c6d6c8f98", "indicator--8bd8c2d3-c5fb-4c69-90aa-e0e37ffcb0c5", "indicator--1dfbc029-0870-4816-9e6f-b17139d2c56c", "indicator--6d9c440b-5505-4ab3-b61c-9188f3c013b1", "indicator--dea770ee-ed2b-43cf-8de9-3436d100fd75", "indicator--cadd450d-ba69-43ef-a7de-7333ddce315f", "indicator--8892b4ce-15af-4040-b5da-863e6e1a8e71", "indicator--0fb99913-3d7f-4a72-ac66-766d18b9d295", "indicator--0a575b76-e8d8-4345-b584-f8eab08b2831", "indicator--2d719e29-a331-4109-9c35-02c2eab9f56b", "indicator--fa107194-e5c2-4da6-8280-655f8b32255a", "indicator--e80ce961-3416-43b3-8748-240c8c481e4a", "indicator--f247ed3a-ff90-434f-a91b-6b4594e40915", "indicator--217e51c1-bc23-494e-a239-a9f96ac7be8d", "indicator--17b8d90f-d931-4f39-8c58-6d4c212b69c1", "indicator--d8720ff8-b023-4889-9b95-321ad7679485", "indicator--518498d5-d199-40c1-a9b1-ee1519fe8fab", "indicator--f34feb69-003a-4bac-95bd-c7dc4462b6dd", "indicator--ca836d34-ca9b-49c3-8473-985a771da2c7", "indicator--643e0cda-7cc9-41c3-a3d2-faf366a033d2", "indicator--f69d9197-4983-4f5d-9542-aaa852a0171d", "indicator--cc27ef49-c7fe-4779-be83-4e19c283f3d9", "indicator--0262db32-6c4a-4497-9b1f-7f3112b08670", "indicator--f1512212-077f-4257-87ea-7e843ea5c7be", "indicator--faf89f80-4692-401a-a5f0-f84e33432321", "indicator--3202a287-c08f-475f-9adb-01376fcabcbe", "indicator--7af0d0f9-8edf-4ea4-9308-84134ff272ac", "indicator--7f5bd21a-8ced-487d-a6ae-25f5b69e0a3e", "indicator--9036ca00-9c40-435b-b29b-06453cc6beb5", "indicator--0a251502-0f02-4f81-9251-dec7f53c9f19", "indicator--452a58ec-8f54-42dc-89d4-7078f005d1dc", "indicator--4e6a4be9-913d-4dbb-9eea-799a586574d5", "indicator--2f00c515-ac98-420f-aefe-1794ecb6da39", "indicator--b2fd7ec4-4800-4766-b343-c1ae2b5b4b41", "indicator--6a9bb581-6276-4edc-997b-40c2dd4d55d1", "indicator--13186bbb-9ecf-4298-8d75-9eda4f803754", "indicator--c713bcc5-6640-44c2-a645-c4e6f88cb213", "indicator--7f47549e-3d83-46fd-a129-c7e95301d215", "indicator--e925d2ef-cfb4-4864-ac76-ecae05578ac1", "indicator--f6d6b14b-07eb-4699-b515-5e8f4dc759b3", "indicator--bfa897fb-2697-49a7-947f-62f5790d2114", "indicator--ca2e1dc0-a282-4154-9a17-b3e90921a689", "indicator--37d4da93-2157-4bac-a287-b5f01d72f748", "indicator--451fcc91-aebf-47fe-b306-a8ec184b7bf8", "indicator--b5c1531c-696a-4a7d-a0e9-22f79438ea31", "indicator--57e1cd9e-77cd-4e43-bc03-b357cd880834", "indicator--29b02683-6094-4804-8cc3-f481140dffaa", "indicator--a7a49212-9ad0-4439-8393-c57aea6feab8", "indicator--225e33db-c7e3-4059-bbe6-07997393d842", "indicator--96133cdf-6ca3-4fc5-8036-0f06dcca3a73", "indicator--a105ad58-68a7-4bf8-bfd4-2f00e2a2ee6d", "indicator--6a016c71-b9fb-4ed2-ba6e-af07b1f4bf1f", "indicator--6a87c232-a137-4959-bccc-8df47b10a3c2", "indicator--28ee236b-c0c6-4eef-a8a5-28d3bf5611fe", "indicator--2de081ec-9702-4d15-a767-107649119a54", "indicator--8a1a4ddc-bbe1-4c13-92f8-22f5c7137066", "indicator--507cdb68-c1c2-4e11-bb25-32db7aeb066c", "indicator--aaae8781-7e99-4283-a88b-e39084a5b5b0", "indicator--8d5281d6-efab-4cba-a622-4d9de7e63aeb", "indicator--bb2e66f7-0656-4542-b34c-c6b552cd26e2", "indicator--1e6aece8-558b-43f8-a8ce-4054db759ae9", "indicator--b371ac92-9d66-4a03-8ab6-c103771f7559", "indicator--619775c4-5163-494c-950c-a1fc6fbbc309", "indicator--2dce2799-4a85-4ea1-972c-272987c070e7", "indicator--df85fed5-269c-4d84-a8d8-6b5100c7dd93", "indicator--d6351fe5-9695-4ed1-be89-26019f93feb4", "indicator--4ef73b4c-c3cb-4c86-8a58-e8fecc9d9283", "indicator--bf0bbf51-0967-480b-914f-01cb2a825304", "indicator--901561e5-9d73-4d2b-ac85-b24d03cc9cff", "indicator--ab39ab9d-b29e-4f9f-8222-54d526e4030b", "indicator--dec55a29-2913-4369-978d-70e76dbb1ab8", "indicator--f3a44862-18ea-4c1f-b92e-2fad303e105c", "indicator--4e6ffddb-5d97-4661-8c73-451f3bc5043f", "indicator--3a333353-6248-4a28-bde1-c7db180f26bd", "indicator--5e196b60-9ede-43de-ae9c-a45f2de73f91", "indicator--b2dbb052-90b6-4ff5-9b86-fafeef82707a", "indicator--4e960a20-5cef-43ff-9b0c-c5cfc53cce64", "indicator--fc6b068e-8fbf-42bb-95ed-cf81a113b257", "indicator--a46d5ce6-f980-4a7d-9e7c-07edee9216ed", "indicator--4fffe8bb-838b-4270-8928-5e67f9334c8c", "indicator--1fed886c-87dc-4911-9f39-efea77aa7e1f", "indicator--5713ea25-d083-417a-9713-98205ff044f4", "indicator--44831339-362d-4156-81bd-84f38d356dae", "indicator--fa85a8ac-a5c2-4ee7-bbb2-4ef3a65fdf22", "indicator--5c29ebc8-9ab9-4529-9457-392cfa39b14e", "indicator--9590c0fc-b561-4e76-863d-d878f7f63b7e", "indicator--77f1925f-8fe9-4271-ab76-10f7d50538af", "indicator--80b0c97b-c49b-4976-8ee8-5c52424969c4", "indicator--b7949b56-9c12-4f92-992e-c139f8a4bc03", "indicator--3ca18f0a-00bb-47fb-83ca-3a4dabad807c", "indicator--1f3da45f-323c-432a-8998-b8bdb7486787", "indicator--723ba3ae-fda3-44a4-89cc-2c230952d665", "indicator--27c5df78-61ec-4066-997a-1bf20b4c8219", "indicator--b35f6fc7-f403-42af-bb85-dc3d4b831141", "indicator--158c04fe-fcd3-4983-9198-3748237e5f8c", "indicator--554dfac7-b517-4360-9195-72cc5fb20162", "indicator--4b8685d4-bac7-4ab1-80b7-17217d161749", "indicator--552fc105-5da9-4370-8961-09122f815699", "indicator--c3afb206-147a-4b3a-9a33-4c7ceceff25b", "indicator--327e3bff-6f23-4651-ab81-70e515c9554a", "indicator--25bb7783-2a66-49e8-8cf9-4cf1754eba52", "indicator--07e71600-716a-4faf-8f79-8ada4bd0577d", "indicator--4dec4e71-ee15-44dc-8921-28a86e9070da", "indicator--c6ea141a-090e-4d98-a125-69787bf342c8", "indicator--357784da-235c-46fb-80fc-fd004fec0725", "indicator--418af6fc-a8c5-442d-9c83-9fec34cd9f65", "indicator--831b51a4-3465-46ca-a973-1b4ffe262107", "indicator--1cc6e3a3-eca6-422f-9e2b-34e253398506", "indicator--e3f9febb-63d6-4e75-b6b7-f2166884df45", "indicator--4fccafb0-b0ef-4e7d-8a4a-1ce33b15ce63", "indicator--cdabfb7b-4097-4241-80cd-277cbb890b3a", "indicator--bc682a38-554d-41e9-8ae5-0b8abf1b5406", "indicator--52df1f8a-2088-4773-bbd0-88ed2ba6ac85", "indicator--34d1aea3-4f9a-4087-a97d-0a8d72c7ebd8", "indicator--4e554ffa-6740-442d-aeea-ebddf6a1dbc8", "indicator--eb5609b5-d575-4a03-b6b1-58a5fd09ec75", "indicator--1784816e-97b9-40da-94cc-2ec187764876", "indicator--6dd23092-b871-4c93-b2d1-042eb3e77f2e", "indicator--834f7272-6423-465e-85ac-64fc17c13c5a", "indicator--5cccc5b9-3007-439a-992a-e664cbeb43df", "indicator--83f3bf9d-8353-4ac8-b531-cf18c88ec722", "indicator--1ae50dbf-7a8a-4ade-8465-d8c83d558a03", "indicator--ac207c19-dfec-4298-919f-bd0c7f73a8ed", "indicator--6e08ed96-70aa-4525-b02e-094510e859f1", "indicator--b19afc4c-1f42-4c13-bd44-44872e1de94f", "indicator--21d66c4e-b802-4cc4-bc94-dfaf5c6cee8e", "indicator--141a4131-5861-4ff8-8709-c30844b04334", "indicator--439afabe-8f10-4990-aeff-3b85746ec2f3", "indicator--636579cf-8c05-423a-8a3d-19df447b422e", "indicator--7a701989-229d-4f42-9176-324d85d4a4d7", "indicator--cdc18104-0b46-49f0-b080-0ae7a100e1c9", "indicator--401be65e-9de7-4d14-983e-282ab9b88ba9", "indicator--4af1b9d0-9c83-48b8-a55c-509085d29474", "indicator--639acf5f-3ce3-4268-a89b-9a63685c544f", "indicator--6e4dda4c-5913-415e-82e9-0e2b54b0fe57", "indicator--ec7847cf-95d7-456c-ae32-60ccecc70c41", "indicator--60817ec3-8325-4a25-9532-c043caae42c3", "indicator--f08acce8-2cc8-46a9-8535-9707482fbd50", "indicator--0b588ca2-18a9-4dea-b9ce-cc3801165a95", "indicator--0d062810-bd63-4dcd-bab7-7219b115f29b", "indicator--4e0bd4f2-d82c-4097-b696-38d4db92c704", "indicator--562a06c1-ea29-4fbe-b8e8-95ce35e49f76", "indicator--f28b11bb-d0da-4092-a13f-8db0107683d6", "indicator--d8324391-5936-4b4d-bbd7-783931a56f8e", "indicator--c35486b0-2da8-4170-b361-311b85a69f18", "indicator--fd1150c5-d2a1-4797-9b3c-8c4c123d5455", "indicator--44e9c408-434d-4822-a99b-7db98f3dbac3", "indicator--4cbb2e1b-f773-482a-9fc0-7afa12ceff01", "indicator--4ffeed17-7235-4c40-800f-a7993c911c32", "indicator--9a53e92e-f8ad-412c-9347-f36e20cfc85f", "indicator--1f7c5d83-68ce-4a2e-8a2f-dfd97c82326b", "indicator--fc76a95d-aa24-4910-9ad4-e61308e4e0e4", "indicator--b21ff258-4fe3-4dd8-9405-282844197d88", "indicator--5ae3422b-e929-4782-9563-ea298d9b7ba3", "indicator--5f58a8e6-7b21-4925-95b4-e8b85f2f23df", "indicator--f1590996-879d-4927-a23d-8c1ed7b931d5", "indicator--7e06466d-46bc-40cb-83ef-84c2f71f6e60", "indicator--d422754b-6999-44b1-ab29-16581c37187f", "indicator--ab955978-73b9-47d8-866f-0ddf48ef8d91", "indicator--3ae64442-d847-4b0d-933b-67779e1032c9", "indicator--ea80d944-bdde-49e8-ab74-7f6b955a79ec", "indicator--aeb00e32-79c1-441e-a2da-5f71cb39f613", "indicator--2d865491-a8b6-4e59-8245-5880b62cc93e", "indicator--795df341-e311-47de-a02c-8799dc573aae", "indicator--fb3bc314-e406-43a5-80cd-435fc8763d3a", "indicator--f77ed0c6-b349-4887-8d25-83a540650b08", "indicator--44b11ff6-0d52-4cd2-894e-c6eff5e4fcb0", "indicator--8b2698bb-7a65-48b9-a475-e7365579253b", "indicator--abffa1ec-2673-487d-930b-1d3891eb381e", "indicator--af2ab847-4e56-4342-b6c3-1aab92bf6de1", "indicator--3d11bcd8-5c48-48b5-9fe7-4afc535266aa", "indicator--a21f70a6-0779-4bfc-b574-59fdfed03528", "indicator--9c4363e4-a4ef-4e1b-9498-60c2ab7fafe6", "indicator--44137b49-6a08-45fa-a8b2-07b4f8854f7e", "indicator--bd53bdf2-d278-42f3-a422-f3f2a5133ee4", "indicator--6a11b472-ebbe-4045-95f4-1ede98893ef0", "indicator--3319a34c-c577-4665-ada0-bc4d099c15bc", "indicator--307c2b84-0511-4f16-9f3a-3df00d91e850", "indicator--b201915c-a17d-4c6c-b3c7-96d766025a1d", "indicator--9edf7e9b-bad8-4aba-a87d-ee98f11fedfd", "indicator--e1303a5c-7779-460b-961a-a0bc0e14954b", "indicator--b0d26555-b51d-4575-afbe-816a4f3a93af", "indicator--cf07c610-1813-4a84-8a48-4993545f5876", "indicator--af1343ca-c2c2-493e-8095-2bbf4dc228ee", "indicator--27b61206-f0ba-45b2-9020-820803e74a20", "indicator--876fd807-7602-4171-b848-26539f7184f3", "indicator--7aed1e45-a96b-46eb-aee0-d56ed9772e00", "indicator--a0f4fc1d-8554-4978-98ba-9d3bd829be30", "indicator--77cf2756-e955-46f7-9b21-9e36a98d3f51", "indicator--ea73f2c7-e645-4419-af6f-c09f42d9e37c", "indicator--d59ce0b4-6bc0-4150-b82a-6d2ab10c9d60", "indicator--57fda8d8-064a-4646-8788-564253556763", "indicator--36fda804-4f5e-4b6e-946f-2984c87961ff", "indicator--f5eab432-a936-446d-9ac8-51998ebad86b", "indicator--94a12460-ca9d-4378-897b-fe5da782a9a3", "indicator--faa07815-af07-4f4f-b3d6-4251e2e26d5e", "indicator--00490f0f-9ecf-4106-8cf0-7791e8b80dee", "indicator--b2470027-e897-4dac-bff2-8dd79f35a9f0", "indicator--5dc8622f-59d8-4000-af51-7aca1b4cbe97", "indicator--332d3fd0-b791-4fa3-a5b2-71fa90e13355", "indicator--5d8e8ccd-bc54-4e1f-9624-cf48e180cd12", "indicator--308453fc-7824-4170-9ef9-a24e6967734b", "indicator--2d7e4881-c39b-4d19-9dcb-cd70b07519d8", "indicator--961145cf-c43a-4337-99c8-1280a7f7eddd", "indicator--8550996a-51b0-4caf-81bf-29fc501c47df", "indicator--5f74e91d-199e-4ba8-8a16-a09d96a1ccc9", "indicator--e5dd8617-7dc9-43af-a696-31d59411a1dc", "indicator--52ddec77-c3fc-4176-8835-22c2f0330512", "indicator--77e401b2-568d-495e-a0c5-262a4610da4c", "indicator--9b6bcfc2-c914-4b5a-bfda-d922f64ca3a5", "indicator--722e85a1-317a-4504-8ab1-9f0d8ed483fb", "indicator--f6cb72bc-bafb-403f-9cf4-029d85ed9a68", "indicator--555100cd-4214-4027-8bc9-596d6ce09506", "indicator--4f9d2ed8-c100-4938-8fe5-acf136e89eb2", "indicator--46011484-eaf5-4626-804d-6a22d6a99d7c", "indicator--51bf08ba-d65a-4474-98f5-0b6ca06c3b64", "indicator--edb22eb8-db47-42c3-9e68-7c901507b987", "indicator--4dc0673f-01a6-45e2-b529-7980bdc5acd9", "indicator--4f7766fa-b94c-4f80-851b-ed961709a446", "indicator--86c79084-5e64-4f65-82b3-c5cdfc09b9c8", "indicator--1cf76d75-9f66-4aa0-9c69-d1b8b5a6f85a", "indicator--27706906-a793-4aa2-ac42-b722862642f8", "indicator--463ece90-66c8-4a53-88eb-3c4c0b72ce3c", "indicator--b174e756-3c64-47d0-a651-8ec9ba464efa", "indicator--02c19438-000a-4afd-8d7d-9245f1029f75", "indicator--e657953f-4c54-4763-8a7f-d3158ef512d4", "indicator--82289259-0974-46ce-ae04-ab8d44bb1fd1", "indicator--b0605802-39f2-45a6-b1aa-53e21f664720", "indicator--730d9855-b275-46df-866c-40d847c3a263", "indicator--71e44cbe-c8b1-4a93-946f-c84e984a4f4d", "indicator--ab007fb3-fb9f-4cd7-a224-d361e3a588fd", "indicator--cd2594b8-30bc-4dc9-b947-bb5e759f83f4", "indicator--44c1c295-b076-4685-ba21-f61d39f615ca", "indicator--b16d849e-244c-4c40-8400-b66b040929ce", "indicator--24a012a1-6508-4f68-b837-1a2f8874569a", "indicator--70240720-ec1e-4bcd-aaba-b01f2a7b58d5", "indicator--4ff3036e-3605-4753-9091-1e16b1719147", "indicator--fdb95079-c795-4d27-829f-b29a241f4364", "indicator--4e1be646-7d0e-43f6-bcaf-49ffa8a34b6c", "indicator--32d17e10-956e-4b9d-aa16-886b9a67df91", "indicator--99a04c38-48e4-43b9-887f-de63ec4d438e", "indicator--cfa2a958-c556-4af6-95ac-9b8d43de29ed", "indicator--76408d80-24ab-48df-b938-1f65dd325096", "indicator--19222be0-f81a-445e-8adb-2063729517cc", "indicator--4a405784-8e38-4cc1-bca2-8d266e2e95a6", "indicator--6df7bdf7-75b2-44e1-bbc8-0464b396b5cb", "indicator--2403f39f-15fd-4248-bc30-05627c1606fb", "indicator--855b75bd-d88d-4127-83b8-a8dc203b2660", "indicator--228f39f9-b926-4a35-b3be-3aaf29ed37ba", "indicator--847b0fe9-11d6-42f7-8d2d-3edf0da4aee1", "indicator--b48b50fa-5f92-4377-874e-4f411ec724d9", "indicator--f1204b5c-62d2-42a6-a544-481f4b77f5ef", "indicator--afd475ac-9053-4df7-872a-e5d0d87430dc", "indicator--ada9916c-00e4-443c-8adf-a67e5d00dee5", "indicator--4d1d665f-74f7-4408-9481-15245de01ed7", "indicator--52f24000-f036-49a2-ac6b-19dccd065bd6", "indicator--a46caf15-52e8-4e33-becd-804af07f27ee", "indicator--5c1a2bfe-8b02-4a53-b76a-b2f2e06e71e6", "indicator--127713d5-78f7-4b4d-a42c-f0610fd21b05", "indicator--74fd7ece-d556-42d1-88a1-adde0b433bce", "indicator--1634f657-9172-4339-88e9-c1fccf31207f", "indicator--7716db2f-3d26-4c1f-ab83-37c49f5cf37e", "indicator--228de839-b1a2-473c-a44d-761516059788", "indicator--ffb4e33c-8678-4623-aaec-89446e049245", "indicator--260e9f3d-14c1-4733-b9d8-b79b92ef4e63", "indicator--bf81e9e3-6976-46d5-945e-529ca9800349", "indicator--72206261-406c-4197-825f-d38e77cec9ec", "indicator--7db19a9f-5110-443d-b9da-9eff1a6ffd54", "indicator--c6b70baf-f68f-4bce-8489-f3926d701092", "indicator--bd02f5cc-0795-421c-a86e-72a743fe20b0", "indicator--0215e52c-d9c3-4174-a62f-f3f6b26fbb88", "indicator--1d485bac-f13b-4e04-b5ad-fa5a1c9b1ace", "indicator--0681236a-4aa8-4777-aacd-fd1ecb035b0a", "indicator--e3a0432d-8691-4237-bf05-3c1d8cc3b51a", "indicator--fe957d87-6a8b-4651-ba49-1936bdcdb56c", "indicator--bbdd7266-f60b-4a7a-acab-0196aaab5681", "indicator--77c2cd52-612b-49dd-a790-d39e394eaa10", "indicator--27388e24-02a3-453c-a31a-f18f7be7f7f2", "indicator--f391a810-ee03-405d-9a86-168f1f1ceced", "indicator--97af9eb3-3b6f-4555-b5f6-94fdf1bbf768", "indicator--ff9970ea-9b80-4799-b9b3-9db1da3a00b5", "indicator--ffcd2334-9391-4dda-b7d1-3e5b40893083", "indicator--a5b6362b-fa75-4a10-a351-da76e275cc54", "indicator--1b480e4c-a456-4718-85f1-b9f86a528c3f", "indicator--2745f158-e19e-4ae2-a3ca-309ebb5a1c48", "indicator--3704da1a-f9c4-4ff3-917c-54afcbe93af9", "indicator--cadce5f7-d1d8-4d92-b938-f75b1583c436", "indicator--103727e2-a6e4-4c6d-b072-69d36f9715da", "indicator--86244009-b787-4d66-b04c-de11b7806cd0", "indicator--9ed117e8-1de7-4998-9df0-934126f7a6ec", "indicator--35af8cc2-5a2f-4215-8c52-2d5d554cc229", "indicator--22837f7f-4745-4877-8244-4b30561a1e2b", "indicator--d06a87d9-133d-4491-8804-65cde98ecefe", "indicator--8dba1770-453b-47db-ac90-d7fe45c910e0", "indicator--7489c8c5-eccf-4c58-a067-7a7dc2eb90e9", "indicator--de9a0632-eb29-4a3a-a39e-fe425d92155a", "indicator--62f86e8c-bfcb-4f9e-a019-5cfb89bcdc0b", "indicator--49ce34c8-c12f-4510-acbf-a4e48a67a1e2", "indicator--5ee9b333-e91a-41f6-a273-363188354336", "indicator--8543e982-299e-4935-b999-0b25495b5dac", "indicator--d03bf6f6-620f-4372-9f1d-bb5233209d12", "indicator--608d4a06-bc74-4d29-ac8b-78648259f2e4", "indicator--84cf5a96-30a6-44ca-a99c-29fb2138482e", "indicator--c8ead7ea-307c-4f51-aa32-9c5061e6b07a", "indicator--aac00d1b-c3b0-418a-9f86-dd6168cd8a10", "indicator--2c4c36e7-6d69-411a-bb62-de678fdc392c", "indicator--e2ba712d-f237-4e89-9d2e-c9e1c37fee04", "indicator--67bb2ca0-b76b-4ea6-8989-d3e2af99fd0c", "indicator--1d59ab65-127b-471f-a433-f30573f6e886", "indicator--a4ad5611-df52-47ba-a722-63ef5b9f25a4", "indicator--246198b2-f60e-46e2-b68b-52ead9caf459", "indicator--0ad33860-f3d9-435f-9bc5-59ccbbda5085", "indicator--2f7bd415-3d59-4333-baa3-633cb2e6a26a", "indicator--ba1d78ee-98ff-427e-8403-5b02fa6cde62", "indicator--49c20b43-2ae7-4f65-aa71-86417d027ff4", "indicator--885d4419-20c4-4ed4-981a-e674cc558304", "indicator--ae4723c2-496d-4936-9a35-7c85783ced43", "indicator--99022465-326c-47b1-bd30-3d14050aef33", "indicator--7e7c034a-652c-4308-9627-e6817977300e", "indicator--38a6a791-7086-47d3-962c-7f3a8bcef4f7", "indicator--fafa23b7-4bd6-4ef3-9f6e-15c120bc6630", "indicator--71c93094-63ef-4c93-b85e-0730868b0c49", "indicator--b15b8084-ba9a-4278-af74-199c46b1e3ef", "indicator--19319173-c9bb-4037-bcdc-5d9f24a43f5a", "indicator--06198bb0-fa93-42a6-89ea-48f02dd1b025", "indicator--e0687c59-1e45-4795-8e89-2d602d3bf769", "indicator--73aa0cbb-dc9a-4965-b2a8-d6ec8e4052bd", "indicator--72d59636-963e-4f26-a3d0-f1cbb8ec030f", "indicator--b8d9a331-b89a-4364-9ec6-2cb74bcc2450", "indicator--c2cac1ef-2ed6-480c-a3ea-2aa485f52938", "indicator--3068a0c1-14f7-4f97-b9d8-2c6744641ca7", "indicator--ed22a7c3-00c3-4a52-a319-d2892fd1306c", "indicator--926a0b08-5365-4dad-aa47-7bcd85fdd8a8", "indicator--f3bb42d7-70dd-4bc4-a47b-53dc8dea8028", "indicator--7a186b5a-cee8-463a-abb0-4c77ba15be3d", "indicator--7b6f4494-95da-4c08-8f3a-90a79a18709f", "indicator--cca19bfb-c687-4261-93c3-cfe0e7b5d747", "indicator--90d04faa-066f-40d5-b400-998144d4c97f", "indicator--cb914c24-3e30-4b37-abe2-d67318defb3f", "indicator--1604443f-b5cd-444d-9cf7-535143798816", "indicator--5ea99c4f-d119-48da-9ef7-d303b6c04da0", "indicator--d5fdec47-7b90-479e-a751-6e60e2f06776", "indicator--9054c6fc-58d9-47d3-b3f0-56365adb21bf", "indicator--bab759a6-db59-4479-8809-6f89008ee3d4", "indicator--e9a40c09-46b7-420c-8795-b0c78c8df49f", "indicator--93ed3359-a281-46ff-af7c-0ca706e5d6a1", "indicator--0c459afb-fa60-4952-8a28-ae25cde6ac80", "indicator--2628cb0b-ee3f-49ae-a961-b123a7fe17fe", "indicator--65ca10c7-8c33-4601-ad45-971e7f7be76c", "indicator--43e59dd4-2ef5-43ca-bc93-9b0325f136c6", "indicator--d3db6d52-afa6-4e06-a60c-034f1f8ffdfe", "indicator--e105fb72-3800-4fb2-b665-f1f4c6ee956b", "indicator--07531fd4-fdce-44f7-9ceb-f9c24f5cafb3", "indicator--b60682d7-d9f2-4696-8af2-c697ef9e7026", "indicator--69bc3f5e-959c-46e9-862c-fec72848aa35", "indicator--d05b2b37-2a86-45f4-bc38-a63759b3396a", "indicator--bd0cdb0c-4fd1-434c-950d-15e7b0ea9dee", "indicator--5ca9edd9-005a-4d45-82bb-174312090c84", "indicator--cc0005de-d0f6-4e30-8684-a0ed4d65a7eb", "indicator--6acee178-7d51-4726-b47d-3f65374083ad", "indicator--f62b2ade-80e0-428e-aced-46307b55b47d", "indicator--d93c5ac9-e82f-4576-9b7e-0cac06ed0010", "indicator--da522843-cc23-4539-9d08-c615c0e7bd59", "indicator--53ab7276-7f29-48c7-b72d-f57a12bbe740", "indicator--928d87cd-5e3b-42c8-8ca6-f955b865887d", "indicator--aebc06d0-9dd5-4c39-9ce2-8f1f14146f88", "indicator--a9b28efb-c2a3-4689-82cd-ec42ac376a3e", "indicator--e1cd5e70-b6c7-468d-8fa9-78c0638b70ab", "indicator--d5ddfafe-414c-48e3-8b7e-d74648443362", "indicator--ccb18062-06eb-4f82-8560-fff61374404b", "indicator--5f2ee07f-a34f-4510-b0d3-7fb6e60eb258", "indicator--1c975adb-3b0e-4508-8931-b5687e4067d5", "indicator--ca0172fe-6171-4326-9731-632a29ec47f3", "indicator--692688f4-bf9e-4e10-bb09-d7c3795dd024", "indicator--d92aa750-78ef-4d99-837d-dd92f8ff36ef", "indicator--f2ac89bf-918c-4382-abff-42b7fa9ed717", "indicator--06dda514-582d-4fad-90fb-80010c42ed72", "indicator--2cef59f1-0f9c-4c7a-939d-4c14e26e8f10", "indicator--b8c1653d-5902-4d3e-bf80-09be55515277", "indicator--c896948f-683c-4e36-b135-2807e9d0c1bc", "indicator--fb4910e2-850b-47e6-adff-4fbabb706f6a", "indicator--82303111-162d-40b1-8918-91707ee71012", "indicator--c261759a-ed10-4c89-84e6-cf15769d6edc", "indicator--c422735d-45e0-4078-9198-e5d9c98b1f91", "indicator--664b1bd3-4cb7-4688-8829-c3cfef6483ad", "indicator--30732b8d-6935-4ca7-a8bb-7fd10ed6d46a", "indicator--7d5f645e-e137-4f3d-8b59-d34f2a636452", "indicator--f42280f7-99ee-47db-b7ac-33cb2d875c38", "indicator--b08d6454-42d8-40a2-9e00-42ddedbefdc1", "indicator--e2c83f5d-0506-4dff-b493-e3d5ef1ae107", "indicator--27f45d96-877b-4709-9f99-f74fa51aca89", "indicator--2489855a-7f9d-47bd-9e11-809529fa2deb", "indicator--043ea4bc-dc00-4072-93fe-4cd846f22ff1", "indicator--874d1d76-1219-48c3-8176-d8b468a73f6e", "indicator--55d02aa7-ee79-400d-955b-f31fb4568320", "indicator--dd5c9e86-1e52-4155-b207-835efafcd311", "indicator--f856fac3-8658-482a-8962-dbab5aeabd29", "indicator--f9ffb16a-0cd9-439b-9066-9d23cf4ee440", "indicator--a1b32a1e-5c5c-478f-a09e-93e4f5cfc2ab", "indicator--de144c68-a9c5-4328-a726-645f0be01aff", "indicator--62aa5773-8b1b-487d-a222-e4692accf198", "indicator--4a1fdfb7-1c39-4aff-a5f7-e109d74d76a6", "indicator--657511d0-7149-48ce-91db-bcf759d11897", "indicator--05017576-9f5d-471c-a613-de19296cbe7c", "indicator--041192ba-df29-4ea2-b2f4-87afed3dfa6a", "indicator--1d905a50-c1ac-44a5-be9e-4e5fbb6f5148", "indicator--9d23e142-94b1-4dbd-bfa2-4f75f12f96c9", "indicator--904a2565-d747-48d1-a284-3e980f881057", "indicator--7d766f45-5df3-4b14-b374-ddd98318c394", "indicator--5b020ddf-75db-4208-8b6f-a6bb853d3197", "indicator--0c0ebdb4-1e2b-4183-b213-109c6f1b83eb", "indicator--c1656d2f-6769-4650-a22a-cc6337e9eb6e", "indicator--5c30bd3f-a93d-40b3-bcdf-028fc217cba5", "indicator--812f9abb-4601-4656-bf25-7cc72677c5d2", "indicator--d321949a-ba11-4855-a97e-66ffc696dabe", "indicator--c8342fd6-8e59-47b0-8773-7005e2ebae4f", "indicator--d150942a-6002-4112-aebc-ff8e1bf7716e", "indicator--7f844a41-578e-4016-b261-9372ba01301d", "indicator--bc4c3a3d-829d-4683-b08b-ba10861bb481", "indicator--d820bff2-d098-4453-ae18-523476734f04", "indicator--02149983-6d2c-4970-8e04-3c877a6ba87c", "indicator--baf0c548-7f26-4afb-94f4-4947244959ce", "indicator--1a1c0f1c-dffe-412c-9acb-af3435935fe5", "indicator--949f653a-52a7-471b-a07d-0bde8204d0d3", "indicator--adeca37c-28ab-4beb-af81-212a5d053f7f", "indicator--c4ea877c-ec7c-428c-9c96-cd8d4bba860d", "indicator--beb906bb-218b-42e3-9b76-03ed7a8c6ee4", "indicator--709bcc89-5fd2-4ccb-a290-1250a2ff4ea1", "indicator--e9d8df62-1e5b-41eb-b5ed-492b1dffbcf9", "indicator--5d875de3-59ff-4e73-baee-5b8caf614efd", "indicator--b104603d-a257-4957-972a-ec8e4ddfb6ae", "indicator--97501000-e7fc-4d24-b625-e46dc560f783", "indicator--4580e115-da70-467a-9454-9173ee2a90eb", "indicator--1a1dc350-8ec3-423f-ba3c-3f1990dbe2bb", "indicator--a30336e5-d5c4-474e-b663-fc1067e4f3f8", "indicator--6ec45bed-66e4-429e-ab25-f30d636bba79", "indicator--1458d75e-6930-409b-9f5a-0575e47bea8f", "indicator--9a149b5a-4f56-48d2-822d-a3fe9dcdda16", "indicator--59a23fc8-be4d-405d-864b-c4b0f0831c59", "indicator--85467ea9-2465-40b0-b3d5-935ef535963e", "indicator--f222fe91-328d-4bab-8ea7-229c37081ab5", "indicator--1dbe9ac6-141e-49c8-aee0-c515dc862d2d", "indicator--5cb233ab-5aa3-4263-a68f-2fdc07af7ea2", "indicator--91344a6e-70a7-4019-9e76-067c4704a778", "indicator--e965998b-2790-465c-b2d7-c120feeb2799", "indicator--5d9c3668-13c4-4f11-b900-a369e3dd926d", "indicator--1bd55b23-0fd8-4c79-8b6e-9cbb276bbcdd", "indicator--2c94d180-e14f-4c4d-bec7-a8b9566b2ab5", "indicator--766da9df-7310-4c86-a8ab-59513b677c18", "indicator--6a5b2fde-294d-464a-8daf-9e35d00dbaab", "indicator--167a7047-51a4-47ed-b5ae-8f822e64a1eb", "indicator--daeb2530-4ffb-4e07-a094-a1c3fa4c2a15", "indicator--39e5824b-ee9b-400a-9d1a-2d725c3429a9", "indicator--9b2a342b-23ec-4951-87bc-eb832f664d20", "indicator--f52f57b2-03f7-4bfc-8686-c258999c9171", "indicator--3bab35e5-ea3f-48a6-83e3-268b7ac1ec30", "indicator--aed5c241-4269-4a7e-998d-e8cbfccad9d8", "indicator--76d892c3-a6b4-41e5-861e-7381bff37510", "indicator--2a989433-7963-48bd-83f1-89e1562faff0", "indicator--1ca06632-fbb4-4715-b579-a6d984121b0f", "indicator--9183797b-697f-4619-9b50-a56a015eddad", "indicator--1437159f-5fe5-4581-9140-8407830adae3", "indicator--7d6edb6c-b7bc-45ad-bd16-078a603724d4", "indicator--846fb292-c05e-4199-b44b-01a55760f756", "indicator--0be2dff5-039c-4944-8188-42dc8c599465", "indicator--fc96b139-c4d5-4251-8c96-dbd1b2894a32", "indicator--f19f0aab-2f8d-4a30-b69f-142d9fca2974", "indicator--017e18e7-a338-4996-8e5f-0a57d78ff7b3", "indicator--5f6f9ce7-8d5a-4d9a-8478-b5c402d92bc8", "indicator--57a4bfc2-21bb-47e9-85e5-66f0652bc118", "indicator--c064f730-4475-4c7d-a97d-381f1979b91d", "indicator--0bf1a82b-8cff-4f16-930a-2909456b241e", "indicator--972ab3b3-bff3-4ff2-b3e2-e2772fa9f957", "indicator--a7ce025f-6953-4cc0-926e-0f6400330072", "indicator--14794b35-749d-4a04-8cb5-e287ae279f22", "indicator--6489a051-4f8e-40bd-a23c-7d58df1666d3", "indicator--6bf051e7-e7ba-42fd-8318-78229d5da434", "indicator--fbdce9d5-0389-4c10-93ed-75f738efb148", "indicator--801fddd0-14ff-47fd-bffe-5b5151a52dbe", "indicator--5c112bfd-b004-4374-95c0-2db99bb1f081", "indicator--d3fe7c9f-03a4-4713-9a87-c7489012ca0f", "indicator--7aab7b8e-9439-4e63-b0cf-6288581d322d", "indicator--75b24fda-4a52-4b78-929b-196522ff5b47", "indicator--8f673265-d4ae-408d-a512-75c36f5f0360", "indicator--22f74e3a-7676-421b-87f7-f98693c622e4", "indicator--4ba65878-cd48-4b3f-973a-04892825e533", "indicator--e1095cc7-2864-422f-8c15-9e65a3497612", "indicator--6ad360d9-73c0-4b08-8427-77242b1b8a3d", "indicator--484121ef-eea3-4277-9596-922bd5d41fe3", "indicator--06e9d768-39d9-4633-b74d-f0c4615d8fec", "indicator--e3a71e57-c965-4396-b356-9ae1d247ba5a", "indicator--7e923fb8-ee31-4de8-8280-f97815f9c702", "indicator--6e05787e-8726-4c65-b133-739ad66d7545", "indicator--6a8e971e-e290-415f-abc0-43bfbe11b915", "indicator--62c6fc96-bbbc-41ee-b508-aefa71cd9c2a", "indicator--cfbed2b2-2fc7-4b49-8d4c-43eaecd14d86", "indicator--5a5bc987-0a42-4796-924d-14e63e9ec61f", "indicator--08b139d8-4d96-41bf-9cc6-22fd7ef43c56", "indicator--6b023f42-895d-410c-bb40-254c5b34210e", "indicator--c2252e51-4857-4687-9557-996d6f07f16f", "indicator--b864c3c2-fbb4-4e38-8ca0-6f5d42b36d76", "indicator--1b4f7ec3-21f1-4012-9a88-11ca52254004", "indicator--2eea0d1b-ad28-4014-baad-af4fc020e710", "indicator--b14b4d02-def7-4455-a98c-6d0dd6eb85d8", "indicator--c2cd7f87-e158-4e38-a66a-be0343935310", "indicator--a8e81882-a18d-49f0-bb60-faf62ba0161c", "indicator--9fcf9bda-1b23-46f7-bc23-3718103ec2bb", "indicator--60ebc716-0867-466d-80e6-cd799450e649", "indicator--0450b1a4-d3a9-4a8c-a654-6e8a95f23003", "indicator--992ada70-4055-49d7-98cc-e2fce28e1967", "indicator--5ade68ce-6dc2-4845-939b-fbb661f67757", "indicator--0696940f-7710-4cbc-93f4-4f4279f01750", "indicator--dd7bffb1-4443-4c70-a2cb-da9f6fe27fc0", "indicator--e3bb0bde-2c19-4cf6-a9d7-62c8f14a43e6", "indicator--dcea71ca-e790-40d0-a9ba-e9552aa55b5f", "indicator--842a97e0-aec7-4213-9387-0c934c9244fc", "indicator--8f19c035-4a0c-40a0-bb21-36250bd0f941", "indicator--3a169862-47ff-4c7c-9e9d-7260024e8d1f", "indicator--52dd3b35-e242-4744-959b-04b1690ba77f", "indicator--9bd49378-a950-4bb7-b50f-5e5fd6a90c11", "indicator--314e801f-bf8d-47f9-a28d-eaa980361c5b", "indicator--8bad51e8-c9cf-4b86-94fe-8cdfd053d43e", "indicator--05209c8e-4ed0-4dc4-90f0-eda002d38050", "indicator--e878e3a7-5872-462d-8d3e-49b7da31a1da", "indicator--5a1c0dd3-bd38-413b-a1a1-46d09f395a3c", "indicator--72a31d57-407f-4f6b-854e-8681ad9c2c2a", "indicator--0a45ceef-41fd-4653-a828-1d5764fdf3ab", "indicator--39cace49-1a55-4112-a7fc-699b15c5a44b", "indicator--bb385640-63f8-426c-aafd-8ccc97d7918f", "indicator--57c811ab-046b-4117-8de7-eb95d1dd6531", "indicator--44861e7b-808b-4073-9daf-a1f69822a1eb", "indicator--8cc89de8-80d9-49bf-9c07-196927b0548e", "indicator--048685dd-14d1-4cc8-9142-7a3a618573f9", "indicator--8b86dcb1-d107-43f5-bd04-c7a9704cced9", "indicator--acaa7ce9-ef34-4273-982f-a7bdebaf35d4", "indicator--edd2a57d-6fbf-4d1a-98ab-1e12362f6ea9", "indicator--b627fe47-a9d8-4b1a-a3bc-823dd09527b4", "indicator--bbdd0375-1391-4d42-94c4-a4b3bbfd24b7", "indicator--1287e087-91df-4818-832f-57d7f9513966", "indicator--2d8c3e64-7a9c-40a7-9aaa-6d2150b15e5d", "indicator--4ce933d9-98e7-4112-9b91-c7ef6be1ca93", "indicator--139f45d7-7b34-4763-ae2c-a63b171a511a", "indicator--7729549b-42ef-4992-9da8-00a2903511bb", "indicator--eae10c99-b6ef-481d-937a-72a4652766f3", "indicator--56b44d78-14b5-4e07-9d0f-04230eb02b2d", "indicator--460e135b-1579-4e13-aa07-d4b462327939", "indicator--8caa4c5c-8740-49f4-a87e-a57fb4102d1c", "indicator--04acbb4c-4a54-445b-9730-29862879d000", "indicator--ee3402bd-8dab-4391-aab9-da1ef117413a", "indicator--cd1fd7bb-7d2b-4d30-9865-36ac3aad0152", "indicator--2c8d575e-42c4-4dcd-8dca-2f41aeb87bc4", "indicator--f6f06cc9-1795-4c53-9d5a-41c987be535c", "indicator--80260760-7f40-4bfe-ad93-1ea5392eebeb", "indicator--788d1a48-3485-4352-9052-fe4cf226d98f", "indicator--142358e1-5eda-4b0c-a41a-f46fade32d02", "indicator--3e812f91-e762-4541-88af-e60328f4e994", "indicator--e0611a16-d660-49d7-a740-7a6750aadf7a", "indicator--8de4c3f6-ed1a-4d66-ac94-88117771c6a2", "indicator--289286c9-5c7e-4a62-a8fe-20993b736f3e", "indicator--35add15b-d399-446f-adb5-65a131d3842b", "indicator--24f83d47-1d1b-4dac-90be-45792f6e3350", "indicator--ec951f3a-e45d-45bd-9aeb-18018a2d455c", "indicator--54f1699a-1840-471f-9f34-efd334a39575", "indicator--ca29fdb3-4790-4024-aa28-d0db99c9843c", "indicator--eeebf5e2-7a63-4772-a938-dc32c8cd7cc7", "indicator--cc9830f9-8699-4286-b069-b863f67a0035", "indicator--6cbb9f1d-dce2-41fd-b910-7376bb606447", "indicator--93646f2a-773c-4a90-9172-64f45290f4a7", "indicator--1e91c37b-7069-497d-aa90-ad16cc3e1a77", "indicator--d151eb0e-8c22-4646-91c5-508de04b873c", "indicator--173d1ecd-5903-4c84-b3c5-68bef98f4309", "indicator--9e469b74-f167-430e-a2fd-ca67aee81d52", "indicator--bccc9a16-b831-49d2-8c4d-68f672bfa32d", "indicator--a0f68856-eab5-413b-b11c-03cfb401bf11", "indicator--6675b8d2-b03b-4807-8d3f-e2e0292fc2d8", "indicator--d7c410c5-a1e8-404e-aab1-dc113f1897e3", "indicator--f6e64875-3d9d-4b9d-9185-40635cd69664", "indicator--fb3f76ea-d527-4547-8aba-6dc61a9d0a58", "indicator--13b77b7a-9f28-4d4d-87ac-1c14410efedf", "indicator--b26085b0-cf1e-4e90-8ab7-199feaeddbcf", "indicator--1e523ec3-902a-41ab-99c8-51f23cc03158", "indicator--3b7f90b6-6e15-4771-88e3-5218debc4133", "indicator--d5688d7c-5c66-4790-9519-e061dd2696a4", "indicator--f1fff60b-6e26-4beb-8225-2650cc9f2508", "indicator--73246251-5fc3-4031-b801-9de97d37b197", "indicator--0c8e9834-9ca1-4578-bc63-43da637e6a06", "indicator--cbca1acc-1eae-41a0-bf8c-1afa1e51577e", "indicator--6c7bee47-f46e-40b4-ae39-717e825e1197", "indicator--47b695d7-6212-40fa-9f00-16e64aca32dc", "indicator--1a229d1c-7dfc-4a42-8903-162f08c76112", "indicator--0178ca6f-6b6d-4413-b5f8-51955e9d920e", "indicator--a7786692-b126-4bce-9253-9ca00740ca8d", "indicator--0ddf609c-1c3d-4608-a12f-504f39481b8d", "indicator--c81bd203-80a9-4215-84a0-2aefa5916b29", "indicator--d3539816-e941-4e53-9ef7-566f603adc61", "indicator--53161093-94e8-4824-a583-4a3551f3f125", "indicator--fc44b822-7cec-43e6-9e37-3d58d3d516fd", "indicator--9ca1124b-051e-45b6-9781-eb19295694a7", "indicator--7a6e07af-f3b7-4892-be45-0bc077cb926b", "indicator--d56d99fb-8bb7-4de9-96fc-fc6227a89794", "indicator--40d7dac4-2ac3-4dd1-a017-f28b38da9e7a", "indicator--7d8b1a68-8bbe-4215-aab3-7b7e41f34bfd", "indicator--55dab615-d356-465e-85dd-ee36122dbc30", "indicator--96d4d19f-ec30-48c8-917c-db04812465aa", "indicator--344cb8fe-3510-403d-b91d-9ed6837ef5c2", "indicator--288e3d98-339b-41ad-be5c-9c2a2037575a", "indicator--f3a1aef2-117b-4227-981d-a381206b3717", "indicator--b0006750-52a0-42ec-8427-32fd9316a301", "indicator--8b07168a-7f60-4d2e-af2b-e32cddbbdfd9", "indicator--17c56180-90b0-4f91-a281-76730db465b4", "indicator--62461467-25a6-4330-81f8-91fd6966a5b6", "indicator--007814ea-5c9f-4715-9967-496d284f0fa2", "indicator--bce93baa-1313-4f70-8933-2d2d1d81115f", "indicator--3825bfe8-49c4-4520-89d3-3fb7d4802699", "indicator--49d1012f-7230-41f4-a1af-1f9103548e50", "indicator--76241a81-91ee-4460-b1b5-6bcc22b07254", "indicator--20fc0f97-2757-4b87-8229-fe9ab71299d9", "indicator--44f85f88-3f89-43d8-b1df-823bb7832cee", "indicator--8ac7df8e-34ab-4557-9c79-6fdac80259f6", "indicator--93ce12e5-ae28-4e3a-bc54-f992a2d52ca1", "indicator--c93274eb-3b72-4c3d-94a2-c25678dc6d56", "indicator--d3e70041-b620-41d4-aa74-bce9f1f0642f", "indicator--643a61e2-203e-498a-88ef-25bb1a59fbc3", "indicator--4d68d686-72e8-4963-a9c9-ecb01728e875", "indicator--89b2fd3e-ac09-47cf-bb88-581ca5791dc6", "indicator--6262d5e7-c7ae-4f58-bbc1-0ad13b83e714", "indicator--210f62b5-e6f6-488e-8dc2-343a43e537ba", "indicator--a2f71b9d-3340-42c7-866c-80e50b26d3b4", "indicator--67e66a7c-6899-444e-a464-05e996301fa3", "indicator--9224403c-e31f-4bda-877d-84e3a52466af", "indicator--01866ddd-7d8d-490a-8162-f9a8366dc0eb", "indicator--c48bb6fd-e9ce-4fd5-b650-adf06bfe9c5c", "indicator--62ace199-a2df-4f75-9a0d-bdf44f81a1c3", "indicator--1cbfbce2-e6fd-4762-93aa-dd41dca7a119", "indicator--225449eb-593f-4c5a-87f1-c4accc33beb9", "indicator--95917fc3-b746-4a81-a65b-afc7c4020679", "indicator--34f53f10-6106-44d8-a650-a0375cabd099", "indicator--20b6a17f-ecb4-4a86-a1c5-c11c17925790", "indicator--d55a9a80-2145-4a70-84ed-05dd39ba6d50", "indicator--972dec78-3e73-4154-931c-c59556624cc1", "indicator--8310f16c-e417-4e79-a792-603f299c8a91", "indicator--6caf1fec-333e-435b-b1b3-036024b242d0", "indicator--d4fb020f-2f26-4d78-8a9f-7b04b14c29d0", "indicator--c584f518-bc9f-4492-a0ed-d54183ca5e13", "indicator--29ad871a-254c-40fb-b508-679a4c678ce0", "indicator--4ca32d37-a5bc-4a71-9f22-1b3728172cfb", "indicator--a4c36acd-95a1-4559-96cb-043288eaa2a0", "indicator--233214d7-bb10-4f06-9833-800da3ae27ab", "indicator--5dd7696c-8855-43c0-b06e-6686dd9ca341", "indicator--1e60838f-3c8d-46d3-8602-3476b0f5f075", "indicator--27dfdf8b-8df4-4195-a432-1e45cdfd9732", "indicator--15149fec-bed6-4135-9907-7ee43ddec779", "indicator--aef3b321-b165-40da-9088-5a222b195ae0", "indicator--bb81e307-e5d4-434a-9978-bfbd50877250", "indicator--c2a0b72d-da91-4694-9364-d5e42621e15e", "indicator--0a98ddb1-3629-41f5-8acb-443f6366a749", "indicator--1efef88b-7c7d-4a40-b3b5-20e20e08dbea", "indicator--dfd8846a-37ac-45d6-b50e-77a2e7972aa9", "indicator--cfee1665-a156-4f5a-bc1f-45e6e302dacd", "indicator--d1964c08-865d-4e9c-baec-fa037035b8d0", "indicator--e58d8e77-05af-4feb-b9e8-e635d9c934f5", "indicator--76987927-bb32-40c8-9618-5a1148c197fa", "indicator--dbbc726d-4278-4eaf-bc9d-7e9ceb0860e1", "indicator--106fb952-bf40-455d-9869-145a9ad0c005", "indicator--c9cee8e7-59ea-4143-a02a-3e1cafbafa69", "indicator--440f910e-3bb4-4554-92a1-251c86a093c2", "indicator--a018d1c1-c4d2-40b7-a557-827a67283928", "indicator--e711115f-4b49-454f-9577-c42330127c2c", "indicator--e92520ba-113a-4775-b8e9-f59b4895f167", "indicator--17f21aa4-c60a-4eb9-a525-75bc0d69d992", "indicator--bc2719de-6eb1-46f8-aaf2-70b3cfb77f05", "indicator--700657dd-bed1-4c8c-8993-94ac940570b2", "indicator--31648aa7-3c5c-4605-aeb8-0625f6e44d8d", "indicator--f9d99ddd-d5be-4bbd-8e32-f5cba24bb4a0", "indicator--bc5b7b68-c6b4-4337-b2d4-6c25e27b75fd", "indicator--7a747a1d-b67d-4d1a-ba3c-dfb2aad851ff", "indicator--6d0c3cc1-7e6b-4053-be15-7327a755e903", "indicator--7638838b-c72e-4c85-9d7e-011c1213f9f4", "indicator--fbec1c63-b4cd-4018-94bb-c784acc8b0a0", "indicator--5e98ac75-5f3a-4fa7-b75a-d5dcfa96e715", "indicator--1c64874d-ba06-4860-b181-96e27356c8be", "indicator--e0898f98-9b95-4efe-82f8-071d9d6cc5f8", "indicator--8c78d18b-7aab-4222-9ddf-b5e14b50fd13", "indicator--94964b7b-f1ba-40c7-a7d0-46082888d2c9", "indicator--13bfd202-83cf-4514-9ccb-0ce2686d186f", "indicator--166ebac5-0588-4f73-a945-d6047fe562a5", "indicator--bb98aa24-62ed-4d0c-a455-cffc534128c6", "indicator--718a60ac-3174-4ca6-a5fe-fa42d297d14f", "indicator--11f0c85c-c546-4c59-bda8-5e172da0ff81", "indicator--0a3be2ae-bd12-4eee-a531-10bacc87a51b", "indicator--663c721e-320f-49f5-b100-e509efe4a53b", "indicator--c20a4579-06c4-4ba9-8937-9c7368242d50", "indicator--30b0d41f-cd26-4946-b2a1-4a8cb59cb3b6", "indicator--66a1fe70-554c-485b-92c8-ec517de46e23", "indicator--11fa91d6-fb5d-4e1e-adfe-399aa01eb55a", "indicator--de42024b-e948-449a-8ec9-5a5f97f87224", "indicator--c1fbcec3-f46e-4a15-aafc-606134111af2", "indicator--002c3683-5d89-4b33-a7cb-35bfd3f319b2", "indicator--39d26910-0b11-416b-8fca-b18ea61c54e7", "indicator--7ae427fb-99d7-47fd-8a25-27c20daa62b2", "indicator--9ff0da1d-3423-4a7d-bc35-f97eb67fc60c", "indicator--fdb1a509-675d-4d4a-bf83-e5935b465e04", "indicator--3aa7d0dc-5252-4ae1-8551-efdef212b1f2", "indicator--a6cceb4b-7d60-497d-bda4-345c85fa27af", "indicator--033e2fde-98b5-4913-82f0-08f689315e55", "indicator--3121497f-6c60-4ad7-a000-5a3e3533dffe", "indicator--43d1cc96-bea6-4fd0-8d8b-7e7f1c67afc6", "indicator--56d749cd-109d-4191-bea4-90cf4c740bf1", "indicator--42601df0-d165-474a-abaa-997a21cd9edd", "indicator--d881629b-a126-4c2d-8b82-16133fd71e02", "indicator--59e6c020-ace2-4d12-888a-16daccbb2d82", "indicator--dee524bf-59c9-4445-9bff-282125c8a21a", "indicator--a3f9e70b-877e-40b2-ac2b-bec34b28b1ce", "indicator--bbbe0f8c-1f20-4e58-93ad-fcba9f5ab617", "indicator--d101927f-e9d3-4fd3-942f-5fa6da51f621", "indicator--0aa26157-b090-4e3a-bb10-7d97916aca7c", "indicator--22324b86-2e44-462f-a9f6-e8455197ebf9", "indicator--8120db13-8a00-4000-8243-bbc8705fbe79", "indicator--8be15e2d-6a96-4407-ab00-0caa8b8e99cc", "indicator--d9b14540-2799-4682-8e89-3468be390342", "indicator--411270ae-54f0-4d43-a770-7d4a46426668", "indicator--fc1987ef-33cc-4dec-becd-9ff2e319adb1", "indicator--8d65e3f7-def0-4840-af2c-d4c1847e469f", "indicator--8b9d4c42-51de-46aa-8cf7-3de18218cb7d", "indicator--17d5ddb2-ef5a-4884-8ced-78f4266a0c89", "indicator--49f9926a-c299-46f7-a089-b0a3d4bbbdee", "indicator--8dc05909-c3d0-4710-b8d5-782c360d4313", "indicator--59a2bc2f-c569-4455-aa34-3bd5ed2a62ac", "indicator--8664328e-390a-4f83-bf3f-a5a0eb5f5fa9", "indicator--32c4ffc6-f9e8-452b-878a-2e7a24713717", "indicator--3e764048-052e-4ac2-8421-eda53dc9ed21", "indicator--73120d8d-6188-46e1-8f6c-7d78ec11b1d0", "indicator--d56b87d9-a6f3-4246-807e-e7c76bd8e77f", "indicator--e2bd6469-6968-46bc-80ce-f0929559c68c", "indicator--0e8736d6-c958-453e-97e0-6820edfe331a", "indicator--1304ce37-13cc-4d9d-b7c8-00e53232a01f", "indicator--950a29e2-0280-4103-b406-3e14825e4ffc", "indicator--7d980735-8d7f-48d1-b744-06952e6e2192", "indicator--5ce5fcb8-f701-4b6a-8b9c-ff8185a020d3", "indicator--6706eb78-ae15-48c5-924e-7f3e7131133c", "indicator--55569e68-7918-4621-b4e3-673fbc497d69", "indicator--9c3b88b9-d651-47d7-956c-cfbe036bf0a3", "indicator--eef48f71-b158-44f8-8c3b-6f593e343241", "indicator--4ba65b1e-7e8c-428e-b1bd-b2cd418d34f2", "indicator--ce5012bf-47a5-4b64-8496-580b6e946efc", "indicator--a8cf3e99-49a4-427b-9f54-97a1fcada3ba", "indicator--2b330c3d-9f0c-4995-8c45-433fe1081a0d", "indicator--c916e0b7-9d1d-4d96-b806-1358a4de7b9b", "indicator--1068e5bb-5383-493c-8de2-1f1c63fd2fc4", "indicator--f8b8d8e6-5bde-4f16-8b35-4cb77d33e922", "indicator--6a1d4430-74ea-48f7-825f-550586e44509", "indicator--3b2b1c86-0413-449e-8ac6-a1196d20d7c3", "indicator--fbaff6d8-fcd5-411b-bce7-1d237b943415", "indicator--477c53be-634f-4a0d-becd-a2b42f36925a", "indicator--0049d153-6064-4f41-84a9-006af2d96654", "indicator--2b2c3c2b-a732-4fe6-83d5-2313d1816051", "indicator--613b9407-b4a6-47c9-9e84-e334b84adb05", "indicator--2976a329-56ba-4508-8dde-cb0484560521", "indicator--319a425c-3047-4581-934c-7c7b4200df32", "indicator--6ad9dd40-a59b-45c6-a393-9604074fab36", "indicator--ef06072b-796d-4316-8a85-3ef472e83935", "indicator--541e7067-6d4e-4ec0-96b5-764ca15b2e6f", "indicator--9dc2eeb9-8ece-48a9-86f1-c977f8a9c027", "indicator--634f83e2-f8a4-44e4-93a9-4986cb53391c", "indicator--7b99b921-208f-41f6-96da-3a051a127c9b", "indicator--d127de1a-2395-4dac-90a4-7a14ea1f3a11", "indicator--89089634-9f23-4fe3-9109-adb53edb5e57", "indicator--bd69f13b-3591-4784-91d3-ec28313aebac", "indicator--4f532216-2e7e-43a4-bd29-688e4b779a01", "indicator--7b448991-5170-479d-b3c3-4794d9480982", "indicator--f34befc8-54b7-44d4-b761-885bbe5309b3", "indicator--76aefa0f-e1a2-4488-b2ef-627d4810bfd8", "indicator--72199e12-f59e-4232-b4a7-98ded4144253", "indicator--89140d9b-ef79-4cac-879a-f28ac9d0f999", "indicator--90f418e7-d2f5-4aa3-baa4-8521e0d7f7fd", "indicator--d01fedae-67a6-4f7e-b414-eb9c5e4af4f3", "indicator--73c9b23a-837f-40c6-9a9f-c7b7ffa86d40", "indicator--30f2cdd6-9ccc-4b83-8867-a478645cd8cd", "indicator--b2baad2b-3397-4629-96d5-45dae328b93c", "indicator--1a5c2817-7efa-46cc-93c5-1b493c9f0019", "indicator--348f8a81-1004-4716-90a2-8dbc549e2c01", "indicator--69c13cf8-a1b0-4a6d-abe2-00f225ae56cb", "indicator--38623935-5adf-4fc1-9c61-0e915a81f44e", "indicator--1bc36b43-e305-471b-ac3b-433ae45d1b19", "indicator--60546d55-295c-49d5-99b2-03fad5b38ac1", "indicator--96b69d2c-da5a-47b0-8f99-2d3e352eff84", "indicator--2dbbb060-1ee9-40db-9e29-1568013da35d", "indicator--82abad8b-ead1-431f-bdb0-cc782443b29d", "indicator--34601511-dfe4-4a8f-912d-f82c452df051", "indicator--1d5bc351-a4a6-4554-a3f5-47826e0691e7", "indicator--fbaf507c-fc4d-495a-a2a5-bc6223008bb1", "indicator--7eec628a-7e1b-4464-b72f-40a14cb10b35", "indicator--bd83209e-157d-4cd9-9c64-113fefb886b8", "indicator--4c6b55f7-9122-4371-bbc8-2e2736a09cf4", "indicator--21f1c1c2-1ec3-4eac-af5e-7d8086da55e1", "indicator--79344661-84bd-414c-9029-4aa56fdc59c3", "indicator--56ad7dfa-e4df-4f05-a028-6c112729b263", "indicator--b2e64528-cef7-40b2-9f95-4af1db1133e8", "indicator--939859a7-e9d1-4901-a9da-fd165d2a20eb", "indicator--17892dfd-234e-4725-90f9-323af9ef98d5", "indicator--3557b03e-7091-4a9f-8a9f-ddf9a68953c6", "indicator--85087cfa-5329-44ea-bf21-005603b8a96e", "indicator--6b439e3a-999e-426d-9335-ad042c0e60ff", "indicator--cb0e8257-6999-4f31-a0e5-60409f40a0c7", "indicator--366544b8-05cf-4703-84f5-4cc16743adf0", "indicator--ce8b8138-6b1b-4e7c-80bc-34b4ef292ce8", "indicator--3e4bdbc5-572c-40ba-866b-80dcab0f22d5", "indicator--25b51b17-4081-499a-a88b-ca06b7432a52", "indicator--3b3363f2-067d-4974-b94b-81c27ff7e00c", "indicator--eb5bde63-e064-4542-b3d6-269b46823f16", "indicator--425c9c69-1e55-44db-a21e-4f5b1b83aa9e", "indicator--3f0fe458-aedd-4395-a4d4-6744ca00ed47", "indicator--9fc489c9-81a6-4047-bd2d-52091b55b501", "indicator--2af0934e-ded7-4bc3-8c9f-55f6b43881cc", "indicator--fafbb5d5-aed7-4006-9749-3deb841df63b", "indicator--de573502-06ab-4322-8abd-76a35c5dd8d0", "indicator--58d7b9df-37ce-454a-a0db-dabd125d571f", "indicator--ba0d5f57-56dd-4eec-bc61-09c6e3598ed9", "indicator--65f23c15-9bd3-4d20-904b-5d778c0231f5", "indicator--507598bd-953f-4362-8255-dfd2c85834a8", "indicator--15648b8e-fbce-4dcf-9719-926074969775", "indicator--18b74681-d868-45bd-ae33-475911f55015", "indicator--1e727da2-3fc2-4563-b0f0-9204557648cd", "indicator--ac19e4a7-420e-4add-82b8-c65f3f197380", "indicator--34d4b87c-ab45-4525-95a4-1e620e535017", "indicator--163db870-b3cf-4357-abbf-28c7d68e7615", "indicator--dcfb2e17-e9b2-4e79-bd55-6634db389eaa", "indicator--9409f73a-0970-4a2f-a2f6-bfa362b2822d", "indicator--ffc2c32d-e423-4966-b5c5-6077d315bf9f", "indicator--43d20437-0713-4bf0-b44f-29b695c30c1b", "indicator--aa0c46f2-5dbc-42f5-8fca-d27ed1b580cd", "indicator--45bd9fde-05a3-4f1e-988c-2fd0ffc5a81d", "indicator--c54cf5bb-892d-42c3-be5d-739c22f75789", "indicator--bb4d0790-ed62-44ee-9845-c2f13f33003d", "indicator--bf3956aa-e656-4482-9c2f-4398e82563e7", "indicator--50e22be1-2c8f-47bc-b399-afeeb4b52f91", "indicator--76c6f01d-f1c0-4e98-942e-73533466300b", "indicator--d3a776d3-cb31-4278-87d1-47ddbf6a2902", "indicator--344d4ff7-da52-4abe-b5d2-416707b1e645", "indicator--f28032c4-edbc-4bd5-ad31-0f5c4786ecc5", "indicator--b23449a3-f121-42bb-9b92-85ee1f834d19", "indicator--55e37faf-9a3f-4934-ba4c-0da01e7729ee", "indicator--e616a277-cec5-4f2d-a202-4b1a347e9586", "indicator--aa6e5cb0-3263-46b0-bc79-48ff03522280", "indicator--ebb2dee8-9fef-4606-b504-021d181764e1", "indicator--6082eee3-32e6-4803-b78a-d1521332efc7", "indicator--b0538d51-3609-4c77-a8d3-b4d8827b51f3", "indicator--8075bc9b-4adc-482a-abdd-bd17828c6f7d", "indicator--d613380d-5989-42b3-8553-e565ad5bbfdc", "indicator--98880880-25f0-46a4-a7a5-87cee8e853e3", "indicator--a1f3428c-f938-444a-b726-efaa63cfe9d6", "indicator--2413cd2a-750f-4ec9-856f-ee78a177f2b1", "indicator--1573dffb-e20c-4dff-984c-64ba208c46cb", "indicator--87091d84-0b29-467f-910c-ccbed715d23f", "indicator--e7c9febe-9223-4059-bc4b-62a8397cfbaa", "indicator--fc7b3a84-3c8e-42c8-a0a7-ae1a2019e205", "indicator--f2c5d52a-11f5-4cc1-b8b7-9a7ff4924160", "indicator--52b19a94-04f4-404c-8b5d-5d48f137f433", "indicator--2fa00043-31d6-4238-9527-239feebec6eb", "indicator--bf1d7acb-9f88-455d-86a8-4899d5080453", "indicator--75839ddb-5395-4d33-bb0a-1dda64d7cade", "indicator--c4021eed-07a9-4c8d-b892-7b9a6ef21c19", "indicator--112353f5-460a-4204-bd5b-a3f21a80b945", "indicator--fd0e7819-f1a7-4672-9189-ad1224c6b9ca", "indicator--c5a5b39e-f980-4438-93a5-7bf1e10812ae", "indicator--4ec3bffb-c9c6-41eb-97f2-047e4cf1f0f2", "indicator--e57046dc-5611-419e-a330-b103404c30a3", "indicator--770b52fb-f62f-47f2-b793-18ff3aecfcac", "indicator--f37e3d9b-c3b5-4d25-994f-eb062d12f5f6", "indicator--0ec83c45-8c70-4a5e-94b8-27f525691eed", "indicator--28449b51-065c-46f7-89f2-e4a5d1949b73", "indicator--27a208b9-7065-4294-8c92-0a4c43d23e0a", "indicator--8c2e6b80-5980-4263-b5a7-bb5defc536ba", "indicator--3ab4e74f-5654-43a8-a89e-593c2db0e756", "indicator--fae9f25c-b9a8-46d1-bd94-c57d2b91bf6e", "indicator--7b32573e-38a7-4526-93d4-b045fe03b77a", "indicator--998c9d50-b3d6-4bf6-a9b9-4eb8c5c073f3", "indicator--180a4a94-9471-43b9-8ff8-805e82783051", "indicator--0fb85a79-785a-480e-b231-8f2694606625", "indicator--afd38d74-01da-41fa-90ee-7bd2dcb7e17a", "indicator--afc2ad5c-f641-4801-8fd7-c92a86611b7a", "indicator--415bdf6d-a5a3-4cee-a553-22d7c8b68c36", "indicator--3e45cb3c-76ef-4665-aa1d-6dc7e19f5d43", "indicator--3eea274b-82fe-4d64-a578-1c0674b6dc99", "indicator--bb4f680e-d60f-4606-9aea-fd43fdd6a80b", "indicator--486a0dd1-c152-446f-87cb-8c52fedf811c", "indicator--0be624f9-fb65-4d6b-b4e3-92c28e421881", "indicator--3d7e208f-7d10-498c-a1a8-f6c74176e72a", "indicator--e93d0d0e-a1a5-4388-9392-828274a718c5", "indicator--a0ca5f88-8103-487c-a434-f21e8a8673a6", "indicator--6958411f-16c0-4423-90f3-4a35dfd46962", "indicator--70976701-28eb-4939-89fc-e56c7054094d", "indicator--b175161a-dffa-4c24-af06-bf434d808744", "indicator--3a8c5ec4-343b-4ecf-9358-3814dd67678d", "indicator--30d26f14-0184-467c-9051-38e50c99f7c2", "indicator--30a378bc-609b-4db2-9e7a-5ca1174d43c6", "indicator--b39373d1-819d-4251-92a9-0fbf196a9248", "indicator--1807ba06-9624-4f5d-acf0-f2e333967c07", "indicator--2bdc11e0-b9ef-4954-96ae-3865a0af5ac4", "indicator--0ab90237-3e81-4124-b5cd-265e3114e749", "indicator--96946cb8-03dc-431b-9b6e-3edbc0e2d5c1", "indicator--f2f53983-e633-498c-a369-3fa8fe8006a9", "indicator--a4ae62ef-0a43-4cc5-8283-16af9d7f2d53", "indicator--0986e259-5fd9-4fc4-b0c1-defac81b26aa", "indicator--ac43b0b7-1c9d-4a8b-8ab0-bed5d1ef165b", "indicator--83f0efbd-3f10-46c6-badd-a19f168bb9f1", "indicator--41ba1fbc-e6a9-4aaa-a2c5-d30deb4b4b1f", "indicator--9a22595f-ffcb-4ac3-b59d-e128d921e896", "indicator--257e0c93-cd30-4668-872a-8946395a9950", "indicator--ebad0a02-f8bf-42c9-881e-e7bec3fb1546", "indicator--b1aef77c-bc9e-45c7-b886-482cf1f405c0", "indicator--650f36c8-8a9a-406d-827a-98d28c0afef0", "indicator--f3005b74-31da-4ca0-bd2c-219384ab3583", "indicator--f749885d-70a2-4422-bb0a-da28e22528d2", "indicator--7c6c7464-7628-40ad-8499-03a240166cec", "indicator--1221c6c4-84c0-4fe8-8b9a-8072f5d92a31", "indicator--fe6bb3cc-f149-4f9e-a917-c251590cdd48", "indicator--d87889f4-1b8a-4a66-a529-6c6340dea327", "indicator--0a8629c8-36df-486c-9a5f-1bc06fbc83ff", "indicator--fe2d61fb-bd37-4b84-854e-2f8689ef71bb", "indicator--f6c3fc0c-56dc-48ee-ac81-cad218665702", "indicator--7fa36376-e256-41e2-9a76-a64c61e403d0", "indicator--201555d4-7368-4a48-a0fb-eb61d42902c9", "indicator--b877d96e-72d2-4028-9447-f951552dfa9b", "indicator--0ff71983-0420-41cd-93ec-5b0b1e83cdd4", "indicator--23b7965d-7467-4bb8-8e09-947f2f2470c3", "indicator--934d9c57-d61f-4708-a90c-235b476cdd06", "indicator--368658b4-eac4-419a-bb50-d8c4b6bf4694", "indicator--bbc50c27-a98e-4ce1-b54c-027796f6746e", "indicator--a954439b-2868-4f9b-af4a-075b1c7e3d91", "indicator--858ac9a5-a9e1-4930-ba45-b7e0d0d09e74", "indicator--dd57ff1b-8b26-4c40-8218-d859c7d5e713", "indicator--287f0d16-6d08-4f4d-a3a3-d9a1ba625a7e", "indicator--25d24ac9-9d67-47f7-8ddb-fbce12485c97", "indicator--065efb86-6645-42f0-a3bb-919645afbf0f", "indicator--d2e937c8-46a9-4320-9627-0fe5092815a2", "indicator--29fd02a1-3d61-4489-abb4-53698272dd3b", "indicator--ed80dd31-46f5-4ad4-8beb-f953eb268414", "indicator--d303240f-47ae-4fa3-a652-ee2021026f4c", "indicator--df79ebdd-c384-4a4a-a84f-6630414e387e", "indicator--78a2ed65-a98b-4579-985b-e0bb611f4ea9", "indicator--956534e8-b6f1-41c8-be6d-9cf923edcf99", "indicator--eae648f5-0f17-4222-bafb-36c895e09f6d", "indicator--aa508efe-d8c5-48d4-b2b0-4d6b810afcbf", "indicator--d6f57bfd-fe38-45bc-aa70-a13d4906c4f8", "indicator--087fa56e-5687-4258-a63e-86efde6a5e6b", "indicator--757c0619-5be0-4c96-bad4-06c7d5511e7d", "indicator--4614a6cf-b265-40dc-825f-87a38c264194", "indicator--6f767198-d13b-489b-afcf-6ce27e0e0d35", "indicator--bad2d2ec-3fdc-432a-956d-093621d1ad98", "indicator--10273835-bcfa-432e-80be-92651d7c359d", "indicator--dbd5ff0f-2812-4c54-bcb1-e0adaff9b195", "indicator--ec96f128-fd45-48aa-92d5-f491e37b5e1d", "indicator--6cbd2189-e5f4-4ca5-b79a-5bbb7f01d0de", "indicator--fa20a8ff-9e28-4e76-8c80-df3c719acfef", "indicator--958f9e5c-7d45-4ea0-8b5a-9dfa8d5414ef", "indicator--7bca3955-4601-49be-8138-8d3e2bed7ea9", "indicator--6fd6f234-a02b-4486-b5e6-099e03e655f4", "indicator--f28e2e34-f86d-4ac3-a8c4-1da4ac0193e4", "indicator--05b21898-be3d-4b21-9cd9-0b4708049039", "indicator--e0f77682-2f49-425a-ab0f-1900ec30baeb", "indicator--f06c0789-9be3-427d-8878-20fb2c72a997", "indicator--48220a34-c3f9-4dc5-9f62-ee0703661226", "indicator--66a5f603-2a17-4795-9882-b593b50c3ac5", "indicator--819f5713-beed-4b69-9817-7dab048fcf6d", "indicator--16efc134-4d15-444b-b765-8d6e7a64d0cf", "indicator--94928935-072a-447b-bef0-e8b7b1830da4", "indicator--ae36c537-42bd-47d8-899e-16d08b3aa395", "indicator--88bb6eb7-2dc8-4ad7-81d6-79de2a37cbac", "indicator--da341f32-2850-47ad-8aa6-1079e910fc88", "indicator--cacf3853-bcef-4aea-855c-7491a1356598", "indicator--8c88c9ab-061e-4ecb-a334-743f8396cdfc", "indicator--d1c80d2d-7fbe-4117-b9b7-2bbb653ca0c4", "indicator--48114c7f-3bcd-47b0-986c-133f31696e73", "indicator--e1f4aeef-bfc4-4c70-8d8e-ae951cc900c4", "indicator--3dbe6b06-db9f-4cd7-8fd1-089c3d192009", "indicator--c278267f-e1d7-4d05-84d0-87838e7b8393", "indicator--cbf0b9fd-2d0b-4832-b9e7-bb8dcda6f9ad", "indicator--b2f2daf8-32e4-4a65-b92b-496ffb71979d", "indicator--201dddc4-68b9-4035-98d4-be98035d54ed", "indicator--b2838da9-689c-4360-8535-019634c0029e", "indicator--aed7a52a-c424-4594-945d-aab2fed2f96f", "indicator--954862c6-db5e-45ca-acd1-30bec1af851b", "indicator--30c660b6-4e01-48da-aab7-b9ca6ae0c32f", "indicator--35e3f8c3-7a1c-4216-a306-ac6e873c0158", "indicator--4246763e-65af-4907-8769-62bc8e63b0ec", "indicator--45b522c5-8d4f-4907-9bbc-60460cbfbaa8", "indicator--140a09c4-07d1-4925-9d4d-8d67387a2d65", "indicator--b1798a4e-a7e0-454a-a0d5-78853ac1e634", "indicator--e6d6967f-7682-4545-b673-cccc595bf804", "indicator--e5b28852-264a-4cd6-ac92-4ecfdf074807", "indicator--8974ff56-9cde-4ef8-beaa-8bb1fd951bd6", "indicator--88f27ec8-2420-4229-90bc-b696f98adcf2", "indicator--de9117d8-8bc8-4e38-b697-4976edb04ca2", "indicator--ceae94b4-1473-4d14-89f0-817d7ff29360", "indicator--9909bd3a-753b-4a8c-8a64-8507f257c5bf", "indicator--f1404777-2a50-4540-bf39-131e0916995a", "indicator--70377d98-88f6-44c3-aa5a-e3f566291066", "indicator--3b772789-6a8d-44c7-91af-bf24ddafaf8a", "indicator--1af62741-7580-4e8f-8f1f-730377279090", "indicator--5c04ce93-b4cc-4176-a726-2ea62aedba19", "indicator--3fbc4daf-da0a-48bc-8167-e30b802e5e2d", "indicator--ff1a7ffa-7732-4d66-944e-9911efe685d2", "indicator--ba78982e-aa2b-4d09-b69c-205b86bf7779", "indicator--1bf3ea44-10eb-4708-9799-58e3b67d5b9b", "indicator--e9f85b58-10e9-4966-a488-ec7101b35ce5", "indicator--152a93c2-c4cc-49d7-a1d2-c9ba85f5dca0", "indicator--21428e64-655c-49f3-9deb-30b27d36c1e0", "indicator--32c56fcb-da7e-4dcd-9f13-b45f668689ee", "indicator--14f5dac8-3014-47ed-8546-2ddc46a4b54e", "indicator--55cf4dd8-24f7-4488-9ad4-ff3e529360a2", "indicator--04cffa82-c089-4093-964f-e48b7f207596", "indicator--92c37d04-0028-4560-b3f3-8e3ac59ecd34", "indicator--eada2470-9864-4ae8-9bc0-e31528ad270c", "indicator--59379613-95e6-4b22-9cf9-02e19ef514e0", "indicator--73323ebf-9cf0-41e2-aaf5-ba3f97816174", "indicator--6bc9b929-b7c9-4485-a574-991ff133af7d", "indicator--4ecb5660-8acd-43d2-aa0d-f92469abc426", "indicator--8476dcdd-a3fd-45fc-a91a-357c943b63a4", "indicator--3b38c121-1984-4d5d-a61b-864420977c57", "indicator--b3a9cb01-cda4-41fe-b83f-6642147fb3df", "indicator--3afc18c8-a32d-48d5-9d2d-016986ae033a", "indicator--fb704990-7ac0-4d78-9275-83edb3b9abe1", "indicator--2b6b5b87-f327-4e4d-a7a4-799090376bc6", "indicator--fd028f97-c13a-49cb-ba73-cb2d59d14727", "indicator--55c9de6f-4f7a-4e4f-acac-b12548b9875c", "indicator--ea8b96e3-c870-49db-bd6e-0d721e4b755f", "indicator--de2a0229-5903-40bd-9e96-6078cb251dcb", "indicator--dfc56972-8e90-4993-a470-0f40a4773954", "indicator--3c85bb66-55b0-4745-b18c-9cbfe7092d2f", "indicator--e02ec9cb-6078-42a1-b6d1-5b1effb81c67", "indicator--f9660e58-596e-4b5a-89cf-bc0e3a00600f", "indicator--d7583b74-3975-4c73-9b1f-b24403140e30", "indicator--cc55a8e7-76a6-41ca-a3cd-39ae1dac814f", "indicator--2ab9bdcc-7607-4ccf-bed9-7655df80a15a", "indicator--05f08c29-e404-4140-b558-c1e2ca91d6c9", "indicator--b974db76-45d5-4f01-8049-e5d57f3d21d0", "indicator--aaf66fa7-7ed2-4923-904b-0af06ec1145f", "indicator--b3b37b76-cc4b-4b91-87eb-b6a45f524abf", "indicator--3aae72c6-1891-4fc4-b386-848edd32da40", "indicator--052c010d-9f7e-4246-ab99-39b56d1a79da", "indicator--91096c10-bbef-4e6b-887d-6c37d7500846", "indicator--1cfddefc-24af-4f53-8960-17da53041be1", "indicator--5ae5015a-908b-4309-83a4-2794cf6dbe0f", "indicator--29ef470c-0a0f-4b93-ba6c-d7a6385b3604", "indicator--2c6a4bf0-f772-4027-89d7-741a1c278d0a", "indicator--aa04896c-5ea3-47b5-b63c-b2471105983d", "indicator--d8ee5745-7c94-4fd0-9516-b71d651ddc0f", "indicator--eb7c6b92-c89a-4569-af4d-be6991a6a6c6", "indicator--05c792f1-f119-403e-81ab-3fa417e7dee2", "indicator--bc18d672-32d0-453b-9091-388d21c1be5c", "indicator--bf2bd2dc-171d-40c1-8176-4c29a8f22ba7", "indicator--01f9acbe-b720-4ac1-a467-f477ae4cac72", "indicator--a62e1863-7abb-43b1-a31e-3fe4202e77b8", "indicator--51d7fddf-293b-49cc-b402-c7f4d6472e82", "indicator--c90057e6-7488-4bc0-ad01-fcc34244932d", "indicator--f77eba82-9364-4280-8dfb-966727612b2f", "indicator--89a546a7-80c6-4878-88d9-fe732aaa2f29", "indicator--2ccf8630-3795-48ec-a411-9d449d83c466", "indicator--b8c6b824-991a-432d-b048-0dd8cb07ed38", "indicator--3be717b3-0575-421d-874d-76a4c5e0c5df", "indicator--a208da32-2f07-4a0a-b1dc-1e95fe180142", "indicator--91e1fe15-60ed-4d22-95ca-1ae7f0105dfc", "indicator--f004edba-ffa3-485b-a4e0-a14d46ffedfb", "indicator--faf8602f-7505-4f71-908d-8fd44ed1321d", "indicator--71229c2c-d818-4242-9599-e34620d2b134", "indicator--eea4fe97-1ad1-4d84-aec2-cf9201aded51", "indicator--448b6e3d-648a-43ae-a832-b9038fd3a3b2", "indicator--bef88e88-5698-4f8c-aa30-2bb135c06070", "indicator--0919b4c3-d89a-408d-96be-2723cc41f274", "indicator--df882e7e-6b1d-4de7-be86-b436cf695362", "indicator--123ac192-220b-441f-905f-746a0ceb58a3", "indicator--a4b21088-79db-41e4-93ec-727ae5221aea", "indicator--f291a0f2-b4f1-42d7-a3ef-db23f6f654ee", "indicator--8f1214b2-cd9d-4d84-b97d-daabf3156919", "indicator--5de3fb76-2442-4693-b8a0-bc91c07a2131", "indicator--16df2cbb-734c-4419-8b05-977a31fbf898", "indicator--43c25233-a682-49d6-b9dc-710a1c88fb19", "indicator--8a513172-968d-4a0d-917f-91bc8169cb2a", "indicator--94dcc259-ab74-41e4-8250-e525e6e8502e", "indicator--5ab93297-6a10-43d5-908f-0daf92c4cb77", "indicator--0eafbcb7-0667-41e9-81d4-2070d83e0ac0", "indicator--cec2c7e1-77ac-4dae-b604-779bb26214d1", "indicator--917a6fe0-7d5e-4e84-805d-625df52c4625", "indicator--6bf08b8e-32a8-459b-beba-da8eb96ea97f", "indicator--f0d4d947-7d06-45ca-975e-eb9bdbcded48", "indicator--07fc6d5e-b0a2-4d48-813a-f0243f4fbf87", "indicator--ecd8e495-54ae-4448-95de-056101335769", "indicator--e287669d-3c40-4867-9580-01ced1bc10b7", "indicator--573c7c93-1ef4-4073-9d82-f66f85f2821e", "indicator--418b522f-beaa-49c9-9c53-98199951afbc", "indicator--db09459e-af13-45c8-b435-b3fcc5014f92", "indicator--76077d2a-4c08-4b3c-8f0d-8d398c2cd022", "indicator--7d383489-8ca6-42cc-99b9-05f8b694fa82", "indicator--15834575-098f-4cbd-a379-01cf6dd3fce5", "indicator--1eba8bdd-0522-4605-a424-a62983114d2d", "indicator--48d5e9c1-7169-4a1f-bc80-51d218e37ebd", "indicator--9aba56ff-d53d-4fcf-84fc-605c0115188b", "indicator--76de3254-022a-4b8c-b257-727cde2e3b5d", "indicator--c6a4dde7-160c-4228-a8c3-9893b227001d", "indicator--d1be025a-6fe5-411c-91a5-579a2a764855", "indicator--eece7575-00ec-4359-a159-5a9ed02be87f", "indicator--fad4035a-c94a-492e-b6c9-1368b655c1f8", "indicator--ff752069-d3c0-4a82-82be-d9b0e56a80b3", "indicator--19ad775c-be2e-4ef7-8fad-b2c79417bfb3", "indicator--ced939c2-942b-49f9-ae2e-6af66bb3ca40", "indicator--06e57a75-2776-43cf-8193-eed1c58f1c05", "indicator--b438a298-902b-408a-825b-30b78a6efc64", "indicator--e376c1d8-5f57-42ce-9468-48e23de3cb25", "indicator--563e05b6-6eb5-443d-b267-b2825018490a", "indicator--84eb0efb-5888-4255-ba06-a17944a07974", "indicator--0f651f6a-ee20-45de-bf8a-2a696ccf0d2c", "indicator--b0eb6c02-df5e-4e4c-82dd-cc3d724c18c3", "indicator--f042a10a-244d-4a10-a7a1-2a3b6a3565a8", "indicator--176fe9bd-b264-4ce0-9462-bc980baf20a6", "indicator--a8f6094b-6d36-4797-8414-ae5303fef02c", "indicator--b4d8ee04-2c0d-4952-a984-974890553421", "indicator--56d14276-b985-487d-98f0-7e7244f6fbcb", "indicator--0d7289f5-2062-4958-8418-eadf76146b59", "indicator--d76f0aa8-7c65-4491-b25f-9fc69a67dc92", "indicator--3ee1d704-6103-4867-af29-da7006dafada", "indicator--390f516c-14c6-445d-a789-475a03a7825b", "indicator--ffc1a8ac-d04d-4e8e-80af-6c2da1d42f3a", "indicator--a18a8797-86a6-43aa-8a28-9ae38800585b", "indicator--77b086ca-0c37-42f4-8758-bdbe5638b605", "indicator--e5841fcb-9b1e-433a-be6c-62a3f0463c60", "indicator--bb696b11-f477-4657-8689-25e1713c9fd2", "indicator--82ebe6a7-7b7d-4db2-bc82-20138c073654", "indicator--ceaf7b24-4e14-48b5-b163-19308f76e683", "indicator--c0330bdf-4bbb-447f-b769-50ea0aaa4b42", "indicator--94c4547f-7313-479e-88e0-297b3688e1b5", "indicator--6b9f6f7f-32c9-44d3-b705-b3ba76ee2467", "indicator--cf9344ba-e21c-43ff-8377-393290249a50", "indicator--9b2643a3-a747-4965-a0f4-7a63dd75b9d7", "indicator--19c6724a-9c79-46ad-bce5-b387266351bf", "indicator--74254c73-cfa3-4336-b585-b9d018be4e01", "indicator--bc1ef35d-f9cd-475e-9a36-3226b529534e", "indicator--6c8304e1-ec97-4562-a1d3-34a1ef4174bb", "indicator--f060f66b-0a91-4ecf-80e7-3bdf8dae3480", "indicator--8ce61ea1-dccb-4516-acbc-1a62af96a950", "indicator--94405fa8-0236-4650-8a5b-4da19d76a6e1", "indicator--14edeb1f-6ee4-4898-b824-2f111ea001b0", "indicator--25f4c77d-3644-4f1b-8c00-ab0eeb137c3c", "indicator--bfe6b841-aee6-48dd-afe4-3a355ebc8621", "indicator--98810e07-99c4-46e6-b728-9a9bfddedc84", "indicator--b73f4f20-44cd-43ac-a4cd-e38f304842f8", "indicator--512dff1b-7d0a-47c0-b1e7-017990111482", "indicator--4747a294-c716-42e2-a045-c7e65e3f35cb", "indicator--242b6ee7-f004-42c6-82e8-6182022131c5", "indicator--f19687d0-c0c9-4f15-afeb-d3300f6bee6a", "indicator--bc8b7cf3-438b-4c70-94c6-2d8698243d4a", "indicator--af631762-36c2-4bb2-963a-95eeb0a17f6b", "indicator--4309e648-14ce-4c03-9c36-ddd9016eca2e", "indicator--7ce876ca-02d7-475d-9f5e-589f4572b793", "indicator--4b867021-7ecc-47a5-bf64-becb8fe86fd9", "indicator--e7de8482-6a83-4c6a-9201-d70495b155f2", "indicator--366c96b4-6b87-42fd-96f2-8475184395f2", "indicator--c1e19412-f927-4a0d-bd1d-2f58fed70338", "indicator--b452db4b-2bce-4381-8bef-c60733e90b6b", "indicator--ee0c37cd-7537-41f4-a07e-b5f21d9add98", "indicator--cf0a9bd3-93b5-4f64-9490-08b837fe4dc8", "indicator--0123bf88-82d3-463e-bcd8-456c1165f0ad", "indicator--bd635c3c-cd89-49a8-a611-7bbcf03fd4bb", "indicator--9f7f326e-7523-4c3c-9725-bc8ad9f4034e", "indicator--c065451e-d18a-41a6-bf09-d4eeb9b6852c", "indicator--bc3caa5b-9e3f-43c3-8eef-b8dee56a5013", "indicator--d3044c09-bcc2-4f9c-a5ad-d12f88ca67be", "indicator--ea6e415a-eacb-4100-bb97-c235966ca54b", "indicator--b630a70d-a8d7-4db1-90ca-76b418f96530", "indicator--ab8582a1-401a-4076-91c2-4c14ab5c5c8d", "indicator--d4a521af-7f0f-4ee9-b6aa-be9baf3feb43", "indicator--64c7457f-898a-4691-ae20-84c2f407ade7", "indicator--3752c8b2-3e50-46cd-905e-46c6ea6e0718", "indicator--9eb8c44b-6d0d-4fdd-a155-d76d742e192d", "indicator--54989dd4-3962-4b4d-961f-4e9022280697", "indicator--5ff28492-980a-4ec0-a7b7-a474dd0a0c0b", "indicator--72ee4de6-88f6-48b5-bd4f-7728985c71e9", "indicator--00d284b8-7609-41cf-a754-c8fe90c61391", "indicator--1d6338a4-5504-4223-8abb-e6b682ab0be1", "indicator--4c5c07b5-9f4e-4ea7-831b-59c20cc59412", "indicator--2468234a-9bca-46e0-b981-ab47b2af9fe1", "indicator--8ac72b9c-a9e1-43cd-88b2-c611d31a877d", "indicator--f284f524-c509-42bf-9974-b2e2c7fa1b27", "indicator--a59d40a6-e825-4175-a1bb-33b6158a1160", "indicator--4fbd54f1-e0f7-46de-8002-00d3ba9d2922", "indicator--728a0192-a739-40c4-94c2-0bf1b54397c3", "indicator--cf7f2502-2d8d-4e63-bcf6-c241d5dcae50", "indicator--594f7c5c-4c88-47d9-9c5d-7abf3de3beea", "indicator--c137e26e-32a5-4107-8e66-5a54f942329b", "indicator--bd68ec92-7c33-40d5-bb11-3a1dca3c3570", "indicator--903bbc2a-c28a-45c3-bd09-77895c615e31", "indicator--d5cb624d-876a-4a8d-9f58-06a4a68b47fb", "indicator--b90fe5a7-7591-4f4b-86dc-758803c31b87", "indicator--0dfa0adb-4300-4008-b544-274d31b16dc1", "indicator--6d8f379c-23e5-4995-a07a-4a5c9979ec20", "indicator--9f5be6ca-bef1-4a8a-b779-3b99815fda30", "indicator--2a62b9c3-bb16-41d5-84c1-80bf476996d0", "indicator--e69feadf-b467-4ce7-a67f-e1aaecef90ee", "indicator--ca2730e0-491c-4d0b-a64d-6b38c118a0a1", "indicator--0d153d08-a1ca-4a70-8474-2911abb6c5aa", "indicator--358856e3-acf2-4527-be51-7ec483e90957", "indicator--aaeb4a1c-ec61-49f5-ae2e-a387e6e3d898", "indicator--5f9cae74-447c-4656-9e56-47963005fc57", "indicator--d754a501-fc90-4127-b3f9-de8e61cc8901", "indicator--0c7e80e7-4548-4243-85d0-5171c9f4ace2", "indicator--de5bb765-3e38-4eea-a3d9-d8f69f7f3fa2", "indicator--79025059-2c7d-4da7-a2d2-2b56b8a7fd7d", "indicator--1266eef3-8a66-4031-88ff-73f70e2afd7f", "indicator--bb632fe4-66aa-4460-98f9-d528d7d6412c", "indicator--09a321d0-9580-45e1-8a62-3ec01830cec9", "indicator--a800af5d-c8b7-4d36-bf8b-35ef60f6c9b3", "indicator--919a3d00-e6cb-457c-a3f3-61e62cec5607", "indicator--07a4b68b-c04e-4388-88ed-bbfc2a2646aa", "indicator--24cae173-5d38-460f-8d18-3c7811e8e571", "indicator--3fe17d13-c49b-496b-bcf6-61ac7f171f2e", "indicator--975dc580-d03d-413a-9984-e4b34a5cceb2", "indicator--1a879ae9-4e85-4145-80a1-6f6ce4bdfb32", "indicator--4b3a4e41-a702-41f0-ab86-b3b11e548b0d", "indicator--ac599845-bb6e-4e14-b8b1-f2623750ee3a", "indicator--f3d93128-1066-4988-8910-89055737394b", "indicator--fa6700c3-628a-4038-b3fa-a8c3eb4051c4", "indicator--ae686f0f-dc76-467e-9a54-eed4b6b7a957", "indicator--9272a83f-cc3b-43bb-81c5-18e856729abe", "indicator--5ee992c3-86b9-4ce7-b4f8-452dad2686be", "indicator--371233da-4e93-4fc6-94cf-01fce6bddf10", "indicator--a0557517-1ec8-41b5-8d17-c359ec94f1e2", "indicator--808ab5fe-f83f-42ad-a3dc-d94a6f84dab9", "indicator--0b70e960-0fd4-4ddd-b7ac-e8449f80e080", "indicator--91c5605e-cfc0-402a-927d-c7dcc6f0c161", "indicator--552b41fa-10c3-4574-9c93-5b1a6df7acc0", "indicator--855ecb05-d6e4-4019-9f34-c03d28b777c4", "indicator--689fca09-0497-439b-b326-160a0a5d6176", "indicator--b151554a-066b-413a-805c-f035380b170d", "indicator--cb542f99-8931-4bff-a60e-9e9a2006064d", "indicator--87bb43e1-8f93-4775-af1d-7b10accc8d8c", "indicator--ed35f291-1771-40a0-af02-7a46d1def352", "indicator--95457b99-db4d-4ab9-a88e-8ef11a1ea222", "indicator--3d853830-b06e-46da-b77c-eb391bc505e6", "indicator--21d0fe77-f6ad-4941-9320-cc8d5a97f21c", "indicator--baeaa8a2-677b-4862-b1f8-b121e37842f2", "indicator--00eaff0a-91ea-419c-9abe-b8d5db5e0e17", "indicator--2cdc10ba-63ee-4803-998f-58c0085e6939", "indicator--75d0bbda-0057-4398-af8f-263d7adadde4", "indicator--d9e88f6d-4eae-404d-a3d0-f38812d15c85", "indicator--ae864f77-06d8-4c0f-a644-ca6690e6cbe2", "indicator--db1e9481-96fa-4ae1-8fd3-43d80b1dae9c", "indicator--be30f811-9a40-4d20-84ee-66ce6508fb02", "indicator--b06a16e9-14a0-4a1d-bb16-8098156d72e2", "indicator--14e51392-1a27-4492-b87d-468e3767ca77", "indicator--1f5982df-7e73-4121-93b3-07d74ca0ef9a", "indicator--c64b7193-d026-48a4-8c1e-6930fac1ecca", "indicator--8dcba799-cb16-4a2d-abd5-905878ea6b7f", "indicator--878f583f-6441-4d53-ba39-87ab6cf470fe", "indicator--19e58298-9601-404e-9b1d-8d7bd6e50c64", "indicator--1950bf37-5807-4674-ae74-118e0ef67880", "indicator--6b90fd04-e56c-40eb-8886-26d1736ba791", "indicator--daa453b9-541f-4aab-9b4c-8e2a67722be3", "indicator--de2530d7-75f6-4eaa-b08a-d3eef0b8a229", "indicator--4ad1ad26-adad-42ed-b2e1-d656136bc69e", "indicator--879950c9-c53d-4ae4-8552-4f5d28672818", "indicator--7b2e750c-4ae8-4b69-8d8d-bc6ee9cf2a2a", "indicator--1d98798f-2a7c-4fe4-b6bd-7b0006444fb5", "indicator--fa51dff6-3b07-4ce5-a2fb-47d68480bc26", "indicator--2acb6518-dd6a-46b9-bdf9-78cae6cb53d8", "indicator--49acf4ee-429a-482b-836b-7be0feced7c3", "indicator--a7ef513f-6b38-4364-895b-f04f9f03ac94", "indicator--fc7cd660-993b-4484-b3e4-db255c7ecb5a", "indicator--a6ad3e17-be56-410e-abc9-d741ce3e27c5", "indicator--770c2bbb-9a3e-4ac1-85a0-67f5d28e0f82", "indicator--4ae8d697-13f2-4a93-939e-655ba73e11f5", "indicator--abcb0fce-c2fb-4da0-8924-d6cc269c5381", "indicator--adef3714-c7dd-4cdf-ae19-0396b7a2f41d", "indicator--acd3879d-4e89-4524-a68e-99a8080f57c0", "indicator--4016f52f-c53c-457c-9d93-be1f8397a379", "indicator--c7c6cabb-ad64-4d69-9bc3-d87bc9fb9219", "indicator--c7eb2f3a-9a02-4932-8785-bd7ff2cd7444", "indicator--39dfc88d-cc38-4b68-b80d-77bbf089cd55", "indicator--3c47a7ee-7e41-4152-a2b0-334f2b04a342", "indicator--e92997e1-a22a-401d-a36c-4927556ac897", "indicator--8f70bb1f-2a97-4393-95a2-d55f481abc2f", "indicator--96439eb3-8c3a-4a06-b57e-903cefeafcac", "indicator--7790f03f-0b01-40fd-bc59-20fd947bcf1b", "indicator--77c62760-f5e6-4d73-bb87-1a9b5d1a1046", "indicator--f87a730a-c5d3-4de9-b86a-f2e941b02c83", "indicator--55a29be1-b4c6-4f4d-84ae-430630d8ed63", "indicator--d2afe4af-8854-436b-bed5-fe7b490c8a6f", "indicator--c76669a8-4298-4c22-a2cd-02e8a1be29d0", "indicator--4a5fb32e-1fd6-4cc0-bbc3-dfb43de2153d", "indicator--63527ef6-1f7c-4c13-a20f-8eda60c5b372", "indicator--8b5c07a1-4db9-4ad2-93c9-bedc525f3ddc", "indicator--11b3e6e5-439d-42f9-a9f8-add4dea84b30", "indicator--630b1082-d416-4146-aae9-adf99c4dd3d9", "indicator--1af9618d-f8e7-4c02-812d-2a65391f6f61", "indicator--4b150951-c4c2-486c-87dc-37ad016ccf07", "indicator--43b3255f-946c-421c-95c8-ed9abd4cd8de", "indicator--37d4e84a-1033-4751-b608-dad4c1e8d4c0", "indicator--c163afa0-5953-45f0-855e-8a76c35fd0b0", "indicator--04fd4c74-b6f5-4e09-a95e-956db3d3187e", "indicator--cd73b584-33f0-47a7-85b3-c9614178a60e", "indicator--def46aee-ceed-4ab0-aff1-068bf0d8d687", "indicator--9d35b239-41f7-4a51-a504-9683ff4e0f55", "indicator--a822ec7a-d11c-4af5-8f97-7f4deec77c32", "indicator--0dab5eea-6fe0-454e-b4a7-b1b55840323e", "indicator--1debe169-1f38-4e75-b9c6-bc058a278bb5", "indicator--ff458f80-3f6c-498c-9974-17de7d182445", "indicator--126fb433-d385-4e9e-8674-d56b9a97cf96", "indicator--030dea62-5e75-4cc0-85c7-0c298ba02630", "indicator--ae79fd82-2117-4583-8e1b-790feb0d2334", "indicator--772235b7-3cbf-465c-85b1-82ef2a71a70b", "indicator--1a65c6c3-90b5-4bf1-a561-ce5a74f613df", "indicator--ce158e45-6aa6-437e-9a0c-4a3c3c86f858", "indicator--c74245cd-e00d-4d05-a84c-b930d2023f4b", "indicator--ae0a625b-64bf-4f50-9636-135a065acd8d", "indicator--a1b83574-7a67-48af-b6de-5c7162122780", "indicator--882690d0-015a-4b81-a4b2-c2ca3abebb53", "indicator--71563545-0b00-46c2-86c8-8c28fcc5189c", "indicator--2971c35b-a5e7-4e0f-895d-1044e4372ad3", "indicator--34bca331-a114-4941-991c-9a2cb8702051", "indicator--670661d3-5486-4f13-a1e5-e999fefc47ab", "indicator--7ac9d1b5-dd4c-4b6e-899d-bf32360cc4d7", "indicator--bb22e53b-628a-41d0-be34-2339ea624144", "indicator--8c2426ab-2a9c-421e-8d86-35ffee5780a6", "indicator--71d18bb5-fee7-4cbe-87e6-33a1d8ed8331", "indicator--c29523fb-67d0-4449-b895-590073382a5f", "indicator--5db4fe88-a1a9-4bcc-bf57-6d328bf5d549", "indicator--44ae2b1e-1231-4179-9edf-08414c66ab49", "indicator--a98a4872-865a-42e1-8ce9-7da5f32132bc", "indicator--b4d1bdd7-ec99-45a8-bead-fbf14abe95af", "indicator--1eec90d3-b409-44a0-b113-3e9269c36c32", "indicator--5139d380-10e0-4770-b166-3108a5aab7b0", "indicator--6e2c0dd4-9720-40fc-8f19-e7a903d912bf", "indicator--012406af-5779-4444-8c68-0b0992bbb733", "indicator--c038b06c-fa34-4077-9b95-e6c100c18b00", "indicator--d853a5d0-374c-4b2a-bd7d-457086b48c6b", "indicator--c45fa41d-d133-4194-9d64-6a37905417e0", "indicator--26c22483-a027-489d-adfe-b87a0207d34e", "indicator--d7d6ef3a-6c99-4cc0-b07f-9a1e4b6b60bc", "indicator--24e9a51a-be00-4ba4-9631-f87b964a1cc4", "indicator--867662b8-f28d-4b8b-9eb2-c682c3f9235b", "indicator--857b2108-2415-47b9-9c25-c3843de0a649", "indicator--940a6cb0-d577-4c81-a5c0-28a126679a50", "indicator--8e24f39d-2aaa-4d37-a890-fb685fe07e84", "indicator--691258f9-fb2c-417f-bca0-7a51f4212225", "indicator--6133da0d-3729-4c9c-a98a-1ee9530fe7f7", "indicator--c9bdcafc-df2c-470c-8d65-c108ff99c443", "indicator--dc9fae45-2e31-465f-8f14-5e5ae79a1866", "indicator--0646725b-5b24-482b-93e9-78352fd73fb0", "indicator--19c0a46e-bd33-4fd8-9cab-c3e0a6523f14", "indicator--a95d9f29-76d7-4957-b0b3-8cb409300c50", "indicator--a630e3f2-9b99-4d0e-8b5c-11a341402f0e", "indicator--cd0be92f-a30d-455b-bdb3-c9d1deda84f1", "indicator--35d867ea-8f8b-45cc-9be8-238d09cf659b", "indicator--520a0ed3-8f33-435e-b136-e06946f5f032", "indicator--34c1a9d5-d3d8-4343-9769-6ef346070807", "indicator--f0ebe7b0-6e36-4643-8a0a-ea7d8178f1dc", "indicator--a3cea3f1-bfa5-4046-83f3-c1b222de12c9", "indicator--4dd00d17-e3a0-488c-9c6a-be2d2c7e8125", "indicator--1a6d96aa-ce58-4bfc-8154-24de25e2c82a", "indicator--e78548e7-4688-43a1-a39f-a1df2fccb54e", "indicator--3e0eb55a-3f50-4d0c-96fa-31c008ae41ea", "indicator--1f7f149f-3d73-4f25-8955-c7690669f8c9", "indicator--c5e0a102-2918-499d-ad12-6bfeae836c54", "indicator--4e2e0076-4649-41da-ae50-c39ea403ab55", "indicator--0fd42024-539e-410f-982d-f9642a7ad0c1", "indicator--0ee3a8ed-7a45-4634-85ab-ff14b9fe1897", "indicator--5dfb9a55-45d7-4c42-8925-5d23934f34f0", "indicator--1302dbdf-ec86-4a21-86d6-556cd307ff88", "indicator--e93c617b-6dfb-4138-8a82-d1c29265cfaa", "indicator--1d79d22f-f97b-4359-b0d2-2738a2a9b7dc", "indicator--a9403e2e-7012-4156-8420-0614b3d51df9", "indicator--39e01fa5-008d-4afb-b4a4-b88f76ba4eb3", "indicator--18d7a4e9-5478-4436-a22d-6adcdbd46cbf", "indicator--bea90e79-4216-4b45-862c-9dab898912ea", "indicator--37df5f68-e6c9-4668-bf45-11eff38bcfeb", "indicator--c6ca3342-5687-435e-af4f-cbec3f839926", "indicator--15c9d657-e627-4769-910e-eadce37682af", "indicator--4f5f1684-7c00-47c2-9ce6-af54a6a9343d", "indicator--25dab792-8957-484e-b268-2fa38f923fa0", "indicator--ff1c5c11-8a47-4a9b-b687-365b3c740462", "indicator--e941aaeb-4688-4440-9fdb-eeb44e9b3b09", "indicator--4166377f-3899-4f40-a606-2e3750e15607", "indicator--6914891e-9448-4a8d-a9b8-1b09ffedce09", "indicator--5c8cedf8-9113-4858-8f31-726a00803e36", "indicator--70e534f9-56fb-404b-ac84-e2afcf3321df", "indicator--2176867c-e109-49a9-8041-87dcc9eb5751", "indicator--f0c81864-5a5f-4b46-a2ea-dabb4b043509", "indicator--253e55d3-9ef9-493d-b06d-08691d0e6f80", "indicator--c50fe01a-0a9f-4894-932d-f33a70413e1a", "indicator--6d7d7ce9-6738-44a5-8cce-bb0a7a4c6b46", "indicator--7354c32d-1614-4513-8761-be0d02c2890d", "indicator--d02ce4d8-8a4a-4273-9214-6b0af7d34b35", "indicator--60123486-2256-4d1c-9ec3-dfdca79829ac", "indicator--8b6af68e-5220-4e4c-a0a0-e9c8cfc54510", "indicator--f5c9e00d-5a3b-4d3b-8693-19b0b59e5894", "indicator--b96b751c-e50c-4b98-95c8-18c8d7ddb029", "indicator--c0d3e9ec-33b6-419d-8eb5-6a08489a9d20", "indicator--1e2bef47-f3f8-4b48-a63c-88e69fa77840", "indicator--436a5641-a72b-4056-a585-0849cc4a257c", "indicator--dbaff8ad-41ab-4cd1-8c77-fd2d60a0ad29", "indicator--6c67fb53-0780-40cb-b4ac-13cc390e48af", "indicator--921fb099-599e-46cf-89c8-8893dc5d684e", "indicator--07740b96-04b9-428a-8292-bbaefb0cdd5d", "indicator--7532e08d-3aaa-4875-8f4a-71334a51a09d", "indicator--e3bc9e8f-6610-47b6-9f0e-99b6d6d4caa2", "indicator--fedb58f8-08ce-4b81-b7d4-bcf110b31086", "indicator--9f8219a1-ca31-49fe-a4ae-2fb9256b5f3e", "indicator--fabc7fef-23d3-4848-a45c-6f8b277264c3", "indicator--15d479fe-bc86-42dc-a87a-db78a9fc57be", "indicator--936c8066-9914-4002-9b14-b05c36e367c9", "indicator--b846ac09-4841-4543-beb4-c17aa4b77987", "indicator--90e89772-4ca8-4238-a897-274db42ca80f", "indicator--3907632d-dcb6-478d-952c-562fbd5a3b3d", "indicator--c820cadd-e3ef-4a11-8a0d-26849d5952b1", "indicator--e939e8bf-7782-41f9-9901-deb8311ccd09", "indicator--add463b6-686a-4bd0-b009-8d7a48d08ae4", "indicator--667fcf57-a1f8-4e06-b140-c28f712a5eea", "indicator--80918dfb-0d17-44da-b2ad-b1b2991a872c", "indicator--c1f3bc95-97d5-42bd-8f5f-34b4e94672d7", "indicator--5908621a-aebe-40e3-bdd8-b9abd079072d", "indicator--cf6daeb9-6854-405e-bb5d-8e3cab307b55", "indicator--5b24a7c9-eb07-48c9-b835-77c9b58b865c", "indicator--c6549813-bdc3-4299-b7a5-70b66238ddac", "indicator--08a9e358-9026-4a4e-80b0-48165b28f042", "indicator--f8136734-ac99-41de-bb02-cfed63d0b644", "indicator--dd3ff529-e343-480f-9cd9-c66ab5557326", "indicator--896d1164-5a8e-4817-8691-b2e218fbbb4a", "indicator--652d47c9-d10a-402c-a4dc-ffb5e568e431", "indicator--b19aa64e-75d2-498a-8b9c-cd3098119336", "indicator--fcc50ee0-9e49-442a-bec1-1255f35113c4", "indicator--3304e42a-90e8-459d-bfc1-107cf6488d5f", "indicator--84d14a56-8508-4c54-867d-825c4c27c7dd", "indicator--fb7e5458-dc9a-408d-ac8b-04b83653dc24", "indicator--16ec9db7-6e51-475a-adb0-afc52bf6ec0e", "indicator--fe2eb3a8-3e1b-4c45-8018-5d47326ac8ba", "indicator--b8453142-157e-4ee0-ae28-2562a760dbeb", "indicator--e1ba637a-023e-4a0b-b8bd-2ef67689a50b", "indicator--02dc281e-b5f4-44db-bd18-9e88a712cade", "indicator--522ec542-1301-42e5-8bcc-5c8445b75b71", "indicator--52456923-77f5-4134-af19-f8848c4e13da", "indicator--6076618e-0390-4bb5-a707-7cc277fb99f3", "indicator--7373d570-4628-4cb3-9de4-5be9802ebebe", "indicator--40d8a1a4-920e-4429-aedf-56460961d25a", "indicator--8acb0954-8821-45f7-a8dd-a6efc395079b", "indicator--644647fc-57be-4e3f-81ac-5200b8d3b823", "indicator--ccfedc1c-3ba0-4c28-a4f6-dca4a0a2b95d", "indicator--40d4720d-e963-4322-8dba-751306f106c8", "indicator--06c5b8ef-316f-429f-9e5a-7f9bc08e41a6", "indicator--5d04e8cc-f480-42a5-821b-8de095dc797a", "indicator--7624b2f7-a0d4-4420-8fb4-fd7d4b0dc082", "indicator--bdc982ba-c659-48c9-a953-20ef8e2574c1", "indicator--2b4447e4-472f-40da-ba4e-8e4927dbf45d", "indicator--8680dbb5-adb2-4957-9866-b2a6c83a722a", "indicator--01633188-d734-4ee3-9125-2cc6c1cfcf97", "indicator--c81844d5-bfd9-43b8-80cf-fafa4b999357", "indicator--7144211a-e043-4a12-8a85-9eb3eee6a83e", "indicator--bf4da778-a365-48d4-8ef9-399e43f18290", "indicator--dcaf5aa9-5fb2-481f-baa1-26a0d53d0711", "indicator--735049bf-8b81-4eb3-91d1-3f8e884efd87", "indicator--519ea0e5-0fdc-42da-8be9-df53860af0aa", "indicator--4adbbf6c-5c70-4943-aae3-30cc8df5b4b8", "indicator--3cb827d2-3d8d-4805-9f04-c0465bc9fd2c", "indicator--4bdea704-825d-4631-83f4-78d7e2481328", "indicator--5e88b9c3-510f-42fc-a30d-a993bac71992", "indicator--41f40922-dee8-4f9b-a4f4-7715ff2f6148", "indicator--63a263ae-8d8b-4d81-b912-01890540952d", "indicator--67ad8c0c-6b44-4440-8ee1-3cb97bc56b4c", "indicator--e0c7bf41-52c8-4ada-bd09-bdce344c212c", "indicator--d7bea200-94cd-41bc-980c-6737411edb5e", "indicator--6bd65e62-80ad-4877-ad25-271d30bf9541", "indicator--878855ae-69f5-49c7-b991-b4cb009a2ac6", "indicator--372ea18c-ea46-41c8-af4b-7fda28ab1ef7", "indicator--8995e800-a340-4bd5-9040-c40cb70c5b03", "indicator--55192231-63e9-476a-9a76-219f2cf582a1", "indicator--afecf7c9-5f29-4df0-97bf-3f0d1107081f", "indicator--eb42b28c-e0cb-4759-b70b-d32f61c2caef", "indicator--af980053-16a8-47d3-b1c2-bb1dc3eb7ff0", "indicator--9c4d4e3b-d6d4-4c1b-98bb-562fee50c7ea", "indicator--1c3d0de3-7f95-4270-8310-fc8d5ce187fb", "indicator--8ca14360-4b24-4fef-b13e-616413c2ceff", "indicator--3767b862-ac95-4a3d-8a30-9ea4433e983f", "indicator--696f65ff-eeff-4d31-a7fc-c4d1eb5f1081", "indicator--613296c1-7ec3-483b-bca7-d345ae23be21", "indicator--bf9bcee5-f509-49f6-8986-bcdce924c418", "indicator--ecf6921f-aa14-48a9-aa30-3919a6f4baa0", "indicator--1d0d4ca2-a452-4b17-a2f4-000e3ac3052e", "indicator--e9036c1b-6c39-4e4f-9611-dbd61f0a38aa", "indicator--a810f882-463b-4617-9d60-425cec8b2055", "indicator--c9aebab5-47b1-482f-944f-b9f89899399f", "indicator--ebd3bbac-fba6-4a65-beb9-c87365cc0be7", "indicator--66d6a5b2-ffde-4d2a-ab46-3f23049395e5", "indicator--a6794a33-5a66-4988-9edb-59b55cf3aab5", "indicator--d4924f3f-2905-472a-85ab-45ef4f34ee66", "indicator--9696f5c5-e858-4255-b197-b3b6078f8d51", "indicator--98883233-b981-4e58-8dff-2e59b137355e", "indicator--c1447133-1f99-49c9-833c-a22bae0459a8", "indicator--f265d876-79eb-454f-ac49-06981ed15ed2", "indicator--184927f7-6c8d-4da4-a610-80f4425502ce", "indicator--654650da-8149-4490-820d-48de19c85893", "indicator--7c1c2a2a-f65b-432e-859e-5d69bfbcbfff", "indicator--e4ec156e-a365-4546-bf85-fe828c074532", "indicator--1652f185-2549-4140-91f1-6f27b430578e", "indicator--3459ec9f-f3a0-4243-924c-710fd9ff55a8", "indicator--e6b43a31-95ba-47da-9cf4-f74c21016621", "indicator--b7222ce8-8837-4779-b687-6de8c390de15", "indicator--2fd894a8-a124-4740-ae25-8fb110e8db69", "indicator--7f31abea-0e50-4a6e-b336-43bb4505af8c", "indicator--1b295399-b293-4c24-8efb-72488e7f4f32", "indicator--2616cc1c-9dce-4581-8b8f-0b2817bb0efc", "indicator--b4c556e5-a9ac-4174-8c74-441e8e91ef55", "indicator--a8e320eb-6e26-4ee7-9f0d-7f3c8e58ada0", "indicator--bce58487-2ed4-4930-97f6-4781ba51079c", "indicator--92c262a8-ebd0-4717-9b94-a44740fb6579", "indicator--fc0c17ff-c32d-4487-917a-210fee41c274", "indicator--221201ff-d991-42df-8e76-9b08dd9af47e", "indicator--d03485e5-8782-4043-990e-0f574648244b", "indicator--c72f1e36-7919-4b8c-a7d5-dff16687595e", "indicator--34f6cdca-3177-4185-9908-bdcee1bdc0ec", "indicator--440ccf9f-573a-4bd3-b5bd-8962caeccd31", "indicator--95f84e0c-9fed-4a66-b2ac-fa405740af98", "indicator--adbf5a13-ce6e-40fe-b13f-71d6469b01d3", "indicator--d73318b9-95e2-40f5-83f5-c1cb134586f9", "indicator--591d0adf-c807-4186-a614-b76b42736427", "indicator--7295fc1a-a964-4e03-b731-d97d4af60411", "indicator--d5b42d72-983d-46b6-b7a8-ebea4b65f9b1", "indicator--cca2b56e-3dce-4208-b390-635517fa36ca", "indicator--b3fe1c20-6dd5-4dc7-8095-f499129e8e5a", "indicator--d4883671-c565-491e-8212-b21a97a08885", "indicator--07198b9c-6266-41c4-bbd7-fd8ea926a9a7", "indicator--13ea8146-6e80-48da-9c15-b8d0f8a6da03", "indicator--bdf3889b-220e-46f8-8abc-480126a4bc45", "indicator--d8023050-cb4e-4dde-a305-2097b591c937", "indicator--5ba4f460-7d1a-4bc5-99c0-20162e3fa448", "indicator--651775f4-1718-40b6-afaf-1122b1d53247", "indicator--3eee53c0-044a-410d-8a25-cfa3ec9d50ba", "indicator--b67a3784-8b5c-405f-b18a-26c7a2f9118b", "indicator--79ef9bb2-c7ea-41af-a1bb-e856a4014613", "indicator--f375c930-fccd-4641-9e16-754131be2089", "indicator--53fc6020-3fc9-45b9-9281-7f6c9407a4d9", "indicator--9d3416eb-45c9-4de5-91da-33a88fd89171", "indicator--cdf7248e-16da-472e-8841-d9e51844cfb0", "indicator--0ccaffab-b229-4138-a10c-69e00838725d", "indicator--c348dc56-19e3-4f9c-8144-21392a78c3d4", "indicator--7ab5e437-4bda-47b1-bea3-f096976b5212", "indicator--1a40d656-2c18-49fd-9aca-2b99dd3eeeaa", "indicator--26825e2b-6d49-4e44-83a8-7cd83b8b07af", "indicator--9f7b66d3-3037-4ed1-9ee7-fb82ba1545c4", "indicator--80a73979-bd72-4f3a-a606-28e3d696805e", "indicator--fce003bb-4faf-4503-ac41-8c9d92bdf098", "indicator--86e04307-e9f8-4468-8db6-b525b6bb1706", "indicator--75f66245-696d-4420-9e4a-4d19b9d027ed", "indicator--43bc5f3a-7d03-42be-a45e-80cf28d2ee23", "indicator--7c389b5d-8b1e-4b1a-a791-bdf449b4a648", "indicator--8461e11d-a68b-4283-9812-dcb0c0eace7e", "indicator--4f0384df-f11e-46af-85a6-f88903b68669", "indicator--8ea4ee5b-730b-413f-8b6a-5a3643d11241", "indicator--b0f3f568-a43e-4ec2-858b-52eff3ec441f", "indicator--32c55a40-5622-4db9-bfcd-a6c17e895e7a", "indicator--a9522135-c956-45fd-bcfc-8a784679de9e", "indicator--4e5b2047-b017-42c1-902b-46ff6edef256", "indicator--bf8ea6bb-91d9-4a91-be5b-9c5e41d25c95", "indicator--85763c6d-f785-4945-bc9e-cb88149464d5", "indicator--d8b8c37e-5ca2-4add-bad5-81eae287ba5b", "indicator--72acaeb7-c0ea-4051-8cb6-da8b13cbd690", "indicator--87fd41b7-f2a6-4975-922f-13a3bd4807e2", "indicator--3a36c7a6-e9f5-439c-8c36-5c735381b647", "indicator--80570f00-ec97-4de2-b387-6020f078192f", "indicator--97a39c2f-aedd-43ad-ba06-673ea02bf349", "indicator--53071d41-a4ba-4449-a413-da629940ff19", "indicator--65159364-16b0-4e2f-8922-1ffadacc0e2b", "indicator--e3c6aa91-c519-496f-9f73-1e8d51da1024", "indicator--40844112-0493-42fa-b385-8e56f4581e60", "indicator--f8bb802b-875f-4be7-b05b-b5cf517d7b64", "indicator--6331fe87-44d9-45f4-a754-79a45d617930", "indicator--4e776d66-2e4c-4bce-8579-f2d4423c2915", "indicator--b4e9be3f-98fb-4a39-89fa-6a6b77f07b6b", "indicator--76c51edd-9033-4201-87ed-ff9b76de2650", "indicator--4ebead46-c175-40ba-a0ed-5b23202b63b2", "indicator--e145fbaa-71a2-4930-a63f-128d71612622", "indicator--10db8f21-d3ad-4f20-8aa1-a82ca6d50174", "indicator--53d70b0b-2132-4de0-8da7-7ef53da18f0c", "indicator--88db61a8-6e0b-44e3-b730-ff03bd8cdd7b", "indicator--8ddebe0f-de21-465e-ac98-f8a595a27f82", "indicator--1dc338fa-df55-4463-9d7b-adeaa4b46ee5", "indicator--52df4f66-c815-4754-be39-8a93fdb562d9", "indicator--5d57f58b-8bb9-4281-be61-cc66c195fe48", "indicator--f8bb264c-57a9-4e3a-974c-f51050ef2973", "indicator--c8cd1228-d2f4-4ef2-86f6-1446b2be3472", "indicator--897198d1-48c1-463d-a219-396cb4ec1f05", "indicator--f64e7753-8458-4b67-8ce1-eef733cdc21e", "indicator--9cfc4e09-2c77-4730-bde1-0ca8283a350d", "indicator--54b2efcf-60e2-4bb3-82a8-be0256476013", "indicator--a95c8a77-cd27-47d4-b498-f562e0dd3866", "indicator--1387e3bb-2fbe-4756-bd65-a48f389c8f9c", "indicator--0eef6a2f-4dce-438b-adfe-5cb214cab334", "indicator--fcd82768-bb7d-437b-bb15-a346a271c733", "indicator--f7dd6e0b-8113-409b-97a5-9952bf9538e5", "indicator--7feee615-9f05-443a-a92d-0f0f78efbc95", "indicator--67802416-ede5-4845-a542-05e333ad857e", "indicator--5feb0cf0-2560-405b-8f8d-560dbb74e5f0", "indicator--ecf862e5-c9b0-4320-986e-bdfca7321ec5", "indicator--92f031d1-9b42-49e5-9e1e-1e67f8540f07", "indicator--bea327c5-36e9-47f3-873a-273dfb0f1de9", "indicator--13ae0cc5-d02c-431b-9db4-5e79a605a035", "indicator--3e627050-20ab-46ab-ac29-0bb798eae157", "indicator--91ee7f1b-0fef-434a-bbab-8ea18b9f31cb", "indicator--85108768-6301-4269-8252-5084d91709d1", "indicator--2673f343-3b7c-4c28-af92-de9a6bb47352", "indicator--ad9c5bbd-1175-408b-aec6-776a48b9ce95", "indicator--9397a716-80b2-4546-98a7-e82f971ba1e6", "indicator--ad0e48ee-bbc0-4ac3-a1a7-597948db96c5", "indicator--e52ff216-b86b-472a-a975-48d2b2af1796", "indicator--46840ad0-8067-419c-a408-7a4c4118e80b", "indicator--1b6200e7-b9f9-466e-a6ee-f10d81b2f0d6", "indicator--dcbcae21-60b1-4c38-a04b-e843aced8b77", "indicator--0ab1c8e4-5138-4a13-8e4e-6942539ed0c9", "indicator--c37e649e-5dd9-4964-8571-f58202b4a3f6", "indicator--2bcad2c2-ba60-4288-a11a-810de6ef1189", "indicator--bdeeec96-0821-4755-babf-507669549463", "indicator--1eaf5511-7ef9-4f85-9e74-8fab2462875f", "indicator--012db054-7415-4f5b-ba1d-ee911b4e748a", "indicator--fa6e6ca6-10be-4448-86cb-b239cb0b4854", "indicator--ddff1693-33b0-4f45-a76d-3a973c66e87b", "indicator--2b77c1e7-91f6-48c9-8444-82e10b4e50b7", "indicator--5cd936c6-fe22-45f1-a546-d608bced0e8a", "indicator--2443ce05-f28e-41ac-87b0-4d898ee99fa8", "indicator--c990d3b6-a8fd-454c-9d67-9e09e1d4807a", "indicator--62d39e3a-88fb-4cfc-83f8-46b05e230db8", "indicator--9a9fa1df-4c15-45c6-80e1-e1aec301ac55", "indicator--7511500e-c954-4f88-8dfa-a805ef59e0c9", "indicator--680a64db-e666-4bae-94c5-a3343abbeebd", "indicator--d4f386ef-b650-4465-b55c-ff1cb6f42558", "indicator--b5fc74f7-3ab7-4f4c-b190-c25b4b6ee9b3", "indicator--99d20303-c27f-4532-949f-e02719d26500", "indicator--22fabca0-bcbe-4675-94b8-8e9a063999a4", "indicator--78462464-faa2-4015-bcdd-0e1c1fa92a57", "indicator--c1123cd8-b01e-4138-b8c3-a8aa76050900", "indicator--caebc2f0-556c-4be4-a956-4d16d2585017", "indicator--540059c2-7e97-4664-bc3f-42825c1f01ef", "indicator--5f0c432f-b303-44f3-bff3-3a25bb136f83", "indicator--b3102c0e-94e4-4927-b597-63e4f3857f58", "indicator--c96743d7-90fc-4611-a90d-12111b4f4e29", "indicator--0433782c-fedf-4120-b316-3f349afbf9c8", "indicator--04768288-8965-4bb6-bd2a-fe2462bcecf6", "indicator--80edc2e3-2c52-42ac-b580-7f05a72d4e0e", "indicator--c14dc0da-92f8-4123-8b5d-f207ab4836b2", "indicator--72704275-f9bd-4f28-9d68-a9137232ecda", "indicator--daa324c2-5bd7-4e58-b1bf-afd3416f9736", "indicator--b9879258-4184-486c-bc07-b668629407ef", "indicator--b83165e7-c959-4392-8b01-de9c6289d9d2", "indicator--9f522361-9a03-4f5d-8bea-d71354f8ace3", "indicator--b856d9f3-6bf6-4aef-b778-1d98b650b049", "indicator--20ffa8f2-3219-4042-8b99-3e49e916f360", "indicator--46ef7063-9873-4c50-9ffa-1c0c8446ab42", "indicator--a2c5db46-0d84-40d7-a48c-b316db9088b8", "indicator--c12c9857-c6c4-4d20-a614-a23b3fbcd7b1", "indicator--f0c90131-edb3-4e58-8b3c-c58b869b35e2", "indicator--b02833e7-586d-417e-b75b-8849b9a384c8", "indicator--1889f461-4959-40f0-b245-68d75b4053e4", "indicator--b5ae0e9b-ea06-4600-a83a-15a55dfbec3f", "indicator--54815fa3-443f-4c24-b67a-f9139dd20267", "indicator--30a9d5db-64c0-4d3d-babf-37e58dad2cd7", "indicator--8d046980-27c1-49a4-afb3-0f1b03e2e8b9", "indicator--80b00c27-7eb0-4d32-a7e9-b8bccc465c95", "indicator--f93c96e7-1f04-4907-85b5-5c2eae930f56", "indicator--7a0153cc-b5b4-4ec9-a634-b62359dbddac", "indicator--562bc654-6808-4751-91e2-6b394d93de22", "indicator--a3a52d1d-b5e4-419b-a6eb-25a933239d7d", "indicator--82ed2bd6-310a-4a6d-838b-d829c857144f", "indicator--dda43789-fd85-4319-ac30-940ef1fefd17", "indicator--5623213c-56f8-4d37-b4ca-882ab5858c92", "indicator--07357922-3748-4d91-a1d3-6db539764f22", "indicator--b0d99bb2-ecbc-4d9d-9269-c3bbd924d8e3", "indicator--c5f99e62-8e6f-4943-8994-1445348ead53", "indicator--8351df7d-c43f-49bd-a4e6-ed7a2ab9bf4f", "indicator--1c4b05c6-a660-4b91-a829-22f3f6889db3", "indicator--43cfb28c-5038-4f42-85e6-8ecec2a7fc2e", "indicator--a67b6a35-ba80-4b7f-bd21-678b0d6472ef", "indicator--adfdbb1a-91fd-4651-aa54-548e551c2036", "indicator--db2f0c07-6b59-48b2-8ea3-62d86582f05f", "indicator--045eb694-b72a-4724-8f3c-48aa96fd583d", "indicator--0a05dc1a-0269-4a95-8637-a7ecce60543d", "indicator--313718f9-703f-4687-8b65-0ca197f1e6d3", "indicator--9e721513-97c3-4d95-85a6-b1c833cf282d", "indicator--84d50fb5-1f49-41c2-a333-ad9ef232eb5c", "indicator--03a244fb-a21e-42b0-b1db-0f04851f1a5a", "indicator--b7801db3-62b5-4756-a0f7-5daaf579b29f", "indicator--f1a60da1-6a60-442a-a90d-57ec1eae6b12", "indicator--7b1688cd-181e-42da-8208-f4568db1cb75", "indicator--714c200f-b295-4be8-81dc-8f8e4660ce63", "indicator--6efdba80-94a5-4785-88cc-fb9ca7a54ca0", "indicator--8621b780-ce1b-436c-b906-367547639286", "indicator--259a5bd5-373b-485c-9a7a-40e72dcd09a9", "indicator--9b4c5c31-a56c-481f-8c37-27b4a2b33166", "indicator--8e589779-089b-4d9c-a771-f0114b2e8f45", "indicator--86593112-35b1-4752-a8d6-24cb908142ce", "indicator--f2ee4e8d-504e-42fb-9a96-e2d68ce952a9", "indicator--629d4384-9862-4814-bedd-16b9abfd8778", "indicator--2c63a5da-f938-49ee-b36c-471feb5ee04a", "indicator--67a8b4c8-a54f-4df3-877d-4b3dcfdafd46", "indicator--2740dd63-ffb7-4d8e-9c46-92579c207056", "indicator--9af7b959-3ac8-4c79-8850-f104409bc2fe", "indicator--963009ee-a39e-44fe-9f6e-cdce1ac1537e", "indicator--23b0b385-b989-45c7-a37e-3a7887ddf2f7", "indicator--dfefcf82-2499-4df6-91e2-5ab5a3a65602", "indicator--f1847895-7368-4a05-b14e-8054fbf486ad", "indicator--3c51000f-403e-4dab-b3a5-556927cf40a8", "indicator--fadf265d-e154-493e-8077-d9d431f44933", "indicator--f806c7b6-1353-46ca-9fef-a6e0ba6c7730", "indicator--ff42ae32-0e29-406f-bfd3-7b8f4711d577", "indicator--89f3db1b-e9a0-420f-89d9-b355be022c1d", "indicator--8bb0d958-9dff-479f-b755-2a5c465bf33c", "indicator--97c7d4e3-9565-485a-8557-b81a586eb5bf", "indicator--6a515f7c-386e-4971-bfc5-eae1bbfde9bf", "indicator--30910ad6-916f-4cb9-b92e-c6c8ca78ce42", "indicator--7ee0ccad-ffcb-458b-b82e-c24c1cdbb6e0", "indicator--30a5dff9-9b2c-4cd5-99ee-e43cda8f11e4", "indicator--4f4d94d8-3c40-4e7c-98aa-8e71fc80a811", "indicator--00198e92-0300-4e20-9c98-178a47a891f9", "indicator--9ee21aa7-d21f-4fb5-824a-adc9e3efc24f", "indicator--4adca465-5d15-488e-b2cb-9b36191035ba", "indicator--11f04eec-5603-4a12-98ea-ddc6d4dc77c1", "indicator--eb629168-db3a-4f77-b20e-a3a13dc3ad39", "indicator--e93fdf88-a3e4-4f4e-b9fd-e8cdee410a64", "indicator--dbddc23b-e816-4cfc-9b1a-e237648706f9", "indicator--8d231c9f-85c6-4ef8-8d20-50b2bff5b29d", "indicator--eee0b752-ebfe-4695-b35f-2da047bab03b", "indicator--d893a165-81c0-4de2-b2ed-d9619bf2eb9b", "indicator--075779e4-b582-4209-ae7a-ded3fdcd805b", "indicator--0a27ecc1-771e-45ae-93ec-a9b148d2799b", "indicator--18016298-ef8a-49bd-9bc8-4deb55fa1635", "indicator--0e569d20-4097-47a4-a111-bc9089a1e4db", "indicator--26750928-a278-44fc-9902-9cec75cd1995", "indicator--0e99465d-0de8-480c-86c9-910cae86f6c4", "indicator--743bf8ca-b357-45f0-b3be-977ef6a7439a", "indicator--4c60ecf1-2a62-4a36-803b-3f1b4417cb76", "indicator--6a52fb8d-3d2d-4e6d-a405-4df84067ff68", "indicator--9ba30e38-caa5-46ad-aa2c-17b8e7044127", "indicator--15608f3d-34c1-48fb-9503-e498704872fd", "indicator--75c62bd0-afe4-4b76-98ef-4631eb98df08", "indicator--80127e44-4023-45f5-be8a-734db55921b4", "indicator--63f945f6-97f8-4ee0-aac7-d53000f004a9", "indicator--f77286e7-9648-4ca8-9b34-081ff17c9a48", "indicator--aa10a838-03bc-449c-a2c0-d9a245d21ca1", "indicator--2bd73be6-9b4d-4d33-86a6-20a22fb3f8fd", "indicator--c0c41695-1cf4-4562-b2a5-fa5dc417ead6", "indicator--e715d8c7-f969-4863-a37a-c6b2adc01bb8", "indicator--a0c58a1d-434e-4b36-9b24-6777d828b804", "indicator--dd03e0ea-6463-4e14-b9b5-0ea30e384cf0", "indicator--0e97ba69-ef85-4d01-92e9-b1f1a57b6d7d", "indicator--aaf68e01-4625-43b9-b3e0-9257a32db6be", "indicator--2d7c2b3f-d37e-4f63-a936-9cb9625dc004", "indicator--1acd5b41-574a-4b8d-b03b-edf09e1f761d", "indicator--7d752b0f-7bf2-4910-8bcb-fe7502a2c957", "indicator--a601729d-ee2b-4b1b-a2d5-214c317f824c", "indicator--350fba03-b577-4822-9ff7-5ff399cc7ddb", "indicator--68a6020c-2d22-4d9c-bdd7-5df0c883bbdf", "indicator--a608695b-87ec-40a2-8b05-5b0a43777116", "indicator--82607863-dcca-4d60-a58e-4159d6abfe65", "indicator--a4c07055-f569-4d46-b6e4-74560b57132f", "indicator--b73632cf-fe18-4762-bcb5-44942f1ba8a2", "indicator--63d392b0-d5de-47bc-9664-c2e10f69e308", "indicator--56502ffe-b050-4524-981b-e261863ed479", "indicator--c4a766e8-abfe-4dda-80be-51ccb8656d30", "indicator--73a5de82-1833-4c37-a2ae-541fde0ff1a0", "indicator--b8ba4fd9-7664-4adc-a910-5cc72e5898c7", "indicator--138e1e2c-0dcc-4103-9022-5859e60aeba1", "indicator--dda00209-16b9-4519-8d74-9f2fef62feec", "indicator--8c2b770b-9317-495e-922a-963dabbc75c4", "indicator--80f086dc-56f8-4fc3-b6a7-b4833f2e0e93", "indicator--b790e36b-6352-4f85-9fb0-cd2cc11e2a84", "indicator--7a931248-0c0e-482c-897c-cf121954a7a7", "indicator--590f0937-8df2-4645-b880-9bc0e4abf4a7", "indicator--481c8b22-6add-41f8-88d7-2ae88515b6ae", "indicator--0bd032cd-4e8c-4fbf-87bd-33331ae7a8e0", "indicator--243161b5-ab0f-4ef9-a9a2-9404d9cbbe02", "indicator--323be17c-ce9d-4fbb-994b-f4386c9d3e92", "indicator--1ee8488d-6034-42b0-8e33-67f63e7bcff7", "indicator--3e7fca8f-c40f-49c2-a985-a0412158c498", "indicator--7f84a7fd-ce6f-4eec-a55e-3b4423bdeca1", "indicator--0554c4fb-5c24-4cc4-bbae-bfeda2e3461a", "indicator--f1c8e827-c050-421a-b68a-e278061b4e6b", "indicator--19bbfebd-d668-495c-a8de-c72e4d51d895", "indicator--1e1f28af-88d7-401c-8eec-3268c4d987ab", "indicator--79d67bd0-5313-4764-9037-176be660dc75", "indicator--838f4a3e-82f1-4e18-abc0-ea7b44fc4a7a", "indicator--6017ca8c-0a58-40b6-80dc-ece9cf9e6351", "indicator--c70cc17f-4109-4342-bfd1-f98f9374760b", "indicator--fc8a0e9b-3146-466d-9a51-f1f07f49b6de", "indicator--d93aa7b9-de0e-439f-8b20-d455e84488aa", "indicator--0f27dcba-f018-4b97-b725-bd33a68d24fd", "indicator--5a7172a3-3fdc-435f-85b9-d51a38c5adb0", "indicator--3b70df7e-f34f-4a4e-a892-63479881ce61", "indicator--15795748-d5c7-4bb2-804d-d303acd0009a", "indicator--4169dc9a-bd0c-40df-b510-cedaff953128", "indicator--f2153bc0-5be0-4062-a751-c0f25e95a12d", "indicator--5028bb06-36c0-4065-8956-f6029f1c5eae", "indicator--3b444efd-20dd-48db-acea-417248db830d", "indicator--6b4e2487-a448-4a7d-a782-3d3fb6076599", "indicator--ad036470-eee4-413e-9a8e-7f05ef0d7b30", "indicator--a27f949a-5777-4c37-8be6-658b9a68cfca", "indicator--3789d72a-fdac-4b0f-becd-034a7fcda9d2", "indicator--629d9e04-bca2-478b-9151-256758c22e06", "indicator--6310013d-d5f6-45d7-9a6d-22d3b68385ed", "indicator--7be0bbef-0d94-4e84-a8bb-db88e5a53268", "indicator--661fbd44-fd64-4ca5-a837-12a7c6441f04", "indicator--902d25b9-adb0-4e3f-b864-b3633058608e", "indicator--360c885d-aaba-4289-abef-4f1955a4e30e", "indicator--8bc51103-4a13-484e-aa1f-60eddebfe018", "indicator--252a33b7-0acf-46a2-bbe0-1e7ecca7c92b", "indicator--3261e65d-f44d-4fa6-b0a6-b9daf4edb612", "indicator--ab9c17f2-b05d-446b-9860-3a0882502e1c", "indicator--832c0e61-b6e8-4428-8b04-cfbb5dbef648", "indicator--063a1a66-13d3-49e2-9b22-dacf2aa9cda2", "indicator--f2223d86-f8c9-4aa3-95be-2c9dc7b55e10", "indicator--987c89e0-9e1e-460b-8564-2d7016408fac", "indicator--ab240da6-5505-4577-8fa6-ce74f914da42", "indicator--baab9d86-79fa-4c14-b56c-f84aa534d748", "indicator--19bcb859-2f8c-470c-b7a0-316b92839f30", "indicator--9d60f227-07a4-484a-95f3-e47609ee73c9", "indicator--3a3f2628-1911-4c6e-88bc-3629ad93516f", "indicator--d79b018a-f145-4f4d-b2b0-7399bbeed371", "indicator--7b784fbc-0b7e-4224-8095-8b8f4b83c70a", "indicator--2c2f7bf1-5cc9-4f06-b2d5-401d349a887f", "indicator--167f17ff-ff19-4187-aa6c-73ff91c4ccdc", "indicator--cb1f32a0-c542-4cda-a1c9-7cabc82b72bc", "indicator--1be9ea9c-bc5c-4261-ae2e-df34d7030263", "indicator--5e8142ed-2d56-4d82-bbe3-f235eeb65406", "indicator--034b4a94-1d38-462a-9783-c65ef14f7b8c", "indicator--6dc6224a-22c0-4a2f-b1dd-57ca0d9b5383", "indicator--e5d0cd10-048b-4b54-a9b4-67c5ce08abb8", "indicator--f4aa312b-b81e-4c35-8c44-2ed73a2d0e7c", "indicator--e6d3e262-1473-4f23-8c38-99e0ff4811d8", "indicator--065bb0d2-c286-4928-a140-46792b641a22", "indicator--7469926b-0f91-433a-a043-1312d533c090", "indicator--dc9a4466-55e1-4201-8af0-eb50c8322ab0", "indicator--6094dcb0-a2a7-4d01-9cf6-0178bcecd3da", "indicator--e895bae6-645b-413a-9696-c66f19fc997c", "indicator--11aa05a0-def5-43f6-81ef-5648498d81a3", "indicator--8f7c2faa-c22b-4c1d-9d02-189d4b930a04", "indicator--ab2176cd-a73a-4510-b56a-62368d721fdd", "indicator--f34cbede-03e8-4a01-8340-cf8ebbe6890e", "indicator--b0460d73-d4eb-4856-9705-4e0b014eada6", "indicator--dc1c0bf7-80ea-43cd-8c27-efb9e86359d7", "indicator--c450e145-f027-49b9-9ef0-54a77187d681", "indicator--4b2f1095-b2c6-4ea7-8b3b-68cc93a3919b", "indicator--7b23b848-4ba8-49fb-8eb4-1dec1462b7df", "indicator--90f1ab66-abea-49ac-9d30-9ded89cd312c", "indicator--1ec29116-dd61-48da-96a3-a61a6aa0bf81", "indicator--9b030028-5e74-41e9-bb4f-a26590306d25", "indicator--a74b98ef-f270-4a10-b32f-4456af7fe3af", "indicator--de1053f6-9b81-4834-bd8c-cf8e71217bc3", "indicator--cac35430-1205-43fc-ba8a-d2ea4e981437", "indicator--78bdde5e-0505-45d6-8faa-8f2ac1a17e25", "indicator--304e2d5a-f5a0-4da6-a098-3be740dff04d", "indicator--7ebc5592-2a0e-48b1-bbb0-32b57fb6ae30", "indicator--e43fe77e-7e1e-4b68-ad2a-8cd9d816f443", "indicator--fe57e8d9-567e-4012-afaf-a35cff63fbd2", "indicator--1826c881-9f26-4fbb-a9d9-e16c1637cbe7", "indicator--fe9e9525-79ff-4e9e-9284-4dd7c071c9d0", "indicator--a4ff2d3f-fc00-4bb9-94f2-bd185a863911", "indicator--48b25620-446e-4035-ba3f-39b58f0d2fa0", "sighting--5687aab3-304b-477a-9132-b789a5f5385a", "sighting--645d5234-b597-4e55-858c-7eac2443cacb", "sighting--f42056fd-8544-4319-9bad-c77f23f66e04", "sighting--0c91107c-3c68-4f1b-825d-fe59b694dd2f", "sighting--bdd772db-cd0c-419e-9880-422dbf3cc7a3", "sighting--c6e804c1-8ca4-4e86-82ab-2b9f9bb22656", "sighting--2fd944e0-a2c5-40d8-a640-e5e8c254035d", "sighting--9e0edd63-2c3e-4b19-81d6-3dbdcb814bce", "sighting--fdfd8bde-a9d3-41c6-9d9d-52023e69485a", "sighting--b06b0843-c71b-456d-a129-972afa2ffd1e", "sighting--48908449-a3f0-4633-a12d-e9e67862672b", "sighting--28b6bdf1-f0eb-4649-a1d5-58271cba6eb6", "sighting--3bdd63d7-e2a4-423f-8cad-8e20a8becfe4", "sighting--f7d6122e-edf6-4b09-88da-516b2d421612", "sighting--a3805ab5-fd84-4e08-b128-2e04e885ba9e", "sighting--9a810e2c-550e-4e74-b0af-ab4cae9eb880", "sighting--b3f11a09-cdf6-4766-9824-3ef8ecb2882b", "sighting--09436a6c-d916-4281-96cd-b6e37cd3631d", "sighting--24d78e01-a257-43b5-afa2-f8f3576b7622", "sighting--6ab3d3ef-e4cc-46dc-9cd2-68222fefde9b", "sighting--94af578d-188d-4076-92b8-ac400baa41be", "sighting--03f61d8c-83f8-4c91-a463-4323373d33ad", "sighting--1cbcc66f-52f0-4435-a7a6-34ffa8c3ea54", "sighting--67798f37-4291-4ed6-bafb-51dce9737364", "sighting--62a1b319-b7c7-4452-b1d0-27f434f95875", "sighting--e131a039-4bb3-405b-bd92-ae016f00286f", "sighting--4bc43a41-a4d3-48de-bf82-ea719c10c780", "sighting--0f13b85e-3034-4ae1-b771-80d3470d90bb", "sighting--db061f48-8485-46d5-bbd6-3b617c4ca941", "sighting--a4d87412-8f55-4e1a-9515-55ec526d430b", "sighting--93c69098-4aba-49bf-8174-d33ab27f8e92", "sighting--9c54f988-4bb2-42d2-a169-00a5fb05a2ef", "sighting--11cbcaba-86eb-4dd0-bee6-17f9a3e2220f", "sighting--3d92c35a-456e-4806-b6bc-aeb24a1d7be8", "sighting--88854ec2-d3fa-4a8d-a3bc-898b18bef204", "sighting--a0849603-982b-46c9-999a-731f1d0cd1a8", "sighting--8866fc2d-6f13-47e0-acbb-559837ebdcee", "sighting--ca580284-54f4-4417-97f2-0fabd21219b3", "sighting--0b25b473-5362-4158-9f9e-086680b38a20", "sighting--ef148aaa-e34a-4310-afe2-b54953581f99", "sighting--a7c9c8b8-b5e7-4ca7-bbc8-5225c8750702", "sighting--694b797d-c560-4672-99ed-91a245c8a5d5", "sighting--f86e086e-dd27-43fb-8f24-1842980fe5b2", "sighting--d90542ac-be2e-4536-bc79-66d3145a518f", "sighting--c84f3d04-f058-42b9-bb6d-d542c5736086", "sighting--e6659abf-9574-4d04-9144-46a96b409c6a", "sighting--79696de8-13d7-4aae-a80f-a39955a89b57", "sighting--2726618f-f714-4e87-afc3-c24e6a4fadf4", "sighting--019c96c8-6bc6-4192-958b-fe05b4914118", "sighting--92a897b1-0355-49eb-9750-b90518e8693f", "sighting--0358cdfb-c63b-4936-be0f-0d38e2c8701c", "sighting--e355bef0-77a2-4aae-a2db-e2b50ada2a61", "sighting--47079505-d69c-45c1-936e-0c22b35f12d5", "sighting--ffabace9-2888-4e0b-a98a-d9c19d80b9c0", "sighting--67a3b0b3-c71c-47e9-a8ff-bd1cf19cb52b", "sighting--05c4d05c-4e30-4c70-b21a-3694749bf349", "sighting--636b4ffc-bb19-4271-b488-b217b3592252", "sighting--eb9da99f-a3d5-48c0-8ef0-46f3cfb2cf18", "sighting--59b92e57-ef8c-40d0-8ee3-81ecc662e930", "sighting--ed25fc4d-629a-4c36-a1de-49c1565134e5", "sighting--0a26f638-0541-44e8-ace4-83323faedda6", "sighting--e6612a5b-0252-4784-a023-5dae81d512d5", "sighting--bb5a0e14-2a48-46cd-b386-d8a3a5f11fb4", "sighting--9fef2481-5af0-42f2-ad2f-ae63ecb292f8", "sighting--9c375164-ed19-4d33-8c77-fcf2566073eb", "sighting--539a9299-2db7-4d3e-8ad9-086f40cf58ea", "sighting--074ab4ee-d315-4fcb-a44b-850eefa409a6", "sighting--1652ee74-ce28-4e9b-9f86-2d662f512485", "sighting--b3bb35ef-acfd-43c9-b3c6-210dc4e36e58", "sighting--82077089-9aea-4f8a-bebb-9ba5f7f8d59b", "sighting--640a21c2-dd08-40cb-ba76-768a954e774c", "sighting--7716b40f-0442-4e3f-8ed7-ae99f7c9fb16", "sighting--f022289c-4a0a-499e-a522-45e8f43edbe5", "sighting--d67acecc-d0a4-416f-b6bd-3f1d4edfbe0b", "sighting--6d1e7350-5511-46be-bc93-7c2113cda35c", "sighting--86d28d6b-3a52-413d-9ed9-e34415c1e55b", "sighting--76de857d-9c62-491f-9316-3853bfaa9a57", "sighting--6ef706c1-9243-4ed6-b035-2680e9dfb84b", "sighting--d21c0ea9-4459-4b6e-8a96-b7a42df81b36", "sighting--0640cd3a-11f6-4209-9a81-5f6d058759d7", "sighting--b8bba9ec-a519-4269-805a-e3a4a1e4950e", "sighting--7c79f535-b966-46aa-8fae-333422db24d2", "sighting--8a449cea-6948-42d6-9f62-d7e2c51c9d70", "sighting--afd6e1ef-1792-4c94-a91e-dd4cb6504969", "sighting--4dfe6aad-1b69-47dc-a529-7b7e9f7e0a23", "sighting--5c3adf07-b7ab-4d16-af0f-ebbde4922867", "sighting--20bf827c-ca2c-42cb-8acd-17f61426bcd1", "sighting--7136b2fc-829e-4de7-ae35-d4f5763e8996", "sighting--d650fced-a6e4-4144-a2b5-52af3ae639e6", "sighting--d5495f84-1e27-4623-95cb-4b18c6d9936e", "sighting--dbfa004f-e2ed-44d5-9fc9-47cedd0d961c", "sighting--b6755697-e03e-484d-8b64-4dfccd2bfbcd", "sighting--87a2d92c-252d-459c-93bb-4e6d8c66d444", "sighting--b192dcd4-7b7a-41b8-a894-2465acc63b7c", "sighting--704295db-f18b-4ca2-bf81-9a251cfa55b6", "sighting--b2f91a95-41f7-4857-8386-2bba99f4cb15", "sighting--df2e6361-c725-4b78-9c99-32a0296d01ce", "sighting--cce55361-11a9-4140-abdf-1bc479a49102", "sighting--ab832184-b012-49a8-9d3c-6a3a64b59db6", "sighting--d1782092-3091-4bd6-a67d-8e988ebe921c", "sighting--c818877c-080d-4e7a-8dfd-4b5d8d2f9cea", "sighting--755cadd4-0efb-412b-b882-4a9adda67551", "sighting--ea1fd1da-35c7-408f-ae50-4a2dc59cdd0b", "sighting--23e1bf90-c726-48c3-8abe-1bd3f6b5fd47", "sighting--c4aa7fe7-fd4c-4e8a-bd8a-9c11d8f5ce33", "sighting--673b7bac-54b7-4d8d-81bd-a00ea9b67a44", "sighting--bbf7947a-3982-485b-8015-89315ed935a5", "sighting--a41557fd-2910-4237-83f8-ddc2dc9cbb85", "sighting--6b693ed2-e254-47ea-81ee-953832c4c478", "sighting--230959e4-42d3-42ab-a700-b5d255aa2f91", "sighting--ed39177b-4f31-466a-987c-de5bbfbd8a7f", "sighting--d431cfa0-1da4-4286-ae12-522e001839c4", "sighting--5660dd27-0e2c-41c9-8975-bd620f5021af", "sighting--6d06b358-0bda-4ba3-816e-46fdba4a03e8", "sighting--5139a343-6d2f-4547-bea8-b1a00d566e76", "sighting--4014b102-eaa0-4e3b-8ea6-f01f84d1fc18", "sighting--9d596428-c85b-45dc-b719-da4a4564fc00", "sighting--775689b3-afc4-43b5-bbb2-00c6ab0bc1c8", "sighting--ddd5edf2-d668-452f-b5c6-3d9b02919be3", "sighting--787510e5-8525-47a1-a985-8761a6bb2cf4", "sighting--1b72579e-0339-4c4e-9465-af80f6b66994", "sighting--b0e397be-8b8e-45c1-9267-5ab7b2d3c1ab", "sighting--d5765b68-085e-4f4d-b33c-8142e5d79e52", "sighting--773a09a7-467a-43fe-a9bb-665eeb8e653b", "sighting--e70fbcbf-40d4-4618-8b3f-6399ede7ca9b", "sighting--a8da496d-e92d-4ec3-bffe-364d20f9825d", "sighting--f642694c-9835-4331-817c-61b5379b9879", "sighting--d035b858-b53b-4255-89b4-557f5e8b2fd9", "sighting--c8d93845-bcfe-4e4c-8e4d-15be063a45e0", "sighting--1a6a758f-9278-43ba-a3d0-3a3b41f54e61", "sighting--def726eb-9ff9-4b3b-9468-0e0d7bd66e6f", "sighting--e4b46a12-6d85-4ce3-b741-c65a3c7a68fd", "sighting--203e5bef-b28a-4b6b-a0b8-0682ce6aca08", "sighting--d1c9877b-00df-4c8d-b998-74b49e417948", "sighting--56b254e0-7405-47e7-a1c1-26dd794b0751", "sighting--9fe99d15-1d9b-4e83-8d9e-c1a10056316d", "sighting--8edc9417-544b-459a-a8d3-42c416a12531", "sighting--8c8d892d-47ed-4f0c-912e-960e102d0165", "sighting--2c00e840-c960-4431-9fe4-3ce22334e851", "sighting--5e9ab45e-230b-4a0a-9828-d0f6fab4fed6", "sighting--2f2d2593-df7e-4365-a866-b8aa1d085137", "sighting--b725372e-a91b-4a2b-80db-873c3e3fda2d", "sighting--e57b2ee0-0491-49ca-b975-f20ddb1c090e", "sighting--a8d34243-2fd0-4f52-a730-e522b797cdaa", "sighting--8346003f-ed8b-4f2b-b687-2baa17e34144", "sighting--43ce63dd-025b-4593-8b5e-aa42f24b0694", "sighting--d8c94181-9d25-4cb9-b508-793cc3f4f17e", "sighting--08d0965f-d221-4c84-b894-765ec6485a2a", "sighting--e4aafea3-6394-47b8-bf79-f059b8e80b95", "sighting--4dfc8fb9-20b2-4a0e-a500-8030353d188c", "sighting--4120f5f7-88eb-440f-9572-ee11f33ec234", "sighting--9332c458-ea11-49f0-bb2b-a65ef1df01dd", "sighting--4acfc600-61fa-446c-9d2e-a52d81f8f148", "sighting--101ccfa9-957f-4998-b883-cc107355cbfd", "sighting--909799dd-af8f-4615-8b93-83810204fc9f", "sighting--26df8499-3d95-40e6-a78c-feb2482fe907", "sighting--05eaf18c-c202-4794-9328-3655cbad6f9b", "sighting--9a0983d3-4d5b-4798-bb49-cfd0888c916b", "sighting--3ce221de-5373-4da9-bc20-be8e72b52947", "sighting--6a250fcf-b234-4496-9f0f-d5e55a64a96b", "sighting--29dcf96f-cadb-4e8e-ac31-93e3b03bb136", "sighting--1f35e3a5-e700-4eaa-839f-0bcc325c65ed", "sighting--0fe515c3-089f-4627-aa1c-b353d51bcaa8", "sighting--29d51af4-0840-40ad-8ffd-f615dff9777a", "sighting--8617f65d-242b-4d20-b539-48f9ec8f8ecb", "sighting--b6082bcd-3348-4c7a-94e9-21a1e4572aed", "sighting--ae169ce2-96ef-4570-956c-259f173c22b1", "sighting--394ce108-57a1-453b-8942-2a79741c1695", "sighting--ee695a30-7687-4eac-97f6-93b4868de819", "sighting--819bcc6a-d6a6-4b34-9551-a050f2088d5d", "sighting--a5049aeb-e0c9-435e-816f-6ae67ade509a", "sighting--d54592b8-a537-42a0-bacd-788ab73451f2", "sighting--e361c314-803e-4d88-aef3-906b87d95563", "sighting--87c59668-0d98-4b76-871b-b20f88559ecc", "sighting--256eed8c-f55e-40ee-a2fc-b8c40c80c80d", "sighting--05904f30-25ac-4937-bc78-184a53e448c4", "sighting--35b47c1f-6d1c-4fc0-964c-623da1e2dd2f", "sighting--fe4c8308-3f40-4888-8930-ae466477abd2", "sighting--b0a2895a-da6e-4eec-8fce-4776f20d0b18", "sighting--90710cd8-6f87-4e88-a1fe-355fd0b53e02", "sighting--3ff642bc-c875-4c55-8c57-03b911dedd46", "sighting--fba238c3-6f71-4400-8c8c-52633e488f80", "sighting--e98bafcf-0ce7-44e0-8d5b-4615abbcc16c", "sighting--1d8c1701-4fe2-442e-ba0d-372199a62b4e", "sighting--4579a212-5d3a-4751-874a-d21572756cb7", "sighting--d3e5a1f1-2c59-49db-bda4-cb83e81f5b88", "sighting--fdff3429-ee41-4925-92bd-438030293f16", "sighting--c43a5917-90e8-4880-97d8-ed2753fbe8f7", "sighting--78c74a43-212f-4e9e-a1e0-5f9a3b0fac07", "sighting--33fbedd8-8014-430c-8965-e357933668ef", "sighting--e2b00a3b-d468-43b0-9bb2-2b5851cb2de3", "sighting--7733caa0-4f5b-4b24-b086-97604c16ad6e", "sighting--bdf7b93f-ca81-41c8-aa96-f2df50fcdd7f", "sighting--99ad2a18-914b-42dd-9357-4d0901829998", "sighting--cdffa44a-e683-4217-86e6-900a7aad0bbc", "sighting--ffdfa9a0-63a7-401b-bf28-833a733a27ad", "sighting--97a250b7-e9ca-4376-994a-73ac380f17a7", "sighting--ac2abeaf-1f83-4d00-84c9-b9960e71ad2a", "sighting--f72bd961-7a06-4a08-8760-ddfe248e0e41", "sighting--1f8ea9a9-b74a-43cc-8e71-6e371f615e0f", "sighting--1d179397-ee1b-4a6d-a670-3cfffee427fd", "sighting--afb537b5-a041-458b-93cd-186eb0bc5985", "sighting--6a477344-13ec-473a-8ba6-1ac8e3abbf31", "sighting--b21771b7-f29d-406d-a482-d8ac1b9cfa6d", "sighting--8f7a1b56-0ce2-4bb2-a991-b788d95cca37", "sighting--945dc8d7-5ba4-4eb7-8712-13894818bc99", "sighting--17cfaa5c-8333-40bb-aad4-50f19e5b2ad2", "sighting--f89fe9be-a00f-4016-933e-d4074cf84d07", "sighting--a42e3be0-5e45-46a9-bf8e-de912d0d899c", "sighting--dddf53f7-c0b5-4a16-a3e6-9b301aefcd9d", "sighting--3a87316d-b2c0-43f1-875b-c9cb7a744aca", "sighting--a8a7ab84-069a-4852-a4d4-4d8ac448093e", "sighting--bf18447c-1a59-49a4-be24-2ab9c24eda48", "sighting--77955a14-f4a4-44f6-96fe-0852b5e9d8cb", "sighting--9b14b963-8fce-4133-b4f4-6c5334ab0337", "sighting--7aed734a-53c0-4eae-a0a9-89a12473f212", "sighting--8e9df086-111c-417f-a62b-e527d20e46f1", "sighting--e4f455c0-b1cf-4b3a-a337-48db9a2750ac", "sighting--fe9a876a-729e-4f53-93b5-b38f4832e1e2", "sighting--5d9bfb85-d380-4a36-b409-e2be532289c7", "sighting--5a79fb74-fe85-476a-bb69-f51667168fd5", "sighting--bfc58ecf-4363-4b59-852d-41f4f578df68", "sighting--a42248c8-8b3c-4a46-b7bf-96d959f159c1", "sighting--d28d9dc9-9910-4db3-9575-0bfe7e0047a4", "sighting--d899f98f-3ce4-48a1-bf28-a2d7a626abd7", "sighting--8611c220-03f0-4a2f-8530-18a497128b1d", "sighting--28b6d1dd-8b36-4d60-afdb-b8205984afb9", "sighting--073a002b-5a7a-4572-84c0-c483343b1f63", "sighting--3db1f440-b455-44f7-acff-bb3f7bdebd15", "sighting--c6772fec-91be-41d5-bfa8-50623d17ed83", "sighting--42e5d215-7b3b-40db-b17f-ccc2adc7f8f5", "sighting--268a4dfa-a4c2-459c-82f3-7a0a35901000", "sighting--4bd05d9d-45fd-4226-8c33-c6d2b989533b", "sighting--c45428bb-c4f6-454e-8e76-08e7e4f75ae6", "sighting--8a37edad-4e4f-473a-a9d4-588a13ef955b", "sighting--3f781f52-39c4-4d85-9fe4-58fc501cb7dc", "sighting--d4664b27-188d-4363-9638-dad843833bc6", "sighting--62bc4c0d-557f-4126-8782-0b7e26dbe8ea", "sighting--68dfcaad-60aa-416c-9a2f-e0a9a1716ec8", "sighting--7b690e8b-9ac9-4ff4-b849-8fb8b269cd29", "sighting--37968445-2ddc-43b3-8e34-c0b9a042b4e7", "sighting--ff30bb87-c2de-4ca4-993a-7c704d567532", "sighting--fc7bbdfd-ee83-4ad0-80e6-3a96c206e693", "sighting--8c2a2ebf-0bb7-445f-9140-18fe822f041c", "sighting--93ad415b-8d8d-4225-9b05-ff2fb6e310c5", "sighting--6aa6af49-b43a-4402-9e81-5a6af7d15219", "sighting--a0e25be2-0101-4429-b49e-a1c3268c1084", "sighting--4a881432-32e5-490d-b9a1-ae87ddcb1a7c", "sighting--d9e4e9f8-b4fd-48b5-b7e0-3e20e563b46a", "sighting--c03b84c4-1eca-4caa-9d30-ee414e262e96", "sighting--9ddcb8d6-3da4-4865-85ff-b470cbbffb37", "sighting--9dfc3b73-58a9-410a-aff4-5481bb2a3d1f", "sighting--3170e81d-2271-4495-acb6-787994b6b041", "sighting--6fdc4f82-7042-44a6-b7c4-fbd5c6ff0995", "sighting--62463035-60a0-4308-8800-5f7675644a03", "sighting--668f0f37-f9d3-4f7a-a5d9-25b230320e67", "sighting--fe52541b-a9de-4961-b88e-a9918bd72227", "sighting--49cf47d4-e76b-4d06-a03b-f5350f35f03d", "sighting--e7daa780-d9ff-472d-ab8c-24d550b8a8d6", "sighting--c45377a1-ed72-44e4-908c-0738e87d2095", "sighting--e66c98b5-64d1-4d7c-b47e-db6eedff37da", "sighting--c9acb885-7795-4224-8168-7403cde377cf", "sighting--470aa39a-3bf2-4ddb-b93f-37f50a71b651", "sighting--2f10b8bf-6967-4a45-9107-9ad23c24ab66", "sighting--077d5a32-eab2-47bf-a39e-f42896169659", "sighting--e26ac0bd-fba2-46b8-874d-6d819dabc84a", "sighting--fdde5faa-3806-4041-a8e8-aa0aff56e1f3", "sighting--5b889680-5fc5-4cc0-9cfa-b0ac32a4d610", "sighting--77d47f48-7fa2-47e5-8c01-012a421bb5ed", "sighting--187d5fcd-2227-4e23-9ccf-f40e2cdfd1b0", "sighting--558418b1-faf4-43f6-8a42-8bd234021f19", "sighting--ec6821a6-904c-4e57-a36f-99271bd98168", "sighting--ae92154b-e54c-4da6-a734-72ec40e1df32", "sighting--c0301be5-b8cb-4728-b9f3-4729449d30ac", "sighting--f560d8b2-3bf3-48c1-a85e-1c818014a5a0", "sighting--9a96ad3e-ba9a-453a-a320-479db44d5599", "sighting--c09c23a1-7647-472a-8df8-7c8b42eec5ab", "sighting--fabb0ff8-b9ef-4650-8b43-2ce21091d644", "sighting--815db06a-cd8f-4e3c-a3b3-2bcec4c1380e", "sighting--bfc95436-91cb-49de-a7e3-593609f40813", "sighting--d083aa13-3495-415d-bd09-ce8ce5405ccd", "sighting--165e6aff-f7b6-45f7-942a-97ad8f9c1397", "sighting--1a5157f3-7488-4b9f-841d-f05b1cb9ac89", "sighting--4010df33-4de5-433c-9cc5-c0f68a2a7a1c", "sighting--3537ac43-7567-4552-b827-813e8edb30c2", "sighting--b75e510d-5576-47b8-9df3-feeb5e6ff49f", "sighting--4b0beea9-9242-4ccd-9f32-392f1cfaf988", "sighting--5aeb2f08-79f7-4fa7-a1b3-8163b6ec1021", "sighting--d02dedda-3bc3-43a8-ac49-6854c22b2a5c", "sighting--f22c6201-6103-4c2d-9730-2182e65a6039", "sighting--379feeee-be95-49c8-9ca1-6a38b5e40287", "sighting--f6b70edf-7ece-45ff-b925-2b8e059f8823", "sighting--4404e592-3554-42ac-a5da-9ba25a6c4dde", "sighting--bdcd34c7-8eb5-41f8-89d8-432a3146ff9d", "sighting--b7e21b82-e871-4e24-9b8d-c40726113e85", "sighting--35121ca6-3131-4a78-9a8f-78808fdca922", "sighting--34690ff0-03a3-4694-92eb-935242ca4a90", "sighting--6ed60f5c-460c-47a9-81d2-aaa9117dc527", "sighting--df24d1a1-49f4-42a1-8d25-4226f14668a9", "sighting--cbf74708-8246-40bf-9164-35be0ccc27e5", "sighting--ae899352-dc3d-413a-9390-88e32bcde33a", "sighting--b3cd158d-48b7-4e92-93dc-94386d11d806", "sighting--99bc8a57-3bfe-4653-9d33-2eddcb826857", "sighting--e8174b35-2e2e-4cfc-baf3-3bc970b38c95", "sighting--a5d315ce-0d27-42db-8195-3b6bcc3791c2", "sighting--5ea4e1ca-6b19-4ad5-91e5-8fa356a0ea1b", "sighting--1cfa0ccf-af45-4770-b095-fa153a24e8e8", "sighting--99429975-64df-401d-808c-4082dbe4b522", "sighting--1d2604f4-82cd-41ea-9efc-b755430df357", "sighting--1b174671-71bb-42e4-bfa0-740b99a9176b", "sighting--22d3644f-d033-43f3-8517-f372d3de311c", "sighting--dc7c0213-5590-4d19-8bbf-6278b7d60082", "sighting--14e74292-502e-495d-8c7d-604fc672ed5f", "sighting--a28566ad-0d99-4143-920e-bbb90a5b068d", "sighting--9fdfc3a1-2ef2-4371-a25a-ed8a9fc4c85f", "sighting--3c165cfb-0136-4ebf-91d7-f9c4aa36b05b", "sighting--13be1861-3735-4782-b4c9-73a10e318112", "sighting--567e3cb6-6cbb-4876-a9f3-e0bcaff56ae1", "sighting--320e70b6-4dfd-4c26-aa7a-9ebba4f0d63f", "sighting--f25fcc67-891b-4325-97f4-be6efbd3f217", "sighting--f4335990-e771-4859-a50d-170230083c27", "sighting--e7b66444-103a-4d63-a5a1-06874f9521d0", "sighting--8dffb8cc-babf-41f4-8807-8f49632afef0", "sighting--08c297ea-d5e4-4355-a881-b7f878faf008", "sighting--b0f9df6f-73cb-4488-a022-98ab6907d133", "sighting--82d8ecd1-3d0b-4534-ad68-7d28baf06a6f", "sighting--88446a90-2404-4745-a0aa-fa2fc8d16b4d", "sighting--3fa805fa-9313-4042-be9d-1a4e9f9c3877", "sighting--a2f720c0-dd7f-4904-a747-9947489f9221", "sighting--1540ab7a-851a-4bdd-866c-701093ee8e5f", "sighting--f1028ca4-c48f-4891-8900-3632710cab63", "sighting--f039cb5f-ef80-4477-9a1f-679ca59fc0e2", "sighting--fcc642be-fe0f-439a-b4f2-b4b06823102a", "sighting--6fea853c-df88-4a68-a91e-d5fb8d8b33d0", "sighting--9db3a07c-5217-407d-9a14-26273f8c9c21", "sighting--035af232-a1e1-4f02-a2db-a7b2ad1e2f5a", "sighting--d15500c6-ac52-4f80-8abc-82c644b606f9", "sighting--7871b6bb-2974-44ac-85eb-e854c70c7383", "sighting--71acbf91-82f2-4877-ab20-1eb24eaaea40", "sighting--d9c68bcf-a903-4db7-a1fe-c254fcdba8d4", "sighting--4896bf59-106b-41c9-879c-6aefb06f1533", "sighting--cc8f64fe-b08c-49c6-b564-4d610d3d7316", "sighting--99e3ec67-88e1-4adc-95ce-237a95ded9a0", "sighting--032b6d11-1c71-43f3-8c2e-c69c1481a8f2", "sighting--53b220c1-53a2-4750-92c2-7842c23f2459", "sighting--0ed0a31b-2ce4-4fe3-920c-4df75993fc32", "sighting--0bfbc9c7-19dd-4ed7-93c0-5a48b5144f84", "sighting--b6b9dcf3-3327-46c3-9c5a-e1c6a265f262", "sighting--6b7419e3-e1ba-475a-b5be-daaadfa9b3fe", "sighting--a9212019-e155-4c09-8b75-85eab56c6521", "sighting--462de26e-1d81-457b-9e05-02f6e13d81c7", "sighting--ef033761-2da3-4415-ba6f-0f4a777ed615", "sighting--8802994d-eb4b-439a-990e-97772fcce2e2", "sighting--00597ffb-ccef-4c56-9e91-c9f9c598790e", "sighting--4af309ac-e655-4c03-be0c-3276237e622c", "sighting--9815c747-f039-44cc-83d1-36795fdb3317", "sighting--694bf3df-3f62-463b-b1cb-555d5a75e3ff", "sighting--19b22e96-0f59-42eb-8e9b-b92f5855f237", "sighting--bd967d45-9b98-4100-8eb8-f16f75395ac7", "sighting--166d4e8c-eecc-4808-af30-50885c0731d9", "sighting--96c7bf29-cdc2-406b-9c5a-657d399ee03d", "sighting--44250752-736e-4de5-9ed1-c528a7cbea2d", "sighting--fb88d4fd-d8a6-45c4-b59c-de871e53dd0d", "sighting--9ace14a3-0657-4690-9e21-49869a45f88a", "sighting--3df008c7-35f7-4500-9fc6-cd03c50a2b0c", "sighting--7caa6528-d1de-4ee3-928c-87444b516bbc", "sighting--85b83945-6508-4dca-a0bd-93d90a08a645", "sighting--86931ab6-1345-429f-9c8e-2e6c6d8adb95", "sighting--9615bcc5-dad7-4e8a-a34d-69542b249df6", "sighting--4560ded3-92dd-4c60-b7b9-23d03deff2d0", "sighting--fc067dcd-8351-4696-8444-bdb9ac91feb1", "sighting--87ec103e-e08a-416b-93cb-329b38767a76", "sighting--49cea182-12cd-4372-9662-2b63231f8c41", "sighting--da47cc13-891a-42c2-9d94-1d34852b0c9c", "sighting--50bd6fb9-5ddc-4c75-a861-9d3c853cb7a7", "sighting--46587d7c-1d6c-4062-a731-74ad1110eeac", "sighting--9b38b231-19e6-4750-a6e6-9665dda1f04e", "sighting--4ad60b72-9ee7-474a-8152-bc16c1ab4b67", "sighting--9216e4f3-c0e4-44f4-a54d-be456cd837c2", "sighting--daf8a322-466b-4dff-ac08-f185e31bcee9", "sighting--738b3438-7276-40e3-b50d-ec0cd083b0da", "sighting--29b6f165-a607-48a8-9a81-3d005f5b8d6c", "sighting--9f0c0c98-3014-42e0-8840-39286f146f9a", "sighting--c4db49a1-4a5f-4c22-81d8-a33bd0f4b038", "sighting--4bce7cb0-e781-42b5-8ffa-816b8172aeec", "sighting--4c7d73ed-5fe6-4efd-a52d-61ae9e8f93dc", "sighting--47755370-68ce-40dd-9d28-a65c17d8bc3d", "sighting--e5050bd0-e764-4d0a-81b7-371330daa742", "sighting--788805f9-9e9b-4c0e-b3de-6d753a3dbc98", "sighting--70951df2-b4e7-4a10-b8ad-40e22e9b35ba", "sighting--40e18b9d-1d5e-4fb2-898b-1adaac48ad88", "sighting--33373527-4417-4b62-a762-aa68b5a653c4", "sighting--9e80a82d-2b4c-41f9-809a-f623cef2e523", "sighting--10d5b2a9-112a-447e-8ac8-4dd36e1ebd17", "sighting--34c10e23-ed7d-4456-ad02-7dbc5c53ac4b", "sighting--72aff2f3-f015-4c0f-b635-15e4cd943fd2", "sighting--8d3ca170-c049-4bb7-89be-08ae2fc858cb", "sighting--cbc4ebc1-736e-483d-8159-68421daeb084", "sighting--363fe1e1-1b62-4f8b-8d94-59507eda2d8e", "sighting--df0b3280-ba47-4908-bf79-810d152d9a02", "sighting--ec5fee9f-07e2-4ba6-83e0-88db5b2ca0ce", "sighting--d0af08e6-52cf-4452-930d-3c14e48a0974", "sighting--c879d29b-9190-4050-bafe-ab49bf1bfda2", "sighting--9ad2b6c6-75ac-4908-8bad-3fc4573b9d9f", "sighting--cc22cb29-4d38-435d-8a9b-f78d87efe63b", "sighting--c31ecc2b-6f8a-40a3-945c-daa2fe6441dd", "sighting--8fd93c90-0649-4aca-a498-d1b71751bcb6", "sighting--b498935a-ae0b-4380-aedf-68a10d745b2d", "sighting--7a5c8a41-91cb-4b2d-b0bc-040b50f12f80", "sighting--07e03621-55ca-4639-84f1-b54b7aedb31b", "sighting--b09d6bd6-5c4d-46c1-8841-9df387dbc4dd", "sighting--28eda0e5-875a-448c-a7cf-9ea745aab1c3", "sighting--f1fdd8fa-6ec4-4fd1-b6d6-11d476c77499", "sighting--1ec831b9-9f80-4723-a5bb-df7ea0d9c32c", "sighting--93c89268-5c3f-4f23-87a4-6008a8f7968c", "sighting--35826b48-3d7c-4242-9de1-6d30482bf277", "sighting--1f90086e-b975-441f-a379-2d178e1b09da", "sighting--1c13e7bb-5826-4e6f-a660-f503982ee82e", "sighting--b6cfe81c-a7c3-410c-a504-7d3e48817033", "sighting--f575f2df-07eb-42a4-87a7-3c0e2add192c", "sighting--ed1fe721-27b4-4866-b607-9cd2d7ce1044", "sighting--1fece3fd-a2ff-43f6-a856-3070d056f0b9", "sighting--dc27e794-289d-4802-be49-595564eef533", "sighting--d6ac7b15-0a98-4cbe-85ed-01bad1de0f40", "sighting--8b1fc8a7-278e-48e4-bf79-01ad9911d6a4", "sighting--f48d24fd-de78-40d1-bcc3-b2208aa6dbee", "sighting--e80ab9e9-cc9d-4fbe-b5d6-170eb2a3a3d8", "sighting--960b1f59-57c8-401c-99c9-2c96133eaedb", "sighting--26202b99-f6bf-4e9e-817d-8e88485b24ec", "sighting--4e0b5221-1cee-4129-b8e2-390e190134d6", "sighting--6d75be20-c69e-4e2c-b8d8-f6c4d860d114", "sighting--674da0cb-d86a-46d7-8495-126104dde23d", "sighting--bf16f795-9d5d-45a8-a170-2f24bcc004ce", "sighting--20ee8caf-036b-450b-8558-130d3275aae3", "sighting--b830d7b7-8746-4b29-8dbd-283663631508", "sighting--d1179ed3-bd2e-4574-9157-5c16af27042f", "sighting--71165d26-a4e5-4da5-8d92-4d70c25c4622", "sighting--32d8e677-4aa9-485f-9ea8-f83f8a298219", "sighting--1b248600-c75b-49e8-8d0f-03c7fa2f95fb", "sighting--da30a572-0ac4-4aed-9f63-322b43e9fab8", "sighting--c47d8467-75f4-4174-b96c-e430c85796dc", "sighting--892c1789-9af6-42f7-930f-c9d59bd93f8f", "sighting--2ebd3afe-45cc-46be-b091-3e2737036fbd", "sighting--7de0d34c-0271-4028-aeed-70a0ad5f0329", "sighting--4ed630ba-cfa0-478d-b823-240453ce3cd7", "sighting--4cf57838-d653-443c-9c48-b2c6db7cbd71", "sighting--be9cfb5f-a867-488d-a6b9-24ee43955b7a", "sighting--30fa4a3a-fe8d-4afd-a815-faff505f8c44", "sighting--d771b1c3-26f1-4e80-aaa7-773f941521cf", "sighting--958b10dc-a343-4c5e-9eab-ae0108ba391b", "sighting--355dd9af-e578-47d9-9115-4d9aba656a5e", "sighting--e8b9ecaf-1ec5-4ae3-9127-52a30643a230", "sighting--0dd601f5-2d4a-4e73-82e9-b023588d9225", "sighting--41cee537-7aed-4452-8e2b-62ae2a8a57fa", "sighting--f01209b6-bb5b-450d-b26e-d27de701aff5", "sighting--4ba4b141-ccd4-4a36-885a-64dd30373efa", "sighting--75e32ebf-1ec5-4fe6-b1d8-9d4ec1b6e895", "sighting--0788dbfc-d22d-43e3-b0e8-405616368d53", "sighting--720d103d-a77b-40de-a73b-2062475ea99e", "sighting--11ca8a56-1aea-4aaa-8837-190a9b7d91ab", "sighting--949a7671-9c2b-4347-b8ef-706a9c863566", "sighting--a2825c6e-f61e-495b-b02b-4237317ed581", "sighting--7d03c4d6-7aaa-4688-aa31-26fcf8ef827c", "sighting--0427c5b9-7e79-4e85-88e1-8d05c5cae673", "sighting--3073434a-317c-49bb-b782-c22d2bdb0c64", "sighting--134a8606-5b3e-4f88-8e1d-4fe30f9d7bcb", "sighting--2cd1dd81-23d5-41eb-ac93-db8896ff345a", "sighting--7aca45c3-328c-4dfc-aea8-30f2bda9e6a4", "sighting--0640a429-2224-4bc7-b31d-88e49e01c53f", "sighting--2699d3a0-00bd-482a-bfd7-1309714027ae", "sighting--b5b677bc-ba8a-48b2-b5a4-e56ae36461ed", "sighting--ddd57902-0655-4a65-9c84-d869262299f4", "sighting--fdbb7cdc-d983-4771-8136-af34526ecd7d", "sighting--e4fd181b-d670-4803-9d41-254bf44c6ee4", "sighting--1d2662db-fd06-4a93-b79d-c86093a8d7ee", "sighting--76661c84-d6af-4541-9ba9-d07d63890ded", "sighting--2d6f494e-1d5d-4867-806b-8faf11f6b6a9", "sighting--53ff8027-e53e-4e3a-acbe-30a07ec093bc", "sighting--cf60f22a-099c-43cd-b3cb-e1ab98d025a5", "sighting--b16060c9-aa05-4e2d-8f91-fa903d209ada", "sighting--678ffb48-8a27-43ba-a631-0faa6a0bc9c3", "sighting--865fa692-141e-4171-add8-2a260a2298e5", "sighting--f66053e5-33db-4b0c-881f-4a388ab9554c", "sighting--d5afde86-3d13-4513-83ec-5454edb1ae7f", "sighting--a478dc0b-9835-4050-93f4-0f5be002a02a", "sighting--c2bb0028-9169-4f37-b644-62f6a5e4d2b4", "sighting--1f2d48d5-399a-4b4a-9c88-48a4a0363a03", "sighting--2ace954a-c8a5-434a-9c9e-d9e41504ec8d", "sighting--80c16437-f886-4202-84b5-9e14bd23e9e6", "sighting--bd0c494e-89e3-4ee3-b71d-9c965368f941", "sighting--a1ae9301-5d32-4d18-995a-9887f3aa3ae9", "sighting--343c6d01-826e-457c-9697-cdeaeee6ec82", "sighting--4bf8f62f-6f33-4af9-8fee-079e855f5790", "sighting--708ffab9-06da-47c4-9cff-aab4063565d4", "sighting--e2f9aef1-1eb0-473d-9a91-b92a71b6af9d", "sighting--eb465161-a761-407c-a7a5-29072bb39ffb", "sighting--80eca68c-0de7-4548-81cc-903ec641e5bb", "sighting--e1183f6d-dd79-402a-a449-a92ede870ca3", "sighting--0c9d0050-a376-4dda-be4a-793839d99f7e", "sighting--9eba8290-1055-46bd-8e41-c2edb6790d55", "sighting--9bef5f9a-152f-4c31-903d-f708cda56c99", "sighting--c06616b9-9bbd-4136-ba45-cc215765d938", "sighting--002ad868-9bad-492b-a618-a83bfa5ce9f3", "sighting--c9b8a53d-c284-4459-9ba8-666ec687af0e", "sighting--356424dc-8c30-4e68-99e2-0cb67a3c1665", "sighting--6b66dbee-145f-416f-9387-a1bcc801d0b2", "sighting--152e3305-e29b-453d-ad9f-29794214a8b1", "sighting--ce4c4af9-96c1-4c97-b0cb-9aee33833f8d", "sighting--1d4e0688-1b9a-4070-88d7-0f7a2866125a", "sighting--74bcd24e-0228-4956-9c36-9e5069b28895", "sighting--24c27dbe-6157-4953-9edc-437f1a57e7dc", "sighting--3d7028e4-7791-47d3-a292-719bc975ad28", "sighting--9b334c40-4305-4f7c-855a-6cc964e51065", "sighting--8cb67272-f1ee-49b1-8060-79b382329edf", "sighting--e716a5cc-f704-425d-a49a-13173ea981a9", "sighting--97e98517-60c3-4755-8622-4d0d8ab2b2b1", "sighting--463f596a-8707-4fb1-af81-847e16cce9af", "sighting--f1193e71-c183-48ba-b9e4-2515030dc8be", "sighting--2d8411bb-06fb-4eb5-9731-0486863d5986", "sighting--0571f427-5e6f-4052-aa9d-25cfc3b82ca5", "sighting--a724e9ab-376f-40dd-8987-81c94f03572f", "sighting--d63a40cc-692e-4d7e-ae7c-3fefecd9d222", "sighting--a5e321b3-ee32-442d-9801-0b8fc818f5c0", "sighting--3b1047ec-8d48-40fc-bbcd-a552183b0822", "sighting--e09316de-1ac5-4f2a-ba91-118346a47ad7", "sighting--5b9c7369-1f80-47dd-8944-931a59b3452a", "sighting--c887f2a6-25cc-4c3c-8c6d-90e40954bd5c", "sighting--41ffbd3d-b448-47ea-b62c-b312e7e96b1d", "sighting--0c1326b6-b916-4e61-91f9-e78b227cf0b1", "sighting--24b9fad6-72be-4b5f-b9a9-cc3dee4a02f2", "sighting--f3b71e0e-d181-4c60-b9f8-f8034b50a3d0", "sighting--e947baac-020f-48e7-a991-1e5d883a2f9d", "sighting--af99d758-c722-4631-b5d4-0e8f8355c604", "sighting--ac33e1c7-8868-43ce-8f16-46647e26fa0e", "sighting--2500c8f7-b242-485c-a14c-a6accdfc567c", "sighting--52cf0996-8431-48f9-aa30-d143dbff063a", "sighting--13e8bbb2-92e1-47b4-9a14-6dadc57069cd", "sighting--5b6c419f-a1c2-4d04-91df-abd29fe3317f", "sighting--a233da53-9b5e-4930-9aff-fcf4d720fc5a", "sighting--006bbdb2-31b0-4d2b-a6bd-b7480aa11883", "sighting--c1c690b7-cf18-4c3d-9f8a-dc21882f36c8", "sighting--e25897d5-e8fe-4282-afe0-83773b7d7add", "sighting--2d8e6597-5f40-4d78-b90a-067dc66b1e45", "sighting--46a557d5-567d-4e22-ba5b-af822305920d", "sighting--81f87c49-73c5-45db-8201-06a76a5484b5", "sighting--772d7b88-f3ea-4617-a618-74a0c6a50f37", "sighting--2d08f8ef-69d1-4a31-85cf-ab2a650cc748", "sighting--1fb6efe4-df76-474b-a495-e9612daaaf8f", "sighting--76b53a65-4e02-4550-95d3-40d4bad2cc4c", "sighting--4472b3a4-be12-4e4f-bc96-234377a7e79d", "sighting--83bf963e-2e36-442e-908a-959e470de363", "sighting--69607a91-6c1c-4247-acb0-8ccdbac0afc1", "sighting--83f525a9-c6e6-427e-b42c-d2b2d8c658cd", "sighting--fa1d425c-442d-4005-926c-bc640bf1d809", "sighting--1d745656-2a75-45c3-94f4-d7e4c058a739", "sighting--bc9a00b4-d578-4fb5-84bf-8b7d5d57bab8", "sighting--d98f7bc6-add6-472d-9cac-fea00a41f450", "sighting--7d3d39f8-2294-4e06-b2c5-0c1bc7458266", "sighting--478ab4bc-8e05-4e5c-ab9e-eecc9535d0a1", "sighting--7939c7a8-5a63-4cb3-994e-77d623f83420", "sighting--3e6cf12f-16ab-49f0-bb91-fca5a7eeb30b", "sighting--43eb38e5-024f-4b51-80e2-a229372b022a", "sighting--f75d6541-12d6-4040-838c-bad224eb68bb", "sighting--81efde7d-beca-4767-9054-cb93633680c0", "sighting--201040f2-bd7c-4cc4-986d-69e8213c1c16", "sighting--c5132a2f-9203-4af4-9c89-356d8d396de5", "sighting--9dc7d1ae-0bc1-466c-96d3-c36074d237de", "sighting--8b60040a-99f0-4310-a2ab-81acfaf16bd8", "sighting--153ece43-40e8-47d4-89e2-1b5889ae21e8", "sighting--5f93fc91-6b85-40bd-a84b-5bc8c18baa8d", "sighting--5366ea63-07b5-4363-9348-bce0e682ce5f", "sighting--cd23a315-206b-45de-ad38-e2cd418b7a3e", "sighting--29361c14-8d27-42f0-8bc0-b70d6888ed38", "sighting--201f644a-8251-419b-8712-07953e4b26c2", "sighting--55e02327-9c81-4b95-a3c5-4ecaf336141b", "sighting--60c4ad29-99c4-45c7-917b-abeade4a4f49", "sighting--c1fa0ff5-ba2f-49a5-9fbe-cf85e0441325", "sighting--25d38903-9608-4c1f-804f-72833fa29310", "sighting--831e4b5c-9620-410f-a4cc-366f972a8bd3", "sighting--72dd5ea0-e943-469e-969c-fb8e62b7f0af", "sighting--8b4f9d11-1386-40df-9ebf-53d278f55e19", "sighting--ac2b08ac-e1b6-440c-a96c-5d06869aa235", "sighting--1d8c9ca5-d8cc-4488-99d2-410ea8150c99", "sighting--992a6ea9-6fa8-4d45-91fd-4e8025365f02", "sighting--45bca773-dab5-4082-93a7-6f94b5ee92dc", "sighting--7dc37ea1-15e4-4ac6-83ca-b1fada4c0dee", "sighting--52723b04-2579-46bb-a60a-f86f36762081", "sighting--033d074f-524c-44d9-846b-49bb83d08898", "sighting--8b62c851-76e0-4ad0-a557-841a507451b9", "sighting--65759075-c59a-44cf-a947-30c607b7f47c", "sighting--9df74784-927a-41c7-a8a4-195ff10766bb", "sighting--edc83550-a1ea-46c4-a986-1b3ea48ffa9b", "sighting--c8997e45-d48c-483f-8b2e-0b2954fb40ee", "sighting--969e6fd9-6761-4a89-9be6-517b386c62e4", "sighting--b0173ebd-94c5-4437-885c-c1aef3aee525", "sighting--0b649317-e0a7-48fe-ad4b-a86705e48f11", "sighting--58a7efc8-3363-43e9-8cb4-5606e5c7921f", "sighting--109507f5-ff91-48b7-b385-d91e89c479bc", "sighting--fd4544e2-9324-40ef-8d2a-99f2ba96adac", "sighting--7477e94c-d3d6-4e68-bf07-9c00ee90fb48", "sighting--a406c3af-28ae-4635-8e53-56be97c13303", "sighting--80f1ea70-d6be-4a28-b7a6-847d9df35ea0", "sighting--96ef01a2-4d6b-42a1-8d56-0b3d9482b0ed", "sighting--b31fc4a0-7f5b-4d78-9298-6879aa87c189", "sighting--92a6d98e-f934-472b-97a3-b2aa8685b31c", "sighting--edc4e81c-f3c5-4f21-b0b6-098ce621c890", "sighting--76b3c41d-aa9f-40aa-9b81-b7254d9a315e", "sighting--65ea0796-83bf-4611-be7c-e4b5a0b8f257", "sighting--12b097af-848a-4e95-bb40-0ead646d8621", "sighting--84b2f331-9019-461e-a8a0-59143cfebf8f", "sighting--5b127259-80f2-493c-ae8e-d2ddfcd1b2d3", "sighting--854f975c-c40a-4b3c-8963-ac65cde929bc", "sighting--8bd29764-4250-4387-8992-554248167cc7", "sighting--34b1116b-15fd-456b-bc69-65c5e0682d45", "sighting--9847f5ff-3a26-4fd9-a88b-19521650b7ca", "sighting--c5cdd077-2479-4ee0-ab55-d70f5cc2742b", "sighting--0782c1e2-5575-4476-8cc7-f3bb8a4c1f2e", "sighting--cb0899a2-1e5f-4da3-a83e-55cc915613e0", "sighting--de239b00-e2cf-4260-ac5a-85cf6dd7cda4", "sighting--ffefa45c-3ca9-45b2-92f3-576d8eb618b2", "sighting--0bd873b2-2d49-4350-8013-dd74754a6ef7", "sighting--91be89f5-069d-45e5-a6ec-e8afe7a0fb82", "sighting--9b880830-ed22-4590-becf-b82aaab9b0c1", "sighting--349cfd85-0689-4dce-9788-93b0aa102b17", "sighting--685d693e-f4dd-4f5f-be49-ee5b745f5699", "sighting--79ad62e2-0c49-440b-997b-5f8dc5a52cb4", "sighting--571eebaf-ce02-4d73-bb75-55909f8281bf", "sighting--1bb8d1c9-11d0-40b0-b98a-a4c52d2409a0", "sighting--df3b8f01-18ff-43cf-a1f9-fa3cb7ce5d0d", "sighting--744f2e04-728d-4271-be00-463e6fb2578f", "sighting--5fb2dc9f-94d7-490c-b8f5-ed128ac00b1b", "sighting--2c286532-487e-45f3-9e70-b3c3df5c8c19", "sighting--fc153f96-d8ca-45ba-991c-9bb39c8db275", "sighting--0dc4480c-257b-4518-97ee-b4e4ac74103e", "sighting--f154d030-9135-43d3-b3de-1f1c13f5af6c", "sighting--6fea066e-473a-4200-8659-35810c279f20", "sighting--eb6ec744-6d1e-48b3-bd9b-c62b4300adeb", "sighting--504101aa-2a00-4ec1-a6d6-7a767ae15501", "sighting--7254830f-303c-406c-acb5-c9fd2adc1e20", "sighting--dd654652-b831-471e-8c3d-f10390d02576", "sighting--ff3440c1-5509-4167-b9b2-5201001f74af", "sighting--2f75591b-e64f-41b9-ad63-81fa76978333", "sighting--20bf0cb9-f92a-48aa-a98e-73175467c5c3", "sighting--c6a24030-6df3-4a95-bb0d-6e6e449c2e8d", "sighting--a4e4176c-b42c-4982-84c3-8cb2d3ec1d43", "sighting--8261ab5b-b459-4751-9ca3-30c3f4db115b", "sighting--b8d6018f-096b-45d4-9378-294a2b87106b", "sighting--5f4a3df1-3895-4994-8206-a3bf8385a89d", "sighting--ddda26ea-5a72-4c6c-914d-2e6fe961ecbe", "sighting--86d38a81-6f15-4905-8ae7-d63ff8be0b71", "sighting--ed89f2e8-10b4-4917-80a8-dc6900084cd1", "sighting--3bce2429-b35e-455c-a12b-1299512569f6", "sighting--ae20e504-4a33-4b8d-9896-af87661c87f9", "sighting--9ef3c244-788b-4cca-a9c6-ed74640cc235", "sighting--f82af996-8b50-4377-8192-9f4c5887c93a", "sighting--02c167b6-2f65-4c96-96db-11ee0c9f0fd4", "sighting--06035c90-cb2e-4118-9abc-4c023918c2ca", "sighting--3addcc6a-a37f-4824-bbdf-27a082a33180", "sighting--2aa7f2f4-d8ca-44a9-b260-c874bc265f4f", "sighting--9080b99e-c409-45cb-9d9e-c014217a0893", "sighting--2d411cc4-9580-4e8a-a2c6-727153596f82", "sighting--85653d83-0a29-4905-84da-0594fd8009d9", "sighting--fca60892-b69d-43a4-86dd-8bbf29ac00e5", "sighting--1c75063d-32d8-4b91-8738-c0776cef5f7c", "sighting--764c728f-7a01-496e-86a4-64b50f36ad87", "sighting--fa881df5-deff-4e8a-a7a3-4010bcac5daa", "sighting--fac7a9fd-65fa-4eb7-976b-ad93baa70dba", "sighting--c65099c1-2dc6-4850-8c38-f69ed80abe93", "sighting--9ecd118f-746f-4671-9101-105dd60a05e6", "sighting--4bb12bd4-0756-4692-a590-0fbc455a3e54", "sighting--7e648cae-7b2b-44a2-a81d-9d5c5b2d0954", "sighting--ff736178-dbb6-4139-ba1c-3a71b8a81f5d", "sighting--01b1ea24-cfe7-4dbe-8636-29e33e527de4", "sighting--e6ef7f04-db5a-49e7-aff9-4faa0b6da109", "sighting--217e23ce-c43d-4e8a-adcd-24c075b34453", "sighting--3a270773-967f-4f09-987e-5c90fd6f7cf2", "sighting--8922f00d-cbe2-4d04-9807-d4329898c3a5", "sighting--ec60035b-6b9d-418f-b2ca-3ae89dafa207", "sighting--d5661116-b279-42a8-b0bf-0dc34d0d30e6", "sighting--eb6a94cf-78f0-4255-adc2-c5ab0e406992", "sighting--5803e288-cce4-4043-a0e7-e49e9ed02705", "sighting--1889f1be-252c-47a3-ab79-a4910ad22593", "sighting--43bb5a58-1103-410f-bc50-4d3fb32008a9", "sighting--df04dff7-4c34-40a9-9651-910b9a195ef4", "sighting--c40228c6-a17a-4077-aae4-049b5c8101d7", "sighting--04022dd6-c6c3-4b61-a06a-60e76abe31d7", "sighting--7dd1d455-d3e6-45d9-9d23-e0b81cc3eaec", "sighting--1a7ef892-1911-47e1-a920-3fce3be8f051", "sighting--a5c017ef-8580-405d-9f97-7f944ca0e8b9", "sighting--52e4f7d6-79c0-4c5e-b3d4-bfec109c2548", "sighting--3c9420dd-8599-4ee4-84e4-fea523a6e6b6", "sighting--7c9be09e-d1de-49a6-be55-fd6ca467be44", "sighting--96810599-161c-456a-8406-c9ebc20e4529", "sighting--037f0d7e-f2e2-46ed-a9e0-1edc425fe1df", "sighting--d19ed8e2-533f-4790-8f8d-65d7f358352f", "sighting--3b730157-a4d0-4b28-b87e-9c7feb722f3c", "sighting--a3a11764-e826-4c6a-a42e-599c7c8e5d5a", "sighting--9d5dfff0-c191-4962-971c-11a5a4ca8dd2", "sighting--e16c1ec2-9fd6-480e-a21e-a7b3cd7e90eb", "sighting--4d64eaaf-96a5-43a8-bdfe-afce93104400", "sighting--a817f6d5-0a3e-45f5-a202-ccac0a89f445", "sighting--77e88a72-3604-469a-9fb6-59ebff58a72a", "sighting--dcba605c-2a98-404e-b9f5-a9dc377087b7", "sighting--5822713b-1761-4b3b-b5bd-839ff708d6c9", "sighting--42930b82-f6f7-49dd-8d92-8849774c96a3", "sighting--b689c48c-0c57-48b6-8ea1-cd37edd5b8e3", "sighting--d9300b15-f29a-43c7-8e1a-56eae42d325c", "sighting--e3f67c0d-891f-4a3c-b2d3-4418f38da99b", "sighting--f314f105-9e77-4360-acc4-590770bf8809", "sighting--7b688749-3122-44ff-9867-b0f956983a16", "sighting--bd5fa28e-8bc6-47fb-b7c4-e84fb25eb911", "sighting--a668d7dc-cdf4-48b8-b9ca-f7f42555decf", "sighting--9840073e-c760-48ca-8191-72d0f80ca028", "sighting--343341d1-0fee-4869-9e78-cd50dd5cbf7a", "sighting--dd7157e1-cc8c-4a4b-bbed-baf90bf59d11", "sighting--2f7bc9de-d299-4639-ab79-05cb3fdffb62", "sighting--3fe08c37-48a8-4fc3-92de-73fb52abb3d3", "sighting--c5cb46f1-931e-4da4-a744-ece80d4b613e", "sighting--a7b69315-40dc-4ff9-9559-64631e53e371", "sighting--41ae48c0-34ac-4aa2-aafa-4bc6a201fcb3", "sighting--165c722f-72e4-4954-9b7c-50927984bdbc", "sighting--ac2aba4a-69a9-4165-ad85-d50a01791b4c", "sighting--0acfd89e-f47d-4002-870c-89972de03d20", "sighting--1215b5fc-3b04-4a16-98bb-eaecc4186410", "sighting--32f7ed06-0a92-46ea-8b35-68bd5c5b0977", "sighting--c8467a17-2b08-4701-9854-908c9e683dbf", "sighting--9898d4cc-264f-4c3d-b37b-1d412efee21f", "sighting--4bf3229e-e2e1-40c3-9230-c87f38cfbd77", "sighting--ddd5223a-4e10-4694-bd57-814763f88956", "sighting--86861bdf-1153-42c7-8739-fe0376ca6b1a", "sighting--8ac85dce-cfcc-4058-8cd5-72fb7fc2ca4d", "sighting--a8f55609-08ec-4384-80cc-b50bb3dbe81b", "sighting--a10872ec-ef16-41ac-af65-468354a652c9", "sighting--cddbefac-955b-498d-85cf-dde0df548b5f", "sighting--285b9df7-21d7-4e9a-965e-f4492c47c18b", "sighting--2fd00073-3b45-4a39-b8d3-341b3d86e401", "sighting--dac2fdda-0ac2-4246-949e-cecc81b885f2", "sighting--c5e90bcb-d1c4-4c39-bc45-afb9a242c74d", "sighting--1c49a9ce-5845-43af-bb51-5d54f1350cba", "sighting--9ac2f3a6-1667-4f99-beeb-130665341504", "sighting--d38fb5ad-6027-4150-89dc-232b80037836", "sighting--cfb631b5-e942-48d3-9412-e521b5a26e04", "sighting--e6f2edb1-3f99-4388-bd81-8ba08699ed2a", "sighting--1698c387-ff75-4194-8f66-f702cdfa1558", "sighting--b724b4ce-7047-46e7-8a98-5ea34a2c2765", "sighting--97bb575e-bf9a-4fc6-8adb-fe493c2c0f1b", "sighting--abcaf0cd-3413-4899-9eb3-7907bfab3402", "sighting--448f0faf-8b70-43e1-aef9-7cd22fdccd76", "sighting--a7978c9f-8f01-44cf-b36d-9b837b61c892", "sighting--4fa9d6cf-80a5-45b6-a3c5-48b018266fa1", "sighting--901cb6e1-5bdc-48a7-bf08-7177ddd808bb", "sighting--44c02d3c-d690-43a0-b957-54adc91cbf8e", "sighting--62973a66-9c72-4e51-b3e4-8b78bf73a4ec", "sighting--524d9bdb-deec-466f-b17f-cb97258aa533", "sighting--a5dd7775-14b5-4f2c-b3a3-a6d3c77f9042", "sighting--db9abc2a-3528-4796-9fb1-c2f7ee0412ed", "sighting--ba268320-21ab-4c14-9f55-8700f345795f", "sighting--3b1c1d27-982b-4334-880f-ec6f6132ab25", "sighting--7540db96-96f8-4c06-9eac-007c6dd34b74", "sighting--530f2cf3-11ae-463b-982e-05dcde0819b6", "sighting--fd2a6421-d7e6-4570-b183-c493c598ffc4", "sighting--1795b8ee-0437-4abe-b8b2-bf4f61bbc212", "sighting--a9a78821-7c2b-47e6-bf96-8df54a091ef2", "sighting--3fe59298-2e67-492a-92d4-c5961db879a7", "sighting--97025dd5-e6bd-4881-a11c-213aedf637f3", "sighting--705f9f70-8dfc-40ca-ab74-3899c16c7aaa", "sighting--c1a0ee35-fbc3-4f19-8abb-67a70c8fba3f", "sighting--120345c4-3a4c-4ff5-8b33-1fc10e24f9ee", "sighting--16e65269-f773-44eb-b39d-8680569511cf", "sighting--23e9a8dc-be4a-410d-a675-cfefb17d7775", "sighting--540e8966-9233-42fb-bdaa-bed9f277ef49", "sighting--91afbb78-5afe-4469-90a6-76ae47cf0afe", "sighting--4f7cb13d-b2bc-4571-bcf2-56ff60f309c2", "sighting--fb3c8b0a-20b6-4914-8c39-e6a8ff147f03", "sighting--f5cd0074-8b9e-46f8-9492-edf2e359959c", "sighting--3b0ef8a2-13f3-4d57-bee7-40e8739f39b3", "sighting--f32b99d7-e666-4008-9ded-36617f68caa1", "sighting--ddfa0063-549c-4f88-a96b-5be2efee127f", "sighting--113a96dc-2253-48db-8998-f147066e890d", "sighting--3310df87-01af-43c8-ba7e-93e78f1a3e40", "sighting--8a0bf0bb-5c32-4dba-9d9a-9de543badf1e", "sighting--32c5f6e2-7ee9-4321-be03-31982094a085", "sighting--0ea97ddf-60ee-4e54-806c-d4b6fa9b9547", "sighting--1cb0f722-0805-4664-b385-0cd899d6cb50", "sighting--7e669ce1-943e-4ec2-9a63-065a2d892b3e", "sighting--545ce812-801c-4d9f-8e42-29107176abc4", "sighting--9ed841c5-0cf7-4bfc-a931-b25ab07b5bd0", "sighting--5b419e1f-e314-4028-a159-ef1808d95244", "sighting--95728f89-853c-4f64-99b1-5659217740f6", "sighting--2af03e5d-3c06-4c46-9672-fd030d404778", "sighting--0197e8d0-599b-478b-b885-58dda1793158", "sighting--5fbd3c73-db25-49cc-95de-36c2d06b8484", "sighting--78e8471a-ce43-4dbb-93f2-862b506e15e6", "sighting--5f3d266d-912d-4ba9-b465-435e6f30b98e", "sighting--4aa66e51-a1af-4bd2-9a29-9a3c2c09312e", "sighting--e56d4e49-efd7-4250-be0a-f16a2761c47a", "sighting--6c670a8e-196f-4b3b-9a73-fe921106dbcc", "sighting--c1aa661e-d055-424c-9cab-3a1f4a20f7be", "sighting--992a3713-9f8d-4521-aa31-ffe2c71f9461", "sighting--b6ed42b2-ac23-46e2-b40c-f6a1675e26f9", "sighting--03d61a87-4311-4700-a090-37598181abfc", "sighting--2807982d-534e-485c-ae75-342818c208c0", "sighting--7e1e2de6-784d-4022-9013-6b98f3d1fb87", "sighting--cadcdc12-b98b-4345-931b-9e3c714c7b32", "sighting--c56abde5-0786-4949-90eb-c144da0c4725", "sighting--307fbb72-a67a-401d-877b-77ba84694bb5", "sighting--67a7821d-6491-4ca0-9e13-ea82d5bdcd17", "sighting--1c050468-77c7-457b-ac2b-35f586dc06cc", "sighting--ad13f96d-70e4-4a0a-9736-a01970d0f2d4", "sighting--24f831a9-1bfc-4b6b-8592-4c74f0b02371", "sighting--56e68f08-0fd6-4b07-a03a-afee22d5442d", "sighting--df35f6dc-f83c-43da-b119-640a0840a942", "sighting--7bab371c-6828-482e-8656-46cf0c72c1fd", "sighting--1d689296-d47e-4bad-b396-734344bf1486", "sighting--51a1923d-6329-4389-9b33-71d9ebd031dc", "sighting--281a32bc-1fd3-4389-89d0-7ccdf6cc3347", "sighting--898d3a9e-8092-4c16-8913-ddbd50077407", "sighting--80871600-fd9e-46c0-88d7-cac3837e55bb", "sighting--cb217da8-aa49-4123-aeab-705ebb84c3ad", "sighting--fc401e93-6ee7-4b88-baec-465a9dde9e1e", "sighting--6bd1ab17-c474-4100-b870-cc6cc77a0a09", "sighting--80839572-14de-425b-abc1-9ee594030e9f", "sighting--938c746a-6d0f-4f68-b766-b71f0dbb2463", "sighting--ffae4cbe-1cc9-4887-b488-217b58d71595", "sighting--8ead3d16-019a-45bc-b342-527fbb82c114", "sighting--6a0b9ef8-0748-4370-9fd1-b3cbf9e90d20", "sighting--8917e371-c9b2-41e5-9322-898d2e9e7d48", "sighting--413f9321-74b0-49e3-a5f6-11eba7463402", "sighting--f47685ac-fc97-4307-baea-f8bc82e03ed1", "sighting--5513730c-6484-406c-a4a3-851e2ac7ae33", "sighting--f2f6f43b-2772-4b38-ae68-b9f0b3ffbdb7", "sighting--b33ae918-50fa-46c6-97d3-045860e58924", "sighting--3d304f6a-fd8e-4425-ae11-b9bda9490a0e", "sighting--961f349a-92f2-4402-8258-d42f402d310d", "sighting--f2bc26ee-03f1-4b73-a53c-d3d2c21a9098", "sighting--1ff4e723-31b2-46cd-b92c-c2b978bc754f", "sighting--b7a9b730-e1b9-424d-bef3-8556d544dc2b", "sighting--13967022-419c-4915-a82f-f2532f487c3f", "sighting--97649b66-7074-477a-8e27-07cbb845b1b3", "sighting--b9b87496-8b8f-45c3-9862-838670d1b777", "sighting--dd5c3af1-f93c-4f8d-925e-fc0cdbf413c3", "sighting--fcb8247f-d589-45e8-97ef-0464c3a262ee", "sighting--b589f22d-4a86-407b-99d3-32a711e18cf7", "sighting--328e33cc-6377-4a0b-8ba0-b8a85b4b2d0e", "sighting--7739ab89-bb26-425a-aa26-4f5045bd2daa", "sighting--34c01d65-4540-4b12-a7da-5ebccbe18dc0", "sighting--28498075-46be-44e6-9edc-be370fcfc60f", "sighting--343ddf96-a20f-4412-82f3-f984656b7cb9", "sighting--4b8b60f1-4fd3-488f-af87-f34f1d384518", "sighting--b6c7b0df-8120-4020-8a3f-b6305efa8fa6", "sighting--3964a929-8214-4769-b300-bae0b5ebb37d", "sighting--7fd2ea6e-b5ca-4fda-bd6d-641ab48f2960", "sighting--fc61ce6c-169a-48df-ba63-2b73ca0a67c0", "sighting--c119e6d6-6c91-44af-a83d-e3324dbc0be9", "sighting--0e68e1f9-dd2d-4170-b2d1-a66f604bf176", "sighting--2d910406-2219-4a3f-96ff-aa7cc80740dc", "sighting--88370e2d-f184-408b-ba57-444f96dcc1a5", "sighting--dac9fb44-0585-46b2-851e-0b51013857a6", "sighting--962808a9-2d55-4c7b-92dd-d844a9684382", "sighting--1e4d6d43-4eb7-47c5-a150-a44bee3870ee", "sighting--354e02ad-7a52-491a-beb1-792be4fcc5c1", "sighting--d1d3514e-cea2-4b13-ba5a-6cc8d972efa6", "sighting--10e39c24-4703-431e-b191-38bb51164d7b", "sighting--d85d319a-7b17-4a7c-a8a9-2c95e304f544", "sighting--3b7783fd-7607-48c7-a6a1-d3043babdba4", "sighting--14d7ba8f-ed1e-4658-8b6c-a8c69428db8e", "sighting--77e2fe71-dd70-4edb-a62c-b263648f31d9", "sighting--936bb5bf-ffb3-4430-87c7-52f422f70a9b", "sighting--fbbd4b58-5dd7-4187-9e9c-0fe1aca0b0e1", "sighting--ddfba9ab-11c2-4beb-8bf3-3046afc4eb1f", "sighting--6806adb4-8381-4eeb-b4f6-041e27bafaa4", "sighting--4dc8b318-b1cd-48ad-b6c0-16c293b240ca", "sighting--31ce03fe-89c8-4463-80a5-a54eb1eb66ab", "sighting--73f2ebd6-be51-4f33-9bd2-cb606fd7189b", "sighting--152bb023-cfdd-403e-87be-26f312376a4e", "sighting--9c1b6aa5-2107-4840-b6cc-6f9d5dd2f939", "sighting--0a49855b-c182-4db1-a854-8c0d06bade0e", "sighting--3e337fcd-3345-46db-ba83-f8a74153af12", "sighting--2d1e33d0-3307-4469-bf4f-8ca63a0cdb40", "sighting--73a933e0-0a6b-4983-8984-9468cfa5caa9", "sighting--39bb2637-3d64-4e65-b7ab-c1be7bacb213", "sighting--45541904-0ef2-49af-8828-2ab69738122b", "sighting--88d480b6-dab6-4ebe-ac3c-7732cb0dd6fc", "sighting--24c8294b-a429-412e-a66e-9797039a28f6", "sighting--6c458b81-26b6-439f-9404-4bf7bb4d6a3a", "sighting--a22d5e68-1731-4014-8f89-77a6f2361410", "sighting--329e309f-ff8b-44a1-a4e3-8a78864f740e", "sighting--b6352096-0925-405c-8746-ea00f7fc31d8", "sighting--69a0c66b-cddc-4e3a-be33-64137b24a45b", "sighting--20ceb69a-1b63-4a3f-a9a1-d76998c3feab", "sighting--a1ae5721-bc5e-4a96-b7d5-52b744d9a04a", "sighting--a1e68ac4-ce3b-4018-a86e-f47543450459", "sighting--7547e837-d50a-4170-ac8b-b6d4ad977650", "sighting--f2e72224-09da-4eda-8c14-7f0e7ef9fcfd", "sighting--d65356e5-d5fb-4ff4-a6fc-3be6a0fb5d84", "sighting--9f010e24-79ce-4f4d-a66d-c7068d789a97", "sighting--8018ba91-fd25-4f99-8453-9077f5705db9", "sighting--5435de3f-5318-4cd1-acff-e7490e9e7156", "sighting--60a970cb-72b6-4775-a9c6-9c11b6005dc2", "sighting--d9546d9b-e5e9-4a4b-ad00-65901d4f148e", "sighting--b37db2cc-ea5c-453b-91db-fc93123c4b78", "sighting--757a807f-ced5-4a46-9e14-c4bd126ea1af", "sighting--acb069f0-2695-4197-a3d3-abd8572b04d3", "sighting--4239aa13-c893-4866-b42f-839bd931e2ba", "sighting--cfb26d35-87b1-48fc-a127-6bc509980fea", "sighting--98b19a40-690c-4d3c-ad46-aac1e81a9b68", "sighting--7ee8398c-ba76-449c-b4df-ed8796d46ccb", "sighting--a1d5fae0-844e-4010-bdc1-5504f30cadb6", "sighting--39c15539-ed07-4f14-a2b5-80a484f481eb", "sighting--5c3a2e0c-b771-4e66-89a6-86c0459671cf", "sighting--19944333-3094-4ddf-ad3e-5daae5c5472e", "sighting--c418901a-3d32-46cb-abac-cc10e0f04c83", "sighting--5b5a70d7-9983-4019-a17a-ceb3f462e34e", "sighting--d042a197-5162-45f8-9a84-075a6e9686df", "sighting--65e6aa32-d7eb-4dca-85a5-6c5a8c8867ed", "sighting--bbf6888e-3150-4254-8d41-674cb0ac77a0", "sighting--39d157b2-9b56-4094-96e1-bea8705dd427", "sighting--3875f678-a05c-47c0-87d6-aa405d8cd1f9", "sighting--367f7661-8678-48e0-bd7b-3781d43071fe", "sighting--77d7bb1d-4542-4921-8363-9a7c69fdbf71", "sighting--69b915d6-9a6d-454a-b9c6-517a1348091a", "sighting--4a3acc3c-d20e-43a6-bf3b-8052ccfe946d", "sighting--7c6c7884-580b-45cb-8b2c-cb6d2af031e9", "sighting--e2a571d2-09c5-4bf9-a0e4-b2517b9766f8", "sighting--e068a360-9950-4baa-bd5f-5bec649c8fda", "sighting--a859ba49-f36b-411d-8162-ac44eecb671e", "sighting--11091eba-767d-4684-aefa-d9ca37826e12", "sighting--b5cc9f91-087d-47f7-8d52-3ca3f26e1462", "sighting--23df8859-84f5-4d3f-93a2-c0c52e60e450", "sighting--b06c3814-7e6c-4163-9c3f-9067aa95e687", "sighting--4f9b3a68-9d71-420d-b345-ed79b879c2ea", "sighting--0af4aa99-6712-4cdd-bf78-ed41eaf75bd8", "sighting--ab153f75-0d9e-4d69-b7db-2c25b52057fa", "sighting--b2476e10-6321-49b5-a3dd-fffcdd45d21d", "sighting--523cecf6-552d-4af9-8c7d-3ca31b65b361", "sighting--1490bf92-58b6-45d6-a9c6-345d87523718", "sighting--1e1744de-0e8d-479d-8c2a-a2407a8da6f3", "sighting--ca8ce12b-ec4d-476a-96f4-719d05c7d0ef", "sighting--ac4328d6-724c-4236-8afe-82c2a116797d", "sighting--5fc16902-6aae-432a-b08f-f6bd253b62b1", "sighting--5398af50-df5d-40a3-b3a0-eed3f0f89fab", "sighting--f4f45686-b880-47d9-90fa-82bee2f017aa", "sighting--6e2d8148-bdb3-4b62-bbe3-3d0420ca6882", "sighting--89c00b9a-b44f-426c-a547-b61b114014ae", "sighting--c4d22d75-2893-4089-aef2-306ecbddb347", "sighting--733ee48e-2cf4-4ccf-8354-a2877241e625", "sighting--2d9353ec-7179-48d8-a77e-6493f0718f6e", "sighting--dc42d160-ad96-45b8-aa8c-271e2afaa03f", "sighting--c81888c1-da1b-4344-97ed-6950b9477d1c", "sighting--5515b8be-badf-4301-af59-2b08d4d35c1e", "sighting--b80628e2-7468-4bcc-b787-9f5d76946bec", "sighting--124e7564-bf0a-4ef6-8db3-f072decdfaa8", "sighting--77e51be7-2abb-4842-86f7-f1925805d6ee", "sighting--96ae5184-215d-496c-80e2-8896000e70ec", "sighting--7eecb478-3fdd-4041-b5d5-75a23119ae68", "sighting--23eca328-90f6-467e-a4f6-4d7fb868f3a5", "sighting--c5d77449-301c-4e68-a95b-0a231559b12f", "sighting--dc561f1e-650c-41a8-b407-87c731bcb43e", "sighting--765dd8af-e94f-43e8-9a96-4404698d9ef4", "sighting--67735eff-6679-4a9b-a8e4-ddb861c43112", "sighting--b03146e1-3d62-4e4d-b65c-534803595a6e", "sighting--1edaa08f-116a-4563-b4e2-d67e94ba500c", "sighting--e882f426-798c-4336-810c-fe3a3d802626", "sighting--13359cdf-0066-4d28-9c67-726a31cd671a", "sighting--c5b0443c-77c1-4286-8b3f-0b2cc984b8d1", "sighting--532ee01c-5307-43b7-bb65-b7d2e98d44d8", "sighting--bd101bb0-39b9-431d-83aa-56bac21f25b5", "sighting--917e7a5f-e1e5-49c8-8b9d-0207a431e449", "sighting--27c572bd-75b6-4777-989f-03e556974e68", "sighting--19a08915-d565-4ca3-9f5d-3c0262c8ac60", "sighting--6b176a37-eda5-4bf2-88bb-3d232d3d69e9", "sighting--e7d6a0a6-ed37-470d-ae78-5e7b6bf79004", "sighting--b9f22e69-be33-4cab-a28e-8043ae85f0d9", "sighting--4ad6e943-b40c-4553-b3e5-e4458ae7741e", "sighting--cd174355-28bd-4cf0-bf4d-2dcc51517460", "sighting--41e014c2-4d95-402b-ae29-d7e6675fee60", "sighting--e97a6c08-c755-48ed-a9ae-9a25474e039f", "sighting--b1987168-b33f-4900-accc-85c0ee3995fe", "sighting--4988f6db-0cf8-41f8-b124-64444e5f4d38", "sighting--989e74ce-4683-44f4-8518-da90791c2783", "sighting--23ddb6c5-40b8-4b62-8eaa-212ef5979764", "sighting--1217e776-d1b7-4b47-a1a0-b089e119e3a5", "sighting--c256f5c0-83f6-4f1b-862d-f50ec15e5a6d", "sighting--62e0639a-4b43-4476-bf0e-69b5d7dbbdc2", "sighting--93127186-fd32-4baf-b6d4-e0059f40eefe", "sighting--68fadfa9-d015-438f-862d-1c6a0c0eed42", "sighting--0cbeaa2e-3a0f-413b-a90f-e59a7a2037df", "sighting--e1c101cc-7b89-4db1-a82d-0a3687ed6035", "sighting--d46678ba-88c3-4089-afd3-8ddeca657c18", "sighting--77f9d121-f418-486f-a185-b1ce10978ea5", "sighting--a9ec984f-bfcc-4798-ba3d-398e45557a3a", "sighting--84b4fcc5-2157-4b3a-87c5-deb3f369de00", "sighting--de2b1159-80ab-49a9-a886-212fb02d294f", "sighting--d1de746f-d4e1-42a3-89b5-dc86d784e830", "sighting--25d7aac6-293d-40d8-a2a2-f1d2f1638d65", "sighting--2c2f4f3f-24c7-482d-a5c5-9f8fd4bea97c", "sighting--6306ed7b-ee4b-494e-bca4-615ccfabaca9", "sighting--122591e1-0b91-422b-8604-e3ad97fe6f73", "sighting--0c9458a8-ad41-4904-945e-68408138eaf5", "sighting--fa62c200-2ebe-4def-a11b-e17dca950f03", "sighting--87f20abf-c2ed-43f8-b395-a98d616e015b", "sighting--5ac424cb-f8ef-4ad8-b2f6-a4027591c38b", "sighting--90c0b35f-0599-435e-bddf-4f7b02869b30", "sighting--935e7b13-d64d-4fc6-a1f1-fba467449901", "sighting--a6b079cf-f10f-4a86-9d32-d2fe8509d7a9", "sighting--b40dc19a-ab30-487a-a238-cce2b4eba4c4", "sighting--8cbdc1ac-fbe5-434c-93db-70828566600f", "sighting--4d2603af-db6d-4e34-9c92-4fc5c08557b3", "sighting--3cfefeca-34ea-4b85-b77b-881d6070766b", "sighting--08bf060b-2091-4c9d-811e-441809f0a31b", "sighting--f59e27ee-1053-4941-86d7-7098a0d13818", "sighting--bb1cdc00-8cce-4004-bcb6-490d14985d48", "sighting--6044f540-c866-409c-912d-84e95eaca6f5", "sighting--50f72303-6ac6-494d-be03-de585a451d39", "sighting--8fa4e63d-3ab1-4557-9332-b5809b226705", "sighting--a8536956-1185-4863-b9f6-dfa6b5076700", "sighting--f0312152-ff89-49ba-8850-f073b66ff134", "sighting--6a28621d-388a-49a6-85c1-7c0b41a0e5ef", "sighting--b2a4d4f2-802e-4e73-93d2-2d468cd389fb", "sighting--adca2c0e-b4aa-41dd-a348-264ea87df0ba", "sighting--5fa7fd80-2f73-484b-8ad1-553640148f6f", "sighting--9164ea06-f38a-4a6d-8d68-522c60bae20d", "sighting--0d862ad7-9aad-4423-af08-b09abac08f03", "sighting--5745238c-3e87-4b91-8667-f60f7d8cb3e6", "sighting--89d8fd02-9e6b-4de3-8e64-1f5f5bbda426", "sighting--54f242b4-3269-42bf-9481-88113a27b96d", "sighting--8a2f1cb4-039a-44e8-82a4-2e213b9ff990", "sighting--baf58648-3af7-4f06-a213-f52750f46ffc", "sighting--564aaee8-64c6-477d-bef0-3265d79fc033", "sighting--97cd5ef7-491e-4c92-8aef-81a530ca538b", "sighting--ec7d4b9a-a0e0-4f19-b55a-128adb35bf56", "sighting--6ba7e2d1-c3b9-429f-b789-e37d7cee0eaf", "sighting--da18d259-ac54-4fc1-be34-e3d5a60c3a8c", "sighting--1326f0a9-081f-4c36-87ae-88545665d7cf", "sighting--bf478a5f-88d1-4242-a430-b82aa9e5523f", "sighting--1f2dfb7e-97e3-40bf-88d7-561e1d55ca49", "sighting--30eedc83-4385-4e5f-8c60-9d0425c62482", "sighting--f7493e98-65a5-4114-9b29-0a1a682facc2", "sighting--3248e6d9-03bd-4a17-b6e7-daf4b0b20303", "sighting--892c435a-7029-48e0-8e9d-65634e56ec6b", "sighting--2c8946c5-3c0f-48bd-bbc4-a56b3f375135", "sighting--267eae9b-c713-420a-a2b7-3e7517031939", "sighting--f1f90c54-6d26-4594-80fc-d45a8ef4f286", "sighting--231b0d8f-f1b8-49b4-9273-2b12ec243315", "sighting--fd66d8a4-ce5c-4c5e-9f05-656b795fc1a3", "sighting--85bd30f8-844b-4bcd-9d18-f77886665454", "sighting--d56a545f-9871-47be-8539-3e41c47d5b1c", "sighting--915984f6-2a59-4ac1-8baa-0a4b83b849fc", "sighting--43e800a5-aa7a-49d3-a980-7081b3d18f4c", "sighting--9812f6d6-e567-46ff-896b-8456346b8e6c", "sighting--cbe8adc6-13a7-449e-ae4e-f3c33a3ccfcc", "sighting--61341ff5-6a98-4759-a827-7e63a7816032", "sighting--8f123474-1787-4121-ba2b-64841d1358fc", "sighting--08a5837a-260a-497b-80bd-231e97c74e10", "sighting--ceb43890-2d95-498f-8bcc-145ad39f1368", "sighting--904f4c20-7703-4a7c-b6fe-0b54c4a8522c", "sighting--1a43807b-6cab-4eef-aa8a-55ce9b8a23a9", "sighting--86a82dbb-901f-4d54-a2a8-bd1575414ef2", "sighting--95829e3d-bfaa-4cd8-96ec-84648399ad35", "sighting--9a8c8af2-9637-4f2a-a985-93ac64b106ba", "sighting--fbec4ce2-e3bf-4d7d-9b9b-23c44eb53e49", "sighting--82b714b7-2461-430b-b9a6-5d79e592fcf7", "sighting--4ac3338b-0fac-411f-8fbd-c9dc6601dae7", "sighting--ac8b3fab-b6f4-462a-95b1-4afe93b2de53", "sighting--a3bf2530-cd92-45ae-8c63-cd1bea03a78c", "sighting--e6e88140-a4ae-49a5-82c6-e5e1c153416f", "sighting--dd70b566-e080-421c-b9a4-a047ca4b372e", "sighting--69332578-ded5-4424-ae7e-70a2c4dcf842", "sighting--26c5552c-73a9-47e7-9249-83cc4371aad7", "sighting--c913e7b2-f609-401f-a366-1aa78ac47e4a", "sighting--55154fa4-8b83-4b42-baa1-7ae0436e9d99", "sighting--545eb21b-7072-4397-81c7-b757db520b32", "sighting--e16118a9-cdc3-439c-93db-0821bd9b211c", "sighting--39ce0657-65ab-4807-88ce-849cb06aa56d", "sighting--855ac657-65c2-4131-97e7-3ddf8fd4aaf1", "sighting--b8eb5c7b-fd5f-4bdc-b8e6-4d8e4fd1869c", "sighting--ef71211a-a120-4308-90fc-62c2b8619199", "sighting--444f6134-70c2-46b1-ad96-1187f6abbadf", "sighting--0e329489-0ebe-4dec-94a2-2e9ffecfab77", "sighting--e213188a-4a52-4691-aa06-f35706d6d5b6", "sighting--a9b890c9-c6f3-4e64-8e6d-95a73988a944", "sighting--e7a76d45-a40b-4d2c-bab0-d8857538e11b", "sighting--d73590e4-3dbb-46cf-9cbf-3ead4d357aeb", "sighting--e2270426-2532-479c-ab86-229ce612e9cc", "sighting--cc23e374-95e6-4139-b730-47f47a3fc992", "sighting--2a4bbdd0-fbbe-494b-9b35-e27fb9f079bd", "sighting--a194a3d3-6da1-4427-8ca6-597374baaf8b", "sighting--730e56a7-33d1-49be-acf9-48466b8ac526", "sighting--f1ffa26d-ed93-4b54-9ec4-81280f1ce424", "sighting--566ad3b3-f87d-4071-85c2-1775e6059d79", "sighting--af3dc6b5-80b4-4e85-a942-823f041b9994", "sighting--fa40745e-fca5-4ab8-8eaa-90f23f4041ca", "sighting--5c3a2a2b-8a93-4666-b165-5b4224dc9119", "sighting--00116309-5c20-4b9b-9d76-b19fbc3ec120", "sighting--a1fad5fe-562a-4a72-b956-0320d2e323e1", "sighting--4fb957e8-ef64-4171-881a-0c8ce4a3221a", "sighting--107bfab3-5752-46a6-8c66-a10ebc2a6cb3", "sighting--b5e4fba3-c082-401f-91c9-de303c4d60e9", "sighting--72b52cac-742a-4c05-8ec6-c60574db5951", "sighting--fd70179c-92fd-43e1-9448-c49bf1952d1d", "sighting--231e9858-dc72-44e1-8634-c57692a99da0", "sighting--6e098541-fccc-4be3-8a49-9298bd20f807", "sighting--9e754904-0d9c-4b9c-961e-5532bed8467a", "sighting--0869348c-14d4-4daf-b5b8-f76ca8f94fd5", "sighting--bf4a4f41-c5ed-49a3-9e70-2dbc2b953c73", "sighting--7ce00e87-ea7a-42bf-abe4-8ef2ca60eec2", "sighting--eb1ef774-84f5-4680-ad01-4a99e5def927", "sighting--d88d5ec0-5b94-460a-8a49-18231b9a80ff", "sighting--e8bc83e0-9a91-4420-8ffc-00fc3d5c6b05", "sighting--03c4f286-eb83-47aa-ae38-63f9187c4e31", "sighting--a393aafd-88a1-4e5a-95bd-51e5fec4426e", "sighting--6001dd48-7723-4953-82c2-3dd3dbf04b26", "sighting--97f55be2-37a9-44c3-b849-334d9efaf3a2", "sighting--2dd1b462-a24d-4e69-b00e-d90c71430130", "sighting--84e6d982-4aec-4745-b498-0ccb4b78a9cd", "sighting--c61b3143-d04f-4aea-8886-05127f719bf9", "sighting--85488f0a-b29c-4568-8137-f41b17811d74", "sighting--074e151e-7b0f-4550-94b1-b59b765494aa", "sighting--37f0f19a-8e50-4759-8851-18b53263bcc1", "sighting--bb2abb1a-82c7-425a-b584-81a1e006686e", "sighting--c30956bf-d280-42f2-b3c3-2459304c9258", "sighting--587ec350-b004-41d6-8e38-5606fde4b806", "sighting--a5c1f1e0-b79f-4ba2-84ac-0877c2b9410f", "sighting--afdf31df-f030-4c73-a3e4-c92a1dd536de", "sighting--6438ae7a-530f-413e-b8e3-215a195c50da", "sighting--46447ab2-6656-47fc-8b35-932d0e99b215", "sighting--45e18632-973b-4edc-b8a5-26a3152b435c", "sighting--5ebb2c8b-12d1-4e16-b7e8-4c4f7a573a02", "sighting--c36a834f-71ee-4157-857d-6e709219b015", "sighting--67e75bb0-18c8-4820-83d0-67a16b67acf5", "sighting--99c28bfd-ebca-4876-ac44-d9a9f97e7698", "sighting--c7ec80ed-54d4-4b34-828b-a4a47ddfd117", "sighting--3eb5aed4-6603-4d58-8fcf-8db726d7161d", "sighting--3f4c009b-a6dc-49c0-9440-347153152c88", "sighting--0c815c38-d2ed-4854-b02b-52411cd27a1b", "sighting--327060aa-85dd-4384-bdd9-620bed4a20b8", "sighting--e8815810-7744-45ea-b45a-68efcfc0031b", "sighting--0668ff88-0de1-4e92-b29d-0fa1c1cdf6c4", "sighting--c1c59767-23bb-4347-bb45-1fed9d0ba10b", "sighting--daa0e4af-482d-4461-838e-a9953785e067", "sighting--2266c49d-4155-4534-ab68-d7e9f38c3e0c", "sighting--690870a3-7ccb-45ae-a186-8d82727018e4", "sighting--88a497c1-b5e8-47a2-b1c1-d0e4576fa392", "sighting--7c603cf1-9435-4ca7-8b22-9317ce523411", "sighting--7290c26c-1f35-4187-842f-32ca5ff5c28f", "sighting--e6f30fac-212b-41bc-ab92-8c86f7f11600", "sighting--79f15a22-b8f5-4b1e-9ed9-0630b03e59d9", "sighting--2a7e5a52-0b96-49dc-80e4-6eec831a7cba", "sighting--970877a4-06af-49fb-9a74-eff88863515a", "sighting--aa24efb6-541c-49df-b091-43b669cb0d64", "sighting--6ba528dd-1205-4b06-86a8-35b6871a00d6", "sighting--b76f5814-09ad-4c13-b4df-9dc441ec2f7e", "sighting--fbeb2b15-423b-410a-8c19-70c0fd918eaa", "sighting--553f103e-8c20-4c1c-baf5-0eed69fb1bac", "sighting--f4f5d6d9-8d00-4eaa-867c-3bff7dedd6d2", "sighting--3f7a1ba9-081e-43a6-b6a1-2242acd79c0c", "sighting--ca8d70ac-2667-4cb0-afb3-4c74a49bad79", "sighting--456ebe09-1bd3-4737-a83c-0c2618cc858f", "sighting--9bc95d10-fdf2-44ae-9c2e-e44c7fd08004", "sighting--252bd6b4-07a9-4d1e-93a7-429f74f963f8", "sighting--32de7aed-13ad-4003-bc6b-02ef6f9597f2", "sighting--42796d03-1841-409c-82a8-05b92759ef3b", "sighting--4f5f589c-0cae-43f5-ad72-2522d8cece18", "sighting--0ef62da7-edf5-4409-b590-2da4c916a224", "sighting--fdbf4709-c4bd-41d5-b592-ed716515ef60", "sighting--c2798468-f0f1-43a9-8d1b-9f0e88c2193e", "sighting--8eb1bb75-2169-4b96-b69b-cc0f3e6fd3cb", "sighting--1e6db36b-0db9-427b-9732-f3ea6695d85b", "sighting--2d394362-fcee-4e92-95cc-2e83eeb92d5e", "sighting--7504041f-5efa-46de-adf7-a7ace409df16", "sighting--2d2404aa-d5b1-48b2-af05-73e4e0fc4d02", "sighting--69893231-b2c3-49ef-b1cd-b282be774511", "sighting--f39d047f-1e46-41c7-ab5b-0d725ae02291", "sighting--54d07bf3-6b11-4f99-8a12-fb445c17a478", "sighting--e6bdcb44-9deb-4da3-8fad-25b63ea71405", "sighting--e036055d-fa0c-4abd-a4bf-3ed74359ba3f", "sighting--a529b6da-92bd-4e10-bc17-9294e830ddd1", "sighting--0850a4a7-33e9-4ead-9c3c-a8f20faa8975", "sighting--080eb952-02a6-4bb1-b0d0-caa328654c68", "sighting--f7f0c268-b948-41e8-8868-f7aa70a72f0c", "sighting--a20d9c0e-5072-4acf-aa14-820a5e28a6b2", "sighting--4035a142-4737-4709-a575-3d79ae5ecd17", "sighting--8448d69c-920d-4f9f-8937-f920705bec82", "sighting--ff41b424-f66e-4452-b00c-7e469f1e2f15", "sighting--9aefb07d-a9b4-4226-9233-41c9502429a8", "sighting--5bdb48a3-dfe5-4c41-a471-7841ed51e49c", "sighting--26078cdc-88b4-402b-9c5b-f7253e6672e8", "sighting--6b2cb851-767b-4b27-ba3f-1a54e00fe768", "sighting--8a32ac0f-0020-4bed-a6c2-33a719074771", "sighting--fc1dbdc9-b9d4-4a47-9614-f23535fafb22", "sighting--fcdeeb49-11f3-49ad-b6f5-450e07e94880", "sighting--7ad5c069-eb67-4b61-a024-c7cd090637b6", "sighting--2a5c7271-dab0-4f53-ab4b-10c00b5bff52", "sighting--7e347f07-e926-46f4-850a-dba0012e8f8e", "sighting--a8a1e183-e917-408a-91b1-92385fed7637", "sighting--eae78565-6a70-46c9-9ad0-7bfe86718723", "sighting--b509d121-2c58-4a8e-a9b9-2d3f4320c584", "sighting--a6194f39-21d0-459c-8107-3be3eb5282ed", "sighting--0135eab1-6e9d-4810-8b3c-b315940a72e4", "sighting--92991a90-9d2d-4e15-ad58-6d09e509a1eb", "sighting--0fc9b72e-260b-4258-bd6b-7b03e15cc73c", "sighting--4ef441f8-71d8-4de4-b40f-8935731defff", "sighting--7c6ffd3b-24d8-40e9-8393-5cc7686bf7ad", "sighting--cfeab88f-437d-43ca-aea4-d13b755beacb", "sighting--f91a798b-6efe-4e3b-aacf-68ac096b05ac", "sighting--0fecbd79-30e0-4ef4-a51b-6b99228f4563", "sighting--1165cf7c-996d-4823-af8b-af5ad26951c7", "sighting--a60e5a10-c7ba-4b0c-95e7-4a284b092518", "sighting--0314bdb5-9c93-44c0-99aa-7054a8e45ded", "sighting--0f6d0f6a-d9e9-4e42-9114-717b0ef517e0", "sighting--307421f6-553e-4438-abd8-e66cb75347e7", "sighting--7e1c982e-2060-4c79-bc1f-899820ff1de7", "sighting--1966dbf5-61cd-4e0e-b1d0-a75cc81f6bd3", "sighting--b6a7fbe0-b35a-4e60-90ac-4dfb38cdeed5", "sighting--413cb981-a3bc-4612-99d8-8f699007bfcc", "sighting--96caf640-b6d0-46e3-a3af-6daafca86f5f", "sighting--b8087ca5-b72b-4249-9ab5-6e26525b01e0", "sighting--0164c23b-bb96-44a2-a591-4a2492d6a020", "sighting--767ceda2-ca8c-46a8-90c8-96e3a08a79da", "sighting--1a1d02a6-d016-4cb7-8e85-8ed6381611e0", "sighting--df635b4e-d60d-4a40-9ab8-2b4fa2145903", "sighting--e68221d0-bf8f-4d4e-93e4-df68f191bcdf", "sighting--3855e18d-217c-48a3-9a2e-fd6d83d18aa2", "sighting--dd668ec6-fab9-4a4d-84a7-7ef3ed541d50", "sighting--50991a99-b970-4991-a847-3bf11422e4b1", "sighting--609f200d-a882-474e-ae16-2c6d77753ce4", "sighting--c1f7238e-3186-42f4-847a-9ee63ac5a9e5", "sighting--97f017c6-6367-45c8-a13f-e8a4c0975930", "sighting--8abc1776-c1f3-44a5-bb3d-866b59c498ab", "sighting--0c5ae0d2-bec3-420b-8cf3-6d7d42272d1b", "sighting--965ddd8d-0042-4eb2-b012-70ff88fc426b", "sighting--d49a9639-8274-4637-a57b-627d8072bc7c", "sighting--c5368c95-acd9-44b8-8a76-1df2d168a960", "sighting--15f9ff3a-7c3d-4627-a726-574cd8486269", "sighting--01d19a3b-9b73-4593-8441-5e4bf1252a74", "sighting--92932a25-a699-400f-abcc-7367041cb578", "sighting--4aaca5e3-377f-4933-b125-0aa66e8ca142", "sighting--0fa098c8-6860-45ee-9120-565e849dd760", "sighting--e76b83b6-6323-470a-afda-31d5807d66a6", "sighting--2864cd5f-39fb-4318-8dbe-00811319abb2", "sighting--213a331a-aa05-4e77-a6ec-a967be75b3dd", "sighting--cf31256f-e888-4f62-8750-f6e06aa40125", "sighting--c95cdb0b-b54e-4f76-a9b3-30d73f817dac", "sighting--b6c3ce1f-0cff-449f-bd0a-76e12577554c", "sighting--bfb1fd76-facc-40f0-8ba3-7f7848427aae", "sighting--bcceb5b1-3f01-4542-8248-a4c61aab4c52", "sighting--974be0f0-4659-4706-96b9-3919347216b0", "sighting--c5bd551c-42e8-4e7e-ae1b-c5b70280ccec", "sighting--6d0e4207-4863-41b1-8ed6-02b9a9634b6e", "sighting--196de4b1-561c-42be-aa7f-da2b2c7e1e02", "sighting--652e37ab-8f5b-4544-9f61-79948b7f8c11", "sighting--5db73c9b-b2a0-46ec-af20-906ce432b0d0", "sighting--ce8e9036-1249-41d8-b141-ab7ba57a9ee7", "sighting--ff5c404d-937c-46ca-a376-5cc05f602c61", "sighting--9b1a4185-8e36-490d-a813-0ce6d24c9e82", "sighting--dda62687-d2a7-46bc-83b6-b9fb1066a5eb", "sighting--1d819124-7a2a-42ab-b13c-816eff4b7b76", "sighting--7cdaf4b9-4efd-4887-b003-6583f60b12a8", "sighting--8ceae2ef-42c8-47e2-b21b-48c64fc29ad3", "sighting--c2dc399c-eda5-44d5-be9f-d78b36ae5839", "sighting--9058cf6e-b8e8-4606-ad2b-14a5ea35e3d2", "sighting--b7feb65a-1597-45f1-9fa8-2d8f13d6769b", "sighting--59a8a99f-3a34-41b3-bb2b-d0d7bd2de632", "sighting--954f10c6-acfd-46d0-ae26-39c8bf581329", "sighting--0b395157-2385-4b3c-83d5-78f1328145ac", "sighting--1776f20f-ea53-46f1-b9da-640de57149a3", "sighting--87660ddf-4d38-4c7f-af6b-b05f097403c5", "sighting--de867b7e-e22a-4377-bc28-f24d08af2e8b", "sighting--a4a003b4-e489-48c9-9882-1749c055fea3", "sighting--17412120-15c5-4bf9-b09c-ac71bb239709", "sighting--7bffc377-c57b-4f53-b2d3-e62f22665770", "sighting--d7a46ffe-0def-4b61-b3f2-d9798b871f30", "sighting--3ad7266c-7a85-4e63-aa92-5ab87fc166e2", "sighting--0521869b-500d-4960-83aa-6de765feb13b", "sighting--5b9f9f0a-9b60-4669-903a-6d0815edd9f3", "sighting--5ddcec94-6f37-4ffb-877c-a8723b11de19", "sighting--49a1b72d-9c3a-4d56-83c3-ece9f96d3fbf", "sighting--a8c7f1f7-26b2-47ea-9d30-a8ffa0ae857e", "sighting--240e61d5-d20b-406e-8c9d-6c4deb70a874", "sighting--ec3d53f5-0fb4-4fe7-824b-e9e8dee7fa83", "sighting--a8e74c91-17b9-4c80-b302-1eb18175d929", "sighting--1a524e68-27c3-4054-a00b-b54d86e376f9", "sighting--f919c140-72d2-44bd-8565-c2a76f815949", "sighting--09b084be-9d95-46ca-9d59-e9b78e3d29d1", "sighting--6d113370-6fc8-4ffd-b6b9-d517d72af37c", "sighting--7279c6bf-979d-4627-9042-857e8d5239a0", "sighting--1ff08605-dd79-4b94-87ca-425e1bab02b0", "sighting--8a02b207-61af-4587-8e05-edfcaa132598", "sighting--d56efb83-3e29-4474-8fdb-af278b243c7e", "sighting--f7ff55b2-fab0-407e-90dd-3ab32714be75", "sighting--4f33d0df-82f6-4099-9e75-de5077ea9bd4", "sighting--91d17432-f010-4a09-9bee-40f3c6f5a8d1", "sighting--45185369-fc2b-4deb-9bec-6d6e01ae973a", "sighting--ec00de4c-23cb-4082-bab5-8801daf67c93", "sighting--b4430810-e5c7-47b4-a2ac-8bb88ed71549", "sighting--f3dbee68-525f-4bea-be3e-d65be7017545", "sighting--a200ecd2-73bc-45a7-8d9b-a993e4513d3a", "sighting--a13e179e-eeea-4ce3-afce-9176060762ea", "sighting--312f344a-2918-4131-a650-318e8527ee9e", "sighting--273e80f8-e20d-4451-baa3-51f4ac7554fc", "sighting--392741d3-f20d-4998-bd7f-ca5488d21e66", "sighting--ec86fe91-36e8-4317-a2d5-a1b16b014d20", "sighting--1935fefb-c829-438c-8978-12ca28418a9b", "sighting--b711acb2-c18a-4305-9de3-55f193c79420", "sighting--c583c3d2-9ddc-4f8c-a100-df34dd68ec5d", "sighting--7c42dc11-5500-47ef-bf74-17419a079c0d", "sighting--50ff9e27-1fa5-4988-b9a1-f2e7fb65cf59", "sighting--6ceadbb6-1b5e-4ee1-97f8-32190ff84a17", "sighting--68918cb8-cc1e-4cb2-b361-17b5fa397294", "sighting--38612b4a-9cc2-4f66-a9ae-6e2f47799f91", "sighting--7fd3b4db-9355-4912-8eff-c7c4db510748", "sighting--f993079d-8a2c-4db3-8fde-7397845891e2", "sighting--a10dfb27-736f-4e23-87bd-8d1d66d83687", "sighting--58ce980d-aba7-4b5c-b2c5-afa1d6a97fbc", "sighting--e8367313-7e39-4cec-9724-9967a3dd9308", "sighting--06daba34-063f-4173-9d12-b8bf607915fe", "sighting--19fc6fa4-89f8-4e00-8eff-36e8df353269", "sighting--a7646511-bb9c-419b-bb92-824da5df7970", "sighting--3cc7e548-f56e-490a-8218-c3beecfca06a", "sighting--9740ecaa-f426-4b25-9506-4a20a9d99029", "sighting--64e9d376-69ad-45b3-ab9a-59d6e35163c7", "sighting--502bd904-694f-4bbe-9248-2b15fdfd3051", "sighting--c79be636-0166-4045-b431-b781d78c17af", "sighting--2e0b3465-3502-4a2a-b780-0d8d89fcc4bd", "sighting--838873ae-44df-4c09-aa74-445ba488443c", "sighting--2db9031e-7d2c-46d1-95b7-31b2cdc269d2", "sighting--ce09741c-0834-44f0-b8f8-40adbe6b9991", "sighting--02f4c136-99da-4dde-b784-766ed891d6b9", "sighting--97fdcf09-fdc9-49a8-b98b-8c6a6c40c34e", "sighting--01b5eb4c-46e8-471c-b9bd-3785434247a7", "sighting--afeeacaa-4fc6-4051-8c13-a955cf1ecb12", "sighting--55bff9db-a9a4-4c4f-b621-568fdd181133", "sighting--40db828e-e995-45f8-975f-02651127b9d7", "sighting--0b42808d-970a-4cd0-bdcd-97caedc3ebdb", "sighting--7f988477-e2ea-4502-9545-58832d39d148", "sighting--a2c41b70-0477-4d6d-b8c1-acb847738ed5", "sighting--18fbfe8b-0791-470e-8409-b0aa00ec1a66", "sighting--3a40d1c2-d7c0-4a9d-b4b0-37cc42252313", "sighting--ccc69816-ce98-4390-b466-42caf9416458", "sighting--4369c932-726c-4c82-96c9-404d7c5da4f0", "sighting--5911b06b-9e55-4de1-9b73-b16c36179406", "sighting--4d6d8136-63d4-49c8-bd41-b92accfad3bd", "sighting--4fd48862-b675-45ac-a79a-37aaf19cb010", "sighting--8af30264-c30a-449a-aa2a-268669bc852c", "sighting--75ca7d44-12b6-472c-a8e1-8191ca9c890c", "sighting--b188e936-4b24-4d72-b75b-994290e4b1db", "sighting--48b73e84-49c1-4678-9545-555350a0e10c", "sighting--1da3605f-5836-4676-90fc-6af8d18a6e3e", "sighting--b890a003-b3fe-4527-9f0a-c1557eb66e8d", "sighting--3bea0e99-cbf9-48c6-aefe-db483a9cee77", "sighting--c7cf42b6-45dd-4c89-ae57-e20367cc82e1", "sighting--b03050fd-15ce-4936-a6bb-bebd8b775c37", "sighting--812ac583-b838-49b0-81f9-f2d7c24539dc", "sighting--9526ffed-f932-48d9-aa9b-ffd99ce260b8", "sighting--b60a63c0-1a70-40f5-ade5-b7660c1fa1a1", "sighting--3a691582-13f0-4d51-b233-d89ee4bc7573", "sighting--1b04b665-eb88-4364-bcf5-1e4cfdf92f80", "sighting--bd3df0e3-c133-4f64-9a28-b7f92a3e8947", "sighting--fbced93d-2b6e-47b4-9ac0-d45a852b1455", "sighting--dfddc030-f4e9-4cf6-a603-3dddbdffacf6", "sighting--2bdea1b3-a98b-4575-a06b-76167a178a5e", "sighting--ae55104e-d288-49be-a91e-ed18dfacc9b8", "sighting--e370acc8-e0d2-4c7a-a636-f7e67313a1ac", "sighting--6e28f180-438d-48d1-9ae9-b8a45bdba61d", "sighting--bdfab203-3c85-4a78-98b6-0535d4bde2d4", "sighting--ebef5e8a-c7e7-4ae3-9322-4d30f7003f35", "sighting--a9c07b5d-5779-4397-b4bf-ef359022ec88", "sighting--97590d49-82f2-4700-a503-3346b49fad50", "sighting--ea3c0857-f323-4dbb-b7af-d90e21083fb3", "sighting--dcbf170f-7382-4c12-9892-3589e06915b3", "sighting--3f39d521-7d09-45ce-967d-1346526f8b2e", "sighting--eba62c7e-1e74-4404-a401-3dc56b2a34aa", "sighting--d4374b31-ad07-4dc3-95b6-9c4c50334eb4", "sighting--edcb2d52-2768-46dd-b7d9-c6900fc45d4c", "sighting--76408461-6206-455e-b2bd-5f72364c1f33", "sighting--23af6c8f-46c8-43e2-9e9f-af84d668e89e", "sighting--7014193f-f387-450c-9139-baf137de058a", "sighting--5241226f-5e04-4649-a2b9-acfd299ad21c", "sighting--7f76bcca-f3ee-4873-8a42-387d5c00f30e", "sighting--94aea6c5-6177-4ec8-9c76-aeb73fe2eb72", "sighting--0b1249bc-22ae-403a-8eab-0f2ba506dba3", "sighting--c521c340-9958-49c3-be87-a054a5861183", "sighting--b25f6148-0776-4fde-8953-152ed0bcf5d3", "sighting--eebd405c-dadb-45d0-a759-c4f8e83d0a4d", "sighting--885f3678-0902-488f-8340-974d29ae0ee2", "sighting--6aa9fa80-1d84-4117-ae96-827ddad54b91", "sighting--2fb278ba-c620-4c50-bcca-0e8cae7ae2ab", "sighting--34645fb9-958c-4c96-8a03-4ced5da25c3d", "sighting--fe06c812-0a5e-40a6-990a-1bad08b1cdb4", "sighting--6167fca6-18ed-419e-8986-1fec9dfa987a", "sighting--cac0a804-0649-496a-b152-7f90cd89cd5f", "sighting--ecb17658-3d34-43b8-bde1-97dddd082ad1", "sighting--e7884e0b-40ef-4e6a-8786-e167b9da74fb", "sighting--f0d472dc-4ef0-4412-ae2c-ff2a7ca48a8b", "sighting--db7df226-fa7d-437b-b010-1b96d99998e7", "sighting--fbef162d-3ebc-4191-896a-6a64fdf54287", "sighting--1c985e76-d21c-4bde-9ada-3d19a57cee32", "sighting--1fd0e8b6-3819-4e51-bec8-a1460938973f", "sighting--038e987c-6eca-46cc-8367-9157621654f0", "sighting--9a3e9fb0-6472-44bd-990a-c1948687bba2", "sighting--e076015b-af62-431c-8117-79cf5b39207c", "sighting--d0927f4c-147f-42d3-94f0-77ad7f153971", "sighting--61e760ce-f7af-4390-a36b-18cb5f2d78f0", "sighting--58dbda72-4ccc-41e4-8b7a-29c1604d40da", "sighting--c152f8aa-c84f-44bc-820a-1b08bda9a21f", "sighting--06c89ed6-17e6-4931-b8b7-4693aa9a4e9e", "sighting--190924f1-4eb0-47a6-96cd-2fbb7d256dcb", "sighting--2231af5a-cf7c-41b7-bc2a-ae5e55e302a8", "sighting--71b27402-636a-467d-8185-2925ff686ff8", "sighting--a38574f2-a979-4c1c-b5da-74b237fe008a", "sighting--9216f748-e149-4aa3-9a19-d6339cc376e0", "sighting--1051abd2-13a9-44ac-8029-ca29d2959b46", "sighting--2f5d3211-e98a-487e-a83b-57da894cf1bb", "sighting--928b29e5-d36e-48f1-b11e-52e399b07257", "sighting--d66d924a-7fc5-4a41-a3a0-3f48a40bccf4", "sighting--a4b648ef-8f68-4931-a571-2533c2dda150", "sighting--469f0b29-603d-4a18-a729-9084cff207fa", "sighting--874aa98a-fac1-47b9-9d0a-d75ddede595a", "sighting--2e4dd6be-7c2b-413a-9bd7-799d9fb35d07", "sighting--b1b0a05b-a0c0-4da2-b1dd-2b6e1af645ce", "sighting--b61513bc-a905-484d-b25f-a816f0640200", "sighting--0a7f899c-21bf-4c95-9482-ef2db24c129a", "sighting--8f8e4899-567d-4e2a-a9e4-2d6c0c21567b", "sighting--89a92e3d-3d97-471c-bdc6-e3d7528a8de8", "sighting--2e1d92fb-e79d-4ecd-8871-da042e9eca7c", "sighting--33ffd53e-fdfd-4f63-994d-d874f8b66e18", "sighting--e19846de-9f70-4d44-8c3f-db92416ae32e", "sighting--eba337c6-9d31-4494-ad94-fa1b52cc64db", "sighting--bf31f645-f408-4cf6-8edc-c15f7be0758e", "sighting--76522c8b-72f7-4258-951f-5931b6fe04a9", "sighting--e1419347-0688-4ecc-b579-75d5299e6b92", "sighting--136a1b01-b2af-4535-93f4-f3208edc32ad", "sighting--8b1c3fe1-25a9-43fd-b465-a5e69b3b53ed", "sighting--b6ae5ccc-90a9-4bf3-8c2c-008c872f2c90", "sighting--71d58239-974b-4bb5-a69b-6712bb5775ba", "sighting--b46bf40c-f723-4dae-aa40-fe1cceed2674", "sighting--15b10781-e819-4478-b4de-5e1c145c9488", "sighting--c66dff67-ab3a-470d-bd7d-44afbb61fc3a", "sighting--44d7c017-2dab-480d-a4de-e78243b87e6d", "sighting--fb4f6f03-1cbb-4dc2-8b6b-4cbc95cf6360", "sighting--b29f7ca4-8401-482e-81f4-ef2b8c79b89d", "sighting--8c810687-c870-4305-9b8d-f65f21ebd909", "sighting--690099a7-1119-4dba-88f7-2d45f3db8b32", "sighting--be27b053-aaba-4053-97da-481ee704092d", "sighting--f14cfeae-9b8d-4baf-89dd-56d3c0dc4e44", "sighting--11eb5ddc-f583-47fa-a120-438f6faf87e3", "sighting--c937ce80-8c75-451f-8a8b-70cc93781136", "sighting--9e52bf2f-ca66-4c2c-b50a-364610fa07ac", "sighting--6866adfb-3ab9-466d-879b-70720bfc5e16", "sighting--8f587e3f-8c18-4297-9b5e-d64c7937d077", "sighting--73e417f7-72bd-4287-8cc6-cdd98e300479", "sighting--c314b4ab-3f54-40ab-a9aa-c21437fb8a72", "sighting--896ca514-d4aa-4123-82d3-2d0876f20ed6", "sighting--365180eb-2cff-420a-b234-25f1ea665abc", "sighting--68428f11-420d-4f6a-a6fb-9fcddb862431", "sighting--13dcffab-2562-4b9f-90d9-89861497b259", "sighting--782a164e-5a53-4976-aea0-3cf5932ce891", "sighting--c8f83e6b-e161-4738-a04c-beecb91f237c", "sighting--19d28173-6efe-45f8-b8f3-03dd4e1891cb", "sighting--d59ef5f2-2cce-4d47-b705-18dd265f7045", "sighting--57cc4e32-2a91-475c-8099-077f222815d8", "sighting--8fde2b7c-f394-48a3-bd96-def4ec38b777", "sighting--5671ba16-36c9-446e-ad8e-76c28c227c05", "sighting--57ea5585-e173-4728-bc1f-ab57b282ebcf", "sighting--31631164-2227-440b-8ab2-9c17fb067009", "sighting--9bba10b8-75c6-41cc-a425-f7ef0ebfa9d8", "sighting--d8d88750-996e-4a52-8cd8-81c5aa64fe35", "sighting--192a9019-835d-432e-9531-1b3c79f87b88", "sighting--5fad0231-666c-4b1d-a752-296f3b2c6cc2", "sighting--6440bb92-12e4-4176-9fb2-b5802919bc1c", "sighting--5170316e-534f-4b64-a7ff-5e9470be08cb", "sighting--7c23d343-e081-4208-934f-1fc8465aec46", "sighting--a3b06c38-b231-4be5-ae1c-37968d0d279b", "sighting--df564361-9fe7-4a42-9db2-61582389d95b", "sighting--7a02f0fc-3e93-4309-b41b-807238e268d7", "sighting--25f153d4-807b-46c5-aaab-9c67fdaaa9ca", "sighting--65998680-dad5-4e06-819d-3932c256f61c", "sighting--1f3cad6c-bf54-4347-864f-c631071136f9", "sighting--e104530e-9934-489c-9d92-5c0ddee0c529", "sighting--ce3aadad-e230-45b6-9f3d-232ac5820cdc", "sighting--4af4e3f0-08ab-47e3-86cd-b1f061133008", "sighting--3694cbea-ee96-4e51-ab6c-b9b200a3b847", "sighting--1be0cf45-6912-479b-9f21-37744be06079", "sighting--034ed440-03af-431a-80d4-e501b301d17b", "sighting--f01454c6-8eae-4bef-aff5-b488f8ba6758", "sighting--1bcbf108-01a6-40af-ac29-7ca174134f06", "sighting--029d9a20-33df-4509-83d6-63df38cee28a", "sighting--fcffa065-e9d2-49d9-ae2e-4a5d00f9a093", "sighting--58e78367-5e02-4354-90ac-950a54853fda", "sighting--cb7aa19a-05bb-4927-9862-c356a96c8284", "sighting--4aac1b53-07f1-4151-a75a-8b413f74a593", "sighting--79009ae1-c6bb-4b30-b329-7aa7832469f7", "sighting--1426c9a4-6757-4957-a28a-7fa40281acc2", "sighting--46f57eaf-4fbf-4fb9-a70b-9dd5b74285d6", "sighting--1e96c15d-6f66-48ed-8757-9e6523f3e49b", "sighting--3d2477b7-e4e7-41b2-a0b2-6f63d9e31874", "sighting--13cf591b-711a-4678-a73e-e4c76b166b97", "sighting--2281fd3e-bcd2-4535-8bfd-429ac259ba70", "sighting--966a1c5d-8667-411d-9eb0-ad3f74da0a18", "sighting--8fbd9f2c-0ce2-41e5-b872-d2c13780b502", "sighting--a93c1be9-ee09-4911-b91d-863098c906d2", "sighting--56aab518-0a53-4848-9521-c1720710cdbe", "sighting--0c6b5fdc-7d1a-44d3-8c2a-0c22807b9df9", "sighting--11fb26c3-d221-4383-9055-733728af5271", "sighting--4b67a1fb-e1e2-4476-a238-e631221938ca", "sighting--373e3d27-957d-4840-b818-a71e7f4a2d6c", "sighting--82a56602-1a1c-4841-b778-cd700a10efc0", "sighting--ed390566-7db0-4711-bb84-7ac604e8b133", "sighting--1f2079f7-5892-4e01-87b9-29395631d4aa", "sighting--15102119-c684-4561-9f00-b22d21138295", "sighting--1f68eecf-2a84-4948-9aab-cebb16253a0a", "sighting--b6f39c5f-fffb-4512-b5f7-fd5576460952", "sighting--bc3c8f42-b709-4bb7-91b1-41ca8761a1dc", "sighting--6b38a86c-e099-4f96-ad6d-6dbb82b53c2f", "sighting--46ea179c-595d-43a6-a143-20b6fcd3ec95", "sighting--b1285c8d-4ce0-4063-95ab-428148ed0530", "sighting--a31b42cf-f9f6-48d6-af69-db760df34e4f", "sighting--9f54c07f-f235-4bff-a752-52e9d021d177", "sighting--5768e0f4-8e68-4745-a964-5af88643de5f", "sighting--e384a8cc-a484-469f-a272-63dd949117d6", "sighting--bb6fd72d-860c-4b65-aa01-acd642be48ac", "sighting--f6d47700-fe51-4448-add7-f7217e8cd3c4", "sighting--e162ac80-4cfa-4605-b089-c0be1be83415", "sighting--cd23377a-7f5c-47fd-88f7-1c3c4896d1ce", "sighting--d47039f9-7746-4b4d-9d2f-31f947626203", "sighting--7190a329-ba84-47a1-a2a2-b8849652d6bc", "sighting--c51685f5-3496-46fd-bae1-9a415597a85c", "sighting--a645c801-c38b-4272-879a-25a02c114a5c", "sighting--7b13edc0-3a3e-4892-a2a9-09a8a291f828", "sighting--e1c2ebb4-25c4-453f-86f5-2a59252e8dc3", "sighting--ae12a391-247b-4f68-81c1-47667ddf6204", "sighting--995fff92-8b6e-45e5-964b-55c1a526bc92", "sighting--8d94bf7f-ff44-4dc6-81cd-c7e2552dafca", "sighting--af267ba9-1718-42f4-82ef-b2352aeae03e", "sighting--a4b60527-c8cb-4cbe-add8-5d4fdd9e7ed5", "sighting--defaadf5-637e-409d-8d1e-82da667a525e", "sighting--bcaa1cae-7184-46e2-8683-ecb7a27d6c41", "sighting--240e9182-3e75-4954-b852-3ac3bf642786", "sighting--d7f29f03-ac7e-4320-836b-462acdd095ca", "sighting--f21619ed-ead4-4912-8985-9196ee480856", "sighting--8bc1c061-688d-4c54-8dd3-4793d944ae8a", "sighting--39e56e8c-433e-4ec7-8d90-cba451d813a1", "sighting--02e2d55c-8beb-4211-bc2e-3767be1348a0", "sighting--1c9f6b90-0682-4128-aa14-f8ca9d18c5c8", "sighting--e24e7063-0a51-4e24-82bd-3c7764e3a9de", "sighting--d3548c69-9439-4272-8cc4-064f6c4760fe", "sighting--4f83af6d-052d-4872-9196-6d03b1937486", "sighting--150520de-e656-42c9-b52b-69b2ddf6e18b", "sighting--a2eac397-051a-4b3e-b5a2-4935ae56018f", "sighting--6c7838d5-864c-4ecb-8676-8ac61174217d", "sighting--ea664f22-f95b-4eda-83b7-c22693b925f5", "sighting--17103128-3656-4171-a476-10046cb1b8f4", "sighting--67b82bcb-421c-4a8b-8038-91b26ff1e51a", "sighting--10ee2209-7eb2-4274-8594-0153258ba03d", "sighting--e59608d2-bcd2-4940-93a2-70d9a830a75a", "sighting--3346e4dd-887c-47e4-9530-ef5a63515cd9", "sighting--6f29bcd6-69e3-47f1-9ddb-14a82c93f01c", "sighting--2a6a327e-3a44-485c-949b-72448717e41c", "sighting--bee49163-ac84-4ccd-9f75-26b9f4ff6273", "sighting--3c8ac6cb-a560-41a3-82d8-0c2b6d9ae6e3", "sighting--55d2f936-4edf-4658-86e3-2b09b036730a", "sighting--aa92e67a-0f78-4897-86b2-ade9b592c0f0", "sighting--4fb8f513-1b72-4324-baf7-ece3fbde4984", "sighting--36c50612-6e55-4e31-acb1-41f7d4650fb9", "sighting--7d23e50d-f43a-4bd2-8948-ffabc5c8c3e1", "sighting--7cb04460-7dc8-412a-8136-40895980e77c", "sighting--325a93d6-d874-4fa8-b6c9-606d8cc1fa15", "sighting--2331b215-b46a-4c11-890a-8ea15c5572f4", "sighting--0cd5b962-5a0c-46a9-bba2-9e73407d5cfc", "sighting--88bdc75c-5b95-4b4b-b11d-fffeb91c7305", "sighting--ce974f07-a1e7-4618-ad0e-f6ccb15c7967", "sighting--d205dd75-c454-40c3-aa05-d2f3d7f3ac47", "sighting--d480ee78-5148-43f5-899f-f799eabad09a", "sighting--19653713-f3d3-4b7e-adcb-1b3dcbd57e78", "sighting--594669b3-df45-46df-a556-10a6cefdc9a3", "sighting--392bee5e-1cd9-43e1-a680-2b8fa28be925", "sighting--fc2cfd6d-0c94-416f-b2c2-1cbc630d6091", "sighting--c7c4a18b-e265-403e-991e-47f3b11fb024", "sighting--b9550274-cf10-465a-8031-a3e068e7f820", "sighting--03df3289-c348-4776-bf2f-f98e28ac25bc", "sighting--963c5967-24e3-4d9c-a935-7e5a153c4fc5", "sighting--5cc8545f-c623-416a-8a6c-8ce9ac8173e0", "sighting--6cbfb62f-0867-42b4-9125-094824a6ea37", "sighting--85c657ef-9836-4217-bd52-5521563f5200", "sighting--9f7a8da4-b972-4707-8fc9-f1233836c773", "sighting--685131fb-57f6-4063-94eb-e90880be4ec1", "sighting--2168ba06-33de-4770-8716-ca5ccf0da427", "sighting--8d953ee1-9686-4266-a868-213d06bdd674", "sighting--137c322b-dd82-4204-8a06-e0e949af8006", "sighting--f9d02efa-e76e-4012-8dbd-347810450423", "sighting--37f5f224-3f6a-420b-ac06-769947f09902", "sighting--4f036392-e316-4689-b0ee-b08e635e53ea", "sighting--06de94ab-24e1-4fcd-864d-27f12bdb79e9", "sighting--81ac878f-88dc-4109-9758-ad7a2c24730e", "sighting--1c3edef3-12e6-4cad-b691-16a80288b202", "sighting--b2b5e384-b2e1-4a7a-a1fd-25aab5ca16cb", "sighting--b94f2d1b-19af-4f9b-9f18-3d41602b4257", "sighting--401142ce-71a5-431e-812a-027876d33a6c", "sighting--97b28188-3416-4a47-a3ff-3b6f1794b64b", "sighting--051badc8-9ba9-40e9-bc04-71a9dd69f569", "sighting--00903231-3551-49fc-a874-551a1d87cf1f", "sighting--3e09086c-0157-4dd2-9d43-261070cb4e5b", "sighting--56a9184c-6c0e-4546-bc90-dc14b62d2335", "sighting--315d4ba2-d78f-4355-bcf5-c9ed6ba0fd43", "sighting--814b62fa-98d1-4727-8c1f-30c97d0ad0e9", "sighting--65675077-c634-47f6-9a3e-ec28e5b99152", "sighting--11f7d2a7-b221-4268-a1bb-b6e03e908168", "sighting--78a9f409-fa86-4afd-bb15-bac588f18c4d", "sighting--aaed749e-5216-40d5-9274-af31233bcdf0", "sighting--594e0b51-72aa-411e-92b6-7ca6d06ad081", "sighting--7a95c0d7-b0ed-4972-ad47-3bf9159de918", "sighting--692519b4-c70a-44d6-be6a-73b37183fd83", "sighting--c72470e0-ce19-4b3c-8e2a-6a1917c54e55", "sighting--5fccc1d8-c8c6-4972-9d4f-63ac857e5d27", "sighting--8d778d41-1de1-4bc6-a973-674fcfe80679", "sighting--c42d31c8-b9d2-4896-8557-a8b6cb4fb933", "sighting--e4884e60-51d9-4669-9de2-90069c96abb2", "sighting--f20fbfbb-822f-4eeb-94ef-bfff6f489624", "sighting--b5051674-f744-4d11-917e-ca33311fae2c", "sighting--30fba615-fc63-4661-907c-47fc218b82f5", "sighting--382fcecd-55c3-4c1a-abe0-15819c02769a", "sighting--e49039eb-e7a1-4489-9a30-69d230b74ebe", "sighting--20b3e4f4-0837-44e4-a539-6f35f174b3f8", "sighting--94bba59b-4879-4c0e-9031-3eac45f43022", "sighting--d43a58c2-1070-4164-9dce-594083966548", "sighting--862631ba-07bf-4cc0-a00c-06d13caccc68", "sighting--dbfb648d-7711-4a71-8125-ff3e1a7d57ab", "sighting--766ba133-6750-42c6-a8a1-a94197dae83a", "sighting--6e51b140-caff-4aac-b217-955c4c841cc7", "sighting--9a639e71-33f0-4630-876a-0bef332707bc", "sighting--c700c0fc-3e40-4fdc-b2d4-986fb230fd1a", "sighting--5d4bc1a0-27a3-4f9b-b269-856b820a658b", "sighting--0cea3383-0c04-4ee4-bf97-593d3efc9938", "sighting--38c50b2c-71fb-4460-9698-aaf3f94a30ae", "sighting--5b6093b9-4d11-4c65-9a3d-4a70d41b53e9", "sighting--05f761b6-8ef0-46ee-bc92-09578ec62cb6", "sighting--5893b8a9-c69c-4bf0-b7f2-302f7efdb50e", "sighting--7cc4a24e-a3df-4e89-9588-1481c9512a81", "sighting--dd404323-9889-4928-8f33-b2511a2f1d21", "sighting--a1e802ea-23bc-4bed-a72d-53ecd08ea0d8", "sighting--c263ef19-4248-497f-b2f1-566c1766c34c", "sighting--026372ef-7457-402b-b17f-f5f1f15029fb", "sighting--bd964651-512c-44ee-8afe-93d3e7cbea59", "sighting--efbcb0a0-b5e1-449f-8478-208fb54a1770", "sighting--5c6d945e-ece2-407c-a5c7-59e62922d863", "sighting--74eaabce-5071-41ff-91d5-09af73416eb3", "sighting--ab2daf60-1a4b-42c0-8fe4-1e1bad7cea3a", "sighting--6be295cd-d58e-43fb-b5d1-710e60c833ef", "sighting--88c647d9-bab1-4f7f-938b-6d38d8c85bc3", "sighting--8cfc6a2d-5cd9-400c-af58-496ae475b679", "sighting--79d350fa-0f18-4f8a-b277-f4f68d38b24e", "sighting--1eb44c44-fed1-40cf-b8ec-90825c8bf346", "sighting--6b0c1346-de91-4274-8c29-daf608257abc", "sighting--06727513-9574-4691-b822-1f0e0168a518", "sighting--c82a27e0-02cd-43a8-86cf-7c74c63383fb", "sighting--63afbf2e-c0d9-4489-bb5c-3382cf59173c", "sighting--beab85f1-efd5-4d00-833b-5e82144c41ca", "sighting--e56b8e8b-3eb9-438f-852f-f1f86a839b63", "sighting--f3d82575-069d-4550-978b-7d3b4e033e20", "sighting--ddb280a2-bfbf-4356-834a-e81780e5b9ad", "sighting--ff310303-f246-4f0b-afca-b71af52355d9", "sighting--0173cea3-5427-4dfd-bd1c-87a9e5a942c8", "sighting--ad7a507a-0254-4f5e-81ea-beaf28d2fceb", "sighting--968e337e-e529-4ca8-9394-3184fdc146cc", "sighting--f4267ab5-c130-42d5-939e-3fe5ec86d8db", "sighting--ed075cf1-4caf-4e70-b6a3-93c9c7d8ed32", "sighting--016f1145-4096-4696-8733-4ee8c954b6d2", "sighting--643dcf86-c313-410b-9b10-f548b9476a10", "sighting--31190525-ce98-491d-bd21-f0a65d72322e", "sighting--5b762dc1-b495-40fe-bd6d-04a335a1dfac", "sighting--088764f7-2898-4974-9d06-3ba5bb8673f9", "sighting--9bbca471-40fc-4b0a-9011-329f3a0e5339", "sighting--9b511f0b-3342-4030-9f9c-c43e5d2936fc", "sighting--7750913f-dea8-4611-9c08-59b6e5826638", "sighting--4c0f1506-6b16-4bb1-a34a-1876760806a0", "sighting--e5d35230-7f1d-4382-a8d0-3986c229ace9", "sighting--f86eb5c9-d0e6-40b9-837e-52cc536c3ac8", "sighting--87e06a17-f3ad-42db-b0e0-357f22247de7", "sighting--518ccf66-ee66-4676-82c0-993679123ffb", "sighting--c80d809e-cdf5-4ad5-8510-6503326f7e11", "sighting--95de49b6-75c0-4eb6-9c1f-5435d4ffdd77", "sighting--3d452578-33e3-4134-8229-ea3b128327e0", "sighting--bd85c7c6-8f93-4eea-8dae-75aa093926be", "sighting--fe07cd13-dcbf-421b-a85a-9796d31c0933", "sighting--8a239845-cb82-4fed-82c3-52a3b56645bb", "sighting--88683642-0b87-4d14-bdaa-c44b08f2b0db", "sighting--958368ca-94ee-4121-b885-4546b642e7b1", "sighting--d7fc7481-6923-41d8-bc8b-0a19823e2c05", "sighting--8873f1ad-b204-4100-9ffd-07ec87e8c42b", "sighting--715cc3c5-e793-483d-be61-a5896c82f794", "sighting--b068c03c-5083-45f5-8528-a6ee18f2917f", "sighting--329ad166-7d55-49f0-8e46-53ec6be48734", "sighting--ff593ab6-63b3-4f27-a43b-ac1c3ac48b60", "sighting--41c395c6-0624-4183-971d-31ecf0d81551", "sighting--7be7eba2-82f2-4aa0-a885-802587f48656", "sighting--983f2605-11d9-49cd-9303-38764e72f8a2", "sighting--b3a30193-fa3b-4282-9a0e-2ad507187958", "sighting--ad62df1d-5184-44a7-80d9-ec87e4c72ab3", "sighting--b5e271d7-a780-4e09-abcf-6bef7dbc0a00", "sighting--6b9d0168-01c1-4c60-bd26-cc003d4511f9", "sighting--f9bf8ea7-450d-4093-aed4-710173601b45", "sighting--954940b5-7a63-488c-8260-4c6a4af33b50", "sighting--9fd4e2f1-f549-40e0-9af2-78549910fce3", "sighting--ceed8b8b-3388-4f7d-99a0-8efc1198a075", "sighting--f8123ec3-90c5-418c-80ce-ebf9aee58861", "sighting--9a5db62d-e94b-4f02-baf2-bee63dd01ec9", "sighting--8ec96dba-d632-4d34-b2ca-0d92ddb6e37f", "sighting--490b5174-ea06-4cab-ba7b-3912fcd6fea1", "sighting--59e59e8e-4b9a-479a-9a7d-e1c52dd7eea6", "sighting--fde30f5f-c179-4b60-8bbd-584939390b5a", "sighting--52604d5a-7100-4c25-9e71-c31c99179c99", "sighting--ac1742cd-b546-42fd-8409-ce1f4dbf1095", "sighting--16618c17-c874-4eac-b65e-bee59162a134", "sighting--0ec8e3eb-c0d3-4af2-aa27-300f9b82bcc6", "sighting--0c3a8d83-34b8-43a5-9b3a-917f5e9ece71", "sighting--2543ea15-9c31-4e9c-a60d-a0e1f8987437", "sighting--e09854e8-955f-40e0-bab1-0f0b452822b5", "sighting--b0148dc0-dc95-4fee-ab8d-27a2eb28d719", "sighting--134ab4ea-bd82-4c47-a35b-acff7c75874c", "sighting--70e76f5d-3088-4f0d-99da-43674fdb03fb", "sighting--1885fd38-3ab3-4fd2-b7c0-c62a173c2fa1", "sighting--2446c8d8-a7bc-411c-b055-2c8b61daa7b0", "sighting--7ec61343-b47f-4b6f-a4b8-29939955a5ac", "sighting--d7eb4c82-3bd3-4710-bc24-d1067139959b", "sighting--dbc731ff-be8b-4367-9b27-1b890f60af94", "sighting--46ce84c4-3d9e-4b39-9ab4-1316b8a7d346", "sighting--d9949fc1-cd3b-4bb2-a069-3f644a6652d5", "sighting--cfb866f4-84f2-4894-8172-0ed0359d59a7", "sighting--03b7e700-172e-492a-b391-aa425bb5a030", "sighting--5273a2d2-c2bf-496c-ba2a-0b91e836c2e2", "sighting--c9c1a242-1057-4236-8db2-2c356185ea10", "sighting--e8065fe7-07e1-4278-9946-c9ee86d0ee44", "sighting--d0b22e5c-ecc0-4ea1-8eb5-6945d7f17d5b", "sighting--793d6042-fd8c-4e64-89e0-1ec45927eb4b", "sighting--4ed631bd-7a59-4b36-91a9-1a71e779ddbb", "sighting--40cc8af6-6f19-4717-8fbc-d84f418251f4", "sighting--8efee876-c415-4a70-b9ce-3bf8cd9b8abc", "sighting--bab783ea-d868-4ab7-b028-9faf6e788f85", "sighting--053681e4-18e8-4250-bdb3-0ae454658385", "sighting--d832cd4b-f072-4492-b781-39e1ca3734d6", "sighting--eee871c4-ffef-4d8d-ada4-5841948b5428", "sighting--81b19d2c-2942-4f81-ade6-e97d7a14a05d", "sighting--227d2ace-f32c-4aa9-a38d-9af51bee3929", "sighting--20ada108-9f8e-42de-b1cd-175ad5fb73b8", "sighting--854c25d3-8e56-4ba4-bc12-7c8487325b9d", "sighting--e726a4af-04b6-4847-9003-8241c2c216ac", "sighting--fd0d1aaa-03aa-485d-8624-dbbb8f3ad517", "sighting--032fadeb-f441-4bac-b47c-24b05dc3ca1e", "sighting--c5f5d159-bc8b-48c8-b797-34b986c92b55", "sighting--9f608070-4dfb-42a7-9981-51100f1f1cea", "sighting--8aa884e0-a73f-41f4-b69d-9f341a2b9077", "sighting--c114531e-7d81-43c8-be1d-93921e3929a0", "sighting--d3dd8c32-a462-4558-84e5-debe67c13b85", "sighting--918c8bf0-35d7-4736-b9ee-bc94918da4cd", "sighting--08b5f923-cbc9-4b70-a1ef-7757d68ddcf5", "sighting--564985ad-b4f7-47f0-8684-5bcb55c0afb7", "sighting--e76c5f55-9bb1-44aa-8984-3a02849d119c", "sighting--d266ffaa-34b6-41db-a67e-7da99a575666", "sighting--530f39ea-7b54-4236-a7b1-f02a3ab4b501", "sighting--90c011d2-7cc1-4f94-a1dc-ce0a067239ca", "sighting--ba99c735-067f-4a37-8281-28572bf8c613", "sighting--18bcff70-e95e-40e9-8e1d-bea26f969b50", "sighting--5b45d9a0-39af-4ca1-82d4-5f8b4264435d", "sighting--7d9664c0-7625-44db-8d04-5d07f1770d77", "sighting--9108e75a-1631-4989-a660-e53241e96719", "sighting--43ff676d-df30-4ee2-9704-0e4f22f7f5fd", "sighting--18ab40f4-578a-486b-8dc9-570f97be14a0", "sighting--1b66ddeb-a73d-4153-bc2b-a179afbc42fd", "sighting--769b56e6-a3b1-4b3d-b0e8-c757db9a255b", "sighting--3bbfbb30-7ebd-4b52-a422-64e7300c5ab9", "sighting--4dd8f9fa-fb67-4154-8d37-7bf65d969599", "sighting--15c04615-b062-453b-a3bf-78947bb90046", "sighting--be8fbb8e-289d-4039-9916-ee395093f0e2", "sighting--c1c8358b-8d3a-4f3a-9afe-4d2502270204", "sighting--39705f99-1bb2-4985-bcd3-31aa2d481b88", "sighting--a1ac7a9b-a805-4ae1-99e6-d5a9e1ae931c", "sighting--8c7daae1-03ae-4832-8cb6-d4d20d20b653", "sighting--32ae8cfd-5a9c-4a32-8e32-fb1b75ec764e", "sighting--723927a9-41b1-4174-bad1-80c0351d8147", "sighting--c03bab33-92fa-49c2-8e72-603654da3635", "sighting--73b7f1aa-ac29-4953-b6ed-1748a2d2dfc5", "sighting--7040b0b9-d935-4c82-a8b4-3e13bd05c308", "sighting--4a3cf85d-1237-4581-a8c6-c495e5897785", "sighting--bf7c7af1-8e66-4e6c-9c58-4844385c9a57", "sighting--d9221e10-0b0a-43ce-b103-853e8a060a18", "sighting--c2546c80-1085-4a41-9760-125d871b6c2e", "sighting--81150d89-80f9-46d4-a0cd-4b791f227b63", "sighting--4ba9eea9-9688-49c6-8821-5a50091f838d", "sighting--38417dec-af2d-4f06-bf07-c263a67988a6", "sighting--4a567579-d104-4701-a386-24ea548f01ed", "sighting--0c573359-8f3c-4502-a950-34a291969a34", "sighting--1501de2a-003a-4648-ab21-c31af550a92e", "sighting--8d8aa634-46d7-4081-86b1-e72a496dcacd", "sighting--7c426a90-96f7-44c6-8b49-643e491bf571", "sighting--8ea8339e-4371-45a0-a84e-404b72f14494", "sighting--c1294f84-84d8-4134-83f2-3e465e444822", "sighting--dd24545c-33f5-48ae-a5fc-40163443fd97", "sighting--d3dcd4a8-48b6-468a-af2f-05622d43560a", "sighting--67c4040a-4c82-46e7-9f15-c5ee1ae6abb0", "sighting--b41a199a-035c-432f-9c77-e79668be2ca2", "sighting--58e56006-aa53-47c7-bc3d-0b8cd1f1da51", "sighting--1235b788-66d0-49f6-a6d9-63fa0ba830e4", "sighting--a466a3e2-0acf-432f-b92f-f54902450de7", "sighting--6af599db-1231-4224-9da6-acd7a3a122de", "sighting--050c5c60-0a6d-4d4d-9d5c-1fa4a80072de", "sighting--00c897b0-ba66-4763-9587-a745b81808b7", "sighting--8c38e8d4-b73a-4336-a137-949896f4d627", "sighting--41fa1d07-d49b-44a7-b3b2-7dde18333bb1", "sighting--5874ab63-d553-4f59-af8f-3d9382b11c32", "sighting--f42405ea-3cb5-4efb-abac-0c04d48d8aba", "sighting--12aa36dd-807f-48a4-8161-4740512884be", "sighting--995d8c61-593c-4d0d-a604-b14c60838a0a", "sighting--cd73f4f8-2cf1-40de-bc2e-f4e5fe4c2d75", "sighting--228d9a19-4d02-4738-932d-be90490837c9", "sighting--eb54a78d-c7df-4d08-ad63-e64c0a156b98", "sighting--a73f18ca-eac3-4a34-8d77-9057edcdcb91", "sighting--1e59cfd1-b80e-4a45-b70c-f603433803f4", "sighting--618c25d9-69bf-432c-826c-f7d2d046761d", "sighting--35a6a350-ced8-414a-a3bf-6fc3333ff98c", "sighting--2ff3d583-3e80-4a29-9b29-2ff096cab284", "sighting--7a6db7dd-b463-4743-bf0e-e57318c6d684", "sighting--b9aa5af4-fac3-41c7-a3e2-682767e3674d", "sighting--87042009-52cd-4634-8da6-c7835bfdd14d", "sighting--3cf7e30a-35ae-4681-9846-9ad028910834", "sighting--7ce3dd20-1182-4d7a-9ee6-7b8979564899", "sighting--77acfe29-1f0e-43fb-905c-0293380916b2", "sighting--9f44d435-8d31-4b39-8466-7b800649983e", "sighting--d2e06c70-9894-4408-a793-d7749120a292", "sighting--915f12a6-da01-415e-a190-61ce0f26e527", "sighting--e5144663-2bbc-4c05-81e2-2dbc245f589a", "sighting--a894cef0-6b97-4350-8451-92bba1093533", "sighting--d294b3be-35a8-4a82-9b48-264b74b4cdb0", "sighting--1d39807a-25e5-4087-a76a-b9aab3ce55e2", "sighting--33782512-e9bc-446f-a63b-0b42463ac00d", "sighting--dbf33957-b35e-40b0-b281-69165c3e8de3", "sighting--b77bd268-ba30-4303-8fbc-af1a671742bf", "sighting--a7492657-9695-4a67-804e-e11ed785001b", "sighting--c7ea7f95-ff61-4763-a01c-f320852331c9", "sighting--8b560f89-12ee-4666-9a58-7be29c76dd78", "sighting--131dc26a-c75d-4278-819d-4c28dabca1ad", "sighting--d4287b78-ad43-46d0-841e-687e4592c57b", "sighting--fac37500-fd68-400c-ab70-4b21cccaf05e", "sighting--d8fb2098-c3a9-43e8-b738-85911fbc2977", "sighting--959300e2-fb37-44a4-8a06-43c3842da20b", "sighting--2ef3680b-3ae5-43c4-b5d1-d0f28ea6e9b4", "sighting--db4f05a6-642f-4510-a215-9dddc3c78207", "sighting--c29eaaa8-59fe-4c86-8b40-c6c17b5eea0c", "sighting--948ebb69-ed25-48b7-8071-ec3f8d3258ce", "sighting--8c66d67b-8798-414b-b588-4d7c416d93f6", "sighting--752e9bbd-975c-47f2-b00d-bc77330b3671", "sighting--e1bf9f0d-289a-4b62-9850-0be8a7b92ef4", "sighting--2d844740-f5fa-4578-b5b3-954c6e1e403a", "sighting--1ba7c468-d1e0-47c6-8668-35067b408ce5", "sighting--56dc54f8-5250-4e7f-8213-0f132b0e701e", "sighting--28ddf2fd-537f-4066-8643-f6be5266bcb7", "sighting--b6bfc8c5-0328-4096-b471-2d8e0b151776", "sighting--0fda8170-71e5-4ec1-a680-c413b7865b12", "sighting--1f418ff7-475d-4a7b-93ba-b4dbd3edaaf6", "sighting--07076bfc-0ae0-41d7-be16-ce739801ac85", "sighting--9cf3915b-a506-4811-b793-ec6453a7c770", "sighting--93b268ca-1787-46e8-98f5-b9ce2e18476a", "sighting--767fa6e4-1281-45ab-9ae7-034e240bf752", "sighting--458f7b73-9d07-4598-9248-bb3697cf5a8a", "sighting--f049b289-4dfd-4765-aaa8-6b86e4a87d0c", "sighting--370156ab-55bd-44fa-a72a-59754f380093", "sighting--689e2a37-d4f3-4f3f-843c-aabb7e79b454", "sighting--8cea4cad-f16c-4896-8b09-7e6067d0e236", "sighting--6d7a0dad-1bf4-4e74-aeeb-ce8d89a03a3c", "sighting--0df43e8f-0b2b-4fbd-9019-bc47f964e6f0", "sighting--ca2e228b-56c3-4877-a0e3-48529afb8662", "sighting--5bd2c392-eca9-4a8e-a7df-7898b0e61f5a", "sighting--8bf5fe3d-14fa-4d3f-ae69-ed5cb732376a", "sighting--ee24c91b-becc-4783-a5e4-80df72435c7a", "sighting--976a0299-627f-4274-adb3-7a56f48f74ef", "sighting--14744507-bfd7-4e0d-ae66-6aa88c13d3d3", "sighting--ad65eb6b-f4c6-4ef0-8374-c293d15b6392", "sighting--9ee74334-2d5a-4114-86fb-9f2419cc3f00", "sighting--8f9220b4-7462-4789-ad1b-5bf5951bd351", "sighting--b66101b8-6c83-4dbe-83a8-4e8c16d36d86", "sighting--a12972be-7f84-452d-af34-8f485d8ae887", "sighting--b6b07202-7d32-48c6-afd3-e255647b9dd3", "sighting--01323fc1-f2b6-4104-a641-b7e26cdca0bc", "sighting--7e491a9f-cf5b-4c8f-a773-1249bf72109f", "sighting--929691b2-ae7d-48a3-b43e-bf47506396ee", "sighting--f8bd5126-f64b-4dc2-a00f-39c119e3d3b5", "sighting--2823ff5a-1620-4273-8107-da8adf81c219", "sighting--bfe24cac-d18f-41e2-b162-96ccd32abea4", "sighting--a9cd12ec-63a5-49c6-8b7b-f747c40a5996", "sighting--fca1abc3-cf41-4cca-82fb-bb1ff68ad93f", "sighting--6829d510-0324-4c52-b645-cf36bb6e7d59", "sighting--2ec6adea-6ff5-4ad6-84c2-5741ee2a97b2", "sighting--ccfbab59-8e1e-412e-9c83-82d9bc050926", "sighting--864a2dee-9646-4621-aad8-4580241ec809", "sighting--e2bb7929-50fe-4c12-8d78-469911a4cb7d", "sighting--df6d77f9-c719-45f1-ab23-773bd9f0c2fa", "sighting--c64a12d2-193b-4930-97fa-71d4f932c633", "sighting--b1f505bc-8c41-4432-9ba4-be79fb8277bd", "sighting--8c9d0abc-a469-4ffd-bf10-e105d144fc50", "sighting--25de5196-7e8e-4280-97ad-aaf1649afed7", "sighting--f30339ce-f9f6-45d5-a4fd-ca5997631578", "sighting--71742d49-0da4-41bd-a580-a06e3a119e22", "sighting--e09f93b4-4217-42fa-a51e-3b53b04ce8f1", "sighting--0518b8ce-a38f-4bb4-9fd7-3eac9e6b160c", "sighting--52b41007-697d-46cf-813a-a710bfb6821a", "sighting--202e2a04-f798-4436-8c60-b7f00f0772e1", "sighting--0b231634-6c22-40cc-ae55-fbb1b73da16b", "sighting--4943fad5-1492-45b5-8a40-a5e04440caee", "sighting--e6f2e1cc-c255-4c89-8b7e-92f49b54face", "sighting--05590c90-961b-4299-922f-afe009fa89f4", "sighting--abdeab4f-3bd4-44b5-aaad-2469399c187d", "sighting--94af63af-a6eb-4207-b7e4-0cd61cdfbdb8", "sighting--4017fd1b-f7c1-44f4-bc64-0844f598b89a", "sighting--1956dfcc-d179-434b-84c4-973fbfa140ed", "sighting--606d452f-f474-40bc-b022-348f495a881a", "sighting--79726e60-0e9f-4d82-a7ef-d7dd4182ccc3", "sighting--69a395e2-8b4b-4e96-b414-592d2afd2742", "sighting--21cab1c2-b5e7-4f53-a7a8-7aab698d2444", "sighting--eb9c48f2-9e10-4cfa-915b-8b4b0de46e47", "sighting--420e7f23-839c-40aa-a4a1-3da9a9e9ae1c", "sighting--adcc4461-441c-468f-b2e9-3672b11b6305", "sighting--e5de8eba-baca-411a-a505-be22128a998b", "sighting--9195bf89-7ec9-4acd-b902-5e124f0cfedd", "sighting--0c679d26-fab3-4671-bd4a-4cf44ffb041c", "sighting--407abeba-576b-4522-b50b-867be03c9e90", "sighting--dbffcc0d-7970-4233-9c93-96131a9d6e8f", "sighting--5816dab3-e778-418b-a850-094301f3d260", "sighting--5be57f15-d94c-4b1a-9843-f7c062d28a3e", "sighting--34c42fd0-03c4-451e-8c9b-b15d4f8a4cd5", "sighting--187fd225-94a6-49f3-af69-94e1d1430864", "sighting--7bcb05a3-a848-4266-8d6e-66d6a22de34a", "sighting--d1a63ba1-62db-4ef1-9f3d-b47ce74c78da", "sighting--a5e989ed-c859-434c-ab28-6a46fe8b9cd7", "sighting--bc102592-e076-4e4f-86e7-33629ed093e0", "sighting--8c41c2be-42ce-40f0-96aa-98d13343e640", "sighting--92a90e22-d4fd-41e7-b05a-54ae2a0bc452", "sighting--fa4a3a83-0322-41d0-945e-b99769c610f4", "sighting--cf66eed5-e8d2-4c28-957c-a322e95cddc9", "sighting--31fb8dff-eb97-4731-9bd0-9131c65f78fb", "sighting--b2abac9d-69bc-4c8a-b63d-17ff99f89da7", "sighting--dd0d7601-04fe-4727-a545-0955ef605f7b", "sighting--82e45e35-c955-4da5-a467-2c45b51a9ea8", "sighting--a32ccd1d-be01-4878-ab8a-047fc5cc20a2", "sighting--57f74e12-0cb5-4d36-8711-0e49d338352e", "sighting--610c32d3-531d-4ae7-b4d9-f2ea99ad1629", "sighting--a009aada-00f5-4a83-935c-cc8fbbcefc28", "sighting--9d7b53cb-6f56-4669-876d-94bb1a6a8929", "sighting--5dc3cc0c-57c8-4704-901f-c46a664f1e20", "sighting--03530dcd-98ca-4717-bb62-7f625d4f42b7", "sighting--543ff49d-9bbe-4162-b739-bd50369a5c2b", "sighting--31f57861-5094-423c-b2f0-0338629b44ee", "sighting--0d27e6ac-9fb6-44ba-a96f-8cec1f42514d", "sighting--cc79cf81-8252-44df-a10e-5af0ca35eb2c", "sighting--2396a9d8-69ee-4afd-9b44-00d57f089dc4", "sighting--2e20a84c-84f8-4c5f-bd0f-4e053b694342", "sighting--6013fed3-8a05-4743-a82d-b12b57d00b30", "sighting--fbc9674a-445d-44c1-aca1-6ecccd624a57", "sighting--56abd8a2-009e-459b-950d-3f64689805d0", "sighting--788037af-7529-4fe8-a532-41b3b71679c2", "sighting--c4fb170e-689e-4125-9324-44a4612037cf", "sighting--8a44eb2e-8706-42fb-a918-f1e3aa4ef50b", "sighting--ff2276e7-afcc-416e-9969-58b82dc9f8ea", "sighting--4c83827f-2aef-403f-b8d1-6904a6c00aed", "sighting--a2d3d7f5-d69d-4baf-8099-3126a34382cc", "sighting--b846bb66-a022-4a8c-a01c-113a5257e032", "sighting--bdb55e4e-0e9d-49e0-9173-5eeedcf6fba6", "sighting--02c75531-dd95-4bcb-b828-f3eccbad9bf4", "sighting--41cf4fb1-375b-406a-8989-f35371a8145a", "sighting--96a62e7d-6e7d-4fe4-9a95-03b719e5ab8c", "sighting--84f7e8ac-661d-4497-bda7-b8e536f4e77e", "sighting--f01e0aef-8888-45a4-af34-3632937526ca", "sighting--19fa6ecb-c938-48ac-9647-59802d0f7f49", "sighting--37df7374-7d2b-4f51-8262-464e20b8244e", "sighting--c2557799-636a-41d6-93e9-0c7979230ac6", "sighting--171751fc-da79-45e8-b200-932a77bbca66", "sighting--7fe18056-8b93-43ef-99d6-bb44512da7f2", "sighting--f09d17c7-ff38-4f45-93d4-76d586c9e5fc", "sighting--d76a90fe-57c0-48e2-a2d7-de6b6a79d15b", "sighting--bb1d8f39-da27-4413-89a7-4bec4ace8ab6", "sighting--5478379f-8744-45e4-b7f9-57d675951e01", "sighting--034548b6-f361-4ec1-9b85-86982293bab0", "sighting--67591ab3-18be-41ff-ac4e-6e38e69a5f1f", "sighting--9096bfe7-6167-4b8c-aaa8-dd28d4e0d7ba", "sighting--bb0cb21b-07f0-4d35-b649-be8cd7c5d5db", "sighting--1e9c6cdd-e37c-4546-9ba9-0057cf29d41e", "sighting--ed457e45-c055-4ac1-abc3-f5297a4ca032", "sighting--0564f062-23aa-41e3-a3ee-b1bc68e38865", "sighting--91010c1e-6e01-410d-b1da-730c2c3363e8", "sighting--decdcc22-becd-496c-92e5-248c5790eb93", "sighting--f8242fdd-cb52-4e22-a091-1136819cdf5a", "sighting--b8546c70-6e5b-4b45-9d1f-7f50ae20295d", "sighting--c98f66df-d83b-4a53-b575-cdba798d8bd4", "sighting--aff8c5bb-f6fe-4812-a758-346be01568a0", "sighting--22651507-8c95-4de9-a565-f627c7d89974", "sighting--2f9e7597-ca0a-445d-ac96-2c8119738675", "sighting--9f54ecfc-4843-429b-a8c6-467c981e4250", "sighting--1d8273c4-b7ca-434f-a346-f7a310c59424", "sighting--933e7be2-6f00-4ebf-9aa5-f5524d67ad7f", "sighting--b54f3b3c-f5f8-4416-b30d-468595206fee", "sighting--4e9631b5-d0f7-4692-8b4a-c2df1d239a0a", "sighting--9b04adeb-747f-4f7d-8fc9-854ae9f8e144", "sighting--187c0b45-6311-48e0-9221-8a011998c246", "sighting--46fa9f4f-5fb4-4285-be60-b1de9e68f455", "sighting--c8f00bf9-6fbe-4725-a06c-c6621fc49b27", "sighting--0876b5da-babd-495b-b4b2-070565589d39", "sighting--8643b7f7-f6e4-4523-b425-2198501eb547", "sighting--c65e2fe6-7066-4b8d-8ade-0dd170b39d70", "sighting--232706e7-4a03-40cd-8325-2658bebed001", "sighting--c689966a-6324-48af-b08c-d2e8f4ddc843", "sighting--ff4f8f13-7c29-46f3-b338-d2f509dc58a9", "sighting--d179ff84-117e-4dd7-b75a-0fd8c9e091fd", "sighting--55300ac7-334f-404c-8783-184aabbaca77", "sighting--22ff232d-74c2-4073-b377-4a3b4411db1d", "sighting--7e206ab7-5a81-49d5-914c-b60b788b1c03", "sighting--240fd643-356d-4692-b1aa-eccb10825f5e", "sighting--3053bdb1-233f-443a-92e7-0859b909100e", "sighting--8870a191-c47e-4e13-bf4c-1c8e30f590c3", "sighting--5780ee5e-d42c-4ee7-87b4-89efa3e7ece4", "sighting--7187f855-f2fb-4684-b7c9-901a422742eb", "sighting--d40d7586-8c49-4eda-8475-01a03be60823", "sighting--7446fc38-6d73-402f-864a-eb850573021d", "sighting--0bb2379d-baab-471b-8cd4-955183a2f5e6", "sighting--ee595318-aeb0-4c34-9d6a-8292f1b159c2", "sighting--c8162cdf-107d-4a31-aeaa-9b3e5d738cd8", "sighting--ef3cdc14-40e2-409c-af37-85c2c2317383", "sighting--94fbd611-d29d-4940-a1de-ec0d7a20b851", "sighting--5648b61b-7c85-4f39-8537-c7d35faf8924", "sighting--3f7d5edc-4307-4161-9541-77d32cdf9dc4", "sighting--21ca5c4c-7f49-4211-9e51-f7d55891ef95", "sighting--209f2e87-b96d-4154-b56c-6526525a6e28", "sighting--848f8756-08cb-4368-9809-f48f503c58bb", "sighting--9f217859-f7bd-4f07-83f1-d4630b5ba686", "sighting--06bd9a64-50c4-4b43-908a-1ea2b6a40484", "sighting--33e22fac-eed6-43c3-a3cc-d6b88eeafeb5", "sighting--32e225b3-dc0d-432a-9fc7-05a087504661", "sighting--85533af3-d172-4a36-944a-67b6fa2c70ce", "sighting--4286fb7a-2487-471f-8577-c38ebe3e7eb9", "sighting--cd1d70ed-5124-4d34-b208-c7626f7a9055", "sighting--184b550f-e272-45ba-979a-4edafb3ef992", "sighting--c5423fb8-4632-45e1-aaf8-e47b5a3cf5ff", "sighting--8b643267-8356-4c2c-ae03-fe4301d73ccc", "sighting--ef0d7c0f-8fb9-4484-a789-dc82413489fd", "sighting--50ed6ad7-6d45-4d20-ada2-d83d1b3a0bf5", "sighting--72cdd913-02f2-4b67-98d8-01045b20196b", "sighting--23ddfce5-07aa-48cd-aa6f-16e40b933c0d", "sighting--16b3317f-690f-47b0-9726-9d81c31f1893", "sighting--36f7cef7-525e-48f5-b571-4e954ded75db", "sighting--175ed04f-ab35-43f9-bd01-13c2ee6c230d", "sighting--d3d78eb6-395e-4aed-872d-c9bd308b96ec", "sighting--94631e54-ae07-4dc4-9af8-bbb9a1da2d10", "sighting--2628084f-a641-4676-a90f-3028d407d397", "sighting--c876d2fa-bb2d-4021-9513-64b8a4e73d45", "sighting--c6d2478d-7385-4ef7-97b0-7307790b8259", "sighting--1e3a5b5e-f75f-4538-befd-b0a744092a92", "sighting--1886266c-f59e-4d8c-ae2f-eb4455581156", "sighting--294ce674-b9e2-4f35-8806-e62fab090215", "sighting--b88b8ad0-8336-422a-b771-39dfa4dbd5f1", "sighting--d5239654-2220-44c8-8e3c-c4b40ddab9e0", "sighting--3b85aa18-8eff-4ec8-b3f6-e4140769e22b", "sighting--bd318fa8-2896-4dea-bb29-763f9e33904c", "sighting--47b78090-73c6-41f1-9ea0-803786f7ce6f", "sighting--3b1bc1aa-1cf4-4aa3-8525-20206ba43a9e", "sighting--8b73a9b2-bd52-42b8-a459-556ae5041e8d", "sighting--4848f12c-6ed0-492a-83b8-c844d673df46", "sighting--35b0118c-80af-4f67-8c10-8e705d8f71e5", "sighting--ee0d39e3-3a91-49ce-bfd7-566349cfbc23", "sighting--9cc084c6-b065-44b9-9b7a-a5f03a76f265", "sighting--d94c3bc1-ba94-46aa-9f12-2197a5a48f62", "sighting--f7e263e5-ecf3-40da-8020-0f4c4f00f39e", "sighting--27617dda-4a36-47ea-b27b-507ae6d3812e", "sighting--2e1fb5a7-0a12-4c72-97d4-90674e0e0e94", "sighting--ae9968d9-58a0-4323-94d3-4680be2e462f", "sighting--a7f2a481-bd1f-4dc2-97f3-2b369412db39", "sighting--f410fc44-40e2-4e04-9939-d109d532c633", "sighting--3a458831-2941-43f1-86b9-537d6010fd42", "sighting--76d2cd04-7ebc-4988-8bd6-5582ad4b1f35", "sighting--b8789c58-320b-4431-a3a1-c4a2ff88e2a5", "sighting--6d81f2f6-15ab-43f2-8bf2-952fcb67fa9a", "sighting--ed0403ec-57e0-4f01-ac71-e13c63875a63", "sighting--40a71d47-60f4-45cf-bd86-c5fbc44967d0", "sighting--2c904370-171d-4286-91e9-bf5c8451497d", "sighting--39f34e99-322f-40bb-8e42-d64a423a62b0", "sighting--abe2862e-f4ea-4a20-a5f9-17c48e545eef", "sighting--88b391fb-490d-454a-a008-2766ea104cd0", "sighting--0d0304ff-51dc-4351-9728-4a1a006b72b9", "sighting--bc29b09b-0a96-40ea-9c60-d34d4f5011dd", "sighting--91ee1418-3580-494a-ba1f-fcf605db804a", "sighting--674def0d-4c75-409f-833f-03fc6b675659", "sighting--231b8ec2-c505-423a-8e01-2f7f9e3f6ad1", "sighting--8be4f0ce-28d6-4544-9362-e4c8b6bfdb5d", "sighting--f407e775-f6c2-486b-bcd3-b7dbb155ef92", "sighting--aeb5147a-857a-409a-affd-6841694c4718", "sighting--6057fe2b-fe98-4689-97ff-08a5e22a1fa4", "sighting--331191b3-8e01-4d4e-8c03-350433672ef2", "sighting--3c0a3fd7-0362-433b-821c-444ae7673321", "sighting--6f6fd9bd-8c5a-4ba9-904a-8990f0b6bd91", "sighting--b086e13f-58a7-4ec2-9a6b-4c771a59ff23", "sighting--d1d68457-0a6b-44cc-87e5-cb2fd76580f5", "sighting--d0b60a87-f616-4b00-b0cc-099a0eaa7ebd", "sighting--dad34cc2-d1c9-495c-9540-98b81ebc0eae", "sighting--3fb73ac2-d992-4c29-a4e0-5e74d92987ce", "sighting--ab97163c-dad3-4a10-814d-edb045792ffa", "sighting--b406177f-2f85-400c-b3d5-5a2e7aa478e7", "sighting--fd50784d-3cc1-44df-b095-1ea0fb38a21c", "sighting--3670a94f-3a06-4c2b-a4fa-a5eda1b234ef", "sighting--423cde3d-d50c-4595-b77a-c7221ddc9179", "sighting--04fa9da1-c827-4da8-b0ed-6d933d8d37c7", "sighting--ad280d9b-589a-4950-a6f5-cd712f61e5c1", "sighting--d0550ea9-cf76-43da-ae8b-8f96ae90f98f", "sighting--bf622522-f2e7-4c77-952c-92bec7a000fe", "sighting--ccd0f004-5efe-4413-afdf-faf4d41ecf50", "sighting--6998e8b0-44b6-49c3-a305-c915b67f130a", "sighting--043d0b2a-7c56-4d47-8e63-9915cc3576e8", "sighting--cb32d6d1-969e-469a-bac5-3ca79986b6c8", "sighting--17a1d7a8-2f9e-4c12-8b6d-d02e11124da0", "sighting--8ee8e061-af10-4a89-802c-04418f8a4170", "sighting--c6f8707f-d725-42b5-b8d0-a9fd1f824e8e", "sighting--d7e337c2-a195-488f-8557-815acbcf7c02", "sighting--3808144f-9cd7-4fd0-81f2-c01e61f7f1f2", "sighting--9318a94b-f901-45f9-8af9-e04e15969c7f", "sighting--bee3f5a1-cf82-4a0b-a992-e7c2d443df63", "sighting--14da4ddd-483d-4e06-8394-43d8849ca22f", "sighting--0e35d5a1-677a-4bd2-b316-3a8b04ce40de", "sighting--f65423b3-9d0f-44e2-9f67-db7d079bdf4e", "sighting--7a6c906a-d8d9-43ba-a038-b2924511d9c2", "sighting--bd6b4fef-bffd-4ad5-bb36-af0fa683da06", "sighting--b3493a58-ce8e-48a5-9364-29ebdb80d768", "sighting--f2476be1-1952-431f-899f-3fd3e760b986", "sighting--c7c493e9-9d01-44df-b545-1b9ce0ba2667", "sighting--d1f97e69-39d5-4e02-aad2-498ed7fe9628", "sighting--3c367d32-f498-4bcf-9217-014b5aa5370b", "sighting--405e7436-c063-4a10-8eb4-6fee19309d40", "sighting--a751e7d4-2b5a-458d-8e64-d6156358e0cc", "sighting--499a0a15-b1fb-410c-875f-8e95e12c9602", "sighting--ae5403d5-e601-4970-865d-33ecb87794ed", "sighting--10ae0a77-693b-433b-8737-f0b0938d257f", "sighting--949fba25-a33f-451c-9c7b-22a84d05941c", "sighting--fa378bb0-900f-4e86-9c9d-3a1648cf8858", "sighting--496d0e7a-2da3-4b8b-9f69-206cacbf0160", "sighting--f7934e50-06e8-4c97-bb06-a20bd0c1cf4c", "sighting--b7250c2d-c577-4de7-8cc2-d3cec2d7a5c8", "sighting--d207b944-fc7a-4437-8cab-4cd4ff09918f", "sighting--621ece1a-c39d-4783-90ad-a53acd7dd7ee", "sighting--12763601-006d-44bf-b772-a562229f0bf6", "sighting--7931de03-0c03-4755-bc59-0f8a51c554b3", "sighting--064e9a4c-753c-4167-9e18-334fb716210f", "sighting--b98b6413-ecb3-4905-81a6-5bd61b74ab53", "sighting--11ebb279-5b13-4e85-b4b3-15c3a874afad", "sighting--8a9ec9c0-e13a-4412-aa4a-cbcd116ebd0e", "sighting--2e02368f-7f08-487e-b3ef-cd5b27845706", "sighting--6417c584-e8bf-467a-b455-d33865e05c84", "sighting--6d2e4335-8554-4f81-8c24-318d627e4e47", "sighting--053a64eb-e113-45f7-b3b5-b7f68196cef9", "sighting--f67c7324-f1c6-450d-87e7-2695809abd29", "sighting--19e9c682-a5eb-4649-8d24-d15400068d7b", "sighting--563f3ce9-e759-4fc8-b0b5-ac8ef1d957c8", "sighting--8cba18a5-a370-424f-91e9-96fcd0ffaa3f", "sighting--4edb8034-0a38-4f37-931e-126572bccff5", "sighting--b4f8b3d2-1780-4ba7-93d0-0370b857fffe", "sighting--f29e01b6-3ec1-463b-9584-995226c42edc", "sighting--e78e9026-7f40-43c3-82f6-d8cc9f69a0b6", "sighting--97bc3c00-a2cf-4351-a564-877c99376906", "sighting--89a48b6c-52ab-4fd0-a525-387d42913b20", "sighting--db613477-32f6-4236-bd4f-535907c03246", "sighting--f725fe62-7dcb-4bf1-9856-a0d8361860ed", "sighting--2d1ee4ee-51fd-4862-b7ca-02bb570faaaf", "sighting--767345cc-20fa-447a-942d-603dbf287507", "sighting--0cf79aa4-6899-4e0a-b364-9f61ef306f3e", "sighting--99669c41-7930-4aaa-bbbb-2e8b457f686e", "sighting--a416d0ef-b7cb-4a19-8adf-b2524d376d96", "sighting--b866dad0-984e-4646-8cde-c0d93a098b2a", "sighting--6722295c-9de5-4444-b12e-58448e0cce5b", "sighting--8f5e33d5-d80e-4830-9023-8fb281e480ee", "sighting--691531ff-cfa5-4e25-a19e-14f773f21d94", "sighting--0a8a8925-07a4-4784-8326-5b4076521864", "sighting--6ce47d11-2f05-4c3a-851b-1a46902817e9", "sighting--ea32e244-600e-43f6-a4bb-dc463f349b77", "sighting--2246155f-87f6-4b46-be5c-97c0446b146c", "sighting--a6842350-77a8-4cd9-8bc6-507126d78b3d", "sighting--d7069072-b3db-45ce-a8ad-75cd7b9e8385", "sighting--740693f2-9861-4341-92b5-b31a77bfdf65", "sighting--cd222a1c-65be-4682-ba8d-caeb0cfbe4ef", "sighting--a8c79875-a5e1-4917-8a80-8cbd2ecf9d31", "sighting--925a43ae-c6c5-44f1-b921-3a6880d0cfd4", "sighting--7321d38c-de22-4cc3-b51c-5b15d6db01fe", "sighting--2a50520d-9f37-40f3-a1ba-219770243135", "sighting--4982d79e-66bb-4ab6-a752-16d4e1d3e934", "sighting--38a0b7cf-ce70-403b-b2c9-1591f391abd6", "sighting--d7b159eb-4f26-494b-8473-71d07d31cb4b", "sighting--93be694c-13a7-42dc-9f29-afbc8396bb09", "sighting--0854ddc5-453a-4298-a574-18aed75bfe15", "sighting--940585b1-eaa2-41fc-acbf-b19f1aeb4797", "sighting--a1d388a9-c232-47a3-9288-4f573b11967d", "sighting--b21536b4-12d1-4f26-a5fa-6abdc615eddf", "sighting--3005a939-8319-4228-81e2-7277a0af5c44", "sighting--637db0f5-7739-440b-94c6-3e9280561d62", "sighting--730ce34e-a72b-4236-9940-07cd0de24d8c", "sighting--5b9c5894-6e87-48a2-928c-25f882fcea7d", "sighting--a42f25e5-25a5-4f92-92f4-47fbd483baf7", "sighting--6ae54311-d8a4-48c0-9aa6-d9a388238d6f", "sighting--62b1b1df-f61d-468a-950c-c8a592cd4c3d", "sighting--317837b2-3877-42c3-9cd7-0a3c84f1073e", "sighting--3c70954f-cae8-451f-9227-12eb76bc538e", "sighting--96b7dcfe-180f-4654-803f-909b846d6635", "sighting--e054d9e0-d97b-45e0-9dff-2825fb27db1f", "sighting--1d4b2a6d-9fce-49ca-a01f-f497cbd7c0e6", "sighting--01e6c0b1-d04a-47c1-94e0-ac5e2ca033a8", "sighting--4f1b86b1-7944-4e67-909c-53b59d77bc43", "sighting--18a8f119-830c-4f40-a6c8-abdd9eeb2888", "sighting--adefda87-bf8c-43b2-a5e3-c814f25016be", "sighting--bf5f50fd-195c-4d60-bf8c-dad32d382981", "sighting--33d02019-397f-460a-9292-b1f112219d5d", "sighting--7454295b-2feb-4ae1-80b0-8b95df7c8aca", "sighting--9b7b6aaa-2ca0-4f88-a0fc-38a6373be6a2", "sighting--d77cf3ea-1fb7-444b-a376-8361258349a5", "sighting--ad23cf42-b046-455d-aa18-0d66cdf6470c", "sighting--0504e78e-9340-4983-8d72-e4886fcc64d6", "sighting--f49dc6db-503c-443b-ac96-ee12fa2163e3", "sighting--9c4cd325-bff3-4344-82e4-6c8d85363951", "sighting--4e13d193-e1ba-4c58-81f3-ace5c5981482", "sighting--0feaab71-deb3-4162-b27f-d3fe7e13faf8", "sighting--2ab78b7a-351e-4b33-bd80-708de0604802", "sighting--c4669ec5-89eb-4062-bd06-479f5fd9e0d2", "sighting--3e86da2d-0d05-4ecf-bf7f-a2addb8ddf99", "sighting--4b0b51a8-0a6b-4068-a904-2554e9a9f75f", "sighting--8866a8a0-66f8-43ce-a172-e5e57f7e6785", "sighting--7c578ac6-dda8-4a0f-a8ee-c9451eb4ba10", "sighting--9fcf0b73-d50b-465e-977a-52b0fc3c881a", "sighting--e6500e8f-46c2-479f-9884-4cddb23d1937", "sighting--b6b9ea67-98e5-4548-9cc7-4ad015e2e43c", "sighting--80195f29-96c2-4d1c-9be4-9551ba45fb5e", "sighting--0327d6b5-2765-493f-aa75-daa437eb5589", "sighting--73cbeccc-c0cb-4327-ae89-f5d06a3ceb6e", "sighting--1948bc41-141c-42bc-83a4-c2a1de78192b", "sighting--d26718c3-694a-4007-9087-64aa2c8644b1", "sighting--10daa95f-def6-4615-86b5-f324ad4d45a0", "sighting--71c3fcfa-a230-464a-98cd-b78248facfcf", "sighting--51391523-230b-40a5-9f4b-3e6afff21436", "sighting--0a92d9dd-6348-4c55-a21b-2fc86e1fca84", "sighting--88377454-7d32-4c89-885f-996d83d5d4ba", "sighting--9c359ef2-83c5-43e3-ad1c-5568d384985b", "sighting--69d0bba3-eb94-476d-900e-0cb0d436e4a4", "sighting--8dc0113e-bb40-458a-9725-849317717381", "sighting--729d86ab-7574-4044-82d0-ad11dcc705d0", "sighting--3fe5437d-8dfc-40c5-b62c-d4fbdc2e6c54", "sighting--aa67c0bf-33d3-4b13-a993-45e60c5d89ec", "sighting--29ee0726-0d06-42cc-9f9f-1d4e8940feed", "sighting--3caba59a-1af4-465d-ba3d-b901bb92776c", "sighting--6ef22ab8-b325-4534-b809-c4065b133b7c", "sighting--f6d37ffa-748c-4296-bb5e-6c4590c69fe5", "sighting--b7823647-23e7-440b-b331-2f89f47f1543", "sighting--7e2799bb-647a-4def-9df3-f425dbf5b214", "sighting--79708f23-b355-42cc-8333-8a7add4a54b1", "sighting--59489ab8-b489-49c5-b1e1-6ea22f8e04b8", "sighting--d145853f-7487-4c21-a955-3dae6f414012", "sighting--75e3d937-a62d-4376-9383-84aaf70b2bc3", "sighting--e35bc3de-ade6-4548-8600-c4e340e763e6", "sighting--207cfb19-c15e-4154-92ed-4309bf48667e", "sighting--957b233a-28ba-4256-8e93-425d09258f57", "sighting--336feefc-d5c0-40e7-998d-8026ef03df21", "sighting--2c5680d3-642c-4398-8a55-9e366a7855a3", "sighting--67b3f004-e935-44b8-bf88-a04eb985779a", "sighting--e7ad2c00-aaee-4760-8f32-0be54b6b6af2", "sighting--818d2a7c-2a3f-4c0e-9c43-75d819f42c6d", "sighting--473498d1-48d7-46a9-a79e-82989769e077", "sighting--6692f199-0803-4c80-8db4-613564d8fc1a", "sighting--e4f3a8ad-b3dc-4ee0-9314-285f89927130", "sighting--9cce148a-041d-4fbf-8a29-149b99ce434d", "sighting--a39d048d-0ef6-4f08-80c6-7b11e1c2c453", "sighting--f11d457a-5aca-4c95-9c90-aa890315e0ce", "sighting--210369f4-8236-4be0-b80b-2e29b932ebca", "sighting--ad63f139-0de8-4246-9e21-d40ea13c41e6", "sighting--1f92e5bc-e85f-4743-aed6-fec33a90f2d2", "sighting--e95fc3e2-5d00-46b2-aaa7-6ce8b58fa6cb", "sighting--2ffc23b8-1718-4ce1-9c4d-533acc34cf24", "sighting--e3c264e9-a2cc-455e-9ea7-504bc4570ec7", "sighting--b18ea5b5-d87e-4ff2-b8e9-47b75a67767f", "sighting--a546b840-e7d1-49b4-9ea4-2f48672e4c21", "sighting--de266f8e-dfac-4da4-bbfc-b9710b5c6b8b", "sighting--bbf3e3a5-1f25-44c1-a40f-ee300bf0f682", "sighting--f05a76e0-4272-496e-8e70-7ac611c85936", "sighting--8d9076a4-1db6-4e8b-ae03-492d91971a18", "sighting--6d566e85-daf9-40c0-8f3b-4d4d3a26b8c6", "sighting--56cb3ac7-0c41-468e-858d-9464af931a15", "sighting--8b53677e-ea0f-4344-89e7-30bc21ac5bb9", "sighting--2af447a3-7816-4bec-a0a1-8cd594198623", "sighting--dadd108e-39ca-43d6-b4d1-8f2b41c738bb", "sighting--739d91c9-2827-4022-8983-d99fec32e652", "sighting--2c316dbf-fdd8-4db9-a459-79201e1f0841", "sighting--e90be2df-8ecd-4ef3-b7ff-30d71964d08f", "sighting--808711a0-2a86-4e6d-a321-259f15df82b8", "sighting--bad02a4d-989c-4180-af27-6e1ea8c569fe", "sighting--29bc19a2-a17d-41ec-9c70-30070469bc78", "sighting--29917e98-646d-4b5c-ba64-806ace77f11f", "sighting--d23c1695-d425-46d8-8b78-b23a7abe21c8", "sighting--14d97a74-4bcd-4925-9acf-e68c007e4452", "sighting--471762a7-46bd-46ba-8654-5c79f1e9d641", "sighting--c8764bc7-cc2c-4a45-b6b4-0284a303ab98", "sighting--816f2753-e313-4012-8470-6ec91cd06a6f", "sighting--06d5b0b7-1315-406e-b9d8-2932bc8401cb", "sighting--dca5053b-25b9-410d-a2cc-ff25dddd9010", "sighting--db249b39-c53c-42ef-b23f-ddab010c3583", "sighting--ede44638-f1b0-4c2b-b90b-7d92b72944e0", "sighting--341edb68-3e59-4641-a60a-720fd6233b31", "sighting--09cacd05-d026-40d4-80f4-7d89bf851469", "sighting--5595ff7a-29cb-49ad-a44f-63b594ff31db", "sighting--167aeaf5-02a1-459d-b138-197064b964e2", "sighting--a35993a2-9452-461c-83f1-c237f3961311", "sighting--310b4e8b-0216-4453-92b6-2238f43a6404", "sighting--fb790985-6f5f-449b-b165-96491d69fcbc", "sighting--c4e97880-b1bf-4c52-9afb-9f594c0a1daf", "sighting--7f1b85bb-e68c-4b82-adde-59c6ad2717c6", "sighting--ec668d28-3225-4814-bbfd-e32ddd52cbcc", "sighting--e6a5c9e8-2cdd-4604-a481-2c3c3a6676fa", "sighting--f9de45cf-408f-418e-aa5d-8db2f0f1ce64", "sighting--829c03f9-2088-4a74-8aa4-14eb9178c434", "sighting--094b499d-37db-4986-8352-177b435b15f5", "sighting--6fb3edec-88b2-4adf-aaa3-8d15680ef3ac", "sighting--9de10400-09ce-4d8c-8d68-274bd412cd52", "sighting--90ac90fd-fe91-4c1b-a9a8-8b70b5ad85d6", "sighting--0c41a4e5-01ca-4933-ac2a-87cd73a48f0b", "sighting--e1032b24-ae50-49e2-8c64-434f6c0f75a8", "sighting--c8beae16-4e5b-4a3a-a4b6-135d252e5fc3", "sighting--2b0bddf8-f724-456a-9dd6-4bcf165d5a00", "sighting--585fb245-89ab-48f4-8f18-eb7adad3e6f6", "sighting--100e9a0a-3788-4334-99e5-98a6b2831d84", "sighting--6d8a9f6c-b80c-4ecf-ba50-4188169a0ccf", "sighting--66d2e6c8-df9b-4213-8bfa-470fec717b54", "sighting--aa9d4fcd-77da-41e5-8ba3-8a29af57e34b", "sighting--78399450-729a-44a9-b4bd-d027b88764d7", "sighting--7db82041-512c-4692-afed-f039edd2d8af", "sighting--24630f87-c433-4144-9a1a-158567c38089", "sighting--ed7974ff-3639-40b2-8601-0b0959f30ee9", "sighting--660a9abb-e9da-48bd-b59b-8eb47bc9ca1a", "sighting--43fe5668-89a0-45cb-9803-74a52a1cc40d", "sighting--d611a30f-b419-4ac4-96d2-1a2fd9d2d3b3", "sighting--550a2b5a-3ad6-4a57-a6ae-f107010b405e", "sighting--6d625fe6-588c-4831-ab82-63166cbcd122", "sighting--1f678c52-38db-4694-9d02-d37d000f6752", "sighting--cac4ed8a-e84b-4854-a8a9-05d2ab6ec4c9", "sighting--cdf3c4ef-1be4-4a1a-ac6b-99797741721d", "sighting--20e285a8-c024-47db-8743-1d38b8f6f73d", "sighting--f632370e-e207-41be-8cf3-3d18d332a22f", "sighting--b15c19b3-1336-437a-b475-9939bad1df1f", "sighting--5576f7ae-e7ba-4854-8a13-40d75697006b", "sighting--ef410a22-48c8-403a-9ec5-7f271b1f3460", "sighting--c4e33187-b524-416c-ac21-b09bebaebab3", "sighting--3351ea60-0850-4060-9d04-b142cd454ff2", "sighting--514ab015-a489-40a2-abba-1dbfb7086f2e", "sighting--1852c0ed-e041-40b0-b284-43b260c6aaa0", "sighting--0fefa060-e786-4caa-8fd5-77a99567132e", "sighting--2a07ee32-21e0-4172-a329-40076ea53a01", "sighting--33998c61-385d-48cb-8c8e-1c4332ed8b1d", "sighting--11754ba0-1f9b-4531-8081-d29a99ec07f5", "sighting--269e2bea-efe5-40be-9561-e8d363c44ceb", "sighting--50e60e35-b2b8-4a1d-b7e3-3f297186475e", "sighting--457f6c02-7914-4d75-a8f7-6bd8a242c3b1", "sighting--2012268b-a901-4b8e-af1e-394903a607a0", "sighting--e52f3757-d6b7-48ce-9dfd-775a2b7b8875", "sighting--ea1cd453-65ad-43aa-bafa-2fc951f2e544", "sighting--70ebb9dd-925b-43bb-bc0e-b3f3d2a14ba6", "sighting--cc6bd242-3b39-4070-998a-1bc1dc179deb", "sighting--14f80503-1bec-411e-890a-43db7c19457f", "sighting--495c4e4d-f51f-4543-b08d-7bd469a801fa", "sighting--96f1b38c-dd3d-4ec6-86ba-c664ea088547", "sighting--25dd2234-57ed-4d59-a96f-a60bdda95b9c", "sighting--bb03071f-7b1b-465d-850c-80cde57cc9c3", "sighting--0222cde2-241b-4eff-85b4-36274192d6c4", "sighting--3a35a89a-2507-45a8-94ea-2b37be1c08a5", "sighting--02e20d40-16c0-4693-8927-771f0702d317", "sighting--189526f1-0fb0-4af9-b7d4-e2348f941233", "sighting--899d5416-4a21-4b08-bde9-977e9d3231a0", "sighting--983a4329-6bc6-4611-b81b-98d7bbaf5277", "sighting--336091e0-5137-490f-bfbb-658971e72946", "sighting--12d71be5-e568-4a32-bfbd-4837fdfd1104", "sighting--a502333a-09aa-481a-9977-a5767fb051b5", "sighting--3f9f4b43-9966-43fd-98f0-319d7ea2c2df", "sighting--460e62d3-bdaf-4cbb-9e69-2c3c9ba1b2ff", "sighting--a47e1c00-6e4b-417e-8ec0-18ad689bcef2", "sighting--799739a0-4fc6-40b8-9b8f-1081e88d4413", "sighting--2e233b26-c77c-4262-9fc9-dcb925febc79", "sighting--c078e2b1-a54f-443b-876b-3db2dda9c369", "sighting--8f7dbdbc-6c8a-4a7d-b4a2-56234d78f906", "sighting--5fff1b39-bc4e-4af9-a75b-2e74acf89f55", "sighting--5fd6403d-1f33-444b-b2d8-11f384d91909", "sighting--0ae77725-dd38-4125-87c5-399b04ab7d48", "sighting--0b42b0a0-5fbe-42c6-b0c7-e751e8fcac8f", "sighting--ff567545-7e0a-4965-8f04-dd6c5c58b7a5", "sighting--11a29bb2-2a28-4a71-9491-05fd9be10a78", "sighting--8a6c39c4-df15-4461-9f14-49ce69f7936c", "sighting--1f6c7deb-db71-437c-9fb2-d9141a690af8", "sighting--35ea37c2-50e8-4c3c-a009-952bc9a247c7", "sighting--8f0b0da4-e248-4f3a-a1b2-590c5c9f8c52", "sighting--71289bcb-d445-4db8-8cf4-20261ed50cff", "sighting--a34d9447-7a97-4833-82e3-d76e27619345", "sighting--54512994-53ef-4e85-8e7a-20aae0a273f4", "sighting--a2af97ff-5700-4bf8-99af-e6cc45eb5f56", "sighting--53350c51-e4aa-4ba7-bcf9-42af93cbe2db", "sighting--4dc67887-4757-44cc-a24e-4aa685354279", "sighting--37884161-85eb-4c6a-8e03-fd0aabae2fcb", "sighting--7d6208ed-8a06-40ef-8d0a-af1796eaa566", "sighting--ca5e095f-1223-4ef3-9d8a-fcacb1319d6a", "sighting--a478a381-28ad-44a6-86fd-411ed0b7666a", "sighting--d24abe78-43bc-4f35-8fcd-be9c71b7f911", "sighting--ced5f2c4-0dbe-4e78-9ab8-19d2c5996c74", "sighting--6729f7a0-3027-4cad-a150-5064c17077e5", "sighting--9de9b154-bce4-4681-ba32-89c77fdd3c1f", "sighting--c1252314-5ce3-4b2e-9120-e61e9da18063", "sighting--a9630688-c557-4952-994f-aeaf17399c2c", "sighting--fa0a1b27-d746-4984-98a5-95701dcb253e", "sighting--84c192f0-197b-4f5a-ac30-0f1b7d4a38c0", "sighting--af8fe6b1-c82f-409b-923b-5b242d1e9a03", "sighting--5a4d5d23-35c1-4d45-8636-1625efe27f4f", "sighting--2703c16d-c390-4302-86c6-c6882db1130c", "sighting--e3fcf3ca-a4ac-4818-877c-5c36f8985250", "sighting--b3ac79e5-8887-4352-b55d-7e02b08b1a65", "sighting--95a221f2-33b3-4aa4-9764-e2294f6f40ab", "sighting--8593cc27-de02-4f8b-a53c-0f010ae557a3", "sighting--03dfa20d-bcac-49d7-8461-5bb994edb9a8", "sighting--cd78cb7a-606e-4105-90de-78c387415403", "sighting--1e979a41-67eb-4cfa-995f-9ab410db33df", "sighting--0d6a8f3e-ba5c-483b-9eba-6ef8d6762e8c", "sighting--253176e3-b574-44d3-a684-72c0cb8a120f", "sighting--b6f499a7-8a71-48b0-90a4-f61d840d53c3", "sighting--b38edd7c-5c97-4df0-af16-05c985051065", "sighting--8ce91dcb-79d4-40ea-8d93-4aca94f99555", "sighting--60779a96-45fb-4b00-a6d6-72e21ad4b3a1", "sighting--b1f40fb4-10c9-4007-bd94-89516b25f8b9", "sighting--c14cd4db-dfdf-436e-b625-5e998a7c6249", "sighting--d2d7967b-875b-43be-b1da-d9729d324f3c", "sighting--771a9cb2-078d-4e0e-af5c-839ffff30867", "sighting--d507492c-d75f-4c48-9dd7-f07b71282564", "sighting--1624789f-dd6f-45f9-80f1-ac2791c4e206", "sighting--0b486ae3-dd01-4851-b658-f9090cba449c", "sighting--14d2f478-453b-428a-ab0b-2f9aecb4755c", "sighting--fa00b16c-d71b-4f34-9e5c-5a15bd18f76d", "sighting--edc9cde5-eb48-4ed0-9fea-f576a3770323", "sighting--40c7b092-5a0c-441a-8511-882bfb07e8b6", "sighting--f99f1f40-1393-4ade-8234-9f3fbff7025b", "sighting--c750fcd8-75ef-432a-bee9-e2cd7b5c5df0", "sighting--36a98e53-2ceb-4a26-96cb-a744e45782bf", "sighting--b0d053e7-ca16-4ed8-ab24-9b9e364e095d", "sighting--03259640-8e9c-4aa3-b6f4-51c86fa8a962", "sighting--7c86a64b-7908-4ba6-9c72-48f3cf989446", "sighting--84be55a0-6d37-49d8-8048-77f8064ee504", "sighting--1e23b31d-d05b-4470-854a-4c5fa5fe85a6", "sighting--ea38e350-ca3e-4c1c-993d-6798c7cc81a1", "sighting--8d3d6a4f-e9d2-4768-bba1-f83f47364d58", "sighting--9d8b56bd-49c2-4bef-8790-1c69f647ca6c", "sighting--8762e625-2640-497b-9436-5ac23b1d79aa", "sighting--a43cf6ec-5afb-4f77-8413-4c9513f77f63", "sighting--1dfe8f8e-e912-47c0-a46c-62aa11c70bcb", "sighting--199a2ab6-a2e3-4df1-9611-95d02c927eea", "sighting--91201c59-c09a-4a2b-afcc-1601863335d7", "sighting--c2eefe05-a789-4dd2-83e3-e636cfcfadc6", "sighting--794a3872-e29a-4e9e-9fd1-dc1561e8f9b3", "sighting--bab146a8-26ba-4f21-8f60-765a7db0e878", "sighting--25e94f28-0d42-47c2-9adb-f970069fabfe", "sighting--a21cfc6b-2425-4930-93a3-de4d662538ac", "sighting--9d4f8aa9-0170-4964-841f-fcb4b70d16a5", "sighting--205fe975-8562-4183-895d-a968b90fb254", "sighting--ff05f344-15f6-45b5-8d96-f4998932d94e", "sighting--fdcc64e7-419f-46ef-8d4d-05a749eb25a5", "sighting--a7c9b3e0-87fe-4875-a68a-2734a3f23c67", "sighting--d11ca840-63ca-4f49-bbd6-09d3e9b7f0c6", "sighting--8812fc85-5a76-45a1-bfd0-72a777d5052a", "sighting--7cbcc58d-1107-4bba-9d87-ccad9edbe22f", "sighting--c4629c69-d942-4800-b5fc-dfb8f488fb5e", "sighting--9b5f9700-71fc-492f-9ee3-39f9e9ff2bef", "sighting--ecd55bea-a16b-45ea-b9d5-2cc25acdd7d5", "sighting--55fb63aa-00d8-4d4a-a255-68681c18ab0c", "sighting--667d29a0-fa69-4c76-a6fa-deeb6d3a8ba1", "sighting--d3ee7279-9b81-446e-a63e-3876f1ded04c", "sighting--0968b6ef-f2ed-4263-a425-5ea9ed1768ee", "sighting--b076debc-6987-47d2-9684-5fa1db687f18", "sighting--246f7339-eb70-4e1f-93de-1b4b9d5b72ee", "sighting--b71a4f2e-5342-46e6-be29-7d4dbc1f9c31", "sighting--699ae5be-c565-4293-92e8-d6f90d87bd63", "sighting--4cb0afd3-6d00-4f10-850b-da6b81b755c3", "sighting--30347da2-3ff9-41db-953d-620ee669a801", "sighting--5d7afa7d-5e20-4b46-ba39-d70a1285f696", "sighting--b52503d8-d160-429c-ac75-68a8c0f4b960", "sighting--f5db4975-964b-4cb9-8aa8-ae77936d5b9e", "sighting--9da9ac82-a21b-41cf-8f20-18fae2666863", "sighting--3d89f864-3787-4958-a5f0-61f27fe31486", "sighting--3c1035f1-d453-4776-8467-ddfcd0f640d0", "sighting--3d69ee7e-0c66-4f3f-96b6-d984fe94f600", "sighting--2a7e51c8-3a4c-4743-9092-8eafd07705a4", "sighting--43587770-43c8-4b6c-9a77-a2be84ace617", "sighting--af3afd4c-0d58-4d25-8bc0-370e22037146", "sighting--a3329ba1-3b1e-42cb-8aed-bde5d42e0985", "sighting--1f76e736-c0a4-4d39-993d-a677e1bcc83a", "sighting--fcb818c6-4068-4b99-ace0-b28c7017479b", "sighting--3c909324-15b0-4569-99f0-be801354c757", "sighting--cfb368f8-d0c4-44fa-b664-3b3cca1a25d8", "sighting--c57b5157-658d-4de4-87ad-1f8e11b2e086", "sighting--922d5ff9-3f84-43ea-8145-4f7384f9d3a0", "sighting--7a02a1ff-5c94-4fde-8a0a-2c2eadf90ab2", "sighting--2640fadd-ed1b-43dd-8d1a-17adc5922d3a", "sighting--9968de04-001d-4e62-8ba9-3d93154149eb", "sighting--6141928e-fb42-43ae-8744-8c718ac09854", "sighting--589096c2-00ac-4f45-879f-b11510a109e7", "sighting--b6537042-59af-4317-b6aa-6d116095f21c", "sighting--d31442f9-aa96-4545-b7e4-e45cd7606b0b", "sighting--6edeebc0-905b-45f2-8b19-0ecfb98b5e01", "sighting--a7d7a75d-7dbf-4b36-9381-d41ac53ed85e", "sighting--577621a0-7a21-4979-bb5d-bfbb233496c4", "sighting--bee1181a-66a8-4f43-9bf7-d4acf3c1dccb", "sighting--3a90f4a1-20f5-4cf4-bc1a-27bc872b28ee", "sighting--fcd5e2cc-a751-4dcd-b62f-9fd6e7a74eed", "sighting--c6f0eee0-cb88-488d-80dc-8af5ed9feaf7", "sighting--0402e6ed-6104-4a8f-8527-9a277ee2f513", "sighting--91f65701-8442-4c08-a9ad-b6297ec86e9c", "sighting--149a2d6b-d5df-4086-befa-ba42086180db", "sighting--1f2bcc6e-7dc7-4ee4-ae06-9c5d5a992188", "sighting--d80c75e7-cc30-40c4-8daa-54b8d1fbb57d", "sighting--8aa18932-0e4b-4975-ada4-aaabc6eeeaf3", "sighting--5b59d9a4-1f3a-40e9-8ddc-3d3036bbcdd7", "sighting--7781f9ef-d280-41a3-8ea5-6052347023f1", "sighting--420491ad-a580-4d25-883a-ae2ed0a55b30", "sighting--95ff15d8-d934-42ca-804e-4e2c4c086557", "sighting--e8acbc70-2bbc-4d63-a2a3-9d60a92c38e7", "sighting--e2317e0a-52c0-4bbc-b9b5-03edbfd6243d", "sighting--815674cb-92de-4985-b51e-726d2cad4c49", "sighting--2a8a8d64-bf18-4d97-8d9b-dd2092dd751d", "sighting--4e89d2ab-a591-4df0-b336-8c630ab9d843", "sighting--1a855524-f30a-41cd-82e2-8534452937e6", "sighting--85306665-1148-4967-bdfe-519d48de2337", "sighting--3ddb8372-db69-4037-8024-0349f5b5d147", "sighting--3a26d661-aff0-4619-ae89-072f6d275dee", "sighting--3695fc98-f38e-45b6-88a8-36e585f4cbd9", "sighting--cd3c8559-edd1-4222-8f0b-dc3775738b47", "sighting--5b4b717a-5686-4892-978d-52556e0b18ec", "sighting--bc4fe22a-85cc-410e-bef4-dd5ded02eeca", "sighting--039baaac-9a2e-4ddc-ab12-d9f4b1de37c9", "sighting--b352bc27-66d2-4eea-8e29-f745e58f315e", "sighting--bf1a8b6a-ee6d-438d-a4d8-4f1f38b45032", "sighting--5c5d58d1-44a3-42e4-8e7e-e9db07122cc5", "sighting--b0d4b397-69c2-4e6f-95ed-75b2733322d6", "sighting--454676e2-8def-402c-93d5-3ef1acdc4d5b", "sighting--c57d06ca-4aaa-4209-bf07-ae75e18f4210", "sighting--46a60a7c-4f11-4443-99ee-ab14441074d3", "sighting--ceb751d9-7b0d-4084-ae10-8191d243a25d", "sighting--425a59e2-ee51-43e7-9ac9-ab05c73dfe2d", "sighting--ad8e624b-4209-4c94-afd7-db3c84585ee5", "sighting--f7f76dc3-778d-47fb-9037-b848f881e607", "sighting--4340edb1-935f-4bbc-a9f8-f231181aa5de", "sighting--6da49d42-734a-4712-ba9b-351e2bd5ecad", "sighting--837d5bef-8b60-4d27-bb36-6a1daa236b78", "sighting--8232cae7-2a7f-42dc-a577-62aae3a61d24", "sighting--33ae2df3-8148-4071-87a6-7aabdf744aec", "sighting--3d29b889-f63c-4773-9c63-1e07d2f90928", "sighting--7e77eb62-e8f1-4ad5-8531-8f490c364911", "sighting--52227c2e-6f20-49e4-8995-abd9c30856f2", "sighting--a148f996-e132-4c6c-abcf-3360bec501fd", "sighting--7f5a239c-f8ad-4e9a-a9fb-6c16e099ed84", "sighting--b89e3598-f76c-4826-85af-3bd6e8b79654", "sighting--31335aea-a3b7-47c5-adf6-192dbce5aa64", "sighting--43a3ef2e-3901-4342-b654-c7f6d8c53d4f", "sighting--bd8bcdaf-948b-4506-9b03-876f7452a418", "sighting--7a4acf7d-286a-4aa3-b6c7-e1e6c7bb8178", "sighting--bad2630e-12aa-4284-bb4c-8ae041eb354f", "sighting--d74d1aa8-975a-446f-8730-b01d52de0534", "sighting--af9a90f2-8f66-4354-acfc-039a0adf0a15", "sighting--7a05d795-a2f2-4640-b685-9b4a5ef32063", "sighting--f3d84c6b-f4bc-42b3-bc63-c0be2ff8b012", "sighting--bfccdbff-c636-404c-a8cc-9df5b8514056", "sighting--de8be8a6-773b-462d-aca5-9cebb7fe6857", "sighting--b9d73241-4c64-46af-be7f-d236dfced326", "sighting--0f2a6391-2634-4afd-8396-8347b4423f5a", "sighting--5dd78228-3be5-40de-9a86-a3fe72cbdd2c", "sighting--e9648209-1beb-4489-876a-e6141f11f0d9", "sighting--28f8d1a2-e5f6-44e7-a583-1880c7b98b75", "sighting--8b4ec94c-2990-4bcd-9d6d-8d3e78e1b644", "sighting--5bcebfe6-f13b-4139-aa0b-7a2d2000d611", "sighting--ba7de0c7-b04f-41b8-aa00-3e5439d23aa9", "sighting--a3b5fe97-a7d3-424b-ba3e-07a49cca4c87", "sighting--074a9589-4993-4ef4-9b84-120522998326", "sighting--f673840d-8401-4e88-84f9-78ad1aecadfa", "sighting--53337e55-3d28-4927-8cd2-2fa05ed67fa2", "sighting--d0c3ebe1-187f-418a-ad49-5d84f96e5bda", "sighting--345dd82f-87f6-4b89-a6f6-5f384bb09450", "sighting--3a3cf856-8e11-407a-8cac-92321d23f729", "sighting--492d78e8-1d54-4e3f-bd4e-6c721f4ff8b4", "sighting--714c0068-3517-492f-ac6e-cbf3d05d77cf", "sighting--6d1d3e40-cc69-47e8-b7cd-0488537ff02c", "sighting--16dfa046-28ad-4a8d-ac8b-2a382782ec89", "sighting--d17f628a-0c69-45a8-91af-b91688b54df7", "sighting--27092652-e73c-4fb7-82e2-110d6e671eb5", "sighting--9e756547-4c1c-4b15-bd16-a593cd0e9ef5", "sighting--372703bf-10d7-49a2-b3ac-4ce6307bf238", "sighting--f256ca53-9451-4dee-83b0-2255d9a8c92c", "sighting--24f07370-0b3f-4513-a328-bdde76680cd2", "sighting--b6a3e8b3-4503-4d1a-860a-64c320098237", "sighting--0ec2751d-9900-4004-acd6-ad829628f8c3", "sighting--217fcad3-b794-4577-9226-f30ca2cd5119", "sighting--de930bb0-8096-42fb-9810-39cc1b227748", "sighting--8ac423d7-0446-40fa-b7a3-de973bf2a5a7", "sighting--73b037c3-852c-4ad3-b771-41e2880ae8f5", "sighting--2535ddcf-3d8f-499e-9a8e-e8a472554a7b", "sighting--0f6a3e2c-a954-4cd2-8e50-49d961727550", "sighting--d7e2204f-3917-49a6-a4fb-b007d2576e0c", "sighting--94bd1f68-bb62-429b-b05b-8cd57d8f95e3", "sighting--7077473a-bdd8-43b7-a461-d00511c5108f", "sighting--e0930c68-34cf-495f-a51f-79202f1b132c", "sighting--6ec73dbf-303c-4cae-8461-2bd3e5b8ce44", "sighting--ba36c1c6-2ff4-4fe5-be6b-ec162f55f9a3", "sighting--aacf66f3-5c56-4a80-ac7a-9f6dff319dd1", "sighting--43b92232-05aa-404c-9d9b-6cff901b52e7", "sighting--c5649094-2061-428b-a623-46dfd10f7aef", "sighting--73119251-6e40-421e-8c60-1cf9b87d8d1a", "sighting--201c584d-2a0a-4308-bb03-9b89d8d2160f", "sighting--ea757a9a-9187-4ef2-9f71-ff5e7e4835a2", "sighting--80616d89-e145-49bd-b9c4-86f45187c9e8", "sighting--c5b2945c-d809-4f08-a9b8-07530a6dadca", "sighting--e96d2cd9-0d8e-4adf-9639-9f5eacdd33ca", "sighting--1f1bad09-fd90-4536-8ee8-d15f01647d6e", "sighting--9d10ba33-dd0a-45b3-9a7a-6884ae4079f7", "sighting--346b3c56-555b-46e0-bc7d-b17a39540e0e", "sighting--a499e610-68fc-4a43-aef3-4bbffb722313", "sighting--b97d40fb-e86f-4dce-82ab-c4592ec282a4", "sighting--b81cc3e3-e34b-43f9-b658-f050b7c20ab2", "sighting--8cb218e0-785a-41ff-a0d8-46c4ffd2201f", "sighting--6a874e80-ddc7-445e-80eb-e450abb7aed5", "sighting--a4203eb8-e760-4e73-bc70-33eb2e256149", "sighting--0ff8ecf7-2d6d-4746-9c00-28dab7b5790b", "sighting--71b2bde7-4097-45d3-a3e0-5734eefa1f60", "sighting--2f1a0562-0676-4f06-a290-76103bd1d7d6", "sighting--14f8f879-cb9b-4c71-bbf5-be893c67d0a9", "sighting--562b55ce-0657-434b-a60c-cafeae6608f7", "sighting--b1f36e99-f3ac-45a8-8afb-a286fc266605", "sighting--a5163d61-0dd1-4b27-8f95-9d239de0c03a", "sighting--e5abd7d1-c031-4dfc-a78d-e7f015b158cb", "sighting--f47dbbbe-1459-4b23-8c4f-dde974f52cd1", "sighting--2aa86f2a-9614-4517-a92f-c63ebf2d722d", "sighting--fb32a0ee-44ef-44ec-924d-0d85dffecf30", "sighting--cac1c0ea-5437-45f2-8d78-4c48a936fa6f", "sighting--0096ce25-aacb-44a2-93cd-f8c08408a0b4", "sighting--96b20ecb-3e84-4759-b769-c0e2529dc7a1", "sighting--48c81d4c-6590-498e-9892-8648598ab8a4", "sighting--1dd14177-a6d2-4681-a099-75a9949ac1a9", "sighting--6783f667-0d51-4e65-a1ae-c4ce4d0d5eda", "sighting--12b047f1-bc15-4ba3-83e1-e8ddae52bc3d", "sighting--d743670e-cf1b-42a7-8ffc-801dc5622ad5", "sighting--baab2194-b67f-499a-89cc-5d77b5c35a13", "sighting--dccf71a5-f3bd-42d8-8d3b-c209183071c0", "sighting--91d9bff3-4f07-4931-a11b-98e976cea3dc", "sighting--e90aef56-1eae-4f93-bb83-21709de8e8f0", "sighting--93824f65-af4b-4dff-bc13-5804f5901942", "sighting--e277ecc0-9254-4a5a-99f1-cefdc68378e5", "sighting--595b6683-c6d5-4ca2-ba6f-2fd389e8309b", "sighting--14ae03ed-8c80-43f1-bc7a-d9fd82e3994e", "sighting--b703398a-236a-4b8b-be61-a896e04e2c32", "sighting--34b5ad8a-10cc-4e06-ad05-b43a828d5c64", "sighting--92749d01-d472-4310-9f40-f7b90e78fd8b", "sighting--362f7070-8955-40be-b139-ba2804c68602", "sighting--9d502300-c986-4385-8986-c726f1f4968e", "sighting--7c1fc7e1-bc40-4cab-9695-03cdd4720c23", "sighting--9c5f67cd-beba-4f2e-8154-2c4750b4f4ab", "sighting--fa130c3f-bbac-4b36-b9d9-6cf43b50e15f", "sighting--88a0a995-8f38-4cbc-b686-3f329be780e3", "sighting--7411a37f-7234-45c3-95ef-3061ff847432", "sighting--e4d46a91-b559-4cb4-a2a7-874c02e1654e", "sighting--f37fb198-e240-4885-91dc-6fea01143438", "sighting--b85ccaf1-e5b2-4991-897f-0c7ade45501e", "sighting--e436fb62-615a-4624-b151-a39b0c74411e", "sighting--6b5557d5-add1-459b-a97f-b0203f9082d4", "sighting--4b67dc33-7b53-4608-887e-10611b009319", "sighting--a54094f3-34f6-4fa8-b934-3f017a918bcb", "sighting--1c2a3a03-c199-4d60-874f-751b4dd1c990", "sighting--af7cab3e-c61c-4d1c-8f67-b021b12c25c9", "sighting--45565c66-4abd-484a-b593-ab838f13e6f3", "sighting--506f2f35-a2e8-4684-99a6-3548ce07ba50", "sighting--a3a4ed31-0f3a-494b-9f1a-d61dc8b6fe8e", "sighting--c553a03d-38ac-413f-bd16-6b7f6c7dee75", "sighting--1b5676d1-a049-4131-8183-cb3ba7117562", "sighting--3d55eebd-9ddb-469d-982a-49a62d9e57c2", "sighting--20492194-1d99-47d2-9fb5-2867f4c3564c", "sighting--f1eb916f-4fc9-4e4e-8883-68d74ca45414", "sighting--39f10f43-02f7-41e5-8da4-8f366f697aa9", "sighting--ed4063fb-22ec-4653-ab77-932dcfa19940", "sighting--dcbc17c8-18c3-4c40-ac6f-030277e94760", "sighting--e82b2563-e38a-443d-8f9f-272f204de024", "sighting--5c0d9caf-17ba-4596-b5ca-beac82dd1b53", "sighting--25ee1fa6-06f8-4152-a309-6aff30d5a07f", "sighting--2e298822-c533-4598-9eed-edfd8b3603bc", "sighting--9f6c3849-659d-4e52-9366-3ea5cc4dc3ca", "sighting--cebc6075-ba75-436b-9a42-3fbede0b88e4", "sighting--6a261a82-1bd3-438b-9221-836580e67a49", "sighting--ce4f93a8-c9b7-4880-b9f0-b16ee2958521", "sighting--ba6d3d64-1f40-45eb-871b-f550a41c0096", "sighting--d9695bb5-4fe0-4c05-928a-3f6cfe52be86", "sighting--b60a3125-0322-4f30-9ca2-93b7b05d1c40", "sighting--10fe82d4-5952-4dae-825f-683b5aae0e34", "sighting--e78f45a5-15bd-419d-8f56-f6fc065d65c4", "sighting--6dfb4a89-5d68-4648-9e6e-34a55d160b4b", "sighting--8f128040-acf9-4604-af42-ee6a55ae1e0a", "sighting--7bbe3db6-1520-44b5-95ea-79667a57d387", "sighting--b9ad72ef-4cb1-484d-8c7c-dc85424fd790", "sighting--3ec86898-51aa-46f7-b993-077a6c046fed", "sighting--22ea6da0-bd29-4f5d-8164-fe736b4833a4", "sighting--c9e35baf-a3bf-4f33-959c-9538dd73cf98", "sighting--5afc56fe-330f-49a5-91c2-1b98df79ce2b", "sighting--5ef1fd7a-e26a-4f1d-87e5-22751eed8074", "sighting--3f5785e5-056c-4db2-82c8-3d6b451fcb60", "sighting--031e9f23-cc5c-449e-8863-165ded06c7df", "sighting--42cb9626-7242-4723-90ef-a20766715047", "sighting--755675b1-7dd3-43a2-83e0-125db77d55f1", "sighting--8f13f822-934f-41eb-9136-58c8649ad2be", "sighting--985cbb7c-2946-40d6-a39b-35232c98d090", "sighting--29c5decd-cfda-4a60-9851-923e5182d92a", "sighting--925a5e05-54f6-4328-af15-6fb7d1854f73", "sighting--daa46508-2c38-4cc9-a164-a941b7cc0945", "sighting--0673db00-ec91-482e-806a-490ff0ec068d", "sighting--7ac23333-3c19-49ad-b227-b2e6c8de3ea7", "sighting--0de67aeb-83b1-49c4-ae41-5d6a9d74f0fd", "sighting--3a5c0bb4-1ab0-453e-8620-45a10313fb60", "sighting--450d524a-ee47-43d9-aede-a018108e1884", "sighting--263cdb8b-e57e-495f-9801-2d515266e24d", "sighting--5d605829-eb53-40ff-9dad-ae45d698b671", "sighting--a5242bcb-7b31-4e61-b311-9cabccbeffc4", "sighting--aa64bfd6-4785-4d50-901c-5a69eec2891a", "sighting--8a4dbb3e-cd0f-4d60-81b7-d978a443ba05", "sighting--ecfbb9c7-76e8-4f59-b183-d2fe27bee7f3", "sighting--53b8c624-24cc-4e8e-a885-11c93e171f21", "sighting--01b3fca9-8646-40de-9f50-aa5d4ade9bb5", "sighting--ecee6e9d-38d5-47aa-bc57-486ad49af858", "sighting--4040bac0-4afa-4efa-a441-e4a2824e194e", "sighting--09eef09e-9465-4e62-8f4b-037c625421b0", "sighting--95d0be9e-bf42-469d-a808-6b13f8aab98b", "sighting--0b64e458-8d54-4eea-bf83-8f54b0553c6f", "sighting--c5016f30-33fa-40d6-be9a-522d02be39f9", "sighting--2741e6f6-61d1-4b4d-ae93-6b8d1ac850d0", "sighting--f0fd98aa-c1cf-424e-a6ec-91a258e9a5bd", "sighting--6babf9d0-84b2-4c00-a85a-d8dd2390ace1", "sighting--3d53e5fe-1ca2-4705-b4cf-f6e573c21987", "sighting--2a0e4761-fe0d-42ad-bb99-f9fa788157cf", "sighting--3d5cf987-3f1e-47af-831d-ca4a1711e479", "sighting--6155367c-8591-496a-bc10-1a87b2b20154", "sighting--928db68c-57dc-44b4-bd30-3a517a596443", "sighting--8b9a8d8b-a016-4d86-bea3-8b747162d5bb", "sighting--90f01fc6-822e-4057-9d0b-9e095da76b82", "sighting--bf52e649-ab74-446f-a7c6-5f06c00cc5fd", "sighting--faee64f6-a52f-4115-99d3-488c56204019", "sighting--10394bcf-c7ec-414e-8d4d-b0de3982d565", "sighting--c405e9b7-20b4-4f6d-aeec-1c154a446e92", "sighting--f1eacb4f-38e8-44a9-970d-1b9fcaadc129", "sighting--85b0be96-8720-4ea7-8e6e-ae93015bd239", "sighting--111fee2d-7b7f-4fab-8336-c9d2460907a9", "sighting--efebae29-341c-4020-93e8-727784574991", "sighting--812df68c-9955-4066-a109-c110b57cfb6c", "sighting--d661d37b-b313-4660-ba40-6a5d86d251bc", "sighting--31c0b8de-cb4d-400c-b6aa-02834282ea17", "sighting--aec5e98e-17fe-468b-97d9-db4619974bea", "sighting--0302ca13-7655-44ec-8e11-193e32c55cc1", "sighting--2be37052-e9cd-4be1-88af-5fed833161a1", "sighting--d5872da3-1640-45fd-95cb-d0fb69cde9de", "sighting--5d16682d-0cfe-4568-afb4-a561fb76589b", "sighting--d74427e4-d940-4086-88f3-4c49c96b6531", "sighting--51534c73-8528-4a7f-a24f-5a7afcf81d41", "sighting--d9fa10c6-9c33-432c-92fd-648eb8c048cd", "sighting--aa2217e1-093d-46ff-8c93-0f8193b2f927", "sighting--6d7cfa03-529d-4ae6-86b5-7d3460be48fa", "sighting--343a54a7-50ec-4e89-bac1-cf3fd67c2a6b", "sighting--97c7cd20-1b11-4cc6-820e-2376d286df9c", "sighting--29191b3e-8e0c-4899-9746-1277e05e6d41", "sighting--40d7cad7-ce2e-47bc-9022-175eb375af7c", "sighting--89b0f36d-736c-4601-a1b5-86ae0de3ae4f", "sighting--647a50be-16b0-4e86-aeb7-d59c4941c492", "sighting--9c9f0bf9-6cb8-407f-b531-ae1336854e60", "sighting--62b3aee4-727a-4b85-9e86-6981e737a3c0", "sighting--25662e23-e557-458f-925c-bf7738654b80", "sighting--807487de-3123-406a-b8df-939dd804df64", "sighting--e4c4b050-b8d8-4387-a99d-4a1e5e54c059", "sighting--f1dc1503-c05c-4f86-b395-14c1cd3054ac", "sighting--2d2df96e-9f88-4465-9d54-e37cf5901481", "sighting--b2449e13-b8f0-4a3f-9c4f-0203b0c61334", "sighting--6c4c7b55-ff0c-44b2-8e77-9f64cc3ed26d", "sighting--706c5d26-e992-4d94-8a45-a604b2752fbd", "sighting--7a775a4b-fb8e-48eb-91b2-5cae6e3cd4c9", "sighting--7ad0e689-be49-4a15-a6a5-c07f84ae808e", "sighting--73e9b44a-3ab4-48fd-b019-e47f1ce8c46f", "sighting--b76b3876-cc82-4fd2-b7f0-900cb1fc989c", "sighting--e22f5cc3-a36f-4fbd-bfab-9259354833c2", "sighting--eb92bfb5-a8d3-4554-9636-ee9642afc7b6", "sighting--a7215527-e4d5-4fe3-80cd-25aac89b3937", "sighting--ff1b4fd9-61f4-428c-a174-6bd110c46a0c", "sighting--685bb738-0086-4969-90df-f513fb266ddb", "sighting--e3ff960a-742b-41f9-910a-a64702960b8a", "sighting--0cc7937b-1dd1-4ebb-8e8a-cf198bf645dd", "sighting--a0fad04c-fa75-4942-b538-e036db1f339e", "sighting--2264ad5d-2477-4921-9759-08b8a39bd145", "sighting--3d7472bf-28af-4893-8a6f-fed875cef9a9", "sighting--e46d476b-6ad4-4fbd-9444-b95dbfdc4e6f", "sighting--a6e46044-ba3d-4864-ab94-264b2a3edfce", "sighting--02c56dd9-3570-4105-b4cc-5d279e4d4726", "sighting--b8db3744-53f6-481d-a2e5-1386f2d7c68c", "sighting--36635716-29b5-4f8f-8784-e793e05a6598", "sighting--c519d4b1-f2b4-4397-9631-f33e1f05fde0", "sighting--24b76daf-c4c1-48c8-86d4-52a4918d74a7", "sighting--7274841f-ca4a-4432-9bb2-cca460583dcd", "sighting--7c45c121-a945-4348-91b8-89b7477f2c04", "sighting--c92b8e4a-fa8e-4175-83ad-5d3492b2fc51", "sighting--c3ba498c-0ce1-42c4-9798-06895ebf2712", "sighting--eb76037a-193b-4641-a3b2-924fc04f2525", "sighting--7acbe96d-4171-4ac1-bc73-c5f5de88817d", "sighting--e237a099-179d-44fd-a33a-59328681a694", "sighting--a86b0d03-42de-42d1-a28d-966cc4b0ce37", "sighting--ff9d4784-c83a-415a-8c0e-8d87e565b71e", "sighting--3af4ba3e-e9c5-4c1c-8dbf-c4ab12ab291e", "sighting--751f2b75-7c0e-4413-af74-8a8706681a93", "sighting--dcfce526-ae76-491b-8902-7a44f5da602a", "sighting--f7073f09-c8c6-489c-89c4-fdf936d11798", "sighting--cb25aa78-c0c4-41cb-bcf1-36c0b16732e2", "sighting--c9afe6b6-38bd-4da5-846c-d1ef446cc4cd", "sighting--82d567c4-9a5c-40f1-9393-4f716b42bbc8", "sighting--6a971988-1aaa-44af-9071-fc0217b317c8", "sighting--092f6ffb-e8d8-4dae-a5a7-3307e7ea4152", "sighting--9dc35a79-3eef-4fa4-bf86-53148fb99e5b", "sighting--3f93974c-2f23-450a-b7ec-2f684876019b", "sighting--a99bd7ff-327b-49a1-b615-1366543a8bee", "sighting--3bafaec2-6ec9-403a-93d4-26c5f8e406c3", "sighting--4ad60f39-9a62-4d2a-99bc-62d7d5e30b4d", "sighting--d855747e-b7ec-4d30-b373-bf2efb01a75d", "sighting--22d0342b-f941-4984-ab07-2000fbfb07ce", "sighting--9aabe44c-b5a8-48ee-8579-37f754a350f6", "sighting--1a0b7e9c-98ab-48ea-a22b-43934cc3bf10", "sighting--b2b88cae-6931-49ed-9983-d86f2e4fac03", "sighting--1c27b3f7-6c84-47f8-aa60-2a8517eee877", "sighting--ea42c909-71ab-4aa8-abcd-769e72a5c862", "sighting--4a459f5c-756e-4b5a-b97d-427c5e401ce5", "sighting--5f27a716-48f2-460d-a954-8c6caf545ee6", "sighting--a487c6b9-d35b-4a21-ac1c-9f750c431df4", "sighting--cacd7221-6779-4e11-8af5-cb032a520036", "sighting--0bd8b04d-26c3-4feb-b310-9d31d39dc9ee", "sighting--afdaa2b2-6211-4653-957b-415164bd6b15", "sighting--d7e66c38-7c45-4162-864f-f42a56940287", "sighting--54426536-2f0f-440b-bbb4-88a05541f567", "sighting--1b148c6f-7f7b-4529-ad6b-bf83463df9fb", "sighting--fdd63e8c-4dd3-4bd8-8c77-e1400383cbea", "sighting--4a8242bf-3653-49c5-b17b-2bb089ea4eda", "sighting--79358899-77ac-46c4-9f76-262669b5d92a", "sighting--cf5bfb72-8863-4203-9e85-a1c88c9ea8ac", "sighting--c00397f3-f8ce-49cb-9b7d-984176dbdd0f", "sighting--b843d7cf-8625-4be7-b65c-a3ee48309171", "sighting--8eb4f538-83cc-4cfa-9d29-fde23986e13c", "sighting--d6504ca8-147f-40d6-a670-5c5048b1cb15", "sighting--829f11d6-2e58-4749-b212-f9ee939a3337", "sighting--b860a3db-709e-48ca-b3db-22b7ab6e71eb", "sighting--950d7392-dbfe-46b2-9668-24c112e3ae14", "sighting--babb62ee-259e-4182-91c1-db5800085e59", "sighting--c4e9f08f-6adc-4e0e-a865-5e8a3b2eab13", "sighting--12257fdd-6948-46a2-9b39-c21d3b7bf05b", "sighting--9cc25384-49a1-4104-8d35-8ce175d3ecee", "sighting--7a4f1e8d-81a0-4805-8bc0-dbd07610595d", "sighting--5779e240-f8a2-43e2-b37c-4447a6d0c27d", "sighting--426228bc-d6e0-41c2-bb28-5115275c7e3b", "sighting--3c0a0f99-25b0-4f77-9cdf-65b6e066d2ad", "sighting--67d199f9-5da6-4180-ae4e-53134eac696b", "sighting--c439902e-5043-4991-9796-db2b73cabdee", "sighting--09d71268-973b-412d-ae18-bebea1251331", "sighting--1ad31992-a51d-4ebf-9bf6-acd98a7190da", "sighting--78ca1f85-2667-44b6-a869-fa8e9661dbeb", "sighting--b8f240a1-dca6-44b5-afb0-e9bf1fe53271", "sighting--be5c10c0-8741-40da-85a2-5e24d5af6d49", "sighting--5c717371-2cb9-4c6e-a0e3-b4d70cf45695", "sighting--e2ac467b-f7ef-4007-a6bb-2ee6a64576ba", "sighting--812cf647-ed32-43d0-843f-6824c31c519a", "sighting--81b06d3d-8465-4f84-983a-34341f649b42", "sighting--e5fc7e8d-139a-406a-9187-6b9eccd27e38", "sighting--8b60b7fd-bfe3-463d-865c-6f05049cc45b", "sighting--681183cc-dbff-417b-9b6d-284e07799dd4", "sighting--808653fe-56d5-44fc-9f9c-07a113e065cb", "sighting--8c851ad9-246a-48a3-a9a9-62c0a5295f66", "sighting--53edcba3-52b1-4c61-b59f-76d326f57405", "sighting--1297a7c9-f62a-4a79-be60-a018dfd001e8", "sighting--ac39dcb5-fc26-4ce6-9d6e-99f9c884b6fd", "sighting--f239916f-45c6-4744-8e41-7a1f89b9b4ab", "sighting--ed045738-ab75-4e58-8504-62f1cc6654c3", "sighting--87f3fc9d-80ff-485b-9eb7-f3e31ba379c6", "sighting--1c2767a8-4e2b-47ad-b6aa-1e3afe0dcca3", "sighting--9333c272-5652-49ca-8c0f-229ac4d1a5e1", "sighting--9d72c39e-c432-4748-a4c3-beab9005fd93", "sighting--ac4ae35e-b574-45d9-a14e-5d54422f4c0b", "sighting--c06993c7-ef76-43eb-b757-fa6c33b380db", "sighting--8e483fce-23e3-4d0e-b41e-d8674fd44084", "sighting--014bede1-c9a6-4c4c-9e2c-516e4d6e0a8a", "sighting--196e6ce1-9365-42dc-8366-8204cf9cdff1", "sighting--b59edfc6-bc24-48a9-ba73-69a9dd53083f", "sighting--274bf0c2-8678-4363-b060-6a70998e50c1", "sighting--7718e1be-a6f5-499f-86c1-757dd4ea794d", "sighting--f0cea3cc-8ed7-4d64-9f85-497995835881", "sighting--34e17c1e-43cd-486a-bade-64ba15fc9987", "sighting--2edb3901-6304-4fc2-ab49-a03844e77502", "sighting--4c523ee5-e600-4755-b203-6d6955a7359c", "sighting--2100d7a8-cb22-40f4-9f06-4e6d65d45401", "sighting--c2465c41-deb1-4eaf-87b3-a674ad2027c8", "sighting--186f6755-0437-4801-9e2b-a9e9b9bfe905", "sighting--d655e90d-916d-4433-ab8d-b6ce3a258cda", "sighting--2b1bbfe4-3e83-40c7-aee1-a139cba2b574", "sighting--928132cc-d47a-413e-ac68-bb5120598e9d", "sighting--1004ceab-50fb-436d-af66-6909a1e25d34", "sighting--70c2d33c-7790-43f2-8f77-f0cb2d0f514f", "sighting--811cc9fc-6138-4b6f-849d-587471c9fbe1", "sighting--45404649-c078-4b61-9e4b-06d037c3b74a", "sighting--1334a00f-740c-4ca9-bca7-8460e75d8a7e", "sighting--3088a1b8-e0a7-4b4c-a019-b6f4d89d95ec", "sighting--ef051156-a99d-4c6d-9547-a70944dd063c", "sighting--3722a37c-3de8-4541-9507-ff5714fcabfc", "sighting--619db4ea-e84e-4540-86b2-7eb6bedeab46", "sighting--d81b0751-a472-4e55-aab9-7487e2cde519", "sighting--ad36e33c-a600-43d0-bf83-39b006d14a6e", "sighting--47b504e8-52cf-41c6-9c7a-9c546c9f328c", "sighting--a657b3ec-35fc-43a0-beb9-abc6d899b0cb", "sighting--eace3210-1cae-47b3-a227-5e3ddab1bfb9", "sighting--197e1893-3709-4559-8577-962de00d8e5d", "sighting--49599bce-3c4f-4e6d-ae85-5c7f3a84c129", "sighting--23506215-1c92-4d4c-b07a-65ed0ca8bf80", "sighting--e56d4653-add5-4e34-963e-526f98404331", "sighting--45104b96-ca67-4683-9a4a-d7dbbb7cdcb9", "sighting--8f693bc6-668a-409a-aca5-5c363eded9ca", "sighting--3029325a-6644-493d-b195-94d86e5424e0", "sighting--ee9c5f1f-b977-44de-a38c-961c413f1b6f", "sighting--e2672154-0eef-420d-aab2-445a1df38131", "sighting--9e701cea-d93a-406d-bfaa-0f7abc273e79", "sighting--7e7b4461-3eb6-45ba-b0f3-47607debc017", "sighting--9077873b-44b5-496c-98a9-13ffcbdd3415", "sighting--5384b803-ca3b-422c-9a25-1488c753b1f1", "sighting--82612aff-c6a3-40c2-bbd6-14cc5cef445d", "sighting--30a37c3c-a475-4cf3-9650-ba627654e6bd", "sighting--12424a8f-3cb4-4e9f-9040-fafbf681b6bb", "sighting--bcf973f0-f46e-4c3a-9a63-a20ba54c33b4", "sighting--b4f8ce35-20ad-4636-91f1-ef3270a411ab", "sighting--5ed10bcf-25e7-4f16-9bb2-7aa959bb30e7", "sighting--e2751705-4904-4614-be35-4a976889a372", "sighting--a85761b9-5b84-48ce-bc13-fa64d4a68e0e", "sighting--ae66295e-4116-4b96-845c-73a13ae138c7", "sighting--addc4181-ec0d-45ad-b860-6b58736a2d47", "sighting--5c4f8e5d-d9f5-4ab7-abb7-e0073cd72bb5", "sighting--1a4e617c-9014-4cea-97a3-438c5d5113f3", "sighting--dcd329fb-b10b-4ce8-b643-a2577a6f604c", "sighting--09d86eac-1d87-49a6-b806-f76da741d399", "sighting--b9e27c23-b742-4e6f-83b2-de6c244850e1", "sighting--6f015720-f893-469a-8998-8c4c7f9807f2", "sighting--e8c7966d-44cb-4735-87d9-c52ba2b1e04d", "sighting--4f13cb44-851a-4d09-8d45-6f47eb0f2aa9", "sighting--5d1863e8-459a-4e4d-a6ec-0457def6a274", "sighting--4506711e-0811-4a5a-baec-5c573b399fe1", "sighting--636b99eb-8258-4aee-ad4d-0f0110a795dd", "sighting--1e3934c7-9a8b-4df7-a71b-3e47c5d46f6a", "sighting--6dae859f-7c62-4800-8d7f-c7e084f31536", "sighting--1c34dea1-e637-4c50-8771-23f39ad74551", "sighting--8569df4a-1384-4f88-8566-ca3fc9fdcd60", "sighting--b38b5edd-e6f8-410d-8b51-13fba86a74fe", "sighting--e145db90-3bbd-43b4-9b0b-9d1dfbd647de", "sighting--558d26d9-a1b3-4e4c-b137-194e60a807dd", "sighting--d12a6f68-57ce-453b-8417-2c156751f182", "sighting--e19bcaef-aed6-4986-a0a8-52480c13dd8e", "sighting--f0281bb1-dbc4-4eda-94a7-dcd5e0c9b7ac", "sighting--da0a4eab-a895-4bfb-89f8-6f229fb308fa", "sighting--a82d60e6-4051-43cf-800c-257b43088bd6", "sighting--f85c6f30-0faf-404b-937b-ccd2f5cd404e", "sighting--8b83e816-8a4f-494f-8f1b-a233cffb427e", "sighting--e13417de-bab9-4fe3-b940-d001c45521da", "sighting--36c474e3-95ad-470f-9628-bc86d76ab62b", "sighting--2f3be1ad-8803-42dd-8919-b8ac171a87f2", "sighting--be49651e-128f-4648-90ae-96292d209f23", "sighting--4cc13f28-49a6-4a15-a587-8cfd8b84f0f2", "sighting--64e60c9e-199b-41c8-9db0-449468cb1f2d", "sighting--ee9ddd4d-f056-40e3-860c-7aaf126541a2", "sighting--2a0c0a26-be77-4463-941b-9d48b87064e1", "sighting--3487e5b0-114a-492a-8af7-083178649a46", "sighting--90921ca6-fa37-4a05-ab38-7c1d9c18d8bc", "sighting--ff8174fa-9411-4232-9418-0b977828f584", "sighting--21df04f3-6ab7-4e93-a456-9a5122138f41", "sighting--fa2ae437-d868-4d5e-b12b-321454fa2414", "sighting--8ba4759e-0f41-4943-8def-7c6a087b5316", "sighting--801146da-ea9d-4738-a140-1c9ecc7bb9ff", "sighting--4be1ae5d-1b5a-4d59-81ff-9af494aa2f75", "sighting--75225dd6-8ff7-45f6-8842-402030d2c9bf", "sighting--d1b1f1c8-917d-4429-b99b-7e75b0f817fd", "sighting--c27727bb-a701-4ab7-9cb1-b457e3dd2a57", "sighting--1f2fa574-b65c-4616-9dfa-a61fdfd7e7b3", "sighting--b5e8a767-f4c5-4c51-bc09-ec2fdcd08885", "sighting--13610daf-3e0f-4f5a-af1f-c15eb574427f", "sighting--89d69223-dcc2-47b2-8433-bdd1e8f58964", "sighting--88d75ed8-8aab-4be7-91a3-d53472deb665", "sighting--0ec697d6-d4d0-431b-8ef1-7d0064613c33", "sighting--a7603111-b670-4bf4-aa44-04357d9782e4", "sighting--1c7157c4-3d55-4ded-851c-c67e919a50ec", "sighting--c3ad881b-676a-4521-a956-fd34968708e7", "sighting--7b27266b-714b-41ff-87df-6105da75f3b2", "sighting--8d568815-1412-41e2-b208-18e8f7273ade", "sighting--1f0cf16f-3703-4f9d-ade6-99d42a8ae470", "sighting--3a7aa71f-e229-4b71-bd3f-163d90bd73de", "sighting--304410c8-a8ca-477b-a1d7-acc89f43410e", "sighting--8cb4e8b8-eb55-48d6-a485-ff46cbbba633", "sighting--7314ae6c-080a-4efd-a105-9fc149c4c9e9", "sighting--4b36f7c2-2c7c-4313-a3f0-dab251b59cca", "sighting--2032c246-7fc7-4f73-9a18-e84baa14e94f", "sighting--39032589-f68c-4e22-aef6-4605a88ae8f4", "sighting--554ceee6-0b4e-4cb0-b281-e47735a023fb", "sighting--65fd8854-4df7-412c-97e9-2345bbbe7d1a", "sighting--04aa8712-3768-4e1a-b147-c85e3d26434a", "sighting--06ac22c0-07ea-4dd1-8a21-e74cda7c36ec", "sighting--2e8e219b-4ec4-4104-beb9-ac2a30c1c2ee", "sighting--e0dc20db-70fc-4215-b4e6-0fef650b1acc", "sighting--596939e6-1299-4e58-aa66-03edcb36b224", "sighting--cde04ca6-b79d-4680-9d04-4714d0969038", "sighting--71b17bca-301f-47ff-a122-009c0443fee8", "sighting--a51ff868-0cc8-4c5c-a224-3f04fa5a17ad", "sighting--0d5fff1c-26a2-4aa6-a868-d7ff849cf163", "sighting--d63c78f2-02a7-4691-898e-01193b6193f0", "sighting--cb862773-fead-41f9-b700-2cc4088883f9", "sighting--98bb8bfd-3237-4641-8f52-0c23030ed3b7", "sighting--68f15831-60c5-4b15-aafd-dd4b6f482ac1", "sighting--307403df-045a-463e-a7f3-f9af2e5528ea", "sighting--73bf3b59-0f37-4fc9-8074-6944f8f7da3f", "sighting--fa572563-8ef0-49d2-8cbd-d654a2bc42f4", "sighting--7e5bcf27-1076-465a-9076-3759d9cb5f3a", "sighting--de99bae8-b2b0-4a9d-a13d-a5f9b061d9e5", "sighting--0de74d64-7e8a-465c-8417-55ec2b8b6958", "sighting--8cf59742-a03e-418d-8fe8-f0797b62c84e", "sighting--8a1d3a05-bfe7-4979-bc30-35a99d79da17", "sighting--3bd1a825-2fc5-43b1-a193-0cf2ead422be", "sighting--024a3470-6d2b-4f54-8cbb-f2312ac00a6e", "sighting--d1bcac8e-449a-487f-8726-98b58f5bf82f", "sighting--6e327283-e284-4355-9665-9c4674a6c06b", "sighting--1cf1a09e-048f-4383-8a3b-e651550ce2d3", "sighting--3c390486-2025-4fec-a22d-631c3a0af601", "sighting--d968a228-f21e-47b6-8cc9-c4944c43adc4", "sighting--2b463939-9a58-4450-aa9a-beb72c11cff1", "sighting--834f4295-c44d-4453-9537-81c80eca6998", "sighting--9bc7cc06-b183-4773-ab0b-3a5fd83e19bd", "sighting--6d79e04a-8be8-4549-bd8d-bf07b7df575f", "sighting--d47bc6f0-7d54-4ad6-9ef5-b999982380e8", "sighting--50f34243-6f81-4224-9b0e-8db9f3c60fbd", "sighting--963fe2c5-359e-4a99-8b9e-0061e73982f7", "sighting--deccf944-730c-4172-8fba-2f740c3739a6", "sighting--bf6a75f1-b23e-4959-8447-1c194ba623d4", "sighting--7dccb1ce-0481-4e1f-98e8-e71fd9916845", "sighting--ef05934f-c1eb-4638-97aa-9fb7e449f562", "sighting--aa4ff252-1f4b-48ff-8cbc-070c7b8cddb6", "sighting--9340f5e0-adba-4702-a004-6fb6d786ff5c", "sighting--92a5d3d5-7d15-422a-81b2-efe292438218", "sighting--574eeb9d-caea-4503-85ad-c2219ffa7c22", "sighting--a8320621-5586-4269-bec4-4f86d7a06e53", "sighting--383e63a1-9e02-4c3d-a921-f92a939b043e", "sighting--f8f1bcc6-a6d0-4a7e-8aa0-61f2504dded1", "sighting--da709538-0486-4464-a4fb-82a590922dce", "sighting--32fe91dd-2d35-4ccc-8004-42e91b23e854", "sighting--1c219e86-5df2-482c-9785-5fc7650e6791", "sighting--a8487b89-739d-4d3f-a4ed-d388376f8ad4", "sighting--6c5c00a5-5e1d-485f-be1a-47174aaf7858", "sighting--0ebec77f-7605-47eb-abfd-43e8d270b101", "sighting--79ae7725-c20d-4306-8c9b-5eab4bf1bae6", "sighting--72b22d7c-2de5-4101-bc2f-35e6d48b8068", "sighting--a47bcb7f-dfa6-4379-a22c-580d12ebfd1a", "sighting--b350397e-9a47-406b-83f0-6832ce770433", "sighting--13109e84-edc8-41b7-87b6-3fe4aa5d3c12", "sighting--0c2dafb7-3d26-4006-b859-6a332ed82948", "sighting--90d426e5-ba83-4306-a3dc-15e67fb3dc9d", "sighting--ccacc1d1-162d-40e0-a7a4-c41a737c58fb", "sighting--59eddc68-192e-4ca6-9ba3-c3eaf54f074c", "sighting--b55ec6bb-651b-45e0-bfc6-0c15d0012d08", "sighting--296db998-168b-4a90-815f-d91e8163248f", "sighting--fd015015-dcfa-4542-b097-ee39edb130ce", "sighting--eeb72321-4ef7-4828-9143-e2f45c9e21b6", "sighting--28c233c2-0649-4bc5-92f6-aef92a7e27f3", "sighting--ba4ad0d4-30a4-469f-875b-5c8cbb302df6", "sighting--3156b993-93f2-4e6d-bb5b-7a912deff238", "sighting--7d55f669-9587-4344-8e99-dedf613d5672", "sighting--b1b18e86-093c-4028-96c5-688a0e6ceb1c", "sighting--a84ac5e4-7bd3-4c13-9cce-d3769904cf7e", "sighting--28814e53-857f-4120-9e1a-c705d7272fec", "sighting--412943d4-2883-4370-9f9e-fb805704d7ef", "sighting--a9d4dca1-4e86-409a-ae93-b2e8267ed520", "sighting--74a33a75-3df7-48e2-b13b-e658e48ae9bb", "sighting--c5efc2db-e773-4f3b-9a5b-0b01b3403273", "sighting--de5de551-41a3-42cb-b4c7-ba02a9d40891", "sighting--53aa067b-0e7d-49cd-a659-ee0e00de72bf", "sighting--6a8374e0-ea7a-40e2-9a34-3d68267e6434", "sighting--8f64cabb-d38a-42b4-8e86-4369f1477b39", "sighting--00e1758d-84f2-467f-a7a0-207239bd0cb6", "sighting--23bf67a9-eaee-43cb-86bb-fd7edaac6ee2", "sighting--3475b7bc-45ee-4b20-b1a2-7ccdc6f1348f", "sighting--af3a773b-d4cb-4c3c-ac87-05a36931c38d", "sighting--6a881dfd-0cb3-464e-80bd-800da721d61c", "sighting--bc8fef5b-6ff4-4bd0-9d64-10776cd7de87", "sighting--615b90b2-9863-4617-a1f6-09af549cb32d", "sighting--d9bac69c-ac43-47f1-8f43-aca56e7f9277", "sighting--95e24bd3-da15-403a-977c-41dc13c05a92", "sighting--5fe154d0-27b2-45c1-bbb3-9d8e3f511d4f", "sighting--32cb4cd3-46a3-40d0-b76f-4ea6db2b6a3f", "sighting--897c95fa-b59f-4c06-86fd-da05f43a2bf2", "sighting--10c55cce-abbd-4583-8cb0-44e670e5fa85", "sighting--17d88bae-4941-4baa-b439-4f752d4caa20", "sighting--45f51b18-5c36-4412-8475-01705e89e01d", "sighting--436c89df-b85e-499a-a230-d5c43dedcb62", "sighting--9a87b9ca-598f-41d5-93ea-27580bbf8df4", "sighting--cc23d9b7-7bbe-41f7-a942-bc39d6ed9183", "sighting--aea515fa-6e77-4c3d-aaf0-0c19ea691ac6", "sighting--856d5a62-1590-4ed5-9d9f-6fbcf1aec564", "sighting--08ee3814-e6ab-4f4d-92ab-9282b04d9cc6", "sighting--40fe50cf-2484-4b84-b3e4-d77cd8eb9a08", "sighting--bc117c4d-5f7c-4900-96b0-38798bc5934f", "sighting--98404938-37c1-4a31-92d6-746d31e5533e", "sighting--17168a09-ae85-4d49-a6d5-fc91b7b33bd9", "sighting--6e65968f-69b4-493b-90a9-dcccd9dc3066", "sighting--86d10dc1-76fb-4dca-a74b-7d33a539d236", "sighting--08a105fb-9eaf-49a6-90f1-837c2d9ed066", "sighting--70980005-afbc-44ec-8e63-548fc65a3d0e", "sighting--d3f33ac2-f833-416d-9e11-c801737aab1f", "sighting--cb617729-96bb-48e0-b83b-9e2f573d6a43", "sighting--48f2e60c-d615-4dff-9be5-0bccc1224a37", "sighting--881a6e57-7035-472f-90e1-244c7026b72a", "sighting--2b0bbce9-6c82-45cf-967f-f1c4cf9f5fdc", "sighting--781c54fe-8ce0-4602-ada2-45829c81386b", "sighting--e80b6cd1-a956-4e6d-ad48-a897f00c9775", "sighting--9a324765-898d-4dfd-968f-bde354e887c6", "sighting--58768e7a-19cf-4a65-9b4d-8d8c6c5c49de", "sighting--9d3910c0-c9dc-460b-b07e-63df310505c6", "sighting--dd2607c1-b85b-4799-8442-43266ec9319b", "sighting--1b04b4c1-f227-4be4-a7c3-dd3ce3ed392a", "sighting--07e454cb-ea38-405a-b66e-b03357605258", "sighting--96372775-1bea-4ad7-b519-54f5d9070615", "sighting--66f3fa3b-53a4-440c-a9fe-c51ecaf0d40b", "sighting--a4d6b712-2156-4f2c-b012-e568e5d87df2", "sighting--2a5224d1-f639-4247-b984-a3a41126bcf3", "sighting--c4c31590-eecf-4bcf-81a8-20d40615f013", "sighting--0b05b5e3-0509-4ffd-a5cb-52e65dca8066", "sighting--7693d9dc-0484-4ff6-a094-2a5fd58c7318", "sighting--5626a7d5-bda0-46b4-9a38-c220aa526a1d", "sighting--4a93a0f5-5f28-434f-9612-b30668e9bd63", "sighting--4b8295de-d64e-43c9-a540-576c635de4b7", "sighting--35881d8a-0157-45f4-a8c5-49e5585efe7d", "sighting--0c44ee55-6ded-4310-8cbf-7b1373042320", "sighting--f54c8889-ad17-4d11-8554-efed25dc28c8", "sighting--209900fe-190c-4720-b2a3-50f050b604ac", "sighting--487e9e9e-a0bb-47e8-9883-36883fb29225", "sighting--d170c6e0-d88f-4090-8fec-6622a616b7c2", "sighting--b81a9e7c-4c33-4e98-a41a-e7601b72e4f1", "sighting--33354fef-5da3-4e05-a9ec-c6b5ea6c0883", "sighting--11f44ae3-5a36-4388-a788-b7f619be29b0", "sighting--cae02cea-1954-40d2-a7bd-fd78fc1296b4", "sighting--da938bd5-3382-4e47-8195-ae67a68ff60f", "sighting--2fd2de29-8d01-41db-aa56-cf9cc6920b79", "sighting--8373d060-6637-41e6-8dcf-91f04de18749", "sighting--77ede107-361c-4a6f-9674-15ff4db6bcdf", "sighting--9c1388f5-bdf6-43a1-b3b6-7293128675b7", "sighting--68884a6a-5a06-4a59-aa76-808fd2794b16", "sighting--5ee7e4c6-2019-4812-b415-68e9b72653d4", "sighting--285b63f9-b5a0-4f00-84bc-b2fdc6d8d617", "sighting--0cfc1c0f-8075-4aee-92a8-0ea22b38b246", "sighting--d8a2b6e6-cb9b-44b8-8f45-957fda919108", "sighting--1ba731a7-327d-42f5-ba53-b4909f9e08e0", "sighting--9c446f52-e736-429b-9e13-d3256c34fb25", "sighting--d8799ea0-5e8d-4c4a-9420-54b48c3e223c", "sighting--91f084d2-e304-4779-935d-7a5e808cda48", "sighting--31fabff8-9285-481e-903c-3880435b5e9f", "sighting--31679fe9-0d5f-450c-bc3d-b1af4e4f0162", "sighting--a4faf290-17db-47e5-87c7-61f850ff111c", "sighting--f54b3e86-2533-4c4d-995b-2d55dcaca796", "sighting--70b2086e-715d-42a8-aae6-8cdae7a5dcbf", "sighting--d51e1b68-eabd-4489-ac16-764375330cc7", "sighting--8859e829-401e-4273-bcef-159f25681fd7", "sighting--e225d486-7273-42c0-971b-c9b32e84475a", "sighting--a3ccd833-c87f-485c-a2c9-79712ac9af00", "sighting--ce1a8556-4a2d-4e09-9e98-906505312083", "sighting--59eed75a-c60c-48ca-9099-ea2b79db5e22", "sighting--ffd088d2-385b-4c6e-b177-e530dc4e9855", "sighting--65e01fcd-98c8-4724-84c1-263daad29687", "sighting--bbc412bb-5e97-4957-8a9f-758559d6f542", "sighting--5663d024-6b08-4f19-aaf2-ec8cb0dfac25", "sighting--7d399f7f-cd02-4a78-a1e5-84ab0cc002f9", "sighting--c5528eda-9e4e-42a8-991a-0e3b19565fec", "sighting--8c9a0672-5f23-4f85-ac04-7cb26eaddb41", "sighting--00a34f0e-3155-4c23-8ffb-75cd8e8a174f", "sighting--1503adc1-b2e7-4ac3-bfff-d8b53fea4967", "sighting--b8c8cd96-1345-4181-b033-e1707fbd78cc", "sighting--6cd30c1f-7543-44f4-b9c0-8f81847ae5ce", "sighting--2cefeeca-14dd-428b-a6ac-9088a5a607e9", "sighting--4be4ab66-c5ed-4c42-831a-c02dae232a0f", "sighting--318be20a-def8-4e3a-b140-83db60d7b247", "sighting--e3373b55-20a2-4b8b-bd92-326a7b0c644d", "sighting--c20eb403-25d4-4810-b055-a92cb89b72bb", "sighting--fc457463-a941-43a9-a0d9-a710e8b45564", "sighting--9b4f8d19-2824-4362-95fb-fcb789a7d3e2", "sighting--f563a0bf-2802-48de-ad8a-b58b3b645313", "sighting--191c3b92-0fcf-451e-a40d-5414d210c430", "sighting--68f02f54-14de-45bf-935a-85b210e2a93a", "sighting--0e7022e6-5013-42a9-837e-0eb2be2a590e", "sighting--7fbd753a-d846-4a9c-acd4-93ff70924357", "sighting--b1f54ede-d056-418f-aebe-f6373b43470c", "sighting--393f5f22-e5a4-4b19-8da6-4bdf6e7a1543", "sighting--f501c149-f284-426f-9e26-3cb3c8e92ee6", "sighting--d4c10f7b-8655-47ae-bb25-d01581ba8b7c", "sighting--4ad9e2f5-cfad-4ccd-a089-f4fd4943fee2", "sighting--d2047d8f-de27-4009-a028-a21434e57ceb", "sighting--88b21bda-1536-4959-9e0c-e7033fd211f7", "sighting--ae11a8f3-fd24-49c6-9994-4e150c65e9fa", "sighting--384259a3-f976-4565-b039-593142a8f24a", "sighting--6158b717-221b-4c39-bdcc-583151cff122", "sighting--222b7c02-4523-48f4-932d-cdc93073c48e", "sighting--743daf3a-8050-4f54-aed4-00871a60a1af", "sighting--781f1944-3a2a-44e1-bb21-815209d3186c", "sighting--c731cc1e-3edc-4ce0-bb7f-4679b3fef7f2", "sighting--8380d699-9a45-491e-b7f4-6da1792f7e01", "sighting--5e75144f-2b4f-4fb9-b600-2db1be5f39f9", "sighting--a8b71bfe-96e5-414c-8b81-0a9544bc9365", "sighting--ffe1aa05-7287-4878-bbb5-72c8359fd4ec", "sighting--7fe5ac1a-7100-4055-ba93-66e1da96edd5", "sighting--790c554b-21e3-4e24-9492-26e1bd13751a", "sighting--b3b0348b-5d3d-4214-b575-5d0ccea187ce", "sighting--dccab54e-72e5-4634-945a-c7065659a5cb", "sighting--d35139b3-a82e-4329-ba52-4787f6a248a2", "sighting--c5c5f2e4-8d10-4f32-9c61-7611eddecaa5", "sighting--d00245c3-abbe-41cb-b057-c852d3c5f67b", "sighting--7519ec49-d583-4a98-b484-e8ca5aab6c9d", "sighting--b4d07760-00f6-4fb3-8ead-9fa557c44d49", "sighting--0c178539-3e83-4805-99df-adf02558b94c", "sighting--fb5dcbb8-3eca-4b49-90b2-8aa440495364", "sighting--71386a76-8838-458c-8646-c0519d0dbea0", "sighting--0fcb673c-8f9b-446a-8520-d0e4c65f888b", "sighting--538e791d-7ad0-45d4-8105-b88027ff6eae", "sighting--f1cef2f3-ea89-47ac-8aac-4a9f3ad3e2ef", "sighting--d6e835e3-5847-45d0-b8b4-5727be725e98", "sighting--431ea050-a244-4adb-bae4-6a9884113d51", "sighting--e229136e-6c3b-41d0-9f40-96d09c4f70d4", "sighting--fb1cc65c-dcc6-4726-96a0-a967571e09ba", "sighting--45c0348f-d407-477e-ab46-77b8537ee44b", "sighting--0560ce31-d126-4a26-9eb5-77f2fbba24d5", "sighting--9072d298-420d-47f4-8ac1-a66f3e7ee9a4", "sighting--6022902b-58bd-4ca5-a63f-338c3c7dc050", "sighting--1339c313-4e17-4ef4-b55c-80cde771f41a", "sighting--c7a37c8d-ce79-4d44-badc-18a3b6a1f898", "sighting--e7cc0746-b21b-4741-b917-61bf945fd057", "sighting--d89f019c-a924-43b0-b431-f0259af6f773", "sighting--3b447d7c-c1ac-4149-b02f-0f8fb314a6bf", "sighting--5104fab7-34ff-428a-8587-2994e2875bfe", "sighting--be47e6fa-9cfe-4d60-8a5b-5c4b09e5178b", "sighting--6ac2c886-0026-45c7-8218-9f3f15f7612e", "sighting--346df22c-e76a-4055-96d9-1275daf96db8", "sighting--1f1f9164-f532-4561-8346-ff67ef925002", "sighting--ae5be199-5685-44ec-bb7e-f37c9722ed0b", "sighting--9ff37755-6891-4969-a2b5-c82fe7205cd0", "sighting--3ba5538a-6618-47f1-93bb-784feaa3c04d", "sighting--7107f0a4-b84f-4537-a68b-1aa0f7d3695c", "sighting--aa331b79-744e-41c9-9e05-57f91ec02ca8", "sighting--649ea73e-21a6-4c57-8631-b9f03076fb01", "sighting--f44563b6-32dc-418f-8c92-4d1fc260e883", "sighting--e24571d7-b49d-4616-bd9d-dd927038c919", "sighting--a4096db1-c39c-4888-9a89-3c6a3d7b0f17", "sighting--136bfacf-b51e-433a-9c63-5523529e9b6f", "sighting--24f82739-9d2d-43bc-ae7e-39c8a9c172fc", "sighting--7f184ffa-b641-428a-9ae6-3144d020f59a", "sighting--0ccfe497-92aa-4eb8-b291-8d8dd70c3c84", "sighting--e8150f69-e0d9-490e-a51c-339d0925f868", "sighting--ddf76316-68c4-48e9-a606-e47ba56a32ae", "sighting--cb21ef4c-cc43-4c35-b10b-f812717ed7af", "sighting--adfc7714-d23d-40ec-be87-1ab2441fbaf4", "sighting--3b1b1acd-c2b7-47be-880c-da589818f835", "sighting--7884fa7f-c8b2-4bd1-943e-16322262c20c", "sighting--af3d18f4-c959-4eed-af3a-f950cb232394", "sighting--e6be7072-fd89-4d7d-b00f-13ecbcbd7739", "sighting--b1318e37-3da5-4c94-95a9-681f3147008b", "sighting--a6030423-3a19-47b3-af1a-fb6adbe636aa", "sighting--dac86b6d-97f3-43ad-85e2-027cd20d8598", "sighting--65963734-bd06-4330-a027-ace8e0b64232", "sighting--48122fc1-e103-4ba3-a1e4-ca97bd0fe7e2", "sighting--0a6ea9af-c051-4946-87c4-62010ba5cb73", "sighting--b65c353a-bf55-4fa7-8487-e2047e7f2479", "sighting--bdec52b8-e8e8-4041-8443-59bd34b12b28", "sighting--dc6ebba2-4584-407d-90ce-d24189a17446", "sighting--4b1376ea-4fe2-4b80-b645-8acaea9594ca", "sighting--27e08e95-160f-43fe-ab4d-62019d554b95", "sighting--5d869bfc-c52b-4b9e-9f90-c071520af8ac", "sighting--a3ff5632-fa7b-48c5-a3fc-c9d2b4963675", "sighting--a9c59fdb-3069-4b6e-b28f-866c497c98c6", "sighting--05ce20eb-96a9-431c-a4e9-dffc2cdac876", "sighting--d6c8f7c0-bda1-420c-828f-fd9b42ee6202", "sighting--ec3e6502-3190-4163-aea8-c71e0fa95090", "sighting--8106291e-bfa0-4403-8efe-a2c8ed61d154", "sighting--eb324a65-e8bb-4f5b-9d1c-01c4fc0767a4", "sighting--c0e21a4b-c6d5-4be1-a8f6-8df4c5e3f4a2", "sighting--52925c8e-8c8a-404e-be81-5ffccd0dcb47", "sighting--ec5177af-6bcc-4859-b1b7-35f8bd3ee6ae", "sighting--9f119c04-82b9-4d90-a510-643f4caaf002", "sighting--564c16b2-9cce-471b-b485-b0a9b5280ff1", "sighting--d474f2c9-ca7c-4080-be22-fb446e5d03f5", "sighting--001890c0-75f6-47d0-be5c-a0d7bbe31271", "sighting--ee653b21-9586-46ac-84de-320f0e0bbaa1", "sighting--b0461ff0-68bb-4a1d-b75f-39f79bd96354", "sighting--28e2a44c-7a7b-46a9-8702-aba2d7fa2e55", "sighting--3968df85-a32d-4118-afc2-0ded59553ca2", "sighting--fbbee186-2512-4539-8eee-76f25de2b04d", "sighting--73d88f7c-5c22-4eaf-9e28-c0e906189d76", "sighting--9eb30ad0-5ef1-4ec2-bd8e-b357b9f257ac", "sighting--c41071f6-f394-4cd2-95f7-43bd27b5df5b", "sighting--12971772-d4ed-49ed-8ba8-4593b4173aa7", "sighting--cba04077-2f85-49ad-92bf-d0e3c33498b2", "sighting--804fcd83-5cca-4764-b6b3-706e946e4651", "sighting--f1d0516f-0f57-4cd6-ab01-25960fd86326", "sighting--740b644a-dad6-4cf7-a9ec-e7e6f0877142", "sighting--5555dce7-00d1-4a04-91e1-03a385212fcc", "sighting--4f387cff-ceb2-4bcc-8df6-ebd90c60c734", "sighting--f914e6e6-7550-4bb7-bf81-92eb09af0dda", "sighting--e252c78a-1dde-4769-badd-e1cf82c72faa", "sighting--1a87c2f2-8d01-425c-9243-f57a9db941bd", "sighting--9e2082da-ba72-4d3f-8493-d952f9a917e1", "sighting--6eeba34b-1055-4a2c-9d57-575b36c821b2", "sighting--5cae9f42-3872-4cae-853c-42ac394e3798", "sighting--4cb8d4af-1088-4b40-bb53-13f5221e6443", "sighting--25f392f3-9ab9-41e6-a7bf-6618584f9e0a", "sighting--6c4acfaa-f169-45d0-9ae0-9953bfb239aa", "sighting--485c0d37-cd3f-4b4e-a809-4b66c22fdc4d", "sighting--8f5b3a64-193d-47dc-9b0b-5ac5702bd844", "sighting--50185ac7-7a5b-4125-870e-f062cfa457a9", "sighting--5133ca9c-22c4-4d1a-81ca-52010d613728", "sighting--d113d4fb-eae4-494d-afb2-e22d6c81421e", "sighting--f973ee85-300d-491b-b7f8-49b6619e56e1", "sighting--d63c6937-1d54-4c27-9432-f83133c004a9", "sighting--b6bde38f-1af0-4256-8483-e3e9ec109c27", "sighting--b35c393a-8b76-4dbd-97f7-33b1492ef9f6", "sighting--68ef7a41-d664-468b-9f5e-4619be303766", "sighting--c81e2582-b42a-4429-b65b-2e1a8000c7a0", "sighting--c88add6a-99e8-485c-bf76-ffb46f7c8713", "sighting--97571ced-48b9-4357-be8e-add516a6b4c4", "sighting--d8e696a7-4eb1-4d61-91f5-a8dd01c923d7", "sighting--5ea0e6e0-eac9-4c08-8b16-f1cdb1c20a4d", "sighting--5804844d-d95f-478f-b24e-ce181987cd9c", "sighting--869bf055-5df6-4ee8-95e3-bb9e4f2ad1fc", "sighting--88859dd0-e74e-4578-ac37-2f9c8b43555e", "sighting--f67bd8b5-8e7a-4762-a833-915f2142a6d3", "sighting--c0fbbb98-cbb1-43c0-918e-63b6ed835c54", "sighting--55564e2f-91de-4d89-9398-01dba5c18856", "sighting--4d4e7dea-5da8-47fd-89e4-378c0402260b", "sighting--22c61d59-a2aa-41c8-b93c-7cb6e80ca0ff", "sighting--91317983-e14d-47cf-870c-6b7b37ab01a7", "sighting--c909f99b-8c7e-495c-ad70-178544c89ec1", "sighting--e69cf289-c868-4050-9bf9-4b6dbec1f455", "sighting--0c12deb1-38f8-47a8-8965-26351be8fa64", "sighting--4b4645ac-03c9-4666-95c2-96792aefe5c7", "sighting--f85a96f8-05ee-43cf-90fc-9b66c5265fe3", "sighting--22b391fa-940e-40d4-aa3e-92ca48e61ec3", "sighting--361b008f-2f1a-447c-9b85-7c5937f344ba", "sighting--4dd0819f-52a0-4a94-a449-59647237468a", "sighting--3fee5f40-cf8c-47ab-9b7b-98e404e78295", "sighting--bb8dadce-c04f-461d-ad1f-8e5fc19e1081", "sighting--3daf1625-151c-44ba-815e-27f820e56285", "sighting--590e818f-2eec-4820-b138-b263b8718711", "sighting--6b50a7f7-51a3-494e-aa70-5277bee46c23", "sighting--23dda7ac-068c-46b2-a6ff-1ede6e3264ca", "sighting--9a256523-7572-4e57-a551-116f0758dcff", "sighting--0e65de4c-a402-4c1b-a990-350ddabfd768", "sighting--c24cb313-3a23-4616-9e41-58240e1891a8", "sighting--3aa54033-076c-4274-91a4-3bc6cca08dcc", "sighting--3241d944-0298-4f55-b53a-2235834c3308", "sighting--3c8971c4-6e57-4a6e-b96f-d4a00161bbdf", "sighting--10d9a34b-0cfa-4555-b630-576c3e76d708", "sighting--d219d1ae-dd34-4e5e-836f-bfab37650c14", "sighting--a06ca711-b2fb-4abd-9532-8553690d786f", "sighting--2797e4fe-748d-4f4a-8d2c-400052ff5686", "sighting--7af0da45-1b8f-43f9-86ee-9da8859e04c3", "sighting--b9e40103-ab8e-4bae-8902-1f799c96fbc3", "sighting--30f191ae-95fb-4f37-ae8a-006883a00673", "sighting--2fb99a5c-2ebc-4ce3-81fa-d572a18d7d8c", "sighting--c8a7959d-ee51-4172-b347-7043447756a0", "sighting--4c01c9c5-d103-4457-a82d-0479528c3daf", "sighting--126538dc-d254-4a05-9cc3-95aa53333dd7", "sighting--03dd9bc1-c9e6-448a-bbaf-cf10d8548bca", "sighting--323bf598-11c4-45a6-82b5-a9d3ece43d56", "sighting--3a0920e8-6799-432a-9953-93d12ffbebf2", "sighting--55959d39-ab62-4391-bcc7-5d9ae1c52f85", "sighting--cf4d3f5a-db0d-4c83-9d35-74e5c57626a7", "sighting--98f00733-588e-438d-92a3-18e5fcd49e80", "sighting--693c68c3-522c-4b85-9b13-998b37ba8b1c", "sighting--5a29cd1f-6760-4c09-9624-ec863ce26811", "sighting--fb2f8cdc-16d8-4284-b5de-1a0af0843587", "sighting--6734f4c7-ade5-49db-9f0c-299f09a0f2f2", "sighting--365282de-9b26-49d6-9ea0-bef7de448a63", "sighting--51fb7dc1-aa3f-4027-a701-289f87e31de4", "sighting--d0c68105-936b-4e9b-82aa-478f1ea7ca42", "sighting--c9973168-f003-400e-a0a2-d65cc3ba8649", "sighting--0f7836be-c105-46ab-8599-be3f7f05e30d", "sighting--2c5c80d8-2159-4c4d-9d52-acc092e3f64a", "sighting--003cc19b-1783-4f19-b364-2545f98605eb", "sighting--1ebc81c6-cde2-4e3a-ab25-b2553f7d8c31", "sighting--7bfbe151-4db7-4fc1-a671-44ddec92bdd8", "sighting--f288a432-6158-42f7-8b48-02acc90d0710", "sighting--dda86554-1e2b-42f6-9a6f-9083d9c44541", "sighting--eec1a900-1ab6-4000-8571-8b2268065e6e", "sighting--a7f18eb0-3b4b-4afc-91c9-f81e6e4d03ec", "sighting--7d380e14-f23e-41e0-a1e2-8576b1483871", "sighting--b337352a-5113-4a88-b979-190eabb9365d", "sighting--09b23f40-c0a2-481f-b6ec-a9c8ead597dd", "sighting--5b355d09-ca11-4287-8d86-f3f6b88d31cc", "sighting--1cbf59a6-067a-4b52-a0ff-0a35a65fb1af", "sighting--4d83a6ea-4730-4a34-bf0a-cebb67175860", "sighting--ac80738c-3cf3-4b61-8067-e646d3b2f5a3", "sighting--c0e83db2-7c42-4d67-8ae4-97ad6129f764", "sighting--5521c5e1-21fa-4e60-b5c6-9599167effe5", "sighting--a291353d-3412-4a2f-8ada-0ecc86732edb", "sighting--b7d4cb44-c443-4bb8-af65-3570eeb8fb54", "sighting--24e93a91-7bf8-4518-8e37-6528226a0d05", "sighting--bbc9278b-a637-4048-a92a-0754ea990117", "sighting--8c518e59-caa6-42f9-8d80-bfa8ea666f9e", "sighting--33527411-bac3-4321-8bef-913885fc09b6", "sighting--b3eea68b-4ce3-4424-b33f-04d149aa9afd", "sighting--4790741c-50d6-45bf-af36-54cecd2e5d7b", "sighting--2a23c7ff-f621-426f-98d0-5595d5a41c42", "sighting--4c29345f-7f04-45a9-ad9b-db02b7c64c44", "sighting--8e136a60-8417-405f-ad43-40725bee0b33", "sighting--189dce20-459f-43dc-8251-5477fe0ff5bd", "sighting--c3c3f99e-d901-4b1d-8d58-f209d7cfbebb", "sighting--a32b151e-4f4c-4d0c-a080-15a8f8ca6b4d", "sighting--46da45c9-cff7-4f75-9035-4e5208a44d79", "sighting--38f9fdb1-099c-4f36-946c-1537ddcfcbe4", "sighting--591e9303-8f11-403a-b3c1-413e44a18fad", "sighting--a100e1e3-2339-4f96-996e-6ce9215650d4", "sighting--9887ff61-e9ef-4ceb-9cad-7956a956f631", "sighting--08518994-e8b3-45e5-840f-ab2c1f6f77bc", "sighting--dd769cc8-6c6c-4e18-8a3c-73cc3aae0525", "sighting--89bb4951-3101-41f8-a3aa-1fa362e8bc07", "sighting--f538fb3a-b770-465a-a1c7-879b7eaa9864", "sighting--6da5e0b4-342d-486f-87da-3cbae5981c8d", "sighting--07b9633e-229d-4380-827f-eb2be40beb3e", "sighting--38ea6877-4dec-4cf4-a63d-47e5300ea3ea", "sighting--bf5faa5e-5c0b-469c-af43-da6aa43b3e69", "sighting--78b499b3-6bd9-47e5-9f69-341cfe5644af", "sighting--1a7394f9-5cf8-405b-8047-5b475e901e34", "sighting--25a18fed-7bec-4bf5-8085-2f325495059f", "sighting--b74646d3-2e3e-4a67-952a-c68fd6e69274", "sighting--515fcc96-2194-4f97-8dd2-c9e2c83add2d", "sighting--540f16b1-30e6-4879-b781-32fe4115d4c2", "sighting--b0e7551f-d944-49ee-b143-ad18a6f209c3", "sighting--42144136-29fc-4edd-87f6-cea3ff3d40ac", "sighting--8429341c-1ae2-42ef-a81a-853f806e4789", "sighting--9cd440cf-6e63-432e-ade8-310a8798879a", "sighting--2468ed3a-fb0d-4976-bb4f-f8a326fdb142", "sighting--e58180d0-99cf-4084-a503-826e71dfa51e", "sighting--ffb5b72f-fdc6-4cc7-b3a8-014b92dfd5e1", "sighting--99b38720-ca94-4a51-ac84-36d13f31c4e9", "sighting--5c913604-bcf4-4cf1-a050-ecb234b2b8d6", "sighting--ae24d254-b5e1-4d04-8445-3e58fe8a18f9", "sighting--589d41a8-df07-4de6-8b3c-6634cfbd27c5", "sighting--cb16019a-0a8a-4269-a78f-d73b8c4e735a", "sighting--8d3cf665-42f5-4712-8b55-d01033efed34", "sighting--d778ed8c-9d23-484f-80e6-56b7d7298168", "sighting--f56261ee-26d8-4dc6-b6ce-f75f7cea870b", "sighting--31c5a595-2367-4d83-ac58-d0309d6a5086", "sighting--aa0619c2-e581-414f-9e9a-0c9e09973e41", "sighting--77f8bda1-fcca-41bb-aeaf-03bf206e53b3", "sighting--898e2236-965f-42a4-b838-1eb7ee205034", "sighting--95ec68cc-1b31-4b3d-a478-a877bfbb75ed", "sighting--8f6f81c9-be2e-4f3a-a07d-6512e99d9a23", "sighting--cbf7835a-f888-4ceb-9c70-c8bc3afd6b4b", "sighting--fd3436d3-58ee-4ebd-b2b2-eff6a1e0d068", "sighting--f1b8eeab-2013-452d-87d0-3b5b5b4542ae", "sighting--5e647e8c-c31d-4828-b10f-6bafc95d5a07", "sighting--16800ed8-69fa-46a2-b294-f05cdaf26db3", "sighting--cfbbcb18-16bb-4ef7-a819-542d623444b3", "sighting--7dd3acd0-aaca-4cd4-9af4-f3fcac257279", "sighting--682623a0-c2a6-40f8-a86c-0062ac20d092", "sighting--c8adce20-f2b7-431d-87af-02f5de1de3d6", "sighting--c3fcc4b1-ffd9-4cec-bb68-3afca735cf53", "sighting--fc4217ea-995e-4f85-9fb3-bb9966a61986", "sighting--3905f704-68e8-4e91-a572-6335f021155c", "sighting--02032ede-1844-4be4-ac17-6b85ccea57c6", "sighting--6a6d8f87-c1d3-40e8-b456-294d989bfa3e", "sighting--b560fc69-e508-41ea-9067-b38c7e83cdf4", "sighting--5111f11d-2b79-4d26-9113-58b61685d925", "sighting--7730ef1c-1481-449c-8adb-d43682d41787", "sighting--a8d8fb4d-9083-4b86-97bf-b6d18d78d4d3", "sighting--a8553d0a-e856-4ffe-83a2-cda9fd799b3d", "sighting--4cb76066-6040-46c8-ad29-208c20d48538", "sighting--f4665776-5ad8-4b25-aba1-a47dbe07051e", "sighting--82b325dc-0214-4b2f-8626-c4c27c6c297c", "sighting--14d4d4b4-7146-4427-becd-bc326083909d", "sighting--2f483ccd-9809-4a07-8776-1d57ad2cc7cc", "sighting--3f011fb1-666a-4e70-a5d7-b9adc9be71df", "sighting--7f2ec94a-2b9b-439e-ad8a-6a38b641449f", "sighting--129a9e4f-d5b4-42d5-948f-534bd29291a1", "sighting--329e3f36-83b3-430d-911a-0a73fecef51f", "sighting--d8d5026d-c0ae-4831-bf92-01c904bd72fa", "sighting--2634079a-ff34-40eb-87fc-d31ca54add15", "sighting--9898023b-1d7a-42dd-8a65-480a5bb43a6c", "sighting--2ee95027-8a68-4833-891c-fdfd1ab9ed20", "sighting--26a03180-a0af-459d-9716-15a7a371fe3d", "sighting--85d6704e-ebaf-4cd6-88ff-821e8abdcdab", "sighting--7a52e302-c737-4e21-88a4-7e671df2ae7e", "sighting--a3457a92-9164-4357-9332-a2d84e8c714a", "sighting--b40162a2-7720-4ce6-95be-3bbc62ae218e", "sighting--f5150742-e1b9-4140-8dba-a00a1de9b83e", "sighting--5beab8d4-05cd-4e2d-b88c-9a3dd94aefa1", "sighting--bfc1fccc-116b-4bc6-be8f-3c42650ed415", "sighting--5b459c40-cd70-489e-a8b8-696e80290ddb", "sighting--bb2364be-183e-4f38-aa42-61121d29d7d8", "sighting--52c17057-d2e1-4436-a196-d8d2377a4996", "sighting--6dcb3d8c-7a8b-4168-ade8-0f1af4cca912", "sighting--621e184c-9b24-402e-9c83-b5f40cec605a", "sighting--dbe1c9b2-1303-4a95-9d6c-1ac4f181c155", "sighting--6c68c2e0-a0c6-4d60-9914-edc0ee9d6364", "sighting--6ec53c56-8a40-4343-a089-2fd617b35e6e", "sighting--bc432438-daf9-445e-b5e4-8877c1fdf8b3", "sighting--7f3a0d1b-16d4-4e1e-a7a3-be68d0cba429", "sighting--089282ab-3f15-43ca-be2a-b60ffbbe08b7", "sighting--74f4e47d-7a49-4b75-b35b-983c7c4731da", "sighting--b3f003f5-4a71-48e4-97aa-26380423b154", "sighting--2d8e170f-353d-47f1-abce-219fce239f23", "sighting--9174702d-c7dc-4e8b-919a-3d24f8dbaa13", "sighting--eb39ab8d-2176-4ad7-b5ac-387ffe4e8971", "sighting--ba76b4a1-d56d-4b64-bc78-39d8099a4fb3", "sighting--3f4debdb-1089-4855-afc4-bee060d87226", "sighting--f5033ab6-6c78-426d-8548-4912be3eae8e", "sighting--ae2f6001-6f1d-4232-a727-5c8c0170f475", "sighting--3289f9c7-56b8-4e01-bb55-59f1f80cc516", "sighting--a746c2df-12c4-4153-9b4b-f63a546336db", "sighting--3b6babf4-196f-44d4-9032-2bf94dd6ed8c", "sighting--0d56b9e4-1dde-49ed-9dc4-bc0953c83779", "sighting--f36ab1fe-5db9-46fa-92d1-d5d297a6fc45", "sighting--fda30cf0-59a9-4096-b1fc-7f92c16b6d41", "sighting--ed44ae23-d12d-4f09-acc3-1ec77907896a", "sighting--de1c2bc7-c7af-4f56-9546-b99ed8d1ed0a", "sighting--e8f04e10-0110-4d73-8c39-0c87d3494fa6", "sighting--7d7d4e9a-581e-4ce8-bf7b-0c3b1873d5ef", "sighting--19fcf524-a19a-4afd-b6ef-8c7ae7a69c24", "sighting--68715205-2981-4fc8-a79a-f8aa06ad9a42", "sighting--3fb179f7-5238-4cc7-ac72-f4960bb54dc3", "sighting--3f5122ec-8043-4d8a-a5aa-6b8065b3e0b8", "sighting--3d82920d-d3cf-4388-afda-637a1a650ef5", "sighting--ab1fb186-d3de-4c20-8f7c-dd6b856ec85c", "sighting--48ff986a-5a86-4d78-baae-a67590cc39c3", "sighting--358e0c58-939c-401d-8434-77ae073c526a", "sighting--3e3f2c9e-4a4d-4bd4-8929-a7d9ba3a551b", "sighting--8399d773-a159-4f66-9841-fe3a4737df11", "sighting--8f0a6679-f8fc-447c-a6b0-8f9705e98f96", "sighting--20e6adf5-fa46-4188-ae4f-e452d0b643aa", "sighting--91481141-6fa1-44fe-b4e2-c0bba7cacc62", "sighting--7a56f781-3eff-4d64-b8ee-4253ede1a777", "sighting--4bb25200-e512-4617-803a-5e8e999bf11c", "sighting--55ad165e-3b8b-48bf-b85f-bf30f39df19a", "sighting--74f55ace-8c79-4177-b6c6-9a7de78ed4bc", "sighting--2a89dffd-0cfd-486c-8f8f-817c1fdd6973", "sighting--037fb448-ed1f-4651-b358-553bb78e0ab6", "sighting--eb2ce2b0-37f6-4602-85c1-d51659eecf71", "sighting--5c5cecb2-d58c-41e8-a296-4b1936e76bf8", "sighting--01b549d7-492c-4b0b-b50d-d555d8e3b11a", "sighting--3be987e5-7716-4dc1-a656-55974583522b", "sighting--39987418-3d0f-4be7-b0a8-c36ad132a9c2", "sighting--7f3a29ff-3979-494d-b102-0d0091722b57", "sighting--4898dc7b-e4ed-468b-9830-751331b90729", "sighting--b6745be6-e296-4913-b76d-acb20236268a", "sighting--41a7a0d7-2180-4e6d-ae45-768d878b34ca", "sighting--57a2c192-7bad-485d-bd37-334a8c340fbd", "sighting--91a6146c-498c-47b1-bde3-4e3ca11a0809", "sighting--21962c21-93cb-4fd5-bffd-237cbb784a82", "sighting--b295a683-9f6b-4418-8ec6-133ecadad12b", "sighting--f2ab03a5-7677-448a-b557-08d49c8419a2", "sighting--4795b6dc-42db-46bb-bbfd-74d64f605858", "sighting--473fb694-0b4b-4626-974f-d0beddd3b5c2", "sighting--5de52c3a-91d4-4575-b1be-da0e8d3cb04c", "sighting--a9d631e5-210f-419f-819e-e3f5bd1d64e2", "sighting--6bb9faf3-5686-4789-98c6-0344aaacad22", "sighting--050bfe15-ef47-4bfc-ab4b-2280a762f89b", "sighting--bfd0d474-e758-43fd-90b9-2e0f19bee385", "sighting--9bd0a99a-a0a1-42d5-89a5-8a3f2c92decb", "sighting--5b3f35cd-b9ff-4d77-a1c2-7f644896eb7c", "sighting--89e655f6-7b4d-454e-b88e-37197a7acadd", "sighting--e2c43752-7797-4a05-9083-ac788bc8856b", "sighting--7474f53c-08e3-46b0-a9d0-7f5227eb01f9", "sighting--37d2cabb-9137-4371-9d5b-0a18afa5bd63", "sighting--3ec6c7d6-2ca7-4df6-9e66-3d3ab5e20fdf", "sighting--1738dd25-5a52-40fe-9213-8918ea4b33a8", "sighting--3903e637-216b-4b0d-8b3f-e794c787838b", "sighting--2a238925-751c-4575-926a-9a33615eaee0", "sighting--6e0b56c0-7d81-4d46-815c-79c639ce45b9", "sighting--295fa51a-d3bb-477c-8a57-8076b37cdc45", "sighting--a0e14ebc-7a3b-4a69-a996-3de3f89b2745", "sighting--c64e5303-a56c-4223-9777-bbc1669c4253", "sighting--95e1a1d9-9703-4a2a-8867-4940ca93b636", "sighting--b221046e-42b5-47e1-b3f2-7a7ce15cc3bb", "sighting--3c808597-7aea-4f50-8ac2-4ce38b3c5a43", "sighting--0875010b-496f-43ff-948a-f56dc9238149", "sighting--e7f1ba2c-f6e4-441c-8f73-9c62c97fd9cf", "sighting--f9897110-0caf-4a8a-8da4-d979dc0b46f4", "sighting--67f05857-7c65-4f0d-9d71-64285037a8b3", "sighting--3689337e-8c89-4de4-b726-978ffb79d8ec", "sighting--fa58d73b-531a-4d33-a301-7576ca2125a7", "sighting--bb5416b2-69ff-4db4-9c1a-87f35849ef5f", "sighting--8138f247-1558-4a4f-87c8-006288721616", "sighting--8836f88f-b399-443f-b2fe-f50b62f65e3a", "sighting--a9c7e9e2-114f-4076-9ca0-f1bf9aa4648a", "sighting--b33066fa-53e8-4c70-a32c-3031cb18c26c", "sighting--ddc7d214-1c60-4fe2-834c-c450559a61ab", "sighting--0861743e-8627-4a8e-8946-73d3cb05aca8", "sighting--dcf3ad94-4fe4-4a10-b6c9-b9f9ce46c5dc", "sighting--18a1a9d5-d9b4-4e1b-8509-a5e87cb422fd", "sighting--be858588-bb23-4e7b-8ab7-0c252e2d5278", "sighting--3462fcfc-1870-48f6-b952-458ca5e92e31", "sighting--f1b0e437-107d-4d78-aa67-8d3c1fc94786", "sighting--40fa123c-c94f-44fa-9b61-c3db7b8da2d1", "sighting--19da36dc-3d06-4d7a-b6c0-4295173846a8", "sighting--c22ec96d-fe47-4410-9d8f-29070af196a4", "sighting--575f4709-d191-40e0-bd0a-8524063855b5", "sighting--58de3d52-1790-4141-b218-fc8f9dce40ab", "sighting--7a7e0abc-db11-4c78-8f08-1385b005b491", "sighting--88ee5240-07a5-4eaf-a37b-dc9f8e7e196c", "sighting--3472c986-3917-4ce8-8e7e-5e27534b6a5b", "sighting--153afd79-52a5-413f-98f0-1ef8ff0aeac3", "sighting--9aa569cb-a074-41f9-b5d8-9b9782d52b3e", "sighting--33bffce4-4149-43b9-a33f-d043356fefdc", "sighting--20b92b92-aebf-4381-ae29-05cf644f2a2a", "sighting--ba141b1c-1213-446b-b38a-4ac122aa7823", "sighting--0d406407-30d8-405c-9672-62007578993f", "sighting--c2bd851a-b4db-4eab-9d96-1624b52024c5", "sighting--70088989-d6c0-4a92-a208-14a7e31b4bab", "sighting--89820835-6021-441b-a1ed-2d4b56a656e3", "sighting--4f731452-0f1a-40cb-b5d0-79a0710a742c", "sighting--170c17f5-75be-4adb-96b8-4fe18e80a550", "sighting--36e53939-0cc2-4892-9e24-0f8b920ebd9f", "sighting--8338562b-be65-42a7-b26a-f0bffcbd605b", "sighting--b3c4d042-7008-472e-a8db-77b35946006e", "sighting--41c015fc-8b4d-434b-b6ef-853a43c95e4d", "sighting--454ab223-9a9d-41af-9c11-e832a8b1c626", "sighting--e2a5fde3-3012-4f08-b07c-7bfb4cc62c0b", "sighting--9e5a07b7-3f77-4590-949a-52b5178b372f", "sighting--c7ca17ad-7675-4e90-97fb-120672b52acc", "sighting--41be37a9-f4f3-44fb-8754-d477f90fbb7e", "sighting--fa2d0728-4a92-411e-8425-203315d3a4be", "sighting--fe6f6fbb-b3b5-4110-95ba-19d035d65814", "sighting--e4c74b37-7dac-496d-8985-4fe985fe34bc", "sighting--2d23eb8e-7a59-4e56-916d-d6c26e83b071", "sighting--9b2f0c2a-a1b2-4e0c-b647-5c0b61db3b55", "sighting--76202153-6bf5-42b0-9a0c-bf692235e52d", "sighting--0d12e01e-8c3e-45c6-939b-7a49cb571515", "sighting--e6c89e9c-cb65-4d4b-9aa1-151b15f03784", "sighting--3b040808-8c0d-4cd9-a552-82a3c9fdf127", "sighting--b28569b2-5a5d-4d7f-906b-d7f49895f533", "sighting--5b12b783-1c9a-4c43-9a71-d641151cdbc2", "sighting--34259381-1ccd-4d1e-a0c1-807f25a6ebc8", "sighting--51528b18-e224-444a-af41-9460cf1b3617", "sighting--bd2be26b-fcba-44b0-a45d-ad05d8b62b5e", "sighting--9802bb45-23ac-4022-b33f-f6319672dc84", "sighting--83d26752-abc7-4b08-9e04-b4862e1d167c", "sighting--c6c6ae48-a041-442b-9080-07baf0c87846", "sighting--6c3e0873-76a5-4c9d-ad75-b831514ead76", "sighting--5b1eb89c-ba5d-4a0e-994b-ef5d545a363f", "sighting--43eb039f-0660-49de-8696-cf49e51c4dc3", "sighting--0c435581-5849-4ccc-b20b-707c5396de6f", "sighting--662535a2-83b0-4e1d-8e8e-8c479816e61c", "sighting--b97752f7-da04-4e4e-841f-d7b59e5e943c", "sighting--b2c8dc6d-04ac-4794-a4e8-4bd469a79d56", "sighting--c1ed5af3-65c7-4c19-bef7-570be9ee1030", "sighting--80a61130-1fd4-4ed9-96c8-bd2d571c246f", "sighting--490a8a1d-d61b-4488-9735-96accbfa2fe0", "sighting--299fc914-c15e-4ae9-be1a-e455c6162930", "sighting--1e5e5eab-1e14-465a-b480-3eccaa0de110", "sighting--68abbb42-8728-4a36-9e76-b71c291dbe45", "sighting--a289c0b3-60b7-4f49-acdc-f98466634e96", "sighting--bd6e0802-484f-4445-8bc0-18d1badba536", "sighting--6e870a1f-fe64-453d-99d6-ca1c950053d5", "sighting--d806c628-722f-4630-9b15-25129f318a39", "sighting--a8bcdf1e-d898-4290-a637-4a21e25e2326", "sighting--ef5c728e-ca0b-4190-a3a9-b3778fc48dac", "sighting--dc0d512b-ecf4-4da1-8056-e1b64ae40a61", "sighting--13d55e48-cbcd-4a86-ab63-e06beaf25589", "sighting--9cbd64b2-fca4-43eb-810d-8f304fc4f7b5", "sighting--7b85a8b7-6a4f-428f-bafe-24a0fd0212c0", "sighting--8f264441-8c93-459e-ad79-560b3d6d6999", "sighting--1f04c14e-f190-4f23-bad5-0dd9b3cbed54", "sighting--7d0ac543-ea74-4966-b460-0b399d60ba23", "sighting--9757bcb2-9022-4293-a27c-47a225d25cd5", "sighting--7a5236d6-73d9-40c7-b665-2103083db494", "sighting--0fe03b87-9f04-43f0-9873-11611113d0a0", "sighting--1b5df979-45f9-41d6-9fd2-ff31d0ec3589", "sighting--94148253-b1c6-411c-81b2-c928697b4a9a", "sighting--c3dc38ef-644a-40c4-82fa-9b818c338b7f", "sighting--cd4f3681-e1bd-457c-969e-2b9d1333760c", "sighting--cd9a035b-fc75-4bc3-97b2-1760d75ee142", "sighting--cdce6316-859c-4b61-ab9f-c8d963b2d628", "sighting--4aa09315-ea71-44e8-98cd-88dc22468ff4", "sighting--e0e35243-ce89-47df-b477-3b2becd982b5", "sighting--614761d3-3afe-4f0f-8555-968b3d7f58a4", "sighting--c03f4d41-255e-4bd8-a442-9f789f65760c", "sighting--6124a113-c60a-453f-bbe4-863030cbe020", "sighting--350118c9-8690-4c2b-91d2-d01002f886cb", "sighting--3580e6fc-98a3-4277-8eb0-725d05f75145", "sighting--aaae64b2-f2d8-441d-9597-42a5b3c36270", "sighting--2259cb48-6786-4f96-bd7e-9593c332178d", "sighting--f66abbee-40b0-4767-ae9e-ef868ebb960b", "sighting--0fecbacc-b8a3-44f7-91e5-cac026384171", "sighting--e63347d8-7d40-4f5b-9733-2c5c3e60a1aa", "sighting--99760db1-c7ed-4a38-82c8-39b549e30f7a", "sighting--e9290a9d-fe0e-4186-93c7-a034e894dbb9", "sighting--9159f039-8dd8-45f4-be83-277a3c5844ae", "sighting--48087442-9055-4e8f-af32-840609d3b754", "sighting--a5f6d717-c807-4df0-9361-7f091c4b8b90", "sighting--bdf2a9a2-6b1f-4cb4-8215-ad24388308cb", "sighting--c21cb355-8238-47a4-a011-e777ba100e36", "sighting--0284a879-674d-4043-ad7d-a0ae9ec9beef", "sighting--68712dbf-9f01-44a0-b604-8471035dcb86", "sighting--271b25f8-6132-4e8a-a5c1-ec507ff3a1c7", "sighting--a9a8a8a7-e782-42f8-898b-53356223b9dd", "sighting--644f02a4-ea98-4e77-8a45-d7513231d4e8", "sighting--ed72c1ad-0695-44c9-a6da-c06765761206", "sighting--54cb4e77-e9b6-4a72-9237-567e32e01ea5", "sighting--b3825624-ec39-44fe-84b8-73f6198871bc", "sighting--efe26782-ccca-4d2b-8605-aa9f3aeee691", "sighting--66f982de-044a-4b52-bad8-d88ecbcf3d05", "sighting--de5651de-9f32-4ec0-9bce-4319ed5e35c7", "sighting--f6a848d7-6a2a-4de6-84fa-6428d696460e", "sighting--cfe1ce9a-0f7f-4e35-bcb0-311497abd4da", "sighting--405c55ea-7157-4aaf-819e-2efb74201c4a", "sighting--455e4990-b91a-4bef-ba98-a64ca3754812", "sighting--8bad3ef0-adb3-4ee1-a145-d2bcf1b02a97", "sighting--d4e60373-a048-4bf6-8edd-949c59c17866", "sighting--32d0444f-f265-417b-9bfa-8c8b06ee1782", "sighting--288e87f6-4d23-4e72-8130-2c0e70011ba2", "sighting--57e187b6-9ec4-4586-a0c1-2cb6db5e97f7", "sighting--305de642-e77c-42e7-975f-fb25d1501eb2", "sighting--88594382-fa40-4cc8-94de-74f64d21cdd8", "sighting--e303ab39-a3da-42c6-b2a6-1d3b0ec5214d", "sighting--4f178cf0-4190-48ae-8fe2-545248aa4b03", "sighting--e50ff7de-a33b-4034-981a-c01c2a4c9a3a", "sighting--07320e42-083b-40d3-9b99-b5b6a001a99f", "sighting--c6a3ec3b-e5ef-4771-9a86-6091fc018c42", "sighting--da20c128-2c52-41b5-951a-e547a0920803", "sighting--935c4dec-c823-4735-afff-27afe72e3ca4", "sighting--802e61ab-5463-4702-afc0-6b243b5c3194", "sighting--5f12707d-8f22-43d3-aa94-908308477e36", "sighting--2a2de341-e6e1-47e0-acb9-1725c96d8c7a", "sighting--8493b901-e7d6-4da8-b7a6-9c7410fc6bee", "sighting--a7d5e230-2c6c-4a20-8ecd-aa63e0098d4b", "sighting--cdb46f3c-5acd-439c-9723-af729c70b0a7", "sighting--01d4aebb-ae33-48f6-b806-b08504f86a78", "sighting--674aaece-2ff4-4feb-b9a9-62089c718a3d", "sighting--bc4dac45-ada6-4919-ac63-eccb61558298", "sighting--79373999-8866-4fd0-8541-76ac22e69a5b", "sighting--ce919325-1534-42dd-9d9d-42ef67c98e0d", "sighting--eca0413b-fa89-4241-8e34-1896d3d930d9", "sighting--2e6e43c1-b4ea-426f-a6d9-c31dba810c01", "sighting--de169b0f-8c5d-429c-8bf2-15781b0dc7d8", "sighting--9e400a4b-ae87-4543-bdfe-ce08ac81a6f4", "sighting--f8b22460-77b3-4b69-82ae-97cb77411a01", "sighting--8eda4139-32e9-4d36-ae5a-7fd03e41df8a", "sighting--0a501ac1-6a23-4e36-ae71-9b65240f66d2", "sighting--a8dc1528-072c-489b-9740-79dc228f23ba", "sighting--afa2035b-243e-4d96-9535-5d483a58f7ba", "sighting--c6a5d101-b560-4190-8bc5-aab072f586df", "sighting--c2139291-68b0-4be4-916c-6309bbe0f53e", "sighting--d3e5e5cb-35bd-44d7-a360-d1c19f1369eb", "sighting--737e08a3-10e6-42cf-aa3d-6cd64273fadc", "sighting--df6776b9-996e-4998-a808-fbd0a0b60486", "sighting--52cfb5f7-713d-453c-b860-a3f49d963e90", "sighting--d7ea2d4e-cbd3-4cb9-8cb2-9c976b5979ad", "sighting--18004a33-ad5b-48d9-b78f-2c9bfed84f1f", "sighting--16fc425c-e733-4cba-b9db-2521dea1f247", "sighting--235cd0bd-be34-44f4-9cbc-15d47c1026b0", "sighting--2151cc2c-809c-4da9-8db4-b774e5c593ac", "sighting--c026f3a5-b6a2-4d88-bbff-173cf6efd5a3", "sighting--4fc86c8c-3aa5-4a78-8fec-55d0e5fe8b9b", "sighting--3b45f29c-39c1-4c89-885c-262bef4f7d93", "sighting--c071914e-3843-468b-97a2-e78797ae3050", "sighting--11b2f28e-3e31-43e5-b13b-69e4785cc586", "sighting--e13d143f-8e1a-4bcd-aff2-718e6a3d2676", "sighting--09895281-0f79-4831-8d3f-64b2808365d3", "sighting--9ae6a332-a502-4a28-800a-bc0df1f04171", "sighting--4cd111e1-9e47-45ac-8699-95de6095a14a", "sighting--28c24445-0456-4a44-8c45-2ea86c8acc80", "sighting--896a3338-46b2-4f35-af3c-442a740a1dd9", "sighting--2b3491d8-2daf-4087-bca0-a4dbb758e357", "sighting--de1432bc-36c2-48a6-9e34-b3343e1f4416", "sighting--b18132e1-97fc-42ff-b9c7-ea86ac4ffbd0", "sighting--bf265408-b164-4583-bfbe-112fb953c95c", "sighting--58645b5b-362b-4e0c-a31e-49dc78c8ae51", "sighting--bb4c97fb-06ad-4da2-85fc-6a7038281c6b", "sighting--489f2177-b77a-43ed-8db1-d0102900da47", "sighting--cfc7bd53-4feb-4a99-bcc3-3d89392fcc93", "sighting--7c8d4840-554e-49d8-81d6-21e029b9a97b", "sighting--872027ca-2699-44a0-92cb-8aae2ba6cb30", "sighting--40c3cd0a-99f1-4f49-9b67-c50e0c982e38", "sighting--48fb6e13-7984-4b5f-90a4-87e4125e1ec6", "sighting--828d3181-e20d-4714-9415-d105218ca7d7", "sighting--feb4731a-53e7-4015-903d-6f6fc6d5287e", "sighting--78359d3f-0c48-46ae-bdf3-a70b161beb7c", "sighting--bcf60b05-c808-4889-bae5-91c8b8e0d442", "sighting--db1ed621-7ad8-48f1-a066-29489dad428a", "sighting--d9eb8248-38b3-4cb0-ac61-ce0fb813bb42", "sighting--6862c246-cf10-4982-a7ee-96769b9bc96b", "sighting--97cf92f6-03ad-4d60-9435-9b76c2bde901", "sighting--179971a6-6ddd-46a7-8adb-f8673335a95b", "sighting--97f066f4-89b8-439d-ace2-9769a3b92bbe", "sighting--3f1a74aa-c698-429d-bc1d-3e1537e03155", "sighting--e0a1fed5-d767-4688-95ba-d181fbb8ec76", "sighting--af6e5b9b-e419-4eb2-b995-e8c702e7cb78", "sighting--e00f577d-63bd-49c5-89dd-6d1f0aa940f6", "sighting--6498ec2c-13c6-466d-a87f-e39eecbc7108", "sighting--c592ba60-a7d8-4810-b44c-f7cf307438ac", "sighting--26a3784c-16c6-4d9c-9366-30c99cea5fb0", "sighting--26fb9ccc-ec26-4288-b132-5330fe2770d3", "sighting--ae79efe2-3078-46e4-950c-318c0da72d02", "sighting--3445541f-9615-4337-9017-bff07d0d4138", "sighting--f6214508-7585-4ce7-a8d9-83c922675b80", "sighting--f7a5e092-968c-4ae6-aef5-8305983910fa", "sighting--921d547c-e26f-4dde-a241-7a179f8f46e1", "sighting--b20c36ad-676e-434d-ac40-6ec7f16e37a3", "sighting--46baf761-0f67-4868-99c7-0c8a1f8a76ad", "sighting--4ea2fc4c-e5c7-4a90-a62d-1af9c2833634", "sighting--eb039915-585e-4abb-b305-d153f2b1dbf2", "sighting--8d1663d5-0d50-451c-a9a4-bb9954ce424b", "sighting--708d9fda-841b-4fb8-8d33-ef401f30c153", "sighting--da860e58-d451-407d-a512-caeee1e5f5d4", "sighting--7af4cf06-0bfe-44ff-902d-fb28cc239e2c", "sighting--6ed674a3-1f7d-4fdd-9b26-6f1765183c0c", "sighting--28ba2f77-93f3-4765-addb-e5a1f1e52388", "sighting--59aad002-c2d8-47dd-8a39-3e85e00804b0", "sighting--dbe1b9d8-712d-4570-9388-9d2016d0a15f", "sighting--219148ef-c0b8-42be-8934-d00313f1ce7b", "sighting--fd01f15b-685b-47ca-8104-492e8b4f8e6e", "sighting--5e129a93-9476-4670-82a6-1bcae78495be", "sighting--469f62c8-84cf-44d6-a88f-50cd138c131f", "sighting--8f314a19-7f97-414c-b1d7-67ab65e5f870", "sighting--a37ed663-7c66-43d8-8d61-d5b71e499462", "sighting--66f743b7-6628-403e-b2b6-540b54116c6c", "sighting--9ff5313e-696d-4fe0-8930-d44cbe660d97", "sighting--1ef3f59e-55be-441a-9b33-6032f59b011b", "sighting--b939395c-f6f9-450c-8a67-d301e87e649b", "sighting--0e9d0487-628a-466d-a899-fbea07ebabb0", "sighting--5f85e440-166f-48c3-82a9-55a8a261050e", "sighting--c8942212-adc1-4ce2-a8b8-11546e1e7bd9", "sighting--7db1d89d-f7d6-47b4-885c-87a73ac9ab1d", "sighting--81d35c66-0546-4d8e-885c-156eca9087e7", "sighting--c0c25450-bb52-45cf-a76c-ebd226f55c21", "sighting--393251a6-a039-4b6c-b86a-8a80f2215f30", "sighting--24e4c72e-2839-4316-aa97-31bb137853a3", "sighting--0711e793-49b6-4fc0-b0aa-abb1671be4cd", "sighting--52546ed7-0bb2-4a7e-9375-82fe3ed835c7", "sighting--3845e384-ada2-4fb2-b42f-ceac112238a0", "sighting--019d96ee-ac92-4992-ac59-a3a7f3788279", "sighting--838803e9-08b0-4d8f-a64d-049bafe2233a", "sighting--e397f4a4-5814-4116-b2fd-597dc987c67b", "sighting--d57676ef-05f3-4662-85ec-27cc9627e112", "sighting--4d78c350-08ba-4182-a5d8-a35f043df6cb", "sighting--b90ccac3-1327-47b9-b828-004ea3e054ab", "sighting--56f9eb7a-0941-421d-aa33-6de4c2a53830", "sighting--b31791d8-82c5-4f46-b76e-a7505f809ba5", "sighting--f0aa4a43-5842-4210-b29f-a19cdc5eea80", "sighting--f962a14d-0649-4694-80f0-1c9d8bef19fa", "sighting--c9ff5801-a9ff-4443-b722-8c446c726790", "sighting--60594c55-2b28-41c6-8c0f-b39f4b610be2", "sighting--4c382b37-eb1a-4ac6-a58c-0452fb07215c", "sighting--64e6ad5e-8fa4-47c5-8be9-eacdaf7da60f", "sighting--780e8f94-24d9-4257-8216-d6623544babc", "sighting--d0ae0737-c941-417a-bd62-4fd1262d2478", "sighting--8aa2ab90-ac90-497d-b0d3-c62592ee5fce", "sighting--2772092e-9d80-480e-bdfc-011edb9a183e", "sighting--3f2fb3e6-bb38-458b-95bb-1d91d394d44f", "sighting--262dc642-02d3-4eb8-8b2e-9ca6bb68b0a9", "sighting--d967d8f4-5365-4d5d-8c9a-77a7d9602ece", "sighting--7d8d0d69-664e-4618-91e9-7bee03cd378e", "sighting--f9340f1f-e08d-4b52-bbb7-ac33554bfc13", "sighting--fe8a39cf-e3df-49db-a595-47d721fc0723", "sighting--a9aa8f7c-fa2e-42af-823e-ca3e0b8160a0", "sighting--b8f15af5-fbb2-4cf9-b376-bc75713ac29e", "sighting--bab43d05-38be-4070-ba96-3d3aeefae776", "sighting--97acb39c-a232-48d6-a99a-7fe2af2a04f7", "sighting--c6cbdef1-702c-4edf-933f-deff1aa070a3", "sighting--c0216819-d401-4a04-805d-ff75289b71e2", "sighting--f27a4361-cecb-4c24-a676-04e8c37df7d7", "sighting--9a01a326-edaf-42d4-997d-1d6392e846e1", "sighting--ba3081db-5065-4371-bdf0-449d2ecc9432", "sighting--ea4a96e6-954c-4035-b78d-e43ec1f10c06", "sighting--e23f882b-2198-4e72-98b1-165d60672892", "sighting--f370f128-8956-4018-99d5-7384c80ab97b", "sighting--516e806b-c513-417e-aa09-24ff7af27242", "sighting--d7e8b35c-b9ce-4534-b638-117ea811ecef", "sighting--3eb760cc-6431-465c-ab26-502dc7742725", "sighting--4e2e0117-032f-4446-8a8b-c5f041cd6127", "sighting--c8ac52ba-c578-407a-a8da-de68486d460b", "sighting--847567a2-a2a5-4e1e-a20e-b43a1c395f3d", "sighting--3acc8f91-746f-4e23-8088-213c8e6fa8dd", "sighting--ea39ae95-e68a-4f0c-898e-57aefce056fa", "sighting--7c8cd0e2-7e24-4e36-b415-22fe0829b795", "sighting--a1cb1dd6-c684-438b-a463-8d0a9099852f", "sighting--2b80b22b-c8f2-4966-bd00-7b3539f435f2", "sighting--240ba503-e61e-426e-a9c5-23f094cf08a4", "sighting--19c1da77-ab2e-4d1f-a88b-77059abea65a", "sighting--7bb2ef99-b9c9-4ab5-9c49-8029f91c9745", "sighting--29283fc6-0466-4013-8ce2-44c171327530", "sighting--52d2a030-b162-44fe-88b4-b7d444e7062d", "sighting--7676001f-3013-453e-bd2c-7e85ff5e7cef", "sighting--9011f9c5-6e60-433a-85eb-0b16a866938e", "sighting--0ad09f3b-083b-4600-a2fd-601d21e4f869", "sighting--7d32d043-ba40-41be-b96e-9eca198fcc5f", "sighting--a96cb7fd-d0cc-4386-9978-5ee478ccfd48", "sighting--05498f62-caaf-46bf-9045-b8ada7a7836e", "sighting--a7a08cf6-98c7-4aba-942e-c39ea4470366", "sighting--d5b193ae-d74a-4cce-beeb-641502021c03", "sighting--385c4c6f-92b5-4633-9a4d-349ece393a5b", "sighting--d72c28b4-39d1-47d4-9235-d5498475ab3f", "sighting--b9c6ecc8-2802-49e1-853e-f69ebdca9f80", "sighting--bfeabe02-1c73-42cb-ac68-baecd4956d1c", "sighting--e7a01680-7365-4409-a064-dd1c21d1a215", "sighting--ce58a67f-59e5-407d-9096-0b707f5145dd", "sighting--a732efe2-b8dc-4797-8250-b9d8692ef9a7", "sighting--8713dd6c-4640-4e15-905a-e816ca79cb90", "sighting--b05770ad-69cb-40c1-9f8e-f0176aa24198", "sighting--02dd199a-e1a8-4073-86eb-0a4980e647f4", "sighting--c2b622a5-997b-4d2c-a4c0-fe7a996be24a", "sighting--c07877fb-ddfe-40ac-b919-10cf76c9d3fe", "sighting--72752bca-5ef8-4da7-89e0-44d31f089746", "sighting--96993dc1-8d28-4197-afdc-5abbfd90f61b", "sighting--36254a43-4dc6-4d0f-aa89-5178b4b3b8f3", "sighting--dca708b6-43b6-4a9d-ae5f-a0f9a0292909", "sighting--6a529784-9ab2-4f66-b0eb-27ce7968ddbc", "sighting--c8b7020c-d2e2-46f1-a0df-ef2215467fcb", "sighting--bba4685b-e83e-44ff-87e5-86d01d03d2fa", "sighting--1c9500f8-b375-4e2a-9cf0-8b54f4ffcedf", "sighting--a4ced07b-adef-44a7-8955-9423901405bf", "sighting--5cf31708-9425-4c4c-9bc0-0bfc07bc593f", "sighting--5fef5e47-9e4d-4030-bd6d-69bc53994d4e", "sighting--faac4eba-38da-4332-9975-9127cdf6a4c1", "sighting--9ca875a2-4aef-4d32-93f7-3a7a16df6136", "sighting--28e1d244-b4f7-4d17-8d78-e39dfe5d41c9", "sighting--07e1304c-36f0-4cea-b24d-eff2f06627f1", "sighting--7990dacc-51fa-4e65-bd69-14911e9ae997", "sighting--0c5a20c4-3ba7-49eb-b596-35c1dd7c0ea3", "sighting--c2f035af-ce2c-4cb5-83b2-925c0bc0739d", "sighting--a41c0c86-dee8-4964-9f76-7398f51f9ecb", "sighting--4eeccdc8-3175-4e43-980b-5dc372c63637", "sighting--639c83f3-0c46-40ee-8ef9-235a143c7414", "sighting--994d4a88-a9b7-4812-b89a-d655d3777ed6", "sighting--63976953-4936-483d-bb75-17aa1e1eabe1", "sighting--a90f8c19-693f-4c30-b5f7-81735830b589", "sighting--1053208b-eb46-4fa7-81f0-befa363d898a", "sighting--215fad03-7697-4e49-9a38-a65ffa873fe4", "sighting--0e167924-8e30-44c5-8596-a94a1481e31d", "sighting--d9bc4162-2110-4150-a230-37b1feaec6ff", "sighting--f95f1140-53cf-4b7c-bdd4-b18acdeababa", "sighting--a276441c-815a-4fc3-9ad2-b358c010648f", "sighting--9c6975e4-3bd9-4a96-817a-39458919de36", "sighting--2c3ac5c8-db18-4a1b-95d6-49830447eeae", "sighting--60f3aecb-415a-4247-9bf7-fe520e13d938", "sighting--3635f809-7829-4aab-b1f2-462be6601f8b", "sighting--6cbffe72-b20a-4650-9a81-d85d569001ab", "sighting--00401008-f5f1-45f4-95b9-06855605d7e5", "sighting--5bf4c199-cdf9-4fad-b840-d17dfaf42771", "sighting--9143ecab-864e-456e-a09a-d15f6635fd8c", "sighting--87f1d1a6-c70d-4faa-9bd9-d894eb8ab5be", "sighting--c1ebb7a9-8408-4b3b-9968-d49057634b91", "sighting--8c112852-ea07-4840-9189-247e5f96ee39", "sighting--8a54b01c-e593-4985-8d62-a30ecfefa8f3", "sighting--39846530-46a8-4a96-a68a-07f2a2afcbbd", "sighting--cdd11b52-dfd0-4bd1-9e0a-4a26f0e8aa9e", "sighting--1e19ad46-3eaa-4018-8bcb-a48d7ae3063f", "sighting--63574b68-22d0-472b-80b7-8ed6723a18e1", "sighting--772378c5-322c-42fa-87f3-ef7384e0ab4d", "sighting--768e546a-f2cb-4103-9491-82c6a994f756", "sighting--43251ff3-5392-410d-9b07-602dd7fb6c7f", "sighting--f22720d0-b1bc-4844-b476-39120c16f6ed", "sighting--561a9f2c-55e5-40bf-8c8c-7681bf2265d3", "sighting--4cbe2a64-91da-455c-8573-c7f56f6eb728", "sighting--e14172ef-1468-4c66-a4c7-349f0960a9bb", "sighting--2f040584-05e3-4968-b223-d5292c203cbd", "sighting--391fecaa-05ba-43f9-b0df-dda4feea1312", "sighting--40af9b3c-fcda-4e08-9650-e38932e6de30", "sighting--d5e67250-1d39-457b-bfe6-3a956397c9c1", "sighting--808979b0-a250-4678-a0f0-89d183afbb4a", "sighting--54822165-7954-4bd7-a036-d5a8f94701ee", "sighting--a028edff-41ca-4e5a-a5fa-07aac4d2a728", "sighting--b64c8310-2923-4689-ba2d-8d1ce1df5c1f", "sighting--3383664f-5c8a-4ce8-9c35-0fa1ee94c8ab", "sighting--96ad2ab8-5d70-4493-bbc2-a52a4d28d27b", "sighting--7e36e8ff-b063-4780-9ac1-ece973f0d8a6", "sighting--7f947676-668c-4f41-bc4f-05ace3f3d9c9", "sighting--659351f8-bf45-43c2-a655-735d29032b8c", "sighting--29838b83-24cd-45da-917e-9206071ba9a2", "sighting--55c644d7-331b-4575-a3de-f3955f5c8145", "sighting--f2a11fbd-2450-4661-b1ca-e6006d5f8fce", "sighting--312e43dc-edbe-491a-b6fc-79b8cd326531", "sighting--8aeeadd5-8fe3-4a5b-8aab-10e9a203bee5", "sighting--3a84e57f-4d41-4c92-83aa-2ba64c8a4311", "sighting--8b70a101-487c-4afd-9928-d2efe5ba6cda", "sighting--c02ddea6-1123-48e6-8dac-0e90c7a79e99", "sighting--ca120ccc-ca4f-4005-89e4-55e31d98d0d8", "sighting--9e93f521-d951-4415-a3ce-0e0b0973a2ed", "sighting--3ee26265-7fe0-4b04-82af-5b4de420ac59", "sighting--eaf335ec-b0e9-49ce-9766-242c7a8a056c", "sighting--d9650c59-a161-4c0a-9b21-0f087707fec3", "sighting--e74163bc-265e-4365-b962-ee2b09d164b0", "sighting--70d92951-880e-4b52-b1f8-9218a56a2a42", "sighting--16904294-6b60-4618-a36e-b3c810e1dd78", "sighting--fd563fdf-53a5-4c7e-b25e-fea04a74b708", "sighting--dc43f0ed-cd3d-4b00-8b43-a0a5b2df4f0f", "sighting--ad249dc4-60ee-4ff5-b417-cd2459b23c35", "sighting--f04d3c39-4a43-4811-81a3-9a31bcb8702d", "sighting--8f8406a9-2895-4ad3-8157-01f828b6645f", "sighting--6aa6bb37-5935-4be8-8ee6-e36881e5a17c", "sighting--d13a574f-1d73-4e67-bcd1-be03ae545a25", "sighting--6f5c7aca-b22c-489d-9318-d565ba40c69a", "sighting--4c652b4a-c13e-4230-a77a-039b37765eb9", "sighting--d72c1f34-2cd4-43c6-bbd8-abd3a6fd1114", "sighting--d326c2f3-b2a6-4f86-98b8-b4c200ebc33d", "sighting--f1d9b274-4db7-4bc9-b12c-44edfe0241d6", "sighting--2b399aa2-e098-4dbb-ad78-e2b32aab97ad", "sighting--cce485ad-8e79-4f92-b925-2d0a83dfeb4d", "sighting--d592e4e8-391d-45bb-bc0a-c6aa857bba66", "sighting--c665a2e2-cea0-46b2-8b8b-9192b9204ec1", "sighting--aaa75931-70c9-46d1-9515-5754c2553af6", "sighting--31176299-c583-48af-aa1e-a5629cbc33d0", "sighting--73af170f-7e61-4c2e-8367-9d24c9c1d443", "sighting--0a7e5ce3-1b4e-47a9-8527-327ced31e94a", "sighting--9e1f5dbe-de51-43c4-bd30-38163fc70f93", "sighting--29b754cf-53c2-4a93-a5d7-fc23f7d5c034", "sighting--7b402f50-5bcf-49a6-81e3-e97764122674", "sighting--55b9daff-5aee-4334-92c3-b3703cfb6f25", "sighting--17f2cc7b-a7b8-4a8e-aadd-2ea1e6d968b4", "sighting--22edc62f-5eb1-4aed-b584-b331b412bd66", "sighting--0e37b32b-b5c8-4d05-a0c3-eca9ca9e33c5", "sighting--bd64546b-4f32-4ab7-8f3b-900382d120c9", "sighting--c67070cc-e3b0-4b1d-9a79-320d10b5a0d3", "sighting--52b47208-72d8-4edf-83a8-4191acd9f9f2", "sighting--c26f64f3-7ade-4a92-bbf4-c853a0e56bb5", "sighting--d5cd5f81-c055-4472-9c2f-03728c1f2b8e", "sighting--3c61d795-542c-4178-8754-b4cbbe0fd6c3", "sighting--0eba55e0-b220-4d55-8afe-161eb993d3e6", "sighting--e21a0399-0fa0-4ba1-a942-248e3858a127", "sighting--3f0ff72f-4668-43f6-815d-3e86de935a2e", "sighting--2068e8b5-af89-473b-b86b-b6ae6e50d003", "sighting--fb2165a2-5dad-4091-b9be-d47c61df1609", "sighting--2f79cfdf-b80b-4003-91cb-284da7886aa6", "sighting--d77788f3-4acf-4839-a011-25702b93dcea", "sighting--3c8b0dd4-1ee9-45ee-87bb-37eedf2b5399", "sighting--ee8c5384-d62a-4ac4-93ce-7513ff6d42df", "sighting--8269e881-5496-453c-9995-7202d263b348", "sighting--23f59bfc-3e80-43c1-9737-8e170fc05716", "sighting--35bf9321-0c1e-4280-a67f-df07af9e519d", "sighting--cc5121d0-26e3-456c-8687-fd45e6bae10e", "sighting--20bb889b-fd6f-4a87-a2da-659beb9849f0", "sighting--88195273-006b-4fa9-a64d-0199afcbd7b9", "sighting--997b0c3f-63e7-49aa-8d86-5f7eb620633d", "sighting--4ab7e7f4-b601-4fe6-a53c-e36b699e8507", "sighting--0c3e89fc-eb33-4e04-866e-697f1b00a0ee", "sighting--749c87ce-aeeb-4176-a52a-111dbea05530", "sighting--a4e196f3-f68d-4ea1-95e0-4f5c3beba5e3", "sighting--b90f7634-dccf-4368-b3c0-6cace3d5f42a", "sighting--9cb8a5a3-ca72-4eda-8a07-5d9fd18ebd87", "sighting--c0f02fb6-172d-466f-9aae-6b8bcc633607", "sighting--bf33f834-2f41-4b4a-8b38-3d4905e17746", "sighting--e3b1fe43-379d-4b24-a029-2fb0a0c81081", "sighting--84d653cd-602c-46cc-a535-87bdf9c15b2b", "sighting--10d0de4a-3d31-4ea7-9e1d-81263adcbcf1", "sighting--66810258-fdbc-49e6-b195-6ac84a66d43f", "sighting--ced469db-b0ec-42bf-b391-40a7e9d0bc6c", "sighting--d7acdaa9-dd52-467b-8333-015c78be622e", "sighting--f926f197-8489-442b-b769-74e6452eeba1", "sighting--20a2ac28-f42a-4c51-9e95-e4fc01da5094", "sighting--4c3875c5-4080-4bc6-b6cc-9466919bba91", "sighting--5bdb9482-f65b-48cc-84d1-54f6bc74a34d", "sighting--6fafc0dd-15f8-4dcf-a962-70ce54429176", "sighting--083a09a9-dfea-4dd9-9331-c94e63ad7e6a", "sighting--0330078a-60cb-430d-ba04-8ac60950e538", "sighting--3fccb30d-b45f-4077-9eda-68f0fd7e7d5d", "sighting--163c6b6c-4ed0-451a-86ec-95635ebf120a", "sighting--92d469f2-540b-4ed5-a0a2-9bd9d43dfcf2", "sighting--fdbaa84d-62fe-4d4f-ac24-fbbeb25bbb09", "sighting--9258061c-6104-4eef-8c80-f8d5377261d0", "sighting--1a65cbc5-e318-41bf-a270-3f5c03c3c695", "sighting--92e7084a-7ea1-4373-9343-8030d852db04", "sighting--b2982ee4-514c-4479-88b8-03a2d0452696", "sighting--7961c958-47ce-457a-b650-f04c88b9a78a", "sighting--9c97b02e-24a3-4dd5-a90d-1b252446aff3", "sighting--3b0b5ab2-2c50-475b-a8f2-7c5f5c4e8bcf", "sighting--e698a22b-c9fb-42f0-8cdd-8e945c45d9aa", "sighting--23210b10-22a9-44bf-aa7a-03d444aaf5ad", "sighting--1abcde40-05c0-4d4d-8892-17756007f0a7", "sighting--fc1914a4-fe2d-48d2-a6a7-bd34cadbb42b", "sighting--477cf2cf-507b-4664-a686-c062ce3193e2", "sighting--aaebed9e-7712-4df9-af40-fb54efd67c37", "sighting--31cfdb5a-1ec6-4cc4-a856-4c49ee564985", "sighting--5de70f3a-ed7f-4a8d-87ce-d024cd7771de", "sighting--b5f3d56d-4e67-471d-8eba-df1fd07aa210", "sighting--68479b86-a789-4d2c-8c95-a39f4cabc2f8", "sighting--a3d19db8-8158-42ed-a283-21e6a07bd43d", "sighting--306c876a-094f-4266-99cf-860a14c26474", "sighting--4bb0b504-145a-4166-b6a3-5cc4278a9b0e", "sighting--8347c4e0-8df9-43df-8ad1-d3115f9e584a", "sighting--68ab7e16-374b-4eea-a1e1-c7ab65cfe2c0", "sighting--dcbcc580-eb1e-4ccf-a5c8-e38fdc4e3ce3", "sighting--bdf3a3bb-fdd2-4a0f-82bb-472e3eac2ca6", "sighting--c8d1e231-285b-4841-a093-ed9d2f50f757", "sighting--d387702c-bd80-4f2e-9607-320066df441a", "sighting--da8419e3-9f44-49f7-8478-d07f1be3a9e1", "sighting--8eb38c82-1c91-4ca3-bcae-c54041c5d0b7", "sighting--f960f02d-997d-4c03-b161-c42d7fbd7b9b", "sighting--3b057ff2-dafe-4fdd-9652-4a4b89a07713", "sighting--ab00680f-3541-44ce-95e5-e362f00fa2bb", "sighting--3c663189-8a7d-40f9-96a4-c58b4e2333d9", "sighting--50d0f2ec-2e53-4247-bf96-2c98a0508f95", "sighting--55503907-e626-404d-9ba6-31b94483cb49", "sighting--cf28ef79-47dd-4d3b-a348-1e2e791ea89b", "sighting--fd6ca63a-4ad5-4361-a9b6-d2be2f89f9b3", "sighting--a87ea210-8f94-4512-b9e6-a3f0d0378df3", "sighting--adb830f0-c7cf-4c9a-9a21-d12a1c234ec2", "sighting--1c98f3d4-55f7-4a49-96db-31d45b047e96", "sighting--e0905040-f5e4-4ea2-a2cd-fd63bf7826d5", "sighting--ec003b8b-bb2a-420f-8b47-1aaff84fe513", "sighting--b854cc86-b180-451e-a67b-1ef15950ec16", "sighting--9b2bb7f0-64ca-4598-922e-08aa559d74ba", "sighting--29813337-f21c-4f16-a96e-5696dd962aaf", "sighting--e6600575-0244-4e8e-b492-1389788bec8b", "sighting--849b1f6d-e5a6-49b5-91da-4e10a6737474", "sighting--123ce95a-5fdf-4b13-8a10-8972d146409e", "sighting--52715c71-249f-4b28-adf0-2627442336c1", "sighting--b59889aa-632a-4d06-910f-ee10a835f844", "sighting--3c3c988e-1a49-4e9a-b1df-21f03f69d83f", "sighting--d6366e06-aeee-4f82-a0d3-e11deed7aba1", "sighting--4c25626a-a3be-4caa-a4f1-bccf81d320f7", "sighting--6b6e276f-44ac-4e79-bf33-8f60c94282c4", "sighting--594f4227-3ef6-4f86-a618-63141a3e2114", "sighting--66aa4924-32c0-43f0-81d9-4f5dab4144e8", "sighting--03c2a1a0-bf2c-4830-909a-39770daef841", "sighting--b4b27066-aa66-4077-a451-5a4fb3b0fe86", "sighting--01cc4734-04b9-4427-8e67-13f23202c86b", "sighting--63c9617a-2190-4588-972a-3a91fd123fa5", "sighting--e35cf26d-c216-4c53-9cef-f0479e9ae244", "sighting--105ee91c-d354-4948-a257-6a55b4e14772", "sighting--cd15b7ff-7b7e-475c-b80b-453f0232cc5b", "sighting--abfa54c4-c43b-454f-bcf1-cb8471152850", "sighting--1bebc733-0525-4d47-88b8-1e4c3c47b54c", "sighting--b97ecaed-0878-455e-8dd3-3c05727387b9", "sighting--47fb1763-33f2-437d-b1f7-ef7aca25b501", "sighting--ef29c6c4-f181-4a0b-af6c-d0309ee44202", "sighting--9469888c-e499-472d-ab48-ea8d3f704363", "sighting--5dcc6f3d-c3d4-4100-af41-d4b6fb707b25", "sighting--c4e401d4-9b38-4ab7-aa7e-a309c31b794b", "sighting--0468fb3b-8d92-4166-8d02-5524a12f560c", "sighting--f64889e0-b872-4eea-a7b9-366071bc88ac", "sighting--48069cda-9ac0-4694-bb85-4da32596e928", "sighting--3fe68988-8903-4296-bd39-1c1f8e7579c7", "sighting--8efc3926-6b51-4022-99dd-5e30b2968394", "sighting--82e52185-2790-4b6c-932f-15f4f64795d4", "sighting--040c6d56-164e-4940-b0fc-55c3bbddc920", "sighting--c069abc6-c9d9-4cf7-a66b-15832f6c2db7", "sighting--0a87cb73-9f08-48d3-961e-0bf24ce6ccf0", "sighting--7aa154f3-906c-4abf-b9a6-fc2bf53b3c26", "sighting--6ad7b95d-4a5d-4591-beb6-9d7c919b1f21", "sighting--0b5a5322-8c06-4718-8555-1d51a2a2b083", "sighting--818f8caf-3d78-4699-8ba7-38247c956d70", "sighting--d808ffc3-6f83-4de7-9bb5-a4ca558cd41e", "sighting--b0a5c858-c24b-428a-b00d-6fd75411ad80", "sighting--b8a9ae4b-be22-43ba-9fcd-7e07e10500be", "sighting--fe9ee5e6-7f67-46d0-80c7-0ee1e89d2e58", "sighting--9d8d37d3-c119-4110-9d29-a380fff80650", "sighting--141412f6-86c0-41cd-8721-289ce30fd0b9", "sighting--542eb9dd-48ff-49eb-86b1-a92293599c22", "sighting--e56f8093-1b7a-45c3-b81b-706cc8e4bf33", "sighting--60ac7532-08c2-474b-b67f-a66d4127f323", "sighting--77ae6880-c2c0-4081-be08-4311dd2a0e2e", "sighting--fa900170-8d6a-4d49-9073-4f5f111931e3", "sighting--a56bf119-b14a-46e5-8d7c-27867781b166", "sighting--69a146ea-233b-40b9-9d39-b786a67db066", "sighting--a3aaed65-94a8-47cf-ad53-1dfa0f4b8d66", "sighting--5c37d926-dc8b-490c-a7e7-2ff9f8573819", "sighting--8db2777b-3090-4d43-ad39-b8e54932c2e8", "sighting--1b1a0551-c95d-4877-a1c8-174822a54b76", "sighting--f99ed64a-7b33-4940-bd57-e31bc9e90d12", "sighting--1d6295e8-86a0-40ea-99c1-6fdb528f93df", "sighting--580e7725-fa31-4c64-9611-440d23f54e27", "sighting--888aa30a-491f-453e-9eb2-11c52783d59c", "sighting--69aadf45-ea57-4757-9637-24c1af0a22b5", "sighting--08db3eff-db15-497c-bc92-a110d57aaf24", "sighting--88c08e48-51e5-4551-a8f8-82009d7d9e56", "sighting--6e4bbd50-8c4d-4ea6-a0ef-eb022c5c41f4", "sighting--68d127f0-b7ff-4a97-a7ec-06ea0aeb6c76", "sighting--1bdbf94e-c794-4459-8785-605924cb6793", "sighting--03d3fbfd-d16d-4d30-ab08-bd4f0453535c", "sighting--06387400-170f-4b04-a44f-e09caf21d3af", "sighting--65b13743-551b-49b0-acb6-dd96af5a97cb", "sighting--f03487aa-2a10-4a35-b6f7-6cad94493d55", "sighting--86c0b247-8f25-44b8-8983-3a1428c22c84", "sighting--54787cb2-4676-48a3-87ac-e94b7fa51f49", "sighting--00da57a0-63c6-4e68-8143-2f655bc5f818", "sighting--a325fc40-fba5-46d0-8129-4a7c46b2151d", "sighting--8c6448b3-e074-4950-9c96-92b5e351a64e", "sighting--0d22c3da-b04c-43f2-ac86-49cc9c233484", "sighting--878a9e97-bbb5-453c-9f0a-b3339dc428f5", "sighting--1ae96e41-2eb2-4f6e-bd7b-85ddf8dc4207", "sighting--77d7a8b0-19d0-49ba-a781-e17710eefe2b", "sighting--d848fbfc-bba5-45e3-ac34-7caed628ae87", "sighting--89d02efb-30ee-4595-b588-8ffffa525fe1", "sighting--9c631687-5d29-4f5f-b506-3293c70c48f5", "sighting--2f010649-83b4-4e80-982e-373223ee62e8", "sighting--b04e2969-ba0e-4078-a439-4b80c267cb5e", "sighting--9a5a7427-d848-4b16-b31a-c7b05aac5765", "sighting--c6cca622-3c7e-4680-ae1c-1900221225ca", "sighting--45334470-dddb-46f9-bd12-89fa2f83dd32", "sighting--a0f3f814-5d55-4800-8010-3b1963e2e260", "sighting--479ed713-1f32-4afd-9a64-d6c3b8e08fe6", "sighting--362f5890-9c98-4055-9962-e547c69e3ecc", "sighting--fd551c64-1209-4b4c-8960-a86017d5c3a6", "sighting--76d89af0-0eff-4d36-b48a-69d351c63c77", "sighting--e0dd2696-a48f-4620-b830-c43a22feb752", "sighting--97969ce3-4f6c-4e2e-90fd-0bcd661fbd79", "sighting--eff3fc08-6855-4c84-9f73-25fc586fadd9", "sighting--079a4a57-7cb6-4e40-ac7e-f5821326d789", "sighting--89160a94-efde-402f-a072-2fbdb6d110b8", "sighting--deb06f8c-f314-405a-975b-a8e68f047623", "sighting--ededd8ad-eeed-4f36-992f-395b95bb958a", "sighting--31ab7053-d25b-40b5-a525-ce321ee8f58f", "sighting--0ba79b14-75d9-4be6-8262-bcbdbf598be2", "sighting--249d7eb1-2653-435f-8361-688ee17eea31", "sighting--5ef767ff-4faf-4aa2-af10-e0e52541414c", "sighting--dcc1ac87-e87a-4ee4-8b4f-046f47714cfc", "sighting--4a91ce92-031c-4493-85bb-8943a090bd1b", "sighting--c459a075-19bb-4ccc-86f2-39ef2975c70e", "sighting--86989adb-0418-4d72-8dc7-efa850c982cc", "sighting--be930083-e3f4-4414-a49c-93c926971310", "sighting--7bfd0d1e-9acf-481f-b641-c9f0dbc47098", "sighting--d357d06d-00c5-4b47-aa90-91bbf7e35884", "sighting--352636f0-cffc-4afd-ac25-7d33666dbef1", "sighting--c063fc5a-dcaa-4d4b-8cd7-f7c8f910b6cc", "sighting--9b2b785a-fcb9-4b1f-a171-dffcf0046f58", "sighting--19ddb572-8222-4036-8f6f-701933d96938", "sighting--0b52e98d-c71d-4bc3-95a0-9b938e05ced8", "sighting--a5013f1b-d90e-4abf-a476-1b42a7bdae95", "sighting--5e005943-dbaa-45c5-a236-a931067e4dbd", "sighting--d138d4a7-7f9b-4efc-bba8-af7df44bbc08", "sighting--91fc32bd-a616-4d0b-851c-90e48dedc061", "sighting--83650037-810a-4d19-9c5a-f813a0a685df", "sighting--31464b3d-7d2d-4c97-9246-7544f17abae0", "sighting--7a92aa67-2bf9-4312-b94c-430b6ff9a130", "sighting--064abf56-1928-44c9-b3fd-228d1bcad69f", "sighting--6b300dd9-153a-4e24-a530-b4b5e0cd0dfb", "sighting--43ada3e7-dba9-4ec9-9358-f04cf50cfd74", "sighting--8105956b-e1c7-43d9-aaa2-5272c1c5cf05", "sighting--f24aede0-e027-43a2-a634-64276dc7df3b", "sighting--595b5076-8956-4701-84be-ead200c7c7d6", "sighting--450b48a3-afe7-4f53-b12f-a9901f0639c4", "sighting--5d5a2252-c011-4a74-8b99-4f78fb1a7151", "sighting--4ca72705-7036-4d00-bc80-bf8084b1457e", "sighting--f65bffdf-3370-4e22-bf7a-53edb543be04", "sighting--11c0500e-169a-4f31-8440-1eab2286372c", "sighting--94c77628-a334-44d7-8cd0-ad8104f674c5", "sighting--6ec891da-87e3-482e-807a-452fc298b224", "sighting--9ad2aa47-6bd2-448d-a811-d5989954505f", "sighting--6bb32e8a-9322-4949-841c-0c80293346bd", "sighting--1bebad88-7386-4e39-af58-d409f1452420", "sighting--654eefc0-34d8-4947-a39f-9605a4df9481", "sighting--42dcbf05-9691-44d8-bfd2-566989624df5", "sighting--6fdc6233-52d5-4c86-8326-efea68cf0e47", "sighting--3b547572-8557-4b15-b3ef-f7b639af7336", "sighting--51acac4e-c2f5-47f3-bd84-0217e00881a7", "sighting--2eeb1474-ceeb-457e-b4a2-7283315739ac", "sighting--9cc97d7a-e2e3-4900-b661-00ee4497158a", "sighting--55acae7f-e485-4cc4-a3f9-b2e43ac42e9a", "sighting--0b38f885-d201-404b-810d-76426b3e8733", "sighting--eceb0704-6f4d-4c49-b932-08da6306d338", "sighting--001d3527-f772-4974-baef-cf17ae4bd701", "sighting--8af2154a-923f-477a-ae40-3326b54ab771", "sighting--26ac95a8-8993-434a-874b-715541adef60", "sighting--9936b32b-b71e-4857-8a9f-68abc17f04b5", "sighting--9937aa63-d947-47ae-9980-0c618c452640", "sighting--fa8d4426-76fa-4853-b6d2-b21146a66e78", "sighting--da67e7d6-db6e-406e-9dc1-34ff793c0882", "sighting--e42efe9e-f1d0-4fbf-9342-534b08ea29b4", "sighting--d796f24b-5462-4e34-b880-3186046cc794", "sighting--e244d15b-5ea8-482c-849c-9937488b0586", "sighting--8256e52f-f009-4e21-b52a-5a9d5e9dd7e2", "sighting--de95d0bc-2296-4d9d-a542-49c11b125bf2", "sighting--95aff820-412e-4620-a10f-6ea4e02c080c", "sighting--1f593610-9a49-4548-924a-96509beb4f17", "sighting--3338e4e3-bc6a-42d0-a47d-2e90985a6eb6", "sighting--4146d4b0-9862-405f-98f1-305b2bce699a", "sighting--2da4d1dd-0a68-4df4-ad60-2592dea2da0c", "sighting--6c06626c-27fb-4b13-820b-aa469a041a1b", "sighting--64015d08-3635-4f6e-aa03-015e07cc5fb6", "sighting--0ee2e43d-8bd0-454c-a459-c5feb3922056", "sighting--75c1c2e2-8551-40f1-aba6-f4521daf68e6", "sighting--2eb76963-d514-45e4-855c-1c7b72b04890", "sighting--4f0f6576-1046-4696-8aff-467f4efcccda", "sighting--75a7aa66-6bc4-4958-b5b2-47a6ff5cefa1", "sighting--23b3bb8c-4a21-4da9-aedf-51df8e8fa9f9", "sighting--21d09f2e-39a8-449a-8a94-80da249ee105", "sighting--a762af11-c891-4ea6-b4fa-ad3768f3a126", "sighting--cacef4a2-9e32-49b1-84c0-6e747b3379da", "sighting--8c4cc366-579c-4f64-b74f-7fbe603ac4cb", "sighting--dbbbe36a-6106-4216-9a25-b63f19bea945", "sighting--b28fc6e4-55ae-4bbe-b43e-b2b799d42e50", "sighting--ae0c65a4-4cfa-4582-8273-fc025ba7b55d", "sighting--ce6b2438-18e5-4d19-b5cd-0ba51ce4d475", "sighting--bc3ec69a-8fc8-42d1-98fe-44917f6b9934", "sighting--81daccd5-b3cc-4a07-bb4c-c48b4b6e58ef", "sighting--1ba4384f-ab65-42c9-95aa-a4ce1db4b726", "sighting--f28ec832-fd8c-4f04-b34e-31421cb36720", "sighting--85c96602-2dd3-453f-a396-b6361a069ba3", "sighting--e5e6b5ea-93ce-4a64-9efa-2ede94a0739b", "sighting--e7045bac-5674-4e36-9eed-21bbac63d779", "sighting--7bcc4dd2-d4a6-4335-949d-78d8756b99a3", "sighting--bed425b7-3a54-45e0-98c6-dad97c6764b9", "sighting--30ab2f59-d0a4-49b5-84f5-dac27dc4d91e", "sighting--f886f68c-9db6-4320-9c77-ca5b7b656bdf", "sighting--6923ae16-7990-4f41-b53f-6d3b09f0d88d", "sighting--919878f0-5a7b-4945-8034-2cea8fc40660", "sighting--ca41fa9b-e71f-49bf-a1aa-a6a0109ff450", "sighting--99652cd1-de51-4e03-aba5-753a5dc9ea0c", "sighting--e74e72ac-5ac4-4b77-9f42-c1804d683559", "sighting--df4686ab-5e7e-479d-8d6e-e40dc50a140d", "sighting--3ee6ae99-b944-4a29-9e02-dfd4afb721b7", "sighting--5f4da2bf-84e5-40d2-ab91-f965e255d4f5", "sighting--caace0a7-56b4-436a-aefc-53b2ce600273", "sighting--836754a9-0442-4e1b-9b71-a948c8df958f", "sighting--5e39a51f-183a-4090-bbca-d4fd9b15a4ec", "sighting--d337d3d6-b7ad-4fb8-a123-30736b5543f7", "sighting--ac526a9c-1b79-41c0-8573-6439ee0d2973", "sighting--5272a9bf-663e-45d2-9939-c9100464d5d8", "sighting--030487ad-9a5d-45a1-9576-6f339c3af2ce", "sighting--54ce05f6-442c-401c-972a-5e82b301a090", "sighting--bafa7f05-1e01-4ce6-bfba-99b2e845222e", "sighting--840cc52b-37d5-4b54-b3ab-2572a1b9a9d3", "sighting--90f764e4-a355-49c6-a3b9-96fb1130bef5", "sighting--b9e47ef1-a17d-4471-8d19-b2c638b18c99", "sighting--c73d382a-fc38-43e7-8fc4-bcf745918fa4", "sighting--d8b6447d-dd0d-4d05-94fb-ee3d2bf6e374", "sighting--5caeaf45-eb19-46f9-b8c3-fcb98ab2e388", "sighting--b9886bc0-ab24-42e9-8e9d-e7bf4ebe8298", "sighting--81aa6098-78af-4ad3-a809-d14970490180", "sighting--e7cae2ce-e344-4596-aaaf-25c317e13665", "sighting--3d598dda-9956-4b60-810f-38cbc72da37f", "sighting--4eef143f-4bcd-4e44-933e-80b673c313f6", "sighting--fbfa2b75-482c-4a01-bb49-19f753bd8501", "sighting--ece06a64-89c5-4ac6-9f00-60fa36964e5b", "sighting--19f3c7aa-180a-46a7-9560-1d2ad4281392", "sighting--4e1826c3-dd50-4410-bf41-3f4326283be2", "sighting--e7254ac2-6abd-4a03-bce1-f09b948d7015", "sighting--6653fde0-820e-473b-85fe-62b9ffa760e9", "sighting--ac64835d-d044-433c-8c3b-7e23f8b11182", "sighting--d99e2355-8e63-4e25-a256-04c261e3b205", "sighting--682f00fb-77b9-4a4b-b871-d0e05b504d1f", "sighting--e42cda31-f104-40d1-ac56-0d78cd312446", "sighting--5c609f42-72f6-4be2-947c-62a11b3120c0", "sighting--9a3742a7-c073-472b-9253-68850a0e9c08", "sighting--a2989f5e-be42-4e0d-b00b-a5c8c98abc5d", "sighting--b880abea-be93-4eda-86c0-53f37923fc62", "sighting--2b727770-2451-4304-8f82-896c10ee43bd", "sighting--b250b85a-3829-48fd-ac18-019aabeb9c56", "sighting--5b141a86-2f21-494d-ae1f-435f6acd9b62", "sighting--8dd8ce6e-6fea-4572-9dc5-1e86e302807d", "sighting--98b8c323-610a-4cbc-9eaf-28925ce66de6", "sighting--7f7b7cae-f856-469a-a25c-52adc984d582", "sighting--a759b415-5235-44c1-b078-68d5996b9c6c", "sighting--2e783949-e854-4426-9923-448e81426399", "sighting--3a3880bb-92fc-444c-9173-68d08cdda291", "sighting--93c0365a-57f3-443f-b4ef-5bf3d5662a71", "sighting--b875d929-d65c-4f2f-90e9-f7fb3f45fa39", "sighting--ff4d6b86-0440-43d2-9e5c-2de6680cf31f", "sighting--d652ed88-4fd6-45f1-9241-22cde5b9a617", "sighting--c04f973b-2b09-4c7c-b7d1-de148eb29512", "sighting--7ce54f59-01bd-4b2e-b863-bb92cfadc839", "sighting--823c25cd-6187-46c9-a367-e5a53a27569c", "sighting--96d15657-9a52-4149-b994-872166af0331", "sighting--f219ab97-8905-4046-b4e5-fe0e8e3ab228", "sighting--9362645d-3f3a-4bc5-b1ae-355fd0634bcd", "sighting--b03b51af-2aba-4142-9bb3-4e756ab0e1f2", "sighting--d3ddcecf-f6e1-4c12-9cfa-364e170c04bd", "sighting--1877cb75-08a8-48a9-986d-3d58d0ac1a27", "sighting--b49d939b-049b-4159-92f5-50d8a9df5b75", "sighting--a0e4f911-cc77-46c8-96a6-0d801fd10641", "sighting--d066ce56-e53e-47dd-a3ac-3ab60bfede7a", "sighting--a3578ded-f4ef-467c-9cbf-40ee34464ecf", "sighting--0df03530-7fbb-45dd-b285-25f20642a59c", "sighting--85dbdf0b-c3bd-4e0c-ace8-28ef70d7addf", "sighting--45af8d73-8021-4f77-b020-825458269651", "sighting--3d1bb599-08c8-41a1-a8b8-c6df64022900", "sighting--750807a0-d744-4276-9670-e77542526118", "sighting--7abd72c4-af83-4450-9dc8-9a98bd5abe13", "sighting--811a53aa-f457-4548-b031-56d7190ff8d8", "sighting--3557a347-1e7b-4ff7-b9fa-4c2e3546897a", "sighting--0b061d67-04f5-42f3-9387-146bbb95ada0", "sighting--dd08bd9a-4e35-4916-99d1-7fcdda60ac99", "sighting--09b54b05-0fa9-40c6-8b2b-f8b89f5785f3", "sighting--6362c42f-1549-40d9-9bb5-d6f9c9ae73ed", "sighting--cc4bf4c3-ef3c-4f5e-8605-b4599dd8d100", "sighting--9eb21181-87cd-40db-92b3-78743a3bfaa5", "sighting--cce6c2be-6c3a-4d3b-abdb-aa7f46c0b8d2", "sighting--22705e0d-d822-4ce7-8005-bfaa1b0fcd55", "sighting--bf728b4a-608f-4186-bf07-7f48666935cc", "sighting--466548c2-73c5-4e96-a4c5-071e976b7533", "sighting--3f7a4485-75d2-4e59-842f-9fd738bc2caf", "sighting--ce2021cd-e2e3-40a1-b9ac-00d0f27233dc", "sighting--24ad3d1c-500c-478d-b518-02aeae41e06b", "sighting--2fcd757e-1328-4777-a9d5-c12e0f15db32", "sighting--1c3109d4-ce42-486d-8269-9e220ab1ac55", "sighting--2549b825-b591-448c-88b0-1e2d0f0a669f", "sighting--bb34c891-9fff-4be1-8863-7f05e6ba9f51", "sighting--855c4d1e-3229-4418-9db2-f24308416dc5", "sighting--ff3622b2-b745-4619-b004-d678fa4defe6", "sighting--a5a4f97e-e7b9-493e-9c4e-f5f8dc3a3ed5", "sighting--4275bb5e-5cbe-4cf6-9620-c33e763cb5b2", "sighting--c27b347b-18a6-42b2-ac25-5ae9d1983952", "sighting--b689a8b7-e420-485d-83f6-781ba98f001f", "sighting--60e5d2e7-db0e-4657-ac5d-a9017662a658", "sighting--d0035ccc-c29f-4ea1-a5e1-08bfc2602f2a", "sighting--ddf09216-3ccd-4a98-913f-d1ad910e7c40", "sighting--3b0a77b3-bba3-461c-90e2-c9620d5da8eb", "sighting--97a75b97-13fb-4ee5-a01b-a166fe79c238", "sighting--3aae7e1b-1915-4b03-a143-7205fe26f9bb", "sighting--7639bf50-4d67-4e95-a7cd-13252624571c", "sighting--aecb188f-9b3d-4270-86c7-3b04c2ba64fe", "sighting--7f6e7703-0a6c-46b6-ac91-7b2a9093e69b", "sighting--a92ec651-f550-4485-aabd-917a6eb028e0", "sighting--67cd1844-3907-41da-bbdc-ee2f4e3b416a", "sighting--68c39eaa-9612-425a-8642-f352d9559b67", "sighting--c6384bbc-6487-44d8-8463-45871c05a9f6", "sighting--9ab0d184-56d8-49bd-99e4-5088785b7738", "sighting--5becb995-9354-4b01-8ea9-ff7ce59888a3", "sighting--40f43930-9bd1-497d-b449-ce07e1c05c4b", "sighting--9329d206-8748-44c9-a936-6624ed404db1", "sighting--4032b0db-bb7c-43fe-950b-c30c3779a455", "sighting--ae3bb557-537a-4fdb-abc6-306e5b7e4191", "sighting--5d1deb0f-900e-4122-be7e-75ef6197dd79", "sighting--6ccf9129-da3c-4f40-b65c-9fdd4f2fe539", "sighting--505340a8-c7f7-4a2f-bc1b-7a231d1a5f4e", "sighting--60b2980e-1224-40c3-a574-6486379249c3", "sighting--07948f9f-ae88-4e6c-8f22-22e00a55511d", "sighting--0d7be2b8-3b96-4938-a788-15045dedd87d", "sighting--851ca943-54db-4bf1-8bbe-2cdbf6cf571a", "sighting--58126c96-ac85-4a41-941d-82f018ab6b53", "sighting--c5f5bfeb-1a32-4144-b89f-9c3f0064b0d9", "sighting--93798a5e-8cf6-4f56-b726-a4be4dd5d472", "sighting--61f041ba-d089-4421-869f-aa21c1266670", "sighting--94c2a95e-b09a-4b82-b026-cd6950eda2ae", "sighting--be28622e-410b-4f19-9a14-90b84fc2024b", "sighting--5073098b-22ad-4720-aef1-fc2b82f47e81", "sighting--b4b3e1d0-4fc1-43d7-adb5-d7a65a6bfd40", "sighting--9126902e-bf91-4618-a6d9-a38a3e535145", "sighting--975c405e-bc58-4f15-bf0c-46ed4f8504b0", "sighting--d91db7f0-1a3f-49e0-b483-6b33c395579b", "sighting--8a48249f-57a4-4d72-97d0-0b1304b0fd8f", "sighting--79e4a65e-5ee1-42b8-9520-03c8ded84ea0", "sighting--dae3fcc5-aa09-4161-8603-e95cae746eeb", "sighting--a2b2cc5e-b5cf-4b4f-ab64-34da3a4023e7", "sighting--baabd596-6406-4eb3-b536-09a15e471580", "sighting--0f80f317-47df-4b87-aa40-aa9a266d7e20", "sighting--d21dbfe3-8734-4c37-83fc-aba31ace2dcd", "sighting--dfcc8787-9c41-484a-b49c-3c4788aebd83", "sighting--cda55953-b3bf-4b23-b371-346ce336acd0", "sighting--df1b1aca-8111-44eb-99f8-afc7ec2c0ae5", "sighting--7c28983d-5c97-41f8-93c6-85958c5bcac5", "sighting--9bf877ac-6f8e-4757-93c2-58e3049680a3", "sighting--d73feb7e-2364-483f-99dc-bb65bf68f0c6", "sighting--8288b1f2-e395-44c4-8a90-a6574b86b775", "sighting--a4c9ee7f-a9f4-4118-a7c5-820bb4b8eec6", "sighting--e23d34b7-5d6a-4b31-b4c0-e8e1fa0182e0", "sighting--b05b33c9-15c7-42f0-92a2-6e5cf0d88676", "sighting--a7ff20db-7146-4b7e-aace-aac25a8f0cdb", "sighting--7f2f6a13-47ad-49b7-960f-1f4fef086db7", "sighting--aff4d889-d7e7-4df8-84f1-e7a47640a95d", "sighting--c37110b4-212c-4568-a573-f2be6c1b701c", "sighting--31690311-503c-4175-aa32-2e9706894e8f", "sighting--cc7ebcd3-3f88-4e04-9453-9ba704f7478c", "sighting--5d41cafe-5c5f-4777-8926-477e52f96f63", "sighting--c76d6a9a-7051-4e21-819b-6533926b3072", "sighting--67315133-ecc9-4653-b8b2-9b4dbcf716ff", "sighting--086202a3-76da-4e27-91db-9c0e3bbda8d1", "sighting--c1311f0b-3972-4951-97cd-1f3a2462749c", "sighting--49e7392d-f410-4872-b6f4-6a4818bbc553", "sighting--8fe6bc75-d313-414a-bd77-c163b6bca7ed", "sighting--927bb6a6-bdcc-4ea7-96ae-a5b196b6d712", "sighting--63838270-ea77-4e4a-a1f3-01981660c6b5", "sighting--c4e98570-1af3-4eef-9c20-3bc712ccbb2a", "sighting--4f20a647-8836-428d-8dd8-71f6f28e75c2", "sighting--8dca69ec-dd1e-4f76-9398-d98aaa13d5fe", "sighting--5a6e5795-197d-47be-b6fa-beb159dda9bf", "sighting--e9543c56-bcde-44e4-865f-66c3dfbc850c", "sighting--96e82460-641c-44f2-b2ca-9283eed35f7f", "sighting--71685925-0bbe-4011-93ec-f1b2864385bb", "sighting--0b8a3e15-9e7e-4d83-b4f0-406b898823f8", "sighting--ef8a78e1-cdc0-427b-8469-8aa49689ad0d", "sighting--0980b526-1e48-4869-9b10-271ca04ed82a", "sighting--e6192ab0-84a7-43a3-ae38-a18592c15634", "sighting--dafa7c6c-8b1e-4677-9946-9e8f5aa5eb9c", "sighting--bc866a4e-5e0a-428e-917b-feaa11186d78", "sighting--17221b5a-c011-4691-8dce-74131fa5562c", "sighting--5d93286d-8127-4cc0-805b-aeb6effdde54", "sighting--4b965f38-6f8e-463b-a8d7-bd9b742dd7df", "sighting--fd7bc4c3-0d7e-4f21-9cc2-a2d9de0221ff", "sighting--d6615e57-f32e-4519-92c4-d1ae05c4fd39", "sighting--f57aa158-44da-4daf-b715-f0706349894a", "sighting--8b2f73c9-ab17-4898-8ff6-912fb13bed4e", "sighting--6d9e9cb1-b2a2-4ab7-8252-eb943e1e6cf4", "sighting--a22f016c-b521-4fdf-9f29-173df362dd33", "sighting--f459a150-7336-444a-82d0-9235f82f499d", "sighting--4e427ece-2652-41a5-be21-c4fe509f1276", "sighting--05034a55-fc87-4629-886c-05a4d8b6ce1d", "sighting--c2a4eee5-18c9-4214-a3af-c424cecb5bc7", "sighting--8561c781-4d4f-4dc8-96a3-6960fb4d107f", "sighting--b21c82c0-c163-46ec-91c8-c2ef8ac71d6b", "sighting--1545193f-bf1b-4885-806d-bb945290d6b5", "sighting--f0f54576-a263-49e0-ad96-361662ac43a8", "sighting--68838349-36ea-4d92-82c7-59f232603bc6", "sighting--8db8f877-6b4e-4dcb-bc89-46b058bed712", "sighting--9b1b77ba-5109-4f97-a575-73e6622e4b45", "sighting--5ae94261-e770-484a-8e1c-9028f3690a55", "sighting--484b407f-5dcc-453b-8051-83e6229a80cf", "sighting--c338e397-15f6-4faf-a014-e27ff27fa62f", "sighting--2f5ccab0-724e-4ca2-bc01-3d3120e23f83", "sighting--64b4cb8d-18f6-46e5-9d86-8ec476eeaed0", "sighting--79d6382e-8368-4a11-946b-1a1b65880f48", "sighting--f29ca75a-a597-4cd0-bf08-391b4a94d49b", "sighting--20e201df-b7ed-4c88-ba78-b4df321fa942", "sighting--b3810c9b-473a-4e75-9cc7-9e6dae4e5faf", "sighting--0733aefa-795f-421c-aa93-c416d26d6f35", "sighting--5e12c32f-3cf3-42b6-9026-efaf952c31ad", "sighting--f67c7e44-64b1-4020-a2ac-197e5b424bee", "sighting--67acd436-f186-4dcf-b6a2-8ecaee7f8793", "sighting--357a196f-e7d9-43f9-b147-431d53ff5f86", "sighting--f8b8733c-922e-46c9-a07b-e0241cd622ef", "sighting--9f1f4689-499c-486a-aded-425f0d0e7381", "sighting--7dab8703-b768-405e-aa26-6965ab312a49", "sighting--18de4d30-7702-4238-970e-39e4815ef537", "sighting--b2bfad70-8a9a-4bee-8b51-ef7333b49c83", "sighting--0ee85187-2adc-486e-8252-7a0d50464620", "sighting--bc36782e-92d6-4f5e-8104-efcc5c4cd413", "sighting--625baf79-3169-4e2b-88c3-1eb8181485f0", "sighting--48543289-6825-4cf5-a217-af70f08a2eb3", "sighting--6f6f3399-c259-4ade-8056-467b1eda6b43", "sighting--e3b34a1e-e226-4db1-af7c-c1b8981d820a", "sighting--7761f30b-5174-4427-9f9f-f97d1950ed61", "sighting--2d49bf6f-8e6e-4714-b8a0-c01426e56b67", "sighting--10a21ee0-bac5-4b69-bc4f-825e57842a34", "sighting--e489b1f5-ff54-42fd-bee3-06697a0aedd7", "sighting--340909ac-0ac3-4c42-87f4-52ebc60e6a76", "sighting--48aa3e57-c5e3-432a-a082-22fcc8ceeb3d", "sighting--d589c325-3d6a-4569-83b3-2ae3ea63258c", "sighting--5ea98fa5-4bed-49fc-932e-46d5e8a05932", "sighting--7bbf1e60-ff69-430e-95bd-ac133478ff4a", "sighting--0abe7443-989f-4a87-9c37-573cfbf9ce27", "sighting--a18fedbd-ea0b-499a-8749-8bb940d372fc", "sighting--c8c96715-4120-40d1-aa13-c2ec1a07df93", "sighting--74c59353-206d-4f94-900f-596a4e107dfb", "sighting--71dd5989-d105-40ac-806b-10db8b47746d", "sighting--d4eca438-4464-467e-95dd-5651da1da7d8", "sighting--857ee1a4-c7ab-43ad-9151-42c5bdd5f71b", "sighting--dc3d3519-2cf0-4569-ad70-3d820edacdbc", "sighting--0c33d90f-3d23-4aa9-a4cc-b191d7498224", "sighting--594563fa-36f2-454d-91d3-24bc77c32661", "sighting--2549a922-92bb-495a-8cd1-8b1d40ad502d", "sighting--91b01fe6-9ca0-4b3d-a90b-3bbaa537ea6f", "sighting--ffa3b560-263d-4ad7-8698-25fa5f7b4354", "sighting--4b71c1ab-ae96-409b-a03f-0969fa6303b7", "sighting--50735113-4751-4ffb-9853-15c80439a17a", "sighting--48c29496-7f57-48bf-892c-39be02e9bb75", "sighting--413911b3-37e9-400b-b8d4-2786cd8d3f87", "sighting--d608c488-7ee6-4745-b644-ce382e8193f7", "sighting--16372c04-79c4-4f91-8994-5af23524e927", "sighting--7e0af0d5-e860-4fca-9d33-881776d12866", "sighting--0b0f06ec-8100-4bb0-9ae6-11297f3435d7", "sighting--c6fc2fed-f8c4-4df5-91b2-bbff2ba5fc83", "sighting--b9c35c30-a8cc-496b-8614-5cc7b57f9381", "sighting--804af815-4406-445d-8fe9-7c62972dbc7b", "sighting--4d0be643-4c35-469f-a8e3-1e1845533d42", "sighting--1276d6ad-84e2-4938-a476-5f900974d73d", "sighting--1443c0b8-755b-46b7-9c5f-f75e130bbbb8", "sighting--be67ce53-00f8-4c3d-9424-9363a3aece34", "sighting--091cff76-0fff-4d69-8c07-bedbf48e2944", "sighting--baaacf77-b6f2-4a78-b0a7-3cedd2487f33", "sighting--d6b9b454-2da1-49e3-ae42-2355f689fc75", "sighting--98a5112b-abcd-4c6e-8a4c-5a8d4c5e3a0e", "sighting--7dccdda8-5f5b-46a3-b0e2-51a17027b14d", "sighting--9bb5c723-b34c-4792-8cf6-39fe406cc357", "sighting--1e4962b9-9123-4fba-bea7-054d7b65fe56", "sighting--b0c497e7-9525-40cb-b0ef-591721dfecd2", "sighting--5adfe498-7459-4e11-86ab-44f8cfbcdf53", "sighting--39338a02-9219-42c1-a308-0d73e3675dd9", "sighting--c52b198e-57f7-4a40-b17e-2c9631c20325", "sighting--94fdd262-d779-444a-8b1b-f5cbdc82db9e", "sighting--ac4d3e8a-b597-4d6f-a966-f075a3490392", "sighting--e27ae951-fc15-4bfb-b6aa-81ebcfa0b2fe", "sighting--15086679-cf7a-4bcb-906a-0fb6b9a5dd0e", "sighting--f72dc4a8-eee9-4a47-8682-1c868d77b3fb", "sighting--99db06ef-bbc9-4555-9bd6-cd6a12ce4743", "sighting--f8502858-ed64-42c3-a73c-bdf49b0ea5c0", "sighting--32a5524e-fc4a-4a5a-80d5-7d9020f98e2d", "sighting--c1f3d4b4-c147-4425-b3a1-423a7019762e", "sighting--701354c1-0a1a-4b62-9761-6181a20944eb", "sighting--18eda3d4-1ef9-4d30-816d-e89fc565c67a", "sighting--21f2e4dc-3538-46db-9d91-30efa2e7bc42", "sighting--4d073b42-8c14-4d02-beb3-73ee923cca2a", "sighting--bd51c070-6840-46a2-b41b-5d81f82ad0b1", "sighting--63eff7df-be90-499f-bd50-3c6ad5b80a27", "sighting--3de9fb2a-1023-4ef5-8774-3aa5af83ae82", "sighting--d528bd9c-ab08-415c-af15-ed2cdcb6fe7e", "sighting--d147d531-0d28-46d8-81c1-6341c2b2f2d2", "sighting--fd127d05-c2f7-4c0c-9d02-e5ad4e24f487", "sighting--6baa678c-1c7f-4080-8a28-13776a0fe842", "sighting--a94eff80-559b-4368-87dd-b5e7336f2a43", "sighting--ba47951e-0496-4b17-8a0b-228ea6e691f1", "sighting--1c333b2c-689e-41da-b632-7f8fb31273f9", "sighting--0c6917f3-ed65-4081-9ed8-18a75711288e", "sighting--886b4d4a-46c9-4804-9faa-82dd94e51337", "sighting--6f9f349d-b5b8-4722-8519-f37f4d0d6c28", "sighting--bc312dd5-0698-4596-a5d1-4f69bbcbb6bc", "sighting--1b314dc4-219a-4528-a9d8-89d03bd2c1eb", "sighting--5e619d93-cb61-4101-a80f-b09a597bdfe2", "sighting--5090ebf2-4264-4b06-874d-35f788511995", "sighting--b549ff54-d2d4-4a2b-bfaa-e97f14b8107a", "sighting--8ba89d1d-56cc-48d7-88d5-b7680b1a734c", "sighting--1ddaa5a8-9a54-4715-bdcc-e788970488a6", "sighting--3862bbe5-c7a7-4d48-9fd2-840abea47533", "sighting--ffc49bb1-92cd-474e-93b3-2a4d0f5cfb97", "sighting--171f364b-5c91-40bb-b2c8-fdf898184005", "sighting--5c22ce08-6411-414a-a746-08325969cb33", "sighting--975d1b02-2059-45a9-b1a6-892576d47df2", "sighting--749fe01b-e830-4f9e-8dfd-6b0cb59243ea", "sighting--e3635aaf-4094-495f-811e-34e5f086cd19", "sighting--30b5620b-5303-461b-ae4e-6ee6ca5e7b0f", "sighting--4367c883-9b79-4c72-866d-2d4e5147c198", "sighting--7047d883-b8b8-49be-82e6-e27ab37013c8", "sighting--552e5b1f-e98f-419d-ab0e-d8beae839f3c", "sighting--dfa52066-79e5-4cbe-aaa3-b6777c478029", "sighting--79aaf18c-a35b-4c69-b544-0cc854414ed8", "sighting--735607a3-fe69-4c96-8642-29648ca87234", "sighting--d8c0dab8-d2b4-4886-9c1f-7cfa28b6b83f", "sighting--f2a6a241-1aa1-4a49-9082-b3250366ff33", "sighting--161eb551-f11f-4365-a658-22640fa3f7aa", "sighting--bd19a478-9c48-4112-8860-263f8a9fe574", "sighting--908d6da1-41ff-4f07-96f2-c9bc5c72169f", "sighting--093f8427-621c-4735-9526-2534f43c9d88", "sighting--3bd6b95f-39e0-46fa-8f27-8b125d838884", "sighting--c8c51c3f-c7c0-4547-aed8-0aa715240bdb", "sighting--f13369e0-45d0-4030-84eb-4c5df1f53128", "sighting--8f8dba32-4559-45dc-9a40-8fff34636400", "sighting--d4e99cb1-8acf-45e5-8bf4-897b93cfbe31", "sighting--2798e676-dc84-49ff-a591-8458e2cb37db", "sighting--e201ba11-1b41-472f-9ce4-e7bff448ca66", "sighting--bdad3368-351d-4eb0-ae5f-ec29d041b382", "sighting--d95a7de4-f6ac-49bb-aba8-9c922989b966", "sighting--c0204ed0-2268-4ed6-a730-0a21dabc0edd", "sighting--afde228f-a826-41c6-9901-527d95359e6c", "sighting--9ebbf880-eb68-45e5-ba65-fd133f0268d1", "sighting--b2521816-01a9-407e-90c6-aee6f699af63", "sighting--e973d2b0-3390-4d95-893a-09fc9fb2f3fd", "sighting--ba56c7bb-f5f4-42e8-99c5-92338369d501", "sighting--976e67bd-fa11-4ac9-b7a1-fb62d8cc34b0", "sighting--207ce8c1-820c-4505-a5fa-1c14eee61498", "sighting--4206281c-cf3a-4fad-8a19-da854a2ff313", "sighting--dbe989ba-b1ae-423f-bb9b-ee8f627927f1", "sighting--ef2f47fd-373e-497a-b8d3-8fcd63e0e44c", "sighting--620048e2-3ca6-4987-90fe-f1ab95d2b3c8", "sighting--545658a6-b30e-4520-9cbd-bbcf64caaa08", "sighting--4e54fc3b-d8ef-4d44-83ac-1be65cd1d11e", "sighting--2e4abbb6-826b-40a9-a88c-75f6c0e09268", "sighting--c687c68d-fe37-425a-aeaa-e8d25a96b1a5", "sighting--5cec5183-37bc-45e7-920e-22edbecdcf1c", "sighting--fbb9a614-a8b9-417d-bdce-95fb095591de", "sighting--ccb27e68-c747-4cfb-8b77-34e5ea39a6c3", "sighting--04d6e0a8-7a55-4979-b008-d183b5610ba7", "sighting--0956433c-e596-453b-83f0-9c0c2961d0ce", "sighting--09df296a-754c-4b75-b949-ddb0075c6569", "sighting--97665d49-6a0e-4ef8-adde-117c8c7c9388", "sighting--4d6557e3-8c27-4d24-a09e-62341c019177", "sighting--82cb3c23-e8bd-4ca8-a689-b811cacd4716", "sighting--99ae57b1-7e8f-4c1d-89be-fc56743eb3ce", "sighting--246c6e20-85a2-40f0-a95a-f29a6ade9aa3", "sighting--f3ad75d4-3a32-4c4c-bff5-7e8311f2712c", "sighting--a67935f2-3b7e-4b66-9008-611e23049d46", "sighting--61bca989-0c77-4b13-9215-bea3b1bdb7e3", "sighting--6f19440a-1d99-48d6-bd27-cf948aca8f44", "sighting--97669858-e2b5-4653-82be-f1e023c7bec6", "sighting--1708886d-f574-4d36-a95b-adbad21b4d7c", "sighting--83b3fef3-ae02-4f0b-b705-b0e42d0ed31b", "sighting--48d5d09c-b9e3-4abc-8678-2a0147549a26", "sighting--1c55fe96-59a2-440a-9e5a-689627fd9a8f", "sighting--fc0bf8cd-b86c-4fdb-9590-0eda2c855069", "sighting--27dbff6e-52de-40b2-8672-f56e95523ab3", "sighting--7ccda9fd-34bf-48cf-ac59-19265e03c16e", "sighting--8f04480e-00fd-4410-913c-91506fe446de", "sighting--5acd1428-d7ef-42b8-adc3-62baba317694", "sighting--97f4e13e-9481-45f1-aa28-84c6438da643", "sighting--bbfece02-71ce-4f42-9899-a993a0bb9052", "sighting--6e76041b-d1ab-4b95-9d3e-f92dd317b12c", "sighting--0e6b3bea-30ba-47c2-8cdc-e62075490c41", "sighting--51c03759-f707-43cb-8fc6-7e8b6be89427", "sighting--97248b42-e45e-45f7-bfed-fd2c0f85d55a", "sighting--812c547d-007a-4a24-aea9-2cb2fd489e3b", "sighting--70e1282c-6154-4139-8296-16a9d950ff01", "sighting--f95562f9-29f9-497a-a53f-f8b4f06c112d", "sighting--2333a575-75ef-4802-bb1c-40341977e3ae", "sighting--d5b78a66-18b8-4ad2-8c44-1d751c7b1d53", "sighting--0af64173-6474-4704-b5ae-424af87d6cc9", "sighting--9c4e80e4-200b-4022-975b-fa3b8588eb0e", "sighting--9edbeac0-aba8-4eb4-87a3-afda058c28cc", "sighting--161615c6-aa08-44ef-817d-158a3812208d", "sighting--1b2ef4b6-8b99-4ad6-8c7f-e28d62bc236b", "sighting--530c19f7-02b7-4e9f-95e3-ab70e7c469a0", "sighting--a71f1a7e-7bdc-49b4-b785-757114b801e0", "sighting--020a5fc7-c9a4-4011-bdf6-970b0e6e2c67", "sighting--6d49e8a6-e629-489a-9c01-eab7fa4ab7cf", "sighting--ac23c0d8-4e2d-4db7-add4-c1bd6ad83727", "sighting--ed161dea-7de1-492a-94e5-a1f130caab7d", "sighting--e7a5e413-2bc0-4aee-9c89-218ffa76fd37", "sighting--77461b0e-e873-4739-8921-485f89e848ea", "sighting--466bed2d-e027-4572-b5d3-8e9adc09bc49", "sighting--44ac1144-00fa-433b-88a6-d61b50cd34f7", "sighting--7e641207-52a8-47b2-b239-4e518b08c293", "sighting--c0f27cfe-86b4-4cf9-bdd8-c48c85559e56", "sighting--dd087705-930e-44d7-8ed9-2179b5d2fb15", "sighting--cc4d476c-7368-4d30-80f2-4a9ca07e50c3", "sighting--0cc0797a-56aa-46a2-925a-4c781d318ba6", "sighting--5c5acff1-6361-4bae-a8c5-b04c1e5be703", "sighting--3a89df2a-6a5f-46aa-abd8-0883e775886a", "sighting--6d65b11e-7393-41b9-a877-7824577a58e0", "sighting--4e1d4d67-8797-4736-b82c-daf91f46454e", "sighting--55c5482f-6c7f-4c7d-928b-f2861363e1a6", "sighting--3509030a-9c0a-439d-8011-d26d809d07cc", "sighting--471e6a43-0baf-40c4-85b1-6a850f4b78b8", "sighting--0e7addf6-82be-4c89-b046-16747f8405b9", "sighting--3f367288-8c37-4c64-a576-6c597b2cbb21", "sighting--2b8f23dc-fa72-466f-a966-7e334c36b1ae", "sighting--4dd4e5fa-e838-4322-af55-bff1bcd46908", "sighting--bf1a9f5e-d512-4c85-8dd2-881489030a51", "sighting--528aa768-c5bd-4945-8f9c-a080832fc583", "sighting--d2c9e7f8-4d29-4941-8f58-65a8135d2072", "sighting--0a1fae5b-19e7-4c34-a4c8-d34e11289de9", "sighting--f7efb4cd-74c9-444f-87ff-4cd5cbe37daf", "sighting--cbd4cef3-5f3c-4291-877d-945876670ea4", "sighting--7a1c2985-b51c-4530-8ee4-8a15b6bdadf6", "sighting--2f607899-299e-43d8-acf9-d28c97b99d54", "sighting--78738f95-7de1-4b55-b58d-05cc69f38abc", "sighting--44791064-9e05-43ef-a23f-a4103d563f75", "sighting--577c0bb6-07f7-4c4c-8ae2-c799f73219ac", "sighting--ce909f59-45ef-4b8a-85ef-53e53bf134b8", "sighting--c0d4baa0-5a59-4880-9098-9a9f89ace691", "sighting--abc58fe0-cf71-4c31-a46e-b780ba5a1861", "sighting--641d41e5-08db-4f57-8a3b-eb0e4a149538", "sighting--e48ea569-41a8-4386-9615-2445715ff68c", "sighting--e8b23a96-dfd8-4888-bd4a-d017267b3a5f", "sighting--b26e95d1-b544-4577-bb59-5d0cd9f61586", "sighting--358886c6-93ef-429a-9f38-b88fc6f17fca", "sighting--bee2b36d-e308-4811-ab84-2084c389c804", "sighting--8bba68ce-75e3-42b3-a79e-179d586d19f9", "sighting--bde5524c-dae3-4439-97f8-80c207d9cb91", "sighting--1adbe912-b4c6-4be1-b576-4433441462c4", "sighting--e2606676-37fe-41f9-81b8-7b2c4f8586f1", "sighting--fed7fe1f-cb26-4de9-8c95-de08118d2ed8", "sighting--a181fa1e-5aee-4072-8c8b-e4b41d205e08", "sighting--0625dd4a-9e3a-420a-b797-89dff6d0135f", "sighting--95a6acc3-26d8-4e3b-99a4-ffbb67c1cac6", "sighting--e20de13d-fa00-4612-8c00-fe4af5b0c787", "sighting--23eac8a8-385e-4bb8-bd3e-832e38712dec", "sighting--eba7ed1c-a17c-420b-8273-a36b5dbd5329", "sighting--d5b9ad86-935f-4e52-8bf0-044721f10925", "sighting--91c54514-314a-4bc1-b436-53c3f801947c", "sighting--de9b2335-488a-4c9b-aa99-3e61964e7f9c", "sighting--87cef2f1-1eb5-4404-bed4-ee1340ff2a9f", "sighting--0dcf6f54-5b9f-4f83-be0e-d8c2803a8a52", "sighting--2e949657-4d3e-42cd-8850-1adfa2d67da4", "sighting--8e7caf67-fd4c-4373-bfb4-ad26efecf48d", "sighting--df2abfe9-5c53-4ee1-a47a-85150203f073", "sighting--1bd2a355-70f9-4961-9de8-4c5905daffcb", "sighting--df46d764-337d-4465-8df8-6b1a0f332257", "sighting--70f805c1-d876-491d-a422-98622f253334", "sighting--c8f4415d-a7a1-4daa-9bfd-a99c5cccf16f", "sighting--a4fe36ad-2d68-4825-bc95-eab11c1c04c9", "sighting--663d6442-16d4-4f57-8f93-ad7ca0af706a", "sighting--82524d5b-12b0-4cae-88ea-eb6e2a1fd729", "sighting--016cf23d-c4cb-4dc9-bb23-a1334e64d200", "sighting--047afab5-1407-48f5-bb93-e00366988ad1", "sighting--9ddd7f0a-c131-4686-87ee-4e3b2fc1834d", "sighting--b8ca5395-bab9-4613-a44b-66d539326251", "sighting--3f84dd2b-8c0f-461f-aed2-b17c4fdede5d", "sighting--77f35c3c-4324-4d79-b3bd-6cac2b6c5c39", "sighting--a7a61d73-ac06-4a7d-9a6f-07a291e47494", "sighting--a7895b08-afe8-491d-bd0a-8c45c342cced", "sighting--33dde71c-9197-4960-9d2e-1a22f322478f", "sighting--21b84a05-78b1-408c-8090-e0e5bc530cd1", "sighting--915af873-075e-419c-a7b3-a047a081981e", "sighting--6704fd86-a4fe-42e8-bff3-b4c3d739da45", "sighting--4bcd33d5-a0f3-471a-9db3-9428a425748a", "sighting--4320946a-b02e-4e96-91f9-93f15726692b", "sighting--ad074410-1dd8-4ab6-9d04-d939fa286a73", "sighting--c9236392-e5df-43de-a1e1-4f785a771f62", "sighting--68e2bcff-69f7-49d4-84e1-b669497d366b", "sighting--2b7ca675-49b2-4572-b146-034ece6ec22d", "sighting--7652b0ad-ee33-4d1d-9cfb-67b708d376a1", "sighting--80f0cc21-bffc-49ff-905a-1a70d1461538", "sighting--9007e01c-bb29-474b-85e6-86f214c56bfe", "sighting--77ed1efe-1206-4ecb-950b-f92823735920", "sighting--330866d3-0a22-444d-b400-250cc795636d", "sighting--a609e3e3-b927-4840-af4b-974114a6153c", "sighting--8779d134-b045-4682-b84f-7420cf913850", "sighting--43dd7626-3b11-4829-9586-0da20dae6012", "sighting--0f2e81b9-bd17-4938-a690-afc5fe424b6a", "sighting--0e33e430-befd-49c3-83fb-a9b3b9c69a73", "sighting--55b78c52-9fbb-4768-8f9a-966bd992123b", "sighting--4b43ac49-c8ce-4870-8e8c-1aca2607adcb", "sighting--cb846f8a-395e-447d-b04f-dd29440957b1", "sighting--9eac1edb-7e72-402c-9c3a-b847b4d7f5b4", "sighting--ba352ef9-48b6-4862-973c-1197a4ebd5dc", "sighting--f1bfdcb9-dacc-46a5-9d19-0cf4492609cd", "sighting--fe959275-fc3d-4d98-bb2d-436893e8b05b", "sighting--9b4293eb-b07d-468b-b0e3-fdbde7ee4330", "sighting--5330fa66-0b0a-4111-bee1-878ecb64ce90", "sighting--a1617baf-8175-409d-ae9f-e2b7c5c566ce", "sighting--c8e0c7ae-a01c-4d29-8da4-11e5f4c25de9", "sighting--c762b93d-539c-486c-a5ac-eca3e9dc8bc9", "sighting--425d1e65-fdec-4647-be5c-8c2cbb5e8b1c", "sighting--f433f035-86e6-448f-a47e-7d5943eb1a3c", "sighting--d7e1c14a-e7e1-4e7f-9446-50a7e35bd135", "sighting--9bf15df1-5063-4375-9d32-685f5ca199e2", "sighting--f81ea14b-539a-47b5-9a0b-3806b0416bf1", "sighting--e79c8b25-4d6c-4186-adb2-a6cf72bbaa73", "sighting--54851e5a-749b-4223-b1c5-776d04a510ae", "sighting--65d0e87f-9e53-460f-a68e-95dc301316a6", "sighting--134c0d0a-69b6-4a7f-9e2d-b74f5280d794", "sighting--a3a3f217-0a73-45d2-934d-53c0756e748b", "sighting--06fc652e-3803-4659-a65c-6626a9d49cab", "sighting--cd961e93-1a6f-4441-a8a9-cb1a6dc86957", "sighting--eeeb59af-22f7-4775-9d43-c498e44de72d", "sighting--8f03affc-a227-4c97-a26a-a935de1ec8d2", "sighting--246352aa-bb48-4d5f-a2a4-78b542e74909", "sighting--85ee0034-4b13-4c39-be76-adf9ed775cb6", "sighting--ce02aeae-25bb-49a0-a619-ad122938a54c", "sighting--40114007-7fd1-4f62-9b80-0dfa8cc49cfc", "sighting--7d871195-e904-46bf-8909-1be14e0a9ee1", "sighting--2d7185c7-df26-4034-8018-afe3d99d60d9", "sighting--82020efc-9234-448e-b1ae-fe20c644ad7c", "sighting--1bca6896-95b4-4ce5-837d-878fdcf9ecdf", "sighting--50dc3f69-b2a7-4f8e-bc29-0b4fd4e90f3c", "sighting--f46f9dea-e799-4883-9766-2c25e0164f1a", "sighting--7388c2f8-6ca2-424d-a627-601feec7d824", "sighting--17226687-2f16-473f-a780-66751ea9a637", "sighting--24b7da49-bef6-46cd-9132-4dae01e744fc", "sighting--35665dcf-40b3-44c0-b289-55b30a23d318", "sighting--94336f09-2877-4548-9e2f-de0d6cd9b138", "sighting--8f16b6de-1135-43cf-98b3-031981523261", "sighting--a5744dd6-1e5d-4f99-86a7-5cb159461251", "sighting--adc38db1-a2d0-4d09-8aa4-b69dfdbd8851", "sighting--4ad4ccd1-18eb-4e2c-a27b-57a63e07f016", "sighting--4eb393f0-4481-47e5-a4f3-bc4282425f78", "sighting--fcc3c85f-bdc2-401d-b981-2a64a4c69e35", "sighting--d27b933c-abb8-454a-b166-c1b3ed7a68a2", "sighting--2001ffcb-18e8-47e2-8e13-3699a984dd0d", "sighting--a224543b-9739-43f6-bdc4-306c28028326", "sighting--100b56a2-4bac-4f98-915b-180e25a14a5a", "sighting--692655d1-37ae-4509-b536-cb895091a66a", "sighting--bff186ce-3ee8-43fd-adc3-10c690dce1cf", "sighting--c7aaa80b-044e-4129-8c4c-d50d0d89293d", "sighting--828a91e1-5f86-4a5b-8074-14ffae94ab22", "sighting--536bc469-231f-40d5-b3ca-3166887aea84", "sighting--9edea648-fe56-4eb8-b5ed-511b16b69da7", "sighting--6ecad416-eb28-48cd-bf6e-5507525052c3", "sighting--8b6b5e9c-ddb5-4464-8200-350936b37e08", "sighting--94acf7da-9c75-453a-800d-dabf894013d8", "sighting--2ba39ff0-c51f-4f18-b46f-b8b03048fe5d", "sighting--c20e796d-e2d5-4661-9644-ca57b28a9ee1", "sighting--27d1a1a9-de6b-44fb-bbaf-b44b253138aa", "sighting--e883d2fd-ac20-4a00-8c4f-536a0ce031fc", "sighting--074772ad-bf09-4b32-854d-bdba36f0bb2b", "sighting--ea9b845b-c76c-484a-8f02-d0ae287108a1", "sighting--547bcf96-fb0c-4c56-9ab5-3fa530f26d18", "sighting--84b71f25-4aa9-488a-98c8-00e916ca3efc", "sighting--af6e0e35-c519-4277-9332-0c060ce265a6", "sighting--fb0e1fef-c034-447a-a5cc-938c9efe0d79", "sighting--9a109cb1-94a2-4b10-93ef-b4bd1d85add6", "sighting--801aa07a-c1d4-4f92-b74d-aac009187e33", "sighting--2c09ad88-5297-4e2b-9bf1-f32933291326", "sighting--8eafc0dc-ce3a-452b-a082-8c78cb332723", "sighting--a457b9f1-f9ef-4024-917a-9d711da9f03a", "sighting--05ca40f9-1827-48b7-8cae-d6c38f6c3bc4", "sighting--5cfd4cb4-16d4-42d0-8284-964f1d234c33", "sighting--4eabbae8-d045-4b3b-bfa1-73fa6d04e13c", "sighting--54795c21-1173-464b-907b-210764927a77", "sighting--4e0dec19-00ff-48ee-b5ab-c52c3485f4b6", "sighting--39946743-d581-4cf3-b7c1-e92b746550e4", "sighting--2f5936ee-4729-4556-ade0-a271edaee488", "sighting--f1cd48ae-177e-4cca-9fa4-ad3bdfb0d87a", "sighting--89b92aa1-f28d-48be-b4df-40962ac1b4b7", "sighting--d320a056-00c6-42a6-90c1-f3e20a3a01b7", "sighting--1a972357-b543-4a8c-83af-c8047aedac4b", "sighting--aaa1e269-67e7-428f-953c-b3beb2db4f8d", "sighting--3d278bc7-89a1-4333-98d8-71dff1eceb0c", "sighting--27e4aa79-b1e1-43a8-a0c5-99248aee082e", "sighting--f9dc2485-ed43-4a00-817d-10228e169af3", "sighting--d8164c60-945c-4819-b3f7-4f8d008fb527", "sighting--8d07a6ba-bf2c-4270-82c3-be3d0a5fb526", "sighting--250ceb84-3e0b-4e75-a6fc-3cb3805f9408", "sighting--78055dc1-c49b-42b7-8c52-37658b9a3567", "sighting--16dddf1d-2e0a-490c-b97e-03732820d12f", "sighting--7074ba81-f3eb-4e33-91c7-052c55a3b260", "sighting--2e177b47-f1a1-48be-8e03-60844b2432cb", "sighting--aa99ca4d-e4ac-4567-a52c-dd16b96e8705", "sighting--6b76aebe-0c51-4ce2-bf3f-5e9af82711f1", "sighting--06b40f6f-437c-48df-ab23-4255576b2c17", "sighting--e79dfe66-3c6d-45a5-b2c3-ae62f05b8901", "sighting--08d3d2ed-723d-45b1-968b-4e8835658a48", "sighting--c65b21f5-c718-47ae-8679-c27c643ab4fe", "sighting--2b06949e-a035-4c8f-9322-077f8e9efa92", "sighting--08fce8be-df37-4eae-a173-0e3cb0ba67fc", "sighting--c95b0a4f-8788-4b3c-b6c6-f044ea5efbf5", "sighting--d85560d8-c7a6-4558-8e5d-a474dc3e7265", "sighting--568d1a8a-a3c4-40de-920f-5798b84191c5", "sighting--1eaabc23-a6d3-4070-926c-e9fafd1eb37f", "sighting--3ff4e53f-b960-4345-ac24-c28772279795", "sighting--3149e55e-badc-4664-b0de-b8dc3a753e9f", "sighting--de8238a8-eae9-4373-b6b9-4356e22b2b1f", "sighting--2359ed3e-5d7e-46c9-bc5a-cad93481b1ea", "sighting--b362eac7-e5c9-481a-9142-3ca1ac6d1060", "sighting--2d97ab97-dcc3-4754-8e81-61bf6fef0b28", "sighting--b0dce2f2-17e7-4949-9d82-95a22c621322", "sighting--45ccaa64-42d7-4f00-bbbd-fe6cf55ebdab", "sighting--f4c5ee36-9a77-420b-901a-208abaf0ab12", "sighting--7108dfae-04a6-41ac-bf9a-d65522a0794f", "sighting--c99cd8c7-9e72-4ffd-946b-1f6ce6082d93", "sighting--a38f885c-979f-41c1-b241-e5474cf965a3", "sighting--3db85a64-c05f-4a95-a117-69e410f15f2b", "sighting--4dc0ce02-309c-4ef8-84ab-d710b3bc6cfb", "sighting--ecc4a4df-1cdc-46c0-a071-e1138264b3f7", "sighting--b4175903-b68b-4147-ad2e-3837e8e0dafb", "sighting--053ad63b-9df6-449a-a6ae-14ac8e699540", "sighting--b2c675ae-e4df-4cca-841b-c5e3746265f0", "sighting--028454ee-f91f-408e-bfee-4ce69c9501f3", "sighting--b2640184-ab6c-4826-a4c5-d08e337a134a", "sighting--32c5685c-0045-4375-b3d6-5a1325aa8f61", "sighting--022f989d-6c6a-4a35-8222-2fc898f035f5", "sighting--8fb72f1b-a1d1-4a6b-81df-5445dc52064e", "sighting--57697ca9-a874-4774-9028-b7df54fb637b", "sighting--9d37506f-b438-4981-a182-dc1f67aba2e8", "sighting--18fdaf1b-5f93-486f-bb18-8b9081327c40", "sighting--814d80c5-1a86-4431-95b7-c7c43bbebd33", "sighting--4ffe9487-832f-4014-a22d-7d2b85f99ae2", "sighting--aca573f7-4cec-4379-9466-6597380a741d", "sighting--70b0c016-9c6f-467f-a7a3-136c62e6e374", "sighting--619030e2-d65d-48aa-95ec-bc515d205f71", "sighting--9b85625c-c7e3-4d50-8f71-6116d6457f73", "sighting--1731ea0b-c749-4b72-b0e6-55d5748cc0b6", "sighting--87f0cb35-e50c-4d30-b618-f5540e178ab5", "sighting--6ffc8ef6-134e-441b-ac98-5592a64d604a", "sighting--f7beebfa-6ff3-4ee0-9bfe-a77f59637306", "sighting--8765b591-5e1f-4bac-85b1-c74f8f5b0d13", "sighting--399d66c8-071b-42e6-8def-abc06347c62a", "sighting--cf6a7611-ec06-4f4a-9694-8d68852a14e4", "sighting--a8d5c811-ba2a-4959-a7e9-aa76bed547a8", "sighting--1d7e6db3-8b5c-4914-815f-14e761fd64af", "sighting--849bd195-efa0-4fc7-b3cc-9fccbbc698bb", "sighting--84a6a41e-881b-4ba3-b3be-4db1a2411bc2", "sighting--69fe9299-04d4-47ae-b83f-9e7a1dbbdd4b", "sighting--f21ce4c4-66b9-4a84-bbd9-78cea9039ece", "sighting--ffe3e72e-f3bc-4d44-b613-6f8ccda63634", "sighting--2135fa77-eea5-4dab-8ba6-64f87f40382f", "sighting--3e37a586-7a5d-4981-aad1-3d85fcd8635e", "sighting--fbc3a989-ddbd-40a8-8d26-943b8b17bc22", "sighting--0859227a-2d99-4502-a4b3-0ead5518c9e4", "sighting--f0ea239b-9a62-4e6a-990c-331db513ec6f", "sighting--f19c581c-8018-4e95-b269-ba3e3f67348c", "sighting--966a0aa0-2d28-43ec-8be1-069bc4f68f5b", "sighting--cc950a40-b4f5-487f-ab32-4b4b68ed6a6d", "sighting--54b5d559-1fa3-4972-8be5-771d7f8bb209", "sighting--351db2d9-acba-46a1-9f36-a07cd03ba0ff", "sighting--481d44d7-4149-4a9c-a601-887b550e1a9b", "sighting--16e23703-b4c0-4f5b-9950-fbb1733fa3ee", "sighting--3ef4161b-90cb-41f1-984b-99f10eeb42de", "sighting--821fc20a-ba8c-42a0-aa87-e65c3162023f", "sighting--3f02dab6-de65-468d-bd16-4fcd0106e1f4", "sighting--37062e25-5c74-4f1e-baa2-6c949f1e1f7f", "sighting--ad202133-afa4-4e6c-8e00-fe322946070f", "sighting--74ecddb3-e9b5-4421-8af1-9be423d13148", "sighting--36e34393-27a7-46d4-ab4c-28c694cf063b", "sighting--7d47d30a-0221-4437-aa25-2b468ba92aea", "sighting--def1bfd3-f13a-4718-af3a-e7d6a1fdc979", "sighting--5826bea3-6439-4fc2-80a0-da3f2b36ecfb", "sighting--1cfac8a3-7c18-4fce-b731-6ed7dd8ab3f4", "sighting--717318a6-daec-4fc3-ae26-be2dd58e8101", "sighting--55e63ba9-9395-487e-9f8c-be239aa6cafa", "sighting--45b727d5-1410-4217-9444-1adb5f3134ee", "sighting--66becc15-eb43-4a6f-9084-a6f5c4d641be", "sighting--b96a5510-4f40-45ae-9be8-19083b7e2334", "sighting--f12d138b-e42d-43ec-a6c7-68ddc10577dc", "sighting--ed92d873-eb2d-4010-be53-e4af6793a8d1", "sighting--1d7b2a5c-3147-4510-89f5-76e3182052ac", "sighting--a1ad78c2-8d8a-4bd2-8124-273db2be2d94", "sighting--10ca32cd-c066-486a-9e51-8bea0c56b22a", "sighting--b1c9343e-fcef-4c64-a3d7-7b9e94cb34fa", "sighting--802a93a7-da9d-4585-8adb-637540e132bd", "sighting--80acd400-bdad-4360-95ba-285c9793e813", "sighting--7b0b3164-b287-496f-9389-96678fc45ab2", "sighting--0e732684-1c70-48b8-9b89-51e8698a2976", "sighting--3ea04e1b-7376-46a4-bc67-440ef564ead6", "sighting--be60d4ec-a79b-4b00-995e-cb1b1fa52d25", "sighting--9e1dda6b-5a79-4785-828c-342e6e9006c4", "sighting--d9b31b24-d53d-44c8-aae8-77ff227df211", "sighting--beb2b1a4-e676-4ef6-b7df-89f06a1ed28f", "sighting--3e4c7f05-e8d1-4d3b-b3a9-8fbba76ba1b2", "sighting--3ae582e1-45be-462e-b606-3b9330daa23f", "sighting--9e849787-9248-48e4-9134-f6b6d0655483", "sighting--0766e542-2d5d-49af-9006-f02cbaa3a07c", "sighting--edb28728-cf5b-478f-9ef7-eff72fba223e", "sighting--2e132804-a8ee-4608-a4ef-00e1760df9a2", "sighting--6acbdfb1-7d98-477c-bf42-6246453d7183", "sighting--8cb91046-8d0e-4fe1-858f-d9e5d3b52d78", "sighting--e3f587ad-6930-417d-af28-a97cfed8d6d3", "sighting--b2ef7491-d88d-4bd4-b94f-313556a816ff", "sighting--a87c11c8-25ac-4ffd-b18f-a21fcd9af8a6", "sighting--e06590f3-c451-4969-b981-c4e2ac2e4454", "sighting--a76c3b1b-4ba0-40d2-b84d-5820843f8cc1", "sighting--3f94d896-10c0-4428-b0e6-1a6eb336fc0c", "sighting--ebd5f638-6f2d-4a3f-b083-f15a28504cc0", "sighting--2b4c3605-9a49-4626-8d2f-0e9d5136aa22", "sighting--e91d05cc-f3b1-43c3-af78-46939cf9c154", "sighting--b2b03007-86fa-4ba0-a4a3-3544c55a7532", "sighting--a4866449-2eb2-4722-aeee-74c0cdadc429", "sighting--e81a19d6-fbaf-4463-a546-1375c839dfa6", "sighting--a7ee7e98-7dbb-4a42-b8a3-6bcaf5401ead", "sighting--e3076cf9-e6b3-4100-a6d0-52c728c48298", "sighting--e20a12bf-8cd7-436e-869c-d3d62ca021a0", "sighting--51f59f5f-d1da-4f9f-a99c-4dee0fc1276c", "sighting--a33a4c44-f03b-427e-b2bc-9c3f929d3f49", "sighting--c100eb07-2393-48e5-99f9-c006a24a8774", "sighting--3b9ca971-70e8-4da2-8388-60d4c0a3d880", "sighting--e708558d-bfc5-4abc-9cd4-66667597d6f0", "sighting--4235ffcf-b1de-4693-93c5-b6b1c1919081", "sighting--4e34a657-d450-4c36-a44d-413411587b81", "sighting--3f4ef1d0-25ab-48f0-a52e-d8f9f4fe7644", "sighting--46403c15-4e09-4ab1-8477-aba0666b6c70", "sighting--53cdbc8e-0221-409c-82e8-ed3b101c00bb", "sighting--2a390357-212d-44bb-93af-858c366a5cb8", "sighting--f787b9cb-5be0-48d6-8435-c1f67321e40c", "sighting--bd670712-1d03-42ee-a34a-d93183b74e38", "sighting--13c78b4a-e782-4238-bfb2-22ca42b17f93", "sighting--cd8ba74c-f5ee-460d-804c-c64f90766be8", "sighting--93bd630e-cdd5-440c-bbeb-b6ac61886d30", "sighting--2501e5e7-1b7c-4515-8699-b06fd0944628", "sighting--4b266652-1b78-4dd6-9ce4-581e2327cc2c", "sighting--a26219ea-9b0a-4065-abde-d49a84fdb2d0", "sighting--ed80ef8d-e721-4aa1-af3c-7461f01b8d10", "sighting--8bf554ac-32a5-4d89-8285-897ffe46a4b7", "sighting--1884e27f-a46c-4728-8ec6-c2af97c27e4b", "sighting--1db1c7c1-b2c0-4070-937e-952ea09fa9e2", "sighting--42d10798-92b3-44cb-86e9-04153d4e733a", "sighting--791d5bb2-5a5f-4637-9b7e-74d930f86de6", "sighting--a22e73b5-9b1a-4c7b-8857-53af54ec7b58", "sighting--57e2cb23-bbf8-4813-9338-19bc2f617c86", "sighting--dddb17dc-cf18-46a2-bf20-9d73eac16389", "sighting--1d8484e9-807f-4c3d-a39b-7d5caeec220c", "sighting--d5da685b-f208-4e17-a693-1e9b02edcad5", "sighting--66cd47f5-9d58-4be8-a16c-900074b5dd49", "sighting--291dc15d-caaf-4fb0-a995-01cd52b0736a", "sighting--797c2265-8f37-4dff-bb9f-9aeb56ee9e70", "sighting--cc002967-da48-4126-8cd6-5e104dce51cb", "sighting--e506d131-bc5f-4d8c-8951-00ba83b2fe06", "sighting--0aab4d27-b365-4c2c-8875-7747c2cf67f3", "sighting--4d23c59b-92e1-4fb6-9868-1edd04364c2e", "sighting--a8ea3c5f-7594-43be-afda-4cae417426da", "sighting--385ace13-6b23-4e73-8cee-6530ec7c6451", "sighting--da06d4b1-d5d5-41eb-851e-be5c86e260de", "sighting--14b2270a-f10c-4f97-9924-32737385ebf5", "sighting--9b8746a6-2eca-4cc5-b7a9-baf78d14c233", "sighting--11fe2209-7e98-4f1c-9e8b-b95aa0b7b6f8", "sighting--c5a5078a-3bb2-48d2-be5d-72168c5f08ba", "sighting--dc233852-8085-435f-9341-da4495bd1b1b", "sighting--64bf5e77-e276-42a5-ad98-9d56a89a99d2", "sighting--58c388f3-20da-46e0-92ab-6fd83c1f7896", "sighting--674642d3-4c8e-49ca-ac25-a66ea465fe28", "sighting--ad443dcf-a9da-416d-a03d-35f6353500ab", "sighting--88598e38-392a-4522-9d7b-8024768fd8ee", "sighting--549f09a1-896c-41e6-9bc8-dfbbd0150330", "sighting--677b64e2-a85d-4350-9c8f-623673994fb9", "sighting--17d438e7-a955-47fa-9dee-e350fdaa44b6", "sighting--f5b36402-cbd2-46eb-96ab-629057552a59", "sighting--da0a0f1b-0d8c-40c2-a033-3f9bd512a799", "sighting--e738a9f2-d79a-49f2-b83c-66232e4c1946", "sighting--4e3628d5-f1c9-4a32-87a1-3575f72b735f", "sighting--179e0412-efb0-4ca2-a6b7-41282dcd0aa0", "sighting--8223f797-0351-4367-9025-4e8bf08cea4d", "sighting--a3340f25-5d73-4cb6-b3bf-020bf96c7346", "sighting--0944ce57-2297-4a53-8d7a-9b7d7ea42854", "sighting--b81b63d9-66c5-48bb-853a-07107050c21e", "sighting--bf47f1c1-e823-4cd8-b954-801457466f66", "sighting--e82a2e7d-e459-4a37-bcc5-02df4feed378", "sighting--93e1e147-24ae-4742-85bb-4e0be0b2b6fc", "sighting--6a5be591-6ccc-4a0d-8334-f76698240e80", "sighting--89c0de5d-9f93-47c5-9a49-aae923b76a0b", "sighting--6bd8df46-ce35-4c96-85da-29604db4eacc", "sighting--07a36dce-c423-4fbd-8465-ddfc4f8a0550", "sighting--aaf0fca0-46d6-4d32-857e-e127cb7ad2de", "sighting--76009a92-c7a4-4ad2-a5ba-d324a4c9a957", "sighting--02a488db-d203-467b-859d-5549abefb262", "sighting--168ce01c-d484-4503-a236-17dcef125a9a", "sighting--a89aef13-5d68-4b18-8c4c-3f8fa76e4c2b", "sighting--5b39a995-e842-495e-80a1-83c10c694e85", "sighting--17a38ab7-452c-46a4-bfae-5da5f619f89b", "sighting--d15ca745-3f88-44e7-84a1-1f2363da3bbd", "sighting--8e7ccd3b-276c-4541-bd1c-9c32bf54e597", "sighting--da81992e-e37f-4483-99dd-564371dd1bc5", "sighting--303f967c-b0e9-4155-9c33-61150fd80579", "sighting--b48941a8-fbab-4248-ac73-52ed9c1d4940", "sighting--2ec3520a-ebfe-4505-9673-217145fdf558", "sighting--7f711416-cac4-438f-a694-524bfea2fa6d", "sighting--9fb2115f-196d-43c6-ad9e-a19f940d421c", "sighting--bab8feb0-e3cf-40c9-b5ef-1961d30b6bcb", "sighting--9486ac41-1c13-4839-b192-c869b647967f", "sighting--3cd6eac1-aef2-48b8-961c-7c7c131ac892", "sighting--b33aee6b-ae25-4abc-b018-269812cc4d2a", "sighting--711397a8-7e2d-4ae3-b937-a3042c10f7e6", "sighting--b7bc61ca-35bd-4cf3-8a23-0b4f820fe7aa", "sighting--f055820b-31c1-4ef7-a560-e3c05e63ec7f", "sighting--362c12d0-c903-4287-91f8-edadbd9670df", "sighting--ec6b1920-25f1-468b-a1d6-474620241b22", "sighting--93e9a398-1110-47ba-b171-235ab1c3c7cf", "sighting--85d4e6a9-19f4-4727-9c53-55a546cbcd68", "sighting--7e2cae36-dda9-4fa9-a00e-71b3aefbe033", "sighting--d48f992f-a881-4aae-8698-cf7bc89af7ea", "sighting--a2b473bf-bcfc-4c37-9b70-5f8c5584aa90", "sighting--40604b1e-c16a-4a61-b88e-1be5c8ab54f0", "sighting--7ecc9825-ed55-4a09-9057-11e02ceeaa53", "sighting--d2c7392c-bd66-4396-8322-6796e5f2d887", "sighting--cf5ff788-8768-402a-a09b-a8ed59f07569", "sighting--6ee1bbb2-1172-4c48-8911-848486370184", "sighting--f96b71e8-0181-45bd-b8ab-7e2f0d33023e", "sighting--b7223e3b-9505-4f0f-9202-7a4c4c88b669", "sighting--fcfce00d-1fa3-4564-8897-eef27afed6c0", "sighting--4e76cc38-112d-425d-86eb-e80d3b220ae8", "sighting--64b75e3b-949f-427b-8bd9-9bbcd4278d24", "sighting--fc66c17d-bfad-41ac-bd57-dade61a75a30", "sighting--533d39df-23b6-499f-8633-0d49a53e1fbc", "sighting--f6a0f13b-39f2-43b6-9560-eaa3964b825d", "sighting--73a64dc5-41ff-4148-a3d2-2161b940d4f1", "sighting--31f2a740-0c6d-4cdb-8b71-fa943afe6acd", "sighting--182e8855-20c7-42db-882d-3491e9e76cdd", "sighting--924adb4a-9edd-47e1-9c75-3f1caa539df7", "sighting--37a54d14-c189-4ef6-918a-fc403cfb22b4", "sighting--875d4c15-4d19-469b-ad30-77eb2be0d756", "sighting--4344aa5a-a2e7-43f8-b520-7bf886d8fd85", "sighting--43a79427-a91d-40f4-8a2b-1eace59b84bb", "sighting--f4d7b986-4ded-4487-a210-c170d44e7539", "sighting--1c59f2da-b064-4ee9-95d9-cbadcaff81b1", "sighting--22008a99-06f1-4362-8ec0-69d130eb20dd", "sighting--14d01215-bde9-4e97-92c3-bf220b08d55a", "sighting--f429fa62-8ca1-4067-ad3b-b0a9fa0bca05", "sighting--2df3f791-b62a-43aa-bf0d-92537f22cf5c", "sighting--21fa9c82-ee29-4659-8bd9-d78cc9a713ae", "sighting--bd81dc9d-7aba-44b9-b21b-ef12684a1dcb", "sighting--723744e5-2a33-434e-a8e7-9d3a0e16bffb", "sighting--c45a6867-af8f-41d7-ae47-213026094d2e", "sighting--02de800d-05cb-4651-a09b-6f50159133fa", "sighting--37cd12fd-73d9-4281-b320-367fbbbfa18c", "sighting--b6f40b0b-2572-4c92-8b08-56ebbabbe957", "sighting--ec6f955d-5288-4986-8017-5458bfcbb199", "sighting--1ed554ff-956d-41c2-beee-4ff3146ec581", "sighting--fa18dabb-3c70-4c62-a61d-8273972296ad", "sighting--47f8d23e-a3d3-41bf-b367-b65ba035adf1", "sighting--00ceba95-b202-40f6-ad6f-b82263b02219", "sighting--b4faac96-e36a-43e2-913b-b01dc52fd669", "sighting--8fe631a1-d721-45e6-80ef-7e945036975c", "sighting--d946caaf-25dc-4375-aaf4-6eb1d5014a73", "sighting--55b89c0e-b738-4f12-8c7a-26b664c43f3b", "sighting--d6257c85-a2c1-4fb4-a3e4-e9a7998b96cd", "sighting--5005efae-50eb-459c-9306-5acaee1d2234", "sighting--39d17e75-456c-4817-bd64-5d1d0f181ef7", "sighting--681f43b8-4365-4ccb-bf78-86fb664338b3", "sighting--bb99f45b-fc0e-4a14-850e-f5a7bdaffdfa", "sighting--58ab3da0-b0c1-4259-8072-6a8fc9246942", "sighting--43b635a8-9e30-4d07-8658-8887101e87b2", "sighting--6bced977-b083-4490-bfc0-4aa7369861ab", "sighting--f9b93d2f-f3e5-491a-97c5-2e9a9141d73d", "sighting--79e02957-d98b-4794-8540-d64ac71bfaab", "sighting--f2ee8ded-878f-4dba-affe-3bc1081f47fd", "sighting--479d7aa5-11c0-41cd-baab-badd12b4049b", "sighting--2aa40c3b-971f-46fe-b42c-2b069d3c55aa", "sighting--e80f0201-572f-4947-82ef-113a6923825c", "sighting--2784b4be-7efb-40d0-9b0e-a0295a9c8335", "sighting--36a1cc00-bcb4-4b3a-8776-4d153035f9e1", "sighting--8a905027-4594-47aa-8f53-d8680532a2a8", "sighting--9ea36092-ea92-4ad8-b01e-58f322459647", "sighting--3e320b98-cc04-4ae8-9adc-68c0affd2580", "sighting--94ff047f-e38b-411f-8535-aa6d96328afc", "sighting--911155ff-881d-4476-9a06-5f4b12cf6ca6", "sighting--3613a9be-4534-4702-9aca-7fb1b6032eea", "sighting--3ca94884-1a30-48ff-8fbc-1c8aa11affa9", "sighting--f8364cd8-6685-4b89-8e5b-d54e07ec7a15", "sighting--b6e18c9d-3a8e-4985-b346-7817c50ac92d", "sighting--a180529a-6a45-4dee-906b-009bcc7029db", "sighting--4dde6c4b-5d53-4ba9-beea-63a4976b3cd3", "sighting--8b18d702-55e3-4e25-b074-042120b4053b", "sighting--8f3c6300-451b-417c-97fd-0feeca5ef7fc", "sighting--2bbd72da-ccd9-4c62-9617-6150cb2d39f5", "sighting--27ba834e-f9ce-4ae3-84b0-6d3d5e1ad8a5", "sighting--46bb857f-17d7-434e-bc90-812ec30ede5e", "sighting--030777a1-2f53-4d6b-931d-9a71311caab6", "sighting--f223e772-d6fb-4a6f-b2e8-826bb81b74ff", "sighting--94251bc2-b25e-4e0e-b91d-0982a3b66ae4", "sighting--19f4e207-4ade-437f-853e-9810cf6c0e0a", "sighting--29c14f4d-b16a-4856-9cc4-071bbb48dda4", "sighting--f65ce4ae-efc5-4f24-b60d-0f31cc30965d", "sighting--0c8f531e-067c-4291-a253-03b7ed80317c", "sighting--c73ce842-1f5f-4d30-aa1d-76edc2de97dd", "sighting--61379422-7c29-482a-8685-a813e81cf56d", "sighting--a70f3384-7cd5-4329-8172-d2e4d908257f", "sighting--94f712f3-1af2-49a8-9d74-b458d683bb38", "sighting--f71fa225-0b90-4250-aacd-ba6556ff27c1", "sighting--c6efcb93-7559-47f7-aedc-02598ccfdd9e", "sighting--ffa2cd3f-d2cd-401e-bc46-747d77e9b943", "sighting--78d9d0ab-8720-4287-bdc0-fd63653ae57b", "sighting--e13dc615-e8e2-494f-8a8b-727aa51d8db1", "sighting--f7a406bd-4918-4993-83e2-85ca649b96fa", "sighting--5042fbb5-3e37-4696-a782-8c026e12b72d", "sighting--65053c13-9247-4388-a8c0-1315e20b1388", "sighting--f542b7c3-eee8-4a31-bc19-dba982494302", "sighting--4187dbf6-f9e6-4bc6-9e47-12ce40c9c1c0", "sighting--413658ef-020b-41f3-8a50-2fce5c685354", "sighting--1bd7539a-f27e-4506-943f-7de04b64b42b", "sighting--56f571a0-88ac-4b11-a950-616d6bb57fe2", "sighting--37cdb138-b312-445d-9b7c-b267944c4483", "sighting--4079356d-5226-4c0d-97d3-8ee22c50b12b", "sighting--c94e042f-9f6b-413a-b87a-5a1836b05f28", "sighting--2d479dba-bd9e-4f41-93d5-d4102307197b", "sighting--969379ef-2ce6-4cd1-bdf7-3387c4cf2aa9", "sighting--687836e2-e2be-4553-b739-4a877163ab5a", "sighting--01e81723-21df-46da-8e6b-7040c645c1de", "sighting--b9466142-c2c9-414f-89a7-1b5b24e4738d", "sighting--02821b0f-d5bd-47db-a9f6-fa1cec4c9fe4", "sighting--7c26a951-8f92-4d4d-8dbd-851fc1125030", "sighting--19704b77-6ee5-43c3-a17e-9f7ef6bb8e6f", "sighting--af80f4b0-44fe-41fc-aee5-eb8d17c05744", "sighting--1faf4f2a-74f6-415f-99f7-717f1afc9743", "sighting--d384cba7-49e0-4c7b-ac5a-e37d4f4d12e9", "sighting--db2cf5bc-82a3-46fb-bcda-05994b5863c1", "sighting--5f9272a3-f2ab-4e60-aa73-3981cc4482ad", "sighting--8f30cdf1-5dd9-46b5-8645-7cfc6da69e19", "sighting--1bc28889-21a0-452e-89ba-4af2629efb8f", "sighting--b4287291-aa66-440b-9be7-e410f009b4b1", "sighting--fa10a677-5341-40b3-9b80-57c1efb86365", "sighting--e71674a6-fc4d-43e4-b45f-b96fd07c914b", "sighting--4a92003b-7918-431c-b5fd-c0e59c769ada", "sighting--53ce7906-f6fe-402b-87d8-ca77a51561b5", "sighting--dbc58d26-3925-4731-af96-418500ca9f1f", "sighting--1847ac25-164c-4348-b4f8-4493befde6ac", "sighting--4d4644c9-f25a-4014-b989-1ba3068c6788", "sighting--3fb39cc5-70d8-4c0b-a681-1b30632f8e43", "sighting--6d3243a1-3489-411f-96ef-f51d2ba09ac5", "sighting--e862aab8-5d63-4f29-90dc-976431118055", "sighting--d8b2b99c-34c6-4213-bd16-b00e00730238", "sighting--5ef72bbc-726b-401a-bc49-5a3420fcbadb", "sighting--746c2ffe-cc1b-4f8a-9a49-f4473c818a6d", "sighting--a533957e-b8c0-4dec-a8d2-c8e4bd953ae0", "sighting--8b20b757-5ee5-4eb5-a91e-78d39587ae36", "sighting--3299b319-b27b-4c17-a6a0-176e8b5938e0", "sighting--9810e46d-44da-451f-8bbc-89be745e2344", "sighting--f2248490-e3bd-4501-89fb-37c22099e43a", "sighting--2ff38026-1ab9-47f5-a668-452454c82a17", "sighting--d6e07861-f177-41e5-8689-e8e1ff1cd492", "sighting--87474e88-143b-4da3-9e46-d3011547a2e9", "sighting--3372d186-1a0a-4da4-a192-5e3cabaa1e4c", "sighting--018968fc-ee80-49d7-a6de-30a6b07f297d", "sighting--834d464e-d0bc-47d5-9cdd-524130095bb0", "sighting--a1bfe33c-c1ef-442b-90e5-71af9601dd00", "sighting--8afc76df-943f-48f1-a22b-59228b561a97", "sighting--cbf20889-f91e-463d-acd4-482e9d9e1a61", "sighting--2540d294-da68-4712-9d7d-697e5de1d367", "sighting--54fe7756-a9d9-430e-8cc6-d6f61d03f173", "sighting--b54bf832-57f2-4aaa-a3a2-97e985f58257", "sighting--1745bede-5bd1-4f82-ad35-4c86e12ed7d5", "sighting--91af38d7-f39b-4a96-8899-d1ff3a7565c5", "sighting--6a4b2398-b48c-4d42-9649-5e1dc6833144", "sighting--79398bb4-2757-4a34-ae03-f376962a5d49", "sighting--8c889fc2-7e37-4a1b-9537-dcb6409e570c", "sighting--57358c05-4299-4aac-b8ee-ff54ed4c9904", "sighting--deff4739-bf71-4795-954a-f97aaa678c11", "sighting--960b07d8-ff67-4360-b813-6529bafc9ed6", "sighting--7be4ff70-47c8-4b8a-8185-b75df2e9cbbe", "sighting--9ef2388b-d3ad-405d-bcf3-50447c0bd10b", "sighting--770fc227-0bca-4141-8efe-627300de4cbe", "sighting--ad33ab54-4bb9-4b7d-9b92-e4f035c28018", "sighting--dc70d349-0272-4df8-a40a-0d3451e736f9", "sighting--195ab0de-074b-4534-bcea-fd2ff25fe4bf", "sighting--faed6d61-32b0-45c1-9d10-e5a4ca833e88", "sighting--75d986b4-b83a-4b38-afb9-84428af8d834", "sighting--21556c1a-dd85-4051-81b3-7dc053340242", "sighting--236c7d9f-abed-425c-9fab-3af866ec877c", "sighting--795e9708-07c2-4470-81d8-f4c6395c37fe", "sighting--34fe52fa-b9df-48ff-a5cb-1d17fc281252", "sighting--d14c2a27-9269-40fa-8a23-78c2e958e3d3", "sighting--165f4f83-6ebe-4ce4-9cf0-fb4b3e129f69", "sighting--ea9372c6-a567-414a-b3f8-24916549d9b4", "sighting--94bb22bf-9bed-4b48-9e7f-faa925f52b4d", "sighting--5b765e32-6dfa-4df5-959c-a3a958ba1aa2", "sighting--3f801025-d988-4de6-b2ae-edc450d81d89", "sighting--4e304d1b-8787-4554-ba78-eb669e0c6477", "sighting--0064c3df-3764-4163-940f-fe0c77d712f0", "sighting--ee7da32a-0f06-4b9f-8967-ee4af2223834", "sighting--0a13318a-b377-4ac9-ae3c-6efd9b860e46", "sighting--ac04c7ca-8dba-45af-b510-8b2bffd7b98c", "sighting--f5a38cc4-de15-45f6-a3c9-4d4c2a673ffe", "sighting--63481cb8-4806-4ec7-aed1-6232fb470502", "sighting--d037cbc7-6535-4037-8ee7-1ef9ed2b73f2", "sighting--166c64c3-e5e8-4273-b38d-654fd36a19ae", "sighting--e85c573f-3632-4f92-9632-fb3c8dd8c329", "sighting--9032c309-16f2-48ed-87b8-d02f393f589f", "sighting--b9e1063a-bb7e-4ffb-90c2-360b42ca3e23", "sighting--b9cc9fea-267c-4db7-ac99-e822c93ac9b3", "sighting--f59e3e33-286a-442e-aaf8-f1f9c8732959", "sighting--1aef214f-0747-477f-a340-76bc675d4f83", "sighting--b8c4c0ed-6eb4-48fa-89ef-bb522bd5d541", "sighting--b41a2d1f-ccb9-46b5-8985-0eca5a41cade", "sighting--ce6e7e79-f143-4bd3-9296-080a424d5556", "sighting--5aca5bd2-5f0e-4751-9b24-45475805b7e2", "sighting--68ec2e58-4e00-4eca-aaff-fb055225ac73", "sighting--6f53bb23-4465-4bb0-b5b8-58abbadf4399", "sighting--329f75c1-fafa-478c-8292-81124181ac6c", "sighting--19cd0f4d-8ec6-411b-a96a-fff10e812b81", "sighting--0301249f-95c3-408c-9647-fe92bfb5c8cb", "sighting--b64eda03-20b2-4295-8ec2-b2a377c4861b", "sighting--5bb6d308-dc51-4387-a56b-95e42cbb8725", "sighting--22b5deaf-98a4-4b2e-a888-31831eb8573b", "sighting--141b6b27-3596-46e9-9a24-2aef1cff62f4", "sighting--282b239e-c92d-4d4c-99ec-d6ead1996ee5", "sighting--7c24fcdd-3876-44c1-bd6c-f0829058d5f9", "sighting--84739db5-4a75-4775-8f0d-1ab4a09d4216", "sighting--ecd93b01-e771-4fc8-ada5-a8ea7427e8f1", "sighting--881b5225-fcda-4b3a-b2aa-cfb948da6867", "sighting--d29793b1-9310-44e1-976f-ea7925f7a9ba", "sighting--193a87dc-7f7d-4f8d-86ef-cc7b55b29f51", "sighting--2fed2060-28fd-44aa-b9e4-6d042c55c3d6", "sighting--00fd3469-b544-4757-8dcc-3e1d0033a519", "sighting--f3b33527-8fd1-4212-afff-7de86f4233f6", "sighting--c6e999ce-b471-48ac-b159-5911a3368012", "sighting--d2c0e386-e4ec-48ca-b7e2-d4bfee72826f", "sighting--13e6fc8a-5cac-4ab4-b67e-52ccbc8c1d59", "sighting--21c69b52-21dd-40f2-92cf-6722d91709cb", "sighting--c1646f98-efa6-4712-bc39-9e746fd651e5", "sighting--3cf756a2-d2db-4247-ae82-a2031e410b72", "sighting--7c1820f7-3b1d-45a8-b018-a1e7678af9f8", "sighting--3b7df089-3f03-4530-a8ca-d548d0221d0d", "sighting--e4eb1e80-2b59-4836-b2c1-a2d27bdb8b3a", "sighting--f5ea1252-00d3-4696-bcb8-149f37348680", "sighting--2fe214d3-4146-4f27-9856-27510aa4f2c5", "sighting--164b5c20-1d4e-4080-9761-6bcb01c3e6bd", "sighting--7e30aabe-164e-4d8e-a245-bd2959c60783", "sighting--687746d7-99b8-47d3-9a15-a6af33cabd62", "sighting--e55c89d2-b544-4d74-8dc1-54063dc27e88", "sighting--7efdc308-7662-4319-94cb-4755f21bf716", "sighting--b081e3d6-223e-4766-ac24-5e3f40b0c03a", "sighting--55d59a52-0ce5-4bff-94e1-d351109c7c8e", "sighting--4617220b-85e6-484f-a0cb-790809eeb07e", "sighting--04f456b8-3bdf-4f25-b691-0359fda05ea4", "sighting--ff010cbb-3dff-4fe9-8017-edd406c85fac", "sighting--af36fbfa-a88b-483e-8c3d-23a535d898c0", "sighting--b2e96b50-036a-48ad-bc6e-37daa0cf61fa", "sighting--c74df549-0711-4974-85e9-596ce4d68fb9", "sighting--e96e1557-18b6-4001-bca8-96b4c3214e14", "sighting--b8e1a916-d909-4535-8b9e-5d2d75ba659b", "sighting--9f5d864c-e6e4-4abb-b571-d57df4cfc2fc", "sighting--8b4ec35b-1dc9-46f9-a022-665764d563b2", "sighting--7f7868e2-dd8a-422a-91e4-ae14fec6da22", "sighting--b8f623a5-0d75-469f-9559-9452771244cb", "sighting--253b49d8-bfce-4fcd-89e6-8037e9e8e221", "sighting--3afb36b4-da57-4f77-99d4-42580cfdaca8", "sighting--f440a283-db7c-48f3-9bff-c0e3835a1c99", "sighting--f0f3ea72-ceeb-4d8e-b16f-8169ddaf6cd6", "sighting--1c05c5e3-689a-485c-b9fb-fe2e81eafd36", "sighting--b68e4cb9-42b0-400a-bd0e-8751aa1ba902", "sighting--47f1f712-f475-46d9-932f-018dbfbaa0c6", "sighting--1399462f-3bba-4fb8-92b0-f4fd36a3e4c0", "sighting--48e9b437-ee05-475f-8d10-e3da35d485c9", "sighting--36b430be-4654-49f3-915c-b4cd4b880b52", "sighting--ec1a0a2c-3f57-4adc-99a7-571ccd1edd94", "sighting--46982b8a-0bc6-4a86-b7ab-fce43dfc7a93", "sighting--11ee91f9-d1af-41f5-b1ac-257768670dfb", "sighting--340ccd97-ad06-483b-82d9-6f83a3ce373f", "sighting--e6ec0fb2-2100-4f32-a96e-c4745c2a8630", "sighting--24d84a65-5dd7-4a98-8b9d-abdaf77f1db0", "sighting--474eca31-3e72-4a95-9e39-93e30eded0a3", "sighting--e4f3115f-7c0d-4b66-a0f1-5679620cbac4", "sighting--c47d62d8-d209-4722-99e3-af2b847ab159", "sighting--8100fd2b-c574-4d6e-9ee6-852d969f9479", "sighting--7e366786-32fd-44d5-9d4e-aed5388f04f7", "sighting--4c5e2b4a-921a-4018-8e45-1d774c28d9db", "sighting--67b5e1ce-2cb0-4d78-8d0c-b600c1dcfdb6", "sighting--cf02bea3-e9fd-4042-b67d-0f4a69de40f9", "sighting--dd2f5974-bc46-4b53-9fb3-6114d6910ba3", "sighting--e242ac59-7b86-4c94-a693-dff3c66a2591", "sighting--60e71f8a-4462-427b-a759-9a0093658da0", "sighting--13055047-5ab3-4f2d-81f0-22457643235c", "sighting--c1cc0f0e-5e3c-492e-811c-42bd195b4b47", "sighting--bc276efe-9ad7-4f42-a5df-69eca2d70722", "sighting--ed9695f3-2beb-440f-81af-d837dba96f3a", "sighting--f4e9a61f-3613-44ab-a791-6d9384a11cdd", "sighting--6f6d35c0-2fd9-42bb-83a3-58836b9dc628", "sighting--b8e63c9c-540e-4329-a104-496631d3614e", "sighting--e1e9f17e-c822-4bb2-9298-c025853eb709", "sighting--78d01a50-c170-4c42-a653-23ac2e4e62ad", "sighting--dd68b1d6-3715-4cad-91bb-d11acd7673f3", "sighting--9d520a0b-3c5e-4475-a05f-482b35289e2f", "sighting--caed7faf-0b67-461e-b7f0-7319cffb045e", "sighting--408d47eb-3f8f-4369-bad2-52beef894a6e", "sighting--5e24140c-db4a-4753-8ced-53adcc595491", "sighting--4159b436-eeba-4d91-bb9f-1663cb2eaaae", "sighting--46b1c3ec-caa9-42fb-a702-0defb47baf85", "sighting--9d1efd16-5c76-4434-83f6-6fcd4ff4402b", "sighting--2ef06781-e3da-4890-b195-8e63e589ba29", "sighting--0b23b50c-c1da-458c-a04b-347730152f2f", "sighting--4ee0fca2-45f3-4981-8768-4ba4489d446c", "sighting--4140f6f0-d45c-4ef6-845c-b7020547266c", "sighting--44d43b44-2da6-464d-9aed-58c206d6a89d", "sighting--ee13777b-81d8-487a-8c1d-bd3bb754634e", "sighting--e3ff202c-9052-4790-929d-40c36b653245", "sighting--6dd06f41-6572-4756-9a3f-3add07c006d3", "sighting--6ac0a48a-e6b3-4dd9-a863-28aac02c11a2", "sighting--d2087c68-bce3-4f3c-80c5-8c6099b55eb0", "sighting--148f7ded-8161-4848-a4dc-7bb6e94b5044", "sighting--262c5206-b58a-4c25-b854-6bc6e01ec4c2", "sighting--cb26c9b9-efd6-4704-b45e-2a03b5107812", "sighting--058f1026-2341-494f-b2fb-ee3ade00fcac", "sighting--dd9b27f2-6771-49f9-9ce5-37b2603bbb37", "sighting--db1c7a21-4406-4f69-980b-46bf9b0b697d", "sighting--2579c8f5-77ba-4ece-b784-d07a8c577c56", "sighting--4bef07fc-e9c6-4cbc-a939-ae59435af17f", "sighting--978d6922-dd7a-4ae3-a282-1abbe7c6150a", "sighting--6eac021a-d895-4a4c-89ce-29dcda4c103f", "sighting--069f0cf2-23d7-4e04-a391-12822b5965e0", "sighting--d7c88f9a-c303-4ec6-a9f1-40eb61b8780b", "sighting--0bda8bdc-d414-476a-b8c3-ca23d8d467be", "sighting--a71789dc-f324-45b0-b56b-6516552bebdc", "sighting--2de4d5a9-1325-4853-a025-25c76a8c9d04", "sighting--67702f39-9632-4b4a-a9d3-1927d2aa9afb", "sighting--3df2c480-638e-40e4-a24c-02ce001f828e", "sighting--1cc91a4b-2ed7-45db-81ed-46b288176a61", "sighting--d09fdede-79c3-4b50-bd9d-d9a0e4f5c39f", "sighting--c278a7eb-5451-47ea-b73f-0dc651d9b836", "sighting--011104e7-e771-4469-a0b1-76f77244b670", "sighting--2fb5b359-2cd0-40a6-8772-d71c14b5724b", "sighting--a6694aff-a340-4eb8-820e-b220d49a5b62", "sighting--fdd0c604-d90b-47d9-8c43-5e5b6eb3a819", "sighting--eb72c8dc-67fb-404e-8761-b71c9406b9ef", "sighting--61e8c861-5f62-4045-b9b0-e08abfb23803", "sighting--afba9e18-21f6-4133-aeb5-1f2359cad3a9", "sighting--22059656-190b-4d59-b098-e252d724a89c", "sighting--12dcc71b-a61d-4106-b794-78b588fe2eaf", "sighting--c45e4025-d6c3-4fd2-aa5c-b8eb24e657da", "sighting--54192c90-9f76-4054-86b8-c86958ebb2cb", "sighting--2b466313-33fa-437b-80b2-8bb0f089d925", "sighting--f82ea275-5647-4ca4-a3b4-282fe972b86e", "sighting--c2f91fae-dc84-44ca-b3ae-41305df09f7f", "sighting--bcdbbe17-dbcf-445b-9a24-85fa7f339387", "sighting--36049d27-bf60-40f3-bb86-9e3f41aadaf2", "sighting--d6551198-60c3-49e6-be0d-1ffca3f42f69", "sighting--88cd380c-fcc8-4bb7-a11d-967216d10892", "sighting--fc721567-c944-449a-ac47-93f552dcf9a0", "sighting--dd6b9b4c-a3f5-4abb-838b-e7a56f266d63", "sighting--6399c52d-1895-417c-ba8c-43d0f520816d", "sighting--472ad786-35ef-4991-86d0-33d5eb4e6a70", "sighting--a1103a5a-a61a-422a-9029-cdc9724f9573", "sighting--3b547744-2af1-40ba-bc41-c032f504871a", "sighting--adb2fda6-a1eb-4817-9291-578ff1d18b7f", "sighting--8e7e34f0-3b23-4bc8-967f-e7c81046a950", "sighting--339251f1-4d11-45a5-8c1b-522be0720f18", "sighting--6cb933a4-93d4-44a2-898b-4f794e3e7bb4", "sighting--261bafc5-50ae-4886-be63-91a4d746064b", "sighting--9521e786-6c14-4a15-bc05-bc05a1100306", "sighting--225ec66f-ae39-4fe5-91c4-20bbf4bdb3e5", "sighting--3afef517-990b-4cd7-9300-aa25d522d19d", "sighting--14e9bf1a-984e-4cd9-9b96-c258451b9660", "sighting--80da2a9d-95f0-4ab6-bbef-6745be7cb174", "sighting--07fc953a-d63c-4fa8-bf25-e838ac346355", "sighting--d407bdee-35cf-406b-9dab-a85fbe5a7815", "sighting--8a7f312f-bf01-4c95-90d4-cc8ed0247180", "sighting--8038fcb6-073b-476a-8120-ac92bb4b3cf5", "sighting--6a392eaf-f1ba-45cf-ac92-4ea3ba2d6789", "sighting--25d99375-fbd6-4908-9f4b-8b59ec63c392", "sighting--1ef63133-8154-4958-b023-eb96a59feed8", "sighting--17cb590b-54ce-4b6f-a4d5-bc9e4855888b", "sighting--f1e4e5c1-8913-4dc2-bcba-bad8fa9bfa47", "sighting--1a9d97a4-c627-4f67-8205-2954871175be", "sighting--b77fbd93-226b-4a9b-a10e-46f1c0940469", "sighting--cf207cd9-67a8-4db4-a8e1-c90a0bf28065", "sighting--1f0d0f13-35ae-4c32-b6a5-0acb77cfea4d", "sighting--94dd5c81-9de4-45c5-8204-5fdc1d1e7d8d", "sighting--1f89cfd0-bb44-4766-a142-3f55dd4ce9cb", "sighting--120f8dfc-9760-46b0-8809-ccb6cca364da", "sighting--5023eccd-eb03-4c51-8a75-e002832bd7c2", "sighting--5946a029-0e99-4d65-82c9-497b8fecfdf7", "sighting--e4f45789-b4ce-43cb-a19c-7d3bc55ff94d", "sighting--978b97a0-8123-41a7-be82-6dd773e05c13", "sighting--d1289cf2-71e0-487a-a17e-fc98736b0085", "sighting--f914c179-c0b7-4bd1-88fb-7cbe80679501", "sighting--7dcbe0c6-7a69-4fdc-a355-31cd8977a8a6", "sighting--6ad0da0c-5868-47bd-bccd-10ec6fbb3a7b", "sighting--0aefdaf1-052c-4ad0-9317-2b8ba3a3a155", "sighting--b579c711-d1f1-4d6d-8ac8-e35b4cbeb304", "sighting--ae385788-1fb1-4ac2-9b69-86f0d3e5142e", "sighting--4f3843e2-e119-466d-a57f-e1c927877612", "sighting--4bebf099-682f-45f5-ba34-f2da50f9a46f", "sighting--5976e7b6-00b3-4439-8971-998a4fef3687", "sighting--996dc591-02d4-4722-8659-8740c1f97d05", "sighting--546c3bd0-20c5-4e50-8b5f-a9f82f97a2f8", "sighting--32cc4af0-bdfe-4a93-a2f7-4a14448adaa3", "sighting--2b354cb6-8ccc-4aac-b280-03efa31ce0c4", "sighting--d037a21a-aaaf-4b00-b793-40d06a1cfc36", "sighting--f1fbdce1-0659-4c9d-bc03-7a7ad1017acb", "sighting--394897de-b091-4087-84ff-162689f3b19c", "sighting--af4d2ba4-75c7-430e-86fb-9cff91999d66", "sighting--409849a6-d17e-46ee-89ad-162c930e41cf", "sighting--09f076cb-0433-4db5-af20-a0cafefac6e0", "sighting--60e67d89-2c49-402e-8252-25c3d097c91b", "sighting--47590415-9041-427c-af5f-aa5ff2c23389", "sighting--364660f1-175b-41d9-beac-2c9afc2a0974", "sighting--dd7e6c85-1391-4161-bfcb-0215ba0e3d1d", "sighting--1f21f131-da95-4634-962c-1912485be2fd", "sighting--b9c1a0d3-42ed-44e1-ad5b-8e0a499a8b0a", "sighting--42876b65-4543-4bcb-8223-b5990b1ce21c", "sighting--70045af1-6f49-4f78-9eff-6755493da87a", "sighting--b5f2fe46-41c6-48ab-ac74-3a296cd3547d", "sighting--df54ae90-e339-4795-935d-51d43a0c0b6f", "sighting--218e77f7-a0e3-4258-b64b-0360a4837cdc", "sighting--6354e94d-a574-498f-b8c4-714262d98aa3", "sighting--b7993ce4-b576-453b-a953-b385cedb7073", "sighting--a28ae6d2-b65e-4100-905f-704bd4e5bc11", "sighting--bbe26b58-0d61-4b2d-b430-afd72e29ffb9", "sighting--b0acb654-1d10-45bf-9a37-b264adb591c9", "sighting--6cad5a29-ae88-4df6-b972-0219d4bda02c", "sighting--461e0a06-9ad0-4ad3-ad4e-06cdc6816871", "sighting--86835907-12ab-41f6-a281-da717cdd6177", "sighting--9471cec3-ccf7-40fe-a375-c9b151e826c5", "sighting--242c5762-cbcf-45ae-b288-9f31baa4cfab", "sighting--65bba7d9-2559-491b-b8a2-57f2b31e95e9", "sighting--6cb39e3d-d125-4b2d-a581-14fa178de4db", "sighting--724192ce-0f72-4a2b-baae-07376b0b2dda", "sighting--e86b304e-4e04-4569-a83b-8d3b8c3ac0dd", "sighting--19736d15-c008-4ee0-9ab8-7b7623b11485", "sighting--26fb682b-4df0-4aca-bae1-f7b19da71fc7", "sighting--2f0558a5-e9e5-4c2a-9344-6ef9bf40140d", "sighting--48c121ba-d2cd-48d3-a101-c86bbbf09a0d", "sighting--b38fe0d6-1296-4ed6-8b74-8b23d8ab4da6", "sighting--9f2fc671-702a-41b7-8a07-e924e5b6592d", "sighting--5c553d09-7beb-4ade-b1d5-13a2d820e194", "sighting--ec2405b3-c08b-4546-bbb4-fb9b0b841e97", "sighting--d1ca481b-a2ef-4b0d-b2b7-426d730ba013", "sighting--0d5598a7-c25e-4e82-b7f6-353935e11c2e", "sighting--f1f2839e-a6fd-4235-9806-418ef8b7b060", "sighting--6607c797-514f-4431-aae4-0b01c14bb670", "sighting--01ee62d1-7bd7-4c49-bbd0-5c762ca75c21", "sighting--dfa5587b-8fe3-41ba-bf68-f508a36859fb", "sighting--ce48657d-e754-4ed9-8b40-f58564863f68", "sighting--f2133787-8e51-4e91-8b56-e111dd91a1d8", "sighting--1243e01c-c276-4cc2-8f14-7ae412fc4896", "sighting--a22b44f0-928d-4bf8-b93f-28ca8b064fee", "sighting--25b97ace-9a98-4ad6-ae6b-4732951e1f56", "sighting--f5ba3979-070b-4900-bd06-d16b479803b5", "sighting--53f917f3-bc9f-4449-8e4a-18f42181c46f", "sighting--36ea8b3f-221d-4f92-be5d-b21014d15d5c", "sighting--5b03072e-5306-4c35-8de7-2ccdfb4b4761", "sighting--a2651914-ce40-4f3b-96d7-c0f44d2ef0fe", "sighting--3b8153e8-42ab-4139-97ed-334ec30636d1", "sighting--acab0238-f384-4f70-bd78-a68bf2dc87dc", "sighting--5c80ca84-ddb6-4b40-a9b5-9415eb393c02", "sighting--be4e7cf1-96f7-42cb-924a-8115539e4479", "sighting--0e842226-2b0f-4a09-9677-c37094a6a26b", "sighting--591b5617-2242-45bd-8509-3e32ab2dee6e", "sighting--56286581-ca11-4481-8c2a-db23c1ed9c93", "sighting--b9e079ab-e96a-4b44-8ccf-6dc856c4a850", "sighting--77446927-7499-40ed-85d8-b20b4f5ae2dd", "sighting--253b4211-7437-4888-90c7-6f6280b802de", "sighting--b211b275-e0bd-4793-af7f-7cd80e48fde2", "sighting--a0ac29d9-018e-4d8c-9f20-651b89aed2d5", "sighting--758a897c-596d-4ad4-80b0-dc6ced784441", "sighting--7cfc010d-9704-408c-a2d8-3e2a91bef7e7", "sighting--1d863960-ea90-4aa0-ac08-3adbec5f1ab1", "sighting--a7e3f9c5-cd61-4e95-9101-d78eff7380d0", "sighting--226ffc62-917f-4ed6-9380-d2222216d77c", "sighting--f4e6ddaa-de64-451e-940e-1baba1c5006f", "sighting--67517e59-64ad-49aa-9222-7312c3b1ae15", "sighting--d34f63fa-0043-403a-9106-2e600133faed", "sighting--cf9e6e0f-7a8e-46d1-aedb-9d476e59b892", "sighting--2c9b31f6-fff2-491e-a730-09804069bc77", "sighting--1f519ef7-46ab-4cf4-a46d-baa2ad28e054", "sighting--c32974ec-059d-49ef-963d-5d1dfacf05c8", "sighting--8d282dad-579e-426a-b57b-b6ff64edbeba", "sighting--f156ddfd-dac8-4613-a18b-a26f96abb25a", "sighting--4cf9d7d3-750f-49b6-92da-83105f8a78d7", "sighting--77c3935d-ed1d-4564-832d-2adc33548c02", "sighting--ef37121b-2799-4bf1-a766-d8eb32e16fa0", "sighting--5c18b80a-d61f-4e54-a00c-5243a529c58a", "sighting--e35fe625-849b-4cb2-80a1-dba2b80d29be", "sighting--8842c773-1010-4a8a-9174-c5570f864c8d", "sighting--c8471475-36d7-4fd8-90a2-b60ea0245a8e", "sighting--117dabd8-99e4-42de-b800-22ceea7b9747", "sighting--8792de7e-1e8b-4748-80b2-6e9aa4a85ea2", "sighting--a935bfc5-13d3-4060-84a8-3f02982500bb", "sighting--875e0e63-58f9-4802-847e-51868ae78d4b", "sighting--e8caebe3-5bd8-46c2-aefb-03fe84b8408a", "sighting--a3c4a748-68ae-4dc3-b52e-d81a038a3d53", "sighting--d83ba47f-9261-4c58-bd57-e183771ed8af", "sighting--7b49dc57-c0f6-495b-909f-9e452614a4bd", "sighting--327cda61-263a-4ef3-b495-576ed3570aa2", "sighting--8b441912-e4ca-4bbd-b52e-9a9a56ebfd59", "sighting--a36781d3-7216-4101-bac1-61bd8867502e", "sighting--3266e49b-d471-4aa2-b6a2-eb08131aa97d", "sighting--45ec52a1-327a-4db3-b4e0-647d2444d005", "sighting--d7048df9-ff49-4e17-ad1e-759cb6f89a2a", "sighting--e63392f8-9efd-4beb-bf15-3f2228f0e701", "sighting--6b13e901-369d-4cc8-a433-464749373f29", "sighting--96edfa25-5ab0-48cd-a627-7bc58e396409", "sighting--481cbda3-3e01-4b7c-b64c-00e31e6d2687", "sighting--3068e1ee-f2f1-45a6-b1bc-3a42eec340ed", "sighting--b308d38a-0cf4-44d3-9901-4f5572086088", "sighting--9ef03da9-4cc9-4d13-9c7c-68ad61fb8225", "sighting--e4d08382-d7ad-4c6d-be28-b3a7231e5c6f", "sighting--22426b6f-0eab-4a64-abf1-131ddaeb9d33", "sighting--4b7f3ddd-8131-4dc6-9d90-0bdf7d5bcc7f", "sighting--421c3006-837a-4156-80c7-638b899b1568", "sighting--7fad49c6-6742-4946-97dd-4f58133083fc", "sighting--b6969457-b439-4dc2-a0d9-cffdf9e0ab09", "sighting--6819b475-6e50-45c5-b939-4797793da8fa", "sighting--fd3320c7-f4bd-418f-b8b8-d07ddaac479d", "sighting--48dcadda-9020-4810-a2be-362a51e56de3", "sighting--f371d13d-06f2-4f9c-8647-4cf64bae4a66", "sighting--bfc11a38-ca0c-4d83-aa4a-f75c925e8b02", "sighting--48bb8745-5a5b-4d9c-96dc-6c59c2a06564", "sighting--86a75d5f-4837-4407-a729-db580b38ee1b", "sighting--af3fa9ba-fdf6-459b-8af6-ae9271a4aa30", "sighting--39a763f8-7e22-4231-8a17-45d9b69b7e8b", "sighting--69ceadf1-9cfc-4656-9c1e-d90203001718", "sighting--368dc812-4101-473b-9daa-1f3ca0fcb2db", "sighting--0951d19d-e407-4fd6-b196-343adb0f36d0", "sighting--c1c7cbeb-59cb-4548-963c-e06282b61a24", "sighting--55ee777c-141c-4c7d-99e6-8389e011f090", "sighting--6d49e66f-d876-40cd-bb81-37d39ab8453d", "sighting--9cd8e7d1-523f-4475-9775-5187ec031a06", "sighting--2d7e353a-a802-417b-afb0-4127d764ef28", "sighting--4ee45a8c-1b01-453d-b477-28b2a2a3ca65", "sighting--2fa2d102-2d2a-4e0b-b6cd-a5a3d2d2e2c9", "sighting--480e26d0-001d-4d9a-b7c5-553b2d3a6bed", "sighting--c595f0cb-9d34-4419-b7e4-7f97f54a2ccb", "sighting--c20b7996-7d5e-44e7-9af2-c3291df9a1b4", "sighting--fb62bc3c-fd82-4237-a4d0-0cb30296c809", "sighting--8d95508b-e93e-4b43-8292-77e513361933", "sighting--3a5b0893-8d99-468c-80f7-ad28278a4a24", "sighting--d4844f1d-82bb-4f0f-999e-5ea3d4dde905", "sighting--5f45292f-e0c5-44a8-bc0a-9723896878f0", "sighting--15ecb529-64ff-4140-9816-58773ec46732", "sighting--ad0d4f3e-28bd-4a69-a065-dc7fa36c4cfc", "sighting--3d377d6f-d499-4930-957d-4a9ee565f88e", "sighting--41bd99fb-1337-4d34-9bc1-2741e71921c3", "sighting--fa7ea1ef-5d48-4940-ae5c-80207d72513d", "sighting--9468fbb8-0f7b-4405-999d-b43080a14645", "sighting--5f9ac5e7-33df-4556-bd57-fe67e657904f", "sighting--073cb30d-8aca-41e1-8431-636adcf73749", "sighting--8443474d-8f94-45a4-b50d-a133a03fc656", "sighting--f5a0f341-42f9-4af5-bdd5-c33cb4aae6b4", "sighting--bab21d56-d614-4230-bba7-289d3b64781b", "sighting--dec92872-81c1-4ee6-bd5a-384b408c9737", "sighting--6a828f33-ca37-455f-b685-a7ca0f483bf2", "sighting--fb97fa13-6edd-4f53-8110-b1348da9508f", "sighting--beb03fc9-9708-498a-a346-354be54d793e", "sighting--0547f57d-f0dd-405a-b254-00a89f3f6608", "sighting--01adcbe7-a778-4266-9a8d-5ff685e15c8b", "sighting--603de2cc-d161-42ed-9782-44425c2354a4", "sighting--bc028e9f-c3b4-4592-9fad-333bc407048d", "sighting--e74c1058-c082-4168-907b-efdba75df186", "sighting--95bf4ef6-ef1a-47d2-bb1e-a8c6a71bdd7f", "sighting--fa558ed3-34b8-4e2b-b2db-0f4ab0842c8d", "sighting--bfc4a25c-b9fd-4589-a767-b6b9a609e8ea", "sighting--9075176c-93d8-4d01-b75d-13a23739e469", "sighting--0fd63a0a-0497-4ab7-a9cf-c43d17ac2d34", "sighting--aa983bb8-f35b-4f25-a35d-7a5939413291", "sighting--7d5760cb-fc44-4e83-8009-9af04813f2cd", "sighting--8ea21a38-7d48-4038-8456-221c50b0ae1b", "sighting--911191cf-8161-488f-9b2f-43c782276871", "sighting--459009d4-2322-4a9d-93bd-e4eddbe4d57f", "sighting--6952c04a-52ec-492a-8523-e61fb373cc3e", "sighting--f4f800d6-0088-4738-93d9-0b3753966943", "sighting--0f22e9b4-8c49-4813-a186-e96505223bd4", "sighting--0a3cbe45-2e30-4c5f-a403-a787f21e949b", "sighting--7e588207-bb92-415b-97fb-311658e19ff2", "sighting--324271cd-b9b6-4cd4-a883-2ed1e6e00e4d", "sighting--2f4969f9-aeea-438c-af97-a82c0f1fe2d6", "sighting--11778bee-ac27-44c0-b86d-f3864fa19696", "sighting--2f751cce-9361-46a0-9026-7728df0a8ce1", "sighting--20455c5c-9200-43c6-b8e9-e4cf7384f5c9", "sighting--2d9ecbae-767d-49a9-9279-a3edc26a841e", "sighting--421c2eef-35d9-4f21-b36e-e5c052c505f4", "sighting--c5d23dc7-e1f9-4c31-b822-72804183b4e5", "sighting--7d2b4393-51bf-4e05-9fa8-8d0fcc614b42", "sighting--f635c4ca-f7fe-4e85-8cf3-bf04071462b4", "sighting--57d460d4-0c50-43d7-b61a-b97b0ca618eb", "sighting--28224caa-01b4-4081-b2b7-36daab1a569a", "sighting--d6b005a4-4caa-40b5-b8c2-f8a610ac1505", "sighting--54797dcf-7304-4b79-b283-157f990f7b8d", "sighting--b7e6c288-7bb0-4def-a296-45d23674e051", "sighting--b7b3c3bc-6b60-416e-afa9-bf7d2251e483", "sighting--05f82ab6-e58b-42f1-a194-fe4a5cc8ed68", "sighting--ac6c7702-2d28-446c-b86e-8409af3beb2a", "sighting--2fab04f5-90e5-4bf1-9e0a-058e5e79f809", "sighting--5bfe7aca-bf7b-4295-9b1f-abf6fb3f78c6", "sighting--d7c9f977-21db-49c1-b912-69a1bf930462", "sighting--2d1ad56e-0d6f-4666-8d67-85dd6cebae73", "sighting--67616cec-bf93-45b4-a1a5-78df741b49ab", "sighting--2473b48b-3052-4f7d-9baf-1b71b74963cd", "sighting--88a83df8-1892-406c-b392-f9f9f9583400", "sighting--4671dbc0-a70f-4ad3-bacb-2ce2d5e8d207", "sighting--c29b8a8b-5c9f-47c4-93e3-f21cfd27c20e", "sighting--d2bb2215-24aa-4ed1-ad1b-bbd175090969", "sighting--4bef32b9-1c8e-4485-8da9-6fa68112f534", "sighting--33bee54a-f92e-4198-ae6c-9d17b62f1746", "sighting--de1a1481-82c9-42aa-8754-8d1d3a5d58fc", "sighting--fe537e43-2a66-4496-8b4c-cd6a023e92ad", "sighting--00e03414-377b-472b-bbf3-ef074c62ebb5", "sighting--733da8d7-3e7f-4474-a405-02f94c829884", "sighting--8ebe2176-e261-4e09-8574-dd97ba44b9e7", "sighting--ebc3eb37-00b9-45cc-bf5c-5eb1450c1b23", "sighting--e9964b05-3f5b-4654-b2da-074f018946df", "sighting--349e0279-da49-4b3a-9dc3-cc0461d0ada8", "sighting--56c6ad83-1e34-43ee-9c50-c3d68f1c2284", "sighting--d3eaee0a-8c41-4655-87fe-92aacc597545", "sighting--7dda615b-e5d1-4f9d-ab05-4ec0f8079b50", "sighting--563c1a61-50bf-4a0b-9434-cbcd8b6f9b73", "sighting--8c81aa3d-b21e-4b3c-aeeb-65da7f8fdeb4", "sighting--d7510a6a-72bd-4283-85e3-339e28c25fbd", "sighting--73d44b9f-68a1-4bd7-a8fa-dc563877bf91", "sighting--0e120c87-b117-433d-80d8-fbaf1a91cacd", "sighting--42f4a029-6610-498a-bab6-15f9acd74ecc", "sighting--7f1db2f8-582f-404c-8dbc-b34d7825b0f1", "sighting--e3ee11bb-e3a2-46e8-b4ca-a85efdd82c14", "sighting--b51b6149-16c1-4b24-b97e-1074e0f2a7d9", "sighting--936ae892-a392-4f65-8719-9b5fc3c076ac", "sighting--eac621c5-7443-4861-b65c-871a7b9b8948", "sighting--b32ea308-1258-40da-b848-3c2b2837d950", "sighting--bfaa369a-cb98-4e91-aafe-c634788630a9", "sighting--1951c414-2595-4ecf-a2e5-b83eb786478a", "sighting--7b0a3a09-661d-42bd-892b-77c701cdd3c8", "sighting--199cf964-26a5-40c0-b473-a7bf5ba7f27c", "sighting--47eb3a0b-d4d2-4350-a25f-b07bdeb7da93", "sighting--b23caf62-f5fa-4da2-ae30-c485a58a5215", "sighting--8fe23352-60ec-4290-8fb9-4e4f19da9ecf", "sighting--0ec76d84-887d-45f8-90fb-00f7922f626b", "sighting--83813bdf-7092-4391-8d27-fe403772ba84", "sighting--ee16c14e-238e-4204-83d4-68cca4e2cbba", "sighting--0eb36764-6102-4432-a5e4-aab711b178e9", "sighting--2d2b20d1-41f5-4cb0-934a-730e43fb2171", "sighting--6039f8df-026e-4fd6-a230-17deef8f4d1c", "sighting--e90bae82-5801-4118-812a-2b0c111f8d4e", "sighting--9301671a-3e9d-4321-8a1e-317c224d3657", "sighting--d257de03-ed2e-45e8-9dda-ab7706989ae8", "sighting--b330dc62-502f-4d7e-854c-e5cd99f01ccc", "sighting--f4cbbddc-6ce2-40e7-a1d6-2f2417104b4a", "sighting--bc5f8c5c-852d-46a2-ac56-fb62761e4012", "sighting--350eb466-c56d-4166-9a98-a8868ac18102", "sighting--78e672c4-4561-4edb-89c9-778ba63b2cdb", "sighting--1f92fca0-c512-42d7-a3e5-e1119b94acb0", "sighting--e080091c-2bbc-4b5b-9e7d-24bef2498e6e", "sighting--34812748-c128-4c95-a73b-2a36439d57ec", "sighting--b19d90f7-b4ff-471e-a8c4-e2924fc98054", "sighting--11e83c9c-bd01-4302-a97c-cdce37e0dd94", "sighting--5e9f2dca-d96a-4993-9938-6ddcffbd40fe", "sighting--6551dd32-c344-4f81-9599-349cab5d1bc6", "sighting--376c933c-7979-43d8-8573-27a24fa3ac5d", "sighting--abfb7ff3-9843-4afd-90e9-1d6afb9fb10a", "sighting--9daa1d19-31ea-47b8-a90c-301afd5d35eb", "sighting--6d457495-3798-4fed-8cd2-5b5523959e17", "sighting--8b1c7c14-d6f8-410a-821a-ef3cf4b79c06", "sighting--a0170e9d-0db9-4c63-a8f9-5bd893814ef2", "sighting--2032277f-78ae-4ccc-a615-304d033c6eff", "sighting--0d6b9900-221e-4987-bb87-e091e0501236", "sighting--f51afed3-bc00-42af-bb1a-619e60814e2c", "sighting--de1fdd3b-1c34-4470-bf67-480f4d3aee4e", "sighting--0d565a7a-6413-4e5b-acf7-e9c2554c0056", "sighting--6e66bdb8-ae5c-4a6f-9b2a-3a0159ad1342", "sighting--80edaa94-a442-466c-9e33-589c901544fc", "sighting--97d47ad9-8c79-4a1d-9379-ca851304886c", "sighting--b9529c6c-2b88-42ac-a5b8-5fbf5cfde009", "sighting--135d4c4f-4100-4ea4-a7d4-48619400a673", "sighting--1679314a-cc97-4ca3-a177-6a3bbe003d5e", "sighting--330ecf21-6b46-4b8d-a8ea-fc41843ee37e", "sighting--03baac48-47a9-413c-a44c-ab7728496cc6", "sighting--d70f2f8c-ad3d-4b12-bd27-a9a88f65c477", "sighting--dc32dadf-f48e-4b16-8c3e-b15369fdef0a", "sighting--6d917ea9-7801-4d05-9c26-1a9ca6cd0fc5", "sighting--e72e03da-d15b-4163-88cd-9be090b0d053", "sighting--cf9947ea-ea41-4164-8b9d-681fa19f7af4", "sighting--fa3cbbae-c0b8-4659-ad52-333600ace8c1", "sighting--624b5434-b1a0-45e1-943f-375ff5e13e1e", "sighting--196e975b-cd3f-4ebf-9dbb-c556cdecfa0c", "sighting--7e547557-28f0-4ed4-973b-1ea0b8f97d1e", "sighting--a00031fc-0cfc-43cd-807e-4b0833adf072", "sighting--2b927f51-3603-429e-8ea5-2b72682dc2d0", "sighting--940ae56f-24d4-4289-8911-de71e69dbea0", "sighting--0d4b2c3a-7805-4e96-b54c-d5ba822278e7", "sighting--1562f541-5e53-4fab-9c8f-fd47fef2c927", "sighting--a07ce061-4feb-46d8-b81f-244ee188a4bf", "sighting--78da0b70-533a-41a2-998c-429dae849dc2", "sighting--1dec85ae-09a4-43da-bbf9-caee1a1fc836", "sighting--9ad0394d-4f64-40e2-8aad-dae354584cba", "sighting--224020c2-94dd-4512-9953-197665b99a3a", "sighting--3e28ffd2-a098-4973-a3c3-1677a042326b", "sighting--80df0128-9dd0-4a8e-9406-6abe9cf97ca2", "sighting--dec74f6b-10bf-493a-a7da-74c3e230495e", "sighting--3401e2b4-5465-43c1-afc9-42eb586bb9bb", "sighting--f6b7bf1f-93b8-4365-bf57-dafb78ef7c9a", "sighting--ec71c533-2376-4066-a1f2-d1ac1570fa51", "sighting--e5113b93-e504-429a-b973-e851fa93ecb7", "sighting--acaddf8c-766c-4b3c-a6f3-494d777fb9be", "sighting--660c7cf4-179c-4d2d-8fa9-273626cd3de4", "sighting--db8c30e2-8f6c-42a2-92dc-fbed008fe1d9", "sighting--74c06ad6-5605-4a9e-882c-81a6db3864cf", "sighting--87627a7e-9b46-4a2c-82ac-68962fe4c96f", "sighting--7560a202-fc6c-472a-8c7f-e538e57e7ec1", "sighting--3f9d4857-146b-4b38-8e36-6ad9b6ebb93a", "sighting--8d3a3291-b55b-48f0-927f-db0e32704496", "sighting--1d70ef0a-14a3-4247-a44d-f28d5b4801bd", "sighting--2581c3e6-707f-4336-ae92-d96f828d6437", "sighting--c921f46a-8774-4409-ab9b-524e4c9e625a", "sighting--72fcc56c-553b-4e45-ad9a-ad29f893092e", "sighting--a593f137-60c2-4ada-8fca-d4f3f1c6b7ea", "sighting--9555fad1-4e55-473e-a971-0a6c4fb91cc3", "sighting--b86b424c-7723-4838-b18e-48b4e9cfd098", "sighting--4ad9230b-cad6-4963-9b13-dcb96c15e141", "sighting--26382663-a7c5-4302-be93-1a59a8bfdf49", "sighting--321ae4f2-07ba-4a05-bd94-63b9f8e88718", "sighting--998da86b-a9e0-48db-8d2f-834fabbf2cae", "sighting--0e55d26f-4cdc-4430-a302-3544fa39fa1b", "sighting--0f14b545-9b3c-43ae-9d60-b8a6e83ceb18", "sighting--7e18bb45-9550-48e0-a602-199177828695", "sighting--5a8a3473-2f49-4a78-9c51-dbf5080b030e", "sighting--153fb109-262a-4c95-9d2b-13c391e56a0b", "sighting--1e9d4704-17a6-4f77-b25a-4140a850dd65", "sighting--53972952-a424-4298-b0ac-f94076b93af9", "sighting--8dbf54fa-607e-4b7e-aba4-8bbbcb1afbb7", "sighting--73416845-1af1-49e8-ab56-21b9c269ab68", "sighting--26b18d62-2b2a-48ca-9005-0f006e1e4677", "sighting--1171e247-ac89-4d80-b4a5-7f98bb89ba95", "sighting--65f49f52-a823-413e-9d59-b61ff824baf0", "sighting--edb9f98c-f1be-4a1b-9734-e938a91871e3", "sighting--a35819ac-fc39-476f-b4b6-046315638504", "sighting--9b71371a-4b93-4044-87f2-0727d9a1f585", "sighting--54e51dc8-35f0-4042-bf46-c8e30992ffa5", "sighting--82af4753-6662-4cad-a44d-2205836fc086", "sighting--3145ffb6-2acb-40d3-9720-285f838010d4", "sighting--e9d5af39-c942-4ce4-8d31-6ec4c92d6ace", "sighting--f9e7d360-896a-4879-9fb1-f6e4ab06f058", "sighting--c16ac5c9-d387-439f-8f2f-64effee2ac19", "sighting--3be1e56f-f110-412c-a812-ab9bf254c52e", "sighting--5ff2a690-c7f3-4dab-a00f-495f47625f34", "sighting--96908b1b-bba7-42a9-a5e3-48ced15356f5", "sighting--40498c16-3e2c-4c54-a2bf-e8376f5b554b", "sighting--d55f9733-b566-4788-89f5-c8e2c97521a9", "sighting--873399c4-f8e8-423a-bb5b-f481adcc941a", "sighting--1c79c8db-0c18-42cd-8179-f3f3eb665811", "sighting--7c484cf6-104c-4ceb-9e44-546240245a26", "sighting--cfdd979e-d6c9-4131-8e03-fc006f574264", "sighting--6d75b68e-169b-4bb9-8390-7fa0f6b04842", "sighting--6c8599c2-9dd4-4f31-bbb3-f03cfc9f2690", "sighting--34a71e9f-de1c-4c78-a43b-a1f0b2a3676b", "sighting--7c2b27e8-0b79-4bf2-baa9-b40116c0f79b", "sighting--258a8a93-0022-4e79-acf8-cb4429d722d8", "sighting--a2eedee1-9418-4a37-b064-3fbfb0645a5b", "sighting--5b506942-42f2-40b9-b8ba-99b9420cb3c0", "sighting--fc5995e9-caa8-4848-b84e-22d4360dce56", "sighting--5ed87cdd-768a-480c-869c-0c30bb092cd1", "sighting--627d69e9-d703-4295-8c96-b265050762a2", "sighting--b7c00295-ef3f-4c44-9cb9-c14ee2a57034", "sighting--42555e78-a0a4-4faf-ad3c-850e3884df18", "sighting--4bdfad93-c059-44d0-b3cc-e0c460167e44", "sighting--d9245c4b-a351-4464-bb1d-d7ebac73ec16", "sighting--76309e87-1e33-4064-926c-331e5e2e8a66", "sighting--55f7ab6c-df20-4a01-a205-e35114fd9fc1", "sighting--e0e1a7b9-c340-4f33-985f-1a9dec37f133", "sighting--d449bce6-6e41-42a0-b990-ef03d9e99eb2", "sighting--5abeed25-6bfd-40de-8afc-de669f957307", "sighting--cd706b6f-b12e-495c-baa8-f6a7641e27ec", "sighting--84760fc0-91c7-4deb-a8a1-e161847504a6", "sighting--127606f6-e980-4d4b-9379-e926a531fc34", "sighting--5623fcf6-1384-4937-a9a3-9d79f126d77d", "sighting--e91d023b-fcad-4906-94cc-c2facdd26ce0", "sighting--4b9fbb70-ef5d-4e24-8847-1c4c7242d55a", "sighting--c2827898-7b2d-4b64-b608-16607aa66b31", "sighting--a982729a-2197-4f36-8d30-5cf8d061a973", "sighting--7c8f4d9b-b306-4a43-a716-4db4d40fafcd", "sighting--c41b2219-72d3-428a-88f6-453247a0ff70", "sighting--e541de8c-741f-4445-9dac-6621f50d82c1", "sighting--9920c5b7-7d3d-4cae-a8d4-28b8c44c9022", "sighting--34728c8f-e1eb-42f9-aabb-ab73c7386676", "sighting--b7ed3b29-5e9a-4aec-9aa6-15c8f28c97ca", "sighting--d6a6adc3-a185-4b27-be0d-c2716f222b2f", "sighting--14d72aae-759e-4fd7-9f77-fd0ed661c2b9", "sighting--1d5bfafa-0721-450b-bb47-49fdaa3431a1", "sighting--3e52e99e-b0c7-489d-ac1c-f5976213d29f", "sighting--3f6e5515-ff94-4ba6-ad1e-36b3cddefd09", "sighting--9c2d8b13-f4cd-4ef9-9b8f-2e7ea6cdf919", "sighting--3df71c2d-f1b3-4b02-a861-f9a113b083c6", "sighting--6b1bd862-bdb7-4010-a97e-1f3dacb7d15f", "sighting--f69de700-ee87-4a53-a98c-88d96f435b49", "sighting--e6ed185f-bdbe-4bd5-8649-679ff809e24c", "sighting--ada3982a-2481-4732-87b9-63082f43b98b", "sighting--c84e038b-6bf4-483b-8823-ecf3cf74a388", "sighting--de54b03e-bc69-4460-8848-8e399d1cf85a", "sighting--0dcda2e6-1b97-4b5c-ad6d-6e917982adee", "sighting--e7ef4e73-3984-4547-bdf1-4a9cf446ba15", "sighting--e906ce14-25b1-4b2b-891b-a5d0c165fdd4", "sighting--41dd81e2-0fe5-4375-b152-946488566f60", "sighting--7adddf81-b8be-48ee-b65f-437e613c4952", "sighting--0e1a3dc5-45d4-48f9-80ae-b197436ef681", "sighting--d9bb835c-6b2a-4bda-bff5-a840739f5048", "sighting--9dd63cae-a1ab-406d-9ddd-eeb3559bb6cd", "sighting--ed03f69b-07ca-472b-94c7-b6b83b3d129c", "sighting--50483882-4d41-438e-99e1-3714d89ca4fb", "sighting--6cef8943-4a74-468a-aed4-3086547afd66", "sighting--c5c0cc90-2db1-4fc1-bf7e-5e94613698a7", "sighting--a2cd9614-66df-43b5-adb4-2dbda62f1554", "sighting--fa7fee80-afaa-4a2f-8b5d-cf75c8dfe9ae", "sighting--2bcede3c-9dea-4bd5-9cd8-3bd542af2e0b", "sighting--6e2b4aca-365a-4330-a2f1-7a84da23b113", "sighting--453d687f-213e-422b-9773-621993cd778f", "sighting--898a2497-22be-4936-97c6-44ddd228d14e", "sighting--2a629b10-6f73-479c-b150-d93476eaac99", "sighting--ed390a8a-8bf5-4f27-9dee-eb0ff34ef981", "sighting--e00a932d-f8a5-4fa6-9205-9905dcc41beb", "sighting--62e70553-4e60-4e13-9db5-37425ec4cc44", "sighting--62edb481-a101-4e96-a9df-46e9d7fb56ec", "sighting--cdfd1da6-b7e7-43fe-9733-c0c35426872e", "sighting--98849118-6dc2-47b7-821c-a463398011f7", "sighting--9967f242-c51e-442f-952f-91b410693665", "sighting--c7516d64-76e8-4d70-9391-a99b377b6dc7", "sighting--640a5693-cb12-47fb-b97e-f8c288c52435", "sighting--12db2a2d-c391-4e13-aa0b-09dfb59311c9", "sighting--cc79bbf4-1f9b-4947-8ca6-44babde63925", "sighting--dd920087-7968-4e99-bace-e19c53cfad4c", "sighting--c0c0ba8d-57a3-4fdd-b32f-279252716161", "sighting--93aa681c-aebe-49d5-a18d-50bdcae8e04f", "sighting--60da1ca5-9278-4f31-b273-cf9e1bb29902", "sighting--b531e8df-ed6f-446f-b15d-62321753b909", "sighting--9f4c9071-c3df-4da2-ac9a-b4fecd87768e", "sighting--36221ec8-2dc2-4083-a702-7f80e378fd54", "sighting--5baf321d-08fa-42c3-803e-66809f37a78c", "sighting--6ae99811-3265-4c79-816d-14f4e568a120", "sighting--ef47356d-bf32-44a8-bd7e-dccdd3cdff54", "sighting--9dba94da-4d39-4f86-ab6d-90f3336b04a3", "sighting--bbbf5b79-0fca-4c9a-8bef-f1154df9811c", "sighting--eba9ad5f-d685-482a-89d1-afccce88f222", "sighting--3d92d483-b495-4575-9b86-b67c7310d2a8", "sighting--12044f01-242c-4587-967e-524821f7e870", "sighting--0b08910d-068b-4a60-ad6e-5d5378eee5da", "sighting--f3844f86-cc84-49ac-b97b-bb29e61deb96", "sighting--6a3ea4ef-1930-4995-a70e-9c13b863b5ef", "sighting--4762eda8-8d5f-4d1d-8a61-0e1fe4474cf5", "sighting--f72290e4-c069-495d-8cec-beedea9a241b", "sighting--4cc0a84f-0567-4a54-83bf-9ec048dadc96", "sighting--05748993-0898-4d27-91b3-04e4c9d556fc", "sighting--bc816f3f-5365-4f71-bd33-9cd4e03683b8", "sighting--2eb6f167-3e8f-48d2-b6c9-e8cf6d167a63", "sighting--9899fa36-829c-4461-b519-f6fefdaad3e9", "sighting--a1835f67-b2d4-4602-9022-84c15ce91ac6", "sighting--c9f9e26f-5c3a-46b8-9151-423ff0bebacb", "sighting--bd368246-673d-4be5-bd30-ac3f6161ffb9", "sighting--881205c2-048e-4c1d-9d94-bd3d97cd7558", "sighting--257f142d-5f19-46c6-8313-a0d5200d939e", "sighting--9dca5db2-8383-4af5-8874-eccbf3689017", "sighting--8aa7f789-5996-4bca-8b07-a795db60d4da", "sighting--9228cc3e-c748-430e-ace4-53fbeceafd59", "sighting--6a429dcb-b41a-47e6-ad54-bb103219a40c", "sighting--38f42185-5da1-4dac-b094-b140f6ab269c", "sighting--2b72dd36-6a5a-4727-b96d-1cbe039aed88", "sighting--5d1673bc-a2a7-4a5d-86c3-e1f0247437e5", "sighting--336435b4-3f0e-4f76-8df5-ecd3ae6d4a7f", "sighting--e061e723-5e3b-48f2-b182-d49a408d0583", "sighting--b3eb3977-2008-4d17-b27f-5f120adc6214", "sighting--1c420286-cced-4f0e-af7c-87eab01b9e79", "sighting--f6750ffc-cefd-4719-ad6c-e1ad8aa45387", "sighting--d5e2467c-31e9-4cd4-a14a-ba1b2056ee17", "sighting--8ad76f12-c874-4028-9151-7229dba16d16", "sighting--75721895-f639-4c4f-90e3-c13e7b66e264", "sighting--3d2ab547-b1ec-4c81-b741-acfe8bd27412", "sighting--c572a4cf-7d61-4f17-ad6c-049dcfcbfde5", "sighting--a64dc35b-37a9-41da-832e-bb52502c62f5", "sighting--d3351deb-a4f7-4523-a8d2-41f03f378e45", "sighting--01aa70b8-c1a1-44fe-aa04-9dedab28a4b3", "sighting--1c88c4f7-c3f9-4c82-87a3-ed8cecc260f6", "sighting--390ccedf-7e0e-4296-9e48-c3cffb140a53", "sighting--41543764-b738-4370-aa44-65d8a3fb7446", "sighting--b5ea949e-0a69-42ae-bebb-c903e2d58528", "sighting--b747f176-eb74-4d49-9ece-29e52c311ee8", "sighting--ee538d6b-74ba-4228-a384-bfa7b947e6ee", "sighting--b1461d8c-3fc1-4af6-b677-6794a2c8fbcb", "sighting--0919d3ef-352d-4f43-8e58-e623971059d6", "sighting--e3e7514a-7b0a-4b64-9600-d3b739251d62", "sighting--eed9622e-f06d-474c-9ce8-862ed2e8454b", "sighting--0362040b-d4f4-4bcb-8166-2a3c082975f4", "sighting--63070a75-a7b1-4c36-85c1-585decd59ba0", "sighting--d0aac18c-f7a5-4eeb-ad7b-e9eaebcb475f", "sighting--2062e9b9-eac4-4ec5-abe6-b3525973d2a3", "sighting--aa7a9c3a-c75e-4610-ac07-ddd5d18f5810", "sighting--52d02e83-505e-477b-947d-1c474ee5ee7e", "sighting--48745a66-a265-4b22-acc3-a7ad48384e65", "sighting--4ef1f1cb-54e8-4c20-8186-c6991befa2bd", "sighting--1da899e3-95de-4ff8-b117-ab539d2dfb03", "sighting--9f8eb6e4-536c-43eb-8b5d-880a8610dc8a", "sighting--46627fa5-645b-4338-8c76-0a233f22a673", "sighting--ffab122e-3820-4f8b-888b-3d95f1e0f6aa", "sighting--8726968b-e008-44ef-9e11-5adbf23dac2a", "sighting--a84e26dc-dfe3-4b2c-8235-9a28948aabdc", "sighting--b5f0541a-398e-4f3e-ac88-98c47d10b0ee", "sighting--e8fdf5c5-83fb-4033-90d0-e4e6f5f527ed", "sighting--d6a7bfd1-b1da-426e-a49b-057f38a2e29f", "sighting--aab5d17e-b7bb-4163-a8eb-a990c61d9669", "sighting--a427ca5f-11b4-4d11-a38e-fb95c6a0508b", "sighting--e74f47a8-f20d-4124-a989-b0a4860f344a", "sighting--27ddad69-4b03-44b9-a896-5c3c489030cc", "sighting--9b83380e-5b08-49c6-9870-10e956e78dea", "sighting--387537a4-2ec9-4b4f-857f-a3a9c665a973", "sighting--3e67ecc8-3fdf-449f-9f44-08f0235f721f", "sighting--8e3d0edb-077c-4077-b1eb-1afcf8aad7e6", "sighting--15c2c9ad-d7e0-4c25-97bb-03193fb17b12", "sighting--750fac4a-9e9e-4474-a8dc-39e3624f51b1", "sighting--e7f6cb15-be94-4e5d-8813-0554e2cd90af", "sighting--bf095fa1-b4a8-434d-82bb-46aee08b65f4", "sighting--d895fd86-43ae-479d-85d6-f57c7ef8c8bd", "sighting--ee0b1b19-8a58-464a-980a-b577ee81e404", "sighting--1a0fb5a1-26ad-4e4b-a5b7-9e2e6a4223d0", "sighting--7e47edfa-21f6-49fb-9c7b-9849c254adb5", "sighting--ff5282d7-6667-468b-9d47-b574c5226ce6", "sighting--9bdf781e-a018-4b04-9f11-78185d88fdca", "sighting--16708a53-9480-43f2-8efe-e8325bd2ee0d", "sighting--a008622a-af55-45e6-ae05-303ab038f8e1", "sighting--e40c2b1e-11ce-4965-9ce2-e7f355c30202", "sighting--b277ab0c-e7e4-4c70-8d87-862e6fdd5ac6", "sighting--ee50eaae-d274-4e55-9c54-75666d7a9f7a", "sighting--b7eac079-a43e-40b4-a535-2e9a253addf7", "sighting--46863f11-703b-4089-8c84-565c357eb8df", "sighting--59dd3d7e-f70a-407c-8a1a-0a19d81b5d4e", "sighting--49947ee5-c0ed-4451-9f42-2e8ce07f169f", "sighting--9222c775-89d6-46e9-ae61-f15f9c3524cd", "sighting--dfd6c11a-d26a-4746-ae0c-e49b556bfe32", "sighting--340b6cec-082b-408d-8704-ed21ed3ea4c9", "sighting--db2fd4b0-dc0d-4867-bd2f-efe1711b35f8", "sighting--757cd83b-5d21-4ee9-83a8-5b7d897cfd6c", "sighting--a4f86e96-3a71-46d7-804a-0a6f67af1600", "sighting--925d8036-d36f-428e-b876-020f6c4e7331", "sighting--4fce83b9-7591-4af9-a1ac-da9e7a259c98", "sighting--fcf6d82e-5bb8-46d9-98f3-803bebb298f0", "sighting--8a08aa14-5524-4acf-9fed-e172ffaa5cd3", "sighting--a118f373-a116-409b-8cad-4d09a3f8c46a", "sighting--16d253d5-a872-4ca0-adb6-2654fe04faba", "sighting--d5bf1a60-4689-4595-a996-5f916fad9cd8", "sighting--0a8a9ca9-cc0a-46ed-9902-f1879720c023", "sighting--1161763d-f95d-4c1f-8fd6-c2eb4b4762f9", "sighting--31577b4b-ce7f-4cf5-99c2-5939115ed244", "sighting--7a7cef48-e51d-4be2-8454-b1a235772713", "sighting--7b4555c3-d546-4327-b25c-234b263b2854", "sighting--65fd556f-415e-44ab-a5d7-c397c8155a06", "sighting--fd46c6fd-fd67-459e-ba28-720662c91d85", "sighting--e571609f-0f6c-41d0-837c-f83cde148e1b", "sighting--eda03ddb-7f63-450a-8d16-a8ed5d39bb66", "sighting--763cf795-90a6-4455-bcf3-892e609d84b0", "sighting--fdeb8b6b-6bcd-49bd-b25b-2e9210d29a71", "sighting--5cbd425c-871b-4d6a-b175-4a5fa8c34c87", "sighting--468e9507-cadf-4c2c-baa0-dab51e1e6d63", "sighting--52e183be-558e-4e67-bea4-021522ff7d37", "sighting--63f85b0c-7da8-43b5-9dbc-e473060a26ea", "sighting--ba2f554b-2571-422f-bd70-06e618f5caff", "sighting--1dcabd2c-5cdd-4e45-ba98-20302e9061b0", "sighting--6fcc7198-581c-43b8-b07f-ca97b107be26", "sighting--220b7329-dc77-4d9b-8c3d-50eb21ecba45", "sighting--f6e73928-b679-4390-8d7c-d47cc6487396", "sighting--89a5e0be-1af8-4839-b799-84f575f99a3e", "sighting--94ffc561-1fe3-4954-ad29-90a83f3a9985", "sighting--2643edc2-09ca-4251-bc22-f3c2693c2bb5", "sighting--b7069e82-518e-41b0-8d6d-114a7da96f53", "sighting--e7ce6ddf-7917-441e-b499-304cbaa5f891", "sighting--9ee13bc6-73a5-4b06-88c4-b023f6491dc7", "sighting--0e4ed3f2-2d64-4c9e-ad0b-81437927c105", "sighting--981f4a78-f191-4f43-9c29-2c88eda16c1c", "sighting--1ab9fd59-60a3-4893-92df-dac7a2bae1c1", "sighting--b7dc0293-0820-457e-b061-bf7ca3796d40", "sighting--77aaceac-1020-475b-a124-a2fbffc4cc27", "sighting--2a284585-6192-4fc2-963b-ff56640a5b65", "sighting--446ffd4d-6650-4e7f-b81f-f991c4854e51", "sighting--0e9ba9af-9ab0-4362-a736-38a72d3122a4", "sighting--b4c3b121-e6dd-430c-926f-f1963e394bdb", "sighting--eb58bac9-d7c0-49dc-8bf3-62d597d141cd", "sighting--e67f5e09-9379-4f20-901a-9d7256cd4102", "sighting--43d9085e-b7df-4497-ac05-30142b27330e", "sighting--c8b7439d-c16a-4125-a0eb-9c083d0dc876", "sighting--17935df4-99f8-45d4-a061-c49c4077909c", "sighting--0af8fafa-2b2d-4d6d-8914-0d31a7126004", "sighting--03df49ff-6c5e-46f5-ab7a-d939242be66b", "sighting--ceb1a4e5-b651-4585-8deb-bf134ba64350", "sighting--f9123938-d19e-4e47-818b-b033a0c64328", "sighting--014d01e5-e49e-40f2-8639-0ff12c5a0d8b", "sighting--ae72d6b4-4d6d-4835-8ef0-c03f3e3db852", "sighting--641cd478-3b28-4710-8e0a-a6e853820139", "sighting--756eb43e-337b-42bb-b78c-9c91538c7d10", "sighting--3eb27ec3-d687-4f48-8781-9b1fa6735e9d", "sighting--dbbfbbff-e3a8-487b-af98-dd0b014517a6", "sighting--9259beba-56a4-42fa-a7bf-e121a93c521b", "sighting--2d29c5d5-688a-401d-8bf3-71f590968832", "sighting--40eeff49-f4f0-4741-b625-518bf279bf30", "sighting--797d4a2e-b5cd-45c6-aee9-6e7c2a6b8708", "sighting--5d946150-179b-4eed-a69f-9e30945eca33", "sighting--e846b3e2-ad05-468c-92be-ed7db7e62aa4", "sighting--e3ea7830-f448-4b3d-83cb-288912ff40f6", "sighting--c55361b3-a8f6-4216-846a-45bc6b579674", "sighting--e64178fb-a541-45f3-9093-c361749b3fe9", "sighting--7c0c8ed6-bac3-44da-9ba2-71e510fb2683", "sighting--58d33064-edd1-477e-bf68-989f9c3a6340", "sighting--399c366e-63d3-484c-8e47-63138572e9c2", "sighting--7c7bfb1c-b3cd-4ba5-946e-79db5df8a317", "sighting--dc09abbb-4b6d-4f21-b6ef-97b425076494", "sighting--1c81532a-be68-4143-a1ee-ce6d96430846", "sighting--1e0a22d3-0998-46b5-a680-c89d2bfd9022", "sighting--718b1649-b0f3-4ccc-98f4-b079cbd36c00", "sighting--961a2891-f9b0-4456-a144-3143c65036b3", "sighting--b8dcb796-c671-46f7-b427-07aa6f1192f6", "sighting--a1aa84fd-2c3c-487f-afee-77c22c45e5b6", "sighting--45574f2c-3cd9-480e-90b3-8bc82bf228ba", "sighting--73c56f28-b1f7-4a2e-9e5d-bde767182f32", "sighting--c24d4514-39a0-4330-afe2-57f4c5da253f", "sighting--a8f947cf-d037-4168-8430-3e501cd0759d", "sighting--2ab6ee6d-eae5-4327-9119-ebaa58cd53dc", "sighting--fde34545-1132-4518-a08a-f5dd8fd0c482", "sighting--306f196b-fdea-484c-a03f-0645896e6435", "sighting--6eae5481-977c-41e6-9fef-4b3aa0c5335f", "sighting--7739a450-b8c9-408b-98da-58f5e934d1e9", "sighting--b33a2276-1f4d-4b54-bb7b-5a3557a14613", "sighting--4b0588d4-75cf-48f0-92d5-0dc819b21815", "sighting--cfed7f0b-c936-4a87-a516-3c8f06b1bb73", "sighting--38df1d46-99e9-4ef8-8f09-136317343817", "sighting--52bea90e-452c-45fb-a92c-fd5c03e5971b", "sighting--470e8837-b979-4957-90a9-b55f4e204c80", "sighting--4e356af2-073f-4f29-8d6f-20c30e22b727", "sighting--112086a8-3a1e-468c-bef2-998e182e3327", "sighting--439b8e8e-d2bd-4827-b438-b14fb648eb92", "sighting--d33b665e-579e-47a6-8d5f-861340e37641", "sighting--a3a94f06-76f3-4090-a200-186d355022bf", "sighting--c8308ed3-beb5-43fd-950e-72435f680091", "sighting--0b08e4b1-f9b0-4456-823a-7425cda8c689", "sighting--49610195-b515-4c8a-a360-5ea4782cfe48", "sighting--0cc783a9-8ee2-4e40-bb84-0138221f6a50", "sighting--a05ba719-7799-4130-b22f-0f701599cf40", "sighting--1d5d5f51-d707-4e26-8586-fc224b195ef0", "sighting--9cfe293d-2866-43ee-8eed-d6d684de8dfd", "sighting--0d6e5a45-2f30-4bd7-82d4-c4b93083e5df", "sighting--e69cccbe-d40f-4136-a043-f56b9f63fb9f", "sighting--aa9dd270-f5eb-46f9-8415-0a897a037c9f", "sighting--f12310fb-a617-4fd3-a2a7-adbc2daf9733", "sighting--54dff5bf-ca18-48e8-8eed-c76272c168d8", "sighting--297a7704-1463-4240-aad3-49ac0f1198c5", "sighting--10414b18-2dc3-48be-96b9-157ab575727c", "sighting--2e059fce-a577-4c4b-ab17-588a2dace2d3", "sighting--3007e555-f0b8-4a62-848c-ab8437c2de2e", "sighting--ab5dd1eb-caa0-4091-b180-a72ea308f28d", "sighting--592d7fda-a5d6-4bd5-8086-3209b6183b31", "sighting--ab03b36e-db8b-49b2-b33b-e2673b390431", "sighting--5d817f17-54d2-46cd-9bca-a6297add8631", "sighting--163e5604-0021-4dc6-a1df-d25983182bed", "sighting--134171cc-bb5a-40d4-a0c3-09c5ebc24b0c", "sighting--5f595934-6a1a-4a13-87c2-2df9154aab06", "sighting--051e2748-fdd1-4a10-8531-c7a8dc1cdd03", "sighting--3fd6fd22-ac25-4934-9748-90a2dbd2500d", "sighting--fbc9b3cb-09a6-4108-a5f7-d35ac0b4215b", "sighting--5c3b91a1-67de-4e22-8667-5403670e8042", "sighting--b24312d2-189f-4063-ab8a-053a51a44879", "sighting--dfcc0950-6aaf-4c6e-aa03-21c073482318", "sighting--59ba4005-8546-4939-930d-474df49ed07d", "sighting--8c1c1789-f8ff-42fb-8ea8-fd095f29e16a", "sighting--9ae4709c-b24f-42cf-9112-8053b56fa35d", "sighting--df74f417-1caa-44fd-bec8-b6bd8591441a", "sighting--f75d7300-bf1e-4978-bb8f-5cb4cec23c3a", "sighting--1cfba75b-c4ae-4c30-b34f-45663f32790c", "sighting--56e269da-12a6-436e-9989-fd7dca1a267c", "sighting--99e75bbf-610b-49a1-88b1-80f3d45ad241", "sighting--08f60e48-7099-4308-bab1-6a7f39a95dba", "sighting--0996f11a-0ef1-49ec-a7b6-7d511590d278", "sighting--5a6a4329-c18d-4c0d-b6e4-4a5d3b977e75", "sighting--2b1ff42b-9346-4b6a-ac09-44800521b62b", "sighting--02965fda-99ca-40f1-afb3-1724ba41fc4c", "sighting--8d54be0e-53be-49fd-bc69-abcd8b99287b", "sighting--522e3fc8-3a19-486d-9f13-a094fbc8e67c", "sighting--0ff9ffb1-db29-420e-83d6-ff70a76a2681", "sighting--57f9f43e-0059-41c8-88e7-5ec0b40315e7", "sighting--f100f591-0bcb-46d2-ab61-e3f7bbc1b2bc", "sighting--b8b24660-130d-416d-884c-3a40d59c90e0", "sighting--cd6f6608-d338-477e-936c-659aef3c7271", "sighting--93293309-d9f3-49f6-a38c-aab00ab2fb51", "sighting--b3859452-83fa-4742-b847-d07675329020", "sighting--060c0917-c8bf-452a-8b99-0bd34b2d379f", "sighting--95b6cf51-7393-4570-943b-be5bb963da4c", "sighting--68ff5e90-3a6b-4a99-9111-fc07b608c623", "sighting--5cb1fac9-df96-4663-bab0-c9d77f762258", "sighting--907529c6-124f-41d7-be9e-aa41b2113ae3", "sighting--9d487eca-b80f-486b-8054-7250875e684e", "sighting--929be652-c9d5-4e81-b8a8-3292c072d9df", "sighting--a7f03f4c-f9d1-4677-a94a-4baf9d53e270", "sighting--a0296034-c6c9-46bc-ba7e-afc5e3e8fc76", "sighting--63ee47b5-e66e-44a1-b3ce-3aa1bec8f112", "sighting--ee95eaf7-9956-4970-9821-d80a0faf4d66", "sighting--bf5455ac-85f8-46c0-9190-abacc5e5c950", "sighting--c293e6a2-2e2a-4cf5-b906-b7d08f4a70b6", "sighting--09122b59-dd9d-4a60-8fed-ad09be9ac5b7", "sighting--61d57ee4-919b-4c35-8635-edf5aae1385a", "sighting--7724902d-ccc8-4a12-b3de-cb62358d3424", "sighting--9a4cc870-5b40-421d-9bb1-bfaf1dbce7c0", "sighting--b75f56dd-849d-4552-9b6b-468e89d811fe", "sighting--0ceac942-2354-4cf0-b07f-1971979deb6f", "sighting--0270862f-037c-4fc0-bea8-9304ad8ece46", "sighting--df23ef57-4847-4d6b-b85c-5c986a528f9e", "sighting--60dab2dd-1bbe-411f-87e2-7f4fe166229a", "sighting--55dcebfd-d4aa-434c-a7a4-123002ea5b5d", "sighting--4a6ce997-c2eb-4c28-af90-e9f8d9c34bd8", "sighting--7790160c-0613-43c5-9179-e28afec9678f", "sighting--e348fbf8-046f-4758-92bd-05d6e031432d", "sighting--d0161e1c-f5dd-4a2a-a306-4d0b9383eed3", "sighting--0bc2df85-617f-4e3e-9bab-24c594c5b70f", "sighting--35d63c18-a6f5-4ea6-8f0a-d808de0f31ea", "sighting--bde425ac-ceb9-4fe6-ad5b-995247d81748", "sighting--acef28af-2553-4284-b731-d74a4ac31218", "sighting--01e72112-3308-4102-b3b7-dedd9bf6b546", "sighting--bd7be98b-5891-432c-8e9a-752951f98d6c", "sighting--0a85602e-835f-4896-8eee-c79dfacd9476", "sighting--275ce502-9480-41b5-826d-34844ad750a2", "sighting--6c1f0dcd-b382-4323-b086-843d30db8599", "sighting--13e72dc7-fed8-4f12-aaf6-1687c572ebc2", "sighting--b7c646c3-3941-4e18-84cd-c299ee7dcc2f", "sighting--8523f7e4-be43-4115-9dbf-ce6d433f03d8", "sighting--d66aeef3-233d-4b05-9225-f60d53e338cf", "sighting--43854873-42f3-4450-8b7a-82538f94ebdc", "sighting--c111f724-8aad-4245-8ae2-5cbae2bfe474", "sighting--461a0926-a2ff-4186-bb4d-96465985f51a", "sighting--d35953b2-bb2a-4bc6-a3f2-d8c6b21dad97", "sighting--bb8dd609-c3d1-4ae7-8282-c1f663640280", "sighting--6d910b1a-7819-4700-b8a6-be7d451df1b7", "sighting--6a11915e-d383-4de0-a1fc-6b8fbf50c5d9", "sighting--d8ba8863-6e50-4826-93b8-f6ca063495a1", "sighting--c86d53d7-7dc1-4a52-9a01-fa20fc6606bf", "sighting--f3d2fdc1-ed77-4aff-a894-8686d213bd3e", "sighting--38b744f6-c60b-465f-9d12-76e1baf35ff9", "sighting--222ac97f-7c82-4783-9e1e-3273ea5fcf93", "sighting--768f2049-c164-4e4d-aee6-8ea26cb92f46", "sighting--c2ebc1d9-c8f5-484f-892d-d35c75005e76", "sighting--fbaa3846-a09f-4910-bb3b-98573826eb2f", "sighting--13ebc4da-8c01-4d52-8628-41dd3bd323d6", "sighting--356f35d0-9394-4288-b560-ecf0ec18ed94", "sighting--7b2d86a1-1d69-4003-9e3c-69b7ddb11ecb", "sighting--59d40527-d6a6-496b-8841-29ca9208108c", "sighting--b61a1e6d-6fd0-42a6-8622-38871a3868a6", "sighting--b4ffd418-df10-4eaf-939f-51cf708028a3", "sighting--e9db25f3-0c12-4304-9605-93a9e35abfaa", "sighting--18e9af5c-5d9b-4c1a-be4a-c0a5320beea7", "sighting--f450117d-c4e5-43f8-810a-99d6be40f005", "sighting--33cb6636-2f37-442a-8980-ce5d85dfd592", "sighting--5b91ba49-e6f6-4895-afa7-ba2857a89568", "sighting--2fe1f88c-44f4-45c7-ab6a-32b6d27500d2", "sighting--60cce18e-fc5d-4b99-8a38-49853a2bfe57", "sighting--0b236a93-6c1b-48a9-9afc-891d38de4be4", "sighting--aa6730b4-ec59-4fda-8d4d-b53946a02b65", "sighting--1e6960a4-50a4-44e9-be13-36fd6d1e3132", "sighting--fb22de0f-5310-4245-aa81-fce8577932b3", "sighting--fe416ea6-7f0b-4ec0-bd70-9a7d3aa19a98", "sighting--40234b95-92b8-4f41-b4e8-8b842693c827", "sighting--5758e5fc-cb15-421c-8788-548b6489a856", "sighting--a5b29bfb-064a-46af-bbf6-c57a9e3a8675", "sighting--842d7840-9255-4620-bf90-a41a2021285f", "sighting--782baeef-dea6-4a4d-a763-55b47bd19374", "sighting--32537c15-ee32-4ff9-85b1-7e85ed213370", "sighting--1b012b18-b3e6-4464-bc9f-2e27eca0cbd1", "sighting--57b71910-ff6f-4d2a-b10b-8d7487aedeef", "sighting--6f677266-ff06-484b-9d00-91bc2557ec5d", "sighting--38840748-0144-4b42-9d93-07ef59a64e9a", "sighting--26d04101-26ee-4dfc-b673-f2329736461e", "sighting--418d5657-3f16-434b-9c59-9941516a922f", "sighting--a68d373e-e80b-41b8-8290-64cf2c32c7db", "sighting--a47c3a88-6b6d-4df1-9b62-0d9633b36959", "sighting--3b77655f-3aa1-4f5b-8484-0d839aa53d1b", "sighting--33036641-a455-4768-a37c-760b3e8bed9d", "sighting--862019b7-42f8-470e-b8de-b9eb7666a18b", "sighting--70557707-cebf-47cf-a2e2-7e56040ff502", "sighting--27febe70-612c-4d7f-87eb-8aa368d90183", "sighting--8c81d3b5-eb08-4b6c-91b9-a0f70a09724a", "sighting--8287b2fe-6c19-4096-b0e5-0af1d35393c0", "sighting--ac9e0b1d-7e2b-4d54-b7c6-5197d09ed845", "sighting--5741c51e-03a0-4c3a-b905-f6d796577256", "sighting--643cd22f-4dc7-4857-92c5-12b4df87053e", "sighting--1cb8f90e-76ef-436f-bb37-5524976b9cc4", "sighting--719a7a19-fe08-4c18-b78a-15427e36dc8a", "sighting--3c9ec002-7262-49a0-995c-1d6fcc1d963b", "sighting--19150d41-d6dd-43f7-b753-35291c36fd62", "sighting--ee632606-68a5-4e35-9429-523c27b44430", "sighting--d2c37a82-c130-49f4-a997-c55ecd870d71", "sighting--b2ddeb1c-c1e2-4562-aab5-b9581b8c1b67", "sighting--7a3fb38b-44b6-4412-a3b4-584e41ab65b6", "sighting--a49e4f54-34ec-4cf0-a1fa-1b0b6641796c", "sighting--849dfdf9-48a2-4b46-a674-8a5710ef8764", "sighting--59a25008-655b-42e5-99bb-79938ebb38a8", "sighting--1dcb8c1d-eb34-45c8-ade7-b91bda52ff55", "sighting--d872e973-6b1e-4d00-8af5-06a40235f805", "sighting--5caad8d7-7a77-4d44-9f01-d0f68da31785", "sighting--3965050d-a8e8-4608-b746-e8f93497f060", "sighting--d8f5b1ed-9dd1-477b-a383-963edc3bf03e", "sighting--02c1f4ac-3ade-471c-b11f-e261abe9f89b", "sighting--4a309929-d9be-401a-b95e-4e37db1cea20", "sighting--6719ffbd-73db-4eb5-b85b-e350e29c2d58", "sighting--7fbdbc04-3d22-47a0-a7d1-7221c70a8bd3", "sighting--4d55b70f-66f8-4cfb-8ed6-f6e3cec4dfe3", "sighting--91fcfde6-6b8a-49f1-80da-ef38a5ec00fa", "sighting--2cd74009-0ada-441e-8b01-13a712930804", "sighting--a22d54f3-464f-40b2-90c2-a94d629e8df5", "sighting--d3341efb-0726-4c35-8ca5-391126ff778f", "sighting--bce1299f-184e-4dd9-a55a-907aae76f815", "sighting--8abfcadb-3415-44db-afdd-5d77ee5609f1", "sighting--a44e25c9-ea59-48c5-b22f-521338e07b18", "sighting--c9e18de1-aafc-4331-9674-49e7d36e53d5", "sighting--fd1da339-4f45-4c9f-9065-13c65c114de2", "sighting--0857a9bb-5b37-46d8-b7d7-3f3fd6c2307f", "sighting--0c486786-c54f-499b-b368-93fe44a6b559", "sighting--1eb8440d-d6cc-4e47-b5ee-eb017f6c8680", "sighting--b0e295f1-a369-48e9-b28a-1b1b8f95c2bf", "sighting--a477e40d-92bf-4305-91c2-9c665670cc4c", "sighting--65134248-a86e-4f0b-88d2-78cd2aea7836", "sighting--32480371-0641-44f6-8d10-3f01438de8ec", "sighting--4a853d81-d919-4ca5-a114-03120008ee71", "sighting--1f38206d-bc75-4782-a0b7-5f2502d5d90e", "sighting--ec49bafa-4af6-412d-8141-312172387352", "sighting--98871722-6b3b-47f2-ae62-43e82ab73e88", "sighting--bc9f850f-0df2-4456-a51c-79b764948713", "sighting--9a2aaccd-0715-42b5-8cc1-7535454141f6", "sighting--79fcfdfc-0bec-4dff-8542-14d3a5d78ad6", "sighting--970892ab-0c2f-42e6-a364-0159f1a75ccf", "sighting--24b654dd-5fbd-41f5-832a-4a52a5b5f9ae", "sighting--d9f40f8b-0659-45ed-be08-dac8f3b88d0f", "sighting--46166481-59d0-4857-b5c3-47ac36cc6e43", "sighting--1c890140-c742-46d6-bfd2-24ac2a71e9b1", "sighting--3018643b-0a4d-4a28-ad37-6524ac69ea68", "sighting--6905becb-c8b0-423f-8f98-37b00a57a8bf", "sighting--77b31720-1931-479b-8e63-3986b7c01eaf", "sighting--3bc2ff34-05c7-431b-8792-77c49d3d02bd", "sighting--0af14e65-0b33-4be7-8963-379eaca69bb8", "sighting--b6423775-9b40-4e96-b0e1-e8a68cb6d462", "sighting--9d57af62-58b3-4926-ba6f-02d0e8e506a8", "sighting--f96e136d-659d-4ebf-a06d-68e52a4719eb", "sighting--884a1a11-de39-47da-bb1b-199c0fd0e932", "sighting--44e01850-9b4a-48c0-b141-9ebabb22a72b", "sighting--f63052c3-5408-4b28-b1cd-ed05ddae6499", "sighting--41e48c76-9f75-49e8-9e00-cad1537c83d9", "sighting--48ba0f62-2ffc-4e55-ace1-7d8c503aea11", "sighting--37631c89-2ffe-4adc-aac0-f56cc189c675", "sighting--b50d6a21-4d72-4603-ac8e-531e70f46181", "sighting--16ff0230-e7aa-4548-b9f8-508c2f0efe89", "sighting--30992d56-371d-4f27-b1f4-10487afa8d38", "sighting--4f9dea8c-6b17-4742-86a0-b26889c044c7", "sighting--c1c389f8-241c-4df1-8e1b-f189a7384891", "sighting--bebaf87f-d6c0-486e-a1b3-aed854b1f0e4", "sighting--9cb967a2-5155-4ced-a395-ba1b1b70710c", "sighting--b876253d-f40d-4c4d-8611-d9619ce79a37", "sighting--ffaafae4-16ed-4ad8-8701-f6e4c474de7d", "sighting--a95b7f4c-3cc7-4f08-8123-2b59efa232b2", "sighting--03baa340-5cfc-401d-b301-e63e99ea34dd", "sighting--b9046619-e03e-42cd-8650-09355a6f08d3", "sighting--599edfa4-68d7-47e3-87ac-3ae6ce4d3a9e", "sighting--19f44d4e-61cd-49d1-b36e-545e487709f0", "sighting--9d319903-9253-410f-9852-b65ac1f22513", "sighting--4252078f-6d2b-477a-8d96-36573619493d", "sighting--56aaadd2-6185-4027-a36f-f7e10c4e9a60", "sighting--ece973f3-fa0e-4ba4-a140-59affa30c29e", "sighting--d5550ced-db23-448e-8292-c8f7cf15bc71", "sighting--4e1776fa-ae95-4bbe-9dd9-0a16712eac73", "sighting--a7bfebe6-55be-45cd-8f36-558b399e980d", "sighting--8c4b68d1-9b9f-49f1-ba49-4cdab9372287", "sighting--89ff3a83-9bf6-4597-be06-5a7c906f066c", "sighting--dd36c6fd-371a-4d0c-9810-4bc62cac99b1", "sighting--9f9f6726-40ed-456d-80c3-2b87498b65bc", "sighting--c89cd88f-a1b6-448a-808e-fc1e10ddeb40", "sighting--8d8078c1-cd20-45ae-81a8-2efb632f1ed6", "sighting--fce66292-304d-410e-9309-81e1cd839db6", "sighting--b2e7e750-6e91-4f6a-8601-f8982c3f4e0f", "sighting--24fe47a9-549b-4fd2-801c-77ab56de52b0", "sighting--424035f9-2061-4eef-9d49-3ecde2a1383c", "sighting--57e7adbd-9a45-4bce-b586-abb5dd6ea132", "sighting--bda56870-7f64-47a9-a4e7-297550c006fb", "sighting--fea35901-f8fa-4da5-aafe-e32af42a83fc", "sighting--e280599a-7cca-4cb8-bbe6-37d94d5e6e2c", "sighting--bbbecbf0-c663-469c-a50a-10ba746844a3", "sighting--bbcd2847-05fc-404b-8f67-817dbc0dd79c", "sighting--be5b48b9-7dc6-44fb-984c-650a6d1f893e", "sighting--252df814-f082-439d-9ec7-249bcd71c41f", "sighting--db256037-94f1-4ab6-85fc-c83f4ead069e", "sighting--f141daab-d1f3-456e-90dd-711ba7493405", "sighting--0f9f0aee-3223-41e3-825a-315fe535258c", "sighting--7f8cccb4-20d9-4a3a-81d0-d9be10396d13", "sighting--77a00238-f8eb-4100-aed6-de17e7f37b17", "sighting--4ae6513d-5619-4bec-94c4-52b381d15a5a", "sighting--6c15271a-3a17-4f87-9894-63c3cd81353e", "sighting--83523f0b-64f9-434e-b7ac-0bf6d28dfac0", "sighting--3d4d28ec-073e-4f74-b21e-a6d31f62e043", "sighting--c9489bd5-a166-49f2-a874-d4e62f87abe0", "sighting--47a81818-da13-4147-95bf-914b687ce26d", "sighting--0b9980d7-3943-4956-a2f2-08fb308e86af", "sighting--664f86fe-0a8c-4d4b-ae08-a83bbfb0741f", "sighting--02517701-0bb4-4f4a-9293-e2ab2f66fd1f", "sighting--466cc84a-5c73-42f8-a287-ee9af97f7716", "sighting--67adbb2a-6fd4-48db-92e4-2d87b900a2b2", "sighting--9cec87e1-8c26-4130-8f07-bbc8add0898e", "sighting--848d5ef6-ae3a-4e6f-ac9a-11dc86eb2460", "sighting--ea2849ea-4468-43c7-85c3-02884a8957ca", "sighting--942c9af9-a9ff-4c57-857d-f2d4f6d4cf05", "sighting--900798a8-7c5b-458a-9fad-86d19646dc7e", "sighting--71f65f0b-db58-4fb4-aa37-7c4ff7d1d96d", "sighting--4b718ad4-0124-49c3-91e3-9f91e3ef04cd", "sighting--a21e1600-6c19-46c1-90d6-081f050b6980", "sighting--dc507f46-9999-4432-b0c1-247b5b671657", "sighting--57bc236f-e2d2-4839-b0f5-8f693c8ab2fe", "sighting--bcccf202-3d22-44ed-a052-400c5b5549bf", "sighting--5061162a-b576-412d-9c5c-5abf4a6beec1", "sighting--f6c12577-a213-4593-af03-418bfc66b93c", "sighting--d930f16b-f85d-42fc-ae41-b5e11b2f947e", "sighting--0fefeaf2-bacf-4f33-8df9-67b77a6f7413", "sighting--dd4d9ea4-a66f-4d03-b034-c74302f63076", "sighting--84748abc-d2b5-4c18-8d66-b81d1b68883d", "sighting--7735e9f8-478c-4d04-a477-3c03e4888e63", "sighting--e8b5f5fc-ebd9-4134-95dd-3f19f618b6a5", "sighting--cd4180c4-a7b1-4caf-821c-f977badff95d", "sighting--05a968bc-b37a-4579-b779-992250def152", "sighting--e10b250f-29a1-4711-a1fb-5b66db48a975", "sighting--c9ebe17c-b0b8-4aad-a2e4-d1ca0cb357ff", "sighting--1a71b3fc-77a4-4403-be70-2303f1b0e04b", "sighting--19ec83f2-ba70-4790-84ec-6c01f90a585d", "sighting--c628cd8d-db30-4ac3-90f7-a78e33a4a30d", "sighting--2739498a-c191-4f27-8564-f2a78b09018d", "sighting--cb85d1af-a876-4ae1-aabb-d01d12f174aa", "sighting--d78c0e3e-b9d4-4008-8356-e2c4b692c7cf", "sighting--5b0e3f84-cf77-4d4a-ba04-c5d572aaccc6", "sighting--04c3f620-9c53-47a7-8d62-6089b98faa1b", "sighting--1c07269a-2447-4864-8d3c-609cc05f9be7", "sighting--806b39d0-14a7-4eaa-bc58-316e1a25170b", "sighting--75aa5d50-e307-4b03-a9c4-f2aa216cdc52", "sighting--91fc20f8-2167-438d-a3f8-121523ba7450", "sighting--47194820-115f-4926-82e0-649214be1909", "sighting--dc1cbccd-baf0-4687-b921-77391a4ee6b6", "sighting--fefc2fc5-61b1-4f7c-99c1-0380cf880e5c", "sighting--b060994f-a40e-4712-925b-abeb58354cea", "sighting--3e8fb8ca-ea71-428b-b2fe-c06d92e8c48e", "sighting--6e0c0f76-400f-43ea-9232-84cce5cd0ac2", "sighting--b1ac798c-b17b-4750-80af-10d7c73f38ce", "sighting--8abddd1e-bd92-40fb-98c5-95e65c223ef3", "sighting--2c796c88-3996-41be-ba69-5fe7ff9ce50d", "sighting--92e48af7-bfd6-4e48-92c6-3544bed8979a", "sighting--e121de1d-d67f-4bf3-8562-591df58a1cd4", "sighting--3b9ea51b-8e15-4939-829a-e229c4724510", "sighting--4141f48c-5644-4021-841d-602b3d22c49b", "sighting--ac338bf4-d337-4d29-8b74-88d11ede686f", "sighting--e9f92c2e-f341-41e2-b0fa-80295aa67ced", "sighting--e58502f5-f2e1-486e-8653-7e7a66cc8784", "sighting--56cc9f22-a02d-4c34-a3e5-88871546db32", "sighting--55f44ec0-0553-446e-be34-713a0372a165", "sighting--76a19213-dcdc-4f3b-a0a4-2ef1716479a1", "sighting--c9500639-02f3-4670-9501-fc8490bd60ee", "sighting--8d84686c-47cd-4c78-a7c4-debaa1060e06", "sighting--def8d360-c096-43e1-b7bb-fb748c115338", "sighting--1d6e4e30-4c95-4633-9ea6-be5666d23999", "sighting--8dfd3c4e-c2ad-4e36-a5c8-56115c1ca671", "sighting--14582258-9be6-41b2-b046-75dae60fbd2b", "sighting--9105d4cc-ddbd-47ae-b34c-223ab9d98908", "sighting--b02881d2-3508-4ee5-93c8-b19bea578e96", "sighting--7bd9094e-77cb-4c0c-8a43-bfdace9f3bb6", "sighting--838c63b2-688b-4a35-9f5c-7e0e85a5617c", "sighting--1f263c9b-5556-4c05-9493-240f88ceb8d3", "sighting--2f24203c-9cc0-4ef7-9235-6d459eb4dd31", "sighting--c01b05c9-672b-465a-88de-49eb53ae588c", "sighting--29d58b36-9103-4372-a137-936dc4bcb9d4", "sighting--aa5fcc5e-a6c6-4832-b529-13f4e63b28b4", "sighting--61699fe0-2406-41d7-89ec-c2347b2c8dec", "sighting--34343883-3be3-4289-a09d-541784e92265", "sighting--02a8f07f-7bb2-41bf-b72b-4113b969674d", "sighting--6e2987bc-e973-4ea2-9a96-9027845904b1", "sighting--d1fcfc31-cf77-4fac-9dab-65dba49bcf1d", "sighting--06c07603-bf91-4e69-b32e-528c4bca3d59", "sighting--efb55d25-482a-4b3a-b620-b7724e8afd94", "sighting--2fd38f65-87f6-4421-a6e6-6e963e473071", "sighting--21257a5f-002c-4cab-82ec-10ddd7154cdf", "sighting--2e8fb390-f00e-4593-aa16-5115582bf37c", "sighting--af184144-c36d-4236-91b1-ede5ec810451", "sighting--73be89cd-f523-450f-9276-50277ae66859", "sighting--35ebde87-786a-48bd-97fb-71d5457e97f6", "sighting--4062d2bc-8683-458c-9bdd-a75599bf485f", "sighting--7a664a73-8417-4ad6-b590-7fcdc26aebe2", "sighting--181d260a-8b87-4f9f-a523-fc2d1d45d23e", "sighting--b424c896-6ae9-4c15-bdf4-0da9ca3b7874", "sighting--49a2a0e9-a788-4efa-bda6-264ae767af89", "sighting--d2d309b4-3a31-4446-890f-9da9f6717452", "sighting--259fabdd-f258-4bfd-b728-7b093e0f08ea", "sighting--c0e5c97d-5c47-45f2-9040-b07beac8b022", "sighting--9da81a4a-64fb-4444-9a2b-f7e8d3d6d5a8", "sighting--6d2e0f72-99cf-4e60-ad4b-61075558ef25", "sighting--0e00dfe5-8cf8-46d1-aa37-c6dd1a190edd", "sighting--ee9a1487-5e5e-4216-bb42-8e95a7515a2e", "sighting--caae1f38-b13e-48c2-b273-8337556a4f44", "sighting--09c1e58f-0062-44dd-a68c-027e242bd1bb", "sighting--3735ffee-fad8-4518-b3c4-7a00021b3ec7", "sighting--194fd3c3-4951-48d2-9447-fe26364b8937", "sighting--7abb50a2-89ea-40ee-a97c-aeb47f75f454", "sighting--c8e15ad4-0a27-481b-83e6-ab9d29a2c2b1", "sighting--19165d23-eeb4-4b4e-9a78-38511e53c11c", "sighting--19a183b8-69df-471b-9a03-7fbba6e0ddb8", "sighting--42c7f38d-91bc-45ee-97ae-7dc932a1bbca", "sighting--c5fee1a3-3d98-450e-b804-1bfaea404369", "sighting--42bd74a0-3d56-4216-9487-a559400e68c1", "sighting--aacbf805-e11e-4aee-b137-fc4eaf62b487", "sighting--cbae8991-3564-41d5-8b99-65b5fdf43d64", "sighting--dc650d8e-8762-4430-b969-bfbf0c20d0a6", "sighting--9d95d859-01ed-4ebf-b0af-f11de75fcf76", "sighting--b7daea67-06ab-4783-abd1-d3b6cacedefc", "sighting--299745b9-ffc8-44d3-af60-2856c81356b4", "sighting--bafabb5c-8c25-43d6-b325-7fba1188df0c", "sighting--fc071bcc-4cb0-4f01-aaf2-e640af37574a", "sighting--4061e2cd-8bf2-462c-b9c1-f0f397448e60", "sighting--8adb3ffc-63fe-4f4f-82a1-46d5d0b2cb32", "sighting--536f977a-21e1-4aaa-8dab-0dc3832b1de4", "sighting--bdaa1a01-786b-435b-966e-60b141519a59", "sighting--0d6e1cde-5203-4d16-820b-a1e814e81e96", "sighting--d2f9ff77-a7d4-42bb-b7b4-e474876dad7e", "sighting--ad3aca14-b227-471f-9c22-f90b099fdf5f", "sighting--1c53b9fe-6f31-49cc-a7ce-0d072327c311", "sighting--92a1f417-02dd-43f7-ba25-213d536d0c7e", "sighting--091d4114-41d7-4879-881b-5fed59decac6", "sighting--4a0ad6a4-6b1e-49b0-99db-0b8341a8456f", "sighting--1157da7b-8868-42dd-bf92-758583d20739", "sighting--5b57d72a-f072-4ec7-bdbf-cb688889371b", "sighting--4a154a88-6ca1-481a-8920-f7702669658f", "sighting--73812d65-9043-44ea-b98b-eb1fab6d2ed9", "sighting--0d5aee3d-ceb1-4094-96b9-f38e050715f3", "sighting--9c689faf-5b0a-4381-b237-51ad34d08712", "sighting--18eb8183-6634-4046-ac28-4fe5959662f9", "sighting--bb2077f5-8a98-4b4e-b8fe-f04f64f71113", "sighting--61738441-78ca-4ef7-b257-98903bd5043d", "sighting--a00f5513-1fb6-4b8b-a122-3d56fec92d61", "sighting--e2dd3dac-c571-4faf-81b9-f56572680a14", "sighting--fb3fbd0f-e8b9-4997-938d-b4505d16ffb7", "sighting--aa74e102-cdaf-453a-862e-c601338b8b70", "sighting--d5478eab-5d74-431d-981c-76f48cdd6d75", "sighting--2815eb95-65e4-418a-b873-1bb805257aef", "sighting--2a42bed1-13ba-4853-a6c7-8e0d1d96be74", "sighting--07d2a37d-dda7-4797-90d1-85767526d05c", "sighting--b4add3cd-f1e6-43e8-9955-b572440021f3", "sighting--3247d42e-02c4-40b0-ab19-38021b7ff979", "sighting--0ea1caf2-23bf-4cfa-95fd-ff00deec7ec6", "sighting--ba3bb2e4-1859-4d86-9b69-757420346218", "sighting--bff7901b-345a-4974-88e1-91d801fddb77", "sighting--34708d52-3af0-4356-bb0b-8eb590bf030b", "sighting--c218aa9a-072c-46f4-aa7f-e7c4f553da8d", "sighting--57c0003c-fadb-4782-906f-e50cc8119e6d", "sighting--9b95a212-ed4f-4841-a960-afbd85aeaca2", "sighting--6ed7c4d4-52ff-4a0f-ba6c-922dba0879de", "sighting--ff11abe7-f725-464a-8feb-05dced855c2b", "sighting--97fdf339-418b-430f-83b8-dfd1dbd1616e", "sighting--87a2ec7d-463a-43fd-8f80-4901f2f1f20d", "sighting--51a30b94-a01d-4d23-a9cb-612ac6103b31", "sighting--2aaa6689-8f42-45cb-892e-000f55ca89b1", "sighting--93e5e969-eaf0-43d2-b60e-97f1db21926b", "sighting--8ffc5f73-693c-4ad9-8e6d-8eee5c4c6f48", "sighting--feab8e76-f660-4d9a-a9f0-6cb38f8f4be5", "sighting--8efbb008-4c20-4c52-8bf1-7d25a9ac49ae", "sighting--36551899-0de6-4751-9fa4-2b20dcfaa8da", "sighting--59f5a6e0-bdb8-412d-9b46-acccc68afdb0", "sighting--d9a12bf0-41b2-4d4f-9819-4e4024805f42", "sighting--c0ad5987-e363-47bc-8d36-d5e54d09f6fd", "sighting--7bdd7585-8acd-4cfd-9d9a-f610613a712d", "sighting--995f5d71-5935-4c24-98eb-96668877fc8b", "sighting--4b903b17-1bd1-419c-bdc1-7640a08436a3", "sighting--dec121a5-82b3-48cb-81d2-351c0d1983d1", "sighting--2d3a9960-c728-4909-a113-6124b599e353", "sighting--22800f56-529c-4732-b383-8fb21fedeccb", "sighting--54718749-cfd0-41c7-8f5e-8c76dc43dc7c", "sighting--704d3422-a6fd-4093-a27c-165884ce41ef", "sighting--41c9e18c-365e-43c2-8724-faff72cd0dfa", "sighting--583f67cb-5bea-49c2-9244-6082c3f6da73", "sighting--0bb11779-cc9e-48ed-b785-63a517908f14", "sighting--db6eae4e-bd6e-481f-948c-7fb6547c9b2b", "sighting--7b02393a-e5b0-44f6-b726-2d855936ede5", "sighting--20aa6b6d-4155-467b-9e49-b98c484fa321", "sighting--26dc03af-0aab-4708-92fd-7cf90e6d1759", "sighting--eba0b762-97b3-4dc2-a0bf-101ff828d25d", "sighting--1bfd4c4d-edeb-4146-984e-5022f5b3dc33", "sighting--848f6335-695b-43ff-9a77-226fbd291ffc", "sighting--69f10877-4418-4adf-9381-e5fe9dca5e42", "sighting--9caf05b6-5b47-4852-a980-b44362468707", "sighting--b0f91b69-706b-4d84-9db8-a8293c2fc332", "sighting--3dd76258-94b6-4160-83b9-2cfb4c7c364b", "sighting--590a3405-5c26-4b04-ba27-cd84a7b74970", "sighting--f0fe69af-4803-4b51-875a-40e83466db14", "sighting--2bd44aaa-8da9-45da-bc83-011110483430", "sighting--e4647eac-df43-4d08-a7cd-e976c1cf8e32", "sighting--6337d8eb-f078-4669-a35f-8d402234e445", "sighting--bf4812f0-0de9-4a64-9199-9f5322439293", "sighting--01231935-f0a1-44fa-b575-e6f2f7c8f619", "sighting--17132bf2-ed7f-417c-82fd-25c3cccbd74d", "sighting--76a21cc2-b396-4c27-bb6c-a6561444d045", "sighting--a7918a3a-1e7c-4ce2-bc72-5992a9216249", "sighting--67dc72ca-1b09-4c24-9e03-6c903d1f17b3", "sighting--730a384d-8ab6-41b2-92d3-e51d9a3f5237", "sighting--a8b6b537-ab7a-40cd-b3b8-99bb509d5044", "sighting--52391f6d-30a4-4a8e-a7c9-566a99ed2f23", "sighting--2d3e25a7-fb66-41d3-8623-810d589417ab", "sighting--25e3a611-b088-4d5b-948a-0ef3e55f5fa8", "sighting--e00e452d-26f9-490f-b26f-2bb7a7e6b057", "sighting--9284fc1f-f225-41b6-9d1c-14a94b675dc9", "sighting--771e14ef-555d-47e3-8d16-ed9d252eb575", "sighting--b5484278-12a1-4182-aca8-ceed36486293", "sighting--762af144-5450-4881-9faf-61f6a67311c3", "sighting--8c35863b-b485-4f6b-a652-715b45fcb478", "sighting--f59c67f9-5022-49f2-8921-f2e3fc0e2998", "sighting--64e592ce-70f5-48d6-8447-557ac744fe41", "sighting--3d3201da-fe3f-4f26-aac9-00c0f0e228d0", "sighting--90766945-df7e-454b-abdf-a511d6f7a7a3", "sighting--aaab4d61-fe98-4bd1-a2b1-cfaad32ed241", "sighting--7b7042d5-d1ae-41d8-bea8-b0a504481984", "sighting--69e2cdac-c451-4f44-afe6-a8a3c0e617c4", "sighting--a78afb22-09e0-4db0-957b-1ece480872e2", "sighting--04d46286-6a30-40ef-875d-b8c995b77382", "sighting--0e0f44b2-20a3-4d5e-a468-93c5baf0d1e9", "sighting--ce12faf6-f226-4971-bc7e-a0690794071f", "sighting--14fb62aa-b135-4ef2-b9d3-ba16bf3f4b3c", "sighting--d477157b-5c89-400e-b941-aafb43db13b7", "sighting--08ff95d1-5f0c-4812-a970-7577a6b349d8", "sighting--92ef130a-d549-4f83-942c-8b23a1c0cac2", "sighting--37d770ff-8f83-4e74-a182-32be347d5d66", "sighting--4d1df3ad-b0e1-4f61-a4d8-9598b14a9d3a", "sighting--68f8d4b9-5c45-4316-ac00-935bb83077d6", "sighting--51115a0f-0673-4431-b540-031e2c4a7f10", "sighting--8ba9575b-de21-47c9-892d-39a4ae30234c", "sighting--986e2185-f632-4893-a5df-c3db143232c0", "sighting--15020236-9b6d-4dee-baa2-783b33576bc5", "sighting--b2ffd710-29de-4b93-ae60-725a8bb22f00", "sighting--cddc90a4-5070-41bc-be7d-4b9777ccbd06", "sighting--a4fa52c1-855a-45f1-941f-139436082853", "sighting--6c44cd14-3bf8-4c74-b735-4e45de467396", "sighting--08a23f28-285e-4971-b11c-3f41a325aa49", "sighting--d671a1c8-7f9c-41c0-aff1-c0291b232a5e", "sighting--52e2d6fa-869b-4375-a81e-9a486e9e00ed", "sighting--f4d4aa88-e1a5-494c-a258-e847027129b0", "sighting--b7949890-8bd4-4ca8-8082-97707da7b40b", "sighting--166c0278-d69c-44dc-8748-72fda07d8651", "sighting--d587eef3-6ef9-49ba-b6f6-a490013dd136", "sighting--9856a625-b261-482b-ade4-d841b1c5867e", "sighting--4ea7c0fe-0c79-4fa3-b129-11aa21c0591f", "sighting--ed1267d7-1274-4896-9762-92476816a20e", "sighting--0eec354b-3884-4909-8754-4bfb8b64d8b7", "sighting--a41dc918-21c3-4a4a-9224-82eb2b346b3b", "sighting--175355d7-39b3-4b9f-b8f6-69acd11db82b", "sighting--89a647f6-08fa-49e8-a0ef-0d8159b7f6bc", "sighting--72b49e21-dd6f-46cf-aad9-a628ae7192f5", "sighting--d92dd9d3-2d3a-478c-8860-111bf4160684", "sighting--d3e03b7a-b328-4e55-a528-84c14f2a06ac", "sighting--db40502a-9d93-4567-95a3-5f2c2351b616", "sighting--bafdece3-776e-4821-8076-6a3f571a0dfd", "sighting--8b460cac-eec1-4dc2-9ce8-3ed30bd67371", "sighting--c3d5a192-b029-460f-9b7e-ee655c62f17b", "sighting--5fd052a6-778e-4b07-8967-a041017edb52", "sighting--79522628-bfa3-46ca-af27-52b35cd4032d", "sighting--837d478a-e4f2-4f87-ba17-a2a989b8d6d8", "sighting--fdafd494-2970-45de-b026-e68187860e6f", "sighting--64dd884c-1b2e-4537-af16-1acc8a2ca561", "sighting--c44db950-dc1a-464c-8103-1a54df26f52d", "sighting--c7e2a5b3-54a3-42f4-866a-2a42d88f3ac4", "sighting--2eeb42cc-329c-46cb-bb5d-456f87c6322b", "sighting--6ae30de6-5299-4567-bf3d-6aaa185d5822", "sighting--603165a0-dca2-4e02-9c84-0eafd2a557c0", "sighting--515a9fab-3f4b-4684-96bc-170056605820", "sighting--8aa288a0-86ec-4bee-aa9d-2852c26f21d3", "sighting--9cef0e60-ea61-4006-86db-19c78dfad5bb", "sighting--45f0b651-0843-437a-a962-40fc6b10ab47", "sighting--4df79829-b706-4336-a262-e83cf6f778e0", "sighting--336a4754-f60b-4e42-a31f-56c9f15e0e00", "sighting--f7c37634-f49b-444a-a9fe-f2bff50b90d4", "sighting--ed759568-43c7-466e-82c8-b24997886d43", "sighting--02d45bf1-fe5a-4fc7-b882-3a7de114f200", "sighting--00b805f4-a728-4945-a36b-937954ca0bb1", "sighting--6d882387-b03b-47d4-b5d0-b6dfee0fcaa1", "sighting--225eaa3a-ee12-4077-b29b-99f3a02fdceb", "sighting--9ef558af-68d0-47f4-b2c6-5140dc62e24f", "sighting--6163e2d3-c0f8-4280-adac-fab140d0a7f2", "sighting--527f5bbe-9808-481d-9f93-c0931552f0b0", "sighting--06ae9618-c945-4c7b-bf04-cb094d5a3ae4", "sighting--9925700b-2636-400c-b7c3-e501f8bb0d90", "sighting--d0349315-a809-43af-8f11-01c14ba59141", "sighting--ea1a5132-4489-49bc-9feb-f04b548f673a", "sighting--fe9cf981-f974-4270-9dd9-d0993d2f8a71", "sighting--0d3d48ce-3387-460e-ab8f-8566ade84462", "sighting--818f6de4-9f8a-43b1-bd71-929d4f721dee", "sighting--5759e62b-ebed-4475-a099-54b91af0594a", "sighting--4149ccbd-2402-45e3-9e74-13a08db61704", "sighting--19da85d5-e6ae-4e38-a255-e20b6f5aa24c", "sighting--2b20a986-b97b-4f0e-a8f7-4aa64f3aed5b", "sighting--4a26d405-a830-47d5-9dff-e289dcf27336", "sighting--b17e5093-ae92-4589-8839-7ad2d4b5512f", "sighting--64f4e8eb-38e0-4d4d-801f-7149aa32b0b4", "sighting--095805a1-4454-48e1-ac9b-316699b95e58", "sighting--f44d4de3-be1a-4875-8b01-480d6a0d3230", "sighting--d67dfa04-17c7-444e-8ea5-a7ebe3074d71", "sighting--057b0dff-cc91-443e-ab51-57291180d7cf", "sighting--e4a81f24-b7a9-4b67-a2b6-dec8eae755f3", "sighting--d2060cc0-b9eb-444b-9a43-4400dd84f7cd", "sighting--dda2ae64-7199-461c-a85f-493af7e59ae5", "sighting--40b57ff4-5872-4c99-abfc-ef0faaecb93c", "sighting--48964bbe-2111-4635-b68a-a191ee66c2e9", "sighting--7c291b69-c192-4f7e-8406-4c35e564af44", "sighting--14042d35-78e1-433f-83a3-9d5d68890327", "sighting--195c507f-0784-4a1b-b71a-e9d435e9770d", "sighting--c9a3d592-25b5-404d-a381-45ffadfec55d", "sighting--7c0f95f8-5262-463c-a739-64ce971830ac", "sighting--027f6069-1c56-41ab-9d99-c9144b92906b", "sighting--f9f84fef-e66e-4377-870a-b239bb803185", "sighting--a0173404-8164-4275-8853-36723f2fd676", "sighting--e5c461f3-3b81-48eb-84cf-19080f3ef5ed", "sighting--988a3854-cce2-4442-9244-edf0f9ce3d95", "sighting--33e92274-1e63-4317-9c7d-c3b1ef47630b", "sighting--962b605d-3954-40d8-a864-57426b6ee74e", "sighting--471b4693-6943-4215-90f9-3908de4b1a2f", "sighting--a9d53f4f-e463-4988-9e6a-b7181a4cbefa", "sighting--35ce7aaa-c5ec-4d5a-8b53-1d3cdffa5db5", "sighting--f245ab45-be7b-443a-a43f-2e0a221289e2", "sighting--5fd47f1c-421d-4dfa-acb1-4f229a1c848f", "sighting--ecace350-1997-4010-9a54-0bad1574b3f9", "sighting--ba0cfa44-9004-43df-8faa-fabfa3242f07", "sighting--e8cff398-72e8-40f4-bf94-e83f225f8379", "sighting--522cc110-88e2-4353-b983-14fa5ef42588", "sighting--2a38da9f-e4e1-4046-8756-de953ef84487", "sighting--ab64064a-a8e7-4d8b-b4ff-a60f77782666", "sighting--b08f576d-f679-42e8-934e-9452c8a132e2", "sighting--92d11567-753b-4a2d-b5e0-ae269a4accc8", "sighting--688b585a-c991-4b8e-82c1-6d1b598881d5", "sighting--4c120920-80c6-4d0a-8fab-1530bebeee59", "sighting--0da30989-9580-4039-8b48-61c1e94e82ec", "sighting--59b8562e-f22c-4737-9c66-979b9e019901", "sighting--78173d27-011f-4c5d-83aa-63ced9418128", "sighting--dc9ba5b2-e1f2-43a9-a123-6deb64e8a883", "sighting--9f43759e-3a95-4d49-bf35-769be9fcaea7", "sighting--fecc45df-fbca-4a63-a857-15bb5249e712", "sighting--a7aed919-4e3e-4210-92f8-4fb081e453ef", "sighting--b87c4400-249d-4e46-84f5-d7006fe16202", "sighting--f959f739-f0fa-4398-bfde-9a4420d36479", "sighting--552581dc-b78b-49e3-b39e-4f56e0f773c9", "sighting--ddcc5232-88d8-4021-bce7-6d291488df56", "sighting--98c1316b-3266-480b-a8f2-08501966b4c8", "sighting--bfb36f9c-fa8a-4ac7-975d-6f27d340c32f", "sighting--67cf1054-59ca-4c5d-9520-8d4d2df35dbd", "sighting--7cfd26db-c42b-499f-8c17-8aacbe252552", "sighting--38373d20-10b4-47bb-a9d9-386d960d4a77", "sighting--7097edb9-b256-41ff-8e7b-44ea82655d8f", "sighting--96c85810-2518-45bc-bc86-a5920b3575b5", "sighting--5678fe3c-bbed-4f17-ab19-caa7d0b9a534", "sighting--08cb6f05-d4f9-4437-bb67-7552a396c7b6", "sighting--1f77aad4-c678-43bf-ae42-cd0f4fc5bd6c", "sighting--e28095c6-b571-4164-97de-8da93f5ef38b", "sighting--d46dfea6-878b-42d4-bc5f-d961ef33f74a", "sighting--d2c8e072-00ac-4083-9864-9fe1a8d8a36c", "sighting--876868ac-9d69-4c0a-a70d-c1346cd79dd7", "sighting--25c645ec-dc1f-4c80-94d9-831dfc08d653", "sighting--b54e12ea-e45a-402c-bf80-cca5025da71e", "sighting--cd3e43e2-2be6-4558-83ba-8fa31cdfa5bd", "sighting--18f6cd98-b307-49ae-bec2-6ed5f426a732", "sighting--2b00f089-7b8c-4ec6-ba9f-5cd9f6385b2a", "sighting--65337feb-af7b-4376-a46c-eb200cf61ffd", "sighting--07e33795-67dd-4332-a57d-079cf86421b3", "sighting--c30e28f2-cae3-49a2-b16b-416ea095f79e", "sighting--528e1584-0f5a-4f9f-8cdb-eaaa7768c886", "sighting--ad54881e-6106-4cb1-aa5e-8f134765fd2b", "sighting--2c81b0be-4e6c-4a92-86b3-7e2f89d7d08e", "sighting--93226ff0-4abd-48e1-88ee-2fecb63f9dc5", "sighting--09c979a1-7575-498a-9726-4c5b07da6f47", "sighting--e3e73bb6-df5d-4ab4-9756-c5d7da9c4831", "sighting--0579ba3b-5a37-4884-9fd9-5aabd428f71e", "sighting--ac4ce505-b85a-404a-87e8-89aca63cb786", "sighting--d7423e93-89ac-4e48-b2c2-09b2ea02420f", "sighting--3be98cfe-99ae-4b65-8282-61625e50dad1", "sighting--9f436e93-9cb1-47fe-8fef-a405ac939bde", "sighting--58b0a953-b912-4b6d-a0a6-2553294475b8", "sighting--c9a84b9d-2a40-46a1-b882-5a0ec504afde", "sighting--5e4ee246-09bf-42e6-ac33-2cb9a93252c1", "sighting--dc1710f6-aa4a-4589-8fd5-4a8de6077dda", "sighting--7eb19030-a156-4511-a0a3-bc27d3711db0", "sighting--cea7789f-8f01-43a0-a32c-a6d203e66382", "sighting--890d1f0b-5455-4a91-9e3f-bffb1dc204b3", "sighting--74c9f658-ad99-4766-80b6-59440386207d", "sighting--bd2990ae-7a4a-4261-9584-2f0ce49b6661", "sighting--5150c148-0d90-4cff-9a6f-fcf58ca7b6f3", "sighting--2b690c0a-5da4-4103-ae51-e8de0807b2a5", "sighting--801837af-4f0a-4843-889d-57adcd9c4ae0", "sighting--b0534237-bdb7-43cc-9bea-fd03bd0a2fbf", "sighting--4c270078-554f-4d5e-b553-03e893d106d6", "sighting--6b2dcf3f-0dcc-4a85-ace4-a7319de9f58a", "sighting--7296887c-71aa-48b4-8511-40ac53a7910e", "sighting--0de189df-4b92-4f56-8e62-ec69ae8a1bd3", "sighting--cea66159-54c0-4fb2-8e78-f47db01cd34c", "sighting--c30fcd2d-2817-4441-bc63-281b26c042e5", "sighting--5996e511-6a6f-4d9a-823c-12e9fbee4b45", "sighting--5b8845ea-1b1a-40da-b192-ea64a8ff48b4", "sighting--cbd4958a-9490-4617-b8a8-0b9f34a58f54", "sighting--51f2ebfd-7899-44a1-840a-6337c193de4c", "sighting--497fb62e-f203-4a57-86a5-7a5d61aa32a9", "sighting--cf6b250a-aba1-4789-8072-8db185eb5b02", "sighting--b756d71e-1d0f-44ba-b58c-527777aa869b", "sighting--f0aa9c42-d9e3-4aac-8398-48b57f0cd17f", "sighting--a5afb358-a562-4d2f-a76c-0d7627725a63", "sighting--524ee9c7-2102-42b2-9216-6a5bfc0a04ae", "sighting--e2691a2c-49dc-4ebf-b277-9e5457aae038", "sighting--be81ed31-5070-4380-aa1e-05d2308e22cf", "sighting--a16463d0-81b7-4228-9f8a-a1489b5fd94d", "sighting--67150f2c-d71e-4300-81ed-063f0fd49efb", "sighting--344b4e09-621c-4973-b280-e3e045c0fe5c", "sighting--96b98488-9166-44c5-bb18-160e19b9415e", "sighting--11a00848-236a-4096-9c37-465d2bb94951", "sighting--7ebc29a4-a63d-46f2-92ad-2998603dbd70", "sighting--29d077c5-50f5-4f37-8cdb-bc089112ad62", "sighting--0eec989a-bfcd-4fb9-96d0-a234eeb564f5", "sighting--4f0427dd-0d8f-4370-8418-ca644a98740c", "sighting--a3dd6289-ba42-40c0-8924-18ff4877233a", "sighting--4e69a867-2828-426c-9f49-bee173fa3f4c", "sighting--9c4b3f67-9aed-400d-b848-845525b77f2d", "sighting--434de0f8-ec78-4956-9756-d74acd9c229a", "sighting--f6cc1c54-e64a-4ef6-8e5b-566081ae9a1e", "sighting--96c1d0c0-ddcf-4464-8cbb-c845806cae54", "sighting--fd300ecb-c01a-4a2d-9d24-9bcbb93f0bf3", "sighting--50bfd100-16ff-413d-a8f3-954ae8d25f03", "sighting--11329ab0-51ef-4605-8c6f-2aacc652111b", "sighting--d38d2e64-2b69-4d31-8fec-65f7fe62e391", "sighting--f7c7c989-7570-47cf-ab2b-b19ed67f7d69", "sighting--517f9917-e080-4152-98ce-0db3f889b7b2", "sighting--ef67971b-6a8b-475f-90bb-870740d3319c", "sighting--eea26b4c-1b32-4892-8e86-d13317f8cd85", "sighting--2caff150-ae68-477a-91d5-1867b2876f0f", "sighting--1c569b60-cae4-4163-a3e8-b183b56f241b", "sighting--8918cacc-f99e-47ae-8716-d7a1eea6963a", "sighting--da6eeeee-2e62-43a8-9116-888d58f9519b", "sighting--15157b2b-c6e1-42b9-9d6b-4b0c6b16d1a0", "sighting--9cffaefc-3596-4b9b-88b4-c286ac62795b", "sighting--e0c1759e-105b-4cff-b95d-5421b2e3ba56", "sighting--ec377db5-d101-4bfa-b1af-a6b9e3062892", "sighting--f0c0a495-19aa-4902-95c3-506b4f963f7f", "sighting--56bd1812-1646-462b-94c7-b207b41fc52c", "sighting--ace519bf-ac0c-4bc1-bc38-0b18878cd7ec", "sighting--3a46fead-b32f-43aa-a739-7b934857e489", "sighting--8955a2b0-b5c2-474f-893b-39c835368eb7", "sighting--b7d7e1da-f512-4011-82c8-87456f0587e8", "sighting--fb09a420-3e21-4457-9c06-b1b6d11e2a15", "sighting--a2bf3e91-40f9-4e62-bcee-8a158017f123", "sighting--72d3b084-c022-4d8d-b9b7-4b34a2130b8f", "sighting--2e1930a8-44df-4989-b842-345723f4fc74", "sighting--2c4bd8e3-3106-44ae-af48-ba8137b321df", "sighting--4ef28c6e-a65d-455b-ac41-6e0075b0818a", "sighting--695f260b-8be5-4879-949f-7efa47a52b67", "sighting--30d5add4-ea73-49fd-914f-3f23e6d98907", "sighting--5a420759-0401-4961-a3a0-b160a7b62055", "sighting--fff2050e-32cd-4d41-94ea-515537ae6841", "sighting--1cf7b44b-1bd8-49a3-aebe-a4aa8fcb6a35", "sighting--f4aa122b-e779-4b7b-8ca2-0f10610fde8d", "sighting--a6f10163-9edd-480b-8806-aa927d319e11", "sighting--67d87637-9362-4cd3-9b47-ae0c4705764c", "sighting--f4400e6e-3ca5-4df8-9ba7-cafde98d71d6", "sighting--fabc365a-b83b-4601-92b7-7eb3d031c918", "sighting--e2e4b5bc-5171-472e-89bc-3777816ecaec", "sighting--ee5d2f4f-7934-4bab-a0ec-18a4284ee85c", "sighting--e309db7e-45f2-4db8-bbad-547c6d288654", "sighting--ab65c39f-d77a-4137-a539-086cd653ee33", "sighting--d5b4d609-6665-4b4d-b694-e94b63b21264", "sighting--ff037b85-313d-4fb4-99b2-f15c9417d787", "sighting--9aa3ab5d-6c94-4cb3-861a-b38428deb938", "sighting--323a205c-91b6-4d1f-b460-6998a42f96ab", "sighting--047b8617-e518-4d4d-b5a9-c88f8a2b0093", "sighting--74576d7f-4139-43f3-ac26-f7a1899a8b4d", "sighting--80f978ad-1328-42b6-b070-ac400bdf791b", "sighting--d3ca85db-3415-4676-8989-7549a079c44e", "sighting--7c04d32b-757e-4298-81b4-df73fbbf229f", "sighting--c2c4ae37-7e9b-4081-9390-fdd887a30512", "sighting--9a09450f-eee5-4d4e-8a31-d71bd7e25c90", "sighting--29bb37af-2518-4c53-b0d1-38031be31a3d", "sighting--b76a0747-4ba8-4602-889b-fac88ca08b5b", "sighting--e6e14ed1-c6f0-44e7-a678-ffd9bf84e1d8", "sighting--2a90c1db-c261-4efd-a336-ef3a00704ae2", "sighting--3ae7b45d-762a-489e-9484-2f815de36ac7", "sighting--6497c2e2-f809-4b12-a336-f9c40f833529", "sighting--8ceeb6d9-c409-43b3-b90c-f36e735bb4bb", "sighting--98024c88-6d44-4ad4-b0b0-9743ec6a1eb4", "sighting--6f0ba8b0-029b-4c9f-96d4-1f62391225b0", "sighting--ffe79ba8-ea63-4f7e-bf37-478a5dea6893", "sighting--74b06c80-eb2c-4323-a343-9d81a95574c6", "sighting--bfbab0fe-ce52-4f37-9e21-7c28203b2549", "sighting--60cf2cec-e881-4104-8749-1e004e3e0102", "sighting--ab994298-27af-4e2e-9dcc-c93ef724f32e", "sighting--a3347d6e-4b74-41f4-916a-94d823718c44", "sighting--ecadede0-564b-4b62-88cd-0ce23b53bab0", "sighting--24d287ed-8420-42fd-b32d-442f9d6cf180", "sighting--4d4a75a6-2924-478c-8a97-cc87e80536cc", "sighting--88f1c1b3-db8a-44d6-ad4b-3c172678026e", "sighting--4fe89054-ead2-46d3-9eca-15f231aa3df4", "sighting--4fe11c78-c30c-4174-b496-1af487a50e29", "sighting--86f2e9f1-c193-400b-9b23-8fb5bb3df83a", "sighting--c9e10784-1beb-490a-acbb-6dc17fbbe879", "sighting--2f674b31-9d1d-427d-90cc-670e77badfe6", "sighting--0ae094bf-da5b-42bc-80d5-aa50a43e346d", "sighting--1ee23817-f234-4f4a-b559-5b4ced35bd4a", "sighting--e2577e79-a244-4af8-82a0-67a78d4b2f0a", "sighting--adebe244-6193-425d-ab0e-b6717c0c1ed5", "sighting--15bb4cf6-fd67-4838-8acd-42612a38e3ce", "sighting--2c2840cc-df20-4c2e-b46f-20fbc75a3fd6", "sighting--2e17d1bc-221d-46e1-b15b-8940d72cc4dc", "sighting--51192c53-f678-494d-a3d0-4472f5f6141c", "sighting--790e530d-c313-490f-9800-29a42c1c1cc9", "sighting--eae80b21-a655-4742-95f6-9deb60a0fe57", "sighting--9cffdc25-f890-4d36-bb26-d558c4ee8216", "sighting--dace08f2-a2c5-4313-a114-3f4d5718dede", "sighting--3804aaf4-ce7b-4054-9640-1939a378b46b", "sighting--e7add9f6-f40c-4e38-b649-93e10a4e574d", "sighting--7b8249da-e383-412a-9bca-a585ad4bb6fe", "sighting--ecb5d645-ad22-43f2-9f16-35ca9c3ea9a8", "sighting--a720ff42-3589-43fc-8a62-be7c5e7df4c8", "sighting--aa1be804-235c-43f8-9342-0aeb989e580a", "sighting--516dd8c7-c97e-4e0b-bf73-b2c041f7de6d", "sighting--af31a255-6dbd-4248-9ea3-6ff335e2813c", "sighting--b084a2cd-2b41-4975-ae5c-74b702af824b", "sighting--96fdd65c-157a-4367-88e2-781401ed0c89", "sighting--265f60c7-eeae-4b7d-914f-4a587dcb7bf6", "sighting--ff461135-15a2-4126-bdd4-9243b4f7849a", "sighting--488063a5-e410-4457-b1f2-dccd22429c1b", "sighting--450e74ce-b8b2-4b80-b130-2b8bf9123970", "sighting--6a4b56ca-d1d6-4ce8-a830-4e3708232c41", "sighting--0897034a-2e69-4e13-ad84-bd9c755f9a46", "sighting--02823554-5c31-4f8a-a397-0d96899a7fe4", "sighting--db27d462-5a9e-4125-a58d-4a69726ea5a3", "sighting--abd4a951-dd72-4f53-bd44-d7993f1d261c", "sighting--f5f5ea38-b356-42ee-9ba3-2f12e67278f1", "sighting--4e166070-2b4b-4d1e-adb3-cb0f81b04d29", "sighting--6e6fb20a-0bb7-4cd1-9456-ff3f823ed963", "sighting--e54745ac-0fce-428b-a1b7-9e690aad8e4a", "sighting--25ab02da-8dfc-4b5c-a830-1452d1684239", "sighting--55e27c7c-3278-4af0-9f72-f06dfc93789c", "sighting--4dbdf4e0-d8f8-47f0-a031-22f5cba52de5", "sighting--e830f87f-79e7-4c5f-8a94-f30f4c723fed", "sighting--edf8e8c7-b574-4757-9bbc-33ef62f23707", "sighting--8d778316-1612-4e4d-9939-a36bf386dea8", "sighting--c359e323-f15c-42c4-8ffc-ac29c17c2c10", "sighting--b5a47c47-2427-40b5-b976-d95c2cd05dd1", "sighting--c678d8e6-ac24-44bb-9634-05c8ef79c173", "sighting--b56d2fea-ef88-4036-a589-e58067a3c974", "sighting--178a9a7e-b116-4248-9984-11d612cf0578", "sighting--00b82b81-68ba-4960-bce6-34b6542151ad", "sighting--52ee9172-5b94-4a4d-9d5d-b2944b7266e2", "sighting--0fb569f6-546c-4929-b518-45e38675ee4f", "sighting--b4764f64-8d28-4993-8d12-2ccbd66f0ef9", "sighting--63643e50-d6cd-4949-abaf-6bc5fa2ea8ee", "sighting--c6070f75-eb42-40a8-a09d-92ce2c90ba45", "sighting--293a0857-5893-453f-af10-bc7ec342d227", "sighting--92806e72-99e1-4292-acf5-a53c285e7f80", "sighting--bb087a6d-1aa3-4892-8811-ac33b23412d0", "sighting--7d92f1a7-8459-4d5e-b10d-c97f278dbb8d", "sighting--c149a595-4471-4cd3-9ce3-9846ccd49f61", "sighting--9d713cda-6320-4323-a3ed-c1643acb662d", "sighting--d8bbc449-532d-408a-9a8e-e7a224fb232d", "sighting--8cda2f3a-fdf0-4f22-bd5a-8370f5740247", "sighting--3d6faf6f-f284-4a1f-b55f-919492aacede", "sighting--635132b5-22eb-4f43-aad0-eda87ab1ceb1", "sighting--ad62a5ad-a24a-4c82-9760-e7fc2b09e5d4", "sighting--42d0cc03-43d0-4a33-8479-cf1704dcbe6c", "sighting--909bc7b2-6884-4d6a-89dd-3d534f0ab48f", "sighting--4065f804-c464-48cc-ba0f-a8fcba5a3344", "sighting--d0c135f3-9f0c-44d4-b4a3-c5d287c62051", "sighting--e8270c83-3607-4927-834f-bad7a6fff65a", "sighting--faf4ce36-3f92-4ea1-b9bd-0be8b1376aa3", "sighting--eb66b52e-b246-4c21-b192-7700aa240d4a", "sighting--8d8028e2-5bc1-487e-92fc-1df823c1fbf6", "sighting--521f1605-c121-4cb1-b0e1-c72743de3b50", "sighting--d6d1b8e5-f231-4110-b266-348fdbe78647", "sighting--54b75554-39a0-4d94-bc92-192c533cab6a", "sighting--6d2025ae-6b0d-495b-a363-37162bc0d417", "sighting--c57486bc-5484-4ccf-98de-d9d2e1d044db", "sighting--310e940f-2ecc-4814-bcdb-b0adedecf88f", "sighting--ffeeb3fd-4589-4c8a-a37f-c0ddb88199fa", "sighting--6cb28bfc-20e5-4259-a9b3-6143be5f1b50", "sighting--34749b84-d2c1-4c40-843d-666385102958", "sighting--d4363f4f-aa83-4ee2-a3ed-6e69315d8175", "sighting--6d32121b-b330-477b-bf9e-797e5535de65", "sighting--2118f646-7f38-4d3e-8636-963fee6758e3", "sighting--7d75cddc-2296-43a6-b7a0-517c0dc4a9b4", "sighting--a1ec6c68-5ab0-4840-a078-120de1b168c7", "sighting--fa360f8b-962d-4522-968c-a102f60dcba5", "sighting--2066ee3d-5d59-4982-a6fe-d3de1856c489", "sighting--887a2bce-3382-413b-ae94-907de7b5df72", "sighting--f5309198-bb2b-45cc-a1cb-ed3003c13359", "sighting--2f713888-2e0b-4c59-921a-6e648069f9a9", "sighting--17d86032-59a5-4ae3-be18-491328768221", "sighting--ce6104ff-1bb9-42eb-b4cb-c39461bc5aba", "sighting--c9bf4e10-a710-4fdf-8adb-d207d362037f", "sighting--89f30f90-b10c-4f31-bc81-106b3b74d886", "sighting--ce8bc80e-e51e-4218-958d-faaceb68f008", "sighting--8879bb28-c106-49ce-925b-32f528c4857d", "sighting--1c1cded4-e6ca-4799-beea-4367691d17a8", "sighting--51ff258b-49bc-493e-a524-11e743ba8d4f", "sighting--853e49cd-bfee-4414-86e5-386f69379a6d", "sighting--cc9188ee-66dc-459b-9f4a-c4708d012c08", "sighting--97e19211-c049-40e4-bc9b-efa6b1eaae6a", "sighting--8bbf1d42-8617-44d6-9cbd-e41fc9bb43a3", "sighting--212bd6dc-648a-4009-b65d-03a9d81ffdf1", "sighting--cb64dc03-ff67-414c-8dfc-596f25fecbef", "sighting--b310955f-2233-45e6-9e3e-566fe17b96d0", "sighting--4ee5af75-eb2f-4a30-9497-4bb17a5030df", "sighting--7544f834-dee7-4530-bc9d-22a4cc4e0f8b", "sighting--83ae0f49-4850-496b-8848-c51dfbde180f", "sighting--e5fbe083-87e7-4cce-89d6-42363935b7d4", "sighting--36bd4cb5-6eb2-4c5f-8506-7c6142d4801a", "sighting--87bd2466-a9d1-48a8-b94c-5bfbc482d592", "sighting--214ab9d5-6773-45e8-9787-7c44eab44df7", "sighting--9995e4ee-d871-4016-b944-56203ace8f80", "sighting--748ce6dd-7f8c-41dd-a34c-3b240a2d8c23", "sighting--c5b5260b-89bd-478b-a812-6b5e5f4a0c9e", "sighting--ec3ff69c-48f0-4d4f-8fa5-69f6951432c5", "sighting--40dbf22a-6bd9-48c0-b48b-c2d1087b80f3", "sighting--2bca2939-2395-42e1-8014-c84d9864feb3", "sighting--d216c10e-59eb-4b2a-9181-ad78292e9c89", "sighting--90eeed37-a0a0-4192-8ffa-be1a950d9476", "sighting--4528874d-1782-42bf-bc8e-03ddbccd10e6", "sighting--ddbf2c80-fc18-4a90-972c-a3aec2822aad", "sighting--cab62f97-edf1-411f-b52a-a5eff461f4cb", "sighting--a027cc26-f580-4d68-b9f1-8ddd83f73d80", "sighting--b9adf7d1-6213-44e6-8c41-087d64393016", "sighting--62850a59-0b32-46f4-b304-800234d458d1", "sighting--b794f76c-2a87-4d93-819a-27f1274d9112", "sighting--d0b2ca88-d1ea-4caa-ab78-b8de9d2fcb5b", "sighting--f38b0ac4-42f5-4507-90f0-ca03b17b2772", "sighting--23274412-088a-4550-b04f-900da93adedf", "sighting--be1c5796-93e8-4233-9bcf-7a863791b8c9", "sighting--91c10098-9c19-4ba3-b4bc-ce1d4d72924b", "sighting--ec564a0f-0aed-4c06-b752-dc6909c9c291", "sighting--90b92d69-f6aa-42b5-9923-634439e0c58a", "sighting--3d95a6a6-e929-4b3b-ba46-abe0a7a5f68a", "sighting--16c730a8-d3fb-4e34-b176-0fe46a6f286d", "sighting--8ac91c3d-3c60-47ca-93b2-5a67c36946ad", "sighting--2eaee352-2301-4632-901c-31f0b404a797", "sighting--2f48dda5-8d26-455b-a40c-21f1c9d44d18", "sighting--a97ef529-8bc4-430e-955b-8876fa87ae04", "sighting--a547e3d9-3bbb-4d47-8734-ada546eb79e9", "sighting--e0496eaf-225d-4747-9ac2-e9106cc62188", "sighting--54cc4ebc-1bb4-4f44-8e45-df9ca43b3675", "sighting--e8fd5a04-1702-4288-8ea8-076cdfa92007", "sighting--371920a6-27cd-4407-98ec-770b55d08492", "sighting--aa3e7fd6-28f0-42d9-a904-0ac115d248d1", "sighting--f43db945-f872-4609-b623-d32a2939818c", "sighting--d4ba6497-dda6-4db0-ab1a-137409fb7d2b", "sighting--df888931-0aab-4179-9224-96f79b819c8c", "sighting--46c4ef2f-bc55-481b-bfad-46fc1a47d02f", "sighting--a912fcc0-63ea-4a9e-ab93-c2492a210077", "sighting--93e25c87-2858-4e7c-a8f9-38704d374434", "sighting--39fac7c3-fe92-48b0-a4bb-007fd6dba6d2", "sighting--15bc4afa-7d26-4150-879a-09fd985fd583", "sighting--5d3eab9d-19dd-49fe-aa3e-626801aae58f", "sighting--32544e96-98c7-487e-add8-e07ccf94397d", "sighting--e23f6899-44be-4af3-8420-fe38b6521caa", "sighting--89b7c865-1b41-444c-abaf-495f2c2f4605", "sighting--42019699-c657-4a99-84fa-c6abb4d3a1aa", "sighting--4cca1a1e-e202-47c6-9353-2617a87ced07", "sighting--714902d0-f966-41f1-b997-22f288a6ac56", "sighting--54d15437-5df1-4e40-9ba4-e19ed710ec2f", "sighting--f8e841c9-cb2f-4fe2-9f85-48e059fe0614", "sighting--5948c5da-22c5-4491-b8c6-740f6b8b6ab7", "sighting--f37a29f4-2cf0-49c9-b3e5-6b750c5d767c", "sighting--a24528bd-a57a-4141-97b1-642583e61273", "sighting--ba4b200b-be2b-4461-b856-55d2fe919256", "sighting--cb2654d2-276f-46f0-a196-18c184e9fb5c", "sighting--d4c0247e-e6f5-49f1-b0f8-e519f7ca295a", "sighting--f4eb2ac6-0325-4030-a316-d7ed06519ceb", "sighting--59a05d6b-60b3-4695-a41b-fb59b700be5e", "sighting--6b2d1c35-8b86-4fbe-a835-2c5c67a1fd36", "sighting--f8b1b150-6070-4ab0-b190-b7e52274ccbe", "sighting--d79537d1-a26a-46ad-942c-6c103779073d", "sighting--95bd287e-da74-406e-b79d-aceaa90fde40", "sighting--59f42d0d-11b8-4545-889e-59c00402e45d", "sighting--57f814a8-b63a-4828-a671-c2cf02ea780f", "sighting--cf2769fd-3552-4671-ae12-821dddea7cdd", "sighting--77426d46-918a-4c7f-8c7a-b63b9c9a5742", "sighting--b9301e4c-480c-4652-a7a1-284e9441e9d4", "sighting--430bfa9a-c3e4-4cc4-bf4e-5108e14e4851", "sighting--3680df36-faae-4594-8066-754b54fd468b", "sighting--f2529d32-36d8-4088-aa5c-c8ff56946cb8", "sighting--7c164c30-57f8-468f-82e4-1325fc57812d", "sighting--0890df15-b6b1-447b-a001-ed9aa5ceb40e", "sighting--b7cbae98-08ee-4300-9ffa-4e47d9a740d3", "sighting--cb008804-0c99-4440-a224-d52dbc552110", "sighting--94c8ce72-2f83-4d05-8ef0-9da4a25b3b5e", "sighting--cf217940-ddbf-496b-b475-d87922e8c52b", "sighting--0f4e6a70-774a-49e3-8357-0cca39a39135", "sighting--8a8663d0-c35d-48e9-a8b3-a79ec724ba06", "sighting--25a51759-e6b7-48b1-bfb5-d111b2dc9377", "sighting--8c108c3d-cba2-445f-af77-464e07a242fc", "sighting--053d7604-70ac-404c-a84a-990394ebbfc2", "sighting--1aaf28a9-74fd-4d52-9b7f-0c208fd65db0", "sighting--e060bc5d-95b2-41db-850c-8224c2f1806d", "sighting--eee309b5-638d-4213-8743-b0ca886cff05", "sighting--30771c01-384a-42dc-8bee-fdc8b697dadc", "sighting--a47b9533-4ab1-4d35-86fa-8f22a7b93de3", "sighting--45226219-a8f3-479b-9e3c-c6a5fc4c6b28", "sighting--0addc08b-5aaf-44c9-b941-42ac66915828", "sighting--8fe3ee07-eec2-410d-b837-357e4f3ae898", "sighting--a8d54ad5-36f7-417e-8b39-5f1f931a469d", "sighting--22bb37c8-c934-4565-9ff2-9b24f922d452", "sighting--ebbfa479-4c09-4d4f-8277-b4a02e8a07d7", "sighting--af7226d0-a0b7-4306-acc0-1f3708cd07b4", "sighting--051c61a4-b455-40ae-ad65-a709c4133016", "sighting--3cb199f1-cd89-4ef3-859a-e929a6e7a8b0", "sighting--7e26cdd6-0f07-430b-a7ea-51dbab892fba", "sighting--5eeb82a0-fa19-4145-8a06-bff8c74df21d", "sighting--0403e079-8592-4565-8cec-5dc7d1307733", "sighting--8f6420e6-5ba5-47c4-916a-9e21a021e03f", "sighting--55204607-44f9-4cf3-a237-53a3e274d991", "sighting--aeb1af4b-9f74-43e6-9aab-9c27c6960745", "sighting--f8c14c38-05c6-4591-9c17-3a86f63483ac", "sighting--63fe75bf-c7fb-487d-8d64-d9c062b77c5c", "sighting--2c8c9497-8993-4a40-a533-437cbbff3a80", "sighting--fcbc7fe4-d69e-422f-8e15-fd7996f12203", "sighting--1c5a71ac-deaa-46b4-9f2f-39583e64910f", "sighting--a3db8432-416d-4e15-8e3d-885f44d0c3c7", "sighting--97893634-5281-4f1e-9fce-82bdb13c07b3", "sighting--9e02e276-156f-445c-922e-8b0b533ae9fc", "sighting--38b04fba-3947-4416-9191-4590cf64bd58", "sighting--93b4f1ab-5b26-464a-a949-3b840a0a6bbd", "sighting--b245942a-48a7-4345-af45-4d4e150c66fd", "sighting--d475532a-55da-489f-9aa1-88aeeba5ed39", "sighting--e33b5910-223e-4cee-bbbe-32958ed81657", "sighting--46cdc615-bb1a-43e6-9bfe-125780264d32", "sighting--1cb8764f-3d8f-4151-983b-e54e258d8f8b", "sighting--d026a272-bd01-4655-8c48-0ba7d5455792", "sighting--9a5b06be-3628-4019-9342-609f9f374bf2", "sighting--f8b3d3c8-398a-4f13-830c-e7dac3f7dfab", "sighting--4b76c0e5-0bb0-419b-b1f9-1fb7129dafe5", "sighting--2fde118d-60c8-4b42-a664-88830b0a6e4f", "sighting--1fc6f99b-b66f-4181-ac15-00ecde4f8cbd", "sighting--6d386f9f-0c8b-418a-95c5-2554b1bee71b", "sighting--876d7ed5-c44e-4147-aa29-4ab0776f5106", "sighting--2403afbb-5afe-478c-8c0a-edd13b69fcb8", "sighting--7bed08c0-f73b-4680-8fd6-081b75221f5e", "sighting--29246f01-d1ab-4408-8b7e-7315d2e3d7e8", "sighting--30120e59-5b3b-428a-864a-5a73012e4916", "sighting--fbf9de71-3d56-4f73-8683-9b6938b64807", "sighting--72c55e86-2ffd-44b4-af7a-5395abb22269", "sighting--db15ca6d-9325-4a7c-a32b-eeedde9d048b", "sighting--d617db6c-b211-46f0-b016-315003a6a8c4", "sighting--006e010b-0fd8-45bc-97cc-27ae8f6d039d", "sighting--a4038fb3-4117-4dd1-9c33-92fc354d4d4e", "sighting--02ba4683-d28d-4faa-a72e-45f716686861", "sighting--ed699bb3-9934-43a6-b49f-1be86a2a1ac8", "sighting--8b4af967-bd5f-46bd-92e4-d158e1b0595a", "sighting--d9102393-8604-4ca0-8aa4-f7098a3c29b2", "sighting--e7716440-28f8-4d6c-8ff1-bf17847d7161", "sighting--89f8760d-a8a9-479c-b4ac-b258aa8f287b", "sighting--28c71c0c-3631-4b7c-a30d-c9d7f8760e0d", "sighting--c5011264-8ba8-4c90-b938-c6fb70ffacc0", "sighting--c0f3ed2e-406f-462c-b332-c27a9db374ad", "sighting--34d80c26-a899-48bf-9bf3-517e8fc5498f", "sighting--8b8e7a5e-6c44-43af-82a3-594409783e03", "sighting--ed001791-8400-4e8d-ba90-9a724aec0e36", "sighting--bf939227-85f3-4bc8-8c24-8d4a32d9d4d8", "sighting--78bb5fd8-3beb-4cb6-aec3-1da2acadd85a", "sighting--b483dc6d-cda2-423d-98dc-982209640ba4", "sighting--b91670d2-1540-4b13-a2a0-21f7ecd49755", "sighting--a089cbbb-91d2-4a4c-bfd7-de78f01530f2", "sighting--39979850-6a56-4511-b6e3-9e20d3e2e325", "sighting--f23051dc-5f4b-4c3e-b818-1b6b542c7c8f", "sighting--d0938050-b094-4c61-9f02-ceef317ef1e2", "sighting--7be98a65-a4e7-48b2-8b41-6b3361b4fc93", "sighting--ce178ae7-95a3-4595-8af3-c39b643ebf1f", "sighting--0145f08a-7b5a-470e-8ea9-ab23e73fa617", "sighting--2e03c153-86ed-48e1-b251-c414c2fdc33a", "sighting--6d853649-d6d9-45b1-ad5d-6306638e03b8", "sighting--768abd15-c9a9-44cf-b26f-4fa6e9234a7f", "sighting--d2bf477e-9448-462e-b364-b06d08972edf", "sighting--883f425b-e169-403c-b7cf-bf85cb35fd41", "sighting--c268ca4a-e9dc-4b0f-b999-5d8ebe48be47", "sighting--c00fb818-e372-418c-8886-3443f2a9da1a", "sighting--444a6e45-1bc9-46b8-8013-be903e7ed70c", "sighting--68a96475-6bc6-4bb7-ab58-ac1edeb6ee2a", "sighting--42ce438b-7ada-4f11-ba3d-047505a490f8", "sighting--bc32cbe5-7449-4632-955e-8e854191f328", "sighting--a51b5643-8c89-4259-80f3-90f2c41768c6", "sighting--ba132789-88dd-42f8-9cd9-9bdae497d599", "sighting--858ca9d9-18e4-40d7-95bc-8051b586012f", "sighting--9af0f1b0-583e-45bc-8363-50f97b4c9652", "sighting--6669c6b2-2d7c-42d8-9bad-efc90e8c3cb6", "sighting--3da5ed31-8601-4d35-af1f-273632d5f6cf", "sighting--14cabebe-fce7-494d-acc9-2555ca0cc8d8", "sighting--0240b04e-0b4d-430e-b362-f58e4a27b513", "sighting--6982446d-da9c-4523-8904-29f9047e414d", "sighting--3fcccfe2-05d3-4517-bccc-2c2e0ad42f89", "sighting--a615f39b-38ca-413e-8cb1-461e9e81a645", "sighting--7a73d31d-efc6-47cd-aaa0-4f03bee3fd4d", "sighting--6db8a845-3a3f-4d79-a7d6-cdada9a15e47", "sighting--66ee36dd-3185-4abc-a668-df79cbd903ac", "sighting--1822311d-9b64-456d-ad02-eaa0eeb1de63", "sighting--239f07a0-bbe4-4f96-aa72-12653b1a6907", "sighting--8a3f3a98-dc82-4b5a-8ae2-718ab385b68c", "sighting--91647616-1470-4cf1-a94b-cc5a24366577", "sighting--37f9d776-9f7b-41cc-b45b-769d5285d905", "sighting--13220e86-49b0-4f95-ab50-36f792e90d5a", "sighting--35d4e532-2978-4cae-806f-abf19a3cd4ac", "sighting--7b310781-e1cc-4d02-acf4-b22c8141df82", "sighting--e9d8a820-594e-4a65-a611-b036888ff410", "sighting--8591e75b-b060-4506-894c-f8ba88639521", "sighting--a443dc40-99cd-4ada-ab99-e5cbbef008cf", "sighting--862c67c0-df57-4b38-9cdc-a462bcc9cbb3", "sighting--3869627c-190a-4705-9052-23f9dca51c00", "sighting--4a750fff-85cd-4a68-9a32-e6f63465665b", "sighting--6246d4f2-6ab6-466b-a050-b28db5e9bdd2", "sighting--e3017136-15cf-40d8-8670-377aba952ee9", "sighting--4314e010-76a1-45e2-8dc1-7678ccd400fb", "sighting--4b407fd3-158f-43d3-b43e-bc5f3b5a5d93", "sighting--0ae861d2-517b-4ed3-a4e3-6654516d75d6", "sighting--41806955-cc38-4f0a-b1be-97a1aa0df2b2", "sighting--87d6e766-07d0-4b6b-b747-56ee625c8be1", "sighting--5c1d9323-8951-445c-8fa9-525cf7b6099e", "sighting--e757dcf5-2e26-43e7-b628-4ccba63337ba", "sighting--b6704e05-016b-4dbf-8148-981d72872a90", "sighting--50329dde-7d7c-4161-98f8-3155338146a4", "sighting--a8c895f6-0eb5-4312-8164-02f06fe78877", "sighting--518bdb46-f513-4da8-bf19-996cbd1fde28", "sighting--d8c21b6f-a3a9-4856-9b06-fd0a85cc8a8d", "sighting--faaecfe7-6040-46d2-b26a-87c1084a182a", "sighting--33a79858-1f0c-426b-aac3-d94efc7766aa", "sighting--4c33789b-d506-4dab-b414-17b000ba5d9b", "sighting--0a37b206-ffe2-4129-9162-f244aee68769", "sighting--1a621675-8659-4f5a-96c8-e904d354bdc5", "sighting--422f04e3-d0cc-4aa0-9c1f-a0ab34a39340", "sighting--06347c7c-db1a-47de-b855-5512b558c98e", "sighting--ecb6304a-1aed-4f84-a0cf-3b98c420e033", "sighting--75828790-53b1-4576-9bac-667bd1ad0930", "sighting--353b664a-57ea-47ef-8813-f6b700d11d29", "sighting--d256e428-cf60-4b77-80c0-a4fb859eec4f", "sighting--9f82e6d1-5fc7-4c7e-90fe-8bd47b224276", "sighting--ed1302f0-6eb1-4ae8-8ca2-01ac94e0a537", "sighting--32cc6e73-00e5-4399-829d-26f900216cbf", "sighting--8a464d28-1302-4579-b176-5da331342614", "sighting--0a50af05-02b5-4390-8e1a-ca5b73cd91e2", "sighting--376efe7c-a459-4d5b-8d39-e745ca3df8a7", "sighting--a7062d02-b40b-4df2-b20d-dde1dad63e02", "sighting--0cd6a2ba-08e6-4bc5-8f69-36aad858c7b8", "sighting--44f2f40f-5056-48ec-b010-56949c683016", "sighting--1cb05aeb-761c-4874-ae31-b44292350dae", "sighting--998c86c6-e64b-4737-a76c-15312056f236", "sighting--f539754e-05cf-489e-b652-124cabb9ed76", "sighting--88ac206a-b564-4403-ac95-8822c9e71ebf", "sighting--e46933e8-3cb0-4fc8-9562-1fee560d46e2", "sighting--3ad9b3f7-0e40-4f39-a1f4-459760eca99c", "sighting--c7edbeab-f964-4bfb-9455-433095cbf68f", "sighting--39ff2648-0ec1-4a4b-b119-43c442ab4138", "sighting--6af8126d-0766-4e05-b8eb-61a71d746c46", "sighting--18795571-1433-43d5-8def-1235f40c2308", "sighting--25b1ff82-c346-44bf-85e8-4253fb54106d", "sighting--a5b49604-82b4-4ebc-a43d-a9ff06cfef71", "sighting--2859cfa7-1530-46b8-a6a1-dc0b5e4728af", "sighting--31a0f1db-a615-4894-b610-f73cd9d3c418", "sighting--4ebda012-8418-4158-8a5e-3b63e4eda141", "sighting--0803c7a0-69f6-4383-960d-417cb1e1cb7b", "sighting--271c5045-950e-478f-9831-0b3b91d7b567", "sighting--f664cb76-9b25-4f9b-980c-0cb39bb81fe7", "sighting--ecdc4962-a171-4232-a4e1-9f2f962328ff", "sighting--2c21c4a7-7257-43eb-bc9d-ee523adf7ae9", "sighting--cb6a4b91-2a1b-4e5b-b134-18d34c94cc64", "sighting--c82650fc-78d4-40af-ac2e-3ad41594104e", "sighting--32d93d93-fdf0-43ac-b6b3-15fc6869cd23", "sighting--324d49b9-e850-4b27-8845-7c4a3afe1709", "sighting--9c557ff3-bdd3-4c5e-a80b-8ad66bfff422", "sighting--6d8abfc8-8ac6-4439-8f58-1421d3492454", "sighting--00ce9ccc-cde2-4f90-9598-d462ec2998b8", "sighting--bb943537-470d-4ab0-8762-aaa161bf1d6e", "sighting--29221655-3269-4540-98f6-9e80223bfc81", "sighting--92b9f579-cf1d-40b1-a13a-79a8d7e31031", "sighting--0b704a7d-2518-4c68-bd99-528ad4433d9a", "sighting--9af003c2-895c-4c88-8217-6996522c6203", "sighting--7bd9dca5-d231-4617-a0db-499fef59303d", "sighting--6d51773f-fa60-4e57-ad2d-536a250dfd7f", "sighting--dcef27bc-8c8d-4ef3-82a8-09bcf8635e92", "sighting--0caeddb4-0cc9-4952-8a6e-5fbb9c515eb2", "sighting--d59ba07c-d677-42c5-99a9-2a10ca4a4ddd", "sighting--a96f0f32-b93d-428b-bcc1-a271a70d48b0", "sighting--315d0e18-e88c-4c57-98b6-9f9d888baa53", "sighting--afdadba3-7dac-4f4d-a499-3c04a9719413", "sighting--d7e159e7-45d0-4ce9-bcd7-7c1ce8253b3f", "sighting--59431f56-393b-452d-a52e-41831705d208", "sighting--48d05091-cf5e-4b1e-b866-ad9219d81a0f", "sighting--12770f93-8577-4392-8393-838058ea34c7", "sighting--671d3dc1-4f9c-4db1-9fc3-197951e935d9", "sighting--c7548dd8-2270-4475-ad7e-060046b60167", "sighting--3776c8b9-539e-4ef8-8800-ea9b36d9aa8e", "sighting--0974f478-b0ce-4a02-af0a-98381ea36a5f", "sighting--feb55be0-7e4b-4dbf-b85a-ce37713dec19", "sighting--df97484d-d8cc-4f69-ac22-ac3f7987f9fd", "sighting--e25ee78d-895b-4e21-9be7-329f19349577", "sighting--30b9e762-b087-410a-b68d-26f573798c61", "sighting--6fc47b61-30d3-43a6-ba14-ad2cd61b5664", "sighting--78f7500c-a404-44c7-8104-52ac74f2f84d", "sighting--123644a1-1a0e-4f92-855e-68b24b457a1a", "sighting--51781eb2-4418-4f5e-92d5-b10ac38a2975", "sighting--5f44ce24-84a5-4d3a-9887-117e795dd147", "sighting--b9423531-51c3-42f5-b5f5-bb2d2b87954c", "sighting--2847b60c-0057-4bdd-8acc-72c6052c854a", "sighting--28386b3b-6638-4bbb-8214-890f3b27d090", "sighting--a7cb81de-42d0-4b59-8691-64b95e62a8de", "sighting--d404298a-7827-4445-8fa5-0aa6d55254a8", "sighting--ae0fdc4d-4777-4f38-8aea-24e2ce3593e6", "sighting--bff8c036-6471-47dc-96ab-e89fedde65f1", "sighting--5a526ccf-54b3-49dc-bada-639dbf1b4c8c", "sighting--6fd605f6-a788-448f-9891-66e96bd1a647", "sighting--404e7165-8ba7-45c6-82b1-548dd21ae712", "sighting--ef6ef5f4-c059-4e6e-b366-fce39a363cb7", "sighting--54234ec3-8632-4151-85c9-ec3df171b87f", "sighting--cad4249d-05f6-40ca-86cc-7607f02ad5b9", "sighting--6dc2c503-dc6d-46d4-801c-7882a80e9612", "sighting--10cc71ab-336c-4fc8-b18a-f877697b5ee2", "sighting--c2c63aac-f370-4abb-83bd-6ffa31b42dd1", "sighting--d6ca385d-255e-454d-be85-1f7fb40c151f", "sighting--bd194b94-a84f-4ad6-8336-eed579e54890", "sighting--480f7c7d-ef7e-4126-8a26-acdc303ff971", "sighting--be9beca9-8459-4855-af79-04b3d650860a", "sighting--2b1092ae-8455-401b-8846-5789521ffe4e", "sighting--fe1eccb5-35aa-4309-932f-c2032c4343c0", "sighting--6687933a-48d2-448a-9883-72aeaa7a1cf1", "sighting--04ba48d0-d38a-431d-9bfb-912ad6304978", "sighting--1cbe5750-e4bf-4a85-9ab5-ef50b2910627", "sighting--ef18fa47-5069-4592-ac7c-733f58324d65", "sighting--44537029-258e-447b-8f30-3421df83c94f", "sighting--808ac86b-62a1-4f67-9e34-59f568e7be37", "sighting--bb273eb5-d764-4591-88c5-2c5234c47228", "sighting--e070c791-ae13-4de2-9a1d-2f37c193377e", "sighting--e1da6a05-4d77-4cb9-971b-47086e7bad28", "sighting--8d762eef-8aaf-4abb-9132-c08944054a34", "sighting--506dd577-5af9-44a2-bcb9-396aba84b251", "sighting--50329f30-ac2b-4bc3-8cf9-79663998f3cf", "sighting--298383ba-3911-40da-a50d-152de5edd1ad", "sighting--1b211b9f-b5b2-495e-b9ef-60d1ae33fb3e", "sighting--1b2c8e52-7811-43b1-ba55-6f96c3e96e48", "sighting--7cdb4188-8029-4b44-b806-4a370b17cffe", "sighting--b9998753-7c5d-44c8-b28b-ac487ce896fc", "sighting--c130fbb5-fc80-41f5-9dd4-24ed7fc8e065", "sighting--005c3ad4-dc1c-4294-91ae-dde4cb7a6270", "sighting--1c7845c2-1e00-4436-93db-5b0fd8fe33bb", "sighting--e7cd89bd-a13c-4feb-8ad9-d3761ec42532", "sighting--f2f4fca3-18a6-4da7-8f2f-bf47cc9ab49d", "sighting--1e87f4b9-1d38-43e8-b126-0b79ef56914d", "sighting--5333f959-1529-4dc6-aab9-46f06fb2c592", "sighting--96aab61d-f682-44a3-bd36-abb78e389279", "sighting--f081a046-5072-4156-aa1f-2775109ef323", "sighting--38b5d749-ffd1-4a2e-b7d0-7455c6e98161", "sighting--620b1adf-4d24-4451-accf-e784e5fef9a8", "sighting--8ff64bc4-f442-4b66-8a81-1f8f2d5cec4b", "sighting--a8c4a59b-e8c8-47dd-ac1b-cd3f98490228", "sighting--7ff2ee95-a95e-4f15-8b4d-50e3ecadea16", "sighting--31349198-8069-4c91-a95c-f9975c5fa8c8", "sighting--cefe02dd-fa3c-48f4-8c53-4130e70f0459", "sighting--407eed6f-0ed7-4bb5-9629-78b9611bf26a", "sighting--f9b04a7d-b7a0-4490-ada2-3ba6563043d0", "sighting--77bc6c3b-b310-49a4-a69b-52c695ca8a74", "sighting--a28b29ba-4531-43c2-8d62-9371872dd403", "sighting--bb6cf72a-9513-4b56-80c6-f4ddaf24027e", "sighting--6d3660e1-ffe8-4d92-a8d1-9c2148d945e8", "sighting--2b329c42-6592-4103-8a29-95de7e1aef42", "sighting--a47677f3-17c6-4165-a6ca-dbd9f8ef29a2", "sighting--e781190d-257d-4b04-9953-bda7e3a801f2", "sighting--3f73a6c2-9608-45e2-808e-355d058ee709", "sighting--54d0af15-0ad3-4944-8e00-bfb5080410e4", "sighting--bb7cc98c-6603-4e87-a27d-56e3d53585be", "sighting--bb850c9f-4a00-4084-b95b-beb52e0684be", "sighting--68f072de-1c54-48c9-850e-d2d02f4721c7", "sighting--1101a979-0de1-4fbb-9a80-ecba116baa75", "sighting--3bd0fcb4-7d2c-4cb3-a246-13407ca3dfe6", "sighting--00244262-8e4a-4ed9-b6c1-5667a0114c50", "sighting--6d6cbbc5-876b-47ec-ad82-ed7bbae5dfa6", "sighting--0efec756-76cd-4c06-8d9d-03620791005a", "sighting--baa39fa5-ea65-4ade-8c95-affd0b8ce266", "sighting--664627d5-29a1-40c2-aa35-72ea86e71526", "sighting--44efb17e-5bae-462d-920d-0fb102e6b1fd", "sighting--82e807d9-1d6d-4489-b2ce-b21eb8320963", "sighting--7a367ea0-fdf2-4f03-8e6d-ef0e58d20a86", "sighting--945cc5e2-853b-4167-a6dd-7a4eaf66f094", "sighting--cf808454-604a-494e-b291-704b0cfb5230", "sighting--3247c46b-4cd6-4063-b80a-97b9e7330ffa", "sighting--93a0fdd0-222a-41b2-a2b6-5c02de117046", "sighting--234053d7-a451-49bc-9a3a-d23c0bb0b56e", "sighting--75794d71-5a74-4bad-9da2-041f3bb7412c", "sighting--f8559763-fa8b-4020-97a6-89233c0bacb4", "sighting--83a58653-0978-4136-b53b-3fd890f34638", "sighting--1707c2cf-e3f1-4c35-9c7c-5865e45f8296", "sighting--6d2e8c49-a3ba-42f3-9ed2-219fcc58b46c", "sighting--ed9a6843-c3ea-46c3-ad7b-00223d535060", "sighting--173ec675-28e1-4b21-84f7-51dc26aaf63b", "sighting--62d132c7-b123-4d21-b14b-e6d21fe8fddb", "sighting--ef3b506c-1e73-4423-aba0-c9f75cfad5c1", "sighting--e76ae5ee-79df-49ae-86d8-e683286b4b70", "sighting--cfe0b25c-e79c-4a13-8db7-1269155ee1a2", "sighting--08ad700a-18ea-4520-8594-b13bcef347a2", "sighting--df75e0c4-1adb-49c1-9508-78c6f95677e4", "sighting--c38999db-6b90-47e9-8ebb-03c6bf55fdd6", "sighting--552ead25-7ab5-457a-9dca-3e0ce922d0d9", "sighting--e1858ba9-81db-407d-aa7e-5ba35918a4b2", "sighting--775469aa-80f1-4b06-b96f-0bebbc90d1ef", "sighting--3c8287d3-d7bc-417f-b1f5-38acd4711b62", "sighting--a8c6700e-563e-4684-ac82-53e8865ed2b4", "sighting--0fd57aeb-1258-49e4-9978-648e059adf19", "sighting--4727afd3-b6ac-4d33-88a6-add44ee284dc", "sighting--8e22f091-ad32-4149-8bea-3d831eb3e6c6", "sighting--c079e71d-966d-4068-98c2-a471204f295d", "sighting--03e684de-a80a-4dd2-bd6a-d89732d5b47f", "sighting--3d90b528-60ca-4818-afb4-4e3ce7aa8cd1", "sighting--81b1cf22-fc75-4948-878b-36c3c4363039", "sighting--ed6d8170-f47c-40ea-845d-3c3f76c2b2d4", "sighting--888fd6b8-60cd-444e-9608-17638f2e0a3e", "sighting--6dde188b-f3cd-4ba7-84f7-17b99dd117da", "sighting--95e965ac-9339-4f74-825a-c86594ae663b", "sighting--bd042e0f-191f-4239-979f-948f7bcdd927", "sighting--f7f93057-54f5-4cf2-97eb-2684457a7ace", "sighting--1b729d01-9789-4712-950a-85137299eb64", "sighting--a381a155-e6d1-44c1-a12f-d1542d3c50b1", "sighting--9175521b-411d-4f70-9780-7e1dbe7f11dc", "sighting--006e7d05-f240-4444-9f76-2685f191acea", "sighting--8095bbb7-e2a5-41c3-aa48-1761861178a9", "sighting--d058489b-c1b0-4d0a-9267-8228d2925788", "sighting--4a4ca03d-279d-49c5-a33a-8dc0e79c8468", "sighting--68e173db-585e-4204-9108-131d98c37d32", "sighting--76a8b11f-d7a9-4c89-b1d7-e14bbb3b3ec2", "sighting--68f28743-a88d-4fb2-956f-cb95fd09ff4d", "sighting--d31ce70e-548b-4938-b0aa-f60d4095b0da", "sighting--c0b86f97-a7ac-4afb-8bbc-3f813c9b96ed", "sighting--458ceb37-b6ca-4a1a-8bf2-9c1d918a14f1", "sighting--48539f77-ab26-4dc2-b1f0-a361e0387043", "sighting--62e28e98-8994-4eac-8ca6-ce8aab7282f1", "sighting--0152454f-d567-4138-af4f-cd07f4bcd4db", "sighting--5b4e0dc2-533f-4b1c-84f0-c155fd7fbda4", "sighting--3e450f75-8e9a-4d0e-8347-2a6da10c7ffa", "sighting--8e6bd8b9-3688-4359-91f4-365a927ade7a", "sighting--77df8d4a-bf36-4944-b199-d369ec432227", "sighting--8d03fb85-30d0-4c8c-ab3e-12232901d7a0", "sighting--f8bcfcd4-e22a-4e1b-8892-1759a0ff241d", "sighting--fab4ba53-f321-4ec0-96a8-689a85b62dfa", "sighting--088ac5e9-ea11-4ccd-b103-b5dd7d4be488", "sighting--96b38710-9b20-4876-acc4-cd77863ef02d", "sighting--58dc716f-6e17-42a9-804b-7524d6b3f2ef", "sighting--48651f56-2545-4787-8041-3b188054bf86", "sighting--acbffd4d-eea2-47fd-b4fb-96fc4f296aec", "sighting--fbb63eba-8885-4297-9fe6-53ea64f658c1", "sighting--4a99c943-f30e-4c1d-b5fd-c49495b96944", "sighting--b64ac7a8-fa68-48b3-81c6-df7b8dd9401a", "sighting--08052818-51cd-4584-9168-fff53aa38587", "sighting--551a28d1-e720-4778-8ae1-d9b80c361f02", "sighting--375f7e4e-a8d3-427c-8f10-b260966f2d2b", "sighting--625bbb29-1e88-442a-a208-76ce55be0164", "sighting--4ff03829-4217-4017-bb0d-805cf32d3cdf", "sighting--8c49c174-5148-4237-b0b6-193a2f6406df", "sighting--40f1c120-f269-485a-906d-1d6856ab816c", "sighting--3494edf8-b7fd-4f80-9e13-45a18978bb19", "sighting--08c2ef2c-b387-46e2-848c-40e0deb9bb6c", "sighting--19a69a4c-0453-4a35-9b21-ff2bb2d37926", "sighting--e1656832-b2ed-4107-a1bb-0e33d900fc73", "sighting--98416e79-5d70-41f1-83d6-ae05e3598a41", "sighting--7fbef094-4a18-46fc-9398-cf4d2162615a", "sighting--b9af691b-b122-4032-bac7-2848199120fc", "sighting--ad89b8d3-3a4e-4ae5-857b-fbdb58062d34", "sighting--845c77c6-915a-4f64-9b46-9d7c6f2ea0cf", "sighting--33a783c5-9fe1-49f9-9417-c94da2302d95", "sighting--a8cd192c-552e-4db9-a335-bbf3970036d6", "sighting--aab7667a-c3e2-47a6-977b-d5513bb6194d", "sighting--a141b2dd-9f18-43be-92e4-d85ce33a37a3", "sighting--3e77fc61-b3d3-400e-ad1f-43cda528c049", "sighting--32c81d26-a547-4e2f-b92d-a53601ee10b4", "sighting--d4d1939a-4251-4fdf-ac8b-e0745a7c9990", "sighting--a18854f5-0e77-4c65-9138-63523981a519", "sighting--0412de67-6552-4f04-8e28-c452987c324b", "sighting--6242a605-48ec-4740-8305-f947392358a9", "sighting--2d3a9c67-b147-4b1e-ac49-cae054dd50ab", "sighting--f58a7a48-0764-43a4-a36c-dce4b1b5a404", "sighting--c8508f74-8355-4682-a6cb-7f9bb520196d", "sighting--d974f2af-4b57-4ae9-a513-140cfc5cef34", "sighting--48bb3936-19f8-4f36-8dfe-124daf701090", "sighting--10d7096b-69ee-4939-8f9e-ad2d00220c6e", "sighting--fef3c6cf-53e6-4320-a531-1d84183019f0", "sighting--3c7fe4ac-1b84-41ee-a2c5-b14f57cd28c5", "sighting--f883c6c8-a90a-40d9-8c32-f113d25d692a", "sighting--05fb62e1-fff6-4150-b61a-da5364328ac0", "sighting--cb4250cf-420d-4f43-9bfc-5791fc5770d5", "sighting--b661f32c-f6c6-458b-b005-2962b3d8fb9a", "sighting--820352b4-3c46-4bb3-8c67-51acf4f137e0", "sighting--429c6c87-d72e-4fe1-81b3-58dba3369f17", "sighting--cbc6fd3b-e05f-408c-a6f6-3e1c016b206a", "sighting--93f997e1-ad6d-4596-98e3-c16ba473b26e", "sighting--5624822d-bdac-4302-81ce-4ab057ebc34d", "sighting--d01b3aa2-fb02-4f50-b7f4-e70691af72e3", "sighting--747417b5-a52b-4a64-ae85-ef86b2de34a0", "sighting--8611c242-830b-4523-8777-b86710562452", "sighting--1eb4569d-fe1c-4cbd-86d6-5053ba9e0ff5", "sighting--276b943e-f72a-49ed-8310-2a3327ca0b93", "sighting--54af6567-dcb6-4ea6-b6a6-7d90512c198d", "sighting--31a5bd93-8cc0-4e11-8e39-1e5106063bd7", "sighting--880d6370-a171-4d54-baa6-0d49778ca78b", "sighting--5dadfcfb-489b-42da-9056-f0ecdd23f2e0", "sighting--53d45f08-eba4-4435-a28c-565a607e4e91", "sighting--adc8cbff-0548-4ca4-8a34-f3925e47708e", "sighting--e14462ee-bfe8-4da0-b6cf-e05c5ee9acf1", "sighting--cb149977-ae03-46c3-955b-85cafab574c5", "sighting--d0d43ed0-a68a-4232-8bfd-f95ac95d3dc7", "sighting--a670bda2-e01c-403c-9070-4af50e6f466a", "sighting--675d873d-fe5e-4dac-875a-fe8370ad8047", "sighting--83c947bb-ae9c-43b7-b881-cb6767e12d55", "sighting--47d800b5-eae6-4bb3-9fe7-d04235ea349d", "sighting--534c2d7f-c02c-4b4c-8b1a-09b17377f79f", "sighting--f4f8df78-ba81-4b94-88af-6f85ac281709", "sighting--3ee376d8-c412-44b3-b272-65b4be51c7bd", "sighting--90507518-5232-4645-afda-4c544e53a2a8", "sighting--7461a087-64f1-4eb9-9c17-dbd5f541271f", "sighting--6f82e4f9-566e-4b19-88a0-08e252c13959", "sighting--aa6ec893-163e-4a04-8297-b4842c321bc9", "sighting--2a2ad87f-1a47-4d86-bb8f-550be785280f", "sighting--1d501ffa-589c-44ea-b601-61f712d2f49b", "sighting--f230f5e6-67d7-4540-8d1e-0159e681e9f1", "sighting--888645ac-6e8a-435a-91bc-f9d7d8107116", "sighting--483798f0-4d19-4f16-b349-e73b23143f5c", "sighting--ff06095d-94dc-4f65-887e-6b796a31f4a1", "sighting--a9814302-3473-4f90-b019-855b88e67de8", "sighting--93be8818-0ba0-4b10-aa93-86848430c83c", "sighting--ad91ae84-a3a7-4dda-be5d-af28088ce492", "sighting--a15c7a26-f50b-4c78-996d-9dfa3bdf10bb", "sighting--33007e08-29ff-4147-8161-8b1b7852b409", "sighting--242b8b12-5236-4702-af80-f47d7b98c1ef", "sighting--5993bc03-0047-4780-a596-7c958931f55e", "sighting--74da6bad-a4bc-43c9-839a-054ad8aa9937", "sighting--b20193d7-c1bd-456c-9a37-e334fa4fcdd8", "sighting--0bf95728-edb1-46db-926c-1ebfedf27c5d", "sighting--cd33a18a-3e31-455c-b281-06fbe677975f", "sighting--37b422dc-227a-45e5-8541-0651995f3639", "sighting--41e4fc71-dacd-4871-8a5e-2d5c1444994f", "sighting--60dece29-ecf8-48fe-b592-33218b581eaf", "sighting--2a8b9fb6-e811-494a-83cb-66e2576ad79a", "sighting--c344f2c2-a40c-44fa-9006-bff59863c475", "sighting--a916489d-5615-4157-ad06-10c3f0698a76", "sighting--9ab5d0d0-ecc3-4f25-92cd-01a195248e4a", "sighting--fe8cb965-a0ec-4ce0-a7a6-56edb1dc3421", "sighting--f7eb198d-bea0-4b83-a5cc-ea310c82656d", "sighting--1512f95d-3403-42a7-8026-6a2e76e38f93", "sighting--0b99b1a2-a6f4-49d4-aae6-74145abf1fb3", "sighting--871b7406-6171-4a6d-9295-43e41ca59aaa", "sighting--6a5eebb1-4258-435f-bc82-9ff8f52904ce", "sighting--094e7b67-a07b-4f61-adcf-62ec16ea66d7", "sighting--ab153bda-44a0-4ab3-9fc2-09afaf38756a", "sighting--7a989188-cfe3-49b6-831b-d0a3f523bf47", "sighting--2920df24-d14a-4090-b084-d7c1a39ff46e", "sighting--4549b9fc-46a8-4293-9e40-29cbd8b8199c", "sighting--b518f0d6-06a7-45e9-8073-d75c5947a4fd", "sighting--2a8957f2-4185-4116-ac89-ed711abf3976", "sighting--634c304d-fe1d-4112-ad64-92138bc06c44", "sighting--93a52c5d-5ef8-4c1d-b5e7-0968177d5069", "sighting--862e4084-a30b-45ca-be51-495cb6be8a70", "sighting--a68f2199-bde1-48e4-8b38-ca448fece273", "sighting--62a256b6-eb8d-44a9-ad05-0eaa094f2bc6", "sighting--cac498fd-4463-44e8-852b-1cf57328a100", "sighting--ce5b877d-11bc-4ac2-9b68-5551ed0e87fe", "sighting--622b7986-abf9-4b09-a420-d06dbb5c17ab", "sighting--365d8f09-84f6-4a7d-852d-bdd468dc40ad", "sighting--3bf789a8-9717-4a1e-a284-273eb138d4a4", "sighting--f8efb326-de23-4814-9acf-bd31c4cf76fc", "sighting--425617b8-c4b1-49d0-b669-4f1dd050b8b7", "sighting--858d0eff-1233-450b-b5e2-15ef4b269b20", "sighting--6a774787-7fb1-4e6d-bc08-0d4146f87e1a", "sighting--a11d3925-2b82-463f-b69a-f1f29771309f", "sighting--3eb420bb-0769-4da6-9a18-6c99e3b653a8", "sighting--9f502059-756f-41e3-90cc-38f264bedc16", "sighting--bab6697c-eca6-4502-8ad4-a500382ea174", "sighting--214f3d6c-f3fd-4514-860a-ca879dfa6e58", "sighting--fec8059b-5cc4-4ea9-a608-5790514b36aa", "sighting--b40cb0e5-25f6-4664-b114-9f203f0b1723", "sighting--62929e76-3644-4310-8f85-7365d7244e5a", "sighting--368c6306-ee59-4c04-bb1f-502e948536cd", "sighting--aba41d9f-bf08-40d7-b48b-88b4ded04862", "sighting--3f66e22f-6c6b-4328-b08b-b57cb292b719", "sighting--fa841c74-50d3-437e-85aa-42f77280dd5d", "sighting--123d7118-f2f1-4efc-8094-29213f7eccb7", "sighting--744ee29c-4eab-4ea4-83d7-c65f658567ef", "sighting--6d826fd1-c81c-41bc-bf73-00887ad112cc", "sighting--9aa7504a-7834-4266-bc7a-51432195c383", "sighting--20d46354-862b-4ffa-9287-76ba295baa06", "sighting--a6873e40-cd03-4492-9a91-d64519ba81c8", "sighting--e36d1b3d-9f93-4c6b-a5bd-1f59529e5106", "sighting--628ddac2-5485-4f12-a616-e0bb0b0a558a", "sighting--f9dfdb01-5631-4ddb-8c96-d1c6d52acfaf", "sighting--3c0aabab-253a-49e2-9cb7-522c2ba01699", "sighting--405f4c21-48a9-49b5-b399-288d51995456", "sighting--8d384ab5-f1c5-4f9a-a4a4-e6415eee8268", "sighting--4c1fb3d9-5db1-4330-a6f3-6733d46c3711", "sighting--90487dbd-9342-4658-af8d-c7fb4c1145bb", "sighting--b876d6de-398f-43c3-a428-07e73944231b", "sighting--53f00759-452e-471b-b434-d4c4a8bd8f29", "sighting--19dcd9ce-4abb-4aa2-85d9-baab9c9b6a07", "sighting--33210cf8-cad0-4ab6-8e27-757ee7565bd7", "sighting--4393655f-a2ed-4465-8331-476525994ffa", "sighting--8bc6b9c6-74c5-4b5a-a768-9db350c15c28", "sighting--12d77b02-e922-4f03-b708-2ccbe507d592", "sighting--254abd2c-a2fd-406b-b85b-0f8a2bf712e6", "sighting--40d466e5-b329-49c0-b531-a878264df9c8", "sighting--76c3702c-f634-49c9-8a3d-ee38a4603f7e", "sighting--acabd9ef-1cdb-4c8c-bfbf-a07fb5a87339", "sighting--635df5ee-6ebb-4857-8350-ee1803825ecd", "sighting--67152811-f73a-4a04-8f4e-c3592613bf82", "sighting--9ce8eb31-44a8-422c-a8e6-66ed6d3d4240", "sighting--ef5d8c8c-7c53-4bd8-b74a-473165bda44d", "sighting--12b390cf-ba21-43ad-938c-356a57eeb1c0", "sighting--0eeb8f7d-4cf0-4c78-87ee-5cd8457293a6", "sighting--48669ea1-e6ae-40d4-b1cd-d68ca0b55d84", "sighting--0a825be6-9377-476d-a3f9-5edf65176aa8", "sighting--28814593-d214-4a8f-84f8-ab90b240d22d", "sighting--28323874-cbba-41aa-9758-e0c8aaee678a", "sighting--e9c4cb95-39a5-4818-8f47-355d4196ccb6", "sighting--973b0a95-f026-4613-8956-24a8495cfabf", "sighting--801bb5a4-d33e-46ce-9d4e-1ac890193073", "sighting--1f118da4-aafb-4600-a99d-8de2dfd75ac9", "sighting--013c8c07-8aa8-409f-83a3-3dfca53b7055", "sighting--2c8fad0d-24f6-4983-993e-f0c4dc1b65b7", "sighting--592809ec-d66f-46e8-a853-891c13a24de3", "sighting--1c256802-2ccb-4bb0-89f4-eb619cda38ce", "sighting--06792a39-ee21-432e-96e4-6576637eba78", "sighting--dbcb2c81-cf34-4376-b8d4-86b59e444aa2", "sighting--fe72ce78-5d0e-41f5-b8f5-00e4063b19c4", "sighting--1d872d06-8104-4824-890f-b05955030f5f", "sighting--b4e7b12d-9524-4a85-a88f-c7f73e9e8225", "sighting--cec18a45-b1cc-46d9-86de-1566b7094319", "sighting--ed5d6653-2a65-4825-9b07-53846de77803", "sighting--ab6b4708-c61d-4ae9-bfd3-b0b710212a50", "sighting--e41e6dd2-5a31-4376-949d-32a1986c3f73", "sighting--8a07b434-74fe-4504-abef-2e5ebe84da2c", "sighting--4620d1d5-40e5-4cb8-a353-c44ed0f8e502", "sighting--f7616133-9b33-4043-8477-1fab48368c61", "sighting--9d66503d-ebb2-4823-907a-7b87dd8c5cb4", "sighting--2c5e847a-8127-4a30-a1a2-05fcc52b8234", "sighting--0068cc2c-c966-48db-80d8-60f3b0eb0b9b", "sighting--2cb1ad19-1692-4574-9de7-b92d2c3f1e8a", "sighting--095b8396-d4f9-4ce1-bd58-c6c8c226f616", "sighting--f76b26f5-7dc0-49cc-8090-10ea284b9a26", "sighting--bf325073-168b-4714-89c6-03832da846ba", "sighting--525f93f3-3a6f-4385-b932-da03961c5958", "sighting--f1e1c5b1-0090-4f35-bffd-896c95be31be", "sighting--56121a59-ae04-4365-b1b7-b4a0ae80b08b", "sighting--ddbd4859-7a7d-440d-b1f7-5050fa887d53", "sighting--efb2977d-2252-4061-9e73-353fa758a0cd", "sighting--851aac41-9e0b-4da8-ab68-a031f03e4218", "sighting--65ec5a13-c783-4416-b8b6-e271cf93f7a7", "sighting--c2541cd9-0f11-4acd-aeff-8ff662ed1a9d", "sighting--a514b11c-01dc-42ea-9015-62677b1bcc00", "sighting--515e0701-5e02-4af3-a498-e7e0392dde6e", "sighting--7313751c-4239-4561-9b57-cf060957dd60", "sighting--a81a0c9d-aed0-4477-8d78-8c9cdd57eb0a", "sighting--c3c3b024-1082-454e-acb1-35f3abf0e079", "sighting--d7041327-e3c5-4fdb-8678-1c79d06f1f9a", "sighting--61bcfaa6-f7f1-4b0c-bcf8-309945867076", "sighting--ea2e63c0-311b-4e9f-943d-0dc927d7d638", "sighting--7975599b-de21-425a-bfe6-cbda63edb858", "sighting--f009664a-7b8f-4ba7-b0b9-970ddaabad91", "sighting--ff0bbdca-ab94-47f9-b3ec-dc25c6009815", "sighting--8a70dde7-402f-4c81-9dc5-2ad27200c2da", "sighting--b4a285fe-8a67-44f9-987b-2219d0779588", "sighting--97ffd8c2-e67f-445b-b004-97bcf9cdb7b9", "sighting--ea41255d-3c66-4fe7-9b65-560c103868ee", "sighting--b4c832ab-d676-4fbf-806a-a2ec1c312060", "sighting--7f916f68-0b67-49c2-8578-1e5b93b62eb8", "sighting--f66d42de-50ae-48c7-a42b-39449ed44044", "sighting--720d260c-346c-41e5-a1df-31c5a00c4d5a", "sighting--873b5c56-0e0c-4953-8150-5aed9cf35c49", "sighting--9a66ecd1-73cf-4dc8-8445-78256c5fb691", "sighting--f4a25d82-7f8b-4f5e-8a83-4f65c378ee19", "sighting--734daf41-5f08-47d8-95d1-aa0dd3406400", "sighting--2f26abe6-c020-46d9-9d09-3ea3317c0620", "sighting--3f36e6c8-d9a4-4460-b591-0f9409df8011", "sighting--34dfee9d-99a3-4cae-ab93-20139f5f7c8f", "sighting--742ec678-e0f3-4ff6-9d64-6e12abcfdad7", "sighting--45d2b505-adaf-443c-b78d-a27b541ec978", "sighting--24d99e63-609a-4c9f-a280-8aef2b23e0ce", "sighting--3e56df51-d514-4678-9205-9ae94ad1dcb4", "sighting--9e205bc3-389e-4273-bab3-086a30f39d6a", "sighting--a2a14025-da1f-4db5-b0e6-a368bd4efc0b", "sighting--cacf6424-093d-4356-906c-8c991ab117f8", "sighting--6ff97f60-1c7a-4e98-9eda-d9611e3aae87", "sighting--b16290d4-ae06-4855-9d65-d318a5fbea4a", "sighting--31ebec68-849b-4c74-94f1-f0e3c56a78ca", "sighting--26f4c638-d378-473e-9fed-a930b0a38088", "sighting--68fec8aa-6423-4a71-963c-cadf4299755e", "sighting--5fbabbca-d70c-4412-b409-97ba1f6ad5c8", "sighting--7a2c719c-5d70-4d0b-9799-b9404c919b1b", "sighting--e765be36-977b-4237-9ba1-8cd74bfb89a4", "sighting--6abc7a1e-b3da-4ffa-890e-7a1e019e40c7", "sighting--74a89cfe-d799-4c87-bc8f-52449fe0478c", "sighting--ec89c837-1816-44df-b9a0-137029775287", "sighting--c6d9a27b-f7ee-4f43-b95e-8ba7943908f4", "sighting--c6390b72-1c9e-43fe-abaa-26b2ff4f3d73", "sighting--f2b2729b-ced0-44cc-943e-82a6a0847b36", "sighting--a21d24c1-fdc0-40c2-aaf6-8a7cf7f1d44a", "sighting--ec791b62-81e1-4083-bb45-7e777726db41", "sighting--4afc3898-c088-4749-af15-1fd10417e210", "sighting--e0718b6e-3bcd-4785-a7a5-fa583aed9689", "sighting--48472ab9-c9c9-42c9-831b-ff5c0e3d8615", "sighting--8a42a2ca-4a8e-409f-80e9-5b7f122f16a6", "sighting--47a64c83-6235-4552-8218-0af246836c3f", "sighting--f95566dd-a5f1-4075-8f21-942b2b39c7c1", "sighting--615a40ca-e41b-472a-bb47-304332fe54ae", "sighting--cbd6dfee-3bd8-4f3d-ac0d-e528de646514", "sighting--10975255-4050-4659-857e-f9b102c04c94", "sighting--3bbd7858-456b-4e8c-8592-96f022bdabe4", "sighting--179993fe-0520-44ae-b719-d8cc56ba4b66", "sighting--f52630bb-45e1-409f-a675-26e5e2a47fe1", "sighting--81ecff10-612c-427b-bfde-77681d5707ba", "sighting--d420b9ec-c78e-4d52-a3fb-b56f5b3a2c40", "sighting--74a46e4a-1abc-4886-a5fb-ccff0aa57801", "sighting--f0dec410-df3d-4ad5-becb-7b9007d0851f", "sighting--2828259c-9e3f-4ebc-95d5-9f91e5054ec7", "sighting--e2097995-5e15-48a7-8fe9-f9764c7f47f9", "sighting--488c8508-a1ed-427e-b2f8-87e3f8a28c10", "sighting--4121bf1b-60b3-4415-afb5-ff92c8385092", "sighting--71b4af41-99a8-4a6d-bfce-fe6f37191483", "sighting--d8d3c40d-e6c6-47fc-9228-f6ebcb26ed76", "sighting--e1e40036-bbbb-4aff-9343-d2e38afdeb26", "sighting--866b7a66-72d7-47f5-9105-45dcc738b17f", "sighting--4c59dd7d-867b-4190-9598-5e7d5abc146a", "sighting--6e29db3d-48fd-4eb6-b0be-a45b4c449a94", "sighting--bc63e3b5-fbf8-4336-827c-3643afec3970", "sighting--6e7a696e-f40b-43cc-b7e1-a340a2672f30", "sighting--02b29bc7-1262-459d-b98a-43f855abd9c6", "sighting--8f9f5227-5b16-4af5-b615-ce1bdba3dc4c", "sighting--218ad1ef-75b0-4b98-a12a-4ecb8aebc56c", "sighting--a80a8610-bc59-469a-af80-cf66abca5382", "sighting--be619461-2cc7-4d92-b641-fbd10a261274", "sighting--afef720e-3bcd-408c-b627-0dfabf5054be", "sighting--39bfee18-384f-413e-8463-f61472525fd6", "sighting--05145edd-bffa-4475-855f-a25b83489db1", "sighting--0ad25ab5-ba23-4007-aac4-3861fa12cc27", "sighting--32300ab6-9997-49e5-8c92-6e9ef35c48d0", "sighting--64fa3472-509c-4a68-979c-7b0452f10448", "sighting--272e240f-5fe5-459b-a7fe-ae7d49ac1753", "sighting--e700f0b0-33cb-4244-b947-16bf34dd1be8", "sighting--5dbf621a-c492-4da7-85d3-cb902ca9f12b", "sighting--ad50d92c-5632-4da3-94ca-390fee4b331c", "sighting--d3be64e3-a1c0-4b53-ac84-9bc73a175116", "sighting--dd41766f-0e50-40a7-8c2e-66ae2ed1e15c", "sighting--159f4c9c-d349-49fa-998c-a67d96a5b141", "sighting--93acb472-c826-4bef-a095-e209eee2aa09", "sighting--a9dd6bf2-9780-4d69-8752-0e7932305d41", "sighting--8be76868-79fd-4340-bcbf-37bf8be7eeb9", "sighting--a0008cbf-d1d8-4f0e-844d-aee5d7c9d986", "sighting--63c94809-aa8e-441a-ba7c-842493f289ee", "sighting--12ceff68-fbf5-428f-b30f-135eff1242f7", "sighting--4e229ac0-65c4-40ac-958d-a3c12328f1e5", "sighting--0a388587-861d-4311-b513-6b91980f212c", "sighting--9c68f7b4-bcd3-4538-860a-c1ab34fe8609", "sighting--945b00c7-cf78-4cdb-b86b-708ce67a20eb", "sighting--7065f750-a259-4733-9a0e-af8b33bf44fd", "sighting--60a12303-35a8-4a40-999d-ae48c68ee873", "sighting--87eab5e7-a128-4246-a566-81abcf17c0cc", "sighting--f334d704-6178-48ea-a8b0-f6107f0eaccf", "sighting--59eab918-dcc1-4f0a-8b44-75be3f837c42", "sighting--878b2cf6-6fef-43a6-b91c-c2b54788353d", "sighting--175ea630-0e1f-490b-81d8-0e7e6abc22db", "sighting--cfa168a3-b4fc-4488-bbbb-9c2c94fb6c52", "sighting--81300026-8ef5-48f8-87db-6f51a9f69780", "sighting--fa6d52aa-9248-4c76-b326-24851d925013", "sighting--df37a4de-c0b2-4034-9f48-b7bc9fc73f67", "sighting--b8fd0946-670c-4dad-856e-0af6fb74f6f9", "sighting--78a0cfa8-526d-461d-85df-37efdedac8aa", "sighting--948c0298-6042-49f0-a498-bd7ed8ab5d6b", "sighting--8f69d2dd-932d-4f4a-8a23-0435b2fa41d7", "sighting--cf04c9b3-c4ad-414c-8c3b-aa1d6d8a3bfa", "sighting--e18e88c9-b2aa-4add-b9f3-2b023adbe1a6", "sighting--a1441012-c3cb-4d71-a613-c1d3fe56a2bc", "sighting--551070b7-70d1-4440-9e5d-3ab45292d34b", "sighting--35919482-af5e-4ca0-9e0a-dcb56a10b488", "sighting--9c762c4d-a9b0-4ddb-b7ba-ee9c161aacc8", "sighting--badd9e07-c5ea-42cf-bb32-966f265037b8", "sighting--ba34d920-2622-4018-a397-2ac34b7c74a5", "sighting--6d9508b1-3eb3-476c-9da5-495578c42dda", "sighting--30ee052e-ecbe-4e2b-8745-57c55c701cc7", "sighting--ec7000b7-73e2-46f3-be30-946c388c5779", "sighting--cd9854c6-e5e6-45f7-9479-3716fbf02899", "sighting--b96d587b-4dd9-42a9-bfc2-471d86d97c1c", "sighting--b927c87c-c717-40f9-b125-e64bf3a5ae78", "sighting--970b0de0-1735-4c39-9757-54ff8bb86139", "sighting--0b014660-fd38-40a8-9f69-06e3dc3a9437", "sighting--42566c46-b1ac-4249-9550-c8c63804d643", "sighting--685c01fe-9386-4045-bd71-99bc0caa132d", "sighting--ae3ff91a-600a-4b6d-838d-2d3ac1ff8d81", "sighting--1e64c9fe-25f1-467a-b790-79847a2e7a18", "sighting--697a6185-1ab6-462a-857a-10712cf08908", "sighting--7c04f2fc-d9c2-4a39-9869-d2389a5d370b", "sighting--6d561c26-4ca5-458e-b2dd-38518b2fe668", "sighting--19e4c281-8c87-4275-b8d6-7e671b7a8401", "sighting--dd35aa74-fe18-48ef-b117-8ec1eb1e85b0", "sighting--6f358685-ef57-41e4-b63a-86c6daa11000", "sighting--fe57c13d-b140-4322-9f9a-8f00872f1e44", "sighting--e70322e8-1bfc-441f-8d68-c46f591d55a4", "sighting--f2386d05-9f2c-46fb-a0b7-20e73b0ce31c", "sighting--34979f78-0f2d-45b1-8bb4-96e66d92ef28", "sighting--52f241ae-3036-40d1-84cb-0a3b6d812581", "sighting--68b869ee-325b-4322-bd89-8e126e6a439f", "sighting--14be4e3e-3bdf-47c8-bab6-acd72fb7e432", "sighting--b00192b1-5881-4934-957e-0c13bcdf8a94", "sighting--4b81fa95-7aa1-450e-8e08-802b6fb31393", "sighting--38348955-1589-422b-9ad4-248d8513ad03", "sighting--1dbb8ff2-fde2-49f1-972b-376b1319f1fe", "sighting--5439ea8f-b99d-4db7-9ac8-5ae119c23389", "sighting--fc9cf928-ac48-4570-8ca0-817f405de3c9", "sighting--ce33c739-6da0-448b-9942-bfd616297cd4", "sighting--17a2dfd8-0abe-4df1-95f8-e5c03b1f3155", "sighting--e81723eb-041b-4f46-ab20-145d66a9756e", "sighting--6e7893e9-bb95-4b44-a950-1d5f3c272c4d", "sighting--17ca5561-f027-46f6-9465-2c19d4eefa12", "sighting--56dee97c-a7f7-45c6-bd05-7d7fcf88f396", "sighting--ff176904-64a3-406e-8e25-ae6f5c3b53c9", "sighting--cd4ea0e3-99f6-4602-afac-ed177e8456b2", "sighting--88c9a692-24aa-4009-866f-32be87d2ee52", "sighting--1521aa80-fc82-48fa-88a6-b0719cc6f759", "sighting--86b9e741-6100-455c-80b5-ccb6717104b7", "sighting--43e54565-3fe9-4b89-b2b0-0e62694b5991", "sighting--793bf532-04f0-491a-bbe3-be5564d89ea8", "sighting--9a0d307b-af8e-4ceb-a7a2-ae4ac596972e", "sighting--b540af21-5d72-40c0-9eab-5ded5d2c54af", "sighting--413cb644-c682-42ef-b674-1783ac80a0a0", "sighting--5cad7b98-05e3-4255-bd2e-fd0bb763a143", "sighting--c4cee899-1f19-4828-b6fb-76c73378c1c7", "sighting--6bf95f50-4ff1-4325-b3e5-4fc2a933adbc", "sighting--9ec09377-b0a2-470d-b9fe-0bc996b6efef", "sighting--38c8571f-6a31-4a56-8857-36fd9bdf4003", "sighting--09b939e8-0559-4cb2-a93e-32fed6ad8991", "sighting--862f9dd9-81fe-470b-a303-2ff5ee72d54b", "sighting--98d9794c-3b7a-4f39-b19b-fb96953f2030", "sighting--10968d48-1c70-4401-b0f6-9eaf6be57a0b", "sighting--5d8b02ce-3659-4bd4-9971-bbcb64160722", "sighting--1e53256c-90c1-40e6-84c7-cb91c12a9d11", "sighting--c2d5d431-becc-4a74-8dde-6388cd6ceb5b", "sighting--36683d4c-f99c-432d-89a1-be7fdaaa45f0", "sighting--e259a451-f8dc-4b65-a4a9-7016185b32b3", "sighting--8dd099ff-26ec-49b8-bacc-6f82a649c2ec", "sighting--27e11890-bd95-4c68-a770-a6b2bd3d7f0d", "sighting--490b25c1-0578-4d9e-8692-f875453ae226", "sighting--3e592688-47b9-4624-bf67-a1c267c55b60", "sighting--4d0832c2-97ba-44ce-8246-9f821a6262d8", "sighting--555cde10-15c4-4c15-8c66-990019651f04", "sighting--8539dd88-2cfb-413f-bc8e-bf76384ee78f", "sighting--28efd9cd-1ef0-4e73-8639-18ce01e43d96", "sighting--970891a9-879d-4302-8598-36edf2449d0a", "sighting--9a8312f4-523d-4f64-80e2-58a2c8531d6a", "sighting--8f21cb38-c364-4c6d-89fe-671bb5229721", "sighting--c42aaa5c-0c53-4582-868e-07a8e22fbdd5", "sighting--84ba9d87-5ff7-4261-9010-f554dc4efd75", "sighting--da6f819f-561f-42e3-9175-f161d5ed5e43", "sighting--64b36407-5eb2-4491-bb59-de5ea22297c2", "sighting--fce1e599-4e7f-4084-b1a3-3696253dfad0", "sighting--3de799b1-e509-4b88-8016-32272bfdefec", "sighting--9fe4a573-c2b1-4a08-bd08-69357be3160e", "sighting--96570fd8-643c-41a8-be35-3418bd820618", "sighting--2752a36c-b68b-4dc7-8b86-695f4197f73d", "sighting--f1ddc7a5-48fc-45da-952e-b7622e28ae94", "sighting--efb34796-0212-4153-8f79-67bcd071bf0e", "sighting--03a93117-8ad3-438b-b38f-e876d12273dc", "sighting--e005f46d-da09-4463-b500-8d3d27d4cb24", "sighting--95062ddf-9189-4a17-93ef-e9eb164c1ba6", "sighting--cb1c3a16-7d5f-4cc1-b6b7-56366d86acd6", "sighting--678d62ea-3cce-4719-b5ff-f88e245ba244", "sighting--19fef071-5b0b-4a80-ae8c-765c89668357", "sighting--e93ad650-8cb3-48cd-aa91-7a505e54f3a1", "sighting--232d1a2c-c856-49e3-b46c-842b9037625f", "sighting--b0e64a6f-4713-46cd-80ff-e4dba9bb52e0", "sighting--1d0e27f4-b923-464d-bd74-32f849436b5b", "sighting--593495f1-e9b6-4ae2-88a3-25045707cfcb", "sighting--5565f63e-320b-4491-815e-e68f2eafc985", "sighting--4dcc4d4a-03a2-4029-b5e9-8ac5cb20958f", "sighting--546cb489-d9cf-4d59-bf04-cc0eead4547b", "sighting--2893b307-107a-4432-af0b-cd2a9b8eb2e1", "sighting--0ecdb728-df92-4065-888a-030e354b36c6", "sighting--00f66329-ede9-4e6f-9617-0ad9aa2073f0", "sighting--5f0497f9-1521-48c7-9c68-463c7d038dbb", "sighting--a95b4129-9068-4a62-a5f5-cceb0f873d70", "sighting--59bd001d-57bf-424a-91a9-013086f9e6a5", "sighting--be6af020-d012-4492-87d5-c8266f5dffd0", "sighting--69417dac-9f18-4c91-ac16-9049dd8ae605", "sighting--a3607471-a237-44ab-b5b1-e34310a49180", "sighting--9269aef1-7964-4401-8129-e9c8f045c4a8", "sighting--6514fc31-7d2f-4291-9496-c154e1fe66d9", "sighting--3398da8e-7a8a-4dca-b3bc-fc225a0a33ea", "sighting--2ede4ba8-dd6f-4446-bc22-adb1f44e9a79", "sighting--59c51392-b04c-44aa-9400-ed8149a7770d", "sighting--7f664375-b454-451d-b336-db90e0a791ed", "sighting--e0b30906-4dc6-4239-8c93-f94d086e6696", "sighting--9ba18df8-6729-4d4b-986e-47dab1395393", "sighting--411f6c16-5419-4be6-8db6-ce32092d85ca", "sighting--0f966c84-09dd-4f5f-93bc-d7208599e34a", "sighting--b9915fad-351e-4ed2-b806-48899c97591b", "sighting--7b4261aa-4ed3-40cd-8e28-42862ec38a9d", "sighting--4f8bbb07-cfb2-4496-84b4-acdba8ee0a2f", "sighting--44a1b670-7d0e-45a9-9d27-cd35ff91328d", "sighting--b8e72432-25dd-43f1-9c59-447c4766b09a", "sighting--6a99d317-9bac-4360-8a8b-ddba8a0c9116", "sighting--62f39758-f442-480d-98b5-9801c8b48f11", "sighting--6d25e42b-7a7d-4da6-a082-047a50b3c390", "sighting--0492c97f-3c6a-4f9f-b595-45edda9fd21a", "sighting--2c795630-839c-4d71-9f30-58a8d94c4ca5", "sighting--16f2d253-06d5-4036-8bde-bdd6ba059a9f", "sighting--f67ee758-0b25-4e72-899c-6f9a3a5fa7f4", "sighting--3049ee30-4e2c-42ad-ad8e-4f4fafa6b6e9", "sighting--52cb4353-df32-4c4b-87f5-7501656f9515", "sighting--7e39d9a0-d073-4a5a-ba1d-52ac0019314a", "sighting--de8bbbcd-70ff-4c84-9de5-29e2f4943dce", "sighting--f04db0ea-98a3-4519-a3cb-634ca28c32cc", "sighting--23a76a58-a4ab-48bd-8a88-4b7b2d86ae30", "sighting--19e8095b-c6d6-4e4d-91b3-3d11e6c077ab", "sighting--05620f40-d299-494f-9940-e78a14caf7c9", "sighting--200cfb20-810c-444d-8685-0ccf319f3d0e", "sighting--f71f8314-ae84-49af-91e4-eded86800f26", "sighting--814318bd-dde7-4657-b4eb-13c3790d8799", "sighting--60b491e2-6fd2-4df9-8e66-128d7897209c", "sighting--3fe3c380-656b-4c59-a4a4-9b433dd6d167", "sighting--2961b9ec-bc9c-4b78-9556-51d38236fdf8", "sighting--b9c0228d-b037-40ab-96a7-516f2826b9e3", "sighting--735c09fc-8833-4c62-aecc-095b3365fb26", "sighting--2ad18971-19d0-4edb-af26-7f9b4bb66aea", "sighting--27bce3e6-a0bc-4834-b324-5958c4f870d9", "sighting--9443fe3b-888e-43b1-9de9-aacc8c76c788", "sighting--675d5f84-b56f-48d5-a2a2-94851186c8d7", "sighting--b67733a0-4e2a-489e-856d-6a2e1c642432", "sighting--7c74ba28-3df9-410a-9742-2f001c4fe353", "sighting--46f0a619-9a68-4cf5-a1f4-a8a7b6b670e6", "sighting--ce2ee9c6-0a8b-4c36-b7f2-52e727e079f4", "sighting--073c5b5d-306e-45d0-b7bf-960d419527e9", "sighting--f06ad7c0-b5b3-49b6-af00-dab3c51d6bde", "sighting--66661275-d09a-42b1-abe9-51b07144e235", "sighting--e5ea3d6b-d5c0-4785-af6a-4da527a0d829", "sighting--8ddfcec4-e71b-4b97-b643-7e61aa2291db", "sighting--20d3ccba-482b-4e1b-a080-9b4cd4f4341e", "sighting--db51ed59-1b61-4ad9-8866-7f9149c31e23", "sighting--e9288116-8583-42ea-ae7a-df06f93c56bc", "sighting--db235a02-9e45-4798-a1ab-3cad5be16d24", "sighting--b39ab410-dd27-4291-91b5-adaa88b64a34", "sighting--98e135b8-a0a3-4c79-b93d-c67c5e3b0881", "sighting--bae540cc-0cc4-4aba-a8e0-9ae650f1e40e", "sighting--dc8ca23b-dfcd-45c3-94f8-e46e26d09580", "sighting--944fa8fe-2430-4be4-ae26-ec37ebdcaf4a", "sighting--e1398088-1601-4145-a9ec-64e5f871d53f", "sighting--ed1ed9eb-7d04-4b5a-b080-68b5a54c6fb3", "sighting--eaa90609-9644-4d90-b319-ca6b27755d85", "sighting--0a330628-efe2-462f-a1a8-ebb145994a4e", "sighting--e27b7fd5-23e2-48aa-8253-29e3588d9c86", "sighting--399e27b8-8afd-43b1-960d-c37a121444ab", "sighting--55db6e17-f9ca-4593-9aaa-f7bf3b93e8bd", "sighting--1518aba6-38e0-4b77-9abb-6bb9fe3d1785", "sighting--11350386-61c3-4fce-aadc-b9ea8b203b48", "sighting--49590a6f-ef91-4d8f-9fd6-a82784bfa7fd", "sighting--acbd6a22-4efc-4d9c-b004-25cf1a530b5a", "sighting--ae99b00b-b1d7-41f1-95b8-eb0b2f9bcdcb", "sighting--b0d766b5-8394-48be-9248-10b903ca9aa1", "sighting--a08597bc-8aa2-4909-b85b-408a9a07c893", "sighting--52576448-1367-49f3-b79b-cabe801e9d49", "sighting--3aca2d28-54de-4098-b265-bf65254d3363", "sighting--2aa7b91e-e8e6-48b8-ae12-c28abd558205", "sighting--c86e2a29-992e-4a4f-b428-202ea24161f2", "sighting--17d9465d-1dff-45e9-bdb2-1e38aec409d1", "sighting--eab253e5-c14e-44bb-bc4d-d845d58e3ad8", "sighting--c224c739-9d0f-4ae8-8d55-fff1fa770765", "sighting--e1456637-92f8-4ae5-a2d5-6f610b717027", "sighting--cd1f7841-6657-4a57-9776-72ae021e1046", "sighting--285da7f2-7312-4ac9-9c1c-fa4c6c4eb05d", "sighting--fbe02667-0d5d-4ffd-bdaa-0fcb29b368bf", "sighting--93fc76a3-aa14-436c-a08b-d0125bf0c148", "sighting--d82affe3-8b1e-4474-9781-52cd0ddb9609", "sighting--fe962c4b-6289-492f-8d9a-6d18824ba5c0", "sighting--6b5fc972-dc63-4261-b271-2cf8b31add7a", "sighting--38ba3de8-71db-4be0-a2bd-24c4d7179d3e", "sighting--e6c3c313-7260-420e-8563-56e42342b703", "sighting--799b97cb-caec-475c-871f-4adca23d1baf", "sighting--4410a8b7-0a42-4940-983c-dd5541b4b2e9", "sighting--ccefd7dc-6afa-4cfa-abc9-e8f5fcb0b154", "sighting--81f515c3-98c3-4c78-acb4-623a30231aa3", "sighting--e391d850-59e8-40d5-a3a2-7f78a89c0b67", "sighting--ece7a2a8-8e6b-4c3c-98ae-1ed34d9cb10e", "sighting--0e4b25c5-b4ef-4973-97a8-3ffbfed042b8", "sighting--3ad397a0-cbf6-4e7b-a75c-3a6ec9a26710", "sighting--00016121-39b1-42ef-99cb-5262713350a0", "sighting--3176b0fc-9f30-46a5-bd04-65020ed743cf", "sighting--d6d4f4c5-7fe5-4894-8d42-efd843ebe8ef", "sighting--8bd6bea5-292a-4cdd-bf35-51db397c2a27", "sighting--6e94ba14-182f-457d-9b11-da73d419411e", "sighting--5c32b920-b8c7-48dd-a696-c6c62a12ddf1", "sighting--e9fb42d8-d4f5-4774-a95f-9149aca43427", "sighting--e7a2d7a3-bb28-48b4-bc1e-a840f179d030", "sighting--2f81ae2c-bf24-40d6-a213-3b438b86cfc7", "sighting--43481802-27b0-4018-9dd5-2fec50a9c453", "sighting--d6c62b95-bd0b-4a26-90f4-d2147d8f62ea", "sighting--a864f584-1a48-420c-9a1e-359eb72fb073", "sighting--68f7c2f6-c7b7-454f-a5ab-959c072d96e9", "sighting--9c61ebe4-36e0-4ab7-a2d5-bf2c9722ce6a", "sighting--5a2c4a24-c694-42ee-9e14-7733a5ddb4ec", "sighting--a1d98fd6-fe6e-447f-9fa4-f57b86d5b521", "sighting--81a60838-cc39-466f-85e1-4bbeed93120c", "sighting--7a3d1c64-05d0-447e-b7a5-f603cc666247", "sighting--cfb00a97-827f-4437-979c-8a638a5ef885", "sighting--d1b2349f-bb90-4d99-b50a-3a8f7eb4dad6", "sighting--fe4a1f93-273a-48a7-997e-5bb8c44313be", "sighting--613f9b59-9eb6-4a78-a1d8-bd1dfb789644", "sighting--752029f2-944e-4989-b3e2-93582d9ff53b", "sighting--51c955ff-d625-4122-b92a-83d40da2c4d0", "sighting--b1328f53-3e32-456d-bc29-fe68231f9ff2", "sighting--a2787854-909b-4ac4-8d71-2c9bbd3de59f", "sighting--83944264-ca82-44f8-86b2-c523c19fa948", "sighting--4bb58816-4934-47cc-8933-42f92b5f9ecf", "sighting--66b39055-5066-4a94-84ed-d1994d3455b2", "sighting--bd46c8f9-aac9-4611-989a-9fe924e1b1c7", "sighting--89e32d7e-8cd9-4908-93e9-cd439bf2f992", "sighting--26602d1d-96b4-4280-9fb6-4220c31cbe5c", "sighting--e364147f-8123-4dbd-818d-99f2cd4e6966", "sighting--9d58941d-f329-4280-a055-a25a4ca445de", "sighting--ab8a709d-ed8b-4280-b0aa-effdce91a6e5", "sighting--773e5caa-2199-4745-a8ae-9f74b363192f", "sighting--5943ddca-63f0-4c69-93e4-cc056484dd05", "sighting--1d435ddc-882c-4582-b6cd-9be37fb76eea", "sighting--f21a3b82-99ed-4cf7-9ca4-998e2a068659", "sighting--45d43c31-ba38-4a75-ab79-3ec122771c9c", "sighting--ec20bc81-e056-40ac-95b3-166902b91d85", "sighting--bd2274ac-1333-4334-ae24-b6342ee8bfa6", "sighting--b17fdb96-88fc-44c2-9425-af7a6b2233a2", "sighting--dec4f62f-2bdd-4af0-9b8a-7951587a97ff", "sighting--0e6dc4e1-a134-45e2-b0a4-570503644be4", "sighting--a02117df-e416-43c9-bfcb-a5da32fa3b74", "sighting--e8145cf5-8db0-4499-9691-9e532eb5dba5", "sighting--39d23813-d058-4627-be2f-43b48ce2e887", "sighting--f7342576-81e8-42fa-9e4f-6a6c8654c9af", "sighting--1ff2bdd0-8ed7-41ee-a569-048d0bf34c47", "sighting--01d6daa3-bc55-4d99-9640-8a5d42f13049", "sighting--3b0725f7-eca0-47cc-912e-16a87d302f4a", "sighting--056e467e-83d3-4024-87d6-3498e5d8d76e", "sighting--df74b1b0-53b3-4f27-86ef-7f140a6cabb2", "sighting--862fe1be-561f-4039-91a7-2803e8e8375a", "sighting--797f0af7-bb1f-4729-95f1-2260ddb96493", "sighting--550083df-1343-4bf2-b550-32f1e69414a9", "sighting--02534c29-1c87-488d-bbdc-26c03cf02f3e", "sighting--667cb8ce-36d0-4573-bfc2-91abc08219a9", "sighting--bf13cc3b-7a35-448f-9bb2-064c7da501aa", "sighting--1d9aa3af-b516-4f51-87c3-dbd75626250c", "sighting--4c61d252-060e-4295-aac0-32c14f65bc1a", "sighting--738bbb89-4ccc-457c-a953-159a1586a786", "sighting--e7ea8680-e459-4803-a48d-5bcaa71f79e2", "sighting--100c958e-078f-451c-a9d4-3785d6873147", "sighting--a6816113-cec7-4600-8fdf-f5df25901de8", "sighting--c4e265bd-3135-45a4-b92d-68562e3d3d3e", "sighting--e8174f3a-ac58-421d-bf86-c935b7ab4625", "sighting--07e72624-c7d3-4420-9dc1-4e84ff1f5e11", "sighting--70dbd98a-1b4e-41ee-b683-f69920fac6e8", "sighting--922cb4ba-5d86-4c33-861f-5721850dd5ee", "sighting--3a16203f-9a80-4031-9b69-3d87dc01ce84", "sighting--e39c567c-3e1b-4c5b-9075-606c9a9cb7c5", "sighting--c4535ce6-04a7-4723-b92d-86400ebdc77c", "sighting--771eb07e-4e07-4183-bd06-5d562704a780", "sighting--11143fc6-d3f1-4c49-acd5-ae3a960d8b11", "sighting--e5401630-3984-425d-a492-0e3b4b8f31d5", "sighting--06b3e94e-be9a-4eb5-b0e5-8f92840fa43c", "sighting--10ecd9a0-0cbe-4d81-aba1-ced8c2c0919f", "sighting--189b13f4-dc31-4c98-bda8-655f4a957aa6", "sighting--4d0e76b8-d890-44ec-b545-cc04647281de", "sighting--aa486ddc-c9e7-4662-8f8f-138396b9372d", "sighting--dba307cb-4c50-424f-85b4-171a835a6d03", "sighting--6cd65470-78aa-4a75-95a1-55bd92b3794a", "sighting--9855c136-5d1f-47b8-8701-66c6c7658ce6", "sighting--16fa40e3-e6d5-4b14-91b6-ecb2059faf92", "sighting--2fd16787-21ca-42e9-be85-4f4e4e500234", "sighting--8ec454de-43d4-4907-bd48-7d95aa8cca96", "sighting--44b3584e-538c-4b9f-9122-eb3c77a2d852", "sighting--f699ebac-c248-4764-a819-ce3c93fcd821", "sighting--78d379ab-f864-4b28-abba-1dbf8d8d41a3", "sighting--0c6324f4-88db-4c69-955a-5559037706bd", "sighting--0b34c530-35d7-4d3d-a13f-12b62bbd96a7", "sighting--023846ed-0eb3-480b-a58b-8fe2974a91ee", "sighting--d0a270b4-4872-43ea-aab9-fb7289efd489", "sighting--6ca2f987-b69f-4b0b-9cbf-6f9f9bdd4556", "sighting--eb6e9952-4ac9-43b5-a69c-f5aa66946b68", "sighting--fefe9716-d355-4d58-8d78-5b50e1062db4", "sighting--5f2be29c-c528-4dd5-8a2d-3a1954781c48", "sighting--61740f2d-94b2-4edf-af90-7d685c29cd8c", "sighting--bf876869-4603-4b20-b582-8820fab144d3", "sighting--193d22b8-f359-4c24-a315-58503b8bb515", "sighting--22ed6b07-2648-44ed-a31c-a298e7687281", "sighting--1a35e381-b032-427c-b5ef-2d87df452e45", "sighting--48d8b6d4-dbad-4f8b-87fb-648ae21dcb87", "sighting--1aadea96-9710-400b-a571-49bad21ac439", "sighting--35ada20b-bcc4-4846-a022-3fd31c55da84", "sighting--c060c596-f275-471b-a72c-392b4ecb5148", "sighting--990ee936-957b-4f55-980b-6dbdbecf1bbf", "sighting--00ea08ed-c1a1-4430-9d30-e83cdafb9b53", "sighting--ed41bf54-d1c6-477f-a907-2b06fa54a142", "sighting--f226b174-50da-4794-a840-eecfbc9bb797", "sighting--25472ad5-aaaa-4594-9700-d58d78fcc192", "sighting--06f72509-aba7-4d56-9551-900fd5ebb2cb", "sighting--fac26141-1a2b-49c4-8cd2-ec392b6346ab", "sighting--2977273f-406e-41b8-9276-894db54960a5", "sighting--d46d4b2a-2e1f-49ad-99fe-a587137a63b3", "sighting--13b546a0-0df5-4610-ac7c-9935fccf2b25", "sighting--e083a1ad-37c8-45b9-b706-fab8f8745646", "sighting--af56af40-cf90-45e4-a681-d15ac9df920a", "sighting--15d35d35-ec1a-49ad-af8d-b7e4d0c23712", "sighting--699c83f1-f3e8-4ee3-8265-42f36f0232ea", "sighting--83c1dc7c-cf0c-4680-88da-e1354c368ebc", "sighting--0f6934a8-e6fe-4105-9e70-05abd74391ab", "sighting--9dbfd256-8a2b-47d4-a63c-315e5500f5fd", "sighting--3fc57cd1-e64b-4d2f-9c72-54181c6536c5", "sighting--6c56e6a9-a4e5-4898-9704-26bed0702794", "sighting--62d5df8e-488d-4748-b536-7a4a9805b624", "sighting--4d68853f-196f-470d-8039-111506776769", "sighting--96793353-89e6-4733-b40a-4df4780e8a6f", "sighting--bb9dd521-8931-4715-8953-2c2a9191dfca", "sighting--aa4b05a0-1877-4635-aadb-62668ba9a298", "sighting--43da92f6-965b-4a79-9511-deb448a6c81d", "sighting--181cb9c4-f81e-43ac-bb0b-9711456b1c5f", "sighting--cb0c9b1e-63d5-4179-b806-153a489215f5", "sighting--c377b8c9-2552-4f43-8498-ca1f56d94267", "sighting--537b266d-5ac3-493c-8233-b8a23feb7c25", "sighting--63be7a56-109a-4958-b80e-ceba70235574", "sighting--2d268a54-905f-43e9-8508-34b2d1958eac", "sighting--d414d301-3132-46a4-a4e7-86725a09d0ed", "sighting--67cd811b-e8e9-4617-8dc6-8f3a9ed33c80", "sighting--b9fe7b7e-e4cc-4516-99cb-0056cf182486", "sighting--bbf0b839-9dd4-4fd0-aa58-6880236d084e", "sighting--d7865333-0e22-473a-b2d8-949bafc941cc", "sighting--aacc2ac2-5633-485e-b877-9e7359505143", "sighting--3502c6f5-d281-47b1-8563-43b0f09c22dd", "sighting--fab5e997-a1fc-432f-9510-de2bdc1bba68", "sighting--e0af28ce-c39e-47c3-88e0-1d1e2a2e9166", "sighting--114be2be-68d4-4d52-9928-cd988ddc6743", "sighting--f0ba279e-744f-485e-b5da-abf066261508", "sighting--4018c304-1318-46d7-96aa-6e1ae8f7574d", "sighting--b0906f73-7ff8-41ed-856a-3ff32f8ce797", "sighting--cff80132-6137-4d30-a158-bc83a857f134", "sighting--fb74c65f-703e-4cfa-9c94-90acb0403226", "sighting--ac8c1204-41d6-4961-8600-a5ddf1103989", "sighting--f822c950-5f5a-4c35-9ebd-4a39b5903c08", "sighting--81e11202-d916-4b47-ab0f-dc4eeaae4d62", "sighting--6d312a23-9b83-4af8-b692-f9e173b4a12e", "sighting--c4a02329-6ebf-45d3-800c-0f28e3460766", "sighting--d3288172-cd56-47a6-ac24-f3f099a1ba95", "sighting--be941959-a266-415a-a742-d9dc1b6bb470", "sighting--eaac7d56-ec4f-4803-9dbd-3066b7458023", "sighting--d4a7cdd6-ef05-469a-807a-76ccc55df760", "sighting--8c3c6de8-077e-4592-a6d2-d22b82c7665c", "sighting--88bcddfc-f905-4db0-92a0-e83ea86af1b9", "sighting--827371b6-0c16-4ab7-af01-513684de83fa", "sighting--9503e189-5a57-4c8c-9d7b-8f441054fb9d", "sighting--73c48ed3-0ec4-4961-8315-58e8644205ee", "sighting--d7aa457e-a51f-4742-ab39-82559963d047", "sighting--057d5134-1516-4ee0-ad5d-9d1327454407", "sighting--6359f4d4-7445-4054-aecd-186a5563d824", "sighting--91a56bc3-9e0f-4464-a049-59fac5beabd0", "sighting--b814add1-8d4b-47d1-a5ff-bcc8258fda47", "sighting--c3017a74-f89d-465a-a662-5bda06ae6c0d", "sighting--6b8d907a-59ae-48ab-90bc-82029375c21f", "sighting--520056d7-3856-4626-bef0-52b4b865776f", "sighting--2584eac2-9efc-4e6b-a205-100cbb70da47", "sighting--c5317226-e67e-482d-8a7d-7061dfccc358", "sighting--3462ae89-a72d-487c-9fd8-861b08572102", "sighting--3b1879d4-1c59-41ad-ace6-01e55998515e", "sighting--dd22e6b7-3357-4b96-bcd8-fef4461b38bb", "sighting--c3f51b0f-4841-4a0b-926a-c80f4b5384b8", "sighting--099d92ed-a82e-4a2d-9d32-287c3f88a8c7", "sighting--87cb0bda-0b30-417e-a836-efa201f92795", "sighting--c6ac4993-e79e-43f0-8d43-c0c5a2d69e0f", "sighting--3c7dbf4e-b995-46b7-a7b9-8f1e5fd07f4f", "sighting--ffe8f3b4-cc15-4802-a5aa-7addcd830f8e", "sighting--8b7d2d7a-e66f-40e0-be02-4a1651b2236a", "sighting--52c46302-9d2b-4ab3-8b88-1994bb851370", "sighting--bfeb28b6-6fdd-4965-bf02-73a073c00ab0", "sighting--c7d14194-d4ec-4b09-8e12-586174e5b748", "sighting--2ba48a9c-96b2-403d-9ebe-97ed5cf95c42", "sighting--453b514f-0d2e-485c-b0c5-3bc296b945f8", "sighting--1ba0b702-30b5-4940-8fce-9448bc6672f5", "sighting--a22387c2-8580-47cd-905b-5b51599ffa36", "sighting--70166aaa-3f7b-4d7a-90ff-ba8919316d98", "sighting--6ab372d3-b319-457e-be98-886c8e3e5c50", "sighting--1be43a9d-5146-4e64-892d-71d1da639e0d", "sighting--59ead2f6-2faa-4876-8817-533a1dbcb0bf", "sighting--f64e489f-5956-491e-9192-6e8af5a2eb29", "sighting--acba02f6-00f5-4fd9-8e70-342d2ade89ed", "sighting--c75390ae-fa9b-4409-b483-865305ce55e0", "sighting--1ab98934-817a-426c-95e4-3da1a9b7917d", "sighting--1f8b71ee-95ff-4022-b4f6-b76735a39828", "sighting--bd99a23e-4dfc-4a50-ad3c-6f002978d518", "sighting--e1190ba9-b8bd-4808-b313-8f067bf3f6b1", "sighting--cd9cf363-2b60-4ffb-bfbd-bdf2b5202d26", "sighting--dd6a5d10-76fa-4426-a2d3-8cf7882f9119", "sighting--ca8b0336-3738-4d22-aef1-6eade2622b41", "sighting--716461e9-71c7-445b-bf81-ea10c0dcb0ff", "sighting--d6613219-6470-41ab-81d2-1b231a5a16d3", "sighting--6029cf79-39fc-4ea1-8138-54f06e7cf913", "sighting--f4e792c1-69f9-45fa-b130-852924b35ccc", "sighting--04ee606f-3a79-439f-91e1-e62709242bbd", "sighting--7a578aeb-eb18-4c90-b989-ac8f32733d4a", "sighting--4597f68c-7e07-4897-9e53-1a8bf98f8cc7", "sighting--d046ea2d-15cf-4112-90cf-9df4c2b3b494", "sighting--86e6c341-520c-4041-9507-8ff5717fb7bc", "sighting--7bc30b99-669c-4572-ae04-74d73e40bc7b", "sighting--88f19056-4916-43af-9f48-b1fec9e048e0", "sighting--b4a51bbf-ed98-4aa6-a163-1eb98046e52c", "sighting--099db5c0-c247-4deb-97df-6cee93d8b81f", "sighting--f4655643-0600-4777-b778-51cdb900fcfb", "sighting--2eaa8c67-ffdb-4eed-b012-c9b9c4534622", "sighting--e8bed567-8202-4941-b7da-9ff63767f48a", "sighting--af96a27a-9619-4b44-90b1-523f9a723ada", "sighting--86a2de5f-292a-4bc7-8f9e-5af0003cd859", "sighting--ca03698c-f4d1-4f57-a1bf-f1e47d497e30", "sighting--a6bf1144-6cb1-4c82-8d9c-fef7fb2d011c", "sighting--f126fc89-6788-49bd-9dac-fdc005056eb8", "sighting--ad3b2584-0a21-42d1-a0d1-f55d07bc5854", "sighting--92b1a3ad-bb6b-48c9-a016-11e12ffda8eb", "sighting--5501bbb1-5f59-4f49-bf44-bcc2fbed6ff1", "sighting--6aea4f76-6329-4a4b-b952-6083c838633e", "sighting--4ebc0106-7843-4bfb-8674-ec300375b683", "sighting--84d87270-25ae-421c-a88c-62b5f931fcb0", "sighting--03e88b1c-43fc-47c3-b7ae-1f054cea2ee0", "sighting--1595747f-f478-4c83-8810-a8cc30c9531d", "sighting--d5c14d1a-17a9-4010-9526-9df7b3fc0aff", "sighting--0c1673cf-32b0-4ec3-804e-8bee15c806aa", "sighting--13fdfded-03c4-4ef2-8aef-0ddc2ccc87da", "sighting--718ec72a-6715-4beb-b69d-edcfd94d6a69", "sighting--c6432739-524b-48f5-a82d-4a6032b4f992", "sighting--55cd98b6-c485-4958-a627-bee6c044625d", "sighting--0ef6c903-7a0b-4463-9faa-2999a8a86d9a", "sighting--7d617f35-d402-4158-9d54-948442d5d860", "sighting--991fb92c-4656-49b4-b46b-f99568e9fd2f", "sighting--b506d3f1-c544-4cfb-8e3c-36eef5042bad", "sighting--b0e34aa5-075a-4f49-a370-8d8c8c989945", "sighting--887df1bb-99a9-49d0-8457-d5f496a0f1ba", "sighting--5d449292-8f9f-4aea-a4c6-a3ccb0cf5e6d", "sighting--00f80c2d-241f-4212-99ec-3cf51c4a2245", "sighting--b9116e4e-bdaa-4e51-94bb-877070f579f4", "sighting--c35a6b86-30fe-4a5b-8247-340404abd42c", "sighting--5580ff12-3b54-48e6-ada4-d8a3b8bf8c2b", "sighting--14f8c761-46e0-45d6-9998-9fc4e8827b1d", "sighting--1d291f18-60fd-476b-bd8f-15c8f3a44876", "sighting--b02cbc96-b543-4094-b280-03101baee469", "sighting--676959e5-3674-4af9-b37c-57042a1dae10", "sighting--d80eb9a4-9fa5-4300-aa25-2a8c4337cdc3", "sighting--1c9fd177-d661-4323-99bc-6e343938b503", "sighting--4fd0fac7-1546-4878-af57-8420b05c34ae", "sighting--187afc34-c1a5-4d38-868c-c64ee93a21b6", "sighting--76a06fbf-65ea-4829-8f3f-7ceb205291cc", "sighting--eb909406-2faf-43a0-bbf9-c4e9c6c93c9a", "sighting--f8a77b61-b124-43b9-978b-14d4b629614d", "sighting--98497d3d-9c59-43b5-aaed-cae1b31a1656", "sighting--f04983a8-36c2-454b-90f5-3d8ef0454f1d", "sighting--7ae4809d-d797-433c-9e12-fb3f3b137bb6", "sighting--a9365eaa-ef10-401a-a45e-fd8c55769bab", "sighting--ff799e0b-3a35-4136-abfa-e6fa18e0a6a1", "sighting--dc6e494a-e716-416c-9857-949c8b1dc963", "sighting--9199bff5-3ec9-4f11-8cc2-af02cc649409", "sighting--b73b3dfc-ab74-4235-b998-c0c7fbf8805b", "sighting--79b39a67-4ead-45d5-8860-64b49ba57e5d", "sighting--f40c58f9-d5e0-4bc8-8b73-f2cfa646c471", "sighting--2930d306-2235-45d1-ae48-e5838d157523", "sighting--35631e1f-0861-4af6-aead-8887b960d275", "sighting--cfa453bf-da3f-4e72-88c9-e2b0b3e94525", "sighting--e3bbfc78-442e-4c55-b4b9-e3c549602013", "sighting--77a8cbd8-74da-48a0-80d2-b974b6895f3f", "sighting--e6ece27d-f67b-4893-af33-0c09009bdbc3", "sighting--131d7a26-29b0-46da-a0ce-ed7a9c2ced9b", "sighting--f478f1ff-53a6-4bd5-bcba-e4c376dfb760", "sighting--285caa97-8bb4-47be-993a-193270802fa2", "sighting--f267dd28-8d07-4018-ae8e-76f23462f596", "sighting--901b4ac1-072e-4aec-b803-625a50c29d96", "sighting--c1ac639f-2078-4c57-924d-ede7cc24cb86", "sighting--c875d3d6-19b7-4a44-97bc-12ea6fcb6e71", "sighting--2a445903-f10a-4271-abfb-a3242923c486", "sighting--2f3091e6-3d6c-4f11-9f3a-ab481434e062", "sighting--b44a187c-951b-40d9-8a80-7f11423d238c", "sighting--fb0e0beb-01be-452f-b5a2-6e602782f610", "sighting--655863aa-71e9-4415-abf0-2713d9218127", "sighting--675eca63-64b2-4d05-87c0-644bb2e538e3", "sighting--fe3b0f3d-d7a2-4f70-b255-33c7c20d01b8", "sighting--87fa3aeb-9daa-43f5-994b-49d4f4f8a788", "sighting--7251ec0f-5309-4f4a-96f9-b5d977c71d23", "sighting--181c86d7-15fd-4b0b-b1fa-288299e1d489", "sighting--9ef9dc10-adb7-447f-8ccd-27789aaa22dc", "sighting--6b25417b-f846-4b52-b337-12a3caba4974", "sighting--0fd2716b-3870-44a5-a780-5b9fd387a2da", "sighting--b8bcca6b-7d89-4af6-8f01-9ff4066e9c5f", "sighting--848fef25-a7cd-4157-bf78-15efeb7c3061", "sighting--a6b458d5-561d-4cfc-809b-47f8a31472d1", "sighting--080f11dc-ed2e-47a5-a2be-9e4d1c61908f", "sighting--6530f733-05a8-4c29-9cdf-028889bbbc8e", "sighting--1fd51b94-a398-48aa-96f5-14fcf2a5bd0d", "sighting--9a00d90c-826c-4d67-b7e8-9969b07248bc", "sighting--6bb00a25-cce1-4318-b382-1b2a5c562cc7", "sighting--4fa38fc0-020d-4eb5-83dd-306f024a2bf5", "sighting--7293e7d7-ce2c-490a-9323-b36ed2ac69c6", "sighting--f25c86de-4c42-4c48-90e5-f20b63f42b35", "sighting--14310e75-265f-45f3-aa0a-ca5b7f2b7ac7", "sighting--811d46ce-c601-49d4-9454-3b7305a1a0fe", "sighting--59bc4bc2-dabe-4523-b042-96055d2a9ee0", "sighting--6a9ca8ca-2cae-49d7-86cc-05d55ceca1c8", "sighting--7ba3d90e-4219-4ebb-9c48-9354fd1991d4", "sighting--52cb3f93-544e-40b8-9261-a5f24e531a82", "sighting--553e7b3b-10ef-4b09-906e-99ec3d8852a5", "sighting--2ffbb550-2607-4d6f-88f7-7ab2924be8d7", "sighting--03abc748-dc12-4692-bc3c-8206ccd3eef7", "sighting--96b7df5e-15d6-41b2-a32b-3355e1a2fcc3", "sighting--56060592-5d3a-4ea0-a14b-6e6b04438a5e", "sighting--6866ec15-3744-43f3-abdd-5e1bef360b46", "sighting--0dc0a2f0-2505-4066-bd5d-73ccdc24c95f", "sighting--02b71141-bb2d-4dd4-9d5b-2ab7cc7a1cbb", "sighting--8b483e81-4fae-47b7-b5e0-ff5644825af3", "sighting--2451902d-c807-4de7-9df8-3acce52f5197", "sighting--e50f227e-7528-47cf-a79c-2ee65ae3ea2b", "sighting--4b556a78-25bc-4f05-a0e2-5c4e1043aef7", "sighting--913ed526-40df-4804-8930-7a55d6a4f1b8", "sighting--5634d865-61d8-4f74-a5e5-4ecb7077f5aa", "sighting--a986c25e-eca5-4d2f-a757-c51421b30e84", "sighting--9d0849e7-d8b0-4356-bb3a-082c405e07a2", "sighting--351a299a-7a00-4bfb-8a54-dc1e6b471f6a", "sighting--5a3c394c-ecf4-4941-bacb-d41d260621c1", "sighting--1707f84a-2d53-4d2f-be8a-b6ee2a9cb4df", "sighting--8b1c688b-be86-4542-9956-3325302eb1ca", "sighting--cbc46468-cc84-478f-ac1b-773a9fb36b84", "sighting--8f8e50e0-aaf2-4b6d-8d8c-7181dfc09964", "sighting--d1522348-b816-4983-bce0-aafadba26941", "sighting--c434af2a-7fa4-4c81-a480-3d3c319b5f63", "sighting--75c022a9-e5f0-4ab8-8fb2-dc8078362243", "sighting--e7db7a50-801e-4322-9f28-68b62ceb159d", "sighting--f1d0ba53-5108-424b-9781-d602782122d9", "sighting--5b4f4c5d-56f7-4c38-a1f9-cc1d280460cf", "sighting--7639836e-161c-4c42-a2d7-bdaf6f0d4e37", "sighting--ad4b00eb-ba62-40b5-9185-832e8ea4a504", "sighting--3ae461c3-1cff-46fd-b748-c4852b400f57", "sighting--3196ac37-019e-4c4a-b190-ef5405b6f148", "sighting--2ba7a500-e05b-42be-8b1e-68f775b134ba", "sighting--6a6b23bb-a568-4d6a-8e41-19d381535c63", "sighting--d77967b5-ba28-4238-bfb5-1816914e5aca", "sighting--0fe26d72-79bc-4e5d-bd14-8c034c8f0c4a", "sighting--6c353b7c-d9bc-4efd-97d9-b9b59bb55c30", "sighting--b1c850dc-2253-44d7-bdd0-26c261c024ae", "sighting--ac0b44a6-9f8b-4fb0-be89-52b7777cf66c", "sighting--7e3edabd-73e5-4f0a-8664-2424d919c3a1", "sighting--7064834a-f99c-4a58-92ec-6f3ba6853795", "sighting--d5db49be-7f39-4489-98de-95c1bef5cf14", "sighting--e7ee5465-a463-4450-892e-924028820cfe", "sighting--aa95850e-4c17-4523-a5a7-061d19e0fcca", "sighting--417904cb-06e0-4dcd-bf53-a7d49bb798c5", "sighting--e51b0607-3e45-4fe0-9f18-8f4ba283cebd", "sighting--692f0b7c-aa82-458a-b585-4c4d71eadbe3", "sighting--5d134a43-1c96-400e-b4ec-19f9f1cece68", "sighting--cf176a02-114b-40bd-bfe1-bd773a76741d", "sighting--14794bd3-6596-404d-904d-3ec54f963bdb", "sighting--459bb06e-2038-46ba-a302-f1fde03d77b4", "sighting--ef9c575f-78dc-4cb0-9ed8-e5f31198f40c", "sighting--9f6277b8-b87e-4572-8349-756533d66704", "sighting--b12617a1-4a93-4a0a-ab03-3c68b5b91c95", "sighting--0ee1ce9f-a264-48b6-b200-eec288b22e08", "sighting--28745d0f-a081-43c8-8f92-b79f08714ff2", "sighting--d885a732-76c9-49de-8d8c-7bc276ffbee4", "sighting--8ac70a85-0dc0-46af-bbae-497625105c30", "sighting--8011a3a3-90a9-4bf8-9577-0f475d128a91", "sighting--6d6fe3c5-c71d-4000-bb39-e3c3b4e4f081", "sighting--44b7448f-22c8-43f4-b788-a290c3459606", "sighting--07435415-2b6b-4435-816e-3df0c2309777", "sighting--f42f5e9f-3237-4de7-ba12-488d4abb4e44", "sighting--2b3e92e2-c925-4f60-8aaa-39cdb94224b4", "sighting--63ea4022-952e-4aa2-a279-41db962dedd0", "sighting--ddd12235-7657-4287-ac0c-5c1ac9887ea4", "sighting--f4b169c4-1376-4a70-929f-bac8f4adfaa3", "sighting--e77ec7a9-d75a-468d-a06e-65bf10c80973", "sighting--80e72a63-507a-4ec0-8b2a-3db3cb36c671", "sighting--49e9f36a-5e88-46a9-9277-40e4f77eab1d", "sighting--83e3ba20-c2cc-409b-8860-be2992afcb2b", "sighting--c48ecf59-9277-4fc6-aa3e-bb24910dc140", "sighting--5a225d74-2503-4b90-b9d2-120a472995da", "sighting--2ced586a-307b-4860-b396-c4b76a008498", "sighting--19c9c99f-f592-4842-bec3-707edf499101", "sighting--1ab25854-a39f-46b0-a2cf-914974a5be64", "sighting--eec2d4c5-59e7-4ee6-a547-c867cf4c61a4", "sighting--c9ecafff-65e1-4593-9b74-8c035499a73f", "sighting--815f6ef9-e270-4f01-9de4-1767ba393010", "sighting--9f7c4055-17e7-4831-961a-a1b43ad8ba37", "sighting--19d23a6b-f5eb-4d4b-9444-a52d9da6ad62", "sighting--9c7302d0-6681-4b6a-97e8-6e5d2a756f25", "sighting--70a25503-69a1-453b-968e-8b0806b170ac", "sighting--e294ac0d-36d8-402f-91b5-eb4cb2007967", "sighting--a02cdf96-c265-47d7-945b-fcbf4fe35a63", "sighting--632f3c97-a0eb-42bd-af74-7c1a770bebf8", "sighting--e14dce21-25b1-4861-a510-9f64c02d0497", "sighting--a8ca3ca9-f7a1-42bd-9d10-da58a5f5a6da", "sighting--21fcd892-e7b8-40b8-8b0a-8cce310338c7", "sighting--4654b6ef-6604-444e-a188-561da24d5802", "sighting--ff8a03d6-b0d4-4665-ae8a-76ff3e44c8a1", "sighting--dd7a9000-6358-431f-a308-4934432d83e1", "sighting--6e83420f-9acd-48a4-a612-ec5a3bf04a0a", "sighting--bd78c229-05dc-4b5c-bb00-e097fb9bae39", "sighting--787ad26e-4901-438e-b0ca-4ea57118aa36", "sighting--283ce9ac-6f4e-4de3-a67c-37787149a8cc", "sighting--e17eb16d-fe4b-4b2f-bfb0-97c7e6e7c34f", "sighting--5f7f7d3c-4dc8-4753-9ee4-2b1fdf12b1f0", "sighting--8d1561c5-b1e0-48e8-b1b9-8b766e070f87", "sighting--fd3b4f3c-4bb8-4992-9c38-a53365ef0a35", "sighting--f1010d97-5fbf-4cb5-a3d0-ec90b2be6880", "sighting--2ba48ff8-a551-424d-99cb-387cc6487241", "sighting--992ec20d-995d-47dd-a2a3-97f21ee5b42c", "sighting--627c4c28-dac1-483d-abed-7f45d139b3ec", "sighting--f09e8b36-c92f-4fab-adc6-af8669f59195", "sighting--ce05f375-1695-4625-bde6-3d7e129d6aeb", "sighting--1b336c75-0b61-4091-a6fc-d7dd1855e4f2", "sighting--43979efa-fb3b-4bc3-9c87-155da76397da", "sighting--29deca1c-6e9f-4071-a84b-73c426c651a4", "sighting--51cdadc3-84db-4054-a693-e0d438fdcb07", "sighting--ab5cec39-388c-44d4-ae98-b0f6dbec185b", "sighting--61b7975c-cba8-4558-b323-7d7c5d11e344", "sighting--87135d06-57e2-4ceb-b658-42d9acf841ce", "sighting--6fe7a06d-7496-4548-b75d-f0c228f12745", "sighting--2dae362c-b188-4c80-bec8-9bfa963851fb", "sighting--d6fb0801-39ab-4b6b-be5a-270f1deffed0", "sighting--96007c5e-00ce-412b-9ecd-547d4c41da6a", "sighting--0b076616-e74c-45fd-9573-fb436a5f4e87", "sighting--70320972-0910-4822-a5b7-261e719bbba6", "sighting--5669b696-a0ae-42fd-aad5-219d11fb7575", "sighting--4997f841-111e-4ed9-83b7-b8fb664be360", "sighting--d4736df7-e4d6-458e-af82-4b55dcd11a31", "sighting--4447e431-4976-46a0-9862-1a648358dab6", "sighting--d99c65c5-5526-4d00-80b8-5433b7429679", "sighting--05a97450-ad90-46ef-8f4b-27144078468d", "sighting--02849bab-a23b-446e-a794-b351cffef1b1", "sighting--fa9f4b66-321d-4d18-ba1a-2e114d1b8142", "sighting--24ee6091-5986-4dd6-a507-b9571437827d", "sighting--58b1db2e-462e-479c-a3f3-9791f909cb97", "sighting--cd2f8027-7927-4f6e-a117-3f8b215c3c8d", "sighting--2c37a9e0-4541-488b-9c66-1587a6d783cc", "sighting--201949e8-c747-49b3-a29d-e3a448e0ef5a", "sighting--93804c7b-d145-4fe6-8bea-40aaba17be3c", "sighting--98ee9306-795a-4657-9e03-17021435c0aa", "sighting--9a0f9756-8722-49cd-a99b-99edf8425083", "sighting--7362d145-3042-402c-82cf-d5d81d12ce19", "sighting--5e74cea1-8aa7-4c0b-abb6-d1cb1f135bf9", "sighting--0eceaaa5-12d7-4ec9-841b-4f7b883b11b0", "sighting--39b16ea8-065e-4f0b-9616-c478fc9b209f", "sighting--eb6b921a-4fa9-4b36-944d-6c7bf7e18d04", "sighting--4290da5c-2044-497d-bc33-25ae55cc2b71", "sighting--47eae0f5-0584-44cb-96e1-0460c4a248ec", "sighting--29d5fc68-2eac-4d24-97e1-85984f9ab232", "sighting--68b694b1-16d2-47fa-a4f1-61b5f111d5a9", "sighting--dc83e91f-636f-4e79-87b2-e5d23f734f8e", "sighting--2cb9a691-62e3-4daf-84b0-06ebb55c37ef", "sighting--62950f51-368a-49eb-a0b9-1835994f5956", "sighting--9c9db34c-45da-4203-8ceb-2df11cb909fb", "sighting--d9dfde02-77cd-4957-ba65-fa61547f4065", "sighting--e3a5c4bd-837c-4b80-8573-7e71d22fc847", "sighting--eb70ab82-d896-4faa-bc5a-acbf5f6114c1", "sighting--930cf026-5bd8-4944-ba87-5620e34f71d3", "sighting--aa63e7b4-f96c-44ee-a38b-eb3327c2213f", "sighting--11941c21-9a7c-4a1f-9fae-d648a24f8a37", "sighting--4027114e-78d0-4506-9fea-b90fc98dadd8", "sighting--43231680-5810-4605-ac22-3ab005fb74e9", "sighting--6ebe7d08-efa4-4f79-9690-2186074279a1", "sighting--8b923510-1f1b-4a99-9452-5723b746cd0f", "sighting--7edea04a-8df8-46fc-9693-72aa54a36cb2", "sighting--977cbb01-e0a0-4df6-9db9-33eb306d7acb", "sighting--856ce2d8-4e0c-4576-993d-44e2258181d7", "sighting--5d061722-fbd8-48db-a8df-4fad5d571320", "sighting--4b0be341-9356-4973-ba81-77c8207ff4d9", "sighting--c7bb0781-7838-4d53-ac2e-8dc7d2251063", "sighting--59e5857e-6c1d-40be-9bb7-893bf76cb552", "sighting--3617cec5-aa82-4a0a-842f-578152987fcc", "sighting--f8869ec9-84f5-4f79-94d2-f4be6e3aea90", "sighting--9fbe1665-15fd-464e-bb64-8a4aa2f43f16", "sighting--9a66beb6-187f-40fe-9f6f-5c4675b22f6f", "sighting--f8af3d66-3c6b-4bac-b665-b84325f42002", "sighting--e85194d2-034a-4035-bb2d-4d53cfc73657", "sighting--e3870559-f77c-48fb-984e-14bd45a3b8a0", "sighting--8beb7fdc-aea0-4d49-8ae6-15b5206d71ce", "sighting--d8170a3e-a0e3-41ab-a022-67177cb78757", "sighting--5374b1e1-152f-4ace-89ce-709a90f7b11b", "sighting--39ddb80a-4f7e-4143-957c-a38366e71f71", "sighting--80ec5a70-2b73-4192-98fd-2fcfa766f5b4", "sighting--eea1bc7f-f833-4080-acc0-9a9f9116b422", "sighting--2814ffe5-c455-4d9d-81ee-07560ff1596e", "sighting--4f6bf816-258d-4a28-8d85-15b727109ad1", "sighting--41e59e8a-8c48-441a-95af-262c77767c71", "sighting--6e7f1edd-e28b-44f7-986c-65bb6026c80d", "sighting--82c0be70-8796-4fca-84cc-bcf5a8b7c12f", "sighting--12d0e459-ac4d-4de8-82b5-a984e91e871f", "sighting--9e090ec3-efe5-47bc-8cce-9d2b49170eba", "sighting--3651df79-a6bf-41f2-b93a-795190271a6f", "sighting--620df615-df36-4a0e-ab2b-f502b6261784", "sighting--008d2bb4-d5b7-4f67-9bad-964fcfa6770d", "sighting--ad089c6c-0b79-4b4f-83fb-6f7e8d10026e", "sighting--8d4358ee-adae-4a5e-a78e-9f253c97a4a9", "sighting--36b08f11-f1e2-4752-84e7-03e8de1f1435", "sighting--6278ed9d-c2d4-4c73-a401-e4fbdf75d284", "sighting--e98daa57-f8c3-4ea1-9404-4e431197d5b0", "sighting--72b9523e-83f2-4454-91b9-9563031e6c40", "sighting--4d402761-0aee-4dd1-91c6-95aac9fd1b98", "sighting--db823081-f1b8-48dd-a1ad-246e699d28a0", "sighting--a11a9150-5313-4e70-9333-a7caaa995bea", "sighting--756b4df7-0b4a-4330-9f91-67329acd48f2", "sighting--36e08489-bbd0-46f1-a44e-edbd03c5498f", "sighting--fd0220e1-8221-43de-8f8c-73110c070a38", "sighting--c319cb0d-188d-45e2-acf7-d5f4825555ee", "sighting--ad9f308a-679e-44ca-86e9-fe0f8734e7ce", "sighting--05abeaed-8dd2-4f9b-9620-7ab53bed4465", "sighting--72ccf2cd-e61d-42e2-a8f8-55a714868ad7", "sighting--d854f1df-02be-4aa5-a127-dad77285daa9", "sighting--b20efde0-824a-4b6e-abcd-77e084b40896", "sighting--8631cf1d-604d-4697-96a4-e5f41f166b38", "sighting--dfcac93d-13f2-4d20-b28f-6d03eebe5a4b", "sighting--f9cb43cd-56e3-47b9-9842-24a7be73f333", "sighting--d9453d49-1748-48e0-abe8-1b994a10a19a", "sighting--7b5da3b8-c5ba-4809-a233-f3dad997a88e", "sighting--55274369-811d-4120-92f1-40e2481034a0", "sighting--dddf5cb7-8c59-4db7-a3d3-2cba5e2e08c1", "sighting--794fbebb-63c8-4ca5-b58f-317d62f66403", "sighting--73723d00-7aa5-49d4-a7e0-509ddc7701ab", "sighting--9a02380e-3dee-4573-9b61-11405110cb7b", "sighting--193898c1-68e2-483f-b0cf-1e8fa73032a3", "sighting--59af31d0-1e60-4d3e-801e-4e901d93e8e7", "sighting--c0e6b98f-22ea-4e7c-8d72-4dd349b22e2b", "sighting--aa787bd2-9920-4ba5-beca-c3a8aa05b9f2", "sighting--f5e55314-afe1-4d90-b255-8c8d8bac9a9b", "sighting--648565f6-cb23-4b78-aa31-f855d042fb26", "sighting--e6379229-5046-4301-b21b-ea40a6ae0f19", "sighting--29742969-b64d-4edf-b9b1-aa2321f59b50", "sighting--f9d5645c-936d-4f68-b713-f9c237b6ef1b", "sighting--74ab95d6-c96c-4e60-b85c-157aa0b5a82b", "sighting--333de8a2-13a7-4f78-b36a-759881f7d87a", "sighting--6d92176c-4884-4d11-837e-fc4a3c94353d", "sighting--52df114d-e7c3-4ec6-a990-f3ef3735e66b", "sighting--43131f0d-5d78-4bb3-aef8-604d5b9803f1", "sighting--89ab164a-4ed5-4899-8fba-386cfab60f0f", "sighting--a3dc85f7-3e51-4b75-a7c2-9347bf278b20", "sighting--0f74fa28-9b3e-4d76-8b76-e82662dc7219", "sighting--268c4931-4691-44d0-8fc1-74c7c77a59fe", "sighting--7db88fdf-4eab-4eca-8fbc-fcd3eb5a32c6", "sighting--6abf4fb5-61c9-422b-be04-bb25f51d9e84", "sighting--8827d578-8be4-4105-a7c2-825d84a85e65", "sighting--77362b1b-f529-476c-8e60-fed61dadb74b", "sighting--bfa41f59-2230-4936-a089-ad1caa4c00aa", "sighting--fe37d001-4207-4901-adf7-5e8f128da379", "sighting--e6c9ac8f-ff4e-47e8-9aa3-1243b2e860a1", "sighting--86a65887-3a3e-433f-aec5-537483f00a0a", "sighting--9d4c92bb-409e-48ec-981b-c307af2b061a", "sighting--75853c03-599e-441d-bff7-821b9adb377b", "sighting--80138d0e-2db6-4ab7-b041-bce481d17227", "sighting--bd0b7210-adec-44fe-9d66-b65e4a1c5f5f", "sighting--e497ec41-1665-4c5e-bbac-b0a1a7031bc2", "sighting--85a439a9-848a-41f1-a01b-655c77a95585", "sighting--9a082200-deec-4d96-b74a-5e1af0f86f5b", "sighting--6eac71ba-0214-4e83-8c0b-4a5688b6d0e4", "sighting--eb8b6177-416f-4f58-9ed6-9b638f8b7400", "sighting--a3141759-7cd0-4093-a055-2b2ac20f61bc", "sighting--5a43141d-c7eb-4e4c-b787-b6474e44ee99", "sighting--932380d7-b28b-43f0-b2f3-9872fd196ed5", "sighting--f51bc3fb-0e98-4f7b-889b-e76672cc633d", "sighting--8cee0274-5db4-47a7-94f2-3e01c89ce99a", "sighting--cb109fb6-fd0d-404e-83b4-0aebc097c96c", "sighting--8b718f14-2805-4cb7-b914-d2428a20298a", "sighting--72ea81a2-d6af-47b6-84f3-fd00215f9d5c", "sighting--b50901d8-9674-4f43-a207-f7e3830ecd8b", "sighting--6f4a3285-f951-4d82-9c2c-75cd05f0ec46", "sighting--6910e514-c985-40ab-bf92-f1167fbf4fad", "sighting--a5d11960-b890-4d3f-9e2d-2a9b0a004316", "sighting--6f4cff89-97ed-478b-8811-b91becf4052b", "sighting--7e30a60e-2529-4fa6-add5-68313a3e048c", "sighting--63e05bf3-2afa-47c2-bb74-1546e38cc7b0", "sighting--5413bea9-4d29-417a-a2af-f15c0a9e8391", "sighting--491ad952-dcf7-4f50-9364-ccc665f4f62e", "sighting--332b2bd0-615c-416b-8c4f-75b640a05947", "sighting--833f219b-5c56-44ba-ac3f-d6f10146ed61", "sighting--f842b67a-8123-4df7-bdd2-0c4d6e1af0a1", "sighting--62dc0d57-31f3-4a08-b3a4-9bf41403507e", "sighting--38db113c-0bcb-4c46-a86f-d0fc783b45ba", "sighting--3fc978a9-e676-4c3c-92d9-e305128118a2", "sighting--7138f9a4-5bfd-424d-995c-5e99e51567d1", "sighting--16546710-af0e-4b66-8c29-4cc502201103", "sighting--3c566e03-1c90-4719-ba37-818bb24fe392", "sighting--fbc02f88-db44-416d-b3bc-89510f2a2fbd", "sighting--f59bd07c-ad7d-4fa6-8692-75b49702a53c", "sighting--8d3e5849-1a9f-4380-857d-4c7575351224", "sighting--b9cb11d1-dac9-41bc-8ecb-269ba3a3bf5f", "sighting--3a93911b-a8fd-4f62-879d-d7331ddc3630", "sighting--f4289eb4-6eb1-41d6-a872-9168c322f705", "sighting--553a1831-259d-4745-88ed-a637406b2c03", "sighting--90424695-16eb-4f33-94af-7129b87ae378", "sighting--bcfe91fd-1108-4872-a732-9e898fca782e", "sighting--d9e67628-188d-437d-906c-0c02b3a677fb", "sighting--9cc4224a-61a9-4698-b177-412fd4923d85", "sighting--99ebeb0f-a481-4ea9-8149-c2c8a7cf631f", "sighting--f9d945bf-8f16-4970-a38f-4e5d8323ea79", "sighting--6640f5cf-df0c-48f9-af64-d358e1aedf88", "sighting--312c50b3-1f9d-4433-88dd-05cc203b2c77", "sighting--2a2b2fc7-a3c7-44ca-9a3c-e598b9f56185", "sighting--d710786c-937a-45db-8940-cb1e9cec04b4", "sighting--5867c77c-1159-40e4-b3f6-01dcd101f7a1", "sighting--8c0bbcb4-c673-4991-8803-3e7e6bb227e6", "sighting--17e2f8c0-1c66-405e-be76-717e595ea0a1", "sighting--90157884-8b15-45c3-912a-2056ed5e991c", "sighting--b371c067-b3ef-4227-bb04-7b8b65553a6e", "sighting--fcaf2bcb-9fab-4b9c-9157-fd92252b59a6", "sighting--a6d1f7f9-b4be-41ca-91d9-7bd13176354f", "sighting--dcff11fe-a4a9-4805-a46b-b212d71c8d5d", "sighting--cc544ebf-8d90-4927-8b63-a2d80470469a", "sighting--6fa55dc9-4898-4097-9cb3-83ae820c2492", "sighting--65a0f83f-3d45-4dc6-8bcb-ddcceb54855d", "sighting--eee8df3e-1aa3-42e1-be09-ab6dd260b6e0", "sighting--6343d540-4721-40f7-8ca3-106edbe51d58", "sighting--bbdcb9cf-f3a7-4b22-b077-7c91e9dcfb99", "sighting--b9cc42a1-0f24-443b-be70-7841fb8933a6", "sighting--e8ad051f-70cd-43eb-a592-cadc4f9f9b0c", "sighting--49db1260-f96a-4061-816f-79cc27dffb71", "sighting--92b31d64-a0d9-4f55-9f0d-675cd9cdc8db", "sighting--0cc837fd-abaf-45b2-bd5c-d7c2dd8eef9a", "sighting--c82f6de2-dc8e-4ddf-bb95-37678f2beb42", "sighting--4064878b-4299-43dc-82df-99a4b6ce2dbe", "sighting--2799011d-4ffb-4adf-b29b-c0e5907d4a1b", "sighting--c3e5c0ed-94f5-4cc1-af91-6e10095f2806", "sighting--1bcb88a9-679c-4ad5-a03a-f042517e99b5", "sighting--eecbb74a-56df-45be-bb58-12b3d669a9be", "sighting--3b467fb8-f244-477c-8846-6e75afa51fb7", "sighting--1922d60f-cc90-41a4-ad79-0a81266acb85", "sighting--e0f2a642-d9ae-4b84-81b9-acde40129494", "sighting--96da4219-ada6-44c0-ae4b-b54570c2179a", "sighting--6ba88a5b-95a7-4fcf-a1d7-90d86a001f67", "sighting--09f58ebc-0923-42f7-bfbd-9f6edce3e5b5", "sighting--459932a8-f73f-4803-9df3-a5d793e68645", "sighting--1ae86d4c-c0cd-4a34-8ca9-a695f5a97f11", "sighting--40d61521-03f5-4ecb-8b37-1343352d5208", "sighting--a9c5ea09-7369-442c-b2f4-8676a40b8163", "sighting--962399d0-48f4-4f2b-8cd7-70934f4b8068", "sighting--3067f4cc-2ce6-47cd-b8c9-87e4c75f57a8", "sighting--ee315e00-a114-4dae-a51f-6d61c9682496", "sighting--7738ff55-d09c-4a1a-820b-d1ca7fbb3abf", "sighting--65690a69-faaf-4189-a53b-5c71a0ba881c", "sighting--3261cd07-d708-4d42-9c2b-b478ff1dfefc", "sighting--f82ba6c8-0d6d-455e-b321-ff0e74bc635b", "sighting--efa819c8-2167-4f04-931c-ca85c3cbc2f0", "sighting--315473dd-23b3-486b-904a-1cd4cdb47092", "sighting--e40ac104-dbb3-4fb4-b0e0-40ee98d0d852", "sighting--86708cc7-2621-43ec-a9c9-ce040009e7b1", "sighting--020e0442-21f3-454e-94d2-1e6851c392a9", "sighting--7ba46ce9-8d1b-4b44-bc24-cb819547e403", "sighting--59bf1087-71f4-461c-a270-236fc2986296", "sighting--b6d5f7f2-bc64-4a37-9647-06e98ed7ee19", "sighting--437732bd-c453-4c5f-badc-eb81044ddcd2", "sighting--ef3fceae-0f96-4d2e-a0c1-8b77def7fb16", "sighting--635ef3eb-a4b4-4d29-b64f-392ab365bc2b", "sighting--e23e63e4-6460-44ca-93d3-02f921973ebc", "sighting--73a833bf-0df9-48ba-8614-b497541fd98f", "sighting--7fe31021-0c6d-412c-ad9c-0d7c5aa72f9e", "sighting--5a5899d6-f164-487c-8c3c-9cd60df24145", "sighting--b904655a-3cf7-4a6d-8ed6-d78d14a383c0", "sighting--0361a967-d4d4-43c5-a98b-bb032f106b7a", "sighting--cbeb58e4-c3cf-4dc5-a6e8-1fbfdd1fa92f", "sighting--1b4451b9-030e-4c7a-b651-dbebd690c0d0", "sighting--7742f10a-03c7-4f95-942a-294d27061c67", "sighting--b308208f-2618-446e-8dc3-21f0cfe74eae", "sighting--fb0eb574-005e-42b3-9f86-4bf2cea09df7", "sighting--12aabcd6-6eb6-4d72-86df-58e02571de88", "sighting--74c0d1e8-323f-4c48-8621-8f77414f0bdf", "sighting--3f946206-39a9-465f-b2a2-55e62d5bca11", "sighting--8ce1b415-ce2d-495f-884d-6bed022a0c03", "sighting--a4ac356b-50da-4d07-a961-cb01b885e35f", "sighting--73075793-5fd7-4fe2-8303-549253699025", "sighting--d52187f7-992b-4a69-9d90-c335c4cc1881", "sighting--00e4f1d7-eb92-4816-8567-8eb77dc53010", "sighting--9bd9289a-c315-461c-a945-6bf938c7da14", "sighting--6e38bd9d-6687-418b-88d6-f59b537797ac", "sighting--aa57ff28-d242-4408-b2e6-8a0b897c2bf1", "sighting--3fcf2f05-41ad-4497-8e94-af910a3bd5fe", "sighting--9c7cc3dc-5b01-4b5c-ab49-beba6576c104", "sighting--1768b061-f092-48f8-8d81-a7cac18f3c23", "sighting--356c7ce9-0a98-450b-b80e-3e71e5e9afb9", "sighting--b1d52156-fa35-469c-9c4e-d0ea2a2021ff", "sighting--e8f7d17f-7035-48ba-90e9-e109112600b4", "sighting--9f6fce8e-ead8-47f5-81c6-3866341949df", "sighting--1d1501ee-d9ac-4c2b-93f2-e6fa93d8060b", "sighting--d49160b6-0453-479c-94d6-a971d1843308", "sighting--5f923c6b-5163-44ff-85c7-60cf69c9a4be", "sighting--57792f3b-690f-4cf9-a495-35938f2c7f77", "sighting--3ea02195-a8a5-44c4-8939-4f7a7bf92c55", "sighting--0faaf674-ea04-4293-8f8d-8953a330e68d", "sighting--bedf5a9a-1ced-49da-a88a-f4785d0531f0", "sighting--c19b3cb3-e755-4315-bd22-ae7b02ee1053", "sighting--bee133b1-a4f4-44e9-8cd7-030413f48fa2", "sighting--a45a31d6-6fe4-4fc8-a4f6-5a28cc9d8cbd", "sighting--f81cec57-f67e-424f-b277-50097546ad0e", "sighting--93a19081-e94f-4219-ad3a-f349ff50d4d2", "sighting--0e9edc6d-ca47-4007-9519-31a92bf5baff", "sighting--876351db-8010-4541-8d10-68cd5f05e1f7", "sighting--c112e7a1-6ded-4b72-aa6f-57bf68cdaaba", "sighting--e6a7cd58-e5d2-4f8f-abec-c42071d5ecdf", "sighting--feb75403-fd8a-45dc-87a4-a5c25b6ca7b5", "sighting--852b048c-8449-4bbf-a962-f4eb87b7bff9", "sighting--204c2268-dcc8-430b-bdf4-a89982147afa", "sighting--3908ff6f-d02b-4604-985b-faf5d68a563d", "sighting--b9d4b89e-a13d-4c01-9fa8-ccf939113f36", "sighting--e496ab58-193e-4c29-87f5-a8c0dca01306", "sighting--2ec38f38-a41a-492f-9bf7-fe399e204b9d", "sighting--ce281ce3-c5fc-4fe5-9491-b107533aa62a", "sighting--09869ba8-9c74-4398-b7c9-0a81110ee142", "sighting--8ef0284f-e384-4a72-94ce-64ca6f003703", "sighting--cf67711f-d62c-41b4-a2d0-b23aee469369", "sighting--66d1143e-918c-45e9-9b34-d18a968a0b44", "sighting--74910185-af20-404f-abeb-afc24163706a", "sighting--ab370298-46fe-470f-a181-7d722e03d581", "sighting--f8c83902-43be-4c8c-9e17-1cb2c3dc3bda", "sighting--0ee60a39-9d57-40a9-b7c1-d335e5af6325", "sighting--0727a91f-dc99-49b5-b967-f3ad5cd44ba6", "sighting--5edeb129-ed35-4bdb-8dd8-ac6f9ce8b0ea", "sighting--2d9b2cda-91ee-4d6b-8942-d0065460237c", "sighting--2caffbfa-4258-44fd-9576-8891457cdd94", "sighting--11d9d880-06c5-424c-88c6-c619c9798ed6", "sighting--e33fcb0b-ae53-4d84-83ce-c25e283a65e6", "sighting--e7f7e13e-30e9-4999-b494-1ccb1e99e6a3", "sighting--b836a122-46a0-4d25-b6d9-310fdad36659", "sighting--ee3e54a9-8e4a-4e87-a8dc-fcc0587c232d", "sighting--8444b778-6d79-4696-91a5-e0fb5c883f67", "sighting--79a6ac45-3efb-473d-a8dc-6ad477bf0f1d", "sighting--83258546-2ed3-4e89-ab51-1d8638aa5049", "sighting--68416b64-caf8-4a1c-9d60-1030a87f939b", "sighting--dc40fabc-1e86-4f6c-895c-02afc6fa924d", "sighting--2ae8d0d1-5b14-4bf1-acde-99d0e13e108f", "sighting--615280d5-ff48-4212-9a5a-cd2e10c45608", "sighting--3e216eb3-7bb2-4ade-a9d9-f3e482c400be", "sighting--e4f6397e-ec8a-4f77-8ff0-a9951aa1c200", "sighting--3830c09f-4640-4ec6-8d13-b2827edba690", "sighting--63118f1e-dbad-42cb-9be6-616de2bc28fc", "sighting--519693f2-c7e5-47b9-bb42-4eb29b0851a4", "sighting--8e1520af-730c-4d6d-bd81-9a332fada796", "sighting--50ea685f-004b-4cd5-bfb3-66d77b529d36", "sighting--5fb20f15-6b2b-40f7-be92-46408f58605b", "sighting--2b1aee4e-7562-4e94-bded-ccb0dd342990", "sighting--d3ec380f-5fed-4f37-a827-7819aeaff39c", "sighting--e46e1ae2-a99f-45c2-95cf-574ca9b22292", "sighting--6c7fdd81-5be6-495c-bffd-07a096167798", "sighting--0edb2f17-bc16-40d4-9f03-be24544f13d4", "sighting--c469914b-acb1-4da7-8196-97803ec7214d", "sighting--00540fb0-30e8-41de-a22c-33e0a86a1422", "sighting--8e668158-8875-4321-88e8-41f6548380ca", "sighting--c2913e22-9256-49b1-9f5b-f632e6191bfe", "sighting--c42aff5c-287e-49c5-8579-fc896b5eeafb", "sighting--f731dc7f-15cf-44ea-ba23-8cdfe9f16ed0", "sighting--f5475a04-b9f6-4d8f-a41a-783023e995a2", "sighting--cbdd9d49-ea18-42dc-9fd1-3616092696ec", "sighting--bff0ddcd-6156-450e-b385-347ddfa6b1d5", "sighting--a9d3419c-35a0-45e5-9f6a-d96dd34e943a", "sighting--d296a4da-3b1f-43a0-bac7-c70d5923d271", "sighting--43a5819a-d791-41b7-a29e-d226133c1f62", "sighting--11504e0a-3b8d-4308-a142-b40028b4466d", "sighting--db03a721-992c-49f6-b444-72a54e637727", "sighting--2f4d715d-a3b7-47c5-b039-63f8c7dc71f1", "sighting--c0a5fe8e-23c6-4516-b23d-f8aafd3ca9b3", "sighting--cb0bec50-2ed2-417d-a532-b012ada5f461", "sighting--75e1919f-a6ed-471b-81f5-cd9508a22795", "sighting--3b25a8e6-d7a8-4477-b81e-450e6f298b40", "sighting--edab4c39-3b03-48dc-8a57-4b69530dda97", "sighting--6d56a421-2298-4fda-a1ae-38bdae88b25d", "sighting--2566d2c1-8bb8-468d-927d-80af6d3f6d19", "sighting--d706c6ce-74ce-47da-b5b4-6a6c5e77747c", "sighting--a3e22765-0eaf-4d34-94d6-2ff4f898163b", "sighting--eb16cdcc-3133-46b1-b3b7-b52fd9c74707", "sighting--54643849-a481-4ed3-8831-eac8bef7157f", "sighting--1d1521e6-9de6-4f9d-8158-094fa0bcd7ae", "sighting--b01f69cb-edbf-4318-9e0a-24dd25ce2b2f", "sighting--f130da14-7b0f-4ac1-9646-67e02c3df5b1", "sighting--538f11ac-1dc7-4a90-aed3-349028908c80", "sighting--9e58fbe6-a4d8-4991-964b-46c927165903", "sighting--4b0df052-f75d-4bb4-aa32-e7fdefaebdd7", "sighting--436ba559-d6f4-4fb1-af94-c7f6cb569d87", "sighting--7e96586f-9564-40c1-9a12-9834c93c1b3b", "sighting--466d3c06-44d1-4c2a-8e29-6809c9e07d02", "sighting--626aa2c9-7f78-4834-92b1-46bc992f65a0", "sighting--9698522f-df32-4494-a988-8ce1f3460641", "sighting--a2748749-fe4a-452a-a3c6-63f628e8134e", "sighting--35678da4-fa96-4d5c-95f1-eb7fec25cc09", "sighting--512fec8b-fe8d-4b98-ba15-128131a0674c", "sighting--e451bcb7-4f90-42bb-b737-3d12fe5f117d", "sighting--f3de93fd-49a3-4644-a465-451f80df9d96", "sighting--2c21450d-0cd4-4ca2-a395-d8990407eb23", "sighting--8a6788ad-a084-4ae2-923a-da4ca4819beb", "sighting--654cde55-1a59-4579-867b-b66f1f9ffbfe", "sighting--315778e2-02e1-4ccd-bc46-c243e7789305", "sighting--dd343302-a805-4157-8eac-be07ac3d8e3f", "sighting--e717ba80-b881-46e3-891b-450ccb7da948", "sighting--6b260ff3-63fd-4e98-b06c-6470244cf045", "sighting--66d27412-50a5-481a-a895-31de28a2c281", "sighting--64e75236-ef99-4783-a741-4a35ed1ee9e8", "sighting--f97a9309-c4c6-4334-be3d-680674b49dbc", "sighting--e35d4ac8-4519-4121-9a55-98a049cdc1cd", "sighting--7697946a-8b71-4acb-a097-f843c355b1a1", "sighting--fd2133c7-645d-40e9-9429-d78b13f45a1d", "sighting--f0b9af22-8e19-44ec-b89f-00217d32b3b7", "sighting--e7fd874f-3414-4310-8838-7e381ae63feb", "sighting--4b0804ec-609c-4b97-9a34-89990dd08518", "sighting--7f0cf660-189d-4216-a81e-a21c469db805", "sighting--41c48567-5437-442f-915c-a382c3739ad1", "sighting--9af6be98-f4e2-4bae-946c-5d256e4aee51", "sighting--73325b7b-5713-47ef-a4be-a2eb838c0e17", "sighting--e8798aca-f7aa-4eeb-92d4-76e156d4f1ac", "sighting--e67a3f62-5a31-4286-b712-fc8bcc9770e4", "sighting--622ee192-2604-410e-af84-d0c1ced2ed48", "sighting--70364cbd-ef73-43fb-b236-87738c6b5a85", "sighting--c577c9ed-c3f2-4f11-9ae5-38e968b776a6", "sighting--aca58fe7-1d1c-4c4d-9be6-5d15083a99af", "sighting--a70a0748-762b-4272-a848-00c3673c3667", "sighting--46738c17-7a14-42bd-b9df-4d2ba36a631a", "sighting--d3a38dd9-a34a-4407-aff1-05dd629a5f1d", "sighting--aa439e1b-eb2f-4886-99fc-d0a652b9e3e4", "sighting--3b96c544-90a1-49d4-821f-aa76d65b8666", "sighting--dfa3ed41-dd32-407c-8fa7-904f77eaabe6", "sighting--d757c6da-94fe-4f45-9d51-df7a11492c90", "sighting--7cb68795-d7b2-48b9-97bb-7304c62a782a", "sighting--8b18713a-3ff5-47ec-b733-fcf89f2d1232", "sighting--68275464-e889-42d9-8936-1442a100fbae", "sighting--7e43f17c-48ec-4756-a8c7-f429c4aa91ae", "sighting--38f7c664-184d-415c-879c-d6e1324aa448", "sighting--a3cd57ca-41ba-465a-b112-42ef05ce60dc", "sighting--aef4c60e-62dc-452b-9a13-260930877381", "sighting--41d73317-94f5-41c5-84a6-9f1d27263c4c", "sighting--7c0c8c5b-3e8c-46e1-97c5-c0c7b6214b82", "sighting--b8eb56af-4303-42d3-8d44-7c12e69a1d49", "sighting--e2740216-77b6-4027-877f-5744bc999f73", "sighting--e3d09148-5ef7-4f7b-a4d9-6c93bd59adfb", "sighting--e54552a5-41d1-421a-8573-5cc56c0ec9b1", "sighting--4d1ae8d1-90e0-4621-9978-5ffef43d816b", "sighting--865dceb3-1d31-4ed7-9095-50e50e2b9f34", "sighting--07f208bc-390e-453b-8319-2fccc997b404", "sighting--fb62d236-ec93-4d6b-89c6-356462d54ffe", "sighting--d15b5c60-7500-453e-97c0-4dd68dc08e5f", "sighting--8b6d6250-3fe0-480c-8da7-a33224ac6a12", "sighting--70482dc5-3d87-4f36-be80-e1a1abefda2f", "sighting--dcede543-8fea-4706-9818-7bdca9fc9ac5", "sighting--30727848-9aa6-4eb3-8cf0-8ca5e9a22d08", "sighting--4104618a-c73a-422c-8e43-92a08a751b33", "sighting--e18ca37a-4505-44f0-b85e-33fbe43d958b", "sighting--d781e323-f072-42eb-9cb0-9110085141d1", "sighting--b89457c8-d384-46cd-bbd9-d35b7edf5146", "sighting--06fcea9a-45ed-4170-9727-c6978aa09ca1", "sighting--259b2924-a7db-4157-98f0-b6bdeb78d972", "sighting--bc63a4d2-5890-479e-92f8-56c9f5e794b4", "sighting--a71bfbb4-f792-46fc-b166-08eae2316d43", "sighting--3d60f52e-c85c-4c11-972e-502ced5a0277", "sighting--c066d794-224d-48d3-b944-ea2fbcd54edc", "sighting--a934efea-c11b-4d96-91fe-a5c043806596", "sighting--26230fd0-deb9-4d49-9f6f-1a1eef8e17b8", "sighting--058eb88b-b8d1-4306-beb9-28378cf29100", "sighting--90d1da87-3f50-4792-9200-99905c90c2a4", "sighting--0025f49f-902d-4b59-bc54-b077561138b8", "sighting--19c859cc-efc1-4a20-b04d-0ebe214c7095", "sighting--83f709df-ee86-4b15-bc6e-284c3a69148b", "sighting--18554361-782a-4e89-b8a8-f910b22b5fb1", "sighting--4751dfa7-d9a2-4ed1-b0e9-bd9f4c654a82", "sighting--c31e73e4-7729-42ba-b8dd-052b094751cd", "sighting--91c92b7c-2a53-4ec9-8eed-43b363d1bb80", "sighting--1ba8769e-97ce-4ebf-b0d9-16fc309b615b", "sighting--ec4994c1-e086-476e-a68d-88704f47c7bb", "sighting--062c90fc-c7a4-473d-94f5-629426158360", "sighting--165f23c0-c2b4-4e4b-bd11-61268a85f5b8", "sighting--5ed94a0f-0273-42e3-b3f2-705330fe8e45", "sighting--0d52256c-d876-4408-abd2-a0e426bfeb77", "sighting--13103f65-2adc-45a9-9ba7-d1519a728057", "sighting--b4f0d9ba-3607-4ad5-90a5-416a18162431", "sighting--bf435016-b155-4767-9e59-35e305b2ddf5", "sighting--78098ccd-ad2d-497f-8260-f3c4c2f1b25f", "sighting--168fc9d0-c0ef-4211-b762-1b3f7f4afacb", "sighting--af52569d-8796-4ff8-b4a6-3023b07ce523", "sighting--8eac14ec-cf6e-4830-8407-5eb44c6b7074", "sighting--405c75fa-1574-4a08-80ff-db4ad2a6e4f2", "sighting--4d204f51-5856-4f16-a242-0f3cd98069ea", "sighting--e5855c40-c66a-4afd-837b-eaeaed6b1fbf", "sighting--12b18f17-3690-48a8-981b-d9d8339077a4", "sighting--b4e44358-156a-4587-b58f-e38253409e24", "sighting--126da539-11da-4e23-8c4e-9c4d45b35282", "sighting--d238a433-cdd3-4acd-8a2c-51380211df22", "sighting--e9335e01-ba0f-4332-90b9-6c2577eaa86a", "sighting--1cdf68c6-bf76-4910-b12a-a7a28b88c81c", "sighting--96577357-68a3-4afc-ac47-1f280183478f", "sighting--a6f62f18-fc5e-47b9-b159-a784af879edc", "sighting--3e13264b-740c-4c65-beb4-466b772c495a", "sighting--63118a45-3ecd-4190-b0c2-d9671c0c65ac", "sighting--9c0df869-9101-4fa3-85de-e9f86fe8585e", "sighting--e5801fc6-9edd-4157-8be9-194dd63e3761", "sighting--df127e1d-b0a8-47eb-ab0a-498d3439a5d3", "sighting--06109c2c-2273-4f5d-a766-c11035e82321", "sighting--03ed4306-66f5-445f-819c-2a2f358bec4d", "sighting--1043a66d-069e-48d6-8f54-adc404332121", "sighting--7ce07072-5d63-4b19-ac18-57299c19c873", "sighting--4235f589-4999-4cdf-a99b-1afb9be521f3", "sighting--d32ee83e-5542-4a9a-aed0-d88f04789d15", "sighting--cba5a295-bfd5-48f9-8fca-5e028d62d285", "sighting--b1b35bbd-ba7f-46af-9c92-3e6fb26605e4", "sighting--6191d74a-6ab3-4e3c-9879-0d7a79b07d97", "sighting--c9abcef9-78a8-4f99-aaa1-c052556f7625", "sighting--d8b31b03-32ae-4b3a-826f-92972a6cc34f", "sighting--8a67fe67-b9a1-487f-a984-fa547016b581", "sighting--3b5a43f3-d2a4-49f7-8331-a2aff32efd28", "sighting--33d4b6d6-c27c-44cf-a59f-3e5b6f4d37fd", "sighting--6801551f-d86b-4747-8fb7-d352572adcee", "sighting--1b2fbc52-8115-4bbf-9fcb-c2c6d4aae0f7", "sighting--d18c75f0-689e-42f4-a504-c1c447ec66ad", "sighting--4a1905ff-17be-4ca3-8000-6bf6943cbd76", "sighting--21aae887-9d42-4ca3-91b7-8293cb985078", "sighting--ed6c1362-c4cd-4013-8df7-0b48adda7152", "sighting--28f08544-d569-47f8-8b86-c7face8db6fe", "sighting--f86af966-c2c9-4889-a624-b047432fa52d", "sighting--81cac9e3-1901-4c53-bcf6-27dacff713c6", "sighting--a4ac0351-ba8a-4302-ae07-b4e78c741673", "sighting--1e8fe541-0db3-4b27-879a-13f0ceaf7b42", "sighting--e3b4bd34-e344-4c81-84c6-135ecc9a587d", "sighting--e77a1ee2-a266-42fb-a18e-5ac5a26e947a", "sighting--f39431f3-714f-45b8-a7de-06b395163836", "sighting--a8665af6-f6e4-4db3-85c4-8404f92a3674", "sighting--ff360956-a279-4053-ab17-18ced0b6d015", "sighting--2d68145b-b7f6-4344-92b5-d73a7d93c555", "sighting--75f15157-904d-42aa-a6ab-34fbe7944b2d", "sighting--030f5a3f-8f9d-4778-9c9f-9e2e98cd50d4", "sighting--89dc336f-8897-461b-9a16-cbe30276ecdf", "sighting--769aaf50-dee6-47ef-ae13-b9318335b181", "sighting--c9212a88-c007-4aab-820a-b11a2de396a1", "sighting--4ae0f322-c897-4143-aeab-b802f50671fc", "sighting--c945a21d-4741-400b-8b9b-87cd5da45130", "sighting--4affff05-df43-4beb-b8e9-76cd1733a072", "sighting--e2434655-d75d-44e7-b989-cb550ca601f5", "sighting--907abbd5-48b6-4211-b878-5493a485fca6", "sighting--71d62076-e12f-4cd2-9bfd-9bc8e422fbdb", "sighting--d535e783-90db-4929-b3af-8475b034a5d0", "sighting--2dd58e2e-42d4-495b-9740-b402e73a0723", "sighting--a0eb214d-338e-4986-b08a-ad9f068a2d44", "sighting--0c69e5ed-32dc-4844-98c3-0f849b49d396", "sighting--856a3bde-109c-46d7-9923-b5a2122e0269", "sighting--9b9f076c-5ed5-477c-98fa-724eab307201", "sighting--3f75ba38-d684-4305-97be-77646e67f6b2", "sighting--96acae70-652c-46ed-97bf-0a80ed5d6b9f", "sighting--8ba9edbd-1404-4d48-be07-0be32cd96327", "sighting--fa099eaf-0f74-45cf-b3cb-d8a3594ca08d", "sighting--12c1cb2c-57da-417c-9e93-703225a2baa1", "sighting--369e3bee-c26e-4b96-9c0a-7f847c70ba4f", "sighting--98e2368d-6b70-4284-a6fe-155af3460c0a", "sighting--9d1bf1cb-bba2-46f0-b29e-6b2b369ec4a6", "sighting--c18767d0-b004-4003-8db8-a41c6ad00281", "sighting--42f58e08-a43b-48a8-ae60-6c1842060716", "sighting--f57691f7-f02e-40a4-9e42-57215b6b20f0", "sighting--8c65f215-b9a1-48e4-b105-7ef541fd48d5", "sighting--4d4651c2-7df6-46a2-87cd-692e993b0358", "sighting--4b48929f-ac79-4afc-91de-13ebae17e7ca", "sighting--26a08fd0-8662-41ed-b404-6a73142e10b0", "sighting--71307889-42b1-44ec-a308-a502177d106d", "sighting--9c686c28-b88d-48fa-94ad-799d4c970bbd", "sighting--9433dc6f-c820-4f97-b9ff-0b84640f39c5", "sighting--7a8bc299-47c6-4aeb-9f17-b02bdc9dbaec", "sighting--07e68559-a1ef-4caf-823e-dff039305e56", "sighting--059173e2-0054-462a-9e1d-8bf0dd869ec7", "sighting--95ef94c1-d900-4967-8030-d708e3979912", "sighting--95b15991-a90f-4e30-9543-bb5eefbe70d6", "sighting--eba95d14-bc95-44e9-b4ad-47029807d07e", "sighting--7fe427de-d9e2-4b9c-a46a-e5c579656477", "sighting--7b844885-9532-4c49-af54-07d6390e7c20", "sighting--8fae2d46-5fcc-471d-98af-d2e4e375213d", "sighting--9d23659d-795f-4fe8-bc85-4db5eb399f76", "sighting--94b88136-cc63-456b-ac5d-7b90d3dbe9c3", "sighting--eaa2e0f6-5071-432d-ba95-23f827ffc3cc", "sighting--68ca9ed0-5615-4bd5-afa0-c042e963f42a", "sighting--549aef3e-ad58-4068-af21-b28937e59a4e", "sighting--3867b9c0-e0fe-414e-a1ab-0f85b6ccc4f6", "sighting--059e137e-a98e-46e9-b5d1-a9e292d00c8d", "sighting--abdd430f-3753-4679-950e-6166759f1878", "sighting--1520a167-d889-4326-832f-9e75a9cafbcc", "sighting--f872821c-2ab2-4961-8c26-7c8af49663cf", "sighting--d7567a9a-ec3b-4f3e-962c-b4ad7a3fb311", "sighting--c0de73bc-6999-4545-a197-c8f75e77d144", "sighting--01a18e05-feb0-4990-9dbe-a99c93e999f8", "sighting--b2a77485-5c23-4f8c-b174-052ac0406ba8", "sighting--bf017c09-0d3f-447c-adba-ccd5753dd82f", "sighting--66411bec-c3b8-4b73-80fd-dd61874f3d38", "sighting--ca0c56d2-32e6-4d98-9f0f-37323ef0eb41", "sighting--daeb9e28-4239-4c65-ad28-7af395037c87", "sighting--b8da31f0-3a29-4f83-8e67-5f431c661159", "sighting--bdb8b3f9-c383-4024-b79a-c9170c449fa1", "sighting--90f2f5c0-0dd6-4909-b4c9-0b4cd1a5eead", "sighting--d0f983f9-70d8-4b4b-8913-a043fe4adfe3", "sighting--6a775fbe-b6d0-4d67-9d86-bc5940647aa1", "sighting--d136ee22-0abe-4e08-bf24-9f2896d3a567", "sighting--77d51a64-61e8-43bf-8869-b989320ccf7e", "sighting--7880bb37-e363-4406-8aac-bda945118e1c", "sighting--259021fc-409c-46a9-a42a-b656d94fd619", "sighting--a86acaa9-168a-4713-b913-152390cafb91", "sighting--535dfaf5-5498-4ce0-bee4-a6f2770ee205", "sighting--b7cb6b10-8a54-4513-a2fc-b17581384f77", "sighting--84f7019c-ab7f-4f78-a9a2-3b288eaae075", "sighting--efedc0bd-475b-49cb-b757-ac0df4230d3a", "sighting--a9566544-418a-4818-b882-fe4993781ba2", "sighting--0720ee7d-b9d2-4362-8339-0b0199f19fd7", "sighting--b65be457-d55a-4ff6-be43-2d81dadf98b5", "sighting--1911c881-d5af-4eee-b327-5b499fb7328e", "sighting--b2166e67-7033-43e5-8148-f41043b37ce1", "sighting--db2f30c6-b586-4a8f-bde9-ef815a6ed5e4", "sighting--16109585-9b63-4a78-aad5-63fdfdaaa031", "sighting--d7d96647-b977-41ef-aaaf-5374f02851d6", "sighting--2cc7b4e4-9d51-42d4-afba-cd04aeee624d", "sighting--0c1ef781-5edf-4c84-bd40-63538cc3f396", "sighting--156a4ad4-37cb-47c7-a157-a6c42b1fb44c", "sighting--c9e656e2-b90b-49d3-8afc-49a01679ada6", "sighting--9c5e0ea6-ffe1-44a2-9dbd-e1df659ca27d", "sighting--34d0c7b2-529b-419c-893d-da041b7794fd", "sighting--1ee883f3-a1bc-4019-928c-003fedec8427", "sighting--741866fd-3b7f-44ae-b2fd-c3fa52d89975", "sighting--ea638e39-4c5b-4130-a5f1-45e9c685416e", "sighting--3d635ef5-5021-4e45-a4eb-eac02f93fb28", "sighting--fb46746f-cb7c-41ce-b3d7-f6a0bf6b059a", "sighting--35357a2b-1e90-4375-a487-58f01b963e33", "sighting--9fe84a81-776a-49c8-8224-e3398c368a6a", "sighting--e3de5a35-f2b2-46b1-b762-27b000c5bb82", "sighting--d2773622-d9cc-4bcb-a541-b5b98e9fc43e", "sighting--1622f646-1205-414a-acc6-88f73044e9f3", "sighting--1e81e696-d25a-4f59-b570-68e2dc8472e6", "sighting--51f57acd-654c-4c51-bb58-c1f14267d9b8", "sighting--234506cf-5722-4d26-923f-f0dd561efad0", "sighting--7567375c-3e4c-47ca-af3f-222e22c00e8b", "sighting--2fa908f2-256c-4af8-96f3-47afa1c28fcd", "sighting--ddc7eec5-adb5-405a-96cf-63dd01f7e2df", "sighting--3031329f-5a58-4da5-95de-ba89c0b4a104", "sighting--a4703e4f-bcdf-4f55-83f7-77381075d885", "sighting--00456cba-39e3-43ba-9696-da9fd4bde1fc", "sighting--44e9cf0b-e558-499e-840f-39606c2b2976", "sighting--70827f65-dfd3-46bc-a34a-d6beaa83a876", "sighting--b3882243-8ed7-4fa8-b9a3-a26fdf6d5c72", "sighting--96b2dc87-fe94-4952-a307-fa762dfb3d03", "sighting--862a89fe-b0a3-4b94-9b58-c2b840cf605b", "sighting--b1c00acc-9a1c-4b6b-9974-bdb5fe641638", "sighting--9baaa47c-c4cc-4607-955f-e5b7c728e053", "sighting--0f0ffc4d-e189-4354-853c-ebcd6c6e182b", "sighting--1ebba250-f35d-443a-a140-485e4fcd2236", "sighting--58fbc919-81d7-4f04-b84d-c45f23fff78f", "sighting--e1ba5a6a-ad13-4853-bafc-b1545dc160b0", "sighting--241e2f22-19d7-442b-ae5f-c0a3a70814cf", "sighting--dd67f3e1-5a7a-49b5-8737-73ff424542c7", "sighting--9258d8f7-f3af-45ee-985d-9faab6ea73a1", "sighting--81a794d6-07ad-441c-b234-997ed8454932", "sighting--f025d602-f1d1-4a2c-8285-89f6dcfe0e8c", "sighting--653d4875-0cb3-4035-8f75-90928e24a17a", "sighting--4504ce4d-54b1-4274-92f2-600248e68319", "sighting--4b4d491b-9577-427d-b7e2-37f882dce7d3", "sighting--68bc2a4e-50ed-4bf3-abbc-70fe9388aa77", "sighting--5bf09c95-4a44-47e4-90a0-f916945bca22", "sighting--d6169e6b-1ade-4730-b5cb-b6677d404cc3", "sighting--696c4bfe-ca87-4649-88b3-ace110595eb4", "sighting--ffa9c684-9102-4929-bd0f-25cea30e6592", "sighting--17bdb893-514e-4924-8486-e9c80514170f", "sighting--5e4915b1-314b-46d7-a93a-63479c9044c3", "sighting--faece48d-bf8d-4087-8741-b8a7e5a1ad06", "sighting--603f9dfc-fafc-40df-8623-61e6bcc96383", "sighting--1f68ea04-7b6c-43f8-966f-034082df0772", "sighting--8264a1bd-e2a4-4cb5-9591-a838b1251b05", "sighting--99927e9b-94b6-4863-bfda-89832e432703", "sighting--8edcfd6c-28b1-4dc5-be69-02d22b49c0da", "sighting--846805b3-cbe7-40e0-8da5-b67ad7d81755", "sighting--598baaca-2745-49b4-94e1-2cdb6cf9e587", "sighting--fa0cff79-d7c4-49d4-a314-fd6a00dce060", "sighting--43dc52d1-7919-4fc8-81a8-5ea785a247e7", "sighting--d5724b2e-e9dd-4f56-83b5-7fef4c9b738d", "sighting--60b80449-cdfc-4cf3-ac1e-c5c58eeeda04", "sighting--e32d7307-dc7a-43bb-9057-ab8c0326a3f7", "sighting--7b28646c-ed2d-44e0-b548-5b82962e84d7", "sighting--2a3b033c-463d-4fb1-ba2b-4687b146e6e6", "sighting--7b1963ab-8d89-4a03-9e0a-eb3e51b4e99c", "sighting--6628a4d7-e585-4b92-86b3-67b67e492f52", "sighting--92c5cb4b-94d6-4ba7-a3dc-9768336ba56c", "sighting--654cad67-8500-4ee1-8fe6-1d12100953a2", "sighting--411096b7-4677-4394-85a5-0033c342db43", "sighting--b775afdb-80c6-4db1-828c-75c01bca12b4", "sighting--e44b75a2-7d50-4261-889a-dfa92dca5aa3", "sighting--9fc8a754-a226-4204-a4ec-8f4488fe1110", "sighting--d823d86c-3e9b-4072-80fd-e3090c7e5d28", "sighting--3fac5067-634d-4f7b-9435-7aad5e86c76e", "sighting--60a7a033-b7aa-4d31-ba03-ec1503dd2c9e", "sighting--13195839-9c3a-42bf-9c63-a6a984766c0e", "sighting--6a9123c3-6295-4a24-ad87-7529c837f241", "sighting--6f5dcf1f-d8d0-4cdb-a4ff-15845b0a6397", "sighting--f2c4f3f1-ad11-47a3-8d52-9a26f72de5dc", "sighting--8ab5135d-bd6d-4876-9d19-0c01b5758104", "sighting--07fbba22-7bc7-426e-97b4-d4270ec571c3", "sighting--e8c1354c-7ea5-4d0e-90c1-cd2eb93ee9f4", "sighting--e5853790-80ac-43cb-8663-cc39534a9bd0", "sighting--20a4258a-45ce-439f-9054-546f28859eec", "sighting--90da9450-8a09-48f6-b852-0661c88460bd", "sighting--890d1a50-dc2f-474d-9aa9-f0bf4c27661f", "sighting--9684b0e2-67dd-4e10-b4b6-db256a19b9de", "sighting--1c74b702-e913-4376-bc2b-a3cc80dc1931", "sighting--2498ebf5-3832-4ccd-a0c9-cb916c8c4f3e", "sighting--d1491ea8-6727-42e9-8758-dfdc595bd5ac", "sighting--5c26ca85-ee1d-4429-a1de-2f1b0db7890c", "sighting--83a0eb40-17f5-4a13-b412-a200c3e31a9c", "sighting--5fa679eb-93c6-4484-93b9-f71ce86d111b", "sighting--6622a642-e1c4-49dd-b4f6-b584128c6ad1", "sighting--7f181552-2ff7-49f0-b88e-836060ea19a0", "sighting--0af6c22f-25e8-4758-be09-d4d93f15845e", "sighting--e80ca5f4-f202-42d9-b78f-8e41286f27bf", "sighting--f6e20829-63b5-409c-806e-1c235eb5a0d4", "sighting--dfcc5796-f0ef-48af-975f-0c16d6e2daee", "sighting--7e278cdc-6443-4eeb-8663-3fb51bab76f9", "sighting--227fc0f7-0658-4304-bd46-59df8accf5d8", "sighting--20eb1ced-196f-4db0-bd1c-25a2884436c2", "sighting--1bad5448-6f99-4f08-aeef-c161919c22e3", "sighting--00b53c9f-fe3c-43bf-91fc-4b1d1904b9ca", "sighting--a3d69cc1-4b76-4dfb-ae30-832e3c91d936", "sighting--2317053a-cc82-4621-aeb8-a79d8d572bb2", "sighting--1b782886-c388-4348-bb9e-18d83c91028b", "sighting--52cfc534-246d-4cdf-b0d9-be8c40f886e4", "sighting--6fee1d27-aa1e-473d-95a8-a32618410389", "sighting--17633940-8f09-441d-9e04-469dbc4ef60b", "sighting--151eb158-b134-47c4-8baa-1dbcde8ffbd5", "sighting--ea6b88c3-274e-4712-95a4-1c191ee65aea", "sighting--2a92aa40-dbc1-4912-af9f-75e30f81d9a7", "sighting--886156e7-8c32-4875-b75a-b58c35b57d87", "sighting--4f140615-59a7-461d-980b-daf07360adb1", "sighting--90256fbe-1ecf-4323-ae09-fdeebe1eae85", "sighting--79ab4e88-12c2-4f31-a1d3-f9ddea6a4702", "sighting--a5252b47-660a-4516-bf33-6e70fd6f0c3b", "sighting--5e006426-31b6-4557-b49a-ed66ad36c07c", "sighting--689abbca-72ad-498c-9912-c5662112d507", "sighting--b1126430-3374-497b-8755-9120fc3e5a5f", "sighting--52c8014f-a1d6-4741-a323-e34a3c92a94e", "sighting--529a9841-dd27-45d7-9551-e69c9f2aa8a4", "sighting--3dafa41b-7d5c-4450-aed6-209d70359de0", "sighting--78ca7287-1e1e-4042-b0c6-cc49c0775cb5", "sighting--f304d800-f615-40da-b9d1-16ed387f2ddd", "sighting--c31b8b30-eb94-4b25-8a4a-2ba06dec1922", "sighting--f57bc68b-60bb-4a15-b859-2b5971651e40", "sighting--66d163b1-42bf-41b8-8a3a-7223244c521c", "sighting--6f60d3d8-9d00-436b-8e93-2cb1a35251d9", "sighting--338cb7dc-912e-49c7-9a15-f00e8f3e60ad", "sighting--019f3f21-b3a3-4cae-ac48-26ca5c70e6fd", "sighting--be8f605e-6e67-4e0a-a9b6-f012de535a23", "sighting--f1f81b34-1d00-43e1-b0ff-489a4d030dc0", "sighting--cc50e8b5-22cd-406f-8187-dae401e0ba3e", "sighting--dbf08e5f-44c3-403f-94b9-0ac2eff8f0bc", "sighting--99d9e8fd-b0ff-4032-8a0f-a9de74b24ee5", "sighting--0601ca12-0395-4f9a-aaef-c5d7a26237a1", "sighting--fbefce28-882a-4c6a-8438-ed6c356d82d5", "sighting--dc56f373-16e0-46fc-8a85-0352bbce60a0", "sighting--50e27c00-f128-4dba-bc06-49b332e491a5", "sighting--e6c48b32-2610-4e38-9699-ce997013e64f", "sighting--dd7ddb20-26db-45a7-b29f-994a4cbea414", "sighting--0f53044c-433c-4246-a5fe-7f05a7e6f154", "sighting--42a4948c-8bb7-4841-be94-f092d62c25bf", "sighting--4f26b075-a33b-404d-9fa9-cd579b51488b", "sighting--ed56465c-8dd5-44e7-95d9-d4aaef8b5ef3", "sighting--2e7377b4-5d07-4326-bd4e-c5eb0e4422ec", "sighting--f67d1b68-013f-4fad-8124-93c22eac040f", "sighting--14fcc6e8-3aaf-4fdb-aa71-33ef99b3e31f", "sighting--46de17b8-0e16-49f4-b403-972e6d0eccdb", "sighting--c318ab22-c0c3-4833-97a1-6b5fe95f5664", "sighting--8cb5d2e6-5dcd-4652-8db3-8e55072450d1", "sighting--ad72f1c9-9e47-42bc-b5b2-4c782e85e885", "sighting--f505c03b-4083-4409-8ac2-a551a7ba5924", "sighting--210cc26d-ee70-42ea-9658-062bea336a59", "sighting--bcba794e-386e-41e1-862e-57c176a7227f", "sighting--f340c5cb-de1f-4d0d-9dd5-4f4e7b3fb157", "sighting--d25792bb-3cf2-47d3-b79f-b2060e87261a", "sighting--36374212-6899-4d57-acba-7fe00c0fc211", "sighting--f9d26ccb-fc74-4059-8dca-5a99d18ce37c", "sighting--46e4ac54-b71c-4cc8-befb-cee58c96a995", "sighting--77c1d45f-7903-4fdf-8875-43bee5ba2352", "sighting--718db186-72b5-4d5a-bcea-d8ceada65c55", "sighting--35418e27-7b06-4dc9-b349-4df755594583", "sighting--18772ca4-d0e9-4344-a890-3ad2dce20c49", "sighting--8b760b20-3000-40e8-bfb0-7f6ad1b9dbb9", "sighting--a809af4b-75b3-41c3-a8dc-5c610d3ea8af", "sighting--1be61e2d-578b-4407-b5f7-4075434a3ee9", "sighting--12367e90-cbfa-4968-bef7-2848084f4d06", "sighting--05c47b99-39df-468f-9b2c-8e1cb5bc6d56", "sighting--0ff56a33-823b-476a-ad5f-d7120a40227e", "sighting--49c87d7c-ee45-42e3-bf33-89cf9567ecaa", "sighting--739c7694-3edd-4097-80f8-7a8123fc0973", "sighting--2b214899-22b5-4829-ae63-9f80ba900139", "sighting--aac28b98-77df-4037-980d-7b4a92f7c68d", "sighting--28aee8ca-21d8-42e2-bd47-4f61dee16092", "sighting--7dab4797-f2f0-4ab8-b813-4859cb84a8f6", "sighting--d68fab59-a89e-4bd0-a02a-a9b3879a62c3", "sighting--d0a666db-0060-4281-ae25-748f783ceb85", "sighting--73d6d707-87e1-4143-b1a6-3c48ba815772", "sighting--2ef4af4d-458a-4da8-b88d-8c95cb37858a", "sighting--fcf783e2-891e-4bfb-a2e8-66cb8d8ce256", "sighting--96b33a7a-aaad-41ea-9fc7-a582f00dd3f8", "sighting--7c4dcf05-d0c3-4634-8da7-9f207c89c98a", "sighting--40d23640-96cd-4544-b78b-b4260a113da6", "sighting--bfdc30d2-0188-4464-a663-f02deaa3b5ae", "sighting--3660bb7b-4594-4d74-b645-5cfd41b2be48", "sighting--33bce346-f9c3-4dfe-becf-8d701fb20959", "sighting--412605cc-1934-47b7-9f2e-a4cc82ffda6b", "sighting--893f72ff-7622-483f-9bdc-b8e54d770446", "sighting--fd9a65a0-d7a4-4f2e-907e-b5f28b4fc251", "sighting--1bd42c13-fcca-4de2-bc3f-619bc16f576c", "sighting--b1b3921b-46f3-462a-a94d-dc6877b7bddd", "sighting--5209d71c-b44d-4f66-b6ae-ce3f6b4aed7e", "sighting--9b2d251f-504c-4178-bde1-bb78e3dcbe51", "sighting--f7fa37df-9d2e-4a37-acf0-44438b1763d8", "sighting--edc75b23-24ee-45a2-831a-d2d7e7b1a544", "sighting--62939a6c-bd59-42bb-bbe0-08408c1a611d", "sighting--c71e6d2b-d4d7-4a90-9941-23c6fff34043", "sighting--a922f2a2-8fc0-4670-962a-3dff76a30494", "sighting--aa76b930-a1bc-4d8c-864f-4d33961fc15d", "sighting--3f7038b7-5a2e-4865-9fb8-b5325a93faa3", "sighting--57d46951-aa33-4b19-b2af-6a3ed5306d8c", "sighting--54a48368-87da-414e-af6b-b1123dc1021c", "sighting--42c91ac6-9809-4d23-9e6b-7ff36c052e7d", "sighting--c72c4854-e96b-400d-89a8-cad82f295767", "sighting--70617c82-5720-4d19-966a-11964beb14e1", "sighting--e7e8d554-b341-4341-a561-c4ae8dac639d", "sighting--28d45ad1-0968-43ed-bf15-456260964fc9", "sighting--0a4e9482-0546-4498-bf67-66632a5db191", "sighting--4314e9b3-5d0d-4d25-81c2-f4572b4ff929", "sighting--8e093dbe-9ae6-4ea5-8a37-f1cc8f09ad38", "sighting--6a9de556-16a1-443a-8647-e76c65dc3d29", "sighting--516e268e-1ee6-4b00-aff4-ee467b7e9863", "sighting--2491857c-1a27-4e8d-9e5a-5305f97eeb6b", "sighting--6a19987d-8ae5-4234-b6aa-b561bb84a4ad", "sighting--4cff47c2-016c-4b64-8b00-5e89a1ef5ca1", "sighting--49ff11e3-e38f-4eb5-a729-ff50f1f4ba41", "sighting--37beaaa0-a905-4d4a-a7c8-46a194f23f39", "sighting--1a957921-6821-489b-9a1e-2617712a240d", "sighting--f0f87879-271e-4836-bff3-1e82352f9929", "sighting--9478048c-3bd4-438b-9dfc-06c53e6b621f", "sighting--f2a19cd2-9bd5-4cd6-a18f-a8c4a27fc4ba", "sighting--761042a7-3740-4366-bd37-ea9b01be47ef", "sighting--a69a1b24-50f7-4aa4-a834-1558e373e20f", "sighting--c7faeb89-c3ce-4df5-9b47-ed91e33c7d6f", "sighting--f66f008e-3d59-4395-8dbf-83b2da8f544e", "sighting--5906376b-c775-494e-8b31-9c35a2595bcc", "sighting--61f4d59b-b930-4e59-93bc-3e0a4137e923", "sighting--12517ee0-f437-486a-8c13-8db067a6a868", "sighting--cce9ac72-a90a-4e89-bd62-52334055faf7", "sighting--22270ea3-1ba6-41cc-af73-c7a40d44aae7", "sighting--a1764c29-c42c-42df-87a9-f70605e797e1", "sighting--23841e0f-c7b4-4022-9a60-6a97a75d5280", "sighting--6338b7e7-c4c3-419c-97be-febb55f7f4d0", "sighting--60943325-4245-4761-ab45-ad4fc8b7c788", "sighting--006b56bb-5489-4f33-b504-4c6d79a93e76", "sighting--75a486b7-f4cf-4d8c-84a6-fe6b7b5dd573", "sighting--54829314-31e7-4a27-889b-e932c5144fa5", "sighting--5c0d9f30-0c2a-4e7e-9470-e5af26c1466c", "sighting--d32289ab-de05-414d-ad91-31f89820a318", "sighting--e909b00a-deef-42a5-b800-7b52239b6319", "sighting--48ccfede-e668-4e2f-b121-d06670520609", "sighting--6f6235e3-d16f-464c-ae66-6cd3fdddf6e3", "sighting--ce687a53-50da-43ae-aa9d-18649c5e5a1d", "sighting--2f56986c-89c1-4a76-a26d-9dd561dffe66", "sighting--1fb79e71-e7d8-4175-9728-cdb61b3af6e0", "sighting--e80c1609-3844-4711-91ef-01da48627168", "sighting--d7e958ce-7c88-46f1-867c-600d908260c7", "sighting--6db70a8d-1a05-4370-b529-1e3242ed3915", "sighting--ee09fc08-660f-4748-8831-81bdd274f06f", "sighting--37352e27-ce13-4c02-9653-f84b55d25daf", "sighting--c77328b3-804f-4d16-bc38-4aa0e800e061", "sighting--7dde543d-cc99-4425-ad4f-58d9ec52dd93", "sighting--e185cfa4-b118-4d64-a2a7-7ffb3e965772", "sighting--33faabbf-05ce-4662-a38c-fbffd8cc81ca", "sighting--bf872277-6ede-42f0-8ab8-f64a597b76a7", "sighting--f126d2e6-840e-4f97-a472-59f0b6982e4e", "sighting--1657682d-c7ac-45f3-9c5b-fc29f94ffc69", "sighting--31bf942c-9056-4be9-b879-d9efcce88b84", "sighting--ab529f44-17fc-4077-aaa8-03dbcffcd1c3", "sighting--e5ba3ef4-ea33-4e73-9463-6877af970f71", "sighting--99949b3d-1975-4ca9-9a9d-cd9a074a5165", "sighting--389b31c1-1cb9-4efe-a166-3497e00c324d", "sighting--92df078c-6cca-40ee-b3a6-27f983213cc6", "sighting--e8f02ec9-cfcd-42a2-9b4a-647a6cd8869e", "sighting--26fd0df5-99ec-4641-a1a1-9eca7a77e0fc", "sighting--c4e4f97d-ecdf-4643-be45-54782fb77b07", "sighting--e167c5b9-cbdf-4ee7-bd78-68cd10f27a97", "sighting--b93c9106-0fae-4743-ba73-35e37c7f3307", "sighting--185b08ff-09fa-4df0-8589-cef2e405d598", "sighting--134f9929-29f4-4046-a6ab-63515a3bdcf6", "sighting--5f26d7e8-d756-4742-b715-e0eb1867b3dc", "sighting--5e2965d0-6e1a-4520-a2f5-c78b7e019e8e", "sighting--1e1b36d7-8dd1-4aa7-98ee-35de6498c2ff", "sighting--392ddaaf-fa02-4fe4-8bdd-1ce703d3fc6a", "sighting--de3e213c-1432-45ca-9dae-8d21ed0279b7", "sighting--18396a85-14da-42f7-a68c-7d1ed3db21b7", "sighting--75fb7ce0-c843-4a92-8917-64d969621935", "sighting--29c233c1-a376-4b69-b300-7d272d86ef3d", "sighting--e4bbc202-3338-4af5-a04b-75e19397c850", "sighting--46fc868e-0f18-4541-b4ed-cda2af52da88", "sighting--eebab68a-395f-4709-ade1-51df336b7b6c", "sighting--d30a8a7d-e0e9-4645-8d55-c79a0680e4ca", "sighting--f32270ae-4027-484b-a2ac-f0dc9161d8d8", "sighting--35d4d49e-83de-4335-8471-ed71314a6eca", "sighting--cb01a1f3-1aa7-441f-852f-16497c7a9363", "sighting--ea2f2147-a7d6-4ad1-b641-983bb1b05a11", "sighting--a89dc5ee-d438-4cdd-b75f-e77e9daf3855", "sighting--af41367a-73b0-4586-b5c6-2b8cd03fe060", "sighting--239fea3f-d26a-415c-9127-5aa11f5a3d94", "sighting--32ba9280-2c8a-409a-a5b1-957a3ff6b3d7", "sighting--e63d4a6c-4611-47cf-a5b9-8deae6e20aee", "sighting--d1efe58e-2178-42a2-b1a2-0ae00112ed2e", "sighting--00f1df6c-71ff-4b96-abeb-43d40852ad17", "sighting--25c6971c-7370-4304-9484-c9ce56ff9a0b", "sighting--a4082235-69c6-40c8-a6ec-56dd06903e13", "sighting--b11a0458-31b0-4fed-bac3-a2f15a95a45c", "sighting--e7386479-5bef-4cd9-9e64-94969f27472d", "sighting--ec1fa8b1-5b72-4878-9486-5a34a70efa54", "sighting--e1f556e4-d935-47ba-803f-bb1a95711a58", "sighting--1a688fa0-bf4a-46f8-a9db-5cc7bd141fba", "sighting--6522a4c8-f81f-4308-971e-3f22ee9eb037", "sighting--5c675e1b-5558-4f93-877a-8043bb487a71", "sighting--6374049c-bafa-4fd9-ac76-79e79a2fbb59", "sighting--3bddbb75-178f-4833-87b0-e967da02c3dd", "sighting--d6e72863-4b61-44bb-a0f7-2ca860091b99", "sighting--17854f46-990b-4285-989b-833c3c49cf19", "sighting--44ca2d9b-9931-42c3-b4df-77f56c0ef24c", "sighting--1402698a-f73b-4914-baf3-a5d3f44d2deb", "sighting--9db72b9f-f914-494b-b345-b2de7495e62b", "sighting--17de7879-f064-4a4e-bf56-04b58768f28d", "sighting--1a5f7803-d2e1-42db-a731-1998a324f935", "sighting--88849050-bc60-43c0-ae47-fb877a65469f", "sighting--942ee6ce-e6b4-4728-a90f-f9a395b19ecf", "sighting--39f44b9b-9bfd-4765-b055-c01d784194d1", "sighting--11499636-69dd-4561-bd6c-431a3858d058", "sighting--e7cf6717-b6c8-4707-a110-f04edba782f0", "sighting--5baafb6b-8c6a-49fe-a831-6ac8523373d6", "sighting--f058a6e7-0146-4cf0-ae15-ceee39560d9c", "sighting--bf96d85e-0d7d-4055-8b3d-8f8b621eb0c3", "sighting--91eea162-2f18-4e08-91c3-f38b1399d25e", "sighting--cc9d2b9d-2558-450d-a7b4-035dda5bf850", "sighting--07b8385f-4aa0-478b-ad89-eec501b5a1be", "sighting--9f06a637-4046-44d4-a154-ae32bd8eed7a", "sighting--e32c7f73-5338-4c51-9041-514e8a3d8007", "sighting--6d017603-e564-4be4-be92-728186a3b622", "sighting--770a4ab8-4cfd-49d3-95a2-28aed67d5539", "sighting--a9023394-e861-40d9-9919-fa94ad89cd2c", "sighting--149268ed-642e-4e15-9c5f-5c479d283a6b", "sighting--b1996147-0a29-4db1-8ccb-87ac5574ac9d", "sighting--4ecbb5d5-1358-4fdb-9cd0-7becf349926f", "sighting--7fdee338-1726-4974-b915-872c4f84b26b", "sighting--68b250d9-4788-480b-9163-4ed0ebd800ac", "sighting--39e63f0f-cf93-4bbf-957a-a00edda8fc67", "sighting--f1c1e83d-2661-4aac-ba50-cc96dc508a5f", "sighting--8816271e-c9e1-40e5-9249-68e86e29e1f8", "sighting--6450cdcd-d566-4bc5-aa36-0e203de43749", "sighting--67ad50fe-bea5-46e2-b6d5-a9f77003e285", "sighting--df0f9bdf-be3e-41c4-bc0b-f592a3ec3e89", "sighting--3e9122cd-eb02-4c5d-9292-9e8e1a206f45", "sighting--fabadacb-f9f9-442a-82f2-3e82db1eb53d", "sighting--fc0692ba-a1e6-4f19-8b6f-0e6fe02a61de", "sighting--71e83cb1-036b-4fc2-bf4f-559e7c340853", "sighting--d336dd43-290b-45fa-9250-1b1d7974ddc4", "sighting--0fbce38a-46fb-46e0-88a7-5fb94b726447", "sighting--132e96c0-e3d9-4189-a751-3fe48770c0be", "sighting--9927d9ca-3536-48e7-a750-85aa147f6b07", "sighting--fb8bcd8c-1b1d-4310-ae75-eb693dc3c9f2", "sighting--8bd13215-d752-4d88-9c69-b64cbef9c951", "sighting--42f19f3e-4edf-4a77-a83e-4ed3e3786253", "sighting--b34d5387-845c-4f87-a63b-16e488efb03b", "sighting--cfae99a8-d695-4dfe-b04c-6e960bc54dbf", "sighting--09ce7da2-c13c-4b1d-92ed-39045fc19edd", "sighting--04d6ee8e-3c89-4992-89e7-b7fd72592124", "sighting--4bdc4924-c8e8-409b-bd3b-5f99fdd12db8", "sighting--f9c44d51-d814-4015-90e7-72899764caa7", "sighting--5baf764d-d0ce-4095-94b7-4b521e010cc3", "sighting--4d654c21-ebd4-4539-8bd2-ee4fbd8b1063", "sighting--0510c5d5-31f7-4e9c-935a-ac51aaca1ea5", "sighting--caa3b265-3d9c-4ffa-8918-a7fa1dd5906e", "sighting--ce787e05-ca9e-478b-a065-83bd988d1fc4", "sighting--b739da77-b240-4184-a0b2-87b80296832e", "sighting--f1700417-fab2-4c4e-a96e-690618ef2934", "sighting--89cb5765-2337-478b-bf3e-973d75d23a9e", "sighting--8c99a639-c1ee-4ff0-b274-bae2c13c9e09", "sighting--b39a8ea3-ed98-4287-b703-2fa30762becc", "sighting--6915bfca-6ede-4250-9d45-c2b4dc215f6d", "sighting--fb1d4318-2258-4762-b585-df0e6b5b929f", "sighting--f7ee8e40-e85c-4bfa-adff-a28c14ad75bb", "sighting--f5db2f80-9639-4239-89c5-0f69b450ed3a", "sighting--8dc7f40a-796e-4545-8176-06ea5ef7b9c8", "sighting--210a7bfa-d20f-4186-b204-4e922050f65d", "sighting--bd8b83e1-2f25-47bc-a67f-bb9f05f6bd08", "sighting--65fdc85a-518f-475c-ad93-d8c922d0c2d8", "sighting--cd76e331-bd2a-41ae-bde9-69713afac9ae", "sighting--b8fe7857-e7cf-42c3-97ed-00f8a8ce51ec", "sighting--4c196402-1620-480b-a8f2-40f4ec7fe4f8", "sighting--6717b693-5bfc-4981-bbc9-3c03e5360220", "sighting--7058d9d6-3042-4dec-bcad-389eb3a16f13", "sighting--fb570b8e-1ff3-43ee-a2a6-09dc5465b241", "sighting--c64bb037-9dc8-44db-9fa3-9f4544333af2", "sighting--5fbc7507-266c-42c9-8789-4142e4328b1f", "sighting--184a1df3-c764-4ab3-812a-0cff6b9d8f1e", "sighting--a96f07e8-e8ed-4207-96c7-8df655e3b587", "sighting--1ab4433f-af4d-4f0c-96a5-aa39b005d239", "sighting--d86fe933-1181-4bc3-80f9-fdc3022b77b3", "sighting--5fc00455-233c-409b-9cad-fb58a74dd39d", "sighting--d56c7130-6f19-4ee9-abc4-ef7b3c5fdf92", "sighting--d4bb880c-3423-49fb-8286-be13ffa56af4", "sighting--b9168ede-695d-4f3e-b3e2-7c5190d25836", "sighting--fdbea895-9936-497f-8a55-8b7c70850265", "sighting--b041a667-7861-4a70-b00f-1f746c92e318", "sighting--790438f6-da75-432b-a506-8cc8a8462389", "sighting--b4e1170e-dec1-4aa9-8491-ef6f719140b6", "sighting--e90a2ec2-d1a6-4769-9208-ca04d001835b", "sighting--91a339c8-70c3-413c-9a2d-2a912c340591", "sighting--b6c25680-ea98-4e6c-8705-7ed55f37bc4f", "sighting--5260bcac-403b-4cea-9185-ae65895c5680", "sighting--4c079dea-73f1-44b5-997f-8be0b55de4e8", "sighting--2ac47b0f-a19a-4c04-98d1-99b66b96484a", "sighting--8c8d5976-9d9e-4c56-a310-e68a093efce1", "sighting--c7cb37e1-5bc4-40be-adad-dc62622d3e8c", "sighting--acee5f69-1213-4fba-9ddf-4da11f4fd8fa", "sighting--0dca5eec-fb40-4269-9fb2-646a823166d5", "sighting--15ad1b9b-34a6-4553-8e2c-fcb6d69f6609", "sighting--d41ebc01-db88-40f6-9744-a7ef618de0ad", "sighting--ddb11a31-10d1-4ac0-9d4d-b3998026e974", "sighting--7e8c9a02-9ccf-40bc-b0ec-0a8b1efd804d", "sighting--e1504262-fe80-4f04-a9cf-fd4e98c95922", "sighting--79ac6cac-3e88-4bba-bd3e-016e08933f2a", "sighting--b373ef43-8235-4d41-81d9-ad3c37cae050", "sighting--ff9efe3f-9d37-4bca-822e-da6119f9d2df", "sighting--fde5c35c-97ec-4419-9cb4-1153a692c473", "sighting--5fbdbbc0-4e8c-4876-be6c-a318381dc547", "sighting--26f498ee-3751-4acb-9ee4-14d2d0792e4c", "sighting--6c760e3c-8940-4725-b83d-1fbe90c2a3c4", "sighting--b8113f4c-cb50-4297-9bee-98ac2ffb707b", "sighting--8d489991-658a-4021-a5bc-5585f05dec1b", "sighting--847d9eff-25e7-49ad-8a12-ef8937e7e4af", "sighting--43e9ae59-2de9-432a-80bf-3272b13132ce", "sighting--6036c2c0-93a8-4429-ac88-40bc11e5e53f", "sighting--fd691d68-8e8c-41b0-adf8-a45c364bc6fc", "sighting--83a92d11-cc7c-4bd5-be3b-c6951947af23", "sighting--0ec47a2b-c69e-4f25-8626-0be55c83b363", "sighting--df898b86-bbf7-4be2-858a-b730e0f05316", "sighting--fcfca822-9318-4487-b25b-eab16ae8f1c7", "sighting--0a66f0f8-0d5c-48e8-a1fa-73d90beda0e6", "sighting--142e0bf3-ee1d-411e-86b7-48b29bd7dc59", "sighting--39542bce-ad37-4e1c-8252-c86a10f363a1", "sighting--6853aa22-a0da-443f-bddf-8f5f8b17e3b1", "sighting--b702b25e-2150-46f0-870f-7af433661621", "sighting--1b9fbf13-5202-4ced-8c3c-431cc85034c8", "sighting--a456cac1-cee3-45e3-a9a0-1c72fb05b689", "sighting--c5350366-5ba0-41f1-8c4e-6ed30fb69032", "sighting--f4688fc9-59a0-4ec3-813c-9fa3832ebd88", "sighting--85aa9bfc-3bbe-44ef-8120-8b2d50ccaa0b", "sighting--7baabd50-b1c1-408a-b323-a3ec404398d5", "sighting--5d823b31-62c8-4a10-8134-3d3c975b54d9", "sighting--662e0679-0229-4de3-bc12-52bba236e67c", "sighting--7f98bd56-8431-4e8f-8633-d81455abc233", "sighting--8e81fd0d-b1bf-4ae7-9995-e53a2201631a", "sighting--e9ec89eb-13cb-4a49-9ea7-facd4a74f4b5", "sighting--64461cea-6f1e-4936-912f-9ac7eef5a622", "sighting--baa08f3d-7f71-41d6-b299-59842a844c3f", "sighting--02930991-f12b-4fc3-b208-73243bf8615a", "sighting--1e728b7e-d9e5-4383-98f2-b6371e36a685", "sighting--33767440-b90e-4ccc-b784-6dabc3e652e2", "sighting--d789046c-9ab6-459b-ae88-2a9ae00794b2", "sighting--8806442b-a957-466d-bbc9-72b09962c942", "sighting--5910e71b-6c79-48f6-84f0-e87b53c5ebfe", "sighting--597bf9e1-40e0-4065-a5c4-b87b44cf50a9", "sighting--9c43c22a-f501-49db-ba0f-0cf280e6a216", "sighting--4bac0711-ae75-4f00-960b-36a6987fc060", "sighting--395c5b22-0170-4ac5-93e5-75745096dbbb", "sighting--e6fe2d3b-8945-46f9-bb69-b0ed387355c9", "sighting--b60dc89a-7b10-4603-91bc-60941c72f444", "sighting--da1eca4d-11e9-4e5e-9174-d97368e6b0d5", "sighting--731fe207-41d2-4453-bae4-0fd407e9a228", "sighting--75b0fcd5-69a8-411d-a1ce-ee57c1761283", "sighting--c2c7950a-afa1-43ec-b472-6d4e7b461f57", "sighting--806d4a3d-29f3-4f22-a062-d4acba41afd9", "sighting--9db6647b-b1ba-44af-a591-d7d09a915988", "sighting--8131735e-e720-4a37-bf31-2fdb24fbc41d", "sighting--1a999112-84fb-48c0-8061-567ffad58a2e", "sighting--9f2500d5-5a92-43df-9398-6f34ec454e9b", "sighting--37c5cb6c-a100-4d0f-b1c4-5c2c48d1198e", "sighting--694dc01a-c8c5-46d7-b42c-0ffe2c1db505", "sighting--01aa5a59-ef3d-43ec-a216-8a612625074d", "sighting--b0506fc5-6264-4d4a-9725-c5f36e0cd845", "sighting--93f54cad-e48d-40bb-9550-36fc201f9be1", "sighting--2b6c692a-3f3c-474d-933d-6823b230a290", "sighting--d76dd9d3-1fdc-4f54-b21e-f72b18c2838d", "sighting--7695ebfa-cb55-4b5f-8eb3-249bc74b051f", "sighting--fceba2b9-61f0-420f-9ec7-e61a9657f1b1", "sighting--d26bada0-a97b-401c-8b45-54de417988b0", "sighting--0e2bcb0a-ff0a-4d18-8d1a-3abfbe413ee9", "sighting--66c58c9a-1dd1-4149-bc6d-ef482d76aa97", "sighting--a78266b8-f7a6-497d-a548-e84df46bb014", "sighting--ae092aa1-91b0-4d1e-8ba4-1dc6115e195c", "sighting--5cc70ece-e44f-4f85-b281-4f6dd7ffaf18", "sighting--cb4c8234-1a20-4fe1-bdc8-36c834d3fc67", "sighting--c574b175-969e-4595-91f0-a5a8424f0b85", "sighting--612cddb0-3f1f-4c35-9168-76b7efdbc37e", "sighting--5ea70dd5-7788-4595-a4a8-b5af85169fb9", "sighting--4d9ef599-1cea-480c-902d-58481b29e662", "sighting--73ee4f41-2dc2-4bca-923f-770ad668dd2d", "sighting--95b3d6f4-c376-4352-8fef-22ef0df4a150", "sighting--28ba213e-1eab-47a8-9136-10e56cf7d8f2", "sighting--5b1c6e72-4fbe-4705-bcd7-215a2003a873", "sighting--aa89c0ab-0924-4edf-b011-73f1aba90e98", "sighting--06567e0c-34de-4cba-b151-78ef09eb72e9", "sighting--2d507f99-7f98-40e5-af66-b8a42e5acb03", "sighting--368df17c-7e1d-4cc9-afd5-697db3a77c9b", "sighting--81122044-1560-42a4-92aa-82d19b7ff2a4", "sighting--6c1257ac-4ceb-42f6-8bf8-474a41383101", "sighting--e17a69ca-f47c-4f59-a0a7-06d626f4034b", "sighting--5b5d6f2c-f539-48a6-9d41-c3dd99f687a6", "sighting--b986cc7a-184c-415c-a3e5-7d161f891e3d", "sighting--940b3f47-0393-4052-99b5-ff8d6ce63bf5", "sighting--52c6def0-fc4e-4251-a974-d6e18a79c3a3", "sighting--23c6320f-c368-4abf-9fd2-9825d672b78f", "sighting--d49fb364-7583-46f3-8a4f-02be4aea766b", "sighting--aaffed12-5864-44a3-940d-ba005e0b1558", "sighting--1dd81e2b-6e97-4d92-99fa-0e032e75856e", "sighting--38f42ddc-a4ed-4826-8c9c-4850ad83e96b", "sighting--e46cd13c-c51a-45db-9fc0-5ecde2f7b3dc", "sighting--91c1908f-487d-4866-be7c-ecf7fdd848bb", "sighting--c4daafbd-e924-41ce-8f57-99e374caeac1", "sighting--ceb5041f-1f52-4495-b192-f6191b2c1fd2", "sighting--1ea28c4e-d039-42a5-b7aa-122236f80e66", "sighting--c416fa90-bd8a-41e8-b2f6-382d45e8e5e8", "sighting--b5e855c0-0ccc-4495-9e48-e629c82fe8c0", "sighting--b14447ed-53bb-4d93-bbd9-65d55ae7a4b7", "sighting--c85e2a1f-a911-4502-b15f-a4700f48aa50", "sighting--d789eb53-81a5-47f6-b6ef-25e2dc77a0e6", "sighting--adb1eafd-3873-47ad-946e-0a383909b9cf", "sighting--802b12b8-d2e7-4583-89dc-af22999c385c", "sighting--86c8f946-ede2-4d4d-b6f6-db180bec90c9", "sighting--8ae5e22c-7ffd-497e-89ac-7b02814db9ca", "sighting--9577193f-477d-4054-85be-ca5f4d62492a", "sighting--7a031646-0955-4037-92d2-fbc10ad632ce", "sighting--9f69b8a3-9434-415c-b791-f6f3c782b4c4", "sighting--a4d36bc3-fbe3-4e6f-9ba9-9c57288336e0", "sighting--b33264a0-e0fb-4c66-80db-40df53b0ba3c", "sighting--9c737ce9-c01b-4a37-984b-f393b20c9a9f", "sighting--e172dfbf-6cb4-4b74-a8c2-410b05fb935f", "sighting--3c36ee0e-8343-499d-b787-635a9355ce69", "sighting--06ed0156-8c44-42b2-b77b-ad9f72142a9e", "sighting--8f236a00-03f7-4417-9ab6-c2d40e93f3b3", "sighting--f2314622-0c61-496c-8678-ab2588d1ad99", "sighting--e2a2d149-0dd9-4915-965c-f1929124ceba", "sighting--bfbf4dd2-ee40-4e8d-aa3a-b514edea36fa", "sighting--01c832fc-9cfd-40aa-86dc-1764c1a7569c", "sighting--7c00b75d-c74b-44e9-b105-5f21e4f66f3e", "sighting--f1729f0d-5302-452e-aeb6-2225258dd34f", "sighting--01d8e31c-6181-425a-a560-638adcc43311", "sighting--18f56182-d52f-42d5-b05c-c0d18bf1e2a4", "sighting--65c6a783-487a-429d-a0e3-03d01ba928d0", "sighting--4c50c934-8792-49a2-8d77-d681b5bc46fc", "sighting--99eac139-c3a3-4e1e-9490-c27ba6e13f02", "sighting--3fcc2786-d9da-4a10-9ef9-395b112b8364", "sighting--4afa19c9-de1d-47f3-8636-d0d2a504f0cf", "sighting--67dfa292-2397-4cac-8377-42ebf77683a3", "sighting--a301a939-ccef-417f-9d52-ed8baeba4f5c", "sighting--b46c1218-248e-4fd1-ae63-ef1375e430b6", "sighting--6a8b1b00-23d4-47e0-b28d-bc14dc615de0", "sighting--ad79abd3-39f0-43ca-8cde-57b5f9ff622c", "sighting--c7532ae0-e9e0-447e-9bc1-8ec741f179a2", "sighting--aadb941a-54ea-42ba-97c3-92d089e155f8", "sighting--abbfc974-314d-407a-a188-db8a4688f0e9", "sighting--9ffbf566-2c56-4a34-ab07-5b948a6e7e21", "sighting--089a93d2-a108-49a4-9b7f-a3fa1443e78a", "sighting--730aae16-c84a-4632-b048-388468c49978", "sighting--ea88fd4f-7f80-40bd-b2d2-2bd7e4870e42", "sighting--c293174e-98bd-48cd-baf0-8fe1a9f9da3a", "sighting--f89fc694-ec69-466d-82ec-0badb2ab0500", "sighting--735820f0-209e-4735-942d-e741e32b216b", "sighting--bae657f1-bfe1-42ff-99af-4b42a3694aba", "sighting--ea8db7ef-4c16-44de-b619-89504276549b", "sighting--f094b387-36b9-4394-9ca0-1af4351ea4ca", "sighting--4ebdfc0d-4ee5-420b-97b5-158d98e7ad4e", "sighting--a8c4412d-e6ce-46d8-8692-ae0b7da8492e", "sighting--c9617565-395d-457e-bd29-3cc35fb90a28", "sighting--dedcf2b0-3a0c-4843-93c9-744e82ec2fbb", "sighting--d72abacd-da15-4eaa-abd7-364963b756a6", "sighting--d17d1b5c-bdea-4df7-9932-d56ba6834f1e", "sighting--3b4de1bd-c72d-4b66-bfb2-efa746a1375f", "sighting--d260618b-7986-4599-8204-078fc5f6f013", "sighting--5704a1b9-0fcc-48dd-b4b1-9a71420f66ce", "sighting--6bbf74c1-3f3a-4285-bddd-1ba51838a485", "sighting--7c55c76c-811b-4d2b-91ea-9577c20f1543", "sighting--abc23eb3-176c-414e-bc02-dea08a6ffe56", "sighting--99eb1be6-1dea-4d9d-89d6-ffa48e99e2c1", "sighting--ddee007d-14ac-4adc-970c-00d8250c5b20", "sighting--e5f2b122-7c7c-4b19-be6b-75fa1efd0153", "sighting--bf486c84-6e4a-440c-94db-f1ba64e795c4", "sighting--2c2cbcb5-ba9d-4d0c-8dee-c4db5fffe496", "sighting--9905fbf7-8ceb-404c-a195-151bcccd34cc", "sighting--91ce7058-d4a1-41f8-b8ad-da151dc598e9", "sighting--f3b30369-0f41-403e-97b1-1ee9ff5e0441", "sighting--242a5a38-2fa5-44a0-bbc3-3eabe9b41b59", "sighting--a101148f-5002-4f81-b48d-12166e623fa0", "sighting--a9f17bf9-57d3-4fda-a93b-d275df9d76de", "sighting--1437b751-0cd4-4e57-81c6-805e9727796b", "sighting--683b6ac5-0467-43d6-bfd0-0f6664d812fd", "sighting--ec791627-46ac-430e-b66c-7aa649ebe2ff", "sighting--25da4373-84ed-4675-9db7-414f4bc08932", "sighting--2e7aa4c6-3b3e-47e0-afc5-4a0c6170244f", "sighting--6cf61756-b5a6-4f8e-ba23-0a652ce971c3", "sighting--912e6b96-4725-4a12-8eda-44b81fa8171f", "sighting--0879fd82-1a9c-415f-991a-a518fb61e04b", "sighting--76028dd5-bf42-4e1a-85db-ca86251e259e", "sighting--5184c6ae-1c88-4c63-ac6c-243e69698103", "sighting--00d69b9c-c869-46ca-ab9c-542615735571", "sighting--10cfd955-fb75-4ff0-a7e4-e327e3fed11b", "sighting--38639e5e-ef99-4eec-b1f5-962e1ae615c4", "sighting--3e714e49-2356-4048-a0b1-96c62902154a", "sighting--f919b846-ea89-4a07-85d5-b83f05b00176", "sighting--497eea7d-dfcd-4dc1-a86c-a132f7e89269", "sighting--c8a58830-8e9a-4ee8-bf7c-3fe156cbd31b", "sighting--008602d9-2600-49b3-ba29-7452896df194", "sighting--4e2703d7-d72b-46ee-8b1b-b33207061779", "sighting--21ca565d-2648-438b-8046-129ddef9bab4", "sighting--ea60d045-5c8f-4623-8cf4-e16b1f49cc15", "sighting--eec015ff-ee51-4861-b7c8-e07055fd82ca", "sighting--1a4b2573-9d7b-45ce-9fc9-0dee22a04b78", "sighting--1dbc3f6d-1f95-4104-bd61-6b7a91b4ee5e", "sighting--7c67345b-340e-45b6-b80f-0fed6c97058f", "sighting--dfe19f3f-03b8-465a-ac18-43bebed4135c", "sighting--b4af1f73-b212-49cf-ba0a-534c9f7b5fbc", "sighting--00b29352-1b52-4c3d-9dfa-434cdef33c0f", "sighting--4007e9ce-28c1-48cd-bc15-c5dd8e8b4b40", "sighting--33882f3b-8452-48b7-b7ad-9ae6e3d3f182", "sighting--05a20773-7300-4f31-9d11-db5719fecafe", "sighting--80e61bf7-8936-4598-ad49-5db5539af053", "sighting--7803468e-42b8-49a2-b4a9-0bf3fc5d68c5", "sighting--451d9421-8fe6-4eab-a249-53bce4f8511c", "sighting--df08487b-970c-415b-b802-9f5baabfa9a0", "sighting--16c106bd-4937-45b0-af8c-9e1c186317ce", "sighting--7bac6c8f-b30e-4bb0-9008-4b08ea8ce844", "sighting--2fb48e2d-62f2-40d4-8e39-46d76fbb5add", "sighting--56fd71cc-8c8b-43ed-b49c-bcdf3f67aa58", "sighting--a7f87867-7e86-469f-add6-c959bcb43131", "sighting--9c1897a1-d26c-4a9a-9b93-50afac74fbc2", "sighting--0b609342-ff2e-4664-a6dd-52ea5ee79fa6", "sighting--cd7d6b43-5f0d-4000-82cf-6154bef94229", "sighting--9498b473-9760-4bec-b1c6-caec216ddb67", "sighting--0cdbc147-dcdd-4324-a27a-e54fcca43d03", "sighting--6669ad44-1723-4121-8209-671ec0e08878", "sighting--7f594056-76ac-4562-a468-21b41b4656cb", "sighting--e6615c5d-cd97-49d3-8794-74d96b3cb895", "sighting--22684479-e17c-4807-8ee3-199af2fcdae2", "sighting--00d3994e-2c84-4993-af1e-7580e54ea038", "sighting--eb846bc3-f02a-4308-8dc0-035e1336c956", "sighting--0c204f54-1f4f-4204-88ef-95d76bd9e709", "sighting--734cc261-fc7f-4f81-817e-cd004e0205ed", "sighting--89a02828-96ba-41c7-9340-23ef9687b5ba", "sighting--cfb9d701-ff0a-4c09-b2bf-f85d4a55c95a", "sighting--8edf3305-3386-4709-b381-2c8cfefb88c1", "sighting--97fec25b-b41b-43a4-8943-477cba9c3972", "sighting--729b47b8-88a3-4f67-9e0a-9a811a1af6e8", "sighting--3a0d4da5-a275-422c-8166-b08033528c82", "sighting--06537d3d-ad20-4eb2-a753-2f4692114bcc", "sighting--93fb7242-6007-4208-bfaa-82b4b2003bb7", "sighting--94dbaee6-4b90-4447-899f-fc68269ccb95", "sighting--d4691c36-71fb-480e-8117-0b0c68ac79b0", "sighting--c9629a63-951c-4cdb-b2c3-cf352deb88bc", "sighting--16310edc-a177-4814-86e2-a42d71b0e1c5", "sighting--2734dcc9-cd7d-4919-ac83-1d832f446f03", "sighting--9210e2a1-aa03-4733-9ae6-ec6a9501abe3", "sighting--2f85a4f3-0834-42a1-b7e2-7334111ef188", "sighting--07c89aca-b68d-4359-8b3e-20c48f672e5a", "sighting--2eebbf4c-a9e4-429b-bb34-8af8267991e8", "sighting--58f6bdb9-dc08-4490-922f-788fc1d5bdbb", "sighting--49c281a1-5dba-49ce-8a20-a27ee520f207", "sighting--9d3ef6b5-1de3-429c-bee9-dd71190b4ce6", "sighting--5234265e-2d74-48b9-b56b-d06f1eb6c2f5", "sighting--f99dd45e-3f08-4d61-8ad0-74c0327bdd0d", "sighting--0da869ca-7648-44c6-97ac-a015f3dcd61b", "sighting--57f7a107-53b7-4d84-a2d2-556644544f66", "sighting--bb4cc15f-1b75-46ad-981f-d99a4e5ec94d", "sighting--b6a374ef-ce5f-4f28-babd-50a880966e3b", "sighting--5221cefd-db08-4582-9aef-afe44ed5d952", "sighting--4e837092-8301-46e6-82e6-954a423d7235", "sighting--6c449545-3729-445f-94e6-73c1734dc381", "sighting--33bf46f4-6b86-4f12-a385-749e53e85046", "sighting--9dc6c260-659c-4098-b33b-b82fb33e2c46", "sighting--67699e81-7401-4244-be6c-af6559116c1e", "sighting--99f36e89-73b0-4a36-ba8b-ae31d1153848", "sighting--799030d4-8e3a-4bbf-907a-6038c479c886", "sighting--ea3f28a2-e707-4e7b-bdee-c09c50dfd579", "sighting--0cd7c32f-1ed4-437c-bc98-5ee4e445f5b5", "sighting--fd6d6b47-decd-489c-8980-d571ae890052", "sighting--74460eb9-9367-4be5-8da5-f1d3d49d6831", "sighting--5746bef5-d7cf-4f0b-8667-d6a6d73b9092", "sighting--8d35eb90-864d-4722-8ce4-fe974c054e1c", "sighting--d0150b3c-62c2-446c-9158-afd795f10120", "sighting--32f1473c-ebbe-4e53-9605-bf17b6b7018c", "sighting--a9d8dd48-3848-456e-9c72-a10bc8be0fb6", "sighting--49f5e796-d6d0-4eea-85e3-d536a57b41cb", "sighting--f2f5fcb2-86a4-404f-ae11-329a816f1282", "sighting--37a0b2e5-3741-4cd8-b479-6d86c6e1b00b", "sighting--8c6cefe6-2b0b-4642-ba38-73e3ed3cb69a", "sighting--78e82257-fd20-4ab8-b5d0-f5ee7bb9a758", "sighting--fc008cca-cd7e-48e6-9653-bf9bfde3fe63", "sighting--0543d9d1-5b8c-4147-9835-d207d714e924", "sighting--8e7db451-7180-4f8b-9432-41e4901a9659", "sighting--20488e9d-ef5e-41d0-8e28-dbca0fbe0801", "sighting--141da1e3-780b-49f4-935e-7620ff9c72ef", "sighting--c0ce7de7-690d-4193-86ae-7fe08f2e9de5", "sighting--3747f844-fe2b-4305-9ac0-4b4015a96ba8", "sighting--8959fe7f-3921-48bd-9fc5-b68e35dea020", "sighting--cbacda5d-b8a4-4a6e-a7f7-d6b92c2257a1", "sighting--d45be05c-c735-4201-9892-76c67210de3e", "sighting--d206980b-dfd8-4f91-94b6-b270ba624ded", "sighting--e27c8520-d043-416f-b35c-e088b7742436", "sighting--cb86f9a3-f8e8-4b85-971e-1710eb79ad0d", "sighting--ae9e7f8a-434a-4ac4-af4d-02f95c5a9a68", "sighting--3772cde0-4f50-48a5-a5bb-c87923ece91b", "sighting--e09ef737-8632-4eea-9ced-49c65be24bcb", "sighting--65d79e0e-ef3b-4ccc-bc7b-7ddb4ca327c1", "sighting--f40a199e-1857-4474-9a8c-c70d51cc0174", "sighting--68293bd1-b29b-4c01-bb82-d63490fd4846", "sighting--57b7c6c4-d031-47e5-a8f5-7edd3563fee0", "sighting--88b4890e-342f-47a2-b3ab-81c6e25b3e0e", "sighting--cc9c6d6a-09eb-4a50-9ce4-3f042a17e0af", "sighting--d8551076-6380-4013-a9fa-0cd1c6d48f0b", "sighting--b5f5044f-3e18-434b-84fc-d7db242bf725", "sighting--2a5d71ac-f9eb-4d60-af22-709b586ae9bc", "sighting--a18c0df6-6d77-4d08-82f9-6eff3440effc", "sighting--3662a23b-da55-4145-8111-0cd05445f210", "sighting--fa385223-b5d2-40a7-bf7f-66da8c3148ff", "sighting--dd5514a9-d57e-4d40-bd16-83af24b005b6", "sighting--a3bd3036-a56f-46d4-8d41-a768a43a1442", "sighting--4503682c-1e38-4b26-9f8b-237432de9186", "sighting--6f26d475-10a9-4e4c-baea-00d656f3be50", "sighting--cadfb9cc-d3d6-4270-a51a-76e992488339", "sighting--fbc9574e-090a-446f-b5c5-3dae32b96f9a", "sighting--9fa4b8f2-1ef1-4884-b095-a4764ec88254", "sighting--be9c1cb0-879d-44f9-9703-9f627fd11f25", "sighting--d8b982bd-687f-4157-8498-2673036b87a3", "sighting--7e06c377-7348-437a-acd9-cf7975d094c2", "sighting--ef48cf39-23a3-4f53-992b-06f3824e333a", "sighting--70aea215-6c6d-4d0d-9ff4-f239145493ff", "sighting--12fe2fbb-077d-4496-9711-78049d8875de", "sighting--dabcf6cf-1852-4583-9f79-be1d2f93b41c", "sighting--56687997-f2d5-4195-89b5-78f88e546eb6", "sighting--0a6e1700-b016-4b17-b9f4-27e686d5f10c", "sighting--e5369b0f-c7c1-4b5a-b7fe-8c9c9ca84b77", "sighting--e5aa47cb-976d-4c2a-896c-f8fc96ebc82e", "sighting--8ab7b81a-8fa4-4c6e-a9ea-d7cb2851fc3a", "sighting--87e4ee22-e32b-4362-95e9-ecc02d45941a", "sighting--af2f91eb-9a76-41f8-ba80-325740a0d7e2", "sighting--32c76c0e-f301-4e5f-84b0-7420bea300c1", "sighting--7e78541b-dd03-4b22-a42b-2b476b3b281f", "sighting--fd088861-0295-458c-9278-927888852ce0", "sighting--817f7829-c45f-4018-8f59-dfaf09ae42d9", "sighting--4eb6e1a6-8a5b-4d8d-9889-7d3e26e8d945", "sighting--3fe521ce-9c88-4513-bd4a-5df17c9b4616", "sighting--f58f4e72-4464-4287-96f0-7ad3dbc2047b", "sighting--aed8e46e-7b4c-4da1-8f19-be70394bfa21", "sighting--8fd58339-af7e-475e-a2b3-3943f7022162", "sighting--2bb52c8a-5aaa-4a77-aa45-7ba62c860445", "sighting--de4a0486-621e-4b77-a05e-e399851fa823", "sighting--610e4b1e-405b-423b-a2b9-874beaded4b4", "sighting--8282da40-4707-49af-a624-e983e2741bf4", "sighting--ff5c7c07-8ad2-455f-997c-8561cf3f604b", "sighting--7850ee45-c32c-4126-9ebd-36c357948dc5", "sighting--1ed74562-6999-43a4-a358-f5e026955737", "sighting--11cfb48e-2dea-4d15-9e43-8a18e492d936", "sighting--9f8e47be-4673-4c3f-9e96-d978fea275f3", "sighting--828bcb4f-3a3f-4e54-9b51-f2f57d4f67c3", "sighting--d9f0ffad-541c-40f3-a8bc-5f79164a6f63", "sighting--af19a9c1-ec44-404a-89c4-4d3c92b35a20", "sighting--59f4b1cf-2a6b-495f-b248-3ad64c3d10aa", "sighting--41f4a01e-e814-4b3e-8529-555e37cf0a4e", "sighting--a1ece963-4d4d-40d2-a786-abdb76770988", "sighting--e113422d-ae0c-4a0a-a509-fc637d206ea7", "sighting--683f42bb-966e-49de-b8fc-880d230f4df4", "sighting--3152ec12-d579-42c0-83eb-b529564c50ce", "sighting--8989d49b-f68f-4939-b261-8beb11450c77", "sighting--e95f37a2-9ec1-41c2-87cf-49e8c88cd552", "sighting--7aa99d91-25e7-44ce-9144-f10e6682c354", "sighting--7c870146-2c52-4ae8-9067-436dc29a3bc7", "sighting--4619b861-fb4a-4468-a237-2c05ea0762ac", "sighting--05c9440a-51da-454d-9f37-0d9e716bb43c", "sighting--7547e838-8278-4c49-93c3-57de9f1bada5", "sighting--7dc4a42f-5372-433e-8572-e052e85b55df", "sighting--36da0aaf-1152-4af2-8484-deed7d126734", "sighting--e96a6493-9927-4689-bc99-9ddf7afb18af", "sighting--f0827d7d-b844-41f4-9fe6-3e09a0c6bef5", "sighting--b7d437d6-e4b2-499e-824a-c81907c066e9", "sighting--9c715ab0-ea6c-437c-9ce6-f59f6940708e", "sighting--6a06569d-d702-4fef-b566-f82c4070c362", "sighting--b8740ab5-8580-4d89-b531-00a062263a2d", "sighting--4018b93a-4e74-44db-9653-fc551fda721d", "sighting--23b8618e-d857-430a-a11c-87260154de48", "sighting--1c8f106e-d97a-433e-a9e8-ad8035f2a1cf", "sighting--2dff0086-fe99-4a9f-bcc0-36826b79fdcf", "sighting--229fb8db-6ac8-42e6-90cd-e84cc38fbe09", "sighting--c5c8cb5a-39d0-4caf-aaad-944bc80de824", "sighting--70b8ead7-8f5b-4ee0-80f2-8166986064ec", "sighting--c61260c5-3536-4d16-b258-d8f078b10dca", "sighting--5f528172-6fcf-4152-bc9a-37fa192f0075", "sighting--479e9b1f-bf96-4295-ad0c-079ee30b5070", "sighting--af698c5f-013e-4da0-bb19-e8ca3e806f5b", "sighting--0393b738-91fd-40fa-bb3a-6fdd181c062e", "sighting--c2556788-0460-48cb-8386-543536dd82aa", "sighting--ccd57235-ee3f-4899-8df7-da4f9ced0cda", "sighting--bb11a7ff-3a1b-431e-9080-3209f145a8f0", "sighting--1d2c06bf-0f89-40f3-9189-b818d662fb90", "sighting--0d9ea869-2a66-42f3-8efa-a14e0833d492", "sighting--f5eb070c-632a-4712-9c5b-c5b7391c4266", "sighting--53c6c6c3-4aeb-45f6-ad83-ef8bd8bd6959", "sighting--b8242429-0199-49a8-94a0-4df18326901e", "sighting--471616c4-c5db-464f-bfaf-3b77bf932b66", "sighting--340fa315-d6a9-4f0d-8696-dd45f2ed3ba6", "sighting--3a184ef4-db33-4c6e-b02c-198600d1160b", "sighting--497047c0-cf79-4d63-9ab8-f22aa3039735", "sighting--49142e74-ca0f-4c32-82f0-19882d7202fb", "sighting--1eda51e4-83c5-4b9b-a479-6c8fe181e0bb", "sighting--cd022d4a-0c54-4257-881d-0eff34820462", "sighting--910d13ca-5da7-4d31-bc97-814fb5f844a4", "sighting--66743261-533a-4d5f-aec1-943e81027e5c", "sighting--51a5bb81-e0f3-4c6d-a1b3-29f8ce6450b3", "sighting--aebe5d35-c7da-480b-a17b-2f7aba95158d", "sighting--299926bd-92e4-442c-b8f0-01d6368c6d54", "sighting--62460122-12ab-41df-b6eb-d2d2ccc9f0a9", "sighting--f842ccce-1481-4c30-907e-0521e5eb2c65", "sighting--75d87e2a-0dc7-4715-b9a8-3fb8cc6d376a", "sighting--d498648d-b9b0-4b0a-b5cb-ba6e17c3fc82", "sighting--d58d3ebe-c622-49b0-a16b-73f8089f8d71", "sighting--7ce8849b-25c0-4d1c-a586-511ecaf17ad6", "sighting--66b605e3-8cf9-4386-93eb-88a6428423a8", "sighting--aa52140c-7e3a-4548-b77c-6e15d1f7ff59", "sighting--5d40dad9-fbb4-48bb-81a4-291414078d5a", "sighting--50d1533d-39a4-448b-bd87-7da22dd9af5f", "sighting--15367034-3379-4c42-a195-ecf700159250", "sighting--74a14ceb-1c8b-4401-be1e-4c89805b980b", "sighting--d42fafc2-36c0-4692-a134-c7ef8834a1c7", "sighting--75797796-5bf1-414c-be4d-32bb01936bf3", "sighting--c4032a51-a9a6-4bbb-b476-fb36a32cf5a6", "sighting--1c4a222a-da0e-47be-a106-daf6dad46a59", "sighting--f67c65f0-49c4-4b75-8945-7d4093a2acdd", "sighting--e9babc21-717e-4360-ac39-b2ada447f7f4", "sighting--3fdf0ad5-1a7a-4ced-96c6-98d5a1e1dc92", "sighting--9c3263f3-9e78-4c2d-bd12-932184bd5edc", "sighting--f478d25c-cf7d-4cb1-b56d-bd9f5f832545", "sighting--4659b151-c7e4-42a8-9a2d-8aa618fcb17d", "sighting--a595afd4-3436-4ece-ba0b-3e340ec7e4e1", "sighting--3dfd898d-486b-4a6e-b26f-6c3b5f5fe8b3", "sighting--a1f1bd95-8318-4eb9-97ea-046b316ad7f6", "sighting--32f22425-ccfa-40d8-b7d1-5054b8ec5946", "sighting--23f8594a-3f02-4118-9fb3-7f5a0ab304a4", "sighting--76bc052b-cb88-43c5-abfe-5af9ab152c8e", "sighting--fe433b41-7315-4b68-9421-20cb74230114", "sighting--def0c082-8f75-4927-ba6a-be9a221735cd", "sighting--a140995a-fc08-4dca-8c09-839837601365", "sighting--83b58728-8663-4a74-aab8-4fbcc8db6452", "sighting--46a0da66-395b-45ab-a8c8-8cd4398ba7aa", "sighting--b1f8c716-9515-4e65-a2a7-4d3477463082", "sighting--6a0d133e-a4d5-4837-9e9f-cfd9c9cfeed6", "sighting--0a08ae96-db1e-44c5-96b7-5982b92cf4e4", "sighting--84aa0cfe-10dc-49ac-b242-2a0dba601f44", "sighting--15e7df4c-970f-46dc-9956-0fef6ffc47e1", "sighting--d36724d8-e06c-41e6-9e82-e6b61021151e", "sighting--f1600ffb-9443-4a80-8d39-83b994d419e8", "sighting--71a25948-5169-4bef-8546-85b49a5397d2", "sighting--302239f5-0bb0-4fb8-b138-e75322a66aab", "sighting--b3ca73a6-04e9-4d73-bbe3-7734d74b13c3", "sighting--64b8165f-8140-47dd-bae7-6c3241bd38ee", "sighting--ddf6ece9-259b-45c6-b351-f7bb140bb01a", "sighting--9fcf323d-854a-475d-880e-bc3855ac4564", "sighting--e16c352f-e10f-400b-b67c-307a782515be", "sighting--74c60ac7-21b9-4700-9cd5-3d4b12bbbae4", "sighting--b8aa96fa-dd6c-45c9-8119-00d0f269ed32", "sighting--42e4d4d9-0e1e-41b6-bff3-c5ddde30f781", "sighting--7f5d682a-58b5-4982-b609-7bfce4fd65af", "sighting--cb415e07-193d-4f37-8c1e-fd74d00eb724", "sighting--4a0c7618-800e-4e19-8d03-b3e02d79f703", "sighting--b29d0692-b04b-413d-9bb0-bcb5a43f4a2b", "sighting--27150dc1-459c-4593-8364-2dbcc6705f96", "sighting--0dce4c5e-2d0b-4b8e-ac20-7465aec8b074", "sighting--734d415b-5034-48fc-83de-c51b4663c2f2", "sighting--8757ea1c-834d-4556-bcf2-4fc8e182c0c4", "sighting--0a54d6ca-c31e-44b5-8fb7-def76f977efa", "sighting--6b029973-ef47-4bac-bfa6-41fb63cdacdb", "sighting--e551a1bd-fe18-474c-ac5a-f8ab3b6ca016", "sighting--7901ecf1-ebbe-4b4d-9ab6-cd1745f02d7f", "sighting--8d2d54eb-8e09-4096-8e02-d969a12cf8d8", "sighting--140bd0bf-9614-4d1e-90b8-d56b750f4197", "sighting--1c265cbc-2393-4c3d-a307-0a68dfd039b1", "sighting--c7b157f4-f06f-4ff9-a7ae-51346ea46589", "sighting--5ef2a07c-39a3-4005-9389-c2e2064395cf", "sighting--d940c7b8-8800-4348-8330-5a3bac734df4", "sighting--ae5816ac-44e0-4cb6-92a9-757d33124172", "sighting--c6bae1bb-ee33-4a34-be80-fc44e341d93f", "sighting--4d428517-3b28-46fa-a140-1cfd745ae631", "sighting--dd8cb128-0be1-4f88-9b87-f058b4dc8de8", "sighting--2889cf14-b149-421e-808f-c6992df7602d", "sighting--fec1154b-bc6e-47d0-b81e-ed54436d3ca6", "sighting--25315ae2-1213-483e-9809-11f237b97dc7", "sighting--cafdc8f5-597e-4c37-abb4-49e9ad91d7c3", "sighting--fae89e14-3927-4124-a6d8-9ce01a3dadb6", "sighting--52b060b1-a8e2-492b-9278-3649e4b2d3e3", "sighting--fc8cb69a-ed01-4257-be24-1893342fd503", "sighting--f0df7aaf-19cf-477e-b26f-1a845ec4a8aa", "sighting--2bd62518-120a-4d9a-8a9a-ded43c71d4e1", "sighting--46c4eeff-9e13-42c3-9e7d-cc2612aa10bc", "sighting--13336fea-ca43-4e26-a762-1a00ba2a1548", "sighting--ad4b09e7-62af-42b9-a22d-44009abb2387", "sighting--ea7cc34e-4458-4597-905c-7b21555ef1d1", "sighting--061d053b-8431-4b43-9c7b-a4785fa6667c", "sighting--5dd793d9-d19f-40be-86e6-3ff4af386bce", "sighting--f9a5eac0-3c29-4ad2-a41d-574b30c54ebc", "sighting--6655ed84-b367-40b6-b0bb-4e373282f1b2", "sighting--71648bc2-2fa3-4c0f-8d67-5d3dccd275db", "sighting--6d881f40-616e-437d-a668-f385cd80f3e9", "sighting--591dc66f-a5ef-46ba-9873-8ab041444d67", "sighting--48ff2e5c-37d9-4cc8-bca9-909ecbd114d0", "sighting--bf244616-ee33-4faf-93cc-710a40e0128d", "sighting--6ecf4291-2d03-40e4-930a-0d96ce63c4a3", "sighting--091b39cb-0b5b-4870-a046-6a068425dc09", "sighting--5d937f1a-adb2-4afd-931a-348839f37a2b", "sighting--3ee227c3-c7d3-4e92-abbc-e6b972dc4994", "sighting--9a20c496-9248-47cc-b458-a42c11e5bf5a", "sighting--515d6872-c8f9-49c0-9e00-4fff033ccfb9", "sighting--0abc5e82-b9a6-4555-a615-969883133a17", "sighting--12912daa-fa3a-4bb1-9050-7c36f1c5f63c", "sighting--550dbd57-87df-41fb-a531-41a779f5243c", "sighting--cb182aa9-fcbd-44d0-a51e-ca767d9c1eca", "sighting--f1eaf38c-c3a0-4044-98a2-c0845df8978b", "sighting--b7f26342-1075-4006-8cba-80906b560601", "sighting--0b44929f-f692-4f86-81c1-93bc58e4f94c", "sighting--de6390dd-402d-42fc-a6e9-cc2f151b5e1a", "sighting--2c8d12e7-1618-4a41-8f09-3147b8fd0656", "sighting--1b9500b7-5ddb-4cfd-be32-d88628f681b9", "sighting--f9aca702-656b-44ab-bbf7-f45864a874ff", "sighting--bc1aca31-fab3-45c4-bbf4-a47222d7f21e", "sighting--c59763a0-2981-40fc-bb63-6c3ae4d9021f", "sighting--5d473580-c7d7-4a21-8452-12f7c70f015e", "sighting--7886d7e0-c572-4d08-9f02-12ef5f7b52eb", "sighting--53472da9-031b-42ae-ac2c-8e7e3b7d8e55", "sighting--6e8f6ce7-f5d8-4108-8987-f9417199354d", "sighting--4be41d0e-8e9d-4669-8091-875b2e41b051", "sighting--73d2d722-5e67-4dd5-ace0-38e90430d1d3", "sighting--26d696e7-bbb6-415b-8df3-3e7e4d072e1a", "sighting--1e51f3c7-933e-49b3-b754-7649c7961980", "sighting--a57fcbf3-4a7f-4c4c-8005-59a3f8856f3d", "sighting--394636e5-ddc2-4b82-8961-4b748054827e", "sighting--74b9220b-1c3f-4e1d-b363-714bbd01848f", "sighting--df504749-4e57-49b9-ac1c-1ddc5b076691", "sighting--4cd63540-5ac6-45c8-83af-8099f324c6f5", "sighting--c11ade15-0f54-4eee-99ba-101f770e33a8", "sighting--a4c243e8-8c23-409a-ae33-42036d8a38e3", "sighting--464646a4-708c-41d5-ac60-91bcd10a34c3", "sighting--f4e90a7e-546f-4e1f-a10c-d8a09e18686b", "sighting--002ebb30-a770-4df2-8f98-1ac97f764310", "sighting--b18571e5-d37c-4de8-bdd0-0dba90d6cb4b", "sighting--9b3f2bd4-7a9a-444f-814d-566466149e39", "sighting--e6ed44c2-7126-4364-b3ec-d0f321d946a1", "sighting--7f807965-96f1-4d80-8cf7-3028aee80b46", "sighting--7a366ec6-5353-4a5a-be15-001e0f7dfdcc", "sighting--d8a46243-7d5e-44c4-838b-63c0e6b1a8af", "sighting--2bc20e93-5fe9-4186-93e1-bb4ce6f513b5", "sighting--eca5c75a-3fc5-4336-b415-d3b6ac4990ef", "sighting--33b5de5e-d872-4017-92f8-b96cf28ccd2a", "sighting--8b8daeb1-cca2-40ea-a3a4-b79ff9d5929c", "sighting--ac4087ec-14ef-422f-98d3-45eab0347b59", "sighting--3b2a89ab-e96d-4b0e-99ee-8ac45fecd669", "sighting--5d5ecb3b-24e9-4671-8eca-490569c32b6b", "sighting--96380884-95ed-4a76-a941-54919dcffd9a", "sighting--0a26e96e-5bcf-4ace-b5d8-d93f56ca27a4", "sighting--626ed135-1734-4fdc-bbab-4aa691e795d2", "sighting--1a223deb-c365-4420-936f-3beaa8fbe2d7", "sighting--a88e32cf-480a-4efe-98e2-e4320185374a", "sighting--5212dc6f-0839-4322-90d3-291f367e19d7", "sighting--9b6d38e1-afab-4ad1-bcd4-d74a558be608", "sighting--80f8800b-5905-4d95-a149-249931178d7a", "sighting--74bc7a7d-9b74-4a99-9d30-de8c44895319", "sighting--f701e7c9-25f3-40c2-9438-83d57dc4d0e7", "sighting--d355c10a-fa97-42dd-835e-139af4817191", "sighting--dc57f6c2-15c8-4704-a41c-beb2efcff6b0", "sighting--2a7fcf93-d053-490a-b0fa-7af35a733d0d", "sighting--0866f0cc-ef63-4f77-a3a9-9cc281d2d5f0", "sighting--74509010-3019-4367-8e06-b20a3b47322e", "sighting--838c47bb-2ef8-406c-8213-daa11e6f9d5d", "sighting--3fc894d4-a736-497b-9cd7-aa2ad939985c", "sighting--905610df-3a5c-466b-afdf-45698082cd8b", "sighting--ac2d313f-3ea4-4d9e-b0e0-0dbbc17620fd", "sighting--3ec32637-d8d0-4414-b39f-5bd2b7fac5a0", "sighting--804e44bb-89b5-4aa9-99b3-fc9f5525b92d", "sighting--b9cd8c96-9eeb-41a9-9ccc-9a3b7159d1de", "sighting--0cdb2d44-e99c-4f1b-b975-6a0eaadc2466", "sighting--415a0a74-5e88-44e3-b254-ed5b2e2378e8", "sighting--cd0a8098-5ed6-4845-b326-2539f5af422f", "sighting--6027a2e9-a5aa-43a5-b2f2-01ba47d13b70", "sighting--132434e8-88a3-4f64-bb19-4591c8724e96", "sighting--215e6202-941c-49fa-9a95-afa9b6dfe898", "sighting--46f029fd-97dc-4e69-8109-21b5df02a505", "sighting--7a8ccf21-7a98-473a-bcec-0da1567f84b5", "sighting--f0a1fcd8-68b6-492e-b4ee-8589033c9efc", "sighting--aae97a15-dcd8-472e-91ab-5c5e0eda55a2", "sighting--07ded4d9-7664-485e-a9b4-6709abda0b43", "sighting--1e9346f8-5067-40e5-b4a6-d5204476f9be", "sighting--6a4dcd13-47e8-4d09-ba18-0c5a80a53486", "sighting--7291abec-d4e2-4235-9336-2080979902d7", "sighting--7914c17e-96a0-451a-8099-d28b21eb6620", "sighting--2aefb390-ca78-4f9b-a043-8894feddef6b", "sighting--d7380e3b-96a3-4322-b6e8-ba335a7db4e9", "sighting--1de08d7b-1ff8-4054-b03f-430092c88d6a", "sighting--13da341e-514f-457b-b04c-4e7d4cd09d45", "sighting--0382ed67-8157-4878-bd70-ab1fefdc4392", "sighting--f416895f-aea4-4223-b09d-e73ae42eabf6", "sighting--4f472d7e-82ae-48aa-a34f-ddbbbf65e894", "sighting--a09219ef-f52a-40a8-9ddd-eb6bd181e41c", "sighting--c4143920-299e-43c0-92b4-070ff264755f", "sighting--dbc7a928-0183-4663-b310-d36a930fd76a", "sighting--bb58fd65-c2ad-494d-b136-192157fe3276", "sighting--43d41ef0-b265-4748-a2d7-ed9cd1cc76bc", "sighting--e523fa29-2092-4a4c-a3a0-953efe008f86", "sighting--ea155c0e-fef0-4e9c-8552-b11f3d97e7bb", "sighting--0821a65c-39c0-493b-9029-5dee8d93095a", "sighting--1bcbd8b7-a664-44f3-a2b0-fcd7f2b2bb4c", "sighting--9548976b-e19b-4a66-aace-bd61e2b92d23", "sighting--f01e1a1c-57fe-49d4-8e46-30c3c9e8a138", "sighting--999627ff-4bcc-40eb-a917-2136b0b0e1f5", "sighting--31a4ae7d-8ea4-4e5b-8f96-d978971c416a", "sighting--ad9f42ef-92d4-4c6c-b46e-98b868624ad7", "sighting--9a4fd55c-a560-4759-860a-cd372f0cbd00", "sighting--07676782-4800-4df0-b90d-46f182e16023", "sighting--fcefab3d-e898-49f2-ae93-4494a345be27", "sighting--a28cc824-3329-4901-add6-bc6fde9b16a7", "sighting--69347837-3e5d-4f94-b854-5ca59c55ef74", "sighting--326e23f6-f6d0-441f-8599-b65ed0a85634", "sighting--9855c37f-db6a-47cd-885a-2b9fa6942937", "sighting--6599bc18-4ab0-4749-8a13-2ed460d1745d", "sighting--1f4bc7ad-5926-426b-879e-1dfb63d45eda", "sighting--e65d1142-7035-43ff-b301-1d3ab1d0d0bf", "sighting--23d135b9-9917-46b0-bfc4-a635cdb2ca59", "sighting--80ad6360-7585-4689-a61b-e627f51aa371", "sighting--3fc92d40-ce12-460a-a018-074e69c06d8f", "sighting--c6f46603-21a3-432d-bf34-a29aa8c60bd2", "sighting--d9184053-5a51-405b-8586-ced405a86a06", "sighting--e734d127-407a-470f-8c26-835c36e950b1", "sighting--cf0a6d3d-90d7-4796-9e06-2b4e4a61bfa0", "sighting--9dc5767b-86d2-4af8-93aa-179c27feb2ea", "sighting--12910b62-47c0-4877-98ac-acb028acfd35", "sighting--2ed03155-38d2-4fc9-a5df-e4b6131ec74c", "sighting--e665a9e5-a5be-4789-990d-1b8b5ba66cf5", "sighting--eb1c2a66-6db4-45dd-8365-13a9e35f17b5", "sighting--3d9aad53-38ce-4d90-a882-b1a64a40e58a", "sighting--a01fbb90-d6f9-4120-bb71-c2ae168544c3", "sighting--4ee1b9c3-aab4-437a-b587-b6f9a14faaab", "sighting--2161f378-c101-4bcf-b030-dac1f57bd75a", "sighting--ac93ac53-0866-4e99-a5e4-26907db07e0a", "sighting--07b9b3ba-8641-4df8-a3aa-357dc5b1529c", "sighting--9adcbf85-06df-44d2-bfa4-ebe5aaccb7ba", "sighting--dbbc3b9a-d555-4776-8cae-ddb2aa12ead4", "sighting--04fec255-b274-43c0-9b49-3a9355c853f2", "sighting--1ff5e65b-98a8-4695-b9fc-d4496869cebb", "sighting--d38b6fa3-cb8b-46ce-8a38-7e67a95796ca", "sighting--ccf115f6-9a62-4853-a3a7-fdf4b410978f", "sighting--5793bcc8-bbfd-4939-bb02-9d37e0764bb4", "sighting--0a229f50-12b1-4113-8676-bc1cb2fa9f68", "sighting--f5c0dfa1-ab30-48c9-9262-be41f206887b", "sighting--6c5bcc1b-3636-4ff5-a255-7ec4493946fb", "sighting--d7343374-fa9b-4102-b241-79e46577195a", "sighting--42a18c12-7549-4f26-81ec-1302a83f6cde", "sighting--af412c09-7770-439b-8de5-ca1703da44b1", "sighting--1734d1a8-a9db-48f1-808e-b2bdfcd38c4d", "sighting--86ad9154-354e-4d8b-bed8-255e2248119e", "sighting--be366380-6427-4739-b009-47b274dd794d", "sighting--2dcd02a4-ddf2-4686-95a8-8e256be1b089", "sighting--db07c178-74d2-43f9-b0f9-83dab9ccd05a", "sighting--570bf919-76f0-4dbb-a0df-663931600445", "sighting--b8ff3e3c-dcdc-4f1e-a02a-3a200cefd788", "sighting--f0a1448e-cdf1-4b80-8011-0b7eb9ca30a7", "sighting--5aebcfd0-3fb4-488d-b1d4-7dac28b7743c", "sighting--6ea7e5c4-7df3-4a84-b364-f32f3d5d6aeb", "sighting--0ab1ab9c-b0eb-4571-a7f6-2d85b9f21a01", "sighting--cf5fdfa3-cc0f-442d-b763-ec40e17c4e87", "sighting--649924ac-fe8b-4b3a-9a67-c3b26ecdf736", "sighting--2c8c2309-6748-4dae-b48e-1b5773eb7142", "sighting--6836e0f5-e8e0-4a14-90ea-c4361a6d9902", "sighting--73423dda-e844-4469-8835-a11c78451b53", "sighting--27204abd-499d-48b3-a5b2-712dda5cc4a8", "sighting--b28190be-5dac-4229-b56b-a2176c4d2e36", "sighting--9558d07d-f4eb-4511-a4c8-2d54dc12159b", "sighting--b2e0abdb-9dda-4729-943e-c0bf7d90bd64", "sighting--1f713f65-af3e-4d11-addf-fd89f5a13f26", "sighting--00a790da-9361-47b9-8086-7b0ab2982a37", "sighting--34829f62-1c39-4b96-9f93-a0df6b8b1bb9", "sighting--0d752556-4ba9-4c20-9f12-61b73c818447", "sighting--00cf227f-f25d-4dbf-a1fc-42bea9b12a2f", "sighting--b7281aa6-87fd-4589-9c73-92b7b3e9c0fa", "sighting--81bd99e9-ad85-444b-a92b-60cdef525fd1", "sighting--22742ae3-9e34-4446-a7a0-f00f7995e13d", "sighting--b7c990f4-8094-429b-b6fa-5f12e64b07d8", "sighting--47cd2ed5-f0e4-4f2a-95d9-dc1518c7d06a", "sighting--62b22443-73cd-41d5-8bc2-d408abae6fcd", "sighting--f53a0e15-ee58-437d-ba4c-acc36b0d6329", "sighting--c5013c3b-e4a4-4db0-b966-3bf848819250", "sighting--28c25d37-0fb0-4d27-a88a-4974913a34f5", "sighting--30199d15-aa06-45a8-a1ed-6359b6642dc2", "sighting--e848e143-31f3-469f-95e3-654fe823f6ba", "sighting--e14fa62b-9cbd-4e94-b37b-c5cfddbc9eff", "sighting--56cd86ef-0956-46ec-abd4-0797a4e1d3a3", "sighting--d3e1b0c1-81c1-4db3-893b-4abeb059ea44", "sighting--a745bf19-a4e0-42cc-879c-8e42dd04561a", "sighting--aaa9fb9d-ffd2-4e54-b27c-709e29382db2", "sighting--aff7645e-0c87-4e74-bd32-20f526b2e05d", "sighting--93a7409d-acec-4693-ba0b-45ecfa052bc2", "sighting--33136f1d-10f5-4e7e-ac1b-9a57ab60ffd2", "sighting--f7dce2a9-c7ef-4700-834d-9e997c6283e8", "sighting--d69381b4-45b9-4a6b-ad17-b916bef10b14", "sighting--dfdac224-85cb-44fa-b795-ae4b1f4f81a1", "sighting--76ae4b10-7889-4788-96f9-0598360cdfdf", "sighting--138a1f95-0bcd-44c3-88b5-07c18c7f2534", "sighting--2ea91962-3940-40a9-8d0d-f9197b4e8524", "sighting--36a59061-91c5-4e2b-b1df-6e1df6540a5f", "sighting--bb767158-456e-4610-8209-3d8ec683e6df", "sighting--9ddf80f9-f71e-4560-adb4-94a375bb5420", "sighting--33daf723-feb6-44f1-a683-71478834827d", "sighting--798e4b23-f82c-406b-8127-a77ba9fab284", "sighting--2bbc4b0e-ea2a-437d-a821-f149b980dfbf", "sighting--ba8ceb5f-721f-4d48-9fec-27e58c0d5ea3", "sighting--3249bf4a-979d-4e1a-a98b-69f28d92759c", "sighting--0f8309ff-1fd9-47c9-ba51-f42256315bab", "sighting--c627fe22-142f-4bdc-8f0f-46c0e370f1d5", "sighting--243b9b85-ea8c-4720-a28e-a71475cdd18f", "sighting--c05207b8-0218-49d8-9030-d341d5ef562c", "sighting--611dddfc-9697-4e21-be66-a85dbd756937", "sighting--797d384e-da60-4d75-97fe-64026271466e", "sighting--ea08a34d-ffc1-4dde-aebf-aab852ff5d95", "sighting--c7a41713-5b2a-401f-b8bd-e12edd0f7768", "sighting--75286120-ff73-4107-a933-81d1f9308e04", "sighting--b1073ccb-a2ab-4761-84a8-6e43c6d89e42", "sighting--f54b8278-1400-40bb-8755-09c488845e3c", "sighting--f82804ce-7bb4-43e8-8cae-58bd64e6e235", "sighting--e47d5990-f241-4427-b2c5-3349174e6935", "sighting--b4f13ec2-6066-47fe-9afc-e846e0fbde15", "sighting--b37e1217-c1fc-4fb8-aac8-33c97de3c0f2", "sighting--975c251f-dadc-41d4-93ff-997a5f79b5af", "sighting--82d5c53b-f127-4a94-b199-5e27caab879e", "sighting--36b39f88-9250-43ed-9b96-45b263e182fc", "sighting--2e69e281-fbdf-490e-afdb-a4320c43dd35", "sighting--354c240f-5d95-4029-bc75-679ef3ded2fb", "sighting--33a711d6-3a6d-4cb3-9c33-5070f751e471", "sighting--fe41450a-98fe-436c-a68d-58a569549483", "sighting--d9ad2c61-9e11-4b2b-97ed-68cc19341fb4", "sighting--a0753000-1d76-4ac7-9f09-ae504b450724", "sighting--49b01f32-9da7-49d5-a349-56658bb1a474", "sighting--95714594-c093-4b9d-aa6a-46727b60887d", "sighting--693a05a6-58f6-4026-a30f-e3c24db9bc9e", "sighting--4320cafd-c1e8-416c-b579-363484fe48bc", "sighting--5fec3cb3-a53b-419f-ace3-ca7266a9ffe5", "sighting--6cf611ac-8dd0-4174-aba3-b3bd1fbb0909", "sighting--00a22311-b728-4fe1-9ab4-84abc7e2d7a5", "sighting--b732a88f-9a05-4c65-8df9-b20d570116e4", "sighting--4e5591bb-1475-4aba-836c-af2cc03fc43c", "sighting--7bbb1e79-30fe-4a02-addf-1724ac362ff0", "sighting--afbba05d-9728-4934-b8fc-13e59c45de66", "sighting--6d66d220-069c-4202-96b1-28f512e45dd5", "sighting--9341eb61-3cf2-4d06-a567-1a755c3c066f", "sighting--b91c7b44-1f82-4725-a9f1-6f474f2746ef", "sighting--8caa5ab8-e4a6-4acd-bb69-3bbafb91b392", "sighting--1482fdc8-6465-443d-8973-28670442b5b7", "sighting--c0d8b262-139e-44e7-a98a-6d3492fd4847", "sighting--56b3af1d-f7af-44f4-9a6a-8feabda5cb09", "sighting--70772180-2da6-4dc9-b8ad-249651667a38", "sighting--776c1f95-b3a3-410b-bc85-e0c94c158167", "sighting--d9097a7b-6ade-4565-b8c2-163fbc8aa549", "sighting--24658b49-2563-4dfe-bf11-278e0f901699", "sighting--fa2b63fa-9435-499d-9a01-1f11478c22c8", "sighting--3d89c272-3f75-424e-bda4-ff0d61e8f770", "sighting--92daf679-b5a2-4d52-8a2b-fd12fcc120aa", "sighting--58302e54-dbb0-4031-8342-4dce534fab36", "sighting--938a34ce-cda2-40d8-99af-aa6b939e6076", "sighting--6a8a8f4e-834a-45c5-bd9e-18c9183e0686", "sighting--62273d58-128c-44b6-82e5-05eb22a1b69e", "sighting--611adbec-e700-43ca-b14f-34b013322ad3", "sighting--57b5f9b9-dccd-47b7-8552-c9e82182c767", "sighting--7076036f-8ac8-41ef-8696-430b541ea1da", "sighting--c677e358-87d7-4425-9ace-42988af4614d", "sighting--15bc32fa-a494-48dd-adc5-a02b8883665e", "sighting--68b30094-3dd8-4248-81ee-cd766aa2dade", "sighting--7cde601a-3084-40fe-bb29-b3d34986a32c", "sighting--3eed6c4e-8604-4eda-8272-000acf85a7d4", "sighting--5f743067-0df4-4e36-afd5-ebed024a5f89", "sighting--15d63844-1aa1-4d27-bc62-d65e6b200598", "sighting--a6f6f094-eec1-4456-8c01-6dead16109d7", "sighting--414df842-bf5e-4c29-a4f7-8cd9369e1e7b", "sighting--b96a1d44-ee65-407a-ba77-2a9b1e91ed21", "sighting--0ca7a516-6619-4ead-921f-12d4bdb9f02a", "sighting--1bb47b3e-5e8c-4989-a77f-c5d4c88081a2", "sighting--845242e7-8f95-4589-bbb3-5df0e0ac1310", "sighting--d121d007-5a80-439f-a941-d69bb8ba7134", "sighting--1dbe530a-73f1-4f25-b6cb-fa2bfa73bac7", "sighting--34b3516e-367e-46d8-954c-934cd2a7ba08", "sighting--ecd7f961-15c8-4b47-8f72-5fe6620e2bee", "sighting--5c449e34-569a-473e-abc5-7bd26bbeb06b", "sighting--6fe28fa8-5742-4462-99dc-f3eaa0d6f559", "sighting--6aad9eb0-8fc6-4ffb-bf26-37852a1236fe", "sighting--ad1a80fc-f389-4e0c-bb63-804fa037e701", "sighting--dac21e78-cd82-46bf-b54b-825d762e6f17", "sighting--ca5a8bb2-e4fa-4e4a-a099-3cbfe0613f5d", "sighting--9aba3e3b-a8c8-4896-9a26-343df509a68d", "sighting--f59caa2f-9002-4502-86d0-9613fb525660", "sighting--3bad78f8-01d5-40f5-9f6d-38c94b27ac43", "sighting--013e20fc-c80a-4a4c-acba-0d42cb6e4b86", "sighting--21e90d71-7488-40e5-b241-f90fb65d4903", "sighting--87f6826c-83f0-4c31-9686-bc79af760ac1", "sighting--aedc45e2-8fba-4784-babe-78e0f2227846", "sighting--caa6d7e6-26bf-44be-b67e-489f5ff4eecf", "sighting--451e9885-881c-4dae-9baf-44007c46a566", "sighting--4cfe7bae-03ec-4022-9370-5cd32f54892a", "sighting--9265acf7-f411-4f7a-98c2-c413634d5575", "sighting--a42db134-8714-4dc3-981f-223bcec567c6", "sighting--c265db61-cf0d-49f7-a459-486ad20dbeef", "sighting--147f1808-3f61-4caf-b7a6-aea8750115b2", "sighting--6d0103d6-697b-495e-b390-6e5829d6388d", "sighting--aeb3e3ca-4124-43a0-8d01-b5827ecc9edb", "sighting--a7b0e2b4-21bc-4641-9d59-816b20a55708", "sighting--f3f53294-ffe2-4da5-ac3f-f73e53cb24ef", "sighting--4dc921a2-ba49-4da3-a5b1-4e186097ebf0", "sighting--b1abdc7f-bd15-4f72-b307-b8b8f81b9b7a", "sighting--59adacda-d2ad-44a3-8f73-bb6642b1dfa5", "sighting--6acd3b0d-f5d2-4546-bd11-7e42540cace5", "sighting--a90ceffa-b451-41f0-86bf-3a2ef6459a9f", "sighting--966cf674-ec7c-42d5-bcf4-01a69dc4c5cd", "sighting--184b5ee4-1129-44c6-80c2-2d1645946770", "sighting--a284624a-2bfb-4073-a52e-214edbc10b3a", "sighting--2e09fac5-b7c6-45c7-aeb2-0b5bf8cc20cc", "sighting--f1b7aa87-7f56-4c69-82dc-a571ab44bcdb", "sighting--169963b3-8186-4d0c-a113-191bb859f09e", "sighting--2eec8591-ec9c-446b-b6bd-7a510fcd54e4", "sighting--f02eeeb1-427a-43ec-aa3f-e6869575ada5", "sighting--ed88c6d5-8306-402a-a0f4-beaa22e4cb36", "sighting--13a8f3e8-4dbd-4f53-95bb-dd99107d3952", "sighting--8c49f1b0-c0b2-4fb5-9f7d-d5aa35cea10f", "sighting--8dee3246-1dca-493c-a760-0dba09b70486", "sighting--ec5210f7-4d53-4dd6-aaae-cc8d600edfd4", "sighting--05216aea-6c6e-4067-80f6-bcb960ef428a", "sighting--820dcfbd-a172-4c5c-9d39-3409d9a7ea3f", "sighting--fdad69bb-3f5b-44c6-8da8-2e03dc10356f", "sighting--2fdcfdf1-6ab9-4f5f-9508-1cf8ada84c8a", "sighting--dbea4b6f-10ec-476a-9e79-3aa30dcc21ef", "sighting--4d8d5dc2-140c-422f-8fda-0f510595ea32", "sighting--9302ccc3-a47e-40c1-8d3e-a6894b1eef54", "sighting--fd8c6ef8-1b3f-4ce1-b6b3-0ae252bfe5d4", "sighting--f5983147-187b-4bdc-a3e3-aebde0be5ab6", "sighting--0c60d597-0658-44b8-9389-112224a90385", "sighting--e7da369c-e864-4178-a534-e7fce9a5a1a0", "sighting--d233b33c-2bd1-405e-aeac-bad069bd1adc", "sighting--98a466cb-9dfd-4bbb-bfe2-667ab0d7086e", "sighting--2695f5cd-8e5c-4372-884e-161011034431", "sighting--be10f20b-b18a-4a07-a96c-398c40eb923b", "sighting--1259275e-1f44-4467-951a-ae7d509bb2b2", "sighting--d655e163-8d69-4b45-9faf-8165133b1b73", "sighting--d162a600-efba-40a8-8ef8-b6b5013fd651", "sighting--10bf15d9-3e64-4aef-8bcc-c5af19e1bb3c", "sighting--95e60c43-efef-47c5-9757-5800063e39b9", "sighting--e3485bc1-6c68-469a-ad2b-b5a499b63265", "sighting--8fdaec39-e9be-4859-9648-2b24cd6b5d5c", "sighting--958db619-c4da-4a11-b22b-b3de3b53cf9b", "sighting--539bb03e-cc80-4a72-9f09-5a65ecfdad37", "sighting--4c0e0118-5c63-47c5-a465-b978edb4cf4f", "sighting--72edc0d5-a212-4e50-a905-8d9e2c1ec432", "sighting--bfd8bb15-7885-4e58-b300-c746c0794704", "sighting--4c75a1b9-ca3f-45b1-b111-22d97f20e78c", "sighting--318e4d13-275a-46a0-92dd-03fc29b0cd42", "sighting--e9b50ce2-53c4-43cb-b26a-ccec699abf82", "sighting--02e51c58-4018-45b8-b8ce-dff983e6de57", "sighting--d9c2112f-1c33-429e-8792-6d18831213e2", "sighting--b0aaccc7-faf9-4ca5-af1b-0846dfe63f53", "sighting--e797f869-6af6-41c0-a939-ade00c32fa2c", "sighting--5814f8c8-da1c-4786-93ca-f1f2c4cd6524", "sighting--03e41a91-6766-4261-8275-1e21eba2b091", "sighting--f09998c5-8b61-460b-8f0c-3430cd51ea52", "sighting--634a5d21-2041-4959-89a6-7015e3886786", "sighting--b34af9e2-7da0-47f1-be24-84c38d327faf", "sighting--de2e86f5-81aa-43ec-99b5-066793047c98", "sighting--1b62c404-5e69-4a97-a5eb-1c6faf6e1d1d", "sighting--98068dbf-86a7-4f49-b7ea-975e7361e7c0", "sighting--5946da61-8cd7-4507-aefd-41794b563bf2", "sighting--9c03695e-6346-488a-bc6f-463166160948", "sighting--02b2ad81-e7da-4358-b1b3-d78bfe199232", "sighting--b100a5c5-2f03-4cae-ab63-0d3583733d58", "sighting--e0c19715-5f35-4b5b-a085-ad73f3dbd16c", "sighting--239a184b-c4e6-4ecc-bd82-6e898c7ee095", "sighting--476efaec-fa13-4acb-a8ff-0e3f0b822915", "sighting--a99bfd50-a0a4-49eb-918e-c64c6016042f", "sighting--5384495f-393d-4e74-8ac0-dbeed4879664", "sighting--b0590d58-b6e7-4df2-adc7-beeaff27f958", "sighting--38484d70-b9bb-49d3-900b-a76ba4155e2b", "sighting--5877f72e-1d01-4ed4-bf36-d0214a6bcdcf", "sighting--879b4202-9df3-42f1-b11e-5d4e91252825", "sighting--2e0939b6-bb38-4193-b118-176bffb35828", "sighting--fabd02b7-8d4a-4ecc-a386-8e8c0229614c", "sighting--7a3cf698-1e09-490c-9a59-fbbbb38845a2", "sighting--4f727b18-1414-477f-80e5-4c45428e27b8", "sighting--87153f00-7e55-482d-9c62-cb46fa6d063a", "sighting--3d252d1f-5fc3-40de-b09f-bc05a70af261", "sighting--9731d1be-5b64-428a-a7ad-9a0918776359", "sighting--a96a9a06-ea98-4310-8ad8-0c7a45d9a1d2", "sighting--e7fbaa81-376f-4431-b78b-93c05e5d73c8", "sighting--96bb731e-ea69-48aa-ab2b-4a63b98490e4", "sighting--6b93e406-4448-4ca1-81de-b59ac0bc7d12", "sighting--0e0af0a2-a5e7-4aa7-94e7-52714c662d09", "sighting--d395da54-fed5-4347-8e87-b1e6595bf414", "sighting--241cf902-57d0-481c-a9cd-6164144d35ba", "sighting--8eba73ec-89b5-4c0a-a297-04b715de9269", "sighting--5fcc0dd9-c27f-4a1f-a725-f895cb587497", "sighting--5c090a56-6642-4349-a94a-6c19ad225a60", "sighting--82cba14f-99ed-403c-ae5f-dd4194cee45a", "sighting--889c87ba-5d39-4477-8c6c-b5468e8127a5", "sighting--f7ac6b97-2a77-44a6-a372-ef46be79b1cb", "sighting--1d106bb0-3ed6-46ad-a853-e7b6f9feb1e9", "sighting--c1cac124-3596-474c-9afd-17cf13f5ba90", "sighting--92a82a82-1a8e-47d6-b958-745d80c3e050", "sighting--111e38cb-7093-4af6-b96b-76f027f07b03", "sighting--bfc1d37a-6b6c-4115-a586-d08737266a33", "sighting--7a09e9a5-bff6-4274-9e20-37e576444d37", "sighting--d8bc94a6-baba-48a6-ab8c-8276d2df529b", "sighting--fd44792c-07df-44e6-a5b4-4ae677d69d39", "sighting--e5b59a5e-6917-4776-abce-0981f40cb500", "sighting--bd441de0-b163-4554-b7e4-bcb3ac420a4a", "sighting--6dfe8eee-4b69-4e40-ad48-92c9a6d308e5", "sighting--42370c2e-0e93-439a-8eb5-a93eab8893fd", "sighting--e223750b-cde3-4a28-a3ce-f9643689552b", "sighting--b258b1a4-6a21-48f9-9cee-6333a241877d", "sighting--7cfec9e0-0201-4081-bfe6-acad8949b89b", "sighting--f50ea365-fb2b-4d25-bc70-6dd802314285", "sighting--3bfa60fc-ae0d-4726-aa0a-d067b7991b63", "sighting--71e7aa0e-1897-4ed9-98dc-c2f958e76f0b", "sighting--41399b46-278d-4a75-aa7a-49c60980f61d", "sighting--3ea2de56-de8a-448d-a822-d80094fa8029", "sighting--462d6a5c-583e-4098-9661-f84a4fcd1d34", "sighting--05e29d86-6de9-4902-a1b1-7a0da50e8d27", "sighting--542de6b1-53c7-4689-b8f6-003638fc1762", "sighting--0cc5dff0-d7ed-497a-935d-fd22a2f99cbe", "sighting--44eb3695-363e-4f1a-a76e-16aa7fd354ac", "sighting--51733072-894b-4ad8-818e-0031b8686c6e", "sighting--c67de30e-bfbf-483a-9475-b33725c5a013", "sighting--1fda49d4-477c-4e67-b398-dc8728667dd9", "sighting--3da5bea1-e1ee-4603-8466-f5f2af4323ef", "sighting--17a1ec37-cab3-46a7-928e-4bd434a054df", "sighting--aade9f2a-1548-4956-a410-93d3167cc0af", "sighting--e781ed9c-b07f-4962-a486-9497a2f91ba0", "sighting--e864a879-06a0-4365-8c69-e7ae35276501", "sighting--84582daa-4c5f-431a-8085-4c8c26b50fc8", "sighting--9932d080-0ef7-4243-9285-b2e2cd53dfcf", "sighting--794260fd-3c12-42d7-8472-f1a4fb69b400", "sighting--88b783c5-bca6-4ec7-93cc-838e25a9c695", "sighting--ddece0e5-a5de-4166-9b3e-8e400ad2cf95", "sighting--fdf0fe25-df45-4738-93ce-5e286dc6862f", "sighting--8b2e70fa-26bd-4d1b-a86c-573a9e209806", "sighting--b2976058-1456-4d26-9082-119b89ed7227", "sighting--5a65d804-613c-40e1-b14d-9656ba22e486", "sighting--c8e65f8e-9116-4428-b738-b6f4a8b6b4ae", "sighting--be96b5bc-32d4-4ebc-b8f6-1b357a7f2466", "sighting--e579c565-e9e8-4887-9011-7d3b8e67e0a0", "sighting--eeabf447-7c8e-46e4-ae4b-391647042fff", "sighting--9e68e8ff-636c-4236-bec5-c6d9faf818b9", "sighting--3002cf34-4c63-4815-856e-b79d8fe2198e", "sighting--2322bf25-6495-496a-a659-a3eb43707e49", "sighting--385f0d47-efed-4f15-8078-01117326db0d", "sighting--ff59b08a-9ac1-4abb-8ab0-1f3ba330f6e8", "sighting--b5fff13e-5356-4206-8e5d-a661ffc7226e", "sighting--52906935-c38d-4d26-b52a-95a0a782cc3f", "sighting--75240479-09f3-4477-8e87-57aab27348a3", "sighting--aaa53b73-9031-46c3-9ca5-a08276f39646", "sighting--e0f638fb-a7fc-4cdd-a93f-8bb496166866", "sighting--0cb6a48a-5c06-4dad-908c-2e5a31a17ead", "sighting--e99bbdb1-cb4f-49e5-8beb-de533be3b1ca", "sighting--dac0a5e0-9419-4a28-94ca-02b58785e3a9", "sighting--18aa3849-cd68-4612-a648-27e3e9a14f7f", "sighting--181614f4-35ce-42d4-92e8-339f02ae22a0", "sighting--514a50db-fe31-40a1-9038-8a2535cadd68", "sighting--c190f134-d810-42ce-8bcb-caae3ae669e4", "sighting--ba00a21e-aa1c-478d-a3ce-bf202ce5a001", "sighting--c4c42bfe-80b8-4242-a03d-9b68992beb69", "sighting--59bf88cd-e4cf-4ae0-adcc-a27b55d57e64", "sighting--213060c5-b369-4221-84e5-732f40ca3331", "sighting--265059f2-e8c2-4dbd-8ccb-2a7d3f9a8941", "sighting--012b849f-8d3a-4834-b723-bed0a2e371ae", "sighting--8ba25cf8-79f1-4251-b331-b60a6bc971d9", "sighting--a79059d8-057f-4e70-8278-8ae45dcac2ce", "sighting--d555d878-49fe-432e-843e-2ec6a888222a", "sighting--0c6d0705-d855-429f-8295-c4f0d30d1979", "sighting--f77ab1c6-efe7-4b6a-82d8-e8eae8e5b237", "sighting--62cb180b-9f41-4f7e-a496-f8f6027f2d3e", "sighting--92ff50ec-ea06-43e8-81d5-357619a28405", "sighting--774dd10f-614b-4145-a0b4-e0695860a060", "sighting--22aa215d-82f9-498d-80a7-40e5f4a0b63a", "sighting--cf36a1e3-a5b1-4a7d-8727-bc8c7d1cb8e7", "sighting--5b75500d-91ed-4599-af21-2b37cc1722da", "sighting--b16f342e-20b0-434e-a477-0dc48c0923ba", "sighting--fccb150d-5108-4b42-a653-9aaaba84dd1e", "sighting--58216073-bb19-4a57-8c98-0f8b0bf536df", "sighting--9015de68-adfd-44b8-858f-b661e724da4b", "sighting--a4e121fe-e32d-47cc-98b7-462e55fa70db", "sighting--276e97d4-b2fe-4b55-8868-399bfdeffd7d", "sighting--0f0b6c4d-893c-479a-bfba-ec57a88166e2", "sighting--4776937c-7e2f-4e59-9044-7211a60726a5", "sighting--df830685-8053-4d85-9b5e-5940f0fc3ed5", "sighting--8b80b40f-2a51-4a88-b095-48966c2222d7", "sighting--3ca5fb8b-49d3-41ca-acad-c2a72e872baa", "sighting--757d934f-8e33-471f-b5ba-718c90284ba0", "sighting--aa99ecd5-ceb1-4f6b-848d-24e81126d10e", "sighting--ca9b1aaa-c008-4421-b08d-8af0359cafe2", "sighting--194ebdf4-c24f-41fa-8597-593dcab59672", "sighting--abd1c727-c809-4973-bfde-2118898d8399", "sighting--dd22fe71-a758-4212-a2e7-676bb90683a1", "sighting--ecdb683f-c215-40f9-a91c-464a52aa6784", "sighting--bcf77c2f-8e3b-437b-a21a-4cdfcc928c50", "sighting--a82be286-ab99-4562-ac13-b3ddcb00fa19", "sighting--b0532060-3497-4641-a5ef-7046698796c7", "sighting--d7a3c681-59bd-445d-aaf3-a5214f549712", "sighting--05cd2eaf-deb6-4b00-831e-7da89901478e", "sighting--4e5c8ec8-bf9b-46c3-baf3-6cfc0f1a5443", "sighting--2b5d3be8-7430-455e-8588-96ebbfae266c", "sighting--06687403-5991-4edb-91bf-d68253bf56c7", "sighting--d729f2b2-d84c-4126-8016-ef570961bdd0", "sighting--384f23fb-e3b4-483e-b1d5-c5637472315e", "sighting--dc0987f0-f817-4963-9146-4f92e0a6b5a3", "sighting--d221d8db-022f-4811-b0b7-92a72b49c2c9", "sighting--a1f1b38a-9b0d-42c6-bb5d-c56f8b369807", "sighting--34ed99f7-f61f-41b7-b652-96d1afd26e11", "sighting--527ddb74-2bd2-412b-af55-4181bccac23c", "sighting--8d56a2a3-fd9a-49e9-9486-97af445c0e8c", "sighting--7ab2b9f7-d2e8-4f09-b572-ba66dbbacc64", "sighting--f5c2400e-1245-49a0-b9cc-48a0dd850f8a", "sighting--e1f332be-413b-449a-9bf2-380da8d2b1a2", "sighting--3fa4fe5b-2183-4d70-88be-bdf818a9fe12", "sighting--a63a76fc-ea4b-4ebd-be36-86a8d76b69b6", "sighting--0d8bbfbb-ebd8-4cf1-aca8-5f9197c7536c", "sighting--c61df2c4-a156-44c9-a46b-30fab6701fec", "sighting--1e34ec93-ea37-44a8-a9b3-fd984e41d647", "sighting--5785b1a3-a656-47d7-9563-7914975269b5", "sighting--62ec8b6e-74db-47e7-b36d-faf83763707a", "sighting--1f2a6133-3e4c-43a4-850f-567c6e40cd06", "sighting--b843a13d-000f-4d7e-9609-78f450f6cf01", "sighting--55637080-a1a5-4347-a73e-32d1b1d5cbb0", "sighting--35872303-c2b9-49ba-adac-24c11d2dd145", "sighting--07aa0e6e-a53b-4fb4-a327-e8cc57ed5549", "sighting--60905732-7897-4545-b1ab-1308ab24f9f2", "sighting--e00ddc74-d037-4a3f-aa95-a37d6dec1057", "sighting--e0b5e01f-013d-4ba8-b2ea-991d3d041fc3", "sighting--23e40357-f86c-4c0a-81b7-022c1bc8d7aa", "sighting--fd5d594d-c4ae-4865-a1cf-b41dd68c15ff", "sighting--c925cddd-a9b2-4d3a-8a66-f984c425c1d9", "sighting--6067361a-eba5-446e-bcf5-288bb5f093de", "sighting--1934813e-6a0b-40cb-8409-2a34d78c2de9", "sighting--6801b416-842d-4f75-8dd2-26fd8ae71743", "sighting--2ebb95fa-0bf9-4cb1-88f4-f403e419c2d9", "sighting--2bebae4e-eda6-4514-b62a-09485447f2a6", "sighting--fcadcf24-7413-4d65-a6ca-93cccc4cc6e9", "sighting--d0ade7c7-e23a-404f-9c38-1ecdce052dcd", "sighting--c20a6506-317e-46a1-be20-dce9b4a137e8", "sighting--4960c1e1-ebe2-4c52-b9ed-08bf6a651c93", "sighting--148706ef-78dc-4c15-aa16-f608fa24c191", "sighting--8435ae58-060f-4700-a6c2-91d789384c5e", "sighting--7b01d509-cdd8-4619-bcc7-c270d203bcf9", "sighting--395a6205-c150-4912-9485-54de28f6bec4", "sighting--584aa1d1-9bb3-42e2-87a9-71d1160ccc8b", "sighting--e82a7a9d-c854-440f-b5a4-342e7bdc951b", "sighting--64f8c064-08fb-43d8-915a-d3b1a1098a63", "sighting--6ab0b757-5b90-40bb-ab96-bf7650731166", "sighting--aad5ee8d-258a-4f6c-8e35-75155e422d29", "sighting--0b3461b5-dfcc-487d-b358-8d53f32772e9", "sighting--c0830ded-bdcc-4b08-8fc3-f7fa8348b26a", "sighting--dfc15174-35a1-488d-acf5-32100ed10cd4", "sighting--309d2139-ff3e-4e44-a3b4-44cf7fc82e6b", "sighting--3a2570dc-9362-43d0-9b7e-d110d74ab528", "sighting--35e0d28b-7059-4ecc-aba1-4e0b5b92de5d", "sighting--e3b23496-f763-49e1-bb4b-497e6fbab252", "sighting--b368bac6-fb94-4d5f-a560-6de30fa1c197", "sighting--b7df393f-242b-4ca7-891a-52b97dcd8699", "sighting--b486923d-2809-4db7-a535-9545780ba06b", "sighting--9cb00003-74a3-4b26-b6c9-81d060168241", "sighting--006653cc-531b-4753-b700-aac12c9d0264", "sighting--b715fa98-e7cc-4225-a1b9-d60885285c24", "sighting--5d93126c-38af-47fc-93bd-28e4efc07b0e", "sighting--29ac0cf3-8701-48d1-94f0-618d78f9aaa1", "sighting--e5388aef-a683-4d7c-9bd3-71baf8f4a31a", "sighting--4174991b-fd8b-43ad-aa54-98f3ec77465b", "sighting--5aba3ebb-81ec-4a1c-a35c-6f24ad363f45", "sighting--2caaebb0-a746-4a82-ad1e-581c82748393", "sighting--cd894a9c-bb84-483c-a013-7238024a4450", "sighting--446a7b0d-5208-4bcd-8c73-fe5daaa8f58a", "sighting--6f6bbf00-227a-482a-9244-a63786d13ef9", "sighting--0e3487f1-6994-4b4a-aec6-1cc92ab6a8fb", "sighting--412b30e9-c185-4875-91b7-4ca4521f6ae2", "sighting--58187d96-8178-46d0-a330-8a74d01612a7", "sighting--aee8f889-fbc9-4b60-bfb4-7d87807be74e", "sighting--939e3404-768a-4c42-919c-10351f01648b", "sighting--989340e8-3c6e-42cf-b5ca-a39f934e232c", "sighting--f48216c8-5aaa-44d4-8438-aecf68bc868a", "sighting--8bfe2861-18b3-4d6a-951e-712ca10451a2", "sighting--d818b8cc-b4c5-4af7-8cc0-5951d7365360", "sighting--62b8302f-b722-48ad-a11a-44f13a2ba82b", "sighting--316acef0-f8fa-4692-93d0-2d7895ede69d", "sighting--21db4714-e385-4f0f-8ffa-c3cb261d52c3", "sighting--2727a875-3c48-42bd-bda2-39fa92cfe66b", "sighting--94e77cad-d328-4271-86b2-f44d9dad8bc3", "sighting--63c1bd69-59e2-42bc-968c-2791aa923e25", "sighting--e6e6fec7-432e-419d-88ed-733bd77c8727", "sighting--5eb7ff95-617a-498d-9c61-8fa1fbcf741c", "sighting--48cb9261-665c-40b6-875d-f416d9476319", "sighting--d3f91302-8c96-44f9-9061-5b8e9d2a3682", "sighting--42c8bf3f-c596-445a-8915-09985008ac60", "sighting--31341a50-e267-4e5c-8167-d84a2a7ec200", "sighting--1155430a-b694-406e-8f39-5ebfca15b087", "sighting--ce269769-148b-4fc1-b556-2219e271884e", "sighting--f0fbc1d0-0085-40e0-a3c8-4062afc5d414", "sighting--c45569e1-d467-4ba6-aeb9-384cb43967f6", "sighting--f68ebf9c-3271-4d94-852c-32f006c939b8", "sighting--f4d29944-2f20-4396-be07-c6966856bde8", "sighting--6d631d49-ff13-43ea-99f6-8503f68463cb", "sighting--0cc19a00-143a-4c64-a1a7-09d97e1be0f5", "sighting--a197c86b-cf11-4ac5-87d6-7e82749a8bc7", "sighting--98406bd3-04bb-46ec-b9eb-e46471064c12", "sighting--c62920d9-8763-4996-998e-14ed14170b5d", "sighting--db4bcb91-981a-469d-9228-410e2086fd9c", "sighting--d793e7e3-af21-4998-b16c-0f96bb3a0d08", "sighting--f53cedeb-c299-4662-8f8f-52ed58b6b2cd", "sighting--07d9f6de-c392-424d-acd1-d52d4b0b5a65", "sighting--47f989dc-3401-43d6-9bf4-234620fc9d5e", "sighting--917460b7-83c6-4c97-987f-e758b10d13b5", "sighting--8b5b238e-5f94-4538-a319-2e90796b552e", "sighting--534d0eee-8fbf-4038-b07c-0bacb3b0f1f1", "sighting--7d1f760d-bc80-4935-8ab1-6be2ec118f98", "sighting--48b34e20-8106-4173-872c-621adabc97a7", "sighting--f0f4dd56-1cdc-4ee8-bb05-995bd6d6fa36", "sighting--e80fd3fa-fc5e-4341-96f4-0f4d6198f411", "sighting--746ef517-9026-4ed2-bcdd-83eb03b8bb9e", "sighting--63eb3308-2632-48a2-8946-a2a0560c62e8", "sighting--6fb96718-9d0a-4f09-b964-03d6b8979b7d", "sighting--cefcbaf8-fac5-45bf-823d-15de3303cdfa", "sighting--d9cd49f4-1968-4f4e-9010-d145231f05bd", "sighting--90bd42a7-869a-4604-a572-725612a97acf", "sighting--a99bb542-0ecc-4a36-93ca-c332f279b59d", "sighting--cedbee80-fcd9-4a87-bf47-a20d9240853e", "sighting--66ab59e9-4fea-4f43-b707-516bd86ecb53", "sighting--1a5dfdf2-a02c-41e8-9fda-b1ce725d3167", "sighting--6bc716de-e9b6-45a0-ab03-c9eff583f644", "sighting--afffd827-aaca-467c-9cf8-cd287cb6394c", "sighting--9670952f-c0bb-4d23-bfa7-9fca6c2d00dc", "sighting--f4edc4ef-463a-4ca7-9a7e-3b6bcb394005", "sighting--b3f99de3-9327-4046-bc50-e4b9f7d62b75", "sighting--05abaae3-5032-4808-9ca9-104b3666ed4c", "sighting--9e43813c-af46-43df-85a9-5c34636a8d96", "sighting--53e34b0a-dec0-497e-a422-c97953974823", "sighting--c1afa7c5-13b5-4141-bf76-41105dc64418", "sighting--cbb388e2-7169-4fb0-89e6-f67d484b24d0", "sighting--a54b8e09-ce02-4670-8e7f-1746d05f7ebb", "sighting--804ad381-7550-47df-beae-f5e34792ee7c", "sighting--21e1f6a7-88c6-4f9d-abe4-ece6d25861ed", "sighting--e2fd242b-6ab0-42cc-8656-04b98709536f", "sighting--96fc6374-d1df-4d82-9388-4e445dc2a188", "sighting--69950b1a-f5f9-4203-8e57-aedd35b8c070", "sighting--da79658d-b5f4-4828-a419-634645419400", "sighting--c9d4c8a0-043f-4638-8c7e-248bfbf82213", "sighting--cef398e3-33c0-4992-a96c-56e6d2ef9951", "sighting--9a48e26a-40c5-4fc8-8884-c04a6f50414e", "sighting--1e26963d-e229-422c-b600-f7c7303bc9db", "sighting--16d92f84-fb2d-4016-86ff-ed2d7a47d0b0", "sighting--9c082373-2a9c-49a0-b72a-9b558c366ac9", "sighting--6bbc42e9-f073-4449-8095-2d64e8d4445c", "sighting--0ff6ffb8-ac32-44fa-8d41-6d69016cdbbf", "sighting--f09f0de0-5412-4770-ac80-14e740701e02", "sighting--e5c5f9b1-b689-45c0-8ec1-dc7de5550078", "sighting--cae55356-73c2-45e4-b698-3d7100d7cb05", "sighting--af3bfb70-f4f7-411a-b03f-6b7d0275aeec", "sighting--ba53fb61-d154-49b4-9e20-b54a2964c97f", "sighting--93f5388f-a922-4f56-992c-2507da184ce2", "sighting--7b17f313-9530-4d90-a6da-43d9fa69b9d2", "sighting--85c54843-6952-4f1f-ad4e-c2f13c26f791", "sighting--7cba4e86-c7e6-4a36-a2bf-533cca623868", "sighting--cb26ab44-e231-49fd-ad0f-44dd924b97aa", "sighting--d3ce0f50-4882-4432-b11e-01082c80e221", "sighting--2eacb58b-fadc-4766-a5a0-00351606701b", "sighting--1141cd0c-efa1-4392-a509-3a2d627034f8", "sighting--1e489bc3-42dc-4505-8124-2d80b6805f84", "sighting--bb62dfdc-9aa7-486f-b464-0d5cb775ca5b", "sighting--952bba3e-bff4-4d80-b056-534f1beeca31", "sighting--45f6c688-7509-46a7-8b77-de38e7548397", "sighting--e98a4ec1-cb1f-4b68-be12-c5ce046909bc", "sighting--d39ef90b-3fab-4323-be6b-d0f2ef4971a4", "sighting--610c2909-85d5-4b3c-a4e0-ee02ec686caf", "sighting--e2a9d1b1-8991-4c14-a458-1932c0673282", "sighting--227a9598-7bd7-4090-839d-e5278bc1434b", "sighting--f23a9bad-dd26-4cca-a78f-d87a319eaa43", "sighting--7190413f-2c07-4017-be7a-fd46afdf37a8", "sighting--5ecdfb5c-85c6-4612-8e8a-238694872be5", "sighting--612e52b9-de95-4dea-94b9-2351aa3a56c6", "sighting--c32fcaae-bbba-490d-b0fe-b8ddc6588aba", "sighting--cdc620a2-8f31-4af3-8547-153566d64438", "sighting--306feacf-0c94-42f4-9599-c376e44b1ec2", "sighting--136253cf-2451-49a7-a468-6a35a6e63b67", "sighting--d3212bcb-ca9a-47e6-b23e-4971214c9333", "sighting--9c84c69e-bb09-49a6-a284-559fc33f908f", "sighting--3481e2bd-1190-45cb-b977-35b7ebff21dc", "sighting--53bc16f7-0a07-43b4-98dc-63b88549fa37", "sighting--9af71dc6-d0b4-4a9e-a0bc-6874298b8e62", "sighting--1c8666b7-e8b9-4ae0-8ce3-7c68d35bc93c", "sighting--19e41035-730c-4cd8-8d12-f0eee3335bff", "sighting--a1ff2949-06f7-4295-ab5b-4a50a05c29ba", "sighting--c4fd0bd2-8d98-4b76-a52f-f4a71d9dc1cf", "sighting--d7e6c388-6078-495d-a917-db0dbdcdc479", "sighting--1cda3700-17a4-4b01-b6bb-e0e26d464104", "sighting--3955d341-0d83-4fbd-ab67-be58b7d3e676", "sighting--b9c3f215-dc2b-4619-84c3-186d8effdda6", "sighting--97663c0f-bfbb-4dd4-a8b7-309250ccdd2e", "sighting--98ef213b-829c-4634-b7d2-36c91695273e", "sighting--2114353d-fb4e-4b66-9e13-3d2d4a2d4338", "sighting--47d511df-d9de-485b-acbb-9f69ca918b06", "sighting--ab8ef2f9-95ea-4f3b-b0f2-c19b95c74004", "sighting--31531393-5ded-4b15-90de-2fc18595da83", "sighting--f206d249-cfd8-4948-96d2-d7d330877fc5", "sighting--4ed9cfe8-87f1-4052-8f09-bae3bae2cbab", "sighting--08a055a2-610e-4a65-be44-5bce0d6dd44e", "sighting--9c257f86-d67c-4dd0-a31d-e19db366a5e1", "sighting--ef16389d-a5fe-4548-b9bf-29fa6a907f76", "sighting--80783af0-1f1a-42db-8024-db3a48124ccc", "sighting--84d03554-df6e-4d70-b6e4-5504acd6cea3", "sighting--e626944e-38b4-4b70-8157-de8fae33b13e", "sighting--6bc91ed4-0f0c-47a3-b91c-962e5a5b2160", "sighting--e98ef707-72ec-44c9-ae1c-137e86521340", "sighting--6dadfe6e-04bd-46ba-8697-5c76d77b5e45", "sighting--b6767598-329e-4513-9f4e-49414b6e623c", "sighting--21035d25-79d5-45d3-8a0d-fb8579e0e166", "sighting--b230b8ee-d5b2-4285-bb9a-6152c538c5c2", "sighting--990b0ca9-a62c-4fe8-bf16-8d0218e31305", "sighting--41cf6e3b-8954-4a86-befd-582d756ce2bf", "sighting--fad4f31a-123c-4bd6-a934-23d724e46902", "sighting--425c39f4-409a-46ca-af54-fe759b90b9b3", "sighting--8d2bf66b-c650-420f-be2c-37e75b212ff1", "sighting--bcf674c9-5dba-4400-8cd9-0c8ee85c60de", "sighting--0f216dc4-9272-4e3b-9a5e-0c3b3ff168f8", "sighting--66e35279-a2bd-4124-a814-f675e7236abf", "sighting--d904d8f5-e144-4304-adfa-b75dba82e736", "sighting--7e5a82fe-d083-46e7-be6d-180f8c46e55b", "sighting--a670aa1f-85eb-499b-bf40-035725b4afd8", "sighting--05aa4b2b-219b-412e-9ad0-d593746594aa", "sighting--074efb32-57de-4610-b536-3ea1e38b2962", "sighting--36c6ab54-1dc0-416f-91d4-b7ba1d286626", "sighting--13a3083e-0994-49a7-a7b4-35f848a03798", "sighting--2b3d2e80-2560-4d96-aee5-44aa63bba675", "sighting--1fead8f8-2cd4-485a-ad75-7424c3c36b8f", "sighting--42f3b027-477d-4e3f-a4a7-a7d6ad7928c2", "sighting--00800c72-931c-432b-9825-5ee75aba1550", "sighting--e7d0bfcd-4372-421c-a99c-eff27edfc776", "sighting--1892dd37-04ec-4fa1-a5a9-c937d5abaff4", "sighting--31e493fe-fea1-47b4-8f0c-08384989ceb0", "sighting--8a60b3aa-902d-4b2d-8819-bb58429a0616", "sighting--b8703104-d81c-4036-89f3-f311de9c317d", "sighting--1f9c1e77-75c9-40b9-9b41-fb4dec145da3", "sighting--5b3cf62c-ccf6-4312-95d2-9d843860ad36", "sighting--bd29b4ac-05e7-45fb-b7cf-0e104c81db49", "sighting--95452c74-4376-49f3-9617-5dd8734b8e0d", "sighting--ad67484e-fd95-4f54-8eff-1cdbefc24cdc", "sighting--4410c0fe-ea28-4723-82a7-9ffb02ff403e", "sighting--d3e3ac4d-37c3-426d-b065-e57c64719e48", "sighting--167da9b9-9789-4f22-a9b9-b3dab3179f49", "sighting--e004fb9e-d044-40df-be3a-abd11302ce9d", "sighting--919ca807-ba07-4bcb-8608-8788acb2cb3e", "sighting--cf3a8872-af4e-46e2-a9cd-03bb40413a6c", "sighting--683e2a33-9c18-4142-94e3-d5a6b785b634", "sighting--76e3b475-837f-4754-ae6e-ce0b8e4cc3b7", "sighting--28289698-9252-4857-bd76-715a76d93a85", "sighting--fb821efc-374d-4469-b3e9-57098dda333d", "sighting--7b440a77-689f-4535-94c4-e7ba21b99f5d", "sighting--0bd72650-ed14-4601-886b-1aadb8e130ff", "sighting--b3b4c520-a45d-4575-a0fc-f4394e59e455", "sighting--2683e0b6-a27f-4878-b5a1-553b1aa93196", "sighting--3d6aa574-360c-4e8d-878d-8eb6b4986521", "sighting--86282eb8-9453-4a5a-8afd-b8222bfb81ea", "sighting--3d5a05ce-fb16-45dd-94b9-2a42990055a8", "sighting--a0dff069-2253-475f-bbc8-5e64a8342d76", "sighting--0d66e5e0-3357-47f0-b795-8e8bee4859b3", "sighting--fc2d519f-f9e3-4770-a651-2e30e2703e2e", "sighting--4106baef-a987-41f0-850c-8406f2252626", "sighting--423164ae-a8b0-47c7-96d8-51197fb7850d", "sighting--c5e83076-c406-4a02-b582-bfe84be668a1", "sighting--8db1682f-edeb-442f-a379-8326e84261b8", "sighting--6eec59e6-1ba5-4646-9bc3-70ac4533473a", "sighting--0118b4bc-dd80-49a9-b950-d32bac846673", "sighting--f4c49977-603d-442b-80c9-7197678f23e8", "sighting--05d84f60-8fff-45ec-8430-999c0b09c0aa", "sighting--3019f2d1-8f32-42ab-ae2f-b8515b32e2f4", "sighting--56446d7a-8308-48c5-97b8-58ff7cda96de", "sighting--d17e7120-c3fd-421d-86f2-3493036d63e6", "sighting--74e06016-4aac-4b5b-8a0b-991e28538148", "sighting--a85e5e9d-c6ff-47b0-87b1-f3300219154a", "sighting--c51c9088-74d1-4270-af48-c70013ce6268", "sighting--bc107e1e-ea94-4015-a13d-766065cc8de3", "sighting--065b2cb7-9be3-45c9-851e-1c2a8fc46276", "sighting--b0e1a2bb-e1a2-478b-b0a2-4c17388b6aba", "sighting--7a6301f5-13bc-467d-af04-57784a6d5945", "sighting--cfdbbbc3-4f5e-40aa-910c-d49b212f48d8", "sighting--07d1b930-b3cd-43f8-aee6-3b84eb5e6e2e", "sighting--aedcb55d-c870-4a0c-aa71-33fd6734be75", "sighting--fd6f70fe-7c9a-4027-815e-4981e576de0b", "sighting--ca03c0c3-291a-4a78-8b9e-8890e69959fc", "sighting--acf86b2d-31e9-49c3-966b-5df2cb86b5e8", "sighting--70dcd857-c983-4289-b4c5-a602177d05d1", "sighting--84c69b04-ee78-476b-bf86-5d5d61262965", "sighting--47452574-c15f-4fb9-9e8b-0c88a6b8e5b4", "sighting--5ab451d6-637c-4c21-a5c5-7fc92bc17d86", "sighting--79623403-3d6e-4a13-9a1b-633af6389da1", "sighting--85282b5a-5ce4-4cb5-bc2d-95e37465bb33", "sighting--10c442bd-b88d-4c98-9222-69460d4e2592", "sighting--55a6f1a4-6b8f-4fed-bccf-3a23b195365b", "sighting--c6f3079f-7f36-4f49-9406-b43c6fb14bb5", "sighting--7a65f99b-0786-4b12-8998-daa109dc3d0a", "sighting--cfe48e78-eeea-40b9-9574-58a419b081f3", "sighting--8ae036be-c616-45d8-aee6-71c7ee97f670", "sighting--0c2bc0fd-2ca5-424d-98c1-34fdf550d1a3", "sighting--ea03b0ad-ccb1-4ed0-8cea-47b29ac24879", "sighting--cd2e7c8d-1886-4473-98ef-091f161536cb", "sighting--abd33aab-72d0-4de3-97f6-ec4ed29cf042", "sighting--c1760dca-c6fe-4b05-a7e8-c23426117c60", "sighting--f0006d6c-2c9d-4f03-a440-327e22a3bba7", "sighting--f2c6c84e-3501-4ecc-9372-83a959ac50f3", "sighting--64299d85-5592-431b-92ab-cfc75a69374f", "sighting--ae6948a9-2f59-4625-8378-73b223679e17", "sighting--31ad86a5-2836-40bc-b209-c41f51e50c2e", "sighting--90992cb9-f74a-4767-8aaa-bc518f1fd284", "sighting--0c64267c-1912-465a-8ae7-bb55e5d48ba0", "sighting--1271ce20-51a6-46fd-925e-f08bbbb747b5", "sighting--38360e32-9e05-477a-a8a7-456a0e93aca8", "sighting--e968ebfd-bbea-4882-a97a-16e6940e5320", "sighting--451800e3-98dd-4831-a557-3aa305269674", "sighting--0a9375a5-0699-49eb-a6e2-e28b36890ca7", "sighting--47b5d793-0a47-42b5-aadb-f325a98306ea", "sighting--e55484d1-cbc9-40b7-b3d2-5b28ffb0b55a", "sighting--ca1b9269-3de8-4835-a4b4-c9cb327d40ab", "sighting--ff5f8ea4-06c1-4af0-961d-551d8e0e2c40", "sighting--47623571-6d87-410f-9df8-08a767843318", "sighting--b9429d82-1a69-456d-96c8-ac38aa58468a", "sighting--9ae41d9d-1e13-45ee-9a27-7f3ac9747f53", "sighting--362ac04a-c7f4-4da6-862d-996fa5ffe01f", "sighting--ff06c080-586b-4f75-9dcc-3ef37fef6a22", "sighting--1fe4f1e5-8ac6-4676-aad1-a0aee8e399f8", "sighting--19093ce0-b9a6-4c90-8e34-d34eba002cf3", "sighting--8340799a-6d98-4d22-8284-9e262ad4976d", "sighting--7fc9c704-59e9-4948-80e0-3889718ae443", "sighting--1d9f07b1-4a82-4b73-a41f-d8bf5d5ae7d7", "sighting--ad752d1b-4e0c-4e49-be9a-95f037cd200e", "sighting--d4b0c837-0850-49ed-a326-a12bc08469eb", "sighting--37ead01d-16ef-452f-a282-0c710fbc1e59", "sighting--7237106b-a609-4655-879d-776d8a5c6133", "sighting--db3c0687-bacb-4abf-a709-f8cb8118ac0d", "sighting--a97d6cb9-eda9-407e-97b9-13fc7ca32079", "sighting--2b97e41a-88f8-4b90-88c9-b0fe82237285", "sighting--1bad2db2-30c5-4fd4-9fd1-5c669d503dbd", "sighting--5e6eabe5-9088-4ce0-972a-cce76e169ef7", "sighting--e9380bb2-18ea-4839-a9c5-804125697365", "sighting--255f3d12-fd0d-46d6-89f5-2445c5b9dbe3", "sighting--9be3975d-46ac-4851-9b4c-2f47fec6e423", "sighting--0e64c9b5-ad97-4b0f-8fd6-84ac872664a0", "sighting--ffd4c4a1-a057-42d2-8b3c-771e3e2e8789", "sighting--9978d93d-8ae2-4f5d-b255-63262710a719", "sighting--0e4c4c8e-0f54-4c0b-814d-8e17f23c0b10", "sighting--d3beb3f8-1d78-4588-be6c-65bf279329ab", "sighting--d6acd723-f16b-4f1e-ac2f-f86ea04f653e", "sighting--0d4be10a-f0a4-4fa0-bfd9-3fa9b982f20e", "sighting--46c5e883-3f44-4a8b-9e02-6de061675ee8", "sighting--8545a06e-e55a-4a3b-8cac-52873fa77725", "sighting--01886a32-f55d-46a8-b272-2ed90288c255", "sighting--be6befaf-106f-491f-813a-cfe1d7fca05a", "sighting--b366066d-72cd-47df-9615-567d320edf3b", "sighting--c3f19b74-cb4f-4578-92a2-a47dd7ff72e3", "sighting--e8e03af4-8278-4d1c-970a-b17d7e725f42", "sighting--7b7f1c8a-5556-4d62-8d19-b7214f539abc", "sighting--602e3b5d-1a7e-4e92-9b31-1432ca96f12d", "sighting--6dbfe289-113f-47a6-b8c4-59f5325bf461", "sighting--4d10c2bd-4201-4c9f-aff3-61e3fb16c52f", "sighting--01e53c3c-d518-4f8b-959c-a1cdf17f8ad7", "sighting--4a799ccc-2c8b-46de-b1c8-38c32e2fb106", "sighting--1d7ce6e3-d43b-4efc-97af-5926eda312b8", "sighting--ba38d653-7f9a-4db0-8deb-dd09bbea2828", "sighting--6b32595b-c74b-401c-9765-974059a6138d", "sighting--5eb019b1-3675-4f97-892e-b81d9982f597", "sighting--d4641abb-39f8-4c39-ae94-6fc3959e9a64", "sighting--172822ed-dab6-42b9-8994-9a7d76969763", "sighting--d4998d0b-e5ea-4d82-946e-6a7f280fa0d1", "sighting--ef2eaca9-3988-4e00-97c9-a855c361a351", "sighting--3d0222e9-49ae-45e1-88cf-492afed433ac", "sighting--2ddc880a-bae2-4b93-9307-e5cd54b85c0c", "sighting--b21e1e35-51d7-492e-9392-b2f46855b235", "sighting--bc644cb5-aca1-4f01-be3a-3ee673ac073b", "sighting--89cf5761-1432-4afb-add4-11f501617078", "sighting--ccaa3777-51c8-430c-80c9-1bb93ccd7860", "sighting--cae7ac2a-8c19-4e80-b598-35fc642c81e3", "sighting--609171ac-82f8-4116-a860-ecef7b56fc26", "sighting--ea4fa55e-cb9f-4e21-8ef7-cc4e78458c30", "sighting--faeba1ca-b20f-40f2-ae23-3d1b41023171", "sighting--c3efd259-940a-4db8-8718-27ae3ee63636", "sighting--9a28c8a5-e46d-4ac2-8639-405e1bfd9593", "sighting--709b7b63-a3ac-48de-98b3-2ae555168d80", "sighting--eb6326b1-1833-4def-a38a-f08ed03aa75f", "sighting--542249fb-eb50-42dc-9e6d-f62c6e494213", "sighting--6fbfcb03-5222-4cf9-bbf9-3b313da40b61", "sighting--792b8f4d-1304-4432-8e3e-99497b46886f", "sighting--593e44a0-f3a3-4f08-9e27-f5d382e28072", "sighting--adaf0d1b-c624-49c3-9726-27af59940f85", "sighting--40ecfacc-6016-4e66-9e5a-f0b574edcb55", "sighting--f470822c-30dc-4311-9436-22f25cc23822", "sighting--a07d90b4-1824-4421-87a9-deeb5af5ab18", "sighting--cf700096-b5d9-446d-9278-1cff22a19eec", "sighting--f65664ae-3bfd-41ed-adf2-9e013e375443", "sighting--1e382f30-9358-4e74-a284-4df9a31ca6e4", "sighting--0292f1fa-d272-4187-b78b-2eb875dec5f1", "sighting--41add90d-d189-4874-913f-3a80cf4f0e87", "sighting--15503008-1680-43bc-ba51-6aea04d33ada", "sighting--6ca9d0ee-cbb4-41f6-a442-53bbc231d37e", "sighting--b710379d-6b5a-41b5-9ad5-b6af0d997b3e", "sighting--114cc98e-7699-4da6-8257-0f6e1f694135", "sighting--8cb54124-a84d-4f4b-9c61-c3e8cc4afd12", "sighting--79d9e759-4829-442d-97b7-817dc7f01a08", "sighting--bb8711ce-de48-4498-9d26-874e734106ab", "sighting--e2375857-ec78-428b-b328-f4caf1f49d83", "sighting--315e5bbc-73bf-40a2-992a-35d20365accd", "sighting--0b2af48c-645e-4e74-8fe8-6300791b7ed0", "sighting--b2497176-13a5-48bd-bd64-c0562c8725c7", "sighting--ad4ac741-a219-46b2-8f62-6ddd4b269a32", "sighting--de1aab13-a076-4dba-ad97-c4877d3f9c9f", "sighting--2a797159-bb69-4ebc-848e-9820c271bab8", "sighting--24aa9d9c-ed72-4f74-94da-67ee1de4f458", "sighting--a0b6de9a-4974-4841-8522-cf5d0084b3cc", "sighting--889ef5aa-8b9a-40fe-8fde-9a123aa4e400", "sighting--3c7a8171-cf4a-46fe-8d7f-47bab7e5d235", "sighting--2d6daa3d-2c23-40f7-befa-1fd384de5bb9", "sighting--685c2753-77b1-4b21-90cb-1314e70e2457", "sighting--2cf84ef3-c4b6-4c54-843c-da7b88b7b4c3", "sighting--b5362e77-e9cb-47f2-a7a3-8ebfd2de6db8", "sighting--ecd0571c-f4b0-493a-9c4a-86bef307ef14", "sighting--19e42a35-a782-4fec-8f6f-47cd7e6fccd2", "sighting--5e61eba3-0fee-47e0-8d39-e7c5c482e306", "sighting--367a7b6f-d42a-4f49-9eac-039f28cefc27", "sighting--3beee5cd-bc35-47b3-ba53-3e0bcc5f50cf", "sighting--ae4dfef6-c7e4-4881-a2f5-2271d3cbca4e", "sighting--d62b6e22-f638-43ba-bdaf-2567746c60b4", "sighting--1ef3e398-2bcb-4893-a996-3cfa32c3d5b3", "sighting--19fa3333-f73c-4cf6-899a-b8516c729681", "sighting--0e49abf8-3130-491f-8171-637068bc2ee9", "sighting--1be3ba6f-8519-4725-89a8-2efb36c113da", "sighting--70a126c0-ceca-4034-a354-a3fe2d5026b8", "sighting--c4f9e64e-f532-4db1-876a-3c3855f0213a", "sighting--05d88e6b-590d-4d1c-9250-320e292bc0e0", "sighting--1d277c7a-e7be-4566-9595-37841af15f56", "sighting--05c68248-2016-4108-9c4b-59df9aaf3ffb", "sighting--81c45ad2-0eb2-4905-b847-5144e547fb35", "sighting--16562595-e29d-408b-83e2-3746ec7a15c0", "sighting--29f2db8d-ede7-47f0-8eff-bc794e2c776f", "sighting--02b8bb11-d9be-442c-9b7e-6199d634a16b", "sighting--bf577b0b-19a6-40d0-beae-a6506d5ccfb5", "sighting--521b57b0-9b8b-4790-9801-ba2b053111f5", "sighting--449f3ef1-91a0-43b6-b67d-2c3873935836", "sighting--2748ef8e-633a-456c-85c8-e358e7c9653b", "sighting--5961b2c1-98c1-4f69-bb7a-6f63986e7dfd", "sighting--70a1d7b2-d568-4a9b-a07f-1819cd735a76", "sighting--edf27acb-8958-4f0d-9ef1-4aedd15453d9", "sighting--ecab6ab7-20ac-4861-8707-ec23a2e0b0f5", "sighting--913281c9-4036-4c75-b654-bdaff44488b6", "sighting--f3e933e3-9379-4933-adf0-e2baba600164", "sighting--4c39fd0a-c7e6-4e94-8a8a-8bddf8aa90be", "sighting--768c7f08-d82c-439e-acbe-abaf570f4b89", "sighting--aee749ee-711e-4814-9ca6-84eef39f7f7e", "sighting--a07fbbaf-658b-4766-af8b-a5eae1f0401f", "sighting--3f0de9c4-1e8d-4f47-ab53-5c06d7f9b421", "sighting--2c00a511-2576-424c-9c0a-830f9034e3b4", "sighting--f51301dc-5b8d-4477-9282-789b11017a35", "sighting--ebf74938-e9f7-4133-9d89-575f4d5e5e3e", "sighting--7afa8ed3-ab06-46ae-af23-2aed78378783", "sighting--92f86dc4-a323-4821-8243-c3ddc9612bae", "sighting--76486a83-4f77-4843-87eb-7365b60d9beb", "sighting--16223c48-5873-4d18-99cc-2b2ce23f2570", "sighting--b3000080-20dc-4474-a083-2bc4dac8e392", "sighting--1e6bff79-462c-451a-8e43-bba2a9cf88b3", "sighting--cd3ce28c-de64-4b05-a2bf-fae72041e6f7", "sighting--da2c5375-8003-4455-9319-1a92d5e1c687", "sighting--83b2a2cd-123f-4893-9544-59e5190a37ed", "sighting--402af08f-6849-4298-9bdb-9ad8fb90ba67", "sighting--5c9cc2ad-c27c-4488-9437-ff63921c1300", "sighting--82cd1d4a-87ec-4ab9-a0b7-054917e310f2", "sighting--fa797a54-06d1-48a0-9db7-c4ba74c76296", "sighting--e3a7cbe5-c525-440a-9a7a-60feef386630", "sighting--62e609f4-62a7-43f0-a40d-a0297efcf1ac", "sighting--c8d25d8f-e643-4198-bb25-fbeebdd900db", "sighting--4c8ae839-29f1-4ccd-8524-34fcca5696ec", "sighting--28de7469-1c83-4067-9c4c-bbe483536038", "sighting--f8507b69-f37b-4010-8c35-43e813f7b5d0", "sighting--011280b5-7ba1-425d-9199-6ebb449d3160", "sighting--c8085991-351d-41c0-9c06-191feb674f88", "sighting--fbe07e33-fdee-49cd-8264-d55f58492a02", "sighting--c52c72dc-c0cf-4430-b93c-61b962634a48", "sighting--993ce7f5-ceb9-4617-9610-c44ddc080c92", "sighting--fd85ac9c-c10a-4f12-80aa-e4ff5bd5a621", "sighting--2a2f7263-bd51-48f2-ae90-0062b29857d1", "sighting--66ce1a0c-4796-4b64-86a2-af7f7e8592c8", "sighting--aa61487c-0d88-4645-b7f5-1dd58c9c433a", "sighting--67099ec9-c93f-43e0-b567-f0edc1f0e959", "sighting--9dab1b43-307d-45b3-b460-7cea0a322db7", "sighting--78f322db-d713-4c85-a141-1fd9500d83db", "sighting--3cb1165d-3c8d-4c95-8b49-63155e2b3c25", "sighting--f650a508-7dac-45bc-8329-0e5aed4af58d", "sighting--edfe789b-ecc6-4f56-9064-05b486f6fd31", "sighting--72be1fc4-4282-4fdd-b9e0-565d2dbf8805", "sighting--b4ae369f-9c22-4751-9528-a5ccfdcfda11", "sighting--70b2dd8e-04e5-4422-8ea9-9397b7d71688", "sighting--c44e99ab-9125-4638-995e-00988c60da4b", "sighting--57e2d9ab-963f-4850-93b4-7a87600d28d0", "sighting--e128709c-9e24-43c9-93b8-a21fbd760b9f", "sighting--24417407-41b0-4cf6-8744-6231e44e691b", "sighting--ab8b1a01-902f-46f3-8f50-60cb4b68d68b", "sighting--e744dba3-d22b-4a8c-86d1-c9016d59818b", "sighting--94133581-ed37-48bc-9428-66ac5fe01147", "sighting--e12550c3-52b7-42e2-bd56-25880576ee52", "sighting--c13c40fe-5e3a-48c3-8821-ddddb5c919da", "sighting--e6e67702-2d0b-4310-953d-18bb16e01c9a", "sighting--44ff9dd3-563a-4406-b5e9-225857ced3cb", "sighting--86e13d04-37fc-4502-b499-b78031bc0a53", "sighting--bb0d7c15-a77e-4269-a9f8-fb85942ee6eb", "sighting--deb3716b-90e3-4a27-b010-d24aa3496d97", "sighting--ad061ffe-6362-4446-82b9-81a2d262e358", "sighting--b26b8b76-2628-4497-b679-cff7a0c158cf", "sighting--64b336a3-ac6e-4215-ba10-f16749b4bbae", "sighting--c007eba3-86c0-40c6-a512-5958c10f3762", "sighting--9fc10966-b4c1-47b5-b457-6a58d669e4d3", "sighting--7bdea248-8dee-4d55-8e11-12f11a8b6e99", "sighting--7872a4c8-f742-4b20-8b0e-6a8c6fe9285b", "sighting--5dbfd79e-18fd-4e3b-be2a-4d6dff10f6fc", "sighting--b85971d0-66f2-46c5-9c44-8f79c12232f8", "sighting--3b59a710-18d9-4480-a56a-522b12903b69", "sighting--bb2b51e1-a804-45b7-becc-1828f0f71e16", "sighting--9df41a25-5542-45d8-ae17-36869701e570", "sighting--1977904d-adf0-4fbf-b851-8267212af02f", "sighting--b84d87a4-e74e-4c6d-a711-53d2b0a91feb", "sighting--0179f8d5-17c9-4125-b13b-c95614e9d7d2", "sighting--c3c7bdda-fe33-41f0-87d9-e15164df1cb9", "sighting--a4b5fbcc-a0ba-46e3-8e55-8d47806b3fba", "sighting--a65ed04e-ea81-46c7-8330-6cb4e907d53d", "sighting--bdf2dce6-2840-47df-81ea-474f1665627e", "sighting--3c29d470-f3ea-463a-82eb-99cf85797783", "sighting--04eb4a07-c0fb-4849-9a89-3d81e4cbfa03", "sighting--879251e4-eac4-404a-914d-b672246e5a59", "sighting--096c3a25-22f3-491d-a3c8-1460a2a393c9", "sighting--1cd415e3-6ebc-4fd2-924a-be46bdb54bbb", "sighting--cda09f0d-e75a-4702-844d-e1b375806858", "sighting--c1bab936-3074-405e-bdfd-92f183c58c0a", "sighting--494a0836-291f-4835-9ada-834b519f7392", "sighting--9c2fa4a1-3b20-434c-ba70-29323e89f102", "sighting--334d4f99-4e77-4b79-84ed-11c2eba6def3", "sighting--e54b695d-db29-438d-8fe6-217f8d553d2d", "sighting--7ebeb349-eaa5-4169-8612-98861964df52", "sighting--46dbbbe6-e6ac-48b3-9953-b64532081df1", "sighting--48edae40-516a-4934-ba7e-27312e958bbe", "sighting--413f62f2-97da-4b0b-a4bf-1871e71ae598", "sighting--0d9ce115-5a92-4308-84a7-f754ea6b2e87", "sighting--dd66627d-df54-4548-8f4c-e42bd1a8ffa6", "sighting--67c5f1ca-490a-4b42-be51-c143dedc0452", "sighting--7cc4ef63-49ab-4d8b-be28-4cd827463ec8", "sighting--8b77dc61-4b4a-4cd4-bc3e-e92addc8fc40", "sighting--0f92cec3-c745-4ca0-b5af-fd700997eda1", "sighting--56ff0d5a-2fb5-4e76-ac9d-3860677bd61a", "sighting--635a28e4-317c-44ff-99d3-17b536c902f4", "sighting--d75342f6-f1c0-4c87-b21c-976afa91da34", "sighting--4cafe3d2-d542-4c5f-9424-45ff664be3a7", "sighting--b4959001-927f-4dff-8280-de67e2d927e2", "sighting--f1472d99-12bc-4ad4-b0e0-76bb4ee61d51", "sighting--06d3648a-dca4-4688-98a6-fc532fee268b", "sighting--9f477d85-6653-494c-9aa9-4fe437dae98c", "sighting--36bb76f9-088e-4e37-a087-86285c76ad8b", "sighting--59841ca8-16b0-4b01-b970-2f3578335719", "sighting--e661ad0c-32aa-4ca0-a6af-4d2db1f8d736", "sighting--30ad75e8-cb26-4ff3-b7ee-0603d3a49861", "sighting--d62e7d80-c712-4bb4-9560-421b2909449e", "sighting--99831a14-6642-4c07-b0d8-a7d8b0fa4ed6", "sighting--5892bfa7-b603-4364-a030-146ba94a8f92", "sighting--28d5bcbc-5562-460c-9732-7eb625f67aab", "sighting--626b21ed-18cf-44d1-95ef-041fffec8853", "sighting--79e05357-5cd7-44f5-a8f5-837205728431", "sighting--a61e04f2-b070-4d6d-988c-ee9e312418c2", "sighting--7a6e6de6-e40a-4657-893a-487e5e04ca8b", "sighting--f87a9cdb-cf48-4c6c-988a-6c8beb4e5254", "sighting--f58a33fc-bfc7-4c95-b78a-cc1f8e1d8d3f", "sighting--d096475e-d9be-40d9-aaa9-79de8a96eb87", "sighting--694c669c-0e53-47b8-8917-44be8630bfdb", "sighting--1579581d-9abe-46f5-8e6a-0f664b6d228f", "sighting--0ce13b2f-5025-4f1f-afba-c81401a2dd00", "sighting--c78106a6-5637-4d22-956f-800c94e1387e", "sighting--56d70188-25c9-40ad-a325-d5c315e17f95", "sighting--5d098755-535c-4158-9165-060d34901b0d", "sighting--9ab38e05-dedc-4a7b-954a-30573e76b5a1", "sighting--f6bd0bd6-6c91-4e0e-8afa-6871ad0bc74f", "sighting--282b13b5-f552-423f-be37-d3d45ddf4f17", "sighting--82488530-b04b-44ba-8efe-874f169c33a6", "sighting--3e37fffc-c53c-4f84-b4c8-5556bb7ff53d", "sighting--e8739f2f-3f29-44ea-b086-6ee3d55eb0a6", "sighting--8cb1b98a-4d80-4f2e-b43b-386f1d319a8b", "sighting--5308d299-53df-4a4a-b71a-b2ad903dcaa2", "sighting--47d92455-d81e-4543-adb1-b38bfdd21743", "sighting--3d87b2f3-17c2-4b64-90a3-56bc0f852bab", "sighting--7e0486d3-e19e-4b8f-bfe1-14c666091056", "sighting--977e6df2-e98c-45e3-9eca-f53b594dabe7", "sighting--42e3ba31-d8f0-402f-a3e0-e21eb52882f2", "sighting--16fa4c09-7a8e-483a-bcdb-cf6f3a328018", "sighting--7147a49a-9d37-4599-bce7-f8861fe0fffc", "sighting--aa575d97-dbd4-4fdc-b1ec-d0ba476a9587", "sighting--c7164d4a-b949-401a-9cfa-0f5fc26923a5", "sighting--f865e623-e31b-414e-bdbc-893da7ad1c77", "sighting--9b92d264-4551-47cb-a8f5-badafe9650dd", "sighting--8018c4ff-dc2b-4860-97d4-6926f433e171", "sighting--17d3fbd2-238f-4139-8227-37bd8d2add11", "sighting--ff2fbbe9-ab67-4250-9cdf-f2344555fefa", "sighting--f82399ce-f202-42b2-8d46-2962bbfea83b", "sighting--8f08bffd-9ee9-413a-8f5f-05585dfb9ecb", "sighting--23739f49-5336-49c6-8481-19aaa8a9429b", "sighting--f781d152-a126-4936-bf64-e265c3272384", "sighting--6d38d2cf-1680-4710-a7dd-f7f1639b1f12", "sighting--2965e9c2-ddfb-4566-af7e-8b97f3a73702", "sighting--44f5ff4c-f641-4f57-a4e8-94059a1ac227", "sighting--41e0e214-7ffa-4571-ba54-2f5b1b304ad9", "sighting--284b3aae-9f0f-4ea1-8ad0-e32216923588", "sighting--3383862d-07a0-42be-bfe2-14c7bfdf912f", "sighting--3329a3e0-dc3f-41d5-85de-bb079ca31db8", "sighting--b2c8a4b3-c79c-4da8-b70c-cecf4b7db96e", "sighting--bed77cec-60fb-42b3-b24b-39cb243113e9", "sighting--b692ef68-2257-490f-b0e0-8f60fcced65b", "sighting--6c783266-9580-4d62-b837-8e354c45847e", "sighting--a4d85c81-edb5-4b03-9636-13ee15c9989f", "sighting--427dbda5-0f0c-4261-88a2-8bc267ba3f35", "sighting--6ae39cd3-d5f5-4850-b5f5-bcd9f07de4bb", "sighting--f64eba6d-4640-478a-bdaa-98c967561000", "sighting--0772bdaa-0b95-4dc7-9fc6-cf5d665ac6eb", "sighting--3486e646-d192-4088-9386-30e324ada274", "sighting--8a444b88-f3fa-4d5f-9927-cbb1f7632461", "sighting--59a95ee0-5905-42ca-a244-d9a167059a94", "sighting--03af96a9-d4a8-4313-ad0d-54e2391953c1", "sighting--8937899b-c0b8-48d3-98a7-8328bad29044", "sighting--53e16866-d0a5-4efc-a93e-5cd1dc3b280d", "sighting--11117710-8e50-41f0-915f-02836d5b3f25", "sighting--c32b2a36-235c-43e8-9727-42b8a7aa0e0e", "sighting--918d454f-d3f4-410f-85f4-ab6df7574f55", "sighting--73e28db0-b0a2-4ec1-a26a-09c737982620", "sighting--e49c29a1-0d99-437b-b099-1a25238c7310", "sighting--0c8edf74-92b4-4845-bd08-07bc5dd98e9b", "sighting--4072b437-cd28-4766-bc6d-f96a95108567", "sighting--6e1eba44-92fb-4d48-8580-a89fa08d852a", "sighting--73155417-05c3-4098-b3df-9eba9a55c9fc", "sighting--37e08de7-1099-4b09-979d-6bc35686bee4", "sighting--82cfa1dc-18f3-4d4f-b368-3f0f8203aef4", "sighting--8f7b547a-a407-4c60-b54a-ad13a6f14afd", "sighting--7deba69b-7ae2-4322-a910-0875e40dbb33", "sighting--4a24a8fa-9351-4080-927c-15741fdedf24", "sighting--e56a12b6-a3d3-46e2-95ba-8a333ab73919", "sighting--ce2b84a7-7aa1-44be-bf2d-ea35d53ada05", "sighting--abb3cb2e-8086-42e2-809a-640f0e3e0933", "sighting--38f25b1c-4caf-4df9-8a56-6076f71a1349", "sighting--c1a7f72c-fc8f-4141-a081-c68cf53c77bc", "sighting--8e61ab2b-d633-462c-b976-0ee15ae83417", "sighting--91b2d548-9d94-4a9c-9246-fe76f634348b", "sighting--c75b5c3f-9152-4ab0-bea7-7f47583bb7b9", "sighting--5586e814-f4f8-4a2e-a8be-19e2ad5bafb2", "sighting--15cc5c31-f4f2-4b88-beef-dfb8448e3421", "sighting--0daca4e5-cb06-46e1-8cbf-9acc8937b0a1", "sighting--afbd06cd-499d-46ac-b523-4f9e6225327b", "sighting--bd752492-dd59-47b5-ac42-ab7706daf1b7", "sighting--51dc215d-2b36-4c26-b47e-e6daed0e49d5", "sighting--9d944208-aaf2-45ea-b472-9e144ad0fe74", "sighting--32ab74d8-25db-42ca-8248-c753331b8e7d", "sighting--145469a1-873b-4859-b5ca-479b07f91b41", "sighting--5043ac93-66c0-47fc-a8fe-bb7e2507559f", "sighting--e3465ca7-f7e6-486b-8738-0a0b9e9cf2eb", "sighting--50b18d33-71b1-4738-a9a5-d46858cd4624", "sighting--750cd0d3-4d12-4998-b14d-d4efa5f6221c", "sighting--ffa587d6-2d41-48fe-b2f0-79c11366139a", "sighting--c3d870a8-8464-4f0b-aac0-c232a8f722cc", "sighting--104765cd-c2de-4e7c-b512-e7ef6135ddb2", "sighting--6386ff90-6c77-4c38-b5be-cd9bbdf8b90d", "sighting--e04640de-bacc-4a18-be81-2fdaf24c717c", "sighting--66a689fa-331d-49fb-886c-0c9ec32a2a9b", "sighting--dbfce501-375b-4466-9741-842dfe7d18e0", "sighting--3d0ee23b-9ef6-41df-9733-9cc3a47e7b25", "sighting--4cea24ef-c5cf-49b5-98d8-d5930e856d0d", "sighting--edf13179-a958-4b9b-8299-58f093bc0695", "sighting--2cab9d35-94a2-488c-9c8f-f1cff8030da3", "sighting--6bac965b-6a7c-458c-9a89-061e7bb3d593", "sighting--28622d33-4175-44da-b766-d91dd402735d", "sighting--40a56e0b-fd95-42a0-9d61-80fdda1a00f5", "sighting--d57ccbdc-d118-4c4f-b31a-898d91c8724a", "sighting--8078339e-7398-404c-8549-f0d55e2d5a4d", "sighting--7c082229-5c1c-4c8a-b1b9-61db029a7235", "sighting--13e91447-571f-4922-9d34-fb30e3d860da", "sighting--1066a0d6-c895-44ae-b6c7-dafecce85d9e", "sighting--5ac96ebd-7025-4109-8df1-47534b36bb48", "sighting--1419cd9d-b5a4-4403-a8ef-b833505620c1", "sighting--61e79df6-4b2e-4123-8fef-1717289463a1", "sighting--5d6213f8-1e90-4d19-b455-4462c41afe7d", "sighting--234213e8-46df-4235-93a4-74f80f56e000", "sighting--c87fc1ba-ba14-4f6c-96e4-a926c8763c44", "sighting--a7044a50-198b-42af-b9d3-6d5a51ebea70", "sighting--1d0952d1-eb61-4308-94ee-2e17e926ff8c", "sighting--d5a045d6-4b12-41dc-898d-065444848421", "sighting--46e7a4bd-20f4-4dff-bcf6-bbc3247edca0", "sighting--dfabf8a5-eff4-4181-a2a6-d96be3f7b8af", "sighting--42ded7a9-1a7e-4c9c-8cc1-d9c7dda23c85", "sighting--0c19a8e7-5010-4f7a-9784-8a059e91e95e", "sighting--7614f14c-3742-408d-b025-9b43d3bf592a", "sighting--7f097968-0dd2-4190-a20c-b65727ba2a35", "sighting--e70348bd-3145-4c75-a1ee-243703e8e3a6", "sighting--cbf8ebb2-7cf3-4f25-9751-08c0bedc10fd", "sighting--2b61d0b6-1a79-4aee-a3ff-06d2440ea20b", "sighting--a6ce98bc-13e1-4fba-aa99-7b753ae0b930", "sighting--7a77b467-5723-479d-acc2-87bc03bc4ea9", "sighting--0a748803-6ada-476b-91d0-59061fd2aee6", "sighting--21daf746-9c3d-409a-a060-ad156f48627c", "sighting--b42ee1fe-2da6-4846-b9d5-4093d4cb88db", "sighting--35992452-0dac-453a-b138-9f6882cb1e74", "sighting--9db9a986-3020-4533-ab7c-d9547424ddd5", "sighting--b98cd82e-1ad8-4251-8596-f1a1fc418b5e", "sighting--3b86983e-5f85-4e05-9e34-4793a9fe64a4", "sighting--981466bf-6786-4385-aa8f-5374de564dd9", "sighting--d9d8b2f5-404d-433b-a04f-cac14ba1e3b1", "sighting--18fe2ffd-ad19-4c30-ae1c-a76cbb87a2bb", "sighting--52bc1108-883c-4417-bd04-f778434cdce4", "sighting--cac9ba4e-e57b-4a8a-a721-c858091633a1", "sighting--8e93b8dd-1946-4f87-a753-38ac7ad0dcc0", "sighting--cf5fdcba-767f-4068-adaa-8484b1db7655", "sighting--6f09b9f6-d09d-4097-8fdd-942293c3b172", "sighting--a18741ad-3e87-41b4-a908-0b26530b27b7", "sighting--9ab9109a-5456-4731-ab7a-79b74b9639d7", "sighting--efc89b10-8917-4433-9ee9-0d99885bde06", "sighting--a820407f-6e16-4bda-9719-ca5cd58b3b2e", "sighting--7ca16e66-dead-412d-a0b4-d4159fdeb265", "sighting--a83c836d-e74d-4c1f-a0c9-4776567c65cc", "sighting--35c60c23-0653-4a4b-a51a-644cca32ca07", "sighting--c6f7d679-57e5-45a2-9f5c-91243c4dd102", "sighting--6e42db18-7199-44c7-b480-9323435efc92", "sighting--575d69fa-0111-47d9-bcea-dd04a3b7a25e", "sighting--da932ac8-b983-4532-870d-addd397a8fc4", "sighting--9e26b0e4-7b46-4964-8910-b2b506e5f260", "sighting--80b203e8-eaf4-4d8e-bf7d-6baebe22d003", "sighting--0d480285-4812-40d1-98e8-975a9ebbe53c", "sighting--37ab6b03-9c94-48a2-ae15-4ca77b7e5f2b", "sighting--6d61cc5f-4318-41ad-9ad5-1328751dea08", "sighting--b4c1ba3c-1953-4aea-a3a1-49d958ec77c7", "sighting--489cdfe4-e010-4763-8c62-1649ea467311", "sighting--c2cef849-288d-40c5-8c3f-326903569647", "sighting--0bab6f61-c302-4bd9-8f8b-fadb302230ce", "sighting--fc603d4a-ff71-4f46-b522-a451e4c66ce5", "sighting--a8079236-6c52-4a8e-80db-50f60ee585c1", "sighting--aadbe64d-666c-47cc-9e59-261c7618099b", "sighting--a701c89f-291e-4440-81dc-7f7cae28b367", "sighting--715370c7-0549-4655-acfd-052ddea27478", "sighting--5245f97f-7ce3-4501-8b12-bffc22a55966", "sighting--6675e9a0-b81a-456a-9631-bb65e07ee5dd", "sighting--40414a6d-5f1b-4d77-a7cd-a3dbd4b07b94", "sighting--a2204fdb-d3d3-4f0d-b2a0-32a7677fd640", "sighting--201d2ea3-d424-4b3e-be5c-3f718dab8503", "sighting--5ac4243b-7c7b-4a5e-b2f5-63a71b82f1bd", "sighting--0772f459-5f1b-4fee-8610-9ce82e6432d3", "sighting--1e1aafa7-53ab-4df6-a134-121a522547fa", "sighting--620b8745-cfac-4a2b-9a0f-8dd4f41d6fa9", "sighting--9303cb5d-a7a8-4729-8ad3-225d6a639651", "sighting--849456cb-6e17-473f-ad72-a668ba92f64d", "sighting--3e5445b9-08e5-4963-a21d-5ebad42aa691", "sighting--cec17a16-6918-42f8-8d64-eede177541c0", "sighting--4b600d90-c4e2-482f-8cc5-c54162c94c5c", "sighting--b3362372-7aeb-4d46-91c7-a6671663760f", "sighting--a520db2d-fe59-4f68-b641-26eee591c26f", "sighting--e3b933b8-6d3c-43e1-8ee7-c2758ead8553", "sighting--86540829-837d-4595-8682-d7ac019fab36", "sighting--5b74cc46-0bc5-4e5f-9ffd-404365afe061", "sighting--44cdd08c-6f99-4c79-86bb-02b7b2702fe4", "sighting--178008e0-7306-40a5-b540-d9c35aab3785", "sighting--9e0d2d1f-797c-49ec-904d-392f22529a05", "sighting--7ee244f5-a398-4fbe-b58e-57c49bb34fdf", "sighting--07cfa35b-7c10-45c2-bcfb-0b972955f0e0", "sighting--884c17e9-ee02-4094-b1cf-175dbf56a73f", "sighting--e6361b69-3b5a-479f-8ab5-f5d2a53118da", "sighting--81d0ae73-bea2-42b4-93f3-12d61fcea1d2", "sighting--6f8f73bd-c8a7-4039-b3a7-a8f2caaf8239", "sighting--b9bec372-3922-4473-bddd-c0f39c6054cb", "sighting--156334f8-5b80-44ae-8e9d-9288f18a0bb0", "sighting--4815fc3e-134d-42af-a01e-9685c354176c", "sighting--7f0366df-9c48-40d5-b6b5-0f4330a320f3", "sighting--cffe5064-df15-4a40-92a1-128a43b15d7f", "sighting--7d03a3bd-b974-40cd-be0d-8ef3c72a4a17", "sighting--56c90b30-b346-47b7-83b2-751eadd80d0a", "sighting--69ea1bc7-69d3-4854-b131-fc278dc0b73f", "sighting--4a37cd71-6766-4777-bb56-495cbf0b9480", "sighting--44ab05c7-a4d5-4c88-9f9d-a1427bd51ad3", "sighting--d5a6d9ec-427a-4e99-b645-8b77abeec5a4", "sighting--2f317d20-624a-4b37-881c-83d4ea55ffef", "sighting--d3811a03-656d-42ce-b4f7-20d1591ec4e2", "sighting--dc0488aa-ce78-40a2-981d-662cf5f6ec00", "sighting--6775084c-31c4-4a33-a0b0-ae5738cc17a0", "sighting--1cd12f97-b173-404d-9427-cbd2f550192f", "sighting--7db24f37-59ef-4fcd-9ad7-02693d3bfbae", "sighting--7929bffe-e435-4eed-8cc9-807419f815a7", "sighting--54d62640-8ff6-4406-b105-923110e2ae0a", "sighting--7157cb7d-44de-4baa-92d8-4ae40d772028", "sighting--cf92d164-2866-4c14-91ed-069ec1eeed64", "sighting--70ed01c4-5724-4f07-8852-4e0d3c67ead4", "sighting--6787d18f-8df2-45c3-bfdd-25a3cfa31560", "sighting--a5f34da0-7d6e-4b09-9690-d8889ad8e482", "sighting--c8a15f88-1e81-48f9-8098-42e1ce150c9b", "sighting--b223c59b-1368-48ff-9e5b-025321b0d9de", "sighting--00fbc219-4e2d-4e7d-ba95-1cb9f8fcc9cd", "sighting--d18cf418-0df0-460f-bc91-0ef4aa40fe4d", "sighting--921db6db-4adf-4c22-a1bb-57ac2d12f90a", "sighting--fd40f3f8-87e2-4718-aa1b-ad8723360507", "sighting--dcc328fb-be20-4d0f-8d3f-74dbcc4d58ce", "sighting--a99a980e-c6cd-4e3e-9df0-57d39d935bf3", "sighting--00e7cf5c-0706-4e02-8f2f-2471fa0e6206", "sighting--61d3325b-e5db-41f6-8f2e-f253fd3683ac", "sighting--a9d09b11-359b-4fb1-a229-d289cbe8115c", "sighting--b318796f-4d4c-40c4-b45e-dd95ae278796", "sighting--f8d2f40d-8b73-43b7-bf88-cdee192ee11f", "sighting--4b9429b0-a11c-4334-ab00-280b0e9b3e5c", "sighting--3faae967-72f2-401c-963e-d33d35abd998", "sighting--bbaa0df9-7ce1-4150-8485-ba0fc431bb4c", "sighting--d2a5f718-a2ed-452a-a5a3-0c5a28ec21c9", "sighting--e3c980ce-8bd7-4e1b-8ba7-17659071d0c5", "sighting--34601479-1eca-4016-8610-c6c37002bbb0", "sighting--1afb963c-e27a-47fb-b73f-ac47e8299273", "sighting--d7e49974-ab53-49f1-8483-16965f6335ad", "sighting--6c24e168-f09e-4446-8aa6-494c5d0fbe32", "sighting--86fa9f2f-3284-46fc-83cf-9f1a1ca2471d", "sighting--c381ac54-6db9-4182-be1f-e55077d31fc7", "sighting--c032c06b-2391-401c-a826-0095210b0fa7", "sighting--e482cd01-351b-46be-aa5b-4de4bf6267b6", "sighting--d921af24-bddc-4629-aa06-601f63ab6547", "sighting--be5f331d-0993-4bbf-a05d-61424bf44564", "sighting--542cf12c-4a87-479e-b32b-97b8bd4f0407", "sighting--e32cbf8f-b9d9-41dd-9aa3-a3ca4129823f", "sighting--0e95492b-3844-4f44-b3bb-71679c74c4fd", "sighting--a8dfb7ce-4899-41d5-b112-e1f8638defaa", "sighting--f137e632-6f09-4f10-bebd-5db7ecf896c3", "sighting--1d230369-a7ac-4a32-96a6-045e9a17fa1b", "sighting--33058371-4c62-48e7-ad3f-b40408484ccb", "sighting--45dd3d12-8fbb-43a5-805f-cf5fc5458e3e", "sighting--f446ff37-3310-4ef6-ad13-107ca0adcf5e", "sighting--aaefe72d-1b03-4dba-b293-60a64f844c31", "sighting--f797bf06-f563-4f0b-a5a6-69c109755204", "sighting--d2b172e6-d9a5-4498-975e-b79b2e79148a", "sighting--1d2efd5b-7580-49ec-b5e9-3a91905fbf82", "sighting--6559c667-a16b-4673-a1a0-1562eae4663d", "sighting--d6c2924f-f9de-4963-9fb7-f7491c105b96", "sighting--6bdc0296-b8ba-4059-b319-73b6c7e98fc8", "sighting--c6eff9f0-4e44-4925-ae7c-e13f528cfe02", "sighting--e4293f34-9325-49a8-8c8b-9875db6c9087", "sighting--a025ad08-58ee-4340-ad5f-5e365b251e34", "sighting--3076a86f-9aa4-4393-8240-6fa4f6cfe3cd", "sighting--1c96ea1e-485a-4409-b83c-4d6b1c29bc9a", "sighting--e0d1b7e7-5a79-4c94-96a0-77b98c422624", "sighting--b23c25b9-695f-4a0e-a484-95da87d5ac4b", "sighting--e4ffdfd3-0b17-4dc1-b13c-7c84da437504", "sighting--90bd9028-3ffb-429d-97db-729da3d19526", "sighting--ffa04acb-22d9-4200-b657-0b39de8787fe", "sighting--210744a5-3b9f-4fcf-8f15-b1d67487ca3a", "sighting--72502b16-d45d-44fb-ad79-514bf3db4727", "sighting--cee3a30d-0bb7-4a61-9ca0-749667d11f23", "sighting--ee826c42-df60-472d-9e54-fb01954ef001", "sighting--b69c7b4d-4ff0-4a60-9a4a-7a2a42cf5a02", "sighting--512a8c11-cef5-46ab-b509-89423d49cc81", "sighting--90829af6-259f-4681-8b20-b8930f144ec6", "sighting--1c0254cd-60c0-4857-b481-395622ef4f36", "sighting--c4fd8b51-189b-4d53-bbc7-6f08911f0d5c", "sighting--20d42c3a-4c93-41aa-a4cd-6292995324bc", "sighting--0c16f531-8330-45d3-850e-0bfb4719eb69", "sighting--68cf0937-b9be-45de-9302-e6ca6685e984", "sighting--2fb8c548-bcd2-460f-ba06-abe03d3eef37", "sighting--1147354a-85ab-4c57-bc9f-0ef4480c23d5", "sighting--c3475751-2e8f-46d7-ad6f-7d6935dab38e", "sighting--2bbb5a90-688d-40a5-bca2-5b15ed8c4c9e", "sighting--0d2f20ad-f288-4a6f-9d22-f841246ee00d", "sighting--6d00f4d6-94d4-4552-a115-2f3edc8d61ba", "sighting--0914ce4f-315a-4291-b700-d27dd4d299f0", "sighting--a436929b-e96b-4ca8-a4fe-0599864d7065", "sighting--46677744-e1d5-4055-a6ca-158a80f211af", "sighting--aa0b8189-1fd3-4bfc-a620-5fffff746bd3", "sighting--182401cc-0cb0-4016-9a28-108ee90b5524", "sighting--ac88e798-2ac8-4e34-a439-597976f7e6d7", "sighting--72c95395-1844-441b-8e51-302eeebe1b66", "sighting--61ae8294-311f-4c75-a036-d6d6590739c7", "sighting--cc662f4f-7c37-4bb7-b102-425aa4d9fefa", "sighting--0424aaba-1063-4641-a697-8a31ec04a51f", "sighting--afd394b3-eb1b-49c2-a0b9-c7f6fbfa1c2d", "sighting--24f025dd-f2dc-4931-baa3-f32c39364bc2", "sighting--787cde68-7fab-4743-a7e3-f2a3803fc8f3", "sighting--31290113-b51a-4cb4-879d-7c0dc1f1a285", "sighting--93b507b9-c52a-4fab-9e0d-683fd1940c16", "sighting--aea5e744-bcb6-4f1d-9664-7e03fe619b1c", "sighting--2fea41ff-b4c8-4c54-8caa-ea1e19a0a40c", "sighting--859d6911-6bb7-40b7-9810-70fa004ee52a", "sighting--326e9f25-5512-41c8-8a32-04de8c77fda8", "sighting--7598b871-3dac-4991-b4f8-bd596b87cc3f", "sighting--8b3fb119-698c-47cc-b72a-8de142cb7c9c", "sighting--e58b089c-8010-4b9b-b98f-8e662fd04e16", "sighting--503d5fd3-2b40-49ca-bf3f-ccd653ba3260", "sighting--66f7ebb6-4ccd-44f3-ad23-6a25f2dc63d6", "sighting--706b5411-c0f5-484c-8dd1-369b6f49a553", "sighting--c05377cf-f547-47ac-87a1-e0d8b1bb89dd", "sighting--44692131-60e3-423b-8e3b-6844e73c6ae4", "sighting--09231972-7d17-4cbe-9122-318496c0cb5d", "sighting--7bd4a74d-9802-48a3-9bb3-eb10ab2da8eb", "sighting--58f95479-4603-4935-bd7e-506416007eec", "sighting--b6ea3f3d-040f-4857-ba0b-b11cd75fcfd0", "sighting--365bfc47-11a6-4fa5-83c9-2ba4b7c5ce73", "sighting--4806b6e2-ae98-48ce-a651-1f699aaa5215", "sighting--f21c8039-34ab-4569-9b01-253f3ea7b553", "sighting--bc1e263e-64a2-4253-b9e1-c93831a9b39f", "sighting--97948b2a-3236-492f-93bf-f0a445ad9827", "sighting--6a720855-4d0f-441f-bf13-b52675e60882", "sighting--f1c9e26d-2803-4153-8acc-7828ea0465b7", "sighting--b7f8457e-f63f-4787-a9e4-856f87443572", "sighting--08c9ac72-b4be-4091-94da-5ac5e1747d1e", "sighting--d402c598-39a9-4505-800e-f79913c7efa0", "sighting--62bf76d0-3371-4af5-a50d-2d708bd8acd2", "sighting--2782a79f-38d3-467d-9164-5ae57260b688", "sighting--e37353ad-0a60-4e74-9821-d4bd8742d587", "sighting--05c2c303-76fc-4ad0-84fb-384d55730b93", "sighting--d473730a-d068-45e6-9fb7-82d8ba1343bb", "sighting--e4e679a8-cc7f-4e08-a869-0d2540377d07", "sighting--92b7efba-2e43-4b31-9ed8-d01b886e72b5", "sighting--e7cb367e-df77-46c7-b71d-4c49749e27a9", "sighting--3d8f946b-a86c-4839-89ad-1cb0ee9cc27a", "sighting--7056d12d-9f37-41e8-b6c7-9a208c1caa89", "sighting--15951ed5-69f1-48e9-aca4-78841c33fb3e", "sighting--73473c93-c2eb-40a9-af57-95c6d5bbf950", "sighting--d742ad54-0976-46cc-ae22-9f3a74021103", "sighting--b4af0a4e-e7a9-4933-98a5-d55c343cc0e2", "sighting--138df075-d6d6-4c80-bda7-12088673c006", "sighting--ee239e88-3252-456b-a2e1-deec8410e929", "sighting--50af0b50-1a0b-43b1-9c30-1a3d5044c338", "sighting--6d6a3ce6-d262-41a7-b620-7c890dd0da95", "sighting--a9c47e50-5938-4837-a8ac-d1b391db9d11", "sighting--80898aa4-9eae-429f-aaf5-70920c2549c6", "sighting--d5707750-7e05-4606-a852-b85d8cb981a1", "sighting--7d5487bf-368e-4bdb-a2d7-006cb44620b9", "sighting--700341d0-7f1c-4681-bfb1-3a9429bfffe2", "sighting--686f36db-8f27-45dc-84e5-1389cf2852b8", "sighting--6016ec44-eb9b-47c6-822d-927ed4f2c20e", "sighting--3c9fceae-839b-4f74-b7c6-03b9a0f0c25b", "sighting--2edd3d64-1f54-4456-ab3a-492321cacda7", "sighting--7af7f20a-9903-47f4-be4a-cd3b85fc08a8", "sighting--658421b4-22fc-4ff9-bdfb-406c3ed39e68", "sighting--1e7e30a6-4e9b-4f26-842e-19a37c9be60b", "sighting--94e57bff-c4e2-4233-aaf9-519daee6902e", "sighting--0d2ac5b3-2655-4ffa-a4af-8439e6901b82", "sighting--d6c093d3-8f44-4880-b2b4-a786b00735f9", "sighting--8f5c0c6c-4a8b-4bbc-b9b3-613f80622efd", "sighting--b85e72c2-819a-43f4-9087-a7d184fad809", "sighting--6b921556-b953-44bf-8f9d-ae73fde76c0f", "sighting--bbbd7124-3c5e-497b-a51d-9cf33fd45d4f", "sighting--ada82a6c-0a85-42b3-b0ef-d6120ff4f112", "sighting--b97f4e49-6cb0-4628-95cc-c9528638d18f", "sighting--5a640e3f-243d-4326-9887-e1d14a3c62bb", "sighting--97ae9608-20dc-4f3c-b0fb-2cb9c8f2d12e", "sighting--e64a7b87-8332-458f-939f-945507630494", "sighting--1e25da88-657b-4c2d-ad65-9755fdc8b772", "sighting--6a8e27fb-0c2b-4cba-86f6-a24149718a72", "sighting--5aa50607-26ce-4d36-b94a-5bba499f0cc5", "sighting--1349cbb7-c680-4bf9-9c8f-998060f44054", "sighting--fc4c4c47-dc89-468d-8941-27b59f003b8f", "sighting--f05392c0-f079-427b-9ff4-7f45e6aa0e3a", "sighting--7ada876a-ea14-484b-afda-201fabfe610f", "sighting--5681bc4f-0a0a-413c-a47a-738a876356da", "sighting--b4f907da-416d-4589-aedc-97d36e4b1048", "sighting--6bfdc814-8888-4bdd-a2d1-102570b235cc", "sighting--42ed3799-5a48-4772-9e15-1049c6c33b42", "sighting--ef7b8b86-1f32-4f06-b250-c8e7102b90c8", "sighting--5198f6dc-9a42-491f-a0ad-23fa62c5f4d6", "sighting--9f65fe2b-f5ff-4567-a9ad-c9bee23321ec", "sighting--82f60d9d-a4e9-4995-8b04-3102ef2e6519", "sighting--19ac7f6e-a10c-4cc4-b8ed-c7040c6debf2", "sighting--9893a10c-761d-47f6-9e38-d0dc2d2948ef", "sighting--5a970201-b238-45c6-b21e-36986e8b1a70", "sighting--6f70d8cf-285b-49f2-911e-94b355ff7883", "sighting--5564a40a-a89d-4935-990f-27f84ab44acc", "sighting--820ee897-da18-4f0a-a992-945ddd22f780", "sighting--2f768f47-dcb2-4e05-8353-0290d9ddd9c4", "sighting--2295fda0-77d1-4408-ae8a-3938f2ebc9d0", "sighting--6687a494-980c-49ef-b89a-79414b0debeb", "sighting--a4d37629-3e94-41da-b3a0-a4a972fcaafb", "sighting--3bd83994-a5d9-4a99-bf2d-e5adc59d1243", "sighting--eeedc66d-203b-4c72-b214-208432d92277", "sighting--b175c142-8b46-4b3a-af21-8219933af925", "sighting--e0a7d872-0355-4d8f-93ac-f1a289086885", "sighting--2734a2ad-254b-4e23-9f28-600cceb1b4e5", "sighting--acb2b594-9aa4-4619-89d1-3f32950bd016", "sighting--bfd87ca0-595c-43bf-8594-fd16c725daf3", "sighting--a19b5cd2-9eee-4ab3-bafc-9a84e73a6dae", "sighting--4b0faa87-9830-4158-9a23-36f2b2a4ed34", "sighting--26ddaec7-59cb-45ee-94f3-94d4309391a8", "sighting--07be8d60-1d7f-49b3-8488-29e8be596055", "sighting--f3683812-8a18-4ec8-b63a-ac43cb789411", "sighting--3793b8c6-a6b8-4da0-97f4-905d9054c95c", "sighting--839a06fa-84bc-4c38-8670-be1bf45063a0", "sighting--5df94fb5-bceb-4bef-a53c-b47713bf49f8", "sighting--c036fc42-bd0c-4bf6-8606-45caf20f5d7d", "sighting--6cd40a6d-69ed-429b-9671-7bf3e3305805", "sighting--a49f1f82-2f7d-4963-b8ca-7b28642e18ef", "sighting--12162213-307c-4286-adc9-f4e1a5c2becc", "sighting--16e7fa92-4768-48c8-a0f6-fbe3f3a957ae", "sighting--b70ee5d9-3004-4853-85d3-0d1eaf104f3e", "sighting--fc1551ea-46ff-4d1d-9abe-07a7ca1a3c0c", "sighting--62ee6b6d-34ae-49f1-92b5-18243c5fddb6", "sighting--675ff35c-aa05-4cd0-8bb0-3ba9ade5040b", "sighting--921ed870-bf47-48a4-bc4a-8a2dd86caf84", "sighting--2383c05f-44a3-464f-8986-6494f7e1336b", "sighting--5885b60b-b155-4bba-91c7-271ad840b1af", "sighting--c2494171-1a95-4dad-aee4-39da9f552b4d", "sighting--737392da-17a3-496c-98f4-0a96716a0c21", "sighting--21782b34-a886-43d3-a80b-48ce372de3f0", "sighting--793bab12-67cf-443e-b2e0-0fa6e88754aa", "sighting--8114639a-b637-406c-b8ba-f6121a42f502", "sighting--43ffa8fe-f420-4bc1-9fb9-9a1edccfafae", "sighting--1493e876-83b1-43e8-a128-7b0241923003", "sighting--65cd5662-417a-495f-9c94-f022fb3ed88b", "sighting--255cf436-f7c0-46c1-9ed0-7b1430d43491", "sighting--bbac13bf-82a7-42fd-aa57-6b29206da530", "sighting--c2247cd5-a540-42f2-9cae-3cf82d40b5b1", "sighting--ed30b9ac-0c5b-4643-abff-a5aebd5257a8", "sighting--ab09dfcd-2079-4e2d-92bc-fda3fe495b7d", "sighting--5c4722cf-27b3-4662-a88d-b77e3a642945", "sighting--b9f6425a-aaba-4f8d-99c2-81902ad507d7", "sighting--929892a9-a9cc-44e0-8a33-345bb1064b55", "sighting--3d73ea20-adcf-4e3d-a531-27a1f8400c59", "sighting--c09c0192-7568-4274-8738-4d6a4c132c8c", "sighting--edbedc57-9c76-47b5-9da1-c875a69faa35", "sighting--2812b271-90d6-46ab-b05e-8d6be220f89c", "sighting--6048994a-bc7e-4108-b106-fd09e6e3e7ac", "sighting--2a3d1668-3ffd-40c9-82a8-3190bf39cb22", "sighting--a6c1b5c6-951b-4f16-918a-901f3defa550", "sighting--b9689c8c-44cb-48c4-8b78-47ec7813f290", "sighting--ddefcd5e-e39a-4fb7-b451-852d5cf9548e", "sighting--0fab1f8d-0f43-4290-bc71-f5335b696731", "sighting--df723c89-126c-4c98-b164-8c93a64c411e", "sighting--8120ddc6-b729-4fb3-a349-bc4f9fbb3585", "sighting--f9097d16-faec-4250-ba0b-8785b6ff717c", "sighting--ffcb18cb-27a3-4f0c-80d9-c573a3d4b93b", "sighting--54fa2a1f-095f-4e86-bfa5-fad07feea50a", "sighting--5f5fc16d-e8be-477d-ba9c-c52bf1c9f46f", "sighting--c8275f92-de0e-4ff5-8508-e45180bd5d68", "sighting--0ac3a2f9-e81f-4e40-802d-e2a3ce26b893", "sighting--42522cd3-c4f6-4bab-8725-735fd6c5230e", "sighting--f3b009cf-a86c-4647-9df2-851a7b596eeb", "sighting--a6641fd0-1ec2-4326-a287-2324b6621355", "sighting--542ce828-ba6b-49f9-937c-a21da9e7344b", "sighting--56d8ade8-d4c2-4d1b-b0c0-00081fa1014c", "sighting--21ebd35e-ba1e-407c-b3f3-214939b912c9", "sighting--66609d98-0bfe-4c31-b559-cc8d6027cdf5", "sighting--08070608-b7ba-49b0-80c6-b29c12985053", "sighting--b5a5b6a1-b236-49eb-a074-1a3a57595453", "sighting--62bd43e5-6ac3-4a51-adc2-b0cb0e1182f1", "sighting--716193ec-ea5e-4415-802a-a89be1c1b1bb", "sighting--428760f9-5fa1-4deb-91eb-8f43c5b6adf8", "sighting--dc6016c2-c7cb-475d-8e73-916c840b1d48", "sighting--508a69f2-6edd-4205-bd4a-26133d578435", "sighting--d5e2361f-3850-46be-9c23-f4d6f182cbeb", "sighting--03bd4ce0-0e68-4260-8081-17262007fbcd", "sighting--bf5ebb2a-7f25-4dc8-9a1a-5ea1f4da45b4", "sighting--3ce9d078-174e-48d2-a309-7ae84297ebff", "sighting--04fb03c8-0493-4ffd-b836-e2e5b82c20cf", "sighting--777605e9-c96a-4b0b-87ab-0b0f257175ee", "sighting--81f1875e-d23c-43ca-b4e9-cb14514ef04b", "sighting--0fe6afd7-2202-49da-aea3-3eb8399c6c14", "sighting--19cbbd19-1da3-41b1-9229-35b2690d55e0", "sighting--235f28d3-80fc-4748-8729-4d39c6c87ce2", "sighting--c6945265-fd45-4c65-8ea4-ab22dbd95d1f", "sighting--67087f55-f2d3-4339-88c5-4f8dae1ccab6", "sighting--be83eaa6-be52-47c8-b761-a35f26ad339e", "sighting--b87bc8da-859a-48da-b81f-e4bc5627bf41", "sighting--90dfa731-10fa-4acb-b689-35829c0755a0", "sighting--351aee38-e219-4cf8-968f-b77a96269ab4", "sighting--8f32dc9e-b660-4247-801b-bbae2494d982", "sighting--a15aca15-0bc8-4c2b-9e8c-3dabb1012f12", "sighting--828cc6e9-f1aa-4fc6-a84a-51a40d6ae6b7", "sighting--4c46e8bf-3345-47ae-8b38-ab85a81ed3bf", "sighting--805ff522-ada8-44b0-bfa7-2dec3d7cab8d", "sighting--dd67c3a8-c324-4791-a8dc-34d6aa7c6b12", "sighting--e1e2567b-70de-4b57-a3f3-4f3519664841", "sighting--a0409ea5-4bda-44de-a23c-06ecda94d7b6", "sighting--dc4f1d1c-15bc-4f84-be12-e8223ca1c4a7", "sighting--f1eeafe2-5e24-4bdb-8f21-631f610dcd13", "sighting--0290440b-ceae-4bc6-9808-d79d350fa77d", "sighting--a8e3aa67-a4cf-41a5-9bc2-4d642757aa0d", "sighting--037137b1-af04-43c5-b07d-c6a4fc57a11d", "sighting--08ddf123-d5b8-466e-8a96-b0caaebc901c", "sighting--29616519-996d-44f2-88ef-7cf6d1bf0ff5", "sighting--a776ada5-8ccc-4b51-81dd-d362b21a4f56", "sighting--f4c72e15-68c4-48e8-b210-347ba821c4a0", "sighting--7aa88a21-9c44-4eea-9405-32957b526d8a", "sighting--47c94649-c5c9-4fba-a44d-5ff7a2326b52", "sighting--d576046c-81c7-49ec-b291-092574cfb306", "sighting--be0209cc-400d-41b8-b247-68c30dfab3ae", "sighting--9c44245b-458e-4443-954b-9f167ebc7b3c", "sighting--7831ce4e-29f2-44be-b0ff-cef8490ded97", "sighting--672f3698-bd74-4a69-b55b-9d150a69b9e0", "sighting--e0c6426d-1acc-4a5d-8c60-4dc2ad9dffcd", "sighting--6f29bf7a-a460-4628-8be2-a2121130d2a3", "sighting--3d9b2928-e4db-4d50-93dd-d6dc5938cbbd", "sighting--21c4c95e-00d8-48da-aa7c-fcaa53199626", "sighting--43bf7c07-aaa8-4017-a8f7-ed2029887695", "sighting--35113486-b57b-4925-aafa-2a75f54ef33e", "sighting--8332de6a-276f-4ad5-b564-ca74d496a8b7", "sighting--5fa0d4df-4c8d-4fad-96c0-034bf57881df", "sighting--db326f24-cb35-429d-b6fc-0ca68d71e930", "sighting--564eb52f-9a35-4b92-b0fb-8c96d3de44d2", "sighting--cf870d3b-18e7-466d-8750-4cc096af45c6", "sighting--3d8c8bea-d840-46d7-8ead-708dc6b7d8ab", "sighting--b3a814f0-4af6-4e58-83b9-1f587f57bba1", "sighting--83d98e15-2c9b-4ed5-a76b-6eba4381bda9", "sighting--e33202e8-1347-40f7-869a-1d267d8a087e", "sighting--860fd1a2-03ff-4a9d-8003-022b865eaba8", "sighting--64c65ef1-a8e0-428f-b9ff-0c64b00017d5", "sighting--2766b132-0fd6-48bc-8d1c-aab4c60ef31a", "sighting--f3d9bbdc-7a2b-4f25-9b0f-f8be0e250c1f", "sighting--8643e81b-3e58-4787-b891-01181c731f8c", "sighting--401565f5-a2c8-4851-ad18-4b958ae488ce", "sighting--7746ec7f-9e84-4ab6-bb5a-f28839ae574e", "sighting--153d6ee9-a6e9-4da8-af2d-9d113075f492", "sighting--c2011a9c-8ed1-4dbe-ba7a-b5dee4a7c04c", "sighting--eef94552-7456-486d-8bde-0e7814111905", "sighting--283e868b-55f6-4e59-acae-b6fe3f8a564d", "sighting--2addff6b-e513-478b-b977-a69952095298", "sighting--4e657181-eaaa-4862-af69-62d7c6186197", "sighting--5897c2b1-5c35-4ad5-8b76-e71bc4952716", "sighting--2138e1ec-7e53-4cdb-b252-8479ce981efc", "sighting--9783beee-9f14-4e99-b78d-3ae60b728054", "sighting--156f272d-f057-4f25-a7b0-6060924989ea", "sighting--10e2941d-8bdd-4169-b72c-d5f4b288c3ca", "sighting--46eaa8e4-ae08-49ea-9e61-bc379ed701f7", "sighting--58228c56-5d4d-47d0-847a-4d7150ae8c8b", "sighting--a71e8cd9-8fe7-4a37-97fe-e754320ac583", "sighting--40e655b3-a2ab-45fc-83ae-e10eea0fd95c", "sighting--9da8d528-cdb1-4cf0-9ee6-bff500bfa9df", "sighting--2ca6b2a1-0a74-45bd-8aa0-14362ee27647", "sighting--6c4326c6-8395-4970-bb9d-a20972e730a4", "sighting--332af314-4322-439a-b4c6-907b05dd0d62", "sighting--ad5c8be0-507e-41c6-bd5b-161f67f57c07", "sighting--e9497cb7-1b8d-4160-a934-44e39d8205a4", "sighting--e92357ac-1e77-4ba0-83a2-a0001cbd1dfe", "sighting--adb5c467-fad9-4287-988a-24b2f0f0d3c1", "sighting--1a9a9f04-1a66-4576-a40a-89a66e1d1393", "sighting--32123da5-ae08-44de-bbc6-4b9846bd2e1d", "sighting--78ea8f20-62ca-40a7-a2be-eda78eb28020", "sighting--10bc7440-9097-428d-a003-cbfa9b249a2f", "sighting--00d9db5b-0927-4f15-8ec8-44aa2e3be9d6", "sighting--b9efe401-3b92-4c29-b511-c20ec20791cd", "sighting--61edab88-ac23-4c9d-83e4-76d44c332561", "sighting--be2f8262-bd13-4f39-a5d7-026af2f833d1", "sighting--b28b3ded-51fd-4480-af30-126a643a4306", "sighting--1c01d1ff-ab3d-455a-85be-0c4254315447", "sighting--b878f756-3ffc-4f49-82b7-9fcef9a58236", "sighting--fb48a02b-cd54-492d-aa5e-d2c0f3441c5f", "sighting--3996f8c8-bd58-4ec9-8772-1f4613c0d56b", "sighting--2d99bf0b-7f92-43c4-8761-0089d4a8c45e", "sighting--1fd4470b-adc4-4730-b88e-45c3680d146d", "sighting--cfaaec0a-13ed-4726-b922-7943d36b0f94", "sighting--1df06600-a3b6-4ae6-8056-baacfacdb8fd", "sighting--c8e19cfc-695f-46f7-951c-a3de6b7a35ec", "sighting--32f7ed7e-d2fa-486f-8e3e-78d23b2a5e89", "sighting--ee6cc4b5-41b2-4324-8035-87704a1d9f1c", "sighting--c5a6db82-b148-4d04-8f59-add6ebb86181", "sighting--84d682b5-950a-4bbd-b2eb-fc22e6ed1322", "sighting--0c9c26c1-d861-4ee0-9d23-a85fb9896a53", "sighting--e3a86230-6f30-4c7e-9573-11b000bde522", "sighting--6c8a2409-77e5-4cbc-829c-199d3580070d", "sighting--00927741-2a1b-4cc0-97e7-4148752de9a0", "sighting--ba9df16a-95ae-4daf-94ed-381c67ac50a4", "sighting--e09d85a8-c485-403c-88b2-0def789b6818", "sighting--85b9f891-34ae-438f-a2a4-1d31556bf803", "sighting--5db6190e-14a2-45ab-8bc6-36c6d2282cfa", "sighting--c0f914cb-4ee4-4e63-a943-4d4b1fe68f5b", "sighting--76a1bdfc-76ea-4383-93b8-b3a75a4b8c38", "sighting--45add462-2a23-41f4-a116-f6227d25ab22", "sighting--fc1508aa-be28-4296-921b-5ad9acb8153c", "sighting--fe282917-f002-45db-b4e4-9cfbe86e1a2c", "sighting--3549253b-f69d-44e3-92cb-b830fafcad01", "sighting--82957d9d-aab5-465d-a80e-24670f4682f6", "sighting--66ae9a15-53be-4bbd-8b10-80d510458b7d", "sighting--b01f0253-fbba-47cd-a0ad-6baa66b37637", "sighting--ad20f042-f216-41a3-b6b2-a98974da8c19", "sighting--c656c1d5-d040-446a-b8a1-93bb269ac401", "sighting--f5558bde-6a50-465d-8955-449ae89c8ca2", "sighting--abb8f947-c9a2-4be6-9ab7-1aefbe1deb50", "sighting--06670d3d-7182-44d1-95f3-f02b3efaa166", "sighting--c6d10198-0bbc-4a9a-9eb6-0b7d46fb50e5", "sighting--67809811-fd4e-4719-8d33-73cf5b850513", "sighting--09c32243-1a79-4a84-b86f-08b02b7b5058", "sighting--51e2b728-e6a8-4c36-a869-747f1c5abd76", "sighting--8b9bb3b7-4349-467c-8c68-41ffaa637b46", "sighting--df3cc1e1-19a0-4cf0-9b3a-f3add274fa2d", "sighting--cfecc90d-8656-4a49-abe9-bd27162bdb84", "sighting--54a0d687-0f0d-4ebf-9166-d4a0b06ae4e1", "sighting--3f8f23ab-83b4-4ed8-9719-42eec63a851d", "sighting--61707d1c-ee24-4cdd-8c4d-50316baad2da", "sighting--54e25fb9-9212-4a72-8970-bbfe9d957d51", "sighting--c9d8e0a0-172a-47ae-a9fd-56161bb8143d", "sighting--e2c38b41-e275-485a-a42f-46009a42015f", "sighting--562cd484-31f3-4ef0-b3ec-e8c6a5eccf2b", "sighting--1e11204e-19b1-4bdf-973a-847d1fc6a900", "sighting--a0b9173c-7a5f-4966-88a9-752ea78d187b", "sighting--44e35b02-55fb-4df0-b9ce-77725d30bc7b", "sighting--c2b5f647-ec2b-4f6f-b990-97d26965d95b", "sighting--cd35205a-99e3-41ee-a21d-53cc8afe8215", "sighting--d8620f4b-e962-4bcf-b0dd-242a8dd47fc8", "sighting--35de5b68-3a29-44fd-95cd-7b44f9c16ddf", "sighting--888c5c41-fa44-47c2-a5d1-bb881fbc01cd", "sighting--49c9f0a4-baae-4f1a-8503-5c350a4dfff9", "sighting--0f5b6b59-7f5c-4770-9537-937a144e2423", "sighting--c86662e2-7797-4582-95ec-b063ac2a791b", "sighting--6b9be61e-7a13-499f-b480-8f708030c049", "sighting--d6b22a47-d653-456b-a484-551a0f649e49", "sighting--635c85df-edf4-48a1-8218-2ed0ad0e8c3e", "sighting--2014395a-ce50-48f6-a9d9-e5e6989a1ea8", "sighting--bed1f380-7273-422e-8a2d-158404c141c4", "sighting--e32ba83e-a586-462a-8476-9bfcbafe1ad2", "sighting--4140e0a4-6c1a-4da8-b00d-5c16f1bd87c4", "sighting--d5b574b4-d5ab-4c18-a4bd-42073227fd8a", "sighting--2a04a632-b87e-4d07-bb52-b4b7c5b0658d", "sighting--0d4babf1-f239-43a0-93e9-42dc5ce19c04", "sighting--4441e5ab-83a7-47fc-be2f-50a6db613d55", "sighting--73f9314c-a53d-4c19-b934-c80006686239", "sighting--cdbca6d5-5b95-4d7b-9c36-30a477b67938", "sighting--553cb63c-b52c-4323-83cc-3fe8ec691874", "sighting--f09f9110-916e-47a0-94c5-b9587beda603", "sighting--e824617c-ccd1-49e1-9890-9af5084019ed", "sighting--ce8163fb-19f9-48dc-a821-e957123ea284", "sighting--a2fd5064-4925-4b04-92ef-9a9961e614f1", "sighting--db1887fb-9be9-4a66-a0f6-586b2c4a5526", "sighting--2b067e9c-0eb9-42d3-9c02-8758a58fe5fb", "sighting--3a8bbfdc-0ca5-4012-9a6e-512889466474", "sighting--768b7a48-12ee-43eb-8562-278ec523417c", "sighting--6a3c5690-3b59-418e-ad65-855e0cb88eea", "sighting--713b72ee-9ca4-4844-843a-6f932b2f5fd1", "sighting--1a2b4220-4aac-4b0a-ba8e-9bd61fd3d4da", "sighting--48ece009-a904-4d9e-b730-1b720806889e", "sighting--5ea4a95f-f2a7-40fe-8653-e7866698df08", "sighting--c4f6606b-a40f-4900-a8bd-9a488b414c48", "sighting--48f33259-3bc9-42d2-981b-91f390ea7a1b", "sighting--4f28f56c-a093-43b2-8b9b-5aabffe6e261", "sighting--9c306d7d-5935-4f03-9cbc-7182c14282f0", "sighting--33f87d3a-ca0f-42cd-bacc-d05673be4956", "sighting--cd6fa07d-585c-4c39-a879-c666740e2ef4", "sighting--b1e8013a-8ecb-4e13-b483-3ee05c630456", "sighting--eab4d35e-ec2c-4d83-8bb8-79fa55aa0065", "sighting--2d3801ff-3844-4945-a8dd-64e46ab83187", "sighting--35ff019a-a26c-4654-9416-bffd9a8b547d", "sighting--80090db1-ef59-4340-81cf-ebc782acf001", "sighting--2d834af7-a177-4c11-b633-e13425c276ec", "sighting--ae3e31c2-ceeb-415c-b34d-d90a5c742797", "sighting--cf04cbb5-325a-453f-8512-a169dcabd516", "sighting--42c0b4cd-adf3-45c1-aa64-81b05b9e65ac", "sighting--06fc66f8-5f94-4c30-a096-7af76bf5c189", "sighting--0091389d-1f0f-43de-a7e1-200bbc742e1b", "sighting--87f66d9d-0a4d-4131-bc6b-b0fbf1edc0ea", "sighting--5bdca937-3cf4-4cc8-bc34-54da451c1f94", "sighting--e966acc2-b98f-442d-bf7a-b7de88caaefe", "sighting--3f69fc39-6e1e-42ad-9607-ccb581f5d37b", "sighting--2589926a-1737-4108-a97d-68c69cd8a531", "sighting--b2d7f047-6aa1-4d47-9e8d-842c3f121aae", "sighting--59946354-ceef-4711-b967-0fc0eba3bbd6", "sighting--3d8ea671-a711-423c-98bf-a3d77863206e", "sighting--b920baaa-380e-412c-8428-23aa196e06c1", "sighting--1de7ef3c-5524-4293-a665-22f3960392ec", "sighting--b08cada8-b0d6-432b-b008-fd0b37d8ff40", "sighting--d1c2a8ce-b044-46e7-8f76-08a0912b5a4f", "sighting--f70256fc-d95e-4115-8c74-8564904a0a22", "sighting--9e959f56-6339-4e4a-a650-f4f484f0eab9", "sighting--6e04270c-3a00-4ad0-a3c8-8dcb620331df", "sighting--ac125280-1a72-419f-b30f-08231d702b87", "sighting--5ba7d17b-d0aa-4345-aade-cbcb52482f5a", "sighting--962bebdc-b9e3-4ebb-8ba1-112a14d8eebe", "sighting--ca69dfd3-15a4-48ad-819f-84717bde0e7e", "sighting--ebd02ccd-43db-4985-8867-221506c37d7a", "sighting--adfd4b40-7518-4ee7-adc7-4cf1c369c537", "sighting--99f436a4-e3bf-49d4-8bac-e3c87ecb7d31", "sighting--4f95e715-0b2b-4428-a16e-410ea1ac8a32", "sighting--aed1efaa-6045-45b8-b589-50af95477f2f", "sighting--6e9db694-7949-4cf2-9e9e-916eba10ec00", "sighting--bca5baac-a244-4945-aa68-65f2f7794c31", "sighting--ef60b2ed-d198-4c25-9245-4a74d971403f", "sighting--0da416cb-9f0c-4baa-adf8-2191519e365d", "sighting--da3d744c-5fc6-439b-8d35-74fe034cf758", "sighting--fc72b7d6-1b1c-43d0-91a4-b0603f0a2d35", "sighting--07f88eb3-81cb-4b5a-9b53-b423abe7f0e2", "sighting--896b0f5c-82c7-428f-825c-e1760db5cb7d", "sighting--e4b415cf-5da1-471f-a03a-a08a2399cfde", "sighting--1a175c15-d03b-45a6-bb61-79c954e3de56", "sighting--c3873db9-a51a-4c6d-bcd2-b20f7c6e36e9", "sighting--90384667-8ed4-434a-a42e-f2c34d4b8023", "sighting--d9a38020-8b33-4bcc-9e22-82eecf7619b1", "sighting--fe75b439-0144-4312-9615-e8116cdf24cc", "sighting--9d265923-5cfe-420d-a378-26a372e85a72", "sighting--f0cc992b-ba88-4d01-9d2e-4a1a90620841", "sighting--457a5f38-81d7-4e6a-adc1-50e6292f7314", "sighting--d9ac0f4a-adc9-439d-8bc7-4b5db21042c7", "sighting--bfda414b-3905-4472-b9b4-3432837fa10a", "sighting--e2f8d88d-c2b8-4239-a856-aa7c75e8d9d2", "sighting--888246ec-6bda-43c6-87ec-2306d87c0aaa", "sighting--e1f0d23e-0f95-47cc-8ee5-abc048c6bc05", "sighting--5acb5fdf-e430-44e9-a90f-e236ca778599", "sighting--68a78554-6873-4c94-a834-e8c0ea975cc9", "sighting--abd27137-e332-408b-8f4e-b486d07273bc", "sighting--bc1481c1-6267-4269-8341-c2a8fe24f35a", "sighting--d0bf8bfb-389c-4d4c-b694-99aed6cab22b", "sighting--c609ab84-cd48-4c06-94da-d573e350d355", "sighting--dadcca73-7c57-461e-b620-a55a49743c62", "sighting--282d6ced-b982-4a2d-a83a-974e59c5de43", "sighting--c3741e3d-ea03-401d-8727-840a310f4a05", "sighting--acdd7eca-d2bd-486e-88c7-7c085ca649ab", "sighting--d23c85ef-13d3-4766-9839-f629ead24fa1", "sighting--6d41af7b-ab1a-4024-9e10-e652faefa443", "sighting--20803f18-59d8-4a3d-bb56-162b275fc97d", "sighting--e86dd565-2040-4920-9896-fa5b261f085d", "sighting--b7fd3577-f08b-490b-80ef-eed08c867aef", "sighting--422a5ff5-d001-4135-8409-8b61b8b42c44", "sighting--074ff019-d56c-4a54-a246-a18a3873a334", "sighting--b49ea768-4d6c-4b9c-b75c-1b46722907f7", "sighting--71032a77-4ce6-423d-8d76-e0187207ed60", "sighting--a20a4a70-5d38-4668-ae46-f945b7b52583", "sighting--fc83e7e3-236d-4dc2-8110-5ae7c082ac8c", "sighting--1307e75e-48a8-45ba-82d4-8ab08ef6ebbd", "sighting--a6ccd693-f8c4-42d0-a662-2a399eed7317", "sighting--5c40b3a7-b4d1-4587-8c99-1650c0afff01", "sighting--50eaa2f1-b380-417c-abee-bc2175974321", "sighting--b05bbcec-cac7-4365-b286-d64a5a9219e8", "sighting--b98b90c6-ab72-49ee-bef2-2194695c6460", "sighting--2806f60a-6a28-41ec-99b4-81b714412fcd", "sighting--1941857f-7926-4f1f-a9a9-2c823f7721d0", "sighting--02352199-c69c-4a46-a71a-691cab39ce34", "sighting--dde79ac7-a47d-400d-abfc-e0e8ad8d41eb", "sighting--2765a89c-4d73-4dcf-bdfd-a7b8d18c3d73", "sighting--3707f9d9-27a0-4859-a087-66d3a31eb5fb", "sighting--09e03773-c073-4188-82da-e2751e930aa1", "sighting--0960b726-6269-497e-b4ab-ca3bc2c7798c", "sighting--2bfe1ce7-d52f-40d4-a182-40718f68ccdf", "sighting--c0b9b8ac-3155-42c5-8f67-aa67ee51b3ea", "sighting--aecf1c53-bcbe-4404-8cd6-4bd14bc1957d", "sighting--e2acf5b8-6ce7-4d29-8b1c-410d9ae8b63e", "sighting--0fc4a2b4-84a6-49f8-8ca8-c57b7ca382f2", "sighting--3bc7a526-bf0f-42ab-b667-8f7e9435e8d1", "sighting--68e4f3b6-45d0-4f4a-b8e6-b6b7ce72c859", "sighting--9bbbe6a4-a2a4-48d8-91a1-770e798ab1d8", "sighting--36149d5d-1733-470c-aa2a-8696d950c599", "sighting--f512fd98-bd6e-45c4-95b7-625d0eef6c63", "sighting--d882bc49-ec59-45eb-a8c6-f276a964a0c4", "sighting--b345d18e-3001-4474-852e-d07d4a4864ed", "sighting--70f02047-53a8-4e0f-b453-3108ded4e788", "sighting--4621c005-8f80-4a68-b9a3-32e6b51335e5", "sighting--8523412f-c559-4f44-98c2-18510ef92ba2", "sighting--9c08136b-a5a4-4280-a9e0-278a5695dfba", "sighting--f2ebcc50-f6c4-4541-9a0b-7ca622b01cec", "sighting--c29338d0-babb-4698-9dc5-74b1ff5d2cd9", "sighting--75bec91f-0d25-4eda-a1d9-b03b5ca2a32a", "sighting--d741e57d-fc30-45f0-9fac-43b3f1e72326", "sighting--59ba3468-b251-421e-a5c6-2a7529e919ad", "sighting--3c8e46b0-def7-4575-a83b-8192c25dc505", "sighting--1a548674-364a-43d3-bc09-7b60ed216320", "sighting--4a7e4250-357d-4cd5-8897-04099e23a36d", "sighting--98ca5e1d-125e-459e-bedb-598cf0149974", "sighting--3984e3d5-f3ca-478c-925a-23df99aff89a", "sighting--e5048cc9-852a-4f07-ba5d-b5dbe889f590", "sighting--4eab134e-f550-47b8-a86b-d61891fb982a", "sighting--b264d4cb-9981-4c56-beae-0eacc9961fd5", "sighting--319fc3ea-96a3-409b-8619-bc12d6871770", "sighting--b7da43b4-34e1-4402-9d89-7f6793c9e7ca", "sighting--9226b3bd-bcd6-4a59-8333-40c2d4e58289", "sighting--46c126bb-80bb-475c-8601-62164edf02eb", "sighting--189c5828-a762-4019-8a92-aa13768e9424", "sighting--576e64cc-7141-42cf-b8e4-b5273f6eaadc", "sighting--2e228b74-4421-42c3-b046-fd96e750e974", "sighting--a8c0c0f2-a7ab-44b3-b99a-fdda68983413", "sighting--2c65a3fc-0a53-42e4-a620-8aa6c1ff0866", "sighting--8992dc47-7962-460b-b02b-f90a8d36e9dc", "sighting--19fd175d-3228-4b10-99e0-9765baaa56e1", "sighting--f9845251-a37a-4fb2-b66c-78aca64f053f", "sighting--091295f9-1be9-483e-8a34-aac3dce88641", "sighting--85813167-75cb-41c3-a4c9-776561f227e6", "sighting--b93c7301-fcd6-45a9-a4b3-ea43972e096d", "sighting--38c3e535-d787-40a8-aaca-927af7826cb3", "sighting--3219e234-2db7-4dbf-857f-5aac88a726bd", "sighting--0394c378-6010-41bd-a037-c73b4827fc7c", "sighting--ad1b74e7-6447-49a4-a773-f8817fd86507", "sighting--aed15562-bbb8-4b2a-b979-617eef022c1a", "sighting--565ef39e-506c-4498-887b-a6dd2ebde919", "sighting--2ffb3105-8c0b-47b1-b4ea-4aaa75587ead", "sighting--badc8503-f15c-4892-a450-0c4007ece6e8", "sighting--3e541729-ca9f-48aa-8722-3a5e90737efd", "sighting--0e397ada-5ff9-4520-8181-c1094ad4f697", "sighting--4074f4ee-f6fa-40f0-b9a3-249364707cfa", "sighting--70a4560c-f925-4ad9-90f7-d729d3bb1779", "sighting--7f0f9fae-99c8-4c81-a527-ccefcd4676ad", "sighting--8ed85e3c-b3bb-46ef-a167-594ed6c9217f", "sighting--ddf4b877-c61f-41e9-bb98-69b289cf1c53", "sighting--35fc1f9d-29e8-4d16-b744-fe7d99c6305d", "sighting--8f23b30c-ae8a-4ac2-8f72-6a0575b3f1dd", "sighting--931ce469-7e72-4fbf-89cc-1ceb3ac6d776", "sighting--6ee631fc-236e-4c3a-837e-8f368e45adc8", "sighting--fd88cfa5-49e7-4205-85c5-9324a02da826", "sighting--e6b18791-0896-48e2-ae7f-a99fe99bf272", "sighting--f5a8aedc-a12e-4eb0-8332-4a6eb902e121", "sighting--542fb095-6cd6-4823-ae0c-6681f04e61e1", "sighting--2f86e4d2-8f5b-4741-84e4-3f40ef107f4d", "sighting--c0a94844-e582-4f14-aeab-d1c349cd4044", "sighting--1ce4a833-cc54-448d-aeb9-535fafba01aa", "sighting--31adf04b-c1cb-401c-9530-3cb790056a17", "sighting--75b9474d-7d3f-434d-baad-7bc90186a4eb", "sighting--bd444de8-49af-4d88-bcac-83c289bcf9e6", "sighting--ca131e86-8d1c-4628-9378-ce9a0b388f4b", "sighting--227f302b-af55-493e-b90a-9c5ca7d53440", "sighting--d741144f-e900-4bf1-80fd-e92308512124", "sighting--48e62746-aace-40fb-b969-f323e0dc6620", "sighting--5e1be271-0df6-46fa-beb8-c443aadcef6e", "sighting--e3bf149a-23bc-4136-8b1a-2f103ab33623", "sighting--7483c506-a750-4465-8465-e01f0727ddae", "sighting--c85c0ab6-269a-4bc7-9e7e-75e433f0efa5", "sighting--58c6baaf-41e5-497f-b38c-e6c7f4c36536", "sighting--0b278232-1ba0-4240-8cdd-eaafd54a98b0", "sighting--921e9864-332e-4c14-bb36-21a5753fa575", "sighting--05647b95-27ba-4549-88bf-f5ac7f50cfc2", "sighting--3224c08b-5f07-4ffd-b874-20566db26b0d", "sighting--7297fb86-d724-41cf-9ebe-50ac38cb30de", "sighting--b74764f5-5f0e-4678-b73b-77f10823db90", "sighting--4b993864-128b-4ac9-abed-2fb6be8d5027", "sighting--5de02b6b-ed68-47e9-b988-cc89ff97d982", "sighting--bb583a24-155b-43f2-b048-bb01814b8387", "sighting--42021c54-1920-4f12-8f46-f2634269d79c", "sighting--41fc2c43-d0a7-4ad4-b8e4-6d1e93b2ce9a", "sighting--deee4b7a-8236-42dd-a115-f80b59204467", "sighting--0d011251-c231-42f6-9a7e-23847ababa1a", "sighting--32da8ea9-8bea-4cab-92b6-ab459b392136", "sighting--a8ced871-3738-46d9-8e6f-9e0119372887", "sighting--42807b7b-cb3e-4573-a0e6-7a8233514c37", "sighting--689a9e50-aa48-4eb4-90c6-79cdf4b7daad", "sighting--f8a66da1-fe19-41bd-8300-55ab88545790", "sighting--c1fa17fd-3a8b-467d-bfb1-aa0914dc503e", "sighting--a328d532-00b6-4b1e-8dc7-c34df2833f3a", "sighting--5862c26c-79e6-415a-a4db-2bbff04204ed", "sighting--031eb0a7-eb79-41b6-a33a-f4c882042c3b", "sighting--709e74ad-37c6-4a76-a210-2036bd963354", "sighting--27ba2fac-c94a-4540-953c-e83fbcd20e89", "sighting--9259d5ff-c722-41cf-95a9-0c43d8ce2cb6", "sighting--a00bc26c-3c3d-4c19-84c6-22bb33e1db4e", "sighting--9e456f16-4d11-4167-adbd-ff6a028019c0", "sighting--6545db05-103b-44c8-808c-2735cfcb3ef3", "sighting--0d122ecd-eba5-4963-a37c-3806fccf3b25", "sighting--076c10c8-0d18-4b31-a0e9-d3024fbbe439", "sighting--670b172d-53a8-455d-bfaa-81e7ac0907ec", "sighting--8f035a2d-f2f0-4a52-91a8-930f7467e602", "sighting--8ae80c68-d3b9-4fbe-9505-190755ec5445", "sighting--c49c11a5-3e7d-4ae9-94fb-f9308a57e1f3", "sighting--74c3f7b7-c6ad-4391-a520-9ab8192d1d79", "sighting--08c43150-fc95-466e-94d1-c925fccf3756", "sighting--a43f5870-a1fc-48b9-93c6-0d54581f1020", "sighting--10ae2054-95e6-424b-a969-34d7574e4b6f", "sighting--02e8015c-5f8d-47f9-bac7-3d119b0d5be1", "sighting--6fdbe648-a9b8-4ee0-9868-495d52ccdf11", "sighting--02ae8aeb-665a-4b52-8abe-df5caf09adf5", "sighting--ec137f11-89ac-4ba9-9df1-724a8192ab9c", "sighting--e3d29844-a281-4538-b76a-a648fd05b60e", "sighting--459c674f-c083-4cad-a291-5580df8ca4d5", "sighting--2f9ac00e-d590-493b-9046-1af0bfc8fd0d", "sighting--ee99fe94-4cf4-4eb3-8b5f-bfe20b5a3beb", "sighting--34208099-b0b1-4fcf-8739-7955a00017c1", "sighting--f43f3e18-a198-45d2-a02d-87df368aacfe", "sighting--6435b5e2-104f-46e8-8295-e5ef98c48278", "sighting--df0111b9-ac46-44d9-bebb-877b4e9f92d7", "sighting--f9b00888-cdc2-4e31-92a7-7671f9468e02", "sighting--e5f6a999-d2b6-4eab-810e-4678ee115152", "sighting--509029e3-c759-4a3e-8f78-43f3e7b08ed2", "sighting--0d05f70b-7bbd-4b5d-8ca8-d8cc3f33af8f", "sighting--6ec7730e-a9f8-428a-8e71-deea7165167e", "sighting--e4d5aeb5-3371-4ebf-8cec-c4eb46f6ea4d", "sighting--a5b35323-8ee2-4fad-9db8-a901a50df60b", "sighting--ab79c521-32c2-42dc-838a-6ee91d418393", "sighting--e1f54b4a-0d71-423f-adad-55cd2398daf0", "sighting--fca75e1b-a682-4873-b634-79b5815d8676", "sighting--551f15ae-c73b-4140-aa9c-c2daaf438aae", "sighting--245e7ff5-2c84-4d92-b52d-2faf4b0a7d16", "sighting--2e23ee41-7262-4591-8573-8890125fbb1c", "sighting--8ee19510-0360-4584-82ab-d3a75b95ccf2", "sighting--b667e252-47cb-4e6e-abee-d2e4e2af1604", "sighting--368423ac-a8de-4fd4-8ae7-d03a67d0af92", "sighting--df394e08-bb69-4ac2-8ca2-0869ea4610ba", "sighting--f997911e-03a7-4c8b-ab21-2e050038acf0", "sighting--ba3f61b2-4d87-4c98-8cde-0578f96d8450", "sighting--c8e6d014-6629-415b-93ff-05100ebd41c6", "sighting--5c0e29f5-8188-4c62-b7a2-075f9fb9f38b", "sighting--54a5cd20-e0f1-40ed-8f0d-e85a1386d46b", "sighting--f979b302-dcd9-42c1-a7ab-6455e9845d25", "sighting--6b1643d8-d43f-4bac-b7cf-b49d1f835c0c", "sighting--0e2c138e-1d4e-44e9-8ff1-4f5c37d000e4", "sighting--3f63084b-f5c6-4499-9a2f-0427841c91cf", "sighting--5a5b5d9f-5bca-4f3a-a8cd-e03d234e4dc9", "sighting--98699874-5c03-4370-b10b-5c07cb3a71d0", "sighting--df4bb8ee-840f-4c57-9a6c-010a3bdb9fde", "sighting--df1d4830-c74a-498e-a19a-bd0d80f247e7", "sighting--4c13fdd0-dd35-4643-b5e5-d36dd3a163c3", "sighting--182d6b73-f5f7-4f22-8e4e-3580a302236a", "sighting--3a42ef0e-1be2-47f7-a3b6-a8814dab894b", "sighting--b95f1858-e3c1-46f1-8729-b2f7a5c82645", "sighting--c25c9bc8-e720-4a91-a7cb-cf235b6ef479", "sighting--9a802f59-044b-4a66-8606-ceb9af216932", "sighting--78aff942-548e-4166-8bc2-9d64c14a0ca8", "sighting--07a01cbb-f06a-4193-9b84-f8ffc960783f", "sighting--0599837b-a8f0-4ffc-bc5d-73edcb7a2b00", "sighting--a40b50bc-a386-49bf-9e20-63d1088bc826", "sighting--6bf8654f-64ed-454b-91bb-c73d797d8035", "sighting--331bb185-45d1-4174-b60c-265327b28a32", "sighting--ddd13cce-7088-4cf9-b226-18dd49f567b0", "sighting--1dd165db-bbb8-4829-87b3-38f9f5283ee3", "sighting--e8f65e4b-c524-4398-9068-b12da2e65182", "sighting--1852cd4c-36a2-46c4-9467-c6f803b32ecd", "sighting--e3f81979-8631-410b-bf04-5194f99248bc", "sighting--11b4477d-3d00-45a5-9b6f-bb5bc22ce600", "sighting--790212ec-244f-449f-ab2c-3d0067cf4363", "sighting--a514e155-7d71-467c-b321-c112d2e6c959", "sighting--968ba23e-63d0-4026-8e69-45e2584fe7cf", "sighting--c45df389-a8ca-45c3-8865-a9b7cbe92db5", "sighting--e9d172ee-ed48-473d-8e16-3efc4577384c", "sighting--7a8db8ed-bf27-49f0-8d83-86a2ea1375f3", "sighting--9bf68e75-288b-4ff1-9920-93edc1d84aaf", "sighting--055d6181-862d-40cc-b39d-62c121db2a4c", "sighting--c5c9def0-ac6c-4a1d-a1be-d17a16bf8fb5", "sighting--1fef5990-bf6f-4cde-93d8-1385c3ff01b3", "sighting--68df27dd-a82c-402c-b557-b083004caea5", "sighting--37946913-3818-4504-a7fc-a2c0a24bf711", "sighting--aad5efe9-c373-4cbc-abb8-ad2a14261961", "sighting--3a22ce62-d542-4274-ae41-b4f479e9666c", "sighting--6b102210-ac65-463d-acbe-7d12e8c8788d", "sighting--81a4bf86-5ba6-4c10-b4d1-25d99039e859", "sighting--8e5d7635-51a5-44d8-a3b0-547858d9a103", "sighting--8aca46d9-28da-429a-bed0-2bbd84257d5c", "sighting--25769982-36da-4ae5-83f9-eb9da8380b4b", "sighting--1737bdeb-7d28-454c-844d-5dcfed57b537", "sighting--f4aed2b7-e2ce-43d1-8519-8e447ac8f34e", "sighting--c73c90e2-2214-41c8-bef5-50f88029d0ff", "sighting--b54ecfaa-7234-4f0b-8650-3059260bd1c5", "sighting--a0240a89-9d06-421c-9b1d-4b6bb3787ace", "sighting--0b0669f3-eb80-481d-9833-a250fab1fa08", "sighting--83b4e113-db79-4319-a427-e0ded129754a", "sighting--86fa61ea-d432-493e-89a6-a21fd007ce8b", "sighting--65cd94e9-5256-4e98-9499-d0717c94e57c", "sighting--ebcc956d-d15a-4922-aba1-960c0f6706b9", "sighting--5b819a42-08f4-43c7-bc46-0138da837600", "sighting--d23859ab-5d9d-4dd3-a497-3038925d57a6", "sighting--ef68aa7e-bbe8-4a65-a0be-386dd3910738", "sighting--abff2897-03d4-4e82-b81f-6ec6e4c65e7e", "sighting--48110cdf-207a-40dc-9a81-b34c22b8458c", "sighting--2bc6b53e-e5d8-4f36-82eb-8871aa4a75c7", "sighting--43f7ed4a-661b-4d10-8cb2-6a3e6cbd7992", "sighting--56c7f7db-0643-482e-855c-814b0f43e8ad", "sighting--0efc3f1e-1621-4cd1-af47-ca1102401b1a", "sighting--f68ec42b-e1f2-4bc1-b316-b4eaec70b79a", "sighting--c9614321-3d98-43dc-b7da-9c9e62d270f6", "sighting--de94620e-88fe-49fa-b007-533919d8947e", "sighting--ac6634ce-4d0a-4e61-ba8f-15631a422068", "sighting--78935c5f-44f5-47af-899f-e4aeae534289", "sighting--2f103499-9550-425f-80ea-212de44f6492", "sighting--fe841e88-0d6e-48e8-a838-97bf8f6fd430", "sighting--0b758725-3993-41b7-9bb1-c0c8979a1c41", "sighting--a6d38475-6dda-436c-bd12-8ae83162edb1", "sighting--3ff7bf01-e0a4-4c47-8abf-8a401bdb097f", "sighting--886bab1b-8882-4dcf-b9bc-e91a0fd8a88e", "sighting--d513f471-b0db-4dc0-bf01-4dc9e7b3933c", "sighting--731ff651-e392-44a9-bb04-e3fe21978fb8", "sighting--83fc072f-577f-48f3-893b-b80f0091a1dd", "sighting--2d591ae9-6cfc-4096-b7c8-62de30bbb0d2", "sighting--a3265930-df16-4120-98ff-23a1a9571cdc", "sighting--755603dd-2abc-4e7b-bc50-9236efdfc19e", "sighting--49db7438-a032-47d8-b3e1-d70176cc1a7a", "sighting--2d5c1de5-b4f2-4fed-8b61-8b20f19476e5", "sighting--ace948f4-5d6d-41e1-a516-f3193d7e2641", "sighting--5646cfce-ab00-4b48-b32a-6383fa2d8dab", "sighting--055e2728-daee-42b9-a42c-80ab050d0eb4", "sighting--d9b0024b-554d-45ff-8d40-257b066bd920", "sighting--3644917a-ee3a-4b93-923e-78eda2a374f2", "sighting--d92b3adc-bbb7-4d44-ad13-4838faf3ae23", "sighting--c19abeaa-c512-4e3f-880a-a3d16d9fee1f", "sighting--e86570d9-b910-44c0-8a78-d2022707b464", "sighting--e6731fa3-7cbd-43aa-b791-cef21de47b83", "sighting--d11dad51-d9c3-4b5e-81ad-f2264051fce3", "sighting--cbe941c8-f09d-4f66-8b22-382db81c04f5", "sighting--1b001fa9-f6c7-42cf-ad6a-690580c7095e", "sighting--e2593009-8031-4741-b13d-a8ac690c48d3", "sighting--bb1870c6-ee06-49d3-92f9-2a8cf619c4da", "sighting--e20e7346-58e9-484f-a565-cd7fc0965079", "sighting--099ab479-a6a9-4673-8c17-b7d4eb204248", "sighting--bb9d7a91-2820-4132-882e-a328f0a355c5", "sighting--87ccbfac-a7de-4ba3-9e18-7cc93140cca0", "sighting--18aeeb2a-bfba-4838-978f-c873b1f21ad5", "sighting--4fec336c-4914-471c-883c-531f4657dbc8", "sighting--f4e557e0-05ee-46a7-be64-a5bf64fda2ca", "sighting--ea9289a6-85a2-4c55-80b0-c1998b16e47e", "sighting--50055d25-1210-4466-8028-18425a36ceb0", "sighting--2ea443ec-9e82-48d5-a99d-4d2d6ee94f18", "sighting--9fffde08-6a22-46fd-aeb4-591eb4dc8c44", "sighting--4732650e-f6d2-4ae0-9caa-2b7097b2396d", "sighting--e4f5cec9-4a11-4cd8-a8d6-3e8cbdcacf61", "sighting--59f1185e-2c39-4bda-9717-f380479d587f", "sighting--edbfc7a1-41e1-44c3-b660-d31da23dd233", "sighting--b137ba54-0115-4a85-9648-0b2c054a8a7b", "sighting--93b9a47e-e41a-475b-8d9b-17e4811ae2dc", "sighting--95384a6b-aba9-4dd1-8774-0914cd7aaf8b", "sighting--fa77b72b-6539-43ff-963a-6755ac47bf63", "sighting--2ab53439-7312-4aa6-b774-978892f8dfb6", "sighting--8b444b4c-ce30-4c80-a0bb-a8630074613b", "sighting--01624774-ee91-4452-8701-15ff7b046556", "sighting--19e6a52e-9ccf-4e04-ba8a-7c4117f4b7fa", "sighting--54c385b9-e7ab-4ba4-9824-1591dd1f213c", "sighting--1821cbe1-a115-40a0-b675-02bca2f21f78", "sighting--18a1b4d0-147c-4f4c-9f38-219aa5d61ec3", "sighting--81bad880-f41f-44ae-93c1-72be2945190e", "sighting--a792dc9e-7837-410f-908d-584ef5221515", "sighting--111b926b-e7e8-4038-876d-34b4e8b8c32a", "sighting--8f888546-e9a2-4d03-b67d-7f625ec8c283", "sighting--4cb0d328-ee2c-446a-a4c7-2e40ea3988d2", "sighting--9a4d8722-060b-4fa4-a178-a16861ddd1b5", "sighting--1a428c90-394c-47f4-a78b-15bf143c46f1", "sighting--6071edf1-f90e-4fd6-ac96-5f0ea74b9375", "sighting--02a4ceb0-2534-407d-a6e9-f732df2a666d", "sighting--4898478a-abd7-4b6c-b581-88df951ada91", "sighting--8e93a2e7-279f-40cd-a4ee-b28db9732675", "sighting--14794b08-b6cf-4a74-b0c0-219426e32345", "sighting--6576f3ef-9954-4965-b379-31ac7ecbfa51", "sighting--0804974e-74a6-4c1d-8c0d-861a256cce0f", "sighting--009bd343-a9f6-478d-82e8-9ad46ac88c55", "sighting--eccd600f-2507-4dd6-a613-8f621c392b97", "sighting--7eec4786-074d-46dd-8621-883005e00683", "sighting--c59b0cdb-392f-4d23-86ab-6f270e7e5009", "sighting--cffe95a1-23c2-4e55-9944-bcc23fa98e90", "sighting--ecc11b59-b7d9-4ed9-b4f4-3b5f058dd0a7", "sighting--d2e5bfe1-3d59-4bf0-b731-ba78108e7a49", "sighting--873323ab-504d-4da7-8b9a-8ac79d1d982e", "sighting--7df7a6b8-f0e1-40e5-b01f-00a4299e97ab", "sighting--4cee57d5-80e8-4b19-ae7f-467996f1c971", "sighting--6edf5908-e2fb-45d0-9a2a-050aab19f45e", "sighting--f4c81f93-4d27-464e-a227-5c58c3afeefe", "sighting--6ae81989-d080-4005-ab4d-9ad4091ddecb", "sighting--993bdda4-8472-4538-bbb4-ab9a5bb17e71", "sighting--8fc3f3c2-72b3-4968-acf4-fb0632066906", "sighting--b4b4f76b-d05e-4946-82c8-0065ccd463ce", "sighting--7ebe6c82-a3c6-46c6-8911-8027aeba415a", "sighting--9a267b05-6f0a-4faf-a5a7-7bfc554e502d", "sighting--ebcb06fd-f830-466d-a5b6-f6bf840527b8", "sighting--b634bd62-70ea-497f-9071-7a675f429d52", "sighting--249875c0-c1e6-4d11-90f7-fffb73ae4a37", "sighting--54046c59-6749-4ee7-a571-440c31ae1d71", "sighting--881a99ad-5dea-4065-8986-0d2eff29484f", "sighting--0101ab37-e882-4682-8c3c-f1129b8fd3cf", "sighting--2aa2fc41-0f49-4ec7-8aa6-1ad83552d06f", "sighting--c92ca1ee-c0d6-4bc3-8421-4db23f20c032", "sighting--00dfc760-3e7b-453d-b417-32e432c7aa1c", "sighting--76ec98ee-2e5f-4b27-96c3-ee76d69745d9", "sighting--97f380fc-93ab-4046-b67e-444ef47ff388", "sighting--e89f6625-9415-402e-86a0-69a8201717f6", "sighting--a82f480b-676f-4a2c-a556-b7bcc538a658", "sighting--3ef032d3-50b8-4baf-a295-1bf52d90cd41", "sighting--89ed0271-7901-4724-bd0b-939c23e5c21d", "sighting--157cd266-5656-42a7-87cc-d4f950d5fafd", "sighting--d0cb5e1f-add4-44bb-9310-c77ad89cf909", "sighting--1a509680-039c-4e1a-bbb3-3956aab67da5", "sighting--0fa0e5a8-0770-4f76-9e54-24e716eddac2", "sighting--22e881bc-00d3-4ec3-ae5a-152ef21ef143", "sighting--363f2783-7a38-4ab5-99fb-e27e33766049", "sighting--e3e8aad7-ad8f-46bb-9b9e-953d7a0246f1", "sighting--34d82cdf-02ce-4c1a-8033-e256dbfe6b31", "sighting--b091dcb6-7f90-408c-a683-63ad04017644", "sighting--0824d53b-f4f6-453e-99b1-24aaa1819450", "sighting--0a4539e2-6c61-4dd7-b669-07493847afee", "sighting--abeb8b4a-5fb3-4082-a43d-96da4251cd98", "sighting--0640807f-c2bd-4dd8-bec5-9a6be6855098", "sighting--06967a5f-87bd-4264-8d85-bf24bbd7f9e4", "sighting--4f33da14-e59c-40ef-9117-4d7028b66f5b", "sighting--bb7ff4ed-e2bf-40e6-9142-8c8282d38985", "sighting--2c9d161c-bcc1-4502-b12f-70aca6227bdc", "sighting--16eca425-8551-43d3-ae38-c05d54662142", "sighting--501e1d9d-45fc-4400-a961-4c8108eebce5", "sighting--c57bf38c-07b0-4d8c-b60b-8127c7272141", "sighting--b3c43312-1a16-4f77-b1fe-2a1207c5108a", "sighting--6448d23f-0a43-4ef1-b879-02a333e2e829", "sighting--dc07d712-1331-4dd6-863e-a4a4fc07a10e", "sighting--b0f773d5-6a93-4737-992f-4bce92a4e459", "sighting--fe8b0d02-b48b-48ed-b2a6-bc4b1af61272", "sighting--588af0fd-1b5e-4659-92e1-e30e119ea164", "sighting--6235cc30-1088-456d-a296-5b29e0f934d6", "sighting--b1159dd1-f70e-4de1-948b-fbf6c64b0ca5", "sighting--ac6f2858-bd42-46f8-ab26-d5f76c0bc562", "sighting--1260b4a7-cf6c-410b-b56a-8e6fcc57baf1", "sighting--fb68135f-7b28-4461-944a-e7fe5d0f16b1", "sighting--bd4b55f4-5fba-4848-baad-4eb07349dc59", "sighting--3d80bf15-2e93-4c3b-aef7-206aed800f18", "sighting--ba035810-16ec-4680-a619-3aaf846f4048", "sighting--07630bb7-65a2-4a87-bf1a-9034188b857a", "sighting--fd0e57b6-6d72-420a-b54c-3d9bfb96db90", "sighting--002afc82-b96b-4660-81c5-9d83f2e0f264", "sighting--791cc564-c68d-4d1a-9675-0bba37a44111", "sighting--e50975e8-cd99-42a5-9879-87d1c8218611", "sighting--4f6d0ea9-1805-4c1c-8eba-85d292540130", "sighting--95671026-1d4d-494e-b7e5-f9c92ebda59d", "sighting--928da7ee-cee8-4301-be2c-cbf2e6d7dc79", "sighting--6d06c62c-318f-4a29-a9af-16eef37d278a", "sighting--4d108913-9aea-483b-abc3-ed5b4cd8c2f1", "sighting--b026a070-8126-447a-b8a7-9b5a43e9dcdb", "sighting--321c089e-76bd-4234-b588-8b2c761af090", "sighting--ed9ff473-695c-418e-81ef-02920d293de9", "sighting--3881b109-d337-4fb4-bcea-1ee805f1b555", "sighting--2dd85a1a-dd58-44cb-a07b-f4a071c18992", "sighting--5d8b1df4-9986-463a-973c-bfe8c5c4f016", "sighting--b9240911-1b08-4306-88a8-c351d0ab268c", "sighting--17d8b4b1-25e9-4be6-9b89-830cbb533f40", "sighting--4b482c8c-53a7-4ad2-b693-d12e6f9acadc", "sighting--a5d493c6-28d4-4631-8b93-5f021ef08f46", "sighting--5ccdc332-90b7-483a-990a-01ef7bcddf97", "sighting--e7fc71c1-bbbc-4fca-b60c-dfe989852617", "sighting--40e54d24-76d3-448e-abc5-d12606ef512f", "sighting--c076fbef-d585-410f-89c7-327a7a5e8e66", "sighting--20da61e3-8d16-4bfe-8ea1-2d07f9877355", "sighting--cb50755f-0a7a-41d3-b28e-c68a30925ec0", "sighting--e57c67c6-c733-4c86-a8d0-190cb6c07ea5", "sighting--1150252f-bbf4-4cff-871b-8a94e1de68a5", "sighting--5b7c60a0-aff5-4a0e-87be-3b52880590ba", "sighting--db57aaa8-e92e-40ef-9d5e-f3016eb3e4d9", "sighting--e84f6fb3-d1ee-455f-9546-480ee85020c6", "sighting--7097e453-47f4-4a5a-a226-d4fdf179e95b", "sighting--f30cd34a-50ad-40af-9c9e-e81e45888140", "sighting--b0d794ec-5339-4941-9a7d-56f9bf6c00da", "sighting--a600f950-77c0-49d0-84bc-3edd53e3cacb", "sighting--7b9734f4-65ba-4c26-a1d7-dbdbb91ace61", "sighting--b83c79b0-c592-4a75-bc3d-916363b64cce", "sighting--296353c8-1b65-434e-9af6-38defda0d113", "sighting--268065d1-4fa4-402f-b621-5eece5be2494", "sighting--d86894f3-492a-4c26-8057-eece8cb693b0", "sighting--0826ae8c-3ed6-48d1-a275-a7de0f6c6e42", "sighting--26328b1d-e9c1-4585-bbe5-fe6838b4d623", "sighting--f0990874-8efa-4c5f-93ef-d3ae0c1d5981", "sighting--0ba49443-db0b-49dd-8830-e44bc2a3a2aa", "sighting--578fb760-653f-4e60-a4ff-f2fba676cce7", "sighting--e236a0c9-5dc9-4dad-8fd0-583d84a5b7b6", "sighting--7b072f94-c6e8-4293-b30d-be9aedfbc443", "sighting--a7730639-64cf-4154-ac0f-fe928bd766f2", "sighting--ff94e8a4-f74c-4b58-b350-28da0779698c", "sighting--79c08433-6fd9-47a2-9a7a-1e26b72852b8", "sighting--96b31e20-803b-4996-9ff5-462b282fa70f", "sighting--a0ac88d2-c237-4286-b682-3e9c185a4df3", "sighting--e523ae44-664f-493b-9c43-d2a9332da0ab", "sighting--3a34440b-7075-4481-a854-0c98b26d5fbc", "sighting--da98fa48-e71c-4cee-b2ae-842ad6a0582b", "sighting--a23b3df9-ae92-4b25-b0c4-cf28f2cd89f6", "sighting--82a78ed3-af09-4aad-ae87-e7bbb2c51721", "sighting--4947658f-ff5d-4ece-bd9b-59f1f396e431", "sighting--7fdf14df-c2f2-4406-92fc-92c30ca46dd0", "sighting--03fac0e3-8884-44b8-bb3d-9b3efc89d452", "sighting--a9ed25c4-17f1-45dd-bb05-01b850d6bf92", "sighting--e29c44f0-62f0-4b42-a379-c0ca712c1c3e", "sighting--852b4aa5-b86d-48f5-a0e2-9458c7d26a51", "sighting--aa3c4fae-2d42-403e-9d62-263bcadd5446", "sighting--e3d6dc0f-5203-42f8-9bed-4dd4a0aac824", "sighting--4fd40670-4c7c-4344-aa55-40fbc7c82fbe", "sighting--530361a8-e88f-4db4-bd53-c7e035e03de9", "sighting--857fca76-179c-4b5f-b834-49d005ee2e82", "sighting--0aa61cf2-64cb-4515-bbfe-7e1b5508cb83", "sighting--61772dc5-488e-4046-99a3-145912d01ba9", "sighting--e3ff07e9-2a68-40f5-93e7-a355c6b12276", "sighting--95f7aa7e-f644-4f25-9d18-1a8048a21b63", "sighting--31fd944c-04f5-4abc-9d8d-87d413b681cb", "sighting--94be4957-eceb-4db4-b845-df64bbf19b32", "sighting--74adc9d5-f2bf-4fa1-9f20-c4a0750564b9", "sighting--a1e0d277-d046-4513-8f74-fc6b61b8a7bf", "sighting--13fb4593-37a3-482b-bd9b-11941e7328a1", "sighting--a81bd8c7-49d0-498a-ba49-9f7b346fcc88", "sighting--a0c153cc-52a5-430a-a437-ccd80b2e0fe8", "sighting--ba75858c-a41c-43f0-8951-730c5975d654", "sighting--82b13cc9-9145-4bcb-a548-6b841906c719", "sighting--6348fa63-d281-4120-aed8-b7f94458d3fe", "sighting--3eadc6bd-ecfe-41fd-a46a-e6c3b98e43de", "sighting--a9d1ab86-f2b5-40f3-9aff-eab2cc6f055b", "sighting--c79e6346-42ab-4289-b26c-53396ae16eb5", "sighting--1df5335a-dc06-4ff0-ab9d-3010804d235d", "sighting--5f42dee7-9fe0-438a-a365-27bc789f1efa", "sighting--a01f06ee-94a4-43a4-bdfa-2faa3b357db4", "sighting--cc484488-4049-4eea-b4e3-a985ff4ead97", "sighting--69d49c05-c69e-4658-96ad-8770fc9b64af", "sighting--950cb000-d8f2-41d6-972f-b13d17505471", "sighting--07d1ff85-243c-4c68-b9b7-fcffd84e63fb", "sighting--8b912860-d277-4d96-9f49-b17d61026822", "sighting--7365be52-b955-49ed-9ca3-20ef8b1c5242", "sighting--bacd3149-00b3-4e1d-8d6b-56a2aa086921", "sighting--82987cf4-e1de-42bc-b857-f92694a49bd8", "sighting--cd5d6270-7ea2-4340-a38e-84785b802adc", "sighting--7c9affc4-8588-449d-8100-86bdeb4a64e9", "sighting--c12fb7e0-920b-43c9-ba22-9c2c28a4f799", "sighting--1f41117d-6bdb-4eb1-b3ef-7ff0ebe6f2f5", "sighting--dd34bdc9-b027-4e38-bdc0-af4cbbd8019a", "sighting--8a0c880f-dbac-4e57-ad75-86766fa71781", "sighting--a466366f-99da-46cf-ae3e-7a12879b5a53", "sighting--5a45b4e6-e3d4-481f-8666-383371226e0d", "sighting--a35bb02d-048b-4f0a-87ef-632ebc964604", "sighting--a174a73d-42b5-4b9b-bfe7-fbbe485f4cbb", "sighting--84d4d5ff-0f45-4e03-8b65-238ff0c29f6e", "sighting--9a5e2e24-ce57-401d-97e5-faa477a0c0e5", "sighting--7a7663e5-c784-42bc-a9f5-46f917e17b5f", "sighting--1546e14f-6ec9-46ab-9693-afeb2a4b9a0d", "sighting--1f4010df-b728-4d79-9445-ed2e1b20e2e2", "sighting--96b3e52c-f651-427a-90a3-1f8f962b3b29", "sighting--a40a2a6c-f5be-4899-be71-9f80b40c97e4", "sighting--46a3ee74-e9e5-44aa-b269-46ed6752482a", "sighting--786373ae-cf52-48e3-9280-0588df35f16e", "sighting--d209ef71-5ea0-4826-9eae-dc76638de760", "sighting--9763b89b-6e6a-4263-b512-db4a460bd28b", "sighting--06b44c4f-534e-402f-8d4e-1c99738de230", "sighting--7ecf2380-4fa0-40f8-878a-a267dabda98f", "sighting--4e8d4ee6-4a58-44f5-90d2-dffa2c1fd332", "sighting--baac71f2-ee24-4c61-a5d6-dcee19365655", "sighting--2e007c4a-5eda-4d3f-b499-f5aeaeab84c9", "sighting--2667d021-4571-467c-b66c-fdf4f4ad6f86", "sighting--37c8aff4-cf10-4747-9d40-b87bddd51076", "sighting--2bcc6ac8-cec2-4292-b0b9-ea963737a976", "sighting--d4b31409-3718-42cf-a4fa-9e84bbf3377b", "sighting--778deb98-b225-4607-9ed7-7afa185be038", "sighting--4219b20a-94e4-412f-8a94-3805b9aa553e", "sighting--2cbde23a-6c44-4af1-83d6-da0efbc3e49d", "sighting--e7d30fd9-2e16-4cc4-9b69-be98251ab750", "sighting--ee307225-ac6b-4df6-8092-15e6b50bec13", "sighting--7f5640cb-8d85-45b0-aa7e-fdb52686d430", "sighting--35dba95b-0549-49fd-8d3a-0f277d8fb945", "sighting--f970e049-7a2d-47ba-be4e-a87802ad7289", "sighting--6e8c4a51-a3bf-4184-820d-217402b656ab", "sighting--f0365213-71fb-4bba-ad8d-9f39db99298f", "sighting--8624f0b0-4c7e-4bd1-a5b3-9508f338076a", "sighting--b2bbcc25-e898-4320-8572-2e894e4edcb0", "sighting--02466c1d-60ea-45f7-a4bf-d3e2b0f9bd57", "sighting--ac359027-6068-4630-9a6b-e674d89ff4b0", "sighting--5f08ebda-0852-4cff-9798-d8201a52816e", "sighting--3272a73b-7c9a-4bbb-8f6a-52481cee2f21", "sighting--78c2987c-9479-40c1-88ae-99fcc3a8b093", "sighting--edb03288-9ee4-46d1-a842-00dddf0c7a6b", "sighting--9a48676f-6a51-42f3-98ee-dfc50b5f9590", "sighting--9e157daa-1ca5-4a39-a581-e924c77b9ac8", "sighting--fc180b41-bad8-4eb1-944e-67f08cc8dd98", "sighting--1c881565-3a11-4d9c-82dd-1aa628e020da", "sighting--4509016c-0a54-4a8e-9d9a-b354ffc0e5a9", "sighting--9739ef0e-a4f5-44b5-90f4-2007593b40a3", "sighting--03efbafa-d5a4-4083-a15d-d89c362b2925", "sighting--0ad27379-5878-431d-89c3-5aeaa3920588", "sighting--9e657ff7-9e0b-459b-a299-9bbca72b8757", "sighting--e43d3a84-d3de-4c09-8677-570c3de10f95", "sighting--820909e2-ee48-4717-a36e-fd6dca94073b", "sighting--75fe716b-6297-4293-b2f2-a36bcd196418", "sighting--5467dd26-7ab5-44c4-81db-014befc52ca9", "sighting--a5bdf99d-99a6-4df5-b125-53079a27318c", "sighting--2e938525-806e-49f7-b8c0-bbe9040806a0", "sighting--3ff2a95c-aa91-4072-8f0c-af42ba1228ca", "sighting--80774e00-2211-40ee-8766-7944693de6a8", "sighting--2b0e1708-dc45-4e42-913a-a24a20b15760", "sighting--87a94074-8a39-4dc4-a2eb-3e08bbc059d5", "sighting--feda02e2-5592-4973-8040-9bfd27e5a966", "sighting--e9269238-ac45-4bb6-99c4-627bad221c8c", "sighting--d4394c46-93a8-4d19-8f62-38f068960862", "sighting--f5b3938c-cfc4-4fc4-ac6b-f77e8a8dc0b9", "sighting--1745e5a3-5cc3-49a8-9ae3-0ac814d011f0", "sighting--a7b097b8-6c2e-4f9e-b347-54a54fa67063", "sighting--4df88c81-893a-44ca-bd3f-73119904a490", "sighting--cfc7381a-a835-4f8c-8985-1c3ece48da30", "sighting--eb220e7d-c0c7-45af-b415-9590c9a674b7", "sighting--65d44094-076d-409e-b68e-fc7f35ecbf43", "sighting--d81b2156-4407-444b-8ff6-3bc0174b148b", "sighting--4f11bda1-912f-4221-8fe0-4c3e8edbacc8", "sighting--f7520461-c80d-4f7e-8f92-fe24c12c3b94", "sighting--3d8d88e5-4fdb-45e9-91d6-cbe1173924a7", "sighting--102f6f77-a755-4771-964d-f19e234fd051", "sighting--3b7de275-5f36-4058-ad5b-68cfb989ebef", "sighting--1a7af06f-7421-4061-9762-2755ad8a2280", "sighting--71224c22-daa3-41ed-8d74-3551dece95d9", "sighting--fea54a65-5ee8-4420-a0f4-4ee274c0bfbc", "sighting--498018d4-34d9-48a4-8a93-7cfd5db19a4d", "sighting--6413feb6-50c4-427f-8ab9-00c9b49a20b9", "sighting--131a209a-e963-47b9-a857-0face81ab372", "sighting--913e8d75-a7e9-4d39-8ca3-2043c44d4ca7", "sighting--6b5ff15a-68ee-4879-80e9-8fead9873a11", "sighting--35991f05-999f-4642-941c-2e1643aa47ea", "sighting--5e87f5f6-e6a0-491b-bf9a-e42c34fc00ca", "sighting--d98be4aa-6051-4a6f-b4ef-e55916fa7c19", "sighting--4e1efb88-4a57-4204-befd-b9664b24b9d6", "sighting--ed2608c3-7b0e-4119-b728-8f13cd65952e", "sighting--85ab5df0-2928-451e-9e9d-816dc471d265", "sighting--000359cc-0827-4e30-8692-0a9f76e6ce48", "sighting--1d378a26-ae13-4618-87fc-530fbc8f62b6", "sighting--d8416aec-ffec-4eee-a142-855769535e1c", "sighting--bc9c7cde-1651-4745-ba6a-977ec7794517", "sighting--38d6b3e1-41fe-413d-8452-4d8428b8a777", "sighting--be4f47d5-0638-4c2e-a333-b826b7ac56cc", "sighting--e8661954-fe6e-4bf7-9321-279fb55cfc86", "sighting--4d20c5fc-a8fe-4fbb-9fbe-888f5d5c3464", "sighting--a8398df4-de97-4a9b-bee1-d1ce110928ae", "sighting--23aa5ab7-3219-4a7c-84a1-1dac77b93061", "sighting--66040107-93fd-42ff-9ca5-f989eb00b51d", "sighting--0b571018-4762-4a7a-95b0-314419cd33de", "sighting--5f80a640-cf6f-4aa9-9834-d1ec14896e78", "sighting--c4b0ad58-05d1-47d8-98c8-74f1781f6054", "sighting--239863fb-9b20-47f3-8358-7385db4a80bf", "sighting--124a1082-c97c-45a0-9039-7978a6d6fcfb", "sighting--c8db1b71-0e37-4112-bc6e-cadee73b4771", "sighting--cff98913-225c-414a-946b-46edc81b62ca", "sighting--967d40ea-8167-4206-9256-4d9d9e17801d", "sighting--4e3e76ed-bb72-402d-b8fd-5606dbaf8701", "sighting--053d0c12-bd37-46fd-bcd5-2e43eb1413cd", "sighting--4db2a219-c347-47bb-912b-89930a7820e6", "sighting--e82ac832-4b34-47c9-8bb0-fa595f29a000", "sighting--115ab6cd-3ae4-4be3-92d3-30a1431af5db", "sighting--eed0887c-1dea-4edf-a97f-c0b1f90ac119", "sighting--e9eb0286-a4f0-47de-8046-4219cdefb635", "sighting--d9e7c1be-5af1-42a1-8aef-908e3ad6b675", "sighting--6925c25c-19c0-4ec4-b97f-2eb63f06589c", "sighting--2a065762-1a21-4038-b55c-4a602f28abf5", "sighting--483813b1-2ab1-4a5a-ad9e-85db51cb35c7", "sighting--77b930ec-6449-4712-bded-993961235fc0", "sighting--b3795f15-2633-4af1-a713-2cb212b7ddc5", "sighting--22468acf-f725-44f1-a0f1-807809f36090", "sighting--3a3b7974-0895-46c9-ae23-2fda10396054", "sighting--d1d69be5-d97a-46e0-b19c-1ab625ac966b", "sighting--9690b279-10f8-4bd1-a0f4-67d1e7a65cb6", "sighting--1e6b2e10-ebab-4133-ad58-65d3e3c9f194", "sighting--b6420fdc-395d-4cd5-9357-76fe641946fb", "sighting--b7f5d825-d956-4b57-82d5-a0775269fd06", "sighting--dcba126a-dcb4-47bf-b86c-b93934d0b2f6", "sighting--9f7761cc-6220-4432-ad63-6f01c03ef526", "sighting--6c537a25-7a3e-4c9e-9bbb-ab98d6c18c6f", "sighting--f7f4bc13-31c2-4234-bb34-e155e5bbcfb4", "sighting--f9e9f4d0-d4bc-4951-864c-9304f58e3f9c", "sighting--03300555-d339-494e-b730-1baa37e46d7a", "sighting--312926d2-dab1-42da-a80c-517b1b5d4d6f", "sighting--ed24a384-6b9d-4dd8-a632-73928702bd3e", "sighting--bee7dff5-5f39-4e5e-9a15-281e34f04363", "sighting--3e932438-f5c4-42e9-9dc4-23cc77e6a425", "sighting--88f099ca-da51-4306-9b83-65b11d6a75a8", "sighting--7c046450-13b8-4edb-818b-f1f3a38f57ce", "sighting--fb3ff598-fe46-4afb-acd1-f4009507936a", "sighting--c65906cf-1c51-4b2b-b477-93de725d5c04", "sighting--0e874a07-3815-48ad-aec7-39697b1e70b3", "sighting--5e16480e-2712-4c24-bdf8-8e77ca5231e7", "sighting--f0f66ea1-6c22-43aa-a33a-344418ba6795", "sighting--e03422c6-7779-4dd4-bae0-a923753ea0ab", "sighting--cb396a22-0630-4dae-916b-d7fafe0a33b2", "sighting--66be77b1-99f4-402f-8092-d4b1a3a3a9ff", "sighting--0d475c39-176e-4826-a279-83446405b6a5", "sighting--4a8cc983-519d-4955-835c-b2f9bafa9e90", "sighting--c31e4ee6-5e13-4201-857c-50946fd92edf", "sighting--88f5b7fe-046a-4190-a1bc-08892dc773dd", "sighting--64a885df-398b-44ee-9220-3ad150ed713d", "sighting--2111e9e1-fa3c-46ca-8b15-e9ac254d3243", "sighting--4820c70d-7b62-4fc6-9c18-aabfe9fff068", "sighting--71c31cc6-d39e-4b63-84b2-caa7e0d65609", "sighting--cfe0c4f7-2355-429f-9959-43e9c36e7a3e", "sighting--90cc426c-cad6-48b0-bd4d-9a3350cacbcf", "sighting--eb4951a5-0e2c-422b-a7b7-9ed050419f4b", "sighting--4731c74b-6e54-4b2b-884b-75b8951943c0", "sighting--0a02c83d-2e10-46ca-83ac-273ce05116c4", "sighting--dacbb1a0-cd49-4835-afdc-8dc3ced9b3f9", "sighting--760e0a19-2745-414a-9108-0e69c483787c", "sighting--98ead7f9-5a8f-4a7c-b8f7-d882a9ff3bc0", "sighting--7d1a04bb-d89a-4660-a323-deccb4f475bb", "sighting--d32c5fd7-f001-4ed5-b0c3-8ff221584a23", "sighting--beeb869a-a280-459d-a221-c34ddc9c5f20", "sighting--a4de2d89-3370-43ce-890c-81c5db989c06", "sighting--bd733767-25b2-4149-a9ad-ef7a408731c8", "sighting--34b87d05-056e-40cb-958f-cfad35c703fb", "sighting--f1cd5567-9e57-497c-833d-4065206001b9", "sighting--6b5691ca-2bea-4f2a-8e10-51860091ebd7", "sighting--b75395d1-baf1-4bf8-9a09-d81e060b0cc6", "sighting--519fd9fb-76e5-460a-ab35-64865e8fa5a5", "sighting--09edc93e-49b2-41b9-b6a4-deda46337820", "sighting--5c951ab9-b07d-4552-8379-736804e738db", "sighting--cd43bcce-f1ca-47fd-a48a-4e0f3a574ce5", "sighting--20b0b916-7edb-45ac-9dbf-cb6bc1e0da41", "sighting--2ae65e7f-e5c0-4889-af75-a144b131b46c", "sighting--3e91bff9-d2b1-4868-b1ad-50ec336e1731", "sighting--4a306651-8494-4e53-885c-d5e876944603", "sighting--c414a928-e3b6-4937-84b6-31293c2d5ad3", "sighting--612d1551-fac4-4a84-8a5c-d03ebcf0f87c", "sighting--a1e5b1ed-b733-4ae4-af00-ce78e6146271", "sighting--cd9e7782-856c-48f7-8743-8f74079b46d3", "sighting--2dcde778-eccf-4c0a-9686-519ee9b9955d", "sighting--564af1d0-bd1e-4984-a230-9949970a2120", "sighting--e3170339-acd3-43f1-902a-a31be868d4d8", "sighting--4be1e540-2c36-4ca9-b6cb-482f591803b6", "sighting--77b671bf-bbfd-479a-b09f-02779c214c5e", "sighting--240ea80f-6be1-417e-abbb-ebf91f3ae10a", "sighting--2d5567eb-0e79-4dba-b1cc-531d35a7d45d", "sighting--9c4ab65d-b1ca-44ec-b7b9-d581c863b4bc", "sighting--f709fc9f-9715-4219-8ae6-a85e4f08d7f8", "sighting--7444afe0-a459-48d0-8d56-ceeaf53c3938", "sighting--141d4bba-daec-4c73-839f-2b633815151e", "sighting--7b005eb6-18a0-45f1-952a-d8dd2fc3b679", "sighting--f60b5000-7eda-4bf7-9b9e-6ec60bf9c778", "sighting--d47a59f8-3f5e-40a2-8423-5aef5afbb873", "sighting--c3924c09-b4d4-4904-8b01-2e5730dc1daf", "sighting--694cfe1c-e0ff-4d69-b6ff-dd93853a5369", "sighting--89f8d7cc-f43b-4367-ad7f-86ef3858a566", "sighting--b405e917-e441-4950-a0b4-de8edc276def", "sighting--d91bf414-eec5-45bc-8caf-9a15a3a3a198", "sighting--26793cba-54cf-408b-84d2-09ec21e09f19", "sighting--2b19bb92-291a-41ab-a91b-7769fa1e75ac", "sighting--fb6a02c9-1f01-4baa-a18a-5da077ca65e5", "sighting--46f06e3c-8fe5-4d6f-a6fb-28fcac08c023", "sighting--ceee32f2-502d-42e4-91cc-6c281eaf648e", "sighting--529e0e66-b2c2-4ef3-8fa4-b6d8ef606670", "sighting--2beaac55-c96d-42ce-8c71-1a6fa314338d", "sighting--dbcdfede-6f82-4ede-aa50-e7b527f51b6f", "sighting--0774a340-d7ce-4a73-aea6-50ee41aad253", "sighting--80426d5a-e306-48ba-9af0-b7a53243537a", "sighting--54aa0aae-4429-4341-a7d3-fd642bfa5e8c", "sighting--8b5c33e5-bc8a-48c7-9073-3a535ec41404", "sighting--22077b30-8254-402c-93f4-4c2ceb884052", "sighting--a8ab63fc-6485-4f92-9ca8-8482f5ed175e", "sighting--dcf37026-aa45-419c-8b78-6b8787d0b6e3", "sighting--8fa7c006-c85a-421a-b5cb-47d2adba94cb", "sighting--dd3489ea-c8e2-4524-a780-55871d89bb7b", "sighting--55e8968b-4d1d-4fd1-a675-99b4d7311801", "sighting--e0220276-5a6b-4330-9bac-736fdba042d5", "sighting--ae9b549e-7b16-4b78-b04d-a1ab5aaf6170", "sighting--fdd45b43-c2e2-4fc3-885d-21eddc6faa2e", "sighting--fc51b61a-f57a-4c6b-955e-666ae9179383", "sighting--a4e4dadb-2718-40f2-852d-f0f0e5476320", "sighting--05cd9fac-e16c-469b-a5fe-864346bbb063", "sighting--bc8a5604-a551-43e0-9c85-30713c13669d", "sighting--b55813f5-319a-4037-bb21-a55eb918a7b5", "sighting--4590e374-b49d-46f6-b2a8-fc0a67adcfaa", "sighting--74a19709-2b53-4129-8809-89663c9b8ed4", "sighting--7cd2fc07-bdd7-4a18-9bca-5409236fa494", "sighting--9e9bf740-02d2-4160-97a8-1f3e6643f2eb", "sighting--53fc9fe0-ee41-4dee-a05a-a08e2076bdb6", "sighting--e0251134-7185-4f06-b5b6-718def7e53a0", "sighting--6e77a0af-f7ed-4538-aad3-058afbda2198", "sighting--864e4865-807b-4a02-a271-71a4b6897d7f", "sighting--bacb0832-f2e1-4419-9fb5-5dedd352de89", "sighting--4b38c5a9-05cf-4f0d-8a43-ca6b857c6940", "sighting--cab9f113-1af1-44b6-b29b-c5504c5ffc6c", "sighting--0b51a7b4-ead0-4605-9ffe-ff205bef31af", "sighting--3a9772a4-87a8-4a68-88b3-f13a9506d1ca", "sighting--f91baf52-3138-4f10-8c28-75fe02637a43", "sighting--75ebc838-1884-4049-ae2d-aeab3f414d8a", "sighting--d3669cc0-280b-46f8-b0b4-4d9049d861ca", "sighting--5efe40fd-e348-496e-95b0-453aa819d15c", "sighting--2fbda4ae-d044-4237-a5e2-4845bdcea797", "sighting--f8a43ede-5c1e-403f-bf2a-4b9fc4355f37", "sighting--a91463ea-e6c0-415c-bb34-216810343e60", "sighting--4c9c8aea-abb7-47ee-a4dd-9a753749485f", "sighting--33bb541c-6978-4a89-817b-6fbfd335a28a", "sighting--becc44ed-9f49-4bb5-93eb-8d5d11a8f381", "sighting--1ee84004-7187-4498-9e5a-2c01b9406f23", "sighting--75cb837c-1b9c-456e-84c0-2cc0b631f1ec", "sighting--60ded47a-4a38-4dcc-9a36-14952a53c519", "sighting--0046d98f-1d73-4f3b-92dc-902789b21ebb", "sighting--376613b4-1677-4aed-ad15-1707f4b019a2", "sighting--8de812aa-6a8f-4e14-bdae-a43b4c150a98", "sighting--56c27599-4fbb-4656-90eb-9add880a4731", "sighting--2b2b0940-6402-4d0f-b01a-cd40df8027f5", "sighting--1506ccec-605f-4d89-95d9-5f114681f880", "sighting--2c1b0a88-e91f-48e7-9640-957b4328f0b6", "sighting--ba7e672b-b393-4339-a71c-27f880c1933b", "sighting--4252785f-ac35-4f02-b09a-c1055b65e39c", "sighting--7b5617be-1a05-4aea-b483-1d8f4ca5a43c", "sighting--0eebabea-0afa-45da-9c83-234ef7a1cdcc", "sighting--bcee6457-13fc-410b-a0ff-1a933d72b601", "sighting--875b95bd-0359-4000-ac3d-b893e08c9442", "sighting--6d1e0fae-1274-41c3-9e41-c7e9f4490350", "sighting--e72223a4-e869-4826-a7bf-4eb499a886bf", "sighting--74421b68-48c8-4e11-9890-3f7716cb749b", "sighting--2f47772a-fb4d-4ed6-9780-7badf7a6d973", "sighting--1db25b77-a7bf-40ce-b183-66ddc130687f", "sighting--c616a593-ac15-49f2-a54e-627040363943", "sighting--f7e99cb4-da24-484a-bb2a-cf1df765a52a", "sighting--934dab7c-da96-4f6a-80da-c658aaf980a8", "sighting--f076bf8c-a432-47ae-826e-784b475b3a57", "sighting--8977de47-b6be-4445-bf31-ef0ab05b762a", "sighting--6c369a6f-1f3a-497e-a1de-489224c6c601", "sighting--4fadb944-527b-4e81-88cb-c388e08a49a2", "sighting--0cf09d3e-55ce-47b1-9d19-20d547703ba1", "sighting--680c7fea-1f3e-4c1f-838b-5fa99a938d26", "sighting--3a201594-afb4-4478-8c11-81dcf2e3d038", "sighting--0ac34aed-31c3-4f0a-8f19-72abd90e7a58", "sighting--c9adbb9c-1f97-4555-9867-db9fa3e4c46f", "sighting--cb95016c-27b9-471f-9f90-04fdc7d7a2ac", "sighting--be20d1f3-def6-41c2-a85e-eee218b65af5", "sighting--69bf4ce3-c6b1-4a5f-a751-81d6998ba680", "sighting--a1c9787a-50db-4b9a-8db2-c7f5c8115897", "sighting--af9f2456-c35a-410f-ab91-5178e86e8f3b", "sighting--d6598481-2e17-4361-ab3c-ea429d699bed", "sighting--b05cb195-db70-4465-8a1c-86441319e438", "sighting--bc779ff7-bc0e-441d-9f96-d476edceeb3f", "sighting--74cef223-f5ea-40d2-8514-123aaf4cf50f", "sighting--0d679970-91de-4b06-94d9-905e42871966", "sighting--1c92ae77-5637-4a97-acdc-f82ffd7e2171", "sighting--db101317-2ce3-4a4d-87d8-90095fd81212", "sighting--b0fc257e-5cbc-480a-8aad-1bb22ef13d92", "sighting--b2846640-c1e1-4533-95a1-d5350ccf9593", "sighting--60775f4c-216d-407a-97cc-a836cf494dc7", "sighting--457dc12f-c64e-437e-b338-3e24e433922d", "sighting--8173cebf-2151-4d78-873e-6269f80f41d2", "sighting--a178e016-988d-4134-81c1-eef6fe1617fa", "sighting--6c7b24f2-a135-4b0a-ae3c-a71e22cbf0bd", "sighting--934b8395-e790-44d2-8daf-3cb08ff01f0e", "sighting--f29d7791-8f93-41e2-bdc8-6ada3e5a9d98", "sighting--33961158-21b3-433f-81ba-67caec9b8167", "sighting--d2c3478f-9908-4725-9211-d761735458ee", "sighting--ac1f5430-87b1-44fc-b83b-d22842b9cbb6", "sighting--954d71c0-f2de-40ea-a883-534cd393caa5", "sighting--d24bcbf7-c640-480a-8944-c395801d7aec", "sighting--30ddecb1-6f39-4d3a-ab6a-ffccbc21bd6b", "sighting--a02a1696-ed5e-4c31-86ec-831f56fc2119", "sighting--253670db-8299-4f09-bd8b-67a41825d3c2", "sighting--36ef89ab-ffaa-4342-85f5-e7eebfe41cb2", "sighting--50266047-aab7-470f-807e-652305af6bd1", "sighting--1939845c-b614-456a-b19a-44ae6575af3f", "sighting--75e619eb-1443-4ac3-8140-f5719649d3bc", "sighting--14da756d-b69f-4c14-b3ae-4ecd2ff6e78f", "sighting--785b4c7f-9696-45f2-9b1f-4abc3573f214", "sighting--b2a6cb16-02e8-4812-8e82-2673666684a1", "sighting--ebbcf828-8cb1-4336-9d00-7d45089aa4cf", "sighting--4abe6a00-5901-4e49-8bc1-cea7f54e59fd", "sighting--04e48d00-428a-4727-89b0-84cc9c07dd8f", "sighting--c8a23862-5896-4e7d-81f4-91afe09f6e19", "sighting--7510478a-36c9-405d-a597-f99787d77061", "sighting--a114650a-fbcf-41a8-8a78-cfd271404a4b", "sighting--ba3c6a79-cdcf-4408-8b58-d655ab86492c", "sighting--e9068644-c9f8-4186-9da4-4636d9a2a857", "sighting--785e22be-7c5d-4b2a-88b5-cfa508327666", "sighting--cc7801ed-c7bd-40fb-bbc6-bcc13be69daa", "sighting--a8a5ac51-8550-49ae-aff5-57b50d938251", "sighting--e6c21153-bf21-4642-9724-9cc581e59818", "sighting--d43860c6-403e-41b0-b855-e1a3edd732ee", "sighting--b7bd085c-6221-424c-a730-410f7e2c6b1b", "sighting--3dfe9d5e-8544-4978-a93c-36d03601bdf1", "sighting--bdc08267-2abd-4924-9d12-7a2090da9d82", "sighting--c1ab3af0-a15b-4119-b949-d0fa8b6d32e9", "sighting--73cca1a8-8081-4cd6-895e-2aebcadd16d0", "sighting--f2bb1ba1-fdb7-49da-af94-762523adf167", "sighting--5037849c-10d3-40ef-941d-b2c50c7fd827", "sighting--dfc1d2bd-f95a-4def-bcbe-22a45d94c66d", "sighting--0c66cbfe-1d25-4223-b6c5-c5c99254086a", "sighting--2fc655f9-afef-4243-81cd-b30622f47e1d", "sighting--db711828-cd0b-43eb-9c69-c1da48f24ee7", "sighting--de231bc3-5c90-4d79-9ecd-cddf0f13e0b1", "sighting--a170b88d-77e1-44d8-ab75-651947ab1e0e", "sighting--3c9cf430-cdc7-4670-b686-7793b2d131e6", "sighting--6a57a4b8-8dbc-482e-8713-d9cdcb65a8c6", "sighting--05a42c0d-aa88-409f-a37f-e85003f62dfd", "sighting--46eea241-3381-47d7-93f5-c653a64b1233", "sighting--2346f845-fb31-43c5-aaed-e013bd4f6733", "sighting--09a7dba7-5758-47dd-a022-c9c0d1775780", "sighting--b4a575c5-d7fe-448b-81d9-f8b3f3e72e2a", "sighting--e7c71904-167e-49c4-a88b-7f01d6deae95", "sighting--671f8c36-42a4-4b55-a87b-12b30f91a26d", "sighting--15dead2f-9b0a-42c0-8dc1-36c14e9edc63", "sighting--d1203357-0a0c-41f2-95e4-91555d450c74", "sighting--b946af7d-1274-435f-a83b-c20b6c3167c5", "sighting--81cb99bc-f148-4734-92a9-3060ef080995", "sighting--f8de099a-b1a5-4932-9e62-a70e895fe3b9", "sighting--acc7703b-8848-47aa-b69c-cce3a247c557", "sighting--cf96644c-22ba-4eec-b44b-5e5a5f18f943", "sighting--709e2e7d-4bf2-43fe-b2bb-e471d5bf2b0f", "sighting--d2826c6b-3f65-4ee4-8722-592b9d2deddf", "sighting--4d12ba66-9f4b-4014-a959-2a3d5913d7fb", "sighting--4e1549ae-302a-4246-890b-aea8a3eaf3b1", "sighting--d57c9f34-5166-410a-a466-6d746cdcd676", "sighting--2a86f6ce-75f2-4ab1-a62b-587718c50555", "sighting--1c21b1e4-5e63-4d9b-aaef-1294a7b388a0", "sighting--e0ce03f5-515c-4d81-98c8-c9729eea37af", "sighting--b106e77a-7640-479f-98cf-68644263140f", "sighting--8f5678c3-6264-40c3-aebc-8f8c98641b21", "sighting--5140bd45-0d09-470f-ab0d-98f3113cf63a", "sighting--17477e7a-bcf0-496c-b4b1-871a52b736b1", "sighting--7c6b88a8-d15f-426c-aa18-48170dfe4a71", "sighting--287fb89d-27b6-4d14-b8cc-9896f354b010", "sighting--bdd2a3d3-ad1e-456b-b891-a8fcf791dc19", "sighting--300f9948-707f-4847-bb59-c33dd48f2eb6", "sighting--ea258bbc-b614-4995-b558-a7cf827e0a41", "sighting--2182b6a5-d1f4-4810-a9ab-5a7d6debda8a", "sighting--3e5c95a0-a03f-4c08-a015-beee33610490", "sighting--b566061d-1539-492c-bdd3-fba014029d4b", "sighting--b3add256-ed02-4da0-a10c-f60455790ba9", "sighting--5814ccb9-c5ba-4a87-96ef-1519fa71c809", "sighting--d82b965f-3474-492d-90b7-e05b9c333bc9", "sighting--f0897dbd-6d50-4bd4-9d5c-384474be900f", "sighting--e706269e-afca-4114-b43a-96ac6347922f", "sighting--8182bf04-3a81-4053-b3f8-da384adc76ea", "sighting--ce886f5e-e356-4e70-8e63-6040944fae8b", "sighting--67d63e1f-6ac3-4de8-9a06-84233e7cb16b", "sighting--bd28f505-3818-4406-b7a8-1429662f0aff", "sighting--cecc5e98-8360-4216-9a1f-bcfbce3f7e63", "sighting--abb0b78f-3036-43c0-a956-872d2190524c", "sighting--defaf1d9-1b3a-46ec-b7b7-98573baacf98", "sighting--604d7bf4-37bb-44eb-b385-47dc84929f48", "sighting--0fe6a475-e9ca-468d-ae31-72a123687b4e", "sighting--f2851080-6ace-4061-8476-d29603e10f4f", "sighting--7e396843-8cf0-4d73-a90c-81924999c816", "sighting--96d427c5-9ca0-48bb-bb35-7e8953b4cffe", "sighting--52aceadc-f27a-4be2-9d38-6fdad39f1699", "sighting--51e200f6-285e-4825-9bdf-093561c84ea7", "sighting--6bfa544c-710a-4f3e-8cda-18cc19f9a13b", "sighting--76e5691e-24a2-4102-9040-8aa35247f60c", "sighting--1f8f7c9b-d2bc-43d3-b8bc-4831f4a6b26e", "sighting--9bbbea1a-a872-4ebe-ad5b-2466ec54d322", "sighting--5dad9343-4875-4e94-b0ae-1c2978dd44ee", "sighting--17965076-fbda-4ef9-9c00-98df6880e4ab", "sighting--b1551dff-a31c-4cb7-bd6e-4421abde4233", "sighting--34dfebf2-3faa-4464-97d9-074f3cc09694", "sighting--55092710-4dd1-4779-903b-ba11030643d2", "sighting--17372d5c-0908-4495-9171-9f800905ee2e", "sighting--41f73e20-61d4-4584-aaa6-8861f8d93159", "sighting--90625a13-3287-4a93-8b9c-5d413f21e87c", "sighting--5a8b68dc-669d-4574-90e6-7171d07f55c5", "sighting--65fb5cec-fe79-4df4-9ec0-4689f259237e", "sighting--b6df1763-f418-47cf-b7c8-043c709900e9", "sighting--fe071905-4598-4255-8c0c-c3beb585e972", "sighting--1ac42304-b98a-4c7b-bd84-6742e8cc7d4c", "sighting--9d57697c-9838-4ff2-8227-4065121a42c4", "sighting--f7cfd3f8-0577-4f35-84b2-f8a71840b3ed", "sighting--daa799d9-d399-4cbf-aa90-aad27e0107f7", "sighting--0b9bd379-37ad-4590-b188-1e2932656668", "sighting--3fbab2c2-0412-434f-8397-a75e83db2f08", "sighting--5c3ace85-e757-422c-b3b6-02b02128d4d0", "sighting--173858e9-8c07-462d-b341-ae50150f5e07", "sighting--3b4536a9-6be4-4909-be0f-a28fc183a408", "sighting--9acc0c76-3caf-44f6-a4d8-7bc646ae2447", "sighting--4c172e49-f3f9-482a-bfd0-68368342f84f", "sighting--a1af8b61-5071-4ef7-8d1e-6be24840fcb6", "sighting--9b2ef740-57fe-4fcb-bb9b-3af631e1e9b4", "sighting--1cc1bcb8-7b44-4646-8caf-2eda392e1cc1", "sighting--fc7d5b03-5cd1-4794-82a9-913fd23458df", "sighting--99ca3efe-5066-4351-8347-e32b5add0fe0", "sighting--fdf6e301-5437-4669-ae2b-294c5579d55a", "sighting--ac02dc60-01f1-48d4-9f53-bf83c4cf3f44", "sighting--6cb61758-3e90-40ab-a9e0-7377a7131423", "sighting--e59bdb96-e8b5-46c3-b609-cad12ae0a0d5", "sighting--44cfda96-3424-434a-b7a9-a3fa75e35850", "sighting--b74234f3-254b-4acf-88b5-c150b2bf6778", "sighting--933aa169-fc20-4f33-ac97-450cf806a2e0", "sighting--d5a1ac45-d528-40e7-8478-92c27468dc08", "sighting--981960da-e8ec-4ce6-aa79-013339db20c9", "sighting--6b2e1f10-770f-41cc-8b20-9c53a62a783d", "sighting--c759cfdb-101c-4371-a33b-ae5f7374d6bd", "sighting--fc51cfa6-2cac-4f34-a31a-3e2fe87a7484", "sighting--c612ac54-b219-49f5-af45-2fc84237387f", "sighting--c28ac709-8a91-4e04-9caa-36ba71c68ebc", "sighting--050d4bac-ffa9-4cbb-9ae0-7990ce365adc", "sighting--5c14712b-b68b-4778-8b95-0bd720158cc7", "sighting--6d9d2e36-2c8b-443d-b8e4-6e4d14f135f5", "sighting--a9e9c618-26fc-4f00-b4a7-ff92c66f4059", "sighting--cd8f2f38-6896-46dd-879c-67272d4ccebb", "sighting--9cf278c0-87be-4a49-ac2a-ac1d8f5da423", "sighting--f8c736c3-141f-4347-a904-d6fbe5e1d8b5", "sighting--c2c522bd-712e-4682-8eda-ce41a2d41b89", "sighting--2bd24b6d-5ec0-467a-8a47-3b5db20ea969", "sighting--a75b925a-0817-4a8b-bbed-b142ea4be630", "sighting--b603c12d-8c5a-419c-a505-f459cb4bb15c", "sighting--f12782f4-34b5-4f69-b4f3-e70911beeb03", "sighting--02d54467-3f0c-4e53-be26-6ad2f6498c8c", "sighting--aee9e17d-bf57-4442-a0a7-bd07a775f10b", "sighting--f50df7b6-2ffe-4b9c-8303-31a4ecb48671", "sighting--880e5502-65ea-4bdc-a8e9-2d3ac14152e2", "sighting--b74c5dfc-50f0-4382-9d50-37a4eead1427", "sighting--d739479a-ed39-4389-9757-fe84e53620e8", "sighting--dbb15d1f-6602-46d6-bf90-120b713b29f3", "sighting--6c8c78ff-a80e-4371-8bec-e07d84947a01", "sighting--5d08d793-4569-4ad0-a96e-0c59cea53ed0", "sighting--c0ca7cea-2382-45f3-9cd6-843879089969", "sighting--25522734-e9f6-4d30-b5cd-4ab8a5906010", "sighting--589084a0-164d-4468-adad-1e92274edb49", "sighting--ab376cb2-39c9-49d1-9cf3-9f78660daff2", "sighting--974a65dd-8219-4c56-a36c-2436fc31760a", "sighting--ab6fb658-c184-4d1f-9366-bc0bd8e92bc9", "sighting--5570d5b2-9410-48d0-bbd8-2b1956724d4b", "sighting--dcf7885d-00dd-4c9b-8347-3c2395e6ec29", "sighting--0ad9a117-2345-457e-8733-e8908c6548d8", "sighting--9ad809dd-95f5-44c3-9e2a-125c10b3cfe6", "sighting--4ce64987-5af8-4708-8a86-4fdea9fc2433", "sighting--531010c4-7345-45ad-b46a-c0fd446deefd", "sighting--a6095a59-92b2-40a0-9d6e-8846e3ebbb06", "sighting--73872403-32ed-4c57-80c8-231b01a7ab08", "sighting--3a4539be-0b6d-499a-a763-16f9d8e849c2", "sighting--0bed5923-da86-4f91-915e-9183948bc2f1", "sighting--8bcdbb16-e68a-4667-ab59-c0297fb0eef0", "sighting--d46e15b2-64b4-4ad4-8967-ad603dc5bd14", "sighting--451fcc40-4688-4909-b046-26f826d9f97b", "sighting--697c9ebb-3d0d-4ebd-bd7d-3e5fff6a6bc1", "sighting--89ce541c-add3-4933-a6bf-c13ac595735f", "sighting--e890cb92-f95d-49c1-a153-ed2eefc95175", "sighting--6fd520be-851c-49f4-9fa1-deb76dfd02fb", "sighting--1f247138-ddd7-4426-a0a0-8b97e434b904", "sighting--fabe312b-7fea-4aef-99a0-51ef288961cf", "sighting--28f2cc3b-7ac2-4834-92d9-a01347798fda", "sighting--2469821d-3c48-4bec-b9a0-efb0c23b9f9f", "sighting--578e1145-6e89-4a29-9304-7458100121f0", "sighting--43dfb415-a3a8-4b2e-836d-1f73441a0749", "sighting--fdc53eee-37c2-4b16-a994-1bc154c6b13c", "sighting--336f5b9f-3286-4139-acd8-4d568b443d60", "sighting--6ea04eb2-facb-4e5c-9685-0fe5386e289a", "sighting--70485eb0-1265-4243-a371-269f2fec80b8", "sighting--d4636ac1-7115-4ec7-8dd7-91c654ff4d68", "sighting--feaf8f3f-d5b6-4c18-9a3a-54ca3e829f70", "sighting--fbb0834b-06ac-4f6b-b88e-a8e68fc5f3af", "sighting--432b247a-5697-4f77-8f9e-8c0b35289a2d", "sighting--39b6cf90-4b82-4449-85af-74a1796b63ff", "sighting--9f4a62e2-2292-436c-9a6a-dc24b5eab0b0", "sighting--b1c71b9e-4d87-49be-b92a-14eb8d6feb08", "sighting--1aebc812-56a5-478a-b027-6e923105600d", "sighting--f82d5089-42cc-4f2f-8ef1-404b13ec6fa2", "sighting--c272374c-4b1c-4e21-afae-60ff96dcdc21", "sighting--68630335-8a0c-4b6b-8323-b913d6a8bcc7", "sighting--06ef0696-6205-4a82-bd41-97cbe2208dd6", "sighting--e60bf7e7-ac2c-480d-9209-7ae8520704a3", "sighting--cbe7196d-57ce-4cbc-a4fb-314f64ec036a", "sighting--82d1ac19-b803-455e-b0ab-1097895288a7", "sighting--026a17b8-2a15-446c-834b-aa1ae63d33b3", "sighting--b61177d8-8674-4736-99cc-05cf39e0cd87", "sighting--6a04f502-56d5-4533-9d23-081cc75fcd04", "sighting--1ee88762-b4bb-4fc6-ac67-3fc486d155ca", "sighting--d6140771-39e5-40fb-9512-b1bb275cfaa2", "sighting--1aac5251-c0ea-4ea5-974c-3c6ccb76080c", "sighting--553dcbe0-cb67-4cc5-a134-9f32122c5cca", "sighting--e6cb55f9-e1fd-4279-861a-67223ae25b36", "sighting--2776b595-bc6f-49f2-9de2-d63208bb2960", "sighting--119f3563-7ea2-4747-9b90-a3081e9971fc", "sighting--21882dbc-d775-445a-b4bc-ef361da4aa82", "sighting--3adf308d-b51d-432f-aa4e-5077e671f708", "sighting--d9c56c96-65b0-43a8-9405-e085df8e2815", "sighting--2efa516f-ce51-4406-9e31-d611850a1212", "sighting--d7f210ad-1480-4673-8d98-7026fec7f298", "sighting--fc00c820-eced-4bd7-83d5-2617e6b4a50d", "sighting--1d8da646-f114-4351-b4f4-3dc28c960a51", "sighting--7e8dc4db-785d-4708-b8dd-3ab28cd5037f", "sighting--7782e135-c051-4b13-9f2f-22f79d7bd141", "sighting--d57f75d3-e82c-4096-b375-64ad6f0b50d8", "sighting--3ebc9192-a474-4823-9c5c-7123c55ec62f", "sighting--fb639f16-f557-4f32-8be9-9ef64f2f3e55", "sighting--6e7f60fb-ba05-44ec-8769-8cd351cdc446", "sighting--71bdd750-c3ab-4dce-aa9d-77f6d3010a47", "sighting--0c3d9a62-a1d8-4ada-b170-3b89705601fc", "sighting--b26268b3-c0e8-4e03-b314-6c254008f8fb", "sighting--a780ea26-127a-4d64-a04b-ace0eeb4e615", "sighting--a6a63e95-8997-4a31-bf84-5c56fae1054c", "sighting--7e69a6d9-f4cf-41f2-96ea-03a4ea0308ea", "sighting--605ce4c3-263b-42f5-8a79-2412604d4025", "sighting--96c7487c-38c3-4ae5-83be-ddfbbabeeb74", "sighting--c4c9b91d-175e-4c63-9054-cb3a6118cc9b", "sighting--bb48f8ee-fe12-40df-92cf-922a1dd14cc1", "sighting--aace7516-b99e-46cf-b7d1-137e6e182ad1", "sighting--843b2f4c-e656-4680-9381-1d22aaaaa440", "sighting--8be56aa3-c44a-4b7b-ba0a-8901e0721b6d", "sighting--e275052f-8c58-4cbc-9caa-b293ce066787", "sighting--8a30aa81-e76f-471c-9deb-0160c6ef41f4", "sighting--ac6559a1-6e14-4c91-bf8f-8c3aa53e6edd", "sighting--298342b7-404e-43ef-9aa0-06c467658d48", "sighting--cbadb96e-8b32-467e-aaa1-b9f34ed276f8", "sighting--663f401c-32fb-4bff-b66f-0a1ddd5af636", "sighting--119690fa-5c49-4aa0-9a1d-e89a068ba973", "sighting--c10014b1-4522-4b5b-9bb8-675b16ab5bc5", "sighting--90cab9db-31e5-4a74-a359-74e22482254a", "sighting--17dc1fb2-6598-4598-b77b-f228d01a65dd", "sighting--60c81c3f-a14c-4674-944d-42ce3dea27be", "sighting--599ef505-9e3b-466c-966f-006c45169ce9", "sighting--a4e51e0e-d290-49da-86a4-9b59d0fe4b90", "sighting--494b8726-8b87-4087-bf57-49942a35ca72", "sighting--a527fba0-6040-49a3-a16b-5014f0541373", "sighting--d7028ff7-ecf0-48ed-9363-c31fd6a316e9", "sighting--8ff428c3-2fdc-40cb-b975-8889ac3eb8b9", "sighting--65cd2d02-17df-4afe-84dc-acdaf0ae1d7b", "sighting--911bdf7f-c361-40c2-8988-ac98441a0ee1", "sighting--b5d88d4b-35c5-4c9f-bc0c-d34a651b527b", "sighting--ffa4d377-312f-46ce-8a26-ed2ae02e6cc8", "sighting--3728de98-4cdf-4e52-ba1c-9236d5d1e5af", "sighting--34491949-550c-4f80-a2d9-4e1fead8934f", "sighting--e0ac9eb6-f846-4988-b9f5-90e9331710fb", "sighting--dc0c15c1-7aff-48eb-9022-458c50eea7fd", "sighting--5e75e091-a24e-42e2-8ddb-8f4ad311743e", "sighting--b90db0a3-554b-4a6e-a88a-5d6961df4a97", "sighting--c4784e28-ca84-46b1-a000-bd03536c2837", "sighting--c33b1dc3-cdbf-4ba0-9b25-9e242999fffe", "sighting--8d6b1d19-c4ef-4171-8026-f5e2c7e0a3ca", "sighting--7da221c4-d80d-47af-9092-f1b0a9642e54", "sighting--b3c6a43c-092d-4265-9092-fd32be915556", "sighting--065934d0-1bcb-4866-abb0-f8c10402f654", "sighting--834041bc-5769-4abe-bf64-42c1181301bd", "sighting--05c8f92e-605e-498f-aa70-c063949c79aa", "sighting--0736a98b-dc3a-43f4-b9a0-f8ed5f7cf175", "sighting--1bfd2288-ef32-45fb-9a25-fdf7dfe5b0c4", "sighting--4833793f-ec2b-4611-9597-9a591ce8ed5d", "sighting--a27cea7d-b849-4845-af72-8b31cc4a55df", "sighting--4c61da41-cf4b-4442-bc36-2357f45420f2", "sighting--a1de4a9d-ad13-4f95-8296-43a15c7864df", "sighting--cd7bfe18-fd12-4c1b-a5d0-0e3a1283ff02", "sighting--cfbe187e-17e2-4284-a4c6-698467d3c7a6", "sighting--ea7996a8-4b3f-4e4d-a493-9323363353ec", "sighting--056aff4e-53e5-444b-b32e-5e7e33a84a90", "sighting--1cdf0701-5bfd-429b-ad61-04cbfaf3e2f3", "sighting--37dd0c22-6d78-40d5-8721-3d8af838a8e3", "sighting--a89a03b9-37ee-4e97-9a7e-d9e76fb72076", "sighting--3c3d3922-7bd4-4a48-8c3f-59e98696d25e", "sighting--26826f19-b1b8-4d5b-bd07-c480eefc46e3", "sighting--20191936-b5f7-40c3-9cd5-ad3b7ffe0fd5", "sighting--9b7f202c-08d8-417f-83a5-9af2f1978ccb", "sighting--af409ca3-df16-4b8e-bded-d7d99860836c", "sighting--7b5301b8-4818-4a01-8167-7b61f500d8d4", "sighting--7a225491-8b7e-4c2b-82a2-b841b3fe7782", "sighting--efe00344-1dd3-4f86-bd27-9d7638a86bf3", "sighting--c5411716-03bd-4568-9445-055a2392eae9", "sighting--55ef1242-1460-4d34-9499-74e9df3d5d29", "sighting--1832dfd3-331f-48af-9bd4-a69308e1c88e", "sighting--bbdca71c-a102-4a37-b08d-f89e512f89f8", "sighting--f51d2232-38d6-4daa-9882-b660b2d41bd2", "sighting--e9a482b6-ad32-48ea-895b-c37f3ee46a05", "sighting--3a576589-88d5-4664-b6af-2d5153d2987c", "sighting--4d1a9dc6-cc1f-4a02-a097-eda64d2fb574", "sighting--74f56d63-453c-4601-91a3-0de48f7fff72", "sighting--227db8f2-79e6-497f-acd1-c5437556daa4", "sighting--a3f50c8d-f5dd-4aaa-b5d9-92897780eeac", "sighting--22070771-5ff8-45d6-a92e-3288a91d9bd6", "sighting--b80dada5-a162-4127-899b-f32fd3902b5f", "sighting--d42a7e3f-b118-4b3a-a39a-d6cb06b10526", "sighting--2180a1b2-7658-46c7-b778-9979f0040e3f", "sighting--722bb6c7-0ebb-480d-af93-0cc1a35f6bd3", "sighting--8c0e2b91-3942-4758-ad29-2077afe3f586", "sighting--90a306bd-99e4-4b70-a24a-cf63af7039e1", "sighting--df731ae5-f950-4176-af42-b4443fb7b1ab", "sighting--a83df0af-4195-48a0-9325-ee2f14a199bb", "sighting--9cb43cfb-2440-4aae-9b14-28102479e50c", "sighting--8fd3458a-9a0b-4134-bff1-85e7490cb6db", "sighting--4cc53c8a-822d-4957-8c83-c4a9f4484d62", "sighting--8b66bbc3-06ae-44dc-9a8c-7f1edc493485", "sighting--c78831ff-137c-4895-ba1e-3157118cc0f6", "sighting--ddd9c4b2-3e60-4fc7-91ad-8e3bae678001", "sighting--53b4d9a3-3bb9-449b-979e-1b6b45786086", "sighting--07b80d1f-4a8d-41df-8009-09612f132546", "sighting--61ee24a2-cd49-4c4c-97ba-cd7a3a752784", "sighting--35930b57-af13-4793-ba64-446f18ed5f09", "sighting--f687c6a5-6360-42fe-bed0-50924ff1c3cb", "sighting--524af31d-552f-461c-9df4-11d26613b100", "sighting--616f57c1-8e48-4077-b626-7b2646c3d8bb", "sighting--4ce64715-826b-4bdb-b7c1-e452dc6fce08", "sighting--6ddaabfb-0b40-4552-a2b8-f47e6fc2b77f", "sighting--9f080473-3e1e-44e8-bd79-088e4564b322", "sighting--3c0a45a6-52b1-410c-bd5b-f22ba7ca4b39", "sighting--730b6013-2944-4206-a70c-46fd0d1878a1", "sighting--597222d0-58db-4f16-9ab9-3d07a8e2b447", "sighting--02f6f9ff-a2cf-4b7c-8a06-0d66409ede40", "sighting--e0d46440-e510-4515-a001-50fcc47d0ef1", "sighting--31a0ad91-0658-4fe1-b583-b2e93c54b2f4", "sighting--9cb74c56-d079-46f3-8d5d-0d8947042dec", "sighting--bb7f532a-8bb9-408f-a6eb-71013fd2897a", "sighting--1087fd7f-e37c-45b9-b243-00c71e1c3ec1", "sighting--59ca9a4f-421b-4287-b183-e1b11b2947df", "sighting--16ca8a7d-2f5b-41a6-8bc9-9654d058e1cc", "sighting--45cf551a-7155-4ef7-8301-2415b0e9a79a", "sighting--d265add4-c418-4173-aa44-26b1abce320a", "sighting--e4bb2f22-4806-4743-ba47-68a0766a1686", "sighting--57e35e93-5237-4776-93c4-520f6a755384", "sighting--feda4dad-54cf-4d0a-b43e-af01d1d4b85e", "sighting--a1d97627-b94a-4a10-8923-c00d50de2f50", "sighting--ec90f034-3659-4757-a2fe-ee7a940c4991", "sighting--e2e7c5c9-5c02-4f8d-accb-80b1a304f40a", "sighting--55ce5432-848c-4111-b97d-191f855e8c29", "sighting--6d3fed17-1f8a-4d48-a482-0dd4304dc3be", "sighting--95e4799a-2288-4ab7-b17a-0756096a3011", "sighting--c9d507aa-74d0-4d81-b6b5-105168508bca", "sighting--be14a6dc-edc4-4112-9104-4df3a366344d", "sighting--f9a1276f-712d-46df-9476-469210c52acc", "sighting--d055cdd7-32d5-4f5f-9ea8-1b26b8bc91fa", "sighting--0c6316d8-48a7-4708-a6f7-b41d56c48bd6", "sighting--bab9a21c-33b1-4983-9efe-46eecfbdd8c4", "sighting--25dee454-cdb4-4602-8125-bbe3e5c030a9", "sighting--0efddc5a-93dc-4c5d-8a9c-3076ec778ff2", "sighting--561b4615-e922-4cbc-9acb-953971f4108c", "sighting--b9efc34c-551c-4a09-9e7b-7014d997b207", "sighting--62ec3169-f400-47e9-96ef-72ece0e176a0", "sighting--aa76c27d-1c19-4e85-a5ed-764f8f5b73ab", "sighting--a5bfb359-5672-49f0-ae2a-1ca5822868d8", "sighting--d7a9f66c-b893-40ff-88ed-a4070b68394d", "sighting--5c73dcce-0d01-4a29-9e90-24ccdc407344", "sighting--22076388-59ae-4bcf-87e0-bc7b18cb5ef2", "sighting--dad4a82b-bf32-4e06-be7e-5a8b14865f74", "sighting--ca800d2a-5062-4621-8199-d1a6ec94aee0", "sighting--be181dc8-c4cd-4571-9af8-567b47331d31", "sighting--bed90cf1-a1bf-4d6a-a2e2-d4d460649cc4", "sighting--c25c6f39-9187-4f7a-a429-1fabb045e9b6", "sighting--5b67c20f-d0f1-477d-b98e-d8c3dab08ccd", "sighting--af137d5c-f4fe-44e1-85c9-7512ceacea4e", "sighting--fc6c0d37-d9bf-46d5-9725-e4e46b6d8726", "sighting--022b3447-f1ca-46e6-b7ef-05c6271934ca", "sighting--625368d2-7e6d-46e4-aa5c-616634c7e28e", "sighting--c14adcbc-0f47-4c3c-9813-a903d424da7d", "sighting--d53528f5-529e-4e34-b401-1427aac7312f", "sighting--efeda09d-1059-477f-8a4b-018e1b27b56b", "sighting--bcec3e5a-d57e-4ced-98b4-e0771eb76750", "sighting--7adfd059-70a6-4f9b-be25-f9fe5dbf3a25", "sighting--db35f167-bb9d-4bdb-8137-d5062986af81", "sighting--1f1ac22d-7c72-44a6-8fcc-60d6f752a10a", "sighting--468313db-3f20-4c38-b2f6-b20b02415d23", "sighting--544f84c0-be9d-416f-a99c-2a8d40aa3db0", "sighting--4eb7bca9-c842-495a-a970-8442928fd5e2", "sighting--c4b4e75f-aa17-43b5-831d-94a78819671c", "sighting--5f9520a0-1853-43c1-b951-7d58589bb0d4", "sighting--84138e9f-ce7b-484e-8806-52efc61e85ea", "sighting--79082618-98f9-490b-b9de-822442b68317", "sighting--c4b91fa6-35cb-4466-8410-e9a955d1f063", "sighting--3994e03b-b10d-4823-a6a3-753398341580", "sighting--00a4a159-0596-4169-9de5-0ffc46b556f5", "sighting--cdf0876c-8a57-4cad-9449-a9c9e0a48edf", "sighting--f7d2fac8-9429-493e-a5d3-5aa8a21a518e", "sighting--9f925b86-d7b8-4fa6-887e-2cda1fdcee4d", "sighting--30600b0a-d846-4b23-b3dd-1fee80ef1a11", "sighting--b944b87a-7f4c-452c-830c-2ecbb2580522", "sighting--81dca3e3-b963-4e6a-b2bc-35aac64a1669", "sighting--9ededb04-33b3-40fa-b485-c1ef15ab0249", "sighting--03902538-d74b-41c9-be4a-053805bc0c82", "sighting--10bacb3a-846e-4562-b83c-52b31226f4fc", "sighting--bd8a1fba-1c06-40c0-8add-3c8915939738", "sighting--4d849520-b2d3-4db8-9182-cc0f0f9a8f35", "sighting--e861a4f7-bbcb-4840-a372-da96b2d949e9", "sighting--2218b94f-35df-4e25-9605-d23421835e1c", "sighting--362f05ca-1dc0-4d82-a4cc-6627089e5ce9", "sighting--21c8caa7-7077-4021-a746-eb3391e0d974", "sighting--90bcd24c-136f-4b5d-bc31-b4e6d7dbccc6", "sighting--410d7194-e49d-4662-880b-b922d4099920", "sighting--3e26e4d2-3bdd-4841-b73a-62e49803a760", "sighting--160817e8-0d92-4975-93d3-9cd2e8368ae6", "sighting--a12694a3-35e0-450e-9914-e8c73f21a682", "sighting--dde245fd-37df-4cf5-a166-26c34bdf509d", "sighting--6427b33e-73ec-4b99-bb35-878cc42d749b", "sighting--b52114f7-2955-4281-8dde-fcebf49c204a", "sighting--3b9b2615-56e0-4acb-8ed5-79d6ac6c2d4a", "sighting--c78fb77c-83ae-4d5e-b7bd-7df3e0041eb6", "sighting--57314606-e0f4-4797-876c-1b6fabc9ef3c", "sighting--d4013ebc-355d-408e-a164-2a719507b5a5", "sighting--9551907e-d28b-44c3-8f03-96d90c837d07", "sighting--09e458fc-2957-4720-a03b-eba3fc975188", "sighting--cb4a2564-02da-4977-8fef-097f1e0acf54", "sighting--343aef8f-dd66-42c5-ae8e-ac9659adda17", "sighting--73e88adb-b534-4925-8a9f-1f496f8c7a4d", "sighting--3a8b35d5-9bb0-48f4-89b6-6b6ccf157a6d", "sighting--fbe0f0d3-d0b9-43fb-9e08-304c46c8c68f", "sighting--09faa981-14de-429e-b6e4-99c2955d234c", "sighting--7a60e80e-02f1-46bb-a695-5491ec97f5b3", "sighting--7f8a00b8-1780-4077-967a-3f0f014e36af", "sighting--523fd6cd-1c20-4c10-aeb8-5aff5ff0443d", "sighting--e5aaced8-c265-4d6a-a210-a4a1da71a5aa", "sighting--1c49bad0-262a-4e9f-ab60-73cb81e37318", "sighting--278d5387-f7b6-402e-a10e-2bd664ff4d2f", "sighting--a3a148a9-a8ec-4c61-a867-2253c4501ad5", "sighting--c6eb8847-2229-492a-b686-10206f3925cb", "sighting--fe5f622d-72b8-417d-8342-048449141574", "sighting--1826172a-f7b6-4c66-9189-59e3bb083995", "sighting--b0667804-4e4a-4fed-b1e0-7b87002f5e89", "sighting--413c2da9-af19-443a-9233-64d72668e710", "sighting--4085f10b-1734-4d50-8f9c-0e23f2b4fd08", "sighting--fca02e10-238e-447b-ac12-e6ba6f504bd6", "sighting--c1745a3b-8bf5-4456-99c0-a03fe5931b30", "sighting--75d249df-2b3d-4e4a-a6f1-58cec6ef9b0e", "sighting--cb180dbc-4397-4c2e-a9bd-b6dd4efc19c4", "sighting--a7d9075d-c69d-406a-ab8b-9ed7bf26d6c8", "sighting--dd688d79-e6b2-4088-ad64-31d5dd612b12", "sighting--2d5905e1-5d14-4869-bd86-49913c1b277b", "sighting--304a2810-04ef-4f8e-8cfa-2b743906c14d", "sighting--6917debd-7aea-4964-888c-a65aca856a63", "sighting--30888a58-b893-4b0e-a69c-08514e8733e3", "sighting--0d6f5d65-14c9-460b-8bdb-98aa0dc6f1d9", "sighting--435fc8db-c42b-420f-8fb1-d488a3ffd254", "sighting--597579af-63f9-4506-9e6b-7419f1602306", "sighting--7bfb2871-79bd-4776-a567-79bea1eec4db", "sighting--87df7c59-2a71-436c-970a-eb8fbd47a123", "sighting--be1cb9a1-a32f-48a7-9888-3697c64b5459", "sighting--f26705ae-4ee9-4a0e-bfef-d0ff005f5df5", "sighting--611f829a-7624-4cf5-ac18-43c98b991876", "sighting--7c8538d3-244b-4d2e-86bb-6923105ce6ae", "sighting--2e96dfbe-e7fd-48b3-8ca8-a8a17bbec8f2", "sighting--f16dbdb1-f388-4a18-9bf5-3581bc1d6e9e", "sighting--843e9d12-95b8-4efe-9ed0-3729c4debf95", "sighting--345f571b-dc0b-4458-90b8-eb7429300315", "sighting--215fdfb8-0fe7-470b-9b9e-2bc6831770aa", "sighting--ea2a9484-6523-4003-9f81-8d92391a3931", "sighting--6e9162d4-2dc7-4746-97c9-897a1e360938", "sighting--a7780cd1-36f2-46c6-b727-f83de3201678", "sighting--212b494f-f526-49df-8822-786e39956762", "sighting--0df26787-b946-4872-b882-c5bc664877ad", "sighting--95b2799b-c949-469f-a51e-53f1ec5aabe8", "sighting--1645fe70-d994-4ea0-acbe-a3a118bfbead", "sighting--1f93d312-6492-40b3-b461-1b1404039471", "sighting--2031e286-588a-4b24-b3cf-c3387d813177", "sighting--e6f27314-2fba-40e4-8986-b1d96bc75179", "sighting--de224466-5535-4289-aaf9-3a20e65b0dc6", "sighting--6d5f13dd-899d-495c-99e9-abe6097f914f", "sighting--f03afdc7-ed8e-458c-812f-ab98df12631f", "sighting--ef7cfcb9-8979-45bc-bdb6-258595798b25", "sighting--2e20e8c0-9e36-45ce-a7b0-7eb959164ff8", "sighting--83112ca1-b883-4e0f-80ee-f9ab93224508", "sighting--a5b3c3b3-37e6-4825-812c-c9cce8c7c802", "sighting--89b3f17c-a2c7-4bfd-8c4d-f8289f5ac8b2", "sighting--e206c559-6442-477d-9b5f-2f621a22aff6", "sighting--1ee24da5-132e-4dde-a524-2aa6846e8f34", "sighting--b9baa8e7-fc4d-4148-9de2-f34f08b188eb", "sighting--24eb298b-23fe-4be1-9178-fef86ab5489d", "sighting--c4e3f38c-255e-41c2-8ef5-a443dfd40cc9", "sighting--ca3d9e3b-791e-4739-aef2-915c53a530d8", "sighting--1e2ff0f5-b80e-4352-8112-3ff37fa3f471", "sighting--748ceed6-cc19-4899-8e91-0ad08daa5f86", "sighting--2d91977d-fd32-4c54-bc1a-df6addd592bb", "sighting--aeac901b-5a8c-4e2e-a9c2-cbe2cfa69d95", "sighting--89e0dfcf-673d-41d1-9ed3-564853d38635", "sighting--f71c20fa-1623-4690-baff-9487699a9bd5", "sighting--2015e013-27ba-4266-a422-2046bf417ef1", "sighting--3a3573bf-07ca-4cc0-9609-30d219133bbc", "sighting--984c83cb-09ee-43c2-a4a5-3d0f5af5076f", "sighting--389792de-94e1-4bee-b262-d7a333971b78", "sighting--ec7a950b-4ba7-460a-8213-f8abe85b9dd7", "sighting--7381b677-0e5f-4a8b-9545-38f127401acb", "sighting--f9db6fc3-c625-4d86-83e1-8f64c864ca3f", "sighting--558a854a-9055-4202-8334-afe99e2f3c82", "sighting--56351d83-70b0-4cfc-a9ba-fac35013577e", "sighting--bd9e7ed9-4a5d-498e-a1f4-fa9cc410a9c8", "sighting--fff3738e-b254-4624-89e4-11ca32b595c3", "sighting--98c47860-2984-453b-9064-37575b548989", "sighting--859eebd0-b7b7-4f51-8de1-3c9e296315a3", "sighting--0073053a-c23a-4e46-bd11-8085a2ac0567", "sighting--b1e87473-5ef3-487c-b179-6d6672d6a8d1", "sighting--a4935d0c-fe2f-43bb-9086-de180e6bec78", "sighting--6ac45d73-f5ee-4a11-b6a6-c3082d995ebf", "sighting--7f4a0b10-4358-47ce-aacd-06d08836bb94", "sighting--cec55199-10af-4dae-b3ca-baaed2016d1e", "sighting--cbd757e4-817b-4acc-a6a4-5b82797f29ee", "sighting--d93c535d-78b8-4f61-b0b8-4eaec8404087", "sighting--f1ae77cc-ccd3-408f-adb5-e3d89cea5686", "sighting--04a74571-54de-4893-91ed-c69816d233eb", "sighting--fe45f9a7-c980-40f8-8c0c-537759e127be", "sighting--257db7ee-d3e3-475c-9061-eb0cb2859f16", "sighting--ccdd6874-44b0-4201-b853-727b15137d02", "sighting--c91095cc-eab2-49a7-b2d0-4831d984de7d", "sighting--77716e01-0c75-4eb7-acaf-8d758eb5395a", "sighting--0c9d62f2-0536-4c67-9c7f-00114e9f38b7", "sighting--e058dc93-00d6-4b6c-accb-7561eb6dec14", "sighting--15b573d5-aafe-47dc-b7a3-d25c7b9d90a6", "sighting--f0928b63-a9b5-431a-85db-a61b764693ac", "sighting--e7326fc6-4209-429f-826b-9791ec1f241f", "sighting--8ab9e15a-9626-404d-8714-89b57f606824", "sighting--10eb278e-0c98-4799-b08f-104aa3b8f44d", "sighting--26d023d8-b125-4342-9dc4-4a5b5c54d427", "sighting--f36b3953-1dc3-4791-9f62-b5a38de07a43", "sighting--bdab2c93-075f-4fcc-92c9-f67166a84054", "sighting--6e1bcee3-3780-45ee-9dae-61c6a158de2f", "sighting--6cddd2dc-ed7f-48ea-8dfd-196bf2914fa8", "sighting--b0518b12-f17b-42dd-9fdf-cc1b9c02ce46", "sighting--8428169d-aca5-449c-a8f3-ea05e61d0e02", "sighting--09792a49-6119-4bda-ad9b-b578eb492fc9", "sighting--77e99771-b07b-4348-9788-5d2a285bfc32", "sighting--045b7871-93c7-45ca-b819-3eec7f9b2e6f", "sighting--1985a0f4-edf4-4a7b-b9e6-b52cb5d1d6fb", "sighting--aebfca5a-b5f2-4210-b838-199e977bc6d6", "sighting--6829c12c-a11b-4fee-a640-f585ec1c0976", "sighting--c7622806-7320-4407-ab11-56b1449b2378", "sighting--d5577098-15ea-4c2d-8c49-f529e7ffbbe0", "sighting--9aa19475-7934-43d0-9fed-646c3d0c217c", "sighting--40a974f0-5482-4dd1-9249-07a84216f1ae", "sighting--763c4b2e-c1df-4d31-baa8-6a127d468eb2", "sighting--ba97bd70-d1a5-4182-89e6-eebf36375001", "sighting--0ef2225b-f5a3-40ba-bb5a-466ffabf1c1f", "sighting--5761ce60-d608-4efe-a173-a0f1f3c0bf47", "sighting--a7eebf95-9ef3-4350-b513-1eda67aea86e", "sighting--7555c5b8-a130-446e-8d40-a7d0416c2fae", "sighting--c7e0ca47-5910-4bf0-8ac2-3a7f6479624d", "sighting--1b0d37d3-91d0-49eb-85b5-6a427145b7bb", "sighting--89f37c2f-e7cc-4192-9171-8fcd14192db6", "sighting--8fb01858-fa18-4139-b60b-5634cd9485fe", "sighting--4e992550-a719-4598-8bd3-b0f6f0532cd5", "sighting--8937cdc5-509c-4c7d-8147-e1712d772e29", "sighting--de9a65e9-91a1-4acf-b152-5cf72d87da3c", "sighting--92969086-2fa8-4508-89ba-85b224dd89ca", "sighting--7dddd76d-81a7-4d28-a65c-a93ce7c68642", "sighting--cc22b6e0-05e7-4801-8e09-9652e77257fe", "sighting--64d61d2d-df28-4667-8346-49c0241e3a68", "sighting--06c9fdec-5ab2-46cf-9af3-e2f4c17be92a", "sighting--11c2a7c0-3323-4962-9e8c-31e62769d78d", "sighting--de6bd508-0806-47be-94cd-fc8cfc0239ad", "sighting--97aac2be-f5a0-4a1c-9a6b-240695b244b1", "sighting--6baad786-9fb1-4dd5-8b1c-cca676bf04b1", "sighting--c34f91a2-ab8f-42d9-b372-bd9a81588998", "sighting--81e85cad-b963-4a93-a651-ce68c76d8e3e", "sighting--0b32019b-aba7-4fa2-aa4e-fee1a5700196", "sighting--619bfd65-47d3-42ef-95ba-9b5de079dfde", "sighting--42a976f6-49c2-40ff-8e5e-96e8ac963fe8", "sighting--e36c4e1d-0ccd-4c2a-9005-da86c119b18b", "sighting--c36afdf8-6781-4f8b-80ee-361aad678250", "sighting--25299289-f156-4178-9927-8ade3821d8e5", "sighting--f1b32374-fadb-4cf4-bd65-3a85d5379c7a", "sighting--65674410-05cb-4c47-91dc-2abe38f6ed58", "sighting--f6191757-ae66-4e7d-b217-8cd19e788a22", "sighting--7c2d79b1-2455-4dee-a85f-2d6b9f267759", "sighting--854e997e-112e-4f55-8190-8aed8009d098", "sighting--933a5f04-fcdd-4208-a5b6-6bf7f0011d97", "sighting--8a3ad4a7-33c6-49d3-860d-ce408dfade82", "sighting--6ba2342b-97d7-4b93-a26e-da4cb53666f7", "sighting--c2afb60f-7607-4b10-9307-94a680f61821", "sighting--f7fbeb50-896d-4ce4-a1be-189dfae5f323", "sighting--a28af6bf-c933-4251-94cf-37511b583ebe", "sighting--5578ea5b-4927-4170-b8ef-efe545288de8", "sighting--9e9c583d-d775-4440-a56a-e6c4b44b8eed", "sighting--725155f1-9794-4bc4-8a52-730fe9fb09ac", "sighting--af76e17f-98fe-4cf6-a1ad-d5f6987c67df", "sighting--2a78976a-8032-40b9-ac06-da378d8c0ed2", "sighting--0897169e-5814-4e36-8a34-176114b7c5ab", "sighting--dad6771c-85c3-4075-99de-a4bec20eb635", "sighting--ff7eda2c-b486-466f-867c-dbda3e50d6e3", "sighting--ac9d7562-38ac-4276-8f53-0ab7b228830a", "sighting--438bbc80-03cc-4fb6-9db4-ae893d9ba76b", "sighting--490ea50f-d90a-48be-90a4-46672d45281d", "sighting--b258739e-2a7a-4df7-a9ce-d7d42fa9e3e0", "sighting--b29cbd28-7779-4152-a6d7-c6fc2dfcf792", "sighting--8bc5c94a-5f90-4c53-83a3-60a3ef6e49c8", "sighting--2ec2c91f-f356-4146-9cd7-90657401d478", "sighting--a16dfb53-8ea5-4c2a-8a3d-12283fa28409", "sighting--ae92a0d4-6e2b-4502-ae0e-23e082897b39", "sighting--dbd70f7b-1982-4394-ba11-b432f37ee26f", "sighting--6e401088-0b33-4286-9183-02cc4e064737", "sighting--8233c430-2a0b-4588-97a3-152d389a137b", "sighting--2b9b3b15-8f6e-4a80-888f-44e671e3c55d", "sighting--9da34592-21aa-46c7-b467-554cbe4e1356", "sighting--25bc2542-820c-4556-b443-17a4ad305a05", "sighting--cf53c001-255a-4992-b3d0-4331e0da778b", "sighting--b678cf26-c6b1-4e8a-a330-c6171390a9db", "sighting--dda84e4c-ec20-406a-a3b5-24920122f085", "sighting--d111cbec-c61b-4f58-a47c-f53d474a02af", "sighting--2a969eb3-7ac5-4c4a-bb99-4abb9093ebd3", "sighting--a5c180d0-3428-46c4-bed8-04342134213c", "sighting--43a90f20-ea27-4d5e-bca1-d5eaf2983232", "sighting--1b7f0741-1c83-4b93-9665-4fe45fb1ec01", "sighting--9caa0304-5569-44ae-9bb2-a121ba102990", "sighting--3b761853-f488-4d6a-b62c-f849ca2ee14d", "sighting--6990195c-e573-415b-b31a-e4507e5f6174", "sighting--ea0cc3aa-44c0-41e1-8b84-07f597a5afb5", "sighting--87fa5b72-b579-4419-9113-0d493189c0fe", "sighting--c88c373d-056f-4dee-99a6-13ad3fe1be41", "sighting--2d744161-6a96-4287-a97f-daf4f2920655", "sighting--b85ef78f-d1c7-4760-8205-f6c56307f226", "sighting--af62e767-8ecb-4feb-a1fc-b607ff322707", "sighting--89bd64e7-968c-4ed4-a990-36fd286b359c", "sighting--29d26cda-2a4e-44ba-907a-a6207be2e4d0", "sighting--857e6df9-d7a3-41f1-a99c-cf2d89e72f8d", "sighting--f41b697b-eb94-4378-b26d-f2edaa13bd8e", "sighting--0249c411-a7a9-4fc3-b2a3-a0a527297017", "sighting--9cd5596d-901f-4b64-9e39-1f9ca25adc14", "sighting--6b50c105-488f-4394-92a6-bebbd9946931", "sighting--9f5bbbb8-5154-4db3-bf71-cbd5c1617aae", "sighting--b4c6a45f-308f-473a-8d5d-d9fc0578ed1e", "sighting--2c189d80-00df-45be-95aa-91d6a65a3ff3", "sighting--55b91bd3-8ebe-465d-9a3e-ad549d7f4e5d", "sighting--4f7d65bd-52b3-4559-a3b3-f023aacc6b3c", "sighting--aaf188ba-ec15-4237-aa87-cf2b5b4ad446", "sighting--5dc936cb-eed4-4385-835b-c350b2c870fc", "sighting--8d790cd9-4d2e-4518-8ae2-75a3e782b816", "sighting--542e18ec-3b30-49b1-ac98-c4c88de2d81f", "sighting--dd9174bb-29b5-4190-a657-518b29850102", "sighting--94be6900-7938-4ef8-940a-2ebd6f3a53f3", "sighting--a45a4b47-26bb-41a9-92e9-f742bb6d7652", "sighting--b6bf411d-88b2-4003-8ee9-76b34a1a870e", "sighting--c0ce4ec6-3b5f-4e4e-900f-c9412490342c", "sighting--60e71235-0cd6-4c95-b36e-cabef3a2739e", "sighting--c3830c42-4f51-4cda-9622-17997acdd8cf", "sighting--ec5ed803-856e-4f1b-9f6b-f6bfa40cc221", "sighting--91a5505b-0a89-4130-bbbb-9ad7bfa95930", "sighting--f3616dc9-499e-46ed-9e8a-17cb5b9a935a", "sighting--a081153f-a69f-4f1a-a883-b265b3c7a930", "sighting--af3ad898-e0e1-4ddd-803a-ce7b7740b22b", "sighting--202f0bc0-1a84-44f2-992d-abb0de44a0f7", "sighting--fba82f20-24bb-4cc5-8e34-26808e6ece87", "sighting--f4c5b875-c695-4a4a-8b37-c77c91d8e64b", "sighting--78765694-33fb-4389-a908-46f69dbd3607", "sighting--27721115-e6bd-4239-845b-62eb98a88d66", "sighting--2075ee5b-8860-4822-8e5c-2dbbea29a5c6", "sighting--55a7961c-23d1-4b90-a2d2-177e93b76e8e", "sighting--1813c5d9-c7e5-4b9d-9118-974edfd91bff", "sighting--3d814433-cc23-44a9-a027-29fa700b3ad9", "sighting--58368789-d7f4-42a6-a6e6-8253d0b31fc3", "sighting--73ef715f-a888-4094-b273-6af72fbcf1e8", "sighting--ebd6dd65-1a86-45c3-a11f-749a014c014f", "sighting--0fc2657b-0c15-4dd2-b6ce-387c9f1989f4", "sighting--ef20ce97-5504-40ee-8626-0d3baf45cae0", "sighting--6e593465-c887-4909-afbb-0bc107ae56ca", "sighting--4b1c13ec-ae62-445a-96ac-ea3a6dfc5465", "sighting--3888e81f-2750-43ec-852c-596ed4c07064", "sighting--45834bc9-3359-4a29-ade8-8a19fb24958b", "sighting--35945079-a172-43fe-bdd9-46239bf901bc", "sighting--1e288239-6a9e-45e2-8056-3211496c9d66", "sighting--5d3efd35-c242-4086-a629-0fe29fddfe9f", "sighting--4a4193b3-3063-4f6b-ace6-2878afa2a9e0", "sighting--5da41465-569c-4acb-b2da-d6dc7e95f336", "sighting--0c749b50-d735-467d-9a7f-c0d67365e6f8", "sighting--688334bf-b690-494f-b8d5-17da7f816a15", "sighting--7c3ec5b8-2672-4ad6-8494-374c57273810", "sighting--216c6fa9-3a15-4511-8447-0e7d302b059b", "sighting--a2ee25ef-4fad-4470-9bfb-7c5a122580e2", "sighting--400a9021-8749-4d08-ba1b-cb7b4fca5d2c", "sighting--afb38f2c-a996-45d9-8c4c-330f19cc7588", "sighting--8d80a54c-2d74-436f-b4eb-76a99a1538d0", "sighting--6875e141-9fc5-442b-8da1-0a777c66cee5", "sighting--5597bc17-f3c4-47ea-ac9e-f7754b6d2c83", "sighting--02286259-c955-4605-b3d1-58222661e024", "sighting--93714959-3e8e-4271-8128-40da5c6c807e", "sighting--b5c116d0-3eb0-4d40-b69a-f9a80011ea5e", "sighting--846a6a06-1c4f-4660-b0cf-12b4fd0cce66", "sighting--a50ddc9c-c903-429a-b5ac-30386440960e", "sighting--d25c423e-7b5c-4a3a-9e8b-5877ddf5d0e1", "sighting--298a9ade-3791-4021-b8a3-7f460606ca22", "sighting--5e885eab-2a88-4522-aecd-76361b42e142", "sighting--47ea0e77-011b-464c-902e-96c02e7af5a4", "sighting--3949ec1a-10e2-49a8-84d1-8aa81994f3b9", "sighting--9c293f87-ca36-4432-adfe-cde89da5167b", "sighting--cb47fa0e-79e1-45d7-842d-1753fca80ed0", "sighting--3c169fe8-0098-4bc5-a9eb-98f621404595", "sighting--934b2ce7-00cd-46f2-a817-b89d2ee36a42", "sighting--bb959e27-712e-4d39-a4b2-e2a0b045d26b", "sighting--6d20df8f-7628-42f8-ada5-20d5cabab4f6", "sighting--4e6eebb0-0cd9-4470-8b5f-eb8cc954d442", "sighting--e6cfbd5e-8bfe-4bc7-b5ca-b939f071631b", "sighting--57835f29-0c4d-4bbc-8b6c-e4189cd6293e", "sighting--bde7d947-eca1-4394-b43a-52846c1b3d78", "sighting--466a20c2-7c23-4776-be1f-2056155a96c5", "sighting--a629499a-a137-40b7-906a-2913b4e0eefb", "sighting--f012cc56-f104-440d-9a48-4944c9a61a30", "sighting--8a451e2a-3761-4a35-9fa5-e0407cd64feb", "sighting--7e405bee-32d9-47e4-929f-df2a68cdbf02", "sighting--b3ff33fb-e6de-462d-a1b8-bd0cb92ea715", "sighting--4fa418c2-4b8f-49d2-abb1-686d936c698e", "sighting--fc9b52a4-78ca-493f-8ce0-e55f61e7bdd7", "sighting--83b04743-192f-40a9-9a82-78e4766e051a", "sighting--9d1dbc86-df01-44c2-89bb-215fce2ebbd7", "sighting--a4b6a330-df68-4d1b-9322-047c815a5d92", "sighting--048fac53-49f9-4ad6-a44c-82f13cb7ab91", "sighting--550bb717-e61c-4a6c-9603-46a9f7e32e79", "sighting--4b393428-dbaa-44f0-a010-1ac1caf7ea11", "sighting--929c2156-4dc2-48d6-a11b-8027347f9b5d", "sighting--c8cd268b-a325-427f-ad0e-d96beba3c26d", "sighting--ff856dac-fcde-4fab-aec3-842d4a91433f", "sighting--a065fff5-61b1-4913-a2ad-1fa1013fa7df", "sighting--d5579cd5-b727-4500-a6eb-9d1b50132ecb", "sighting--b77cc2a1-24fc-4c51-9f96-7bac0fcc5c9e", "sighting--ad84eaf9-2687-41e2-ad4c-c342f314d158", "sighting--cfc63a05-d06a-40fd-86bd-c53e6e4b636e", "sighting--bf878203-c70b-495f-b7ca-e9733931598c", "sighting--7097475d-26d7-4ed9-8c95-5722146af068", "sighting--899179e6-f74e-4324-952e-dde9da8ce477", "sighting--fe0f6ba7-9d9a-4adf-be52-84b1c6f1602d", "sighting--c0fcba29-8bf7-4638-aed7-f54affa40119", "sighting--e2a09d18-a19f-43e7-962c-2cc6bb862b4c", "sighting--f35fb029-b7b9-4412-b769-58bbce3231ad", "sighting--cc7a464e-800d-4696-a0c3-2f41caa4edce", "sighting--46b7359a-465f-494f-9f71-c5b41bc584f5", "sighting--c0190e0c-99c0-46cf-83f8-823ce5d598ba", "sighting--394fdd92-45e4-4122-ab9f-8886b650ab50", "sighting--af9756cb-c455-41f2-815c-56d7697a31cb", "sighting--a200e597-b766-401d-b982-3ed9bb96c5fd", "sighting--ed398c94-5409-4972-bc47-e2229ec34bda", "sighting--fd925f1f-ceba-4b3d-8622-84c1c2070f39", "sighting--24b0ce0b-15db-47ab-a36f-506d06fe83ca", "sighting--be6d79b7-332d-4b57-8d3f-bfd729895f25", "sighting--9b40dfb5-3ced-405a-8827-7bbc172701d3", "sighting--f3a40710-5915-4efc-9292-d471b97565cf", "sighting--81bdd73e-2c52-4a5a-ace6-3bad9e2d7789", "sighting--7aa1d064-f2af-4b79-85ba-0efd76d7d4be", "sighting--0cccc5ce-13c1-4ecb-9d82-62358d17a869", "sighting--678914f4-58e8-4ff4-a443-e11ed1e2d218", "sighting--0ce3e767-bbf9-4fbc-bd50-08a72f2c472c", "sighting--cabe4997-bf10-4972-b344-32355ef4a316", "sighting--77b1ee17-ca32-4365-852a-73a46d2ef54c", "sighting--9108b805-3914-4ccb-b796-9f568c3509ab", "sighting--d6216a29-86d0-4691-aae2-236751a5cb95", "sighting--3077ee46-aa18-4132-acc6-112d6e83deb5", "sighting--edffdb99-f6eb-40d2-84b2-a67c860161ec", "sighting--e44f8187-e5fb-45f4-bde2-8d4d70639216", "sighting--37625663-07b5-4be0-afcb-d1baa68e5dbe", "sighting--406a5043-b26a-4a42-8fcb-89148283980c", "sighting--5e6d0dbd-0d0f-466f-b76d-6bca345fbde8", "sighting--c486bf5f-e8cc-4e42-9a04-295d53ad4e80", "sighting--0bcb6caf-737b-44dd-bc8b-c57ccb777242", "sighting--1cab89f1-5261-4471-bf24-e885ba4cfb5a", "sighting--c6ab1de9-cf04-4aed-ab70-14bbb6116521", "sighting--f749dd16-738b-46ee-adee-764591c4b67f", "sighting--46b42308-285e-4528-82db-9d4191ef639b", "sighting--e1dd1c54-bba9-4768-a71f-f4c8b7b25c46", "sighting--e2597986-9d5c-4a1b-9ca5-c242458370fa", "sighting--50974dab-c39f-4741-9316-ba3b661fe5cc", "sighting--b9b812d8-019d-42f1-a2ed-efd3566f0e59", "sighting--3041127f-2bcb-48d3-ad12-6748fe597c83", "sighting--7cb918cf-7a0c-4531-bfa9-4eba4e5cb49f", "sighting--95318c24-11f6-4774-8281-1f077b6cb7e0", "sighting--efe76e68-cdee-49d4-b671-bede33e1b5fb", "sighting--28b8856c-2c34-42c6-8c3e-a0fe82ce3a93", "sighting--2d6557b3-1914-40c8-a2ba-7d8cadabc536", "sighting--a7463103-1817-44eb-8532-618e6dc4a5fd", "sighting--fbf5ce6b-4500-4fa9-a58e-09356f26b5c7", "sighting--f6861b09-86f4-4fba-82c5-e91f4b5f8351", "sighting--b226c7a3-9380-4ff3-b0c8-64a809c3a881", "sighting--b3110e6d-0d42-418d-8b51-ec4d59677340", "sighting--258e9b07-3325-4335-9dfd-cec4823c1de9", "sighting--a38e1455-c068-4b1b-b7d4-3afb4e421058", "sighting--f742fbcb-0816-42db-b677-7cea43882e0e", "sighting--919d8ea5-6904-4ea7-b53d-feccc2817fd1", "sighting--844a6997-8a86-4a08-810f-34691ce0f3a4", "sighting--1c08a9e7-e85c-4a72-b117-69ea2c609e61", "sighting--2c0da3b1-95f4-418c-b655-b72ed362c937", "sighting--0dc05aa0-e7ca-4565-a5d5-86b4f5a0ab5f", "sighting--55e70428-550e-4dee-b2b6-1492cdbe6333", "sighting--fc82d638-9764-402f-b4ff-27923ec032fa", "sighting--e64bee8e-738f-463f-97ee-7b3d834eede8", "sighting--218e8f0b-4a1f-479d-84f3-7306db25f64b", "sighting--812cba11-b37a-461f-a981-027b160017c3", "sighting--cb266b90-3823-4c09-b8b8-1620a381e94e", "sighting--c6c65c55-79e1-4810-a890-dbae5db41abd", "sighting--61fe5b8d-4d1f-4a6d-a08f-ae19043b2759", "sighting--9b137519-7b3b-4097-a581-32d8b302bf25", "sighting--fb87ddf9-356e-4890-9cd2-aeffbdbfa536", "sighting--ed3b3635-defa-4127-aefb-e08f989f15cb", "sighting--121d878e-2e2b-46a8-9c32-2ad8614ff6cf", "sighting--ae8c0555-22a3-42fd-b25c-70b570bd6d04", "sighting--bb0571bd-e63e-4439-bb8e-2794deacbaaa", "sighting--23a84ddf-f8ad-4b38-ac3e-04558b9e424e", "sighting--953eed31-fc97-4d05-b673-eb9fe537265c", "sighting--35dd8c33-6ad1-460c-9619-83f4b217c103", "sighting--4ba5a859-3966-4342-8678-923337ed1688", "sighting--d84f3ee9-bb2a-4409-ac68-21dd497104ad", "sighting--71627f00-b39b-4f8e-b2d3-f79ebc908c79", "sighting--5b132877-b087-4ed5-b1d5-be1796c664f4", "sighting--a2d3a5a2-d290-4470-8b1e-6758dc1480aa", "sighting--fa34eebe-5dca-4e6f-b49b-e855851e3ce1", "sighting--937c3cbe-c751-4dbd-9e9f-cfef4cec915c", "sighting--dbecb78e-c17a-465f-a4bb-77f3fbfd50b2", "sighting--d05dc5a8-d00a-4a26-836f-a15923ea9c48", "sighting--52b2c0ac-2ddc-412e-b453-22c5e473aa35", "sighting--e6fac659-447c-40f3-9aa2-c4c27ce5036a", "sighting--3df46c6d-871a-4127-bc8a-6278d284d837", "sighting--66753fac-97ac-4023-b78d-cc7c29569731", "sighting--34107b78-2fee-432d-a1a5-ed03a3230230", "sighting--c5a49d5c-4e98-4dd5-83f9-d57d7a27eca9", "sighting--621623a7-867b-46ba-ae29-299439109a3b", "sighting--4eddb42d-4276-4436-bcde-25736324e27a", "sighting--4c05618c-56a4-46a7-946d-5ba38c84e6c8", "sighting--5a2841fe-e94a-4797-b0fa-b1539ea0b151", "sighting--ee8f4d8d-7887-4854-83a7-427a46a10e8d", "sighting--c208e98b-f94c-4ae4-badb-493125516cf2", "sighting--7af1008e-5fcc-4b8f-b5fc-18936ca7491a", "sighting--1b7851e1-e511-4046-b3d0-8afb5b9f5174", "sighting--5f0749f2-06ff-43d8-9d18-e731dd699843", "sighting--d49df6cf-8f1d-49e7-94fa-d15d1197f273", "sighting--54b9a56b-fd74-46a2-ae7c-346878f7ecd4", "sighting--422c72ee-1beb-4f59-91a2-7b2767a3d038", "sighting--dc6bddd8-bd47-4e8d-8095-d7efb00ac1d4", "sighting--88833278-5d30-40d3-929e-d3e95bfcf297", "sighting--36801de1-ea11-4132-b015-7f2024e93c62", "sighting--6ab10dba-fa23-4114-b0b0-b96c27d6ec39", "sighting--73910062-8d80-4d09-baf7-d5c939bc416d", "sighting--0029effd-101b-4de9-b7ea-504d45ab9e28", "sighting--db8d1122-081f-4cef-9096-1c8627c69bfd", "sighting--a54cfed6-bee5-46e3-8c46-2850f883692d", "sighting--127db58e-d7c2-442d-9c85-2a022c83afe6", "sighting--2c8c36ab-cac0-4584-abbb-2b5fb3bc1b2f", "sighting--470cdb21-75dd-441a-9610-cc35ae431ed3", "sighting--90b31502-3998-4d4f-bb1b-1c0ad09fb4cd", "sighting--d480f626-b41a-45af-a44e-f5e7696f0432", "sighting--29c22411-adf1-48cd-a07c-10a0d24e79ab", "sighting--3a52d802-63de-4033-93fb-f81bd66f7362", "sighting--b4a42860-b7f3-4ee1-b58e-cc48b1410d67", "sighting--20562d76-0956-4524-91da-c4e6e12e5bbf", "sighting--adefeecc-ed98-4a0e-9440-85ba7f7085ec", "sighting--a9eb0d4e-63aa-43b8-9a92-212c058d991e", "sighting--1fc86ea5-c2ee-4470-99ca-9f51fad968ba", "sighting--47b8f4f5-2d76-4719-8424-025ae7ec8949", "sighting--f166aa2d-3763-4a5b-b778-ae5b8964384a", "sighting--0f8e08ed-d66d-4dc6-9752-72dd031fe75a", "sighting--248f7085-4cff-4f3c-a60d-f4b0e8622986", "sighting--60fd860b-4fe1-422f-81ad-0ca60d087af9", "sighting--8da06135-37c1-4cfb-aea0-b89da049bfe2", "sighting--ed8ed572-1bd8-4660-b25b-bff9198ab9a2", "sighting--926c0c53-3e08-487b-9eaf-549e80ec9e08", "sighting--f475318d-0f09-427f-b90a-2d91aff4dc0c", "sighting--0fa0ab6e-90e3-4586-a663-924101c87d4a", "sighting--3fdf8d5a-56de-4932-ab6c-27b220128b41", "sighting--38159bf0-043f-417f-bc21-c42d7dfbf3a6", "sighting--3acda09c-fd3c-4696-9b8b-9469d5ebef35", "sighting--7ab1a894-c0d8-439b-815f-fd8381bf3770", "sighting--da913f88-1c0c-4ab8-82ce-ea461c36035f", "sighting--eb1ea4f4-6abc-4ef1-90e4-1f96a2af042d", "sighting--f4033ce3-3ae2-4bb8-a4bd-dde47613dc09", "sighting--22d79a48-4e19-4aaf-8000-56310b6c4039", "sighting--48ce0717-5bfc-4de8-8ba2-4121aa06d74c", "sighting--4c5844db-cf3c-4a75-b24e-86114191d0fd", "sighting--05df8682-3552-42bd-b351-b18907baea3c", "sighting--a2133bac-5ec7-425f-bd76-ed5573a236f1", "sighting--d40648ee-b795-4125-a5d8-16cbe54b7064", "sighting--7cbcc7c8-633c-4578-9120-815bf3c091c1", "sighting--22a1f80a-3a65-4d3f-9215-ba87e4548883", "sighting--ee27ca30-2183-41d4-aee5-f774653301ee", "sighting--2c1ebbfa-6f38-40d7-9715-7882c04392cc", "sighting--75f98e87-a852-491b-81a8-eac06db886da", "sighting--e9947484-f218-4c36-b1d7-28a46c57a668", "sighting--4136e408-c560-44df-9fd6-0c76ac68f676", "sighting--a07527ae-183d-40be-80c3-999970d58372", "sighting--baed2716-d100-4065-9e3e-b0a0e3e756d8", "sighting--edcb09d0-7789-4570-adff-15096cc096f6", "sighting--a67db480-2477-4328-8036-478f40bdce60", "sighting--242f04fb-ece6-466b-a926-b8bd2f78e3bb", "sighting--bad08b72-a441-4d63-b5ea-d2ae50cf5687", "sighting--1b695491-fbbe-4abf-bfa6-1c5b90c265a6", "sighting--d03fe2ba-ad6c-410f-9f8d-451340072f8e", "sighting--5e667b2f-608f-4c48-94c0-8dbfe04ecb5c", "sighting--8dfccc66-0d7c-4979-be39-1176405041b0", "sighting--69b13de1-dd98-4c7e-918f-6e48a10b31b7", "sighting--b19e6a0a-1f80-4e86-ab63-62f45cdac220", "sighting--bb89de07-f16a-43f3-bea3-bf3c7126230e", "sighting--df47c16b-32f5-4463-a9ac-2b344ac1fc51", "sighting--a70c91ee-2281-49da-8494-2521746c6bf6", "sighting--2f99dbea-42a5-4430-9763-b7573e7f33c9", "sighting--63203ed6-d552-4eae-b915-d5c108a51754", "sighting--c6fce4f0-e43c-4784-9040-1367d3c238ad", "sighting--f5540d9d-639b-4018-8601-7d9a08adec48", "sighting--e456cf60-a16b-4ccf-a3ea-c3848e43aca3", "sighting--cf554d3a-735e-4be6-addd-27120fe07087", "sighting--ba275d96-1f7b-493d-858e-b355ef0d66aa", "sighting--9f324598-0ace-4c64-939a-9c53143a8f2d", "sighting--31b1740f-bc30-4abc-9ca3-ed23feff705f", "sighting--ad02128f-31ab-4db9-ab87-a29e852c3647", "sighting--c3f206a0-faba-48bb-bcb7-358bdd7b7742", "sighting--811de58f-a86b-4aab-8e72-bba38bf282a1", "sighting--7ae8236f-0e07-4ab8-9b7e-61c4721092b4", "sighting--6a19c13b-2e00-4957-bd5d-7ae8d4f2bfd8", "sighting--94246315-c8fc-444c-a9d2-137b97838860", "sighting--1655de38-cc1b-4e63-ad50-1f4e257e55d7", "sighting--84a38187-931f-432d-b8e3-8d13481ca07b", "sighting--7a276e79-e5bd-489d-bacd-f98345c7ea41", "sighting--e1d3f11e-e867-4521-8cbd-91db701ecb20", "sighting--39625263-77bc-44f9-9318-6fdc78b780d5", "sighting--2c4f116f-9fa0-463d-b765-fa2b86345ffc", "sighting--c17b3acd-62c3-4147-bf6d-0c066fc9bb46", "sighting--8d217893-3a82-43cf-8ab7-a15df4eb2eae", "sighting--652bc287-d2ca-49ee-8b5f-ad1aae66037c", "sighting--60ac06e4-34db-42fc-a1b5-c049c3b9ebde", "sighting--ebf83fd0-031b-4b95-86cd-72b4ce7fc05a", "sighting--8c8743ff-d648-4729-8864-9c48ed8bd49a", "sighting--977ceaff-bbf3-4c0c-8d8e-d7e223be2ce3", "sighting--dda50c7b-7bb8-48c4-b967-bcbd6273969a", "sighting--0b86864b-db38-463d-a1d2-bdbd8fdb6be7", "sighting--58cfd1b8-e931-478e-b343-4999b4ab60f8", "sighting--c25c345c-e648-452a-9188-deeb3abd412b", "sighting--9a66b145-7734-4c51-98f2-6ed3f438382a", "sighting--2cbe17d1-7b5a-49f6-b95f-de7ff3103dd7", "sighting--511a533a-e9e4-4d27-a5d5-5c71778a6d56", "sighting--3470000d-6c42-4502-96b6-047ec6cd0eea", "sighting--0cbe6ee6-df85-40c9-a633-459a238dc637", "sighting--57d84f3a-2965-4717-b7f7-ff75d52ea130", "sighting--3cde5cc6-ebfb-43a8-8add-2d04a2f62945", "sighting--82ad810c-1039-4a86-b437-49ed9e34b722", "sighting--7d34562c-adee-4c11-91a2-c1c4fbb28a57", "sighting--6e12a6e1-b068-4009-9cdf-a14cdd3908cf", "sighting--0e5b735f-a973-4fd9-8c3e-838096dd81bf", "sighting--b8387704-4727-4ed1-832f-d4c71bfa0aac", "sighting--0f9c14a4-6a13-48b6-9048-3031e6b79798", "sighting--4625eb16-b897-4e3a-b000-ed0f4886740b", "sighting--669308da-09a7-47e6-a3db-febf1b36da55", "sighting--ad7d07e7-9d5e-4d36-aa4a-29edc091aa25", "sighting--fdeaf06e-0886-4456-ad36-cd6cf9542f64", "sighting--384f0b2a-5bbb-4289-a0af-dc851a96e972", "sighting--485289f4-1885-4776-a975-f291f01d8b3e", "sighting--fe6761cb-51b3-4c8a-8ae4-5851fa879c5d", "sighting--8b2f8ff5-a5c3-4846-a764-93912ca80fb5", "sighting--d028d7f1-efa1-4db4-838d-99672e1659db", "sighting--b8b53a56-b4c8-46a2-9e34-d1acce41ea1f", "sighting--60b86c2b-5bbd-458f-98a7-69030d994c9e", "sighting--72b998c8-86c4-474e-840c-97504106acba", "sighting--c6fd12ff-145f-4d58-b580-e6224dc759a2", "sighting--50d2c390-7c32-47d4-9f4a-556306d2895a", "sighting--070793bb-9343-4cbd-9542-6b2ec481c85a", "sighting--112ff8ef-d400-41d8-87bd-73d1f6d374ad", "sighting--8d8a1fea-e117-43f0-ba18-41ccba8759bf", "sighting--83897a8b-126a-4781-881f-530c912fc852", "sighting--23ae8cdd-a10d-409d-83b1-74b6d244e36b", "sighting--e33d385d-e2b9-4393-8eb8-a0444b1d7e53", "sighting--4c80a1b3-c02c-4bdb-b6f2-a634010bb6be", "sighting--0b30ce88-377f-46c2-8951-5eb64948aa88", "sighting--32059088-e109-4c28-b7cb-38f63292e2e8", "sighting--082a1be2-25ec-456a-b6cd-e26569ff4824", "sighting--74c7d567-dd0d-4ce0-8628-d80058597a98", "sighting--ed6254ef-4063-4eb0-ad0e-e78427134921", "sighting--cfb18844-4988-468b-a2dd-38b0dca1d5c5", "sighting--6bfda370-5f3f-42d1-b837-2d4406c3368b", "sighting--83f1e9a8-d7e4-4e2b-ae3c-f8f0995bc103", "sighting--8297a3e1-be20-47cc-abd5-0a1d59aecf13", "sighting--6cbd0e0d-be27-4fc8-abb4-33a9ff99cdfe", "sighting--dbf28721-c68d-4500-be30-a1463333065e", "sighting--20ed0d7c-6177-403a-8eca-0d7d40806631", "sighting--8d29bfd3-9823-4ec5-8ca1-f86f658b943d", "sighting--4e7d727d-6816-4b75-835e-a17c79d34f43", "sighting--cf511bdc-74d4-4fe1-b228-3932e94d6696", "sighting--0e09d218-b847-493b-8f31-e1b20ae96700", "sighting--2ab9d0ad-f2a4-48c1-b839-629a4aa2263f", "sighting--2a504517-91d3-446e-9ce0-ac979b292861", "sighting--b2cf1f3d-f48c-4842-b7d8-bd270e7bc2da", "sighting--851b62b1-352c-4908-bbd1-fa25da47dd4c", "sighting--71bb6d54-0840-4ed3-909a-e45d40d98857", "sighting--c1621d36-9af2-4cb8-8fe9-4bc3abf05a03", "sighting--947ebaec-c864-4482-9fc8-f80d6a6cafd4", "sighting--71e87486-f771-4959-9d55-6450aae72a9b", "sighting--01969e93-fbd5-4314-b8f3-eefaf14b2101", "sighting--a59e17ed-95a2-44f6-9f20-07ea51ddbaff", "sighting--29201835-3049-45da-a34e-dfd4d81d9067", "sighting--fa4cc922-f42e-499f-af17-92bd7826da4b", "sighting--e0e52611-ee42-49bc-80f0-62bca570f1a6", "sighting--d058d45a-86a5-45cb-87e4-8917fb387ad0", "sighting--a1588158-7395-41a9-b77f-1f338dfcbfc4", "sighting--30a541bd-da8e-4604-83bd-6ddee8ffc5d5", "sighting--d1d945d5-8a33-4d90-925c-3f729e5dcad0", "sighting--8a8a14a7-3a33-45e8-ab1a-3318b1c45e53", "sighting--60d137d1-5fb7-454f-91dc-8f3abccc843f", "sighting--7308366c-91bd-4a29-a07d-af907c025deb", "sighting--54cd09e9-eefc-4982-bf98-9a884c7fee69", "sighting--bf1f8a52-8086-46bf-8e15-6c4ecb6da64f", "sighting--bb44aa63-9865-421b-9e61-0c91a48ff189", "sighting--c7c10a75-9fbd-414a-b41a-16d9eff6ac18", "sighting--1862463a-0c8f-4764-beb5-2fd1fa5e693e", "sighting--275a702c-5d1c-4568-8c4b-1994a31a3afa", "sighting--64d9032a-03ff-4949-b05b-8cf26e522dfe", "sighting--062f34fb-46e4-43d6-a7c1-49b792f3c0b7", "sighting--2c1c2211-c478-439c-ac54-bdd0b2f3dbee", "sighting--0cbb4831-9b44-4536-98d7-10acb8378787", "sighting--bdbcfb50-12f6-4da2-8913-65aa95bbd2ee", "sighting--b5591191-7672-42fa-aa02-27221980816e", "sighting--4f6d4f6f-37e8-4c46-bf23-5378070fcd86", "sighting--a14911d5-9a14-48c8-826c-18df388cc204", "sighting--69ee84f4-72a8-4fa6-a9cb-73e254cf8567", "sighting--10987f71-2811-4273-b9b4-15a8919ca700", "sighting--e5b70913-3bd4-492e-b49d-bc5ec1bf9c15", "sighting--539b746b-2635-48d0-863e-848e35f8b272", "sighting--75da2ddb-671e-4d87-950a-de41eafd3174", "sighting--b4334f05-da09-4a1c-b37c-99d7de99b132", "sighting--8b0a9e4e-c723-4fed-ab15-09de12f16345", "sighting--3c9da1bc-a8cc-4b9a-a5e8-abb4dd6848ab", "sighting--0126d3aa-5230-48fa-a7b5-69e90ba0f866", "sighting--50fb170b-a4a2-4ef0-bf75-7c5be600d4e1", "sighting--f4452b2f-e707-4b7a-b34f-77193e2e7317", "sighting--77869928-7ab4-4095-a9ff-e22c6eedda19", "sighting--12c4a1b6-946e-4fc8-b62e-c337fa7c8d6f", "sighting--3fcdd0fd-37f2-4120-8d33-052be9c81ee6", "sighting--fb3393d7-dc3d-4981-a4b1-782a5ad31bcc", "sighting--cd9a67be-6a0f-4c6a-b9ce-15ba5953e340", "sighting--4dbb8db9-f0bc-443b-a5e1-f6abc0a3aef5", "sighting--3088825b-3ac1-4d5a-82c2-9d9c5d5291a9", "sighting--abb188cf-6732-4f68-93fe-7fc4b0069f82", "sighting--5e56e9bd-5ad8-494c-9d9a-4f148ee5a994", "sighting--bcb3c9cc-1265-42ec-9ff1-7fef521c1aef", "sighting--36649570-8b10-4762-9851-e4a603e677a6", "sighting--0c3ae783-045d-4a43-a896-d7d0f7844348", "sighting--0ebcea65-36b3-4f69-9b19-302e47e03119", "sighting--2b6b1a8e-9685-4d35-9f68-2beb424d5c1a", "sighting--dda1be8d-7389-42a4-941a-b4c959e0429d", "sighting--7bfe2180-f132-4540-b587-ce5645c2e7c7", "sighting--65cf23fb-212a-4d25-b2ad-d0d575499dd9", "sighting--2ae1f982-a24f-4d47-9132-6ac595797bc5", "sighting--9e13fcf2-54f3-4186-a0e6-79ec490513d0", "sighting--0ce188a1-c6d2-4f1d-a451-8295e419c2a0", "sighting--c699c8d6-0beb-4aa2-a44d-f9aab7ed66c2", "sighting--ae157147-516d-47c2-b446-a2a4a6f02300", "sighting--2d068ace-f9f1-4504-b49e-bb970adb0c24", "sighting--d33a893f-b4b6-4a79-a084-3c97cb715a80", "sighting--1e504e3e-00a7-4600-9ef7-ca58d9c9e960", "sighting--13ad6c69-3278-45a9-9f2c-4298f7dafb41", "sighting--74902bea-a59d-436a-a166-5cfc0fda5ba3", "sighting--758d6b87-32fe-4af0-b48a-7459f5a0696d", "sighting--66efa4ac-121f-46f1-800e-77dfd1d9c003", "sighting--0da481c2-865b-4e8c-a3ba-81280544e4b9", "sighting--bc6ab3cf-cd6f-445c-80f3-0450f61be8e2", "sighting--1bd5f9cc-37aa-4e7b-95d3-10717061c933", "sighting--d96787ca-2d94-4333-875c-b84f7b43457e", "sighting--ebeca460-8aa2-47d9-a952-987dee61296d", "sighting--875bad34-0131-4480-ae7c-184d24027357", "sighting--520cdd5f-be2b-48e6-9ebc-e7249ba387fe", "sighting--2df46607-c6ea-4ea0-890c-79d92c45e670", "sighting--88a4c24c-1546-4ff1-bb64-aef14d220997", "sighting--8775e697-fefb-44ae-8e0c-9ddcb13a4f0b", "sighting--095adf76-f901-4e81-bcd5-1d03f1860739", "sighting--cf420bb3-c036-408d-ac50-8cbc5080fd29", "sighting--6205d24a-6535-4e41-91b9-0dfa40709103", "sighting--fd09904d-f720-4b9e-97bc-57a61c1d5b33", "sighting--8ab7e72a-19e2-4073-ac14-9c68c021304a", "sighting--843c9833-2c83-4a67-9bdb-f7eb2919338a", "sighting--d137ff51-0157-4a4e-bb59-f15849fe927c", "sighting--c1db82c9-827d-4529-a5d2-374526be3c5d", "sighting--8ac34c7d-f582-4ea8-b223-0a2e4a37232e", "sighting--a91bf2c2-7b0e-422a-8f77-f1fd2cca6cea", "sighting--6f339135-1d92-4675-a508-b10a1314156b", "sighting--d862a7e4-3673-424a-8e62-104ca752b54b", "sighting--cc55ecd9-3afd-430c-9c44-e2ccb93820f8", "sighting--94657d21-e6fe-4a70-bfb7-718523dd849f", "sighting--db157716-f0d0-4310-b64e-0cb19d5df2d0", "sighting--52b7d5bb-45df-4a9d-a72c-32ccbde4bc13", "sighting--ed0b450b-1f84-4b92-a571-6ced8a5b08fa", "sighting--7be57faf-f7fd-46eb-85a0-9f45351ac5e6", "sighting--f6f30ebd-1e46-4d97-860a-72520cfa2cfe", "sighting--a4fbb8d1-22e4-44d2-992d-8d786074419c", "sighting--88020197-17f7-4daf-b15f-bdf0b7f41791", "sighting--5a216cb7-472b-4623-b73a-4c92e0fe87f8", "sighting--522a3092-aead-4203-862c-92756a64b875", "sighting--123178e4-bb1f-4aba-aa99-3ba3df45670f", "sighting--c92d2355-34a5-48bb-92b1-86550ca869c1", "sighting--49991234-9353-4056-a708-df43113c0d1f", "sighting--519fc883-d206-41ae-a5bf-2ed01e9d9ace", "sighting--822a78d4-0507-426e-b627-d65c2597d5f0", "sighting--bc8feb0a-8e91-40d9-8c02-247af40a86c9", "sighting--f665160c-cf54-489b-a08e-c18fb54dc124", "sighting--6575ef11-ba3d-4d11-be51-563b750e0e73", "sighting--d3ebbd6c-4cfb-488e-b59c-26dc7a66c676", "sighting--9f1f01d7-527e-46f0-9066-123af8dc4176", "sighting--c4b86a95-5ad3-44ae-ad71-03bbfa2b54e5", "sighting--dea20d0e-f96c-476a-a2a7-96f5b04f5847", "sighting--4cf27e54-7310-4ea3-9fcf-864e23f22c9b", "sighting--4174bbd9-97a7-4572-a864-7a07464f5602", "sighting--193d351d-3d57-44f0-bf3c-22805ef21d21", "sighting--064b0e60-6633-4411-87a6-df35954e3a31", "sighting--bd7bba0d-7c5b-48e8-a99b-60e85148db10", "sighting--d1253237-debe-41c1-afc9-f4fd3fba2192", "sighting--935b4e91-31f6-4d51-be5c-500044f96641", "sighting--972f25d4-ee11-493d-94f3-c253ebf542c2", "sighting--c1714c2a-8948-40a4-92c8-7a693ef397bf", "sighting--1cb89346-2003-4f03-a211-528653adfcb0", "sighting--339d81a6-90b5-4e5c-bf8b-35af273affef", "sighting--97cb91c7-7988-465c-8ce2-6a962283c1e5", "sighting--70964e15-4824-438b-974e-ce58777f6d9a", "sighting--c338ff1d-3b2e-4ec7-bc99-054935633c96", "sighting--795f1682-90c5-4f6d-be88-05d7c837937b", "sighting--fe205966-3dee-4f96-8920-709936b5c15b", "sighting--96141dcc-53ca-481e-8581-d47b82c4ca7d", "sighting--9be7104f-4fb2-4d12-a38b-baec1a6fda8d", "sighting--b070233f-ec24-4b95-97e4-ee8cea217b2e", "sighting--49c284e4-3285-489a-b122-ba9c99b118c9", "sighting--9d93083a-dc30-4a25-b6bc-7ae486a3aced", "sighting--aacee71d-c78f-4593-968c-6fe6eab5646c", "sighting--29d3bb1f-c231-45dc-b14d-0d902ba453e0", "sighting--77c23150-d48b-4d11-84bb-984f6647bacf", "sighting--24c21483-a3f0-4e72-a6d7-68b4cbec70c1", "sighting--dac70175-c34e-42de-b2cf-a26acd30ca78", "sighting--74a0cf54-4c16-419e-bb4f-06a89c278793", "sighting--0cc917f7-7f2e-400e-b51d-02f0a7b2f3e7", "sighting--05e5d403-c4c6-49e3-9791-68b8c6ca93e2", "sighting--6f4763e3-4693-4e83-a28c-387914efd328", "sighting--190ae297-0867-4051-9e14-7b80686f7d82", "sighting--21c96056-873d-4be6-b145-eaab435ece8e", "sighting--e19a1c4d-926e-4918-a8cd-d262d07e0cf1", "sighting--195768ce-caa2-4a28-95c0-6293cd1f16ab", "sighting--a117a8e0-6fbe-4f9c-ade3-7aa8bf2eaeba", "sighting--657899e9-c633-4435-bf4c-ecf79f71bfd9", "sighting--ce81863f-6c7e-481d-b36b-0d19728a5bc4", "sighting--a7359424-b6d4-4d61-a712-69ba8081c5ba", "sighting--2292156f-9e9a-4b31-9e18-7d7809031736", "sighting--f4eea97e-b6cc-44f5-8bc7-0bcd88323ee7", "sighting--1fece092-db07-4025-ba02-a5c142ae7a9d", "sighting--2338c5bc-7756-4ef9-8dfb-369eacc624ca", "sighting--5f70e2c0-cc58-4dc3-adab-49ea453ea76e", "sighting--829d1712-36c9-40a7-8e9d-46e35799bbd4", "sighting--94fdd92e-627f-4d7e-a285-994b1e819396", "sighting--62bd6abc-6b92-41c1-8662-d8292db7b1d0", "sighting--b7111d21-ddca-4997-9e22-03fa5c9dd607", "sighting--3245963a-016f-4f3d-8ded-440c90e1945a", "sighting--96a39871-9164-47a9-88a8-ea9c312c705d", "sighting--a53f6f44-e6f1-4b3a-8f09-3cbf7b3c1d27", "sighting--3c2d5f09-44da-470b-b6c1-2d83021e9339", "sighting--65af2ca7-38cd-4590-a2c1-24e8ae787c53", "sighting--b1433245-f4cb-4634-95d1-f904b1aeda6b", "sighting--a9b66b86-d3af-4104-b634-c37821755d0a", "sighting--414c9114-d59c-44b5-8c7e-f6d1d131e02e", "sighting--f46aef09-9ca4-488a-8f1c-13fd6be9f0bb", "sighting--a574110f-6986-4aa1-bebf-0b5657742d96", "sighting--ea83bca3-0f6d-42f4-8354-d263197bb339", "sighting--03f57a2c-fa3e-4425-a459-338670fa822a", "sighting--22ebec6d-ac5e-43d5-840f-dd4d699d39a1", "sighting--4e3a7e90-6cd2-400a-afa1-8d9dd282d983", "sighting--e1f6d739-79bd-46fc-b76c-8ae2abf7c6e4", "sighting--962188b2-fc3b-466f-a79d-0bb2abc23b27", "sighting--6d0458c0-5221-469c-b02d-2bb2ca332abf", "sighting--615aa754-74ef-405b-9d56-9f2d82319bfc", "sighting--31c00851-9e8b-4918-b18b-47427ccca6d7", "sighting--ca9f33fd-b16b-4779-a480-0e16073b0487", "sighting--a568da9c-a626-48dc-a8a7-4ffe310a63b7", "sighting--2ece3d21-d148-43f9-a95a-08e6f9290d0c", "sighting--4322c173-bd10-45ca-ada1-e8754f4a762c", "sighting--7b57a0e3-d4eb-49e9-8d92-bf4402775e49", "sighting--81f1f890-3459-4c62-8f4e-f99cbf77ba33", "sighting--f129218a-f579-417e-b06f-94c088432c5a", "sighting--675ce873-6e73-4dd1-a77d-0f3e2b62e16e", "sighting--dda620c3-22cc-432f-8271-360bdde9aba4", "sighting--286deb01-38c3-4417-9cde-740d5e5f5033", "sighting--6865bf3c-4867-42ef-89de-ed1bb43c481d", "sighting--20308960-ab0e-4444-8caa-6dc844dfdf20", "sighting--3361c3b5-3387-4c64-a70b-84d2ef88a1a9", "sighting--68456f26-2453-4e1a-8f93-9da4fef451fe", "sighting--bcc1a1f5-2e58-4f8e-a088-44fc41d79f24", "sighting--5c1fd564-3ec8-433b-9021-2739d82109f8", "sighting--8c6404f8-497a-4f78-869c-fd3fe9dab397", "sighting--fd854991-175f-40ff-b8a9-63bc7331c274", "sighting--bf29071e-834e-45a8-9035-a7bbfac59ec0", "sighting--db1c6c83-2a06-4eaf-b324-8e2be94d0b25", "sighting--4e412fd8-f307-442b-becc-52eded7dbc49", "sighting--d8518ad2-650f-4ca3-9ae4-cc11f299cde2", "sighting--1d340161-9f60-47ea-a3bc-0b2b8816d2ac", "sighting--177f6663-6eaf-464b-bc7f-74c364791157", "sighting--8f524eed-e481-470f-b147-2a5210d7aba3", "sighting--6e491631-b120-4029-9ea7-57b071967cdb", "sighting--7e45fa96-ef35-4a46-b963-4bd93e207cf6", "sighting--c04045c4-4045-4eef-825f-9fd4ac88f183", "sighting--9b3df731-b707-473e-be91-03903898a3e2", "sighting--c28eeab9-c0fd-4975-bc03-d67c3fa8237f", "sighting--994c5021-5d41-44be-aa96-6593643dc37a", "sighting--06f0cc51-9cbf-4630-87f3-e2edc1a09d18", "sighting--17c264f0-3d21-48ef-aaf4-6ca6f8777127", "sighting--f8741dcf-cf0c-4d09-a497-42f6a1743750", "sighting--7d24c223-f665-4eb2-bbee-7faf857523bf", "sighting--14a1f596-0270-4e4d-ad6f-983600f50cf7", "sighting--c95d9d1c-f75b-4638-9ff8-265bff85f88f", "sighting--83fbe8e3-8f5b-4d5a-8900-a93c139b0d4d", "sighting--6cb7c5cb-e511-42a3-a316-155bf1307b8d", "sighting--2f57cf18-4b55-4480-9254-216313a68c08", "sighting--7a65452b-3dc5-471c-a218-412c40608524", "sighting--e6da5850-c1c4-4b03-9082-b9cb964ebc01", "sighting--c1aabf42-b562-4341-8498-2ea4b71ae2ed", "sighting--f5e55002-44ca-4ece-8107-6dabc4728dbc", "sighting--676af470-0e3e-44fc-b02a-021a79a4e14a", "sighting--565d0a91-5ae1-47ac-8bca-d41561785248", "sighting--f6ff471c-2a81-403c-be86-4fcd958ccec0", "sighting--d58646e5-1531-4fec-9a26-da8a36fe3652", "sighting--9300603b-5914-43a0-a63a-b0f5a70846a0", "sighting--ad31cc96-02eb-4504-8428-912cec1a9907", "sighting--4e734e0b-6730-452e-8d89-8926398dc260", "sighting--7c8ea200-0d19-42b6-932e-f1a9ec58350e", "sighting--704cbf1b-d5ff-43f5-950f-2c75737f129a", "sighting--78ef2bfd-6c8e-40bb-af0e-7726fa6dc191", "sighting--507b4e55-785f-4855-869e-2f1a97943d32", "sighting--f5899188-9565-4787-97d6-8a70969b9889", "sighting--05ca8529-5d56-4505-a018-01dca318d0c2", "sighting--354e70c3-7a8b-4f09-80b8-a638c9f38aa1", "sighting--f050dd41-f0d5-4a68-afcc-7ff42a62a7db", "sighting--33274195-74bb-452b-8eb4-efc917d390f0", "sighting--644c23da-714d-4ab5-a132-675ce7109f65", "sighting--17b60c20-d7df-48b1-9343-35faf9674bfd", "sighting--b97fdcb7-5dae-4ae3-8d5e-ed1b869538f9", "sighting--4a698ef1-3e2c-4359-997a-3b359f12316e", "sighting--419465b1-9e89-4371-a532-43bac7d3f50c", "sighting--ea55b9d4-2ddb-409f-85e1-2c84789bd9ce", "sighting--fa4eb940-00a4-4bd0-99ec-2d2f64bf5dce", "sighting--176b2892-562f-4b9f-9648-0b62c6362157", "sighting--e2bae910-a6a1-49a6-be35-4f2863419356", "sighting--fdd11900-643b-44ec-a22b-0716b562d092", "sighting--5d3ad9d4-5d00-4332-9532-5dc3d2f82334", "sighting--356013be-fb7d-47dc-bd49-7ea3c4269f38", "sighting--88ee85ce-d7d3-405a-bf61-dfd9f4797f4d", "sighting--b6cb5abb-83e2-4f24-b0b2-6a09cc8b1042", "sighting--13b47375-ddf0-482a-97d6-260508f7cda4", "sighting--2aa5fe57-e87e-4889-89ba-583060d578b7", "sighting--2cd5ef1c-3441-464f-aa88-82b4fcbd0e99", "sighting--474b9d58-1524-4439-b3e0-c48ac00bb9d0", "sighting--df664f3b-b776-44fa-be74-291e40c17cde", "sighting--1d622c80-b55e-4130-878c-317fece99833", "sighting--6edb2dbc-d052-4e55-a795-e44075bed6e9", "sighting--9fe7be5d-e5db-4e9b-9435-7d4461e571e4", "sighting--97261c9b-e858-423c-9ac2-f4bbb81f05a2", "sighting--d90a740d-014b-486c-84ff-5285ae88481a", "sighting--94784ef9-16ad-43ce-bc61-0478951b003a", "sighting--50b790aa-c0d3-4ae5-b704-5588bfb98760", "sighting--e542a3f5-0e5b-488b-b3f0-bf40d744cd9f", "sighting--b2369855-9f8d-4bd3-933a-b31f8596b0ad", "sighting--a43f8530-6984-459f-8e2f-c80cc545ccc8", "sighting--08f80502-0c85-45ae-b784-62c01e2d0a23", "sighting--b1c64422-d45a-410b-89ac-6ff960ee9f23", "sighting--abb984f2-6251-42b9-b4cd-3fba83827464", "sighting--ffc59472-597f-4052-9b4d-3389bff973bb", "sighting--9f718057-ba76-4691-bc55-2382f1c7f9c5", "sighting--6e45621b-0b44-4cd1-94a5-6a9ae2e6f210", "sighting--526b0398-04c2-4d02-bf29-4bdbc8e75cf8", "sighting--570820f2-835b-4ed9-bbc5-be234a82841d", "sighting--de2d37d2-073d-4330-be83-e2284e286902", "sighting--3172d326-5dde-4681-948f-ed8998b6481b", "sighting--43fd4462-4857-4c7d-a13f-c3c1c8b735b9", "sighting--9fecc7c4-3858-4d9c-bf3a-d63a0023060f", "sighting--b9191385-9568-4192-b181-8e69db47af40", "sighting--f17a4915-ccce-4167-a26c-c8b5ad2a554a", "sighting--795bc1aa-b49c-4819-9d5f-3b7746e1ebc0", "sighting--bac28f5b-34c6-42f1-a5fb-5a045d70cea8", "sighting--3f2325dd-f231-457a-9eb8-d3a2949dd6dc", "sighting--2eed5464-f3f0-4968-b628-148be5b84622", "sighting--915aa479-fe8c-461f-844c-c2951f5d4fba", "sighting--611f0479-b00e-473a-b881-44119a989b15", "sighting--82bea589-e588-4af4-8fed-5bdb5de3514b", "sighting--fe0fcbc4-ac24-443e-bbe1-17001044fe9b", "sighting--9c64bcb3-ee52-4698-9c09-c7f22da96ccc", "sighting--1bfb3ea5-4796-4a14-8c13-5cf609874a47", "sighting--6546e96f-fc2b-4592-b731-b0e72851b1ea", "sighting--9410f0af-1843-4356-b41b-af8c1b163e81", "sighting--262abe24-f695-4b49-bcb9-f8cfca4e19db", "sighting--eecbfbde-ddb1-4a01-9655-da8d875f8b5c", "sighting--c69745dc-edbe-4af0-8fe6-c52d1ea622c8", "sighting--1aa0b1d4-2cbd-4f8e-837f-25e5777a04ab", "sighting--a52f7777-b08d-4e0f-b722-2a1e20617689", "sighting--348a90c4-7f22-4d57-bb42-b818029c334d", "sighting--7414b776-e348-445b-823f-ffc8ce06f00e", "sighting--e179e4b1-da7d-4554-a47e-fa4faed911c5", "sighting--102eea60-5494-4d5f-aacc-5109e9af0ef8", "sighting--3bf86b0b-40c3-4000-ba10-24b90b5246e5", "sighting--68703e6f-745c-4d68-b780-5d89ba428f22", "sighting--35385417-1ec0-4534-9985-6f0e5e88c2fd", "sighting--f81a3a29-de19-4dee-b8b8-fbc83f63cb84", "sighting--24c7af6d-fcf4-4ad4-990b-85e48755c5c6", "sighting--099bde40-b83d-4118-a374-bf4574e1a125", "sighting--cff83cd9-c3bf-466c-aaa8-44bc53cc685c", "sighting--aab03ed3-2aa0-4503-869f-7fb3e636fec3", "sighting--001f2a69-7c91-4426-81c2-f9f6a09fbbd6", "sighting--7c392ffa-3853-4125-ae51-b59caaf4cf39", "sighting--3c7d8baf-9775-44b6-a934-45bd33d20de7", "sighting--3830ea1e-ea27-4030-a78e-a01ca6aec29b", "sighting--20c1f627-6446-4af7-b6cc-cd4cad1532bd", "sighting--614783c9-53e7-42c0-8f23-5c327399e880", "sighting--773f06aa-8157-4296-b280-7f8ea8aafff3", "sighting--31d8532e-cbae-4012-99fa-46e646432ac4", "sighting--4f504e80-6203-474b-8bb2-038fbc49dea6", "sighting--e1acfa74-782d-4488-85cb-1257cb86fe94", "sighting--4ce3c646-301c-40f8-9d54-7c99e4670cff", "sighting--e50e1c32-4fc5-4c84-aa21-23d6494f96d5", "sighting--7f5d44e5-a625-47f2-a304-82f9783f248d", "sighting--0d4000b1-eaf6-4c17-933b-37c4c9513248", "sighting--19ae0c7c-2520-4dbf-87f3-6c9ad3be8e7b", "sighting--f871399a-2a83-4074-980e-d903bff8b91b", "sighting--866e7ced-463d-4f81-8d58-ef4f2ab8353c", "sighting--b82ef299-c233-4944-a257-291ee5b0c73c", "sighting--2d7f5c9a-bdc2-4d6c-a94b-325baa1805cb", "sighting--adb639ed-c3f9-496a-b3ec-c8021ae9019e", "sighting--f02b2674-9a7c-48d7-bda2-27b4ff6c3f57", "sighting--f1e5091a-8b6d-44a0-80fc-3c939a6261fa", "sighting--6732460b-ec78-45ea-9a4f-15e0e8f751e3", "sighting--03ad20d7-457b-450f-9d48-bd083bc122f4", "sighting--86f73de3-e43c-444a-9f35-e08d9ca6b033", "sighting--f98ddc4c-497f-4636-8b81-66948330e299", "sighting--e13383ca-46fe-4130-ab5f-5fe66d239714", "sighting--ddb5f90f-23d3-4195-8f25-849fc0fc4f62", "sighting--461c6162-e9a9-49b2-8c03-9f23ccfd8c4a", "sighting--54d3f118-a12b-45f1-9227-cf7ee5549b84", "sighting--12d19478-84bb-4872-a729-3e30b6b10ffa", "sighting--f1bdcaf9-7084-4df0-83fd-609a792be6fc", "sighting--490fdda6-d749-4254-8bff-327b42992c01", "sighting--5d96856d-9f63-4d7d-b903-e578479e371b", "sighting--2fc386df-1ace-452d-b4a0-28d3d2c2cb29", "sighting--22c5075d-c83d-4c93-a588-4c3eb93fc5ad", "sighting--125f70e6-30bf-4c58-82a6-a8f71321da3e", "sighting--176d6416-2381-4cdb-a9da-3432c2af68d7", "sighting--0f24e7be-9f01-4f35-940a-3910745e98a8", "sighting--70202a48-9a8f-43c9-b99f-f8597ea4c966", "sighting--46738ce5-c8ed-4954-8a53-5b62faf07bb6", "sighting--1a35e23c-c721-40fc-b27a-f3f7d7302e5a", "sighting--144cb1fe-dc5e-405c-86e1-4154d1b84461", "sighting--4f0be176-5ff8-435d-ada3-dc067bd7ca07", "sighting--9294b932-dbe7-4a44-879d-f4d8a686af2f", "sighting--85a7b604-c7f5-412d-8a04-2756c1d6c0a2", "sighting--83af8600-333e-4011-9d95-f4fdec66f143", "sighting--f8af80a8-dad5-456e-a689-492d315ce18d", "sighting--550d52e7-eff6-46f9-a11b-3f8b4191e5e8", "sighting--54f3ff15-3098-4196-bfdf-f3ca2a3b766b", "sighting--b90edf39-80d7-472e-bafc-375478ae6725", "sighting--e8eca972-60be-46a6-b70e-95298ad6746d", "sighting--d454d296-57e1-454f-8c44-e0cf0cda28eb", "sighting--3e44d8f6-e371-454a-9ded-3e18aeb41081", "sighting--04896229-07a5-4be1-9c78-4648a0b63d59", "sighting--386d809d-4ae9-4bd8-9ec1-f87901fe0e6a", "sighting--28a65bb1-f696-41b6-8be2-478c06c39335", "sighting--79e9f64d-f62f-4d78-b85c-2c2ed661aed6", "sighting--2a091511-98d5-428e-bccd-527de00557ab", "sighting--10f11098-80bb-4256-af4b-ee8aea938d23", "sighting--455fe9dd-613b-4884-adba-ba9fcaf8ff94", "sighting--f66063a0-cbf0-477d-97a1-f4b1f97a0cb0", "sighting--39324a80-d6ab-4cfe-8764-012560c9b4d1", "sighting--ebdcecf8-2d32-4bcc-8063-200e76de6816", "sighting--f585ccd2-a7da-4472-b6fc-41009157f560", "sighting--cfeaebab-0738-4855-ae6a-4fbc54281f75", "sighting--f20a012a-345c-4944-ba52-3364a2e8b98e", "sighting--a0156588-e0d9-47bf-a474-c47710b4f64c", "sighting--af92ece4-39cb-44da-9bc3-b71a5a2f19b6", "sighting--660a5a2b-bcb9-41c4-ad36-66502799ecb5", "sighting--462a14ce-f13b-4e47-a33d-54672babd53d", "sighting--6b4c0fe6-56db-4992-aa46-2c19c652486a", "sighting--d715e708-2ece-48fa-a511-0df6e3c3b88f", "sighting--568d59dd-aef4-42fe-a5ca-1521038e515e", "sighting--944e8587-72d8-423c-ae05-c9dabbcfcdd8", "sighting--66956013-9859-4ceb-8d36-a583b06e25e2", "sighting--35e4f595-ae53-4218-98ad-f18b5965eb5c", "sighting--55d2d446-e8d1-4cef-97db-43ecad5fade0", "sighting--e696e0bd-3973-4ef0-a010-a8a45565c483", "sighting--f90e4869-7475-4493-9e6f-8d1db091594c", "sighting--d4057ca5-1c7a-44da-8b3a-94455879c6d0", "sighting--8b811110-3b64-4411-b655-4906638bec98", "sighting--7c7dd39d-472c-4954-9fe1-1e90d03df41a", "sighting--85d6c052-3523-444b-a8c9-6f0b69be4e1c", "sighting--20f45a8b-0017-470d-b78d-f9c6cd229cac", "sighting--f8dd4c00-4151-4320-a9f5-e4abec99bc12", "sighting--ebd0b89a-c689-4e13-bc79-8bf5dad23c63", "sighting--d15af157-96fb-4619-99f1-b17051f3e3f5", "sighting--cf2fb3fc-7959-4a71-a936-c23f985e76d0", "sighting--99f628bb-9bec-4570-925b-6aba9945ef32", "sighting--8ca581c4-1662-4c8a-a17e-9340c43394e4", "sighting--d556315d-23ff-47cc-8423-9e273a888b4c", "sighting--4632ce7a-7fab-4699-8c07-8e3069c91073", "sighting--d642a3fb-0309-4aea-a167-0f4e87b8fc89", "sighting--a9776a08-39a7-4b15-af09-8067455d995a", "sighting--84fd3b0b-51aa-4375-ac44-4625aae42831", "sighting--a0524fd8-9a6b-4f82-b279-82e305e3378c", "sighting--e5eba39d-dbca-43d1-a2d3-3bc3e84b7ebf", "sighting--2bcd513b-873e-45e6-9663-b5fafeeae907", "sighting--38d9c4d4-1068-4dbc-a6f6-fdbb88576ebe", "sighting--5a45b3e0-acb3-4968-be4c-565f84219978", "sighting--654cfe10-aff4-4903-85a3-35030c332b22", "sighting--58c0d14e-08a8-48aa-942d-6f8e568f7443", "sighting--749cef9c-4a72-462d-8b79-d49c6353ee0f", "sighting--fbd0c8c8-7c26-4e14-8c97-40156c1ccc01", "sighting--794d2811-a3ad-4de7-a3ca-15e12f77a36b", "sighting--67569c9e-1ce7-47c5-a768-3008e2fad91e", "sighting--c4a9d8bf-2faa-4574-b6cc-485a245e164d", "sighting--65dbe542-8689-4db1-b817-3112755d1949", "sighting--6496f59f-9b60-4ff4-a066-01a038c14cd7", "sighting--b75eca71-79ed-4892-831a-7016955676e3", "sighting--8a93ecef-ff29-45ae-af40-7a645fb2be29", "sighting--296a9ead-4bdb-4e61-8a7d-cd98ff4e148b", "sighting--0c91e649-79b6-4f2d-878c-0c9e0e14ba4c", "sighting--824d14aa-52fb-47d3-b806-faf2809fd058", "sighting--16ef9f68-32af-4334-98fd-13c7a4a2db21", "sighting--de5a6b47-6846-466f-9bbd-ce5f85fb01df", "sighting--664b63dc-973c-4823-8521-a7f7d0597e31", "sighting--13b0d344-c946-4cbd-bd83-b63038262c71", "sighting--686978c6-801a-44bd-b91a-4376f2c68fa1", "sighting--a2c8b14b-bd41-42a2-b795-71091cd09c0e", "sighting--c0be4884-2804-4b3e-a70f-dcef0e6bd48c", "sighting--e33b5c5d-dd9a-4a7a-9618-4e325639d142", "sighting--8435e914-663a-457e-9540-8547081a002a", "sighting--cc36ef25-292e-4a02-bcfa-8667ac71e99a", "sighting--c4b21818-27f4-4740-8601-7bb9e91509ab", "sighting--59099552-a536-44f6-acb9-5bc2482919c1", "sighting--f4cc12b6-dc06-4e14-b293-b36cf11a302e", "sighting--d7205fed-ad16-4daa-908a-d932db9fd701", "sighting--6a1643de-3cf9-43f9-be2d-caa42d72b088", "sighting--3037083a-5300-48a2-811c-0e3cf49a2f59", "sighting--5a2a8575-34d2-4196-946d-54bc9d679400", "sighting--55f6e852-ae65-4996-bd34-3f777ec78c70", "sighting--c561c011-4138-4783-8e79-ad777566386c", "sighting--b43cee1c-9db1-4fd4-b158-d0574f52f6e6", "sighting--d83ccd34-5606-4c0e-adf6-e45faaf09bf4", "sighting--0b2f5c86-92b0-4c5e-a07e-6170a53bb483", "sighting--0bd6a0d7-3703-4d02-8797-cd6f22b815c7", "sighting--001c8ea0-b722-4bdc-a905-55207677ca17", "sighting--eba5d2f4-4ecd-4bca-a5c4-5916feb7128c", "sighting--66064d0a-c4dc-4c61-8359-07cb39f361d5", "sighting--4e5eca41-b900-41d4-b6b9-c205b29b4042", "sighting--f3efd615-af76-40ba-9fa0-20b55c2e1d06", "sighting--8580add0-fe51-4eb3-b682-279eaca663da", "sighting--fecabe0f-de13-4b6a-95c2-4fbd950cb65f", "sighting--8db2a559-371e-4b99-9ecd-65803fd951ab", "sighting--aedfb8e3-e42e-46d3-9158-a5446583c73e", "sighting--826ea86e-3039-4a19-b223-0f6fcad6850f", "sighting--feca615e-e09f-45a9-92df-abad5e202dfe", "sighting--1415dd57-b151-4998-b0db-d302346bd3d8", "sighting--78d3ec35-c56e-4fe9-9a56-78e5a75e4ab6", "sighting--05f93ffe-895a-4759-a885-66156d40bd9f", "sighting--28227047-ed8f-43ec-ace6-e48ca3f7b765", "sighting--cf8948e1-9f40-462e-8c46-52e43a7bedf7", "sighting--3329b25c-ec23-4769-a310-b944f7ddcee4", "sighting--d020cada-d5ae-4017-9c33-06f39adeaed0", "sighting--19a91d98-7534-4996-909f-c4e2f5dcde61", "sighting--464d1820-0930-4237-97dc-b9c4d4c1c78c", "sighting--1ea1bf14-b2dc-4ee4-a988-8e65cb7c7360", "sighting--36830663-3382-4c5e-a04b-53d30e90f9de", "sighting--6f044b2f-efe9-4426-9ae0-0c5991029597", "sighting--246d0cfd-8743-44e0-ac62-51d208200ce6", "sighting--0c5930e8-0066-40ce-b7ca-d3e867bcad46", "sighting--8b6fd187-ae92-4105-a6c4-e80fd9321891", "sighting--9db2eb5e-c6a6-497b-ac84-933d2fd20e7c", "sighting--29dc6f60-e68d-43f5-baab-d2f089b912da", "sighting--d0cb1cc7-98ed-4ba8-aeeb-9a29866485a2", "sighting--2ab3c3d8-a167-44d6-abd4-6fc3a2dc8e4a", "sighting--319671e6-d961-4940-a9b6-7dfd2bf5197c", "sighting--e1fefe44-ef2a-4932-af78-9b64a16cf551", "sighting--ef6f418b-71af-4844-a1f4-a73195de68fd", "sighting--65576771-18ac-4b23-98d1-57b6429551df", "sighting--7c9d46d9-f3d8-4233-89a5-bcd52fafd6e4", "sighting--670ff415-dc7b-4664-a021-a69f7b5c8d36", "sighting--dc275873-56e0-4e07-a6e6-5040e6bc49df", "sighting--18fefbfc-c39c-4885-a039-3f206c9b95a8", "sighting--059be2f5-cbf6-4bd5-b883-bba8161aec43", "sighting--d171459c-6fa8-4aa1-b782-a11ad3b1cbbf", "sighting--d7a3f831-e569-440f-83de-c77362bb770e", "sighting--d5710d2b-4fd2-4d4c-8e84-c33c17b72378", "sighting--8880b853-2c52-4631-b689-f5cb5afddce7", "sighting--41cd186b-a086-42da-aa48-cbbe25181a24", "sighting--b7aa3a5a-21c1-42d2-bf82-4cb46763a6c9", "sighting--86be5273-f7ff-426a-b068-7baa3cd3f844", "sighting--64c5616f-b64a-4a93-a690-192782432a8e", "sighting--1eaa6723-b914-4c0b-a07d-4cef727d9ee1", "sighting--b7c60c43-c48b-442d-a15d-ac02bb68d5b7", "sighting--16de99a6-ac03-45b5-8052-9796d5f787df", "sighting--f1730359-240c-40e4-92ca-e07d97eb2016", "sighting--cd3848b2-a910-472c-8245-0561bd7631c7", "sighting--d3e6f5d2-c8ef-4b28-bde2-b5adcdfa007c", "sighting--a5bd9486-5872-43be-a808-7ab925eaa0d6", "sighting--e20d7f35-263a-4357-85a8-00ff6f48de4c", "sighting--3c1ae989-a057-4a9a-bdb6-f6c0591a4686", "sighting--76fea91f-a550-4443-94ef-6555cf36c312", "sighting--688ecaf6-5a7f-4b15-90b7-fc06778c037b", "sighting--644d5e43-2959-4de5-9d94-1d8274fbb92c", "sighting--30207ac8-ffcc-449e-80e8-90d7089be2d7", "sighting--68d4a0be-db2f-4954-be7a-e38874bca916", "sighting--b9f4409b-8f7c-45ca-a877-1ac28912ba20", "sighting--432d2d8a-5502-4fb0-9103-419e754235d8", "sighting--a3a5d534-0101-4ce2-950f-c9d058b7c685", "sighting--85489533-3665-4efd-8571-52c44a1bf65b", "sighting--5d097119-b6c3-4154-828a-12fc08145ba6", "sighting--a27b373e-c9d3-4081-a9dc-f3bb0d09e3d9", "sighting--bf9e274c-2993-471c-9980-9cecf9b3c08a", "sighting--32759217-a4bb-4112-b199-5b50182f79f3", "sighting--9b6234ba-c4fc-4c63-a1df-090ce07371ac", "sighting--3d7618bf-27df-46d7-8ca5-8ed7291594fd", "sighting--5794f20b-3e0f-404f-a9d3-4b3ec7e702b9", "sighting--679b75b8-21fd-403e-b5e1-aa7f3c97bc3b", "sighting--2898ab63-1c55-498b-9a41-aa3ff2a8a764", "sighting--291a17bc-5a02-4a95-a332-94905c99c486", "sighting--6482ddd4-09e8-4ded-8fca-cf1c8f0aacc4", "sighting--b333670b-2d62-4f24-bc3b-b6cc97b6227b", "sighting--6cb0b3a3-3e22-4647-b66c-cbc95585b7ac", "sighting--6d42b9dc-b4f9-4ce5-83f6-fa38d9579af5", "sighting--6026795a-a5b7-49fb-8fb8-e315f6f38ba2", "sighting--e411935f-c56d-48a1-b7d5-5c1c85ed2614", "sighting--36803392-a63f-4c9b-bf9c-2de7f65efa57", "sighting--d23a57bb-748d-4341-bd93-cfab77bc2a78", "sighting--27ba6e2f-4ff4-467d-a97f-de96cffe30e2", "sighting--4a2dc564-3f50-4e2b-b657-15778c44461e", "sighting--19b76e04-d851-4321-8a3d-266d1e78c64a", "sighting--66eadf2b-4f6f-4afb-bab6-463024e6b009", "sighting--78308e47-a944-40fd-90b0-8cb5158b1f81", "sighting--01f7eabb-d44e-4f24-b3f8-268a0e297cfb", "sighting--62b7c3c3-6b6a-4009-b9bc-dfa8468ac429", "sighting--5a888f79-2076-451c-806b-2c02d6e3b5d5", "sighting--130606f9-d914-44c6-8fce-29425cd7d5aa", "sighting--38d4baa3-7330-4aa1-b448-5ad858adc02d", "sighting--050a7874-84d9-483e-bf2c-ad006075b2d0", "sighting--a734ff0b-5071-49ab-9d73-1247f269789f", "sighting--e88f9cf1-f644-453f-b349-bd49922c90f2", "sighting--4cc414f1-b394-42e8-8f02-ac39553b985f", "sighting--deeafdf3-2082-409e-b88e-3309edb6223e", "sighting--11937ea6-d231-468b-87c5-5b747ccd8071", "sighting--7bf4636b-1029-4a73-b7ba-876b4be32fd1", "sighting--f295b87b-29d5-4fed-abdb-b6e6fb1c2b92", "sighting--9a0aba0b-ac03-4d4e-a2d6-5989acb2e09f", "sighting--7ef266b0-580e-4850-8e5c-6c5c37cb86a7", "sighting--e3ca9d41-420d-4d1c-910e-2327b1c40d4d", "sighting--876527b0-e328-433a-b9ff-f7a8591b3e2c", "sighting--b3c7c177-095d-4e0d-93a5-b4cf158e9592", "sighting--4d2e8522-c77d-400f-8d90-8f29e51f4640", "sighting--45b44070-afad-4509-ab11-766f064f1bee", "sighting--5e00594f-db75-429e-8312-115d2709913c", "sighting--d1f9807c-f559-482a-aeb3-da948fa84f3f", "sighting--f8f8a9bf-459c-414e-b120-1630d346631c", "sighting--a398c22e-d438-45e3-80d3-a44cc8d5c3db", "sighting--9ef633dd-f847-45c1-84f2-7f0908029e2e", "sighting--612c8626-06c8-4953-af3f-90ffe52b8fdd", "sighting--f0f1e41c-708e-428e-ba75-c943fa957fca", "sighting--56640a9e-8ab1-4049-9258-1485edc3d023", "sighting--8a5a9cdc-1105-4b54-93ec-5ebf4b73dc69", "sighting--9ef24f72-1d65-46a4-a32b-00fd79471e90", "sighting--a5ae411c-7428-45a5-8751-6e676099eebf", "sighting--c3de46eb-6d34-49bd-a4b5-e1ce8d2ecd19", "sighting--b4eebf3c-1430-49e0-90ba-cb02ddf8c5da", "sighting--62e7bbe6-b8eb-4d16-aa22-53784ee83f48", "sighting--b7434216-4f70-489b-b12c-c11dffbff4e2", "sighting--f375eb76-8874-443c-8e0d-811bcaefc047", "sighting--dc03abfd-456d-443c-91b1-ff2a14102aad", "sighting--05c40d5b-a0ed-4fbb-b803-68029c2dfbf6", "sighting--117e79a3-5957-405b-900c-e703da54ac92", "sighting--253b2bcc-11fb-4420-9f82-b27cdc3f370f", "sighting--66135531-110c-4fe6-b6b3-005ca6930dba", "sighting--82a8d5f3-1f46-468d-987b-7064847c4978", "sighting--1622171e-2bce-4465-bae7-b9051ba8ee08", "sighting--7fd62d11-ae56-447d-8a39-c40947e6c825", "sighting--a826cdb3-d604-4818-96c6-7bd8bd115083", "sighting--668e81ae-a625-4be0-9d26-4299bb4a2b74", "sighting--eccaa0fe-bcd3-4162-b95e-7e122f28d49a", "sighting--55b731ef-9217-454f-aef4-5353cc0d9407", "sighting--bc09bcd8-9abd-4648-ba3f-bfe6d5509b2b", "sighting--39410ff9-e33c-4fb8-b994-2f6f3d4c1144", "sighting--a50fd7f7-173c-4748-8aa2-5865acf76945", "sighting--07748271-17d6-49b5-8e40-4420d019c106", "sighting--5b4e5b7f-1064-47e4-ad6b-2aa2090730fc", "sighting--96189ae4-a664-4ea6-9a57-04d6537674e6", "sighting--0fde2a5a-6c79-45b5-9680-69593e77bb24", "sighting--0fb7937d-f462-4caa-8f8d-aa6101235069", "sighting--9c978113-aa1e-4f12-beba-22c96c7a90b9", "sighting--7321ad4a-4198-4c3e-8a5b-d2459b4edb62", "sighting--5c09b0e7-82f4-4fc4-835f-6c48c658ceb5", "sighting--7b51cda2-b1c6-4064-9504-f731b071500d", "sighting--6777d4e8-a840-4b62-9183-c9402e29d986", "sighting--747b722c-929f-48dc-95d6-b60550448427", "sighting--a881954a-3728-40fa-b388-8817e343f0ed", "sighting--7f670f6e-86cf-4a64-abdc-d840720cd00d", "sighting--9cc97ac9-f244-4ed4-94d8-ae0b336429a2", "sighting--06da9427-543f-4222-9426-ead8a4edfb11", "sighting--a7b1fa8c-be1c-4379-b225-2e8ceaa152ee", "sighting--1232c310-a320-4fce-8387-46ea558841fe", "sighting--bf074465-4f6e-410c-bf76-f222b2feb522", "sighting--a1f479f5-1f07-4a9c-a9bd-c755ea66b191", "sighting--91935b6c-aed5-4654-9900-6a87afdbd8dc", "sighting--8a98ce60-ff0a-4f8d-b10a-ff79f9f269d6", "sighting--fa59ed73-1d5b-4568-abef-e7f610fb71f0", "sighting--f5df0e0b-bbe7-45d4-9c02-8798290da5ca", "sighting--f981bfe5-c930-4bc8-9b38-e1af659e988f", "sighting--0f4dcd09-8d03-4e44-b96f-0ce38c02afea", "sighting--1004d23a-7816-44f3-8657-0128343caf16", "sighting--5f447f5b-1192-4c56-9858-940eae6bd2e7", "sighting--2fb00cb8-e508-4ff9-9fc1-252b8825a599", "sighting--42c9b602-2d5e-4464-b210-35af19b580ea", "sighting--398e4b33-ac5a-41fd-9b52-3c94e8056df5", "sighting--e4e4d3f7-41aa-453e-941e-b4e50eee9cce", "sighting--7e156ebf-4e74-4778-a954-431470831f98", "sighting--6c943d8b-c23d-42a1-ad15-be0fdb72a74d", "sighting--4bf1cbbb-c22a-4624-80a2-8247c4c9ba44", "sighting--c618903b-bc25-4c83-8a1c-b4bcab620f1a", "sighting--d46df0e4-e629-4092-bed0-e77fea58d51a", "sighting--bcc2cc3e-85f4-4584-9d0f-0f02bc89af84", "sighting--9886348d-b67d-4866-8ee4-e62db5f0ff1b", "sighting--8593f6a9-6ffd-4272-a057-ab6eb3978c34", "sighting--54f8645e-cd52-439c-9653-aa7f950d848a", "sighting--f5c87d6f-52bf-430e-ae2a-8b4245cdaa31", "sighting--f629ed31-31cf-47a9-ae6d-16744d4cce7f", "sighting--6b8e5a39-ba4e-44c0-8b29-e5ccb92390b5", "sighting--6d4498ef-e70b-45b0-948f-e18dc4f231fa", "sighting--33b388fe-c6d0-4f00-8a49-9e9b2fe206c9", "sighting--07475ff7-f371-406a-8fb4-d41b5d5b7244", "sighting--8b469011-d25d-40c4-93d0-8053c1f33015", "sighting--ad523b0f-954d-48f2-8030-64b3685807be", "sighting--176cd775-20a1-4224-b228-a140778765ce", "sighting--9175e99d-1e23-4dce-9c41-10593d7d97e7", "sighting--ce731777-c1e0-42bd-84be-ae9012245b01", "sighting--1812d10f-a17c-48c8-866f-a1ffcef7b616", "sighting--48620373-f2a1-416b-97c6-0a6c457fc9e4", "sighting--ecc3a367-797b-4414-bfe8-c90b6626a608", "sighting--7ca72dd5-e1d2-4fd0-bce1-23cd01cfa75c", "sighting--f549d046-d072-4342-8e4a-35fe5543a2e5", "sighting--e1981865-e151-4ead-8215-5b72fdeeb72e", "sighting--3f47db77-29b3-449b-9739-39bebdbd41ff", "sighting--f4dd0108-6a8e-47f8-8c41-7057b0d254e4", "sighting--b1fdf1e7-4bdc-4636-a197-4caa22692ab1", "sighting--3a6bfb15-1c39-4144-a062-47c69a850191", "sighting--532de01e-b6d9-4a92-a21c-015045aada8d", "sighting--5be7690b-7072-4cc1-8529-5daf809171b4", "sighting--15c3e271-3388-4edf-ac76-db8872a0a576", "sighting--87eb8cf9-a3c8-40b1-8f3b-a1867be4b477", "sighting--91ce6cf5-8e72-4839-bbe3-ffa4a38263e7", "sighting--0958d545-1351-441d-bf68-9bb4501ea4b3", "sighting--d3b8d047-8f8c-4c74-9412-f9d3dca472d6", "sighting--a7fa42ad-c2af-42f7-8044-9e1f890a0a2c", "sighting--ccc79913-623d-4633-9635-bcd913b34578", "sighting--141f93fb-4d8a-4010-bb9b-c56ed3629872", "sighting--a55f6b9a-f693-4a55-a4d4-e617453351e6", "sighting--5fa45840-06a6-4444-ace8-022159d644df", "sighting--625e9bc5-ea0c-4a81-924c-694ad245341c", "sighting--a808ca39-224b-4a8d-a24a-ec1332d0b21a", "sighting--ac92a82c-0449-4064-b428-3a3836dd8e61", "sighting--2d1b0b4b-7dfb-4dad-8b8c-709962437cff", "sighting--0cee109c-e9ba-44ba-a700-521958ec59fb", "sighting--29a218b4-3d27-4c44-a8f3-d228c9ae6ae3", "sighting--18354798-5b9f-46ef-a575-01cf9553753c", "sighting--cbd432fa-1dcc-4b90-9d93-0892a64ad829", "sighting--91766df5-f3d6-4428-94c2-a46dae62dbc0", "sighting--4d9ed415-fc28-45e6-ba20-8e74306c3afd", "sighting--07010ef9-34e0-4fa6-801b-9da2c3702ed7", "sighting--4bcd178c-a2d0-40b5-979a-ff927b9774ac", "sighting--1dcaac81-7f5f-4081-b511-7d89046e7fe8", "sighting--465ab5c0-2d04-4d2a-8d0c-49ec68cdbe65", "sighting--b8f66474-f7af-4620-aa2c-13c376a7532c", "sighting--fe3ac1d7-e3f0-4cad-839a-c16044245309", "sighting--76bfcf84-72aa-4ffc-a475-ca648cc5a564", "sighting--7bdda6b0-c070-4e39-b186-2a4cde84b1e5", "sighting--5716fd48-7db1-4851-b398-383d6ca7c720", "sighting--574ab8eb-8afd-46f7-ba9e-e8dd27bf8076", "sighting--1a1c3d7c-6d73-4653-b559-9a4a8b45d7cd", "sighting--a9225fdb-8b2f-4a16-9003-8b4785bf49df", "sighting--d41f19c4-72f0-42d9-ac21-ae353f932d14", "sighting--8727e406-599b-4640-8256-4722c6977347", "sighting--37416939-5c9d-476e-9613-1c2996adab90", "sighting--ceaa0e66-11e4-4fa6-b254-c4bac19a715e", "sighting--cc17c0c5-fe44-4170-bb23-50adf05833ae", "sighting--2885ecbb-401e-49d3-bd91-e6c0b3854b81", "sighting--6dfd22e5-82e4-4172-970a-67d16e1cb2c6", "sighting--ea064610-3f0d-450f-a35f-3e99bf4f2f86", "sighting--017fa517-fd10-4a06-9c85-604636f0647d", "sighting--2fd76739-3f76-4e51-b6bf-e5e77796b9dd", "sighting--6839011c-f30a-4865-ac44-a88b80b39073", "sighting--503fde91-dd41-4959-af0b-53b8e6f78409", "sighting--5d6bc0c4-6b11-4a79-a926-5c7e8856f4f5", "sighting--81ba6bc9-d4ef-4e10-bf2e-948f7c996370", "sighting--16be9093-6371-4a63-b623-c01ec405fcbd", "sighting--2f8dd734-2c46-435f-9b8a-0ea459ee8a24", "sighting--b2c552bf-d48d-4791-872e-dc5bee886548", "sighting--2fdbb627-5f72-47ea-8fe3-a75c43463a62", "sighting--e858e0bc-1fb3-4dc3-bfc7-9f6aab7b342c", "sighting--b84c5830-cedd-4188-85f4-b79f9579ce25", "sighting--ca26af00-795d-44ae-846d-53492714caca", "sighting--fea892e3-a078-46e3-949b-b7151a3e55fe", "sighting--b0b2b7dc-22fe-4d42-8505-d32e08dfaeca", "sighting--6254d2ac-0eab-4599-bb7d-38d2355162f0", "sighting--77799201-3298-4b8d-8873-fe6a026ec3e1", "sighting--b9558cf6-9b52-47b8-b0d6-04600183111b", "sighting--06bb3bc7-5749-4d5c-9dce-41d2627dc485", "sighting--056d6700-742e-406b-bc04-ce4c234f6e25", "sighting--6ec949e4-862b-4524-8c7e-1bc0a52ccc2e", "sighting--a028ce64-0396-43aa-b257-8b7fb8affa48", "sighting--ae85f2e1-ae93-408b-96fb-031327cd82be", "sighting--98a153c7-df43-4cf2-b174-ea4902abce80", "sighting--90bc8247-980b-457b-99b4-349b00801719", "sighting--96d6d3c2-264f-465e-9a5b-709fc09327e2", "sighting--6e6e5d06-15be-4550-bbe6-b97524987b71", "sighting--c4431f0f-3083-4591-80c3-fb8d49a37dc4", "sighting--1ab90cc1-fb19-4c55-8096-5aefbe9f153b", "sighting--9e381ebc-0969-4799-84de-b02348b3e685", "sighting--eb3612dc-d35f-40a9-afae-a75e58987228", "sighting--c9ae368a-25b0-41c5-b3b0-8faeadf3a6b8", "sighting--4ac4b310-a8bc-4de8-9a47-2490e5910960", "sighting--15a96708-5e88-4e3c-bbf4-9fd1c9c60f14", "sighting--ec4839ca-9e93-4344-bcf2-5c3d698c4648", "sighting--1f787939-ad25-45d3-9eb7-ab37129d7128", "sighting--16b08b9d-b57b-40cc-8141-9cf8856214c1", "sighting--72885e04-0127-4ab7-8c67-5e01b88ce259", "sighting--54eca8e9-0829-4b35-a5f5-5f595fe9c729", "sighting--7f72247a-a40e-4675-9ff2-d7ab091a7870", "sighting--3b7c1250-2119-41c7-b2af-b5d1649c9431", "sighting--697af05a-4aa0-401e-b43c-4ab89c15e6ed", "sighting--e76b904a-9f1c-42ba-ada4-6105c14f2c86", "sighting--85200be2-1afc-460e-97f2-b05437be91b3", "sighting--04e86422-208a-412a-bdbb-2754bc428304", "sighting--d3522a8e-fa76-453b-b949-a970512075a3", "sighting--69e24199-87aa-48f3-a105-e3e54243192c", "sighting--8035af92-e14b-42f2-bd4e-fe1a2771276c", "sighting--555cc34d-a66e-4381-92c5-8a8ca96cfb31", "sighting--3354653f-d29f-4ba9-83d1-e2aca8523679", "sighting--ed927996-575d-4377-989e-9a344519e4ed", "sighting--96bf1955-655e-4892-a1f2-6487d2ecc518", "sighting--891cfa99-7cba-40d6-9d27-1cbfb5344fec", "sighting--309f0f17-4081-4646-a131-de2ad90c720a", "sighting--d25945c2-7bd0-4f82-9ea7-13dcd92e5904", "sighting--66f0a34b-18f5-4612-aeed-8cf39cc415ac", "sighting--b88ddc60-c776-4c9b-9615-37729dfdeff8", "sighting--cad14c01-55ba-4ebb-851e-c8727b58bf60", "sighting--9a1471c9-e1c0-4fc3-a3d5-4c228ae6849c", "sighting--94320e9c-1def-4d31-a03a-8cbc88f5ada2", "sighting--e3ac1124-fb95-437b-8d01-f9b72b08cce4", "sighting--3a93812f-6507-43b3-9197-d3ffba228480", "sighting--c506b7a6-8bb9-47cc-8ce3-8377ca63c43e", "sighting--c89d1b25-545b-4be3-be4f-5e47da1929de", "sighting--70168759-b8d4-4804-b551-1ec4546f6e18", "sighting--cb4671af-ced9-424c-bfcc-bf1090033a5c", "sighting--93e76ee2-df6d-42c0-8ab7-8b010d080c06", "sighting--d459a97a-fd53-41fa-aefa-e352f7756b6e", "sighting--3c66d296-6ab5-4585-9e39-3f7f8a6adcc2", "sighting--34f50080-af13-4973-91f8-982a6e69e199", "sighting--8c93e6d7-2831-4c48-af4c-6f0a0d40279f", "sighting--3e4aaba6-1700-4aa7-a38b-f1a0b63ff0d0", "sighting--2da724b4-2f4e-4b5f-8292-ba30f855197b", "sighting--f431517b-3308-4ba8-b1a1-9a478ec36b98", "sighting--254f6135-a5e4-4d06-951d-42ad60f05866", "sighting--476a7a17-0815-44ad-83cb-85be4beb903b", "sighting--55e6a628-2cd8-426e-a3d9-9de0ef2eea18", "sighting--8af13fd1-fd3e-41de-abef-5dec5efb098f", "sighting--81d5cbbd-1e85-40ef-b97c-8d60a9598549", "sighting--e3607537-422a-4984-89af-b1c259035fa7", "sighting--061ab105-d1e7-4dd8-8b16-8f253eacda37", "sighting--7bc9ed31-20ae-446d-a592-1ad48f836c4f", "sighting--2114df3a-26e1-430d-9ddf-5416f9fb58da", "sighting--eb451a8f-55ee-4063-9968-f733dfb6b407", "sighting--b9f6da65-c9c5-400f-87c6-376d7fc4fbee", "sighting--b714cbc0-2e71-4ae1-afdc-4a02cef5d187", "sighting--624d6fd6-8150-4e3b-8d47-9925244a93be", "sighting--95c8c6ce-d425-42e1-a7bd-238bfb68c132", "sighting--db5e3015-d4a0-4e43-8b04-69ed8fa6de26", "sighting--ae3d67fd-4acd-4d9d-888d-ac588b2fb82f", "sighting--080a781f-9888-425e-98c7-6960d6cee57d", "sighting--b0567b94-e7af-4244-bf8d-87ebe7b369fd", "sighting--3c0e5f8b-b5f4-49d8-a6a0-76a1917271dd", "sighting--b8b45f46-4a74-48c4-8e6f-9e9b60552b75", "sighting--da744779-f975-4148-9e7c-0ef42655a4e0", "sighting--30eb5aaa-0d84-4dc1-adff-66b95865831a", "sighting--7a1eca94-f5a9-457b-a85b-4ede7f8d5d4d", "sighting--6a699b9c-deb9-4c6b-9442-48c13fa55f69", "sighting--3d14336b-268f-4d8c-99c3-718ba6e66124", "sighting--a0840a01-b095-4860-b3e7-c46785c39058", "sighting--129fb895-45d2-497e-8764-bba58184b193", "sighting--2fcd60a6-2183-40d1-ac1a-08ac00ba1222", "sighting--a1223689-8222-434f-ad55-bf378e2ae806", "sighting--0592bb55-d524-4130-a301-dc9101d15328", "sighting--0ee39f5d-3f96-45df-89b7-b0808e217fcf", "sighting--742f7d66-eeb0-486b-9038-14e0ef2a40e9", "sighting--333acb78-2dd4-43f5-acb3-d9eb91ea00ce", "sighting--24fc571e-8781-4aa7-b3a9-4ae41ab3f1a8", "sighting--06fc4f31-1b14-4d9b-934c-45cc0a9a6c14", "sighting--83accd57-e9a1-4a42-a53c-dd94fd9311a7", "sighting--a1c376a7-7c89-4e6d-81c5-5b0e6277c7fa", "sighting--eebc63bd-c91d-4c32-a119-92cc93c0a4a9", "sighting--4809e33c-c504-472d-b292-b5e0043d5a16", "sighting--13f339fe-8e00-4ece-8540-ea59bc734853", "sighting--eccc6cf8-9ff9-4a80-bd21-8cc6cb4a81d4", "sighting--6b9dacb5-ae88-4308-857c-731e4b89ce6c", "sighting--bff3729b-4f46-4080-95de-e29f0c4d391b", "sighting--62dde5e0-7700-4709-bb36-85612d897186", "sighting--08885a6a-b3e5-4528-b566-653d1365cd86", "sighting--f45a58de-f4cb-4ad1-9b11-47d4dec951de", "sighting--62248776-2cfc-4598-9c17-9281d2c2f3b2", "sighting--281a9e40-c418-4146-b082-5cc81412198b", "sighting--dd7e6230-e74d-4b78-8e8a-f4ea5a673688", "sighting--31b8ae97-497c-4988-b3fa-294fbaecc482", "sighting--69621ac1-e1f7-4c81-8fc3-bd2938c76abc", "sighting--ae8a5540-7b4c-4d1b-950c-618d76ba8e77", "sighting--0a33d673-f76d-4c7e-8e60-91591b86290c", "sighting--5a102fff-3c7a-4bdd-a8f0-36845723b9af", "sighting--6744af83-c5a0-45a3-8587-d7f3930bc313", "sighting--21254076-cceb-4aac-9c95-6a7dd94ac46b", "sighting--2ebb9d70-de76-428d-a2f3-1780bf0dc598", "sighting--ba77d1e3-7694-48bc-ab55-e7b4ed5fa563", "sighting--0ddb4491-cbd7-425e-bc04-e8a93a87b5bb", "sighting--fa7d3b34-7a9a-4704-941c-af5eaabff2df", "sighting--449b2bba-fdf1-4f57-ab27-b5cd0989d744", "sighting--109f9122-d57b-445d-aaed-55789724679b", "sighting--0d325a50-840c-4e56-8672-47cf2d94d994", "sighting--5b255236-1738-42e3-9dd4-681830657907", "sighting--52eb7fd9-43f0-430f-8def-b4ae5175d5a9", "sighting--49edaf4d-6801-43c4-befa-ae9a8bcdafe1", "sighting--ff398d28-1183-4a73-a1e1-ab0da4885a05", "sighting--f0fb67d9-414f-4803-aafa-9ee5260d8b11", "sighting--cae88790-a295-4348-b842-7dff9432a8bf", "sighting--8fce0e33-e517-4994-b451-5a8786a1c513", "sighting--a84228fc-dafc-4ddf-9fcc-6acfa20b28cf", "sighting--559643fc-2ef6-4047-8598-09f01c57504e", "sighting--0fdd812d-6f55-4e27-8969-a02d4023ae1d", "sighting--9e8dc6cb-2661-480b-9b0f-4f971e0579d3", "sighting--b45c9b95-cd74-4773-acd6-8bfa8bda16e9", "sighting--479cfe12-beae-4ee7-8ebc-eb346a617d9b", "sighting--57cd9fcf-b342-4de0-b4d0-6711e3b32a2f", "sighting--27604b74-4cc6-4f9c-86df-fd56938027c3", "sighting--191eb31e-9b1c-422f-996a-4f10131230a9", "sighting--71e06300-d0c9-402c-9fc2-c6faa853563e", "sighting--358e7bab-5184-41fd-b60b-5d8442b2e290", "sighting--e255b07e-f74e-4d80-9232-35fef7b7c598", "sighting--385fc0e2-481d-49a5-9294-6183d0e8b0a6", "sighting--433525c7-ae59-44c2-adb9-271260d5c3c9", "sighting--934f5857-1d2b-42b2-b434-a438873cc78f", "sighting--ae075135-3c52-452f-aef4-e65c7760363b", "sighting--0b6dd922-3013-4f0a-8416-95e2f267a1d8", "sighting--205c495c-b2e5-4d5a-aee6-099e15e7a8c4", "sighting--06b643f5-9c44-4579-8e0c-5210625d298d", "sighting--ed4d10ff-c484-42cf-841f-858b22aa6aa2", "sighting--157797fc-953e-4ddb-944e-86adbd04b73e", "sighting--eaf7acd3-c3e9-4311-8399-bb4172be5e9d", "sighting--4ed395d0-1293-46de-9982-e2d3088b60d7", "sighting--0903b288-fed8-4a1c-93e8-ebdc1d5e7e96", "sighting--3283e64a-9af2-46af-8aab-8c6d7b0cc2be", "sighting--bb724274-7af0-4d14-afc0-28f3171d1d3f", "sighting--42132f7e-9a91-43ad-8a19-b98d2602f25d", "sighting--319c7570-33a6-4cb2-89f5-a1941e187cea", "sighting--898a89e5-e2e3-424f-9f79-ffc5dcfb2150", "sighting--32ce9ebf-d942-4b98-9fc2-c455265ee6dc", "sighting--2c13a109-c17d-4eac-bb58-c165bbe1322e", "sighting--c202d30b-52d9-4726-b694-1744c35407ca", "sighting--b3cfaae1-25f8-4d15-8e12-0b18f1b3a066", "sighting--47d4a61c-5f72-4357-ae9d-b1b98ea13baa", "sighting--1f3f7d6a-6332-4bb3-a67b-f70d09b57779", "sighting--74b8c093-d339-4124-942e-6b2fba1b456b", "sighting--f5468aac-f1a0-417c-9cef-32a68b0333ea", "sighting--868042be-b7c2-427a-bcba-ff1d93a5da66", "sighting--5534a0c8-1a40-4b9a-9236-55f3f9411caf", "sighting--5bbb4dd9-3663-4f83-b116-bd577e6f18ba", "sighting--aa421252-9dd1-47a0-874c-fab9cf046603", "sighting--276814ad-d7c6-4df9-afab-a1206c698eab", "sighting--4fe426d2-5701-499e-9f1a-9e631ca879db", "sighting--b6a8183c-260e-4969-9896-574ca6c318bc", "sighting--83b6eab4-761f-433a-bccc-d6680caef09f", "sighting--be4430bb-f110-4d84-b4ae-47590514473f", "sighting--6138ea61-d784-46f6-86d0-f714409e373e", "sighting--01172f72-74e1-49d5-a8ee-ec1bb22bf8fa", "sighting--7c2e3037-329a-41e2-92f0-e4e40ea5de1d", "sighting--21793972-fe6e-4622-8053-e628d75b1657", "sighting--8682c659-77ac-4136-a21f-05c6ca8b0497", "sighting--4d5e3f60-6669-445f-b837-dcf78f0ccebd", "sighting--cef4f6dd-5bcb-4a3a-8aad-afc52d498e08", "sighting--f729f408-8541-4884-b0e7-e9c3ec0d207e", "sighting--2f6f37bf-7c37-4055-9b01-96e471f29f3c", "sighting--44f0ecf7-7066-41fe-8d0e-b1e8e0ff0e10", "sighting--c53f2b20-805e-4cc2-8557-2574d1108616", "sighting--d2d18a11-a7d7-455e-9fbb-e4c374d82705", "sighting--cbe5dba9-8e15-4f76-9a98-ba0576f762d8", "sighting--0e3ad6bb-803b-4f09-85d1-5eace76ea30b", "sighting--b8308913-9b77-4059-9e3f-d9c80a5ede0c", "sighting--09fc29d3-e7ac-4674-8398-d90752120864", "sighting--57d5d07c-e204-4d9a-a813-a5bece56b5a2", "sighting--70e88b95-3408-4c5f-81a0-17c2b65e6254", "sighting--74e378b1-f6a9-4aca-a42f-93e5d4a78b8b", "sighting--ba0051da-6aac-4df4-bacc-9f7141c62900", "sighting--0141bfbf-de5c-40b4-94c3-6e467b76b020", "sighting--2876be0f-29e1-406c-b238-aaa4e3b10dc7", "sighting--9b80fab3-c732-4427-95f5-920f3b4e57e5", "sighting--b1526c49-b0f0-47f5-9b52-25748f68d8a3", "sighting--485cceeb-9bcc-4ae1-a956-d1152110fa00", "sighting--37599564-3e33-4f81-98fb-7055620ade0f", "sighting--08cff9fa-9e4e-44e0-936e-d102aab17e6f", "sighting--2ac92eb7-9c41-456c-ba9a-0f8438a5ff4f", "sighting--3b365d52-db68-42f7-8352-1875abd47370", "sighting--250d5cfd-7d3e-4dcf-9661-301d00d88996", "sighting--c97673cf-4d20-47d5-a364-8b4508fac9da", "sighting--e8c05581-76e5-4869-989d-67cf162c7b1a", "sighting--323863e7-2f60-4c82-89ea-148c5a82d214", "sighting--7280f3b6-79b7-42a2-bed0-2bddda92a8af", "sighting--b7f086b1-8da9-4552-8c4d-fe4f94845e0b", "sighting--cabe47c3-d263-4428-9a15-f3ce0b2ca4bc", "sighting--a465879f-bc76-4895-8ad8-39bac9ab8492", "sighting--14371da7-c706-4754-bb65-731742937c98", "sighting--625e5ed1-5a60-49e0-8516-4dfb52f45d9a", "sighting--819bd3e0-1a33-438b-ad02-deb8c4587ed8", "sighting--0d124998-13d2-4a9a-95ec-0b8e2f04dd8a", "sighting--c71148de-04b1-4193-af2b-7d0ffcc10632", "sighting--83461ce9-33c0-4dea-83d0-69b23117e8af", "sighting--cf1628ca-3b8c-41a1-ac33-1409988c2b61", "sighting--59b082b3-1501-442d-b98e-d4f2f4a9e850", "sighting--686ad5b1-4891-4248-a334-17309e2fde2a", "sighting--cd597551-338f-44f0-8842-2bc9ebe57cdf", "sighting--cb8cf134-e723-4afd-804e-7f3207253f89", "sighting--3956c7fb-6433-48ab-b008-f997f7861988", "sighting--36b92212-08d7-4c25-853e-a189d0969282", "sighting--434b60f2-1750-49a8-82a7-523f87a68a2d", "sighting--48207913-5118-4f29-bca4-89725c7875de", "sighting--7728191e-1761-4c04-8778-17f1983172ed", "sighting--34259e94-bf5b-4735-977c-08d5911ea57d", "sighting--51503794-2246-4006-b796-1ed046e74285", "sighting--fee1984d-2a9a-423a-973a-bc14164b0927", "sighting--eeb10e9e-e5d4-4e56-8bc3-c932d3b29734", "sighting--f7cc0a6a-e1f7-4e42-83b1-d432ae6d8538", "sighting--e3ee9e5f-082a-445f-b808-64881da22057", "sighting--db1a3eee-20ba-404c-baa6-90bff8293ff0", "sighting--396892a0-b114-42a8-986a-8b28fbd46ed2", "sighting--80170570-ed12-44c9-8cbd-43399b010680", "sighting--2789bb18-0368-47dc-b0db-2d2055270824", "sighting--868d3f67-f1f8-4d15-9f75-d1136325252a", "sighting--6afe56c7-315e-44e0-bbc6-63c5f29b9cd6", "sighting--bffe529d-0fcd-4f0c-acdd-ededc48df8c6", "sighting--16a031d3-2df8-4245-92d2-bc9950c0c7bc", "sighting--fc94dd2c-a04c-4ff8-a4fb-0d66d8ac6727", "sighting--6d4d41cf-ac40-4ead-b0ef-9dfeb3b4f72e", "sighting--5d00f2e5-1864-490f-b6a9-e29d43b2a39a", "sighting--48961f7d-5dd5-4a45-88d4-c8697d4419e0", "sighting--31141652-4145-431f-8d8f-9bd68b003183", "sighting--9d702bcd-19a0-4a80-953b-9613aeb0d66a", "sighting--ba8ae096-511c-4fea-987c-e3e647fa683e", "sighting--53d88033-4787-4831-b338-4cb49c51a338", "sighting--0b26c85a-fea2-452f-8cb2-b3d6c878169d", "sighting--c7c07a80-5a89-4bc7-893e-14c44bee911b", "sighting--60e4dd6a-2db7-4b5a-91b7-087275f401c4", "sighting--d27283b2-85c2-4035-b771-42173c0cb894", "sighting--20279650-b5c7-4571-afb7-ea745d4c9407", "sighting--7f69bcc6-adf9-4ee5-871d-40cdc3b54342", "sighting--dccd9d6f-9ac4-465d-babf-fcffdc912a39", "sighting--0eb1de22-6466-41f8-ae84-58f636320dc4", "sighting--a884195a-3edc-4478-909e-155d7e262acf", "sighting--0a1a4491-8093-4898-9def-e6784a181184", "sighting--5b3dcb84-f439-42a3-95b1-17ff41e3e71a", "sighting--477f110b-b278-4ae0-8d46-46f499ada6fa", "sighting--87c7ce31-1672-4d40-8ded-91f558cd5233", "sighting--246b60cc-0290-4cf1-80d7-b475a4f4c002", "sighting--28ff27bc-4847-4e85-b89c-eb5bab006a81", "sighting--48835935-f554-4501-9527-93c19176ae5e", "sighting--02b8b7ac-7989-4317-aea5-4cacbf9f6405", "sighting--68f20a9c-ca30-4120-a164-b609c8f1f51e", "sighting--438a30d2-8c42-4b3d-9b29-067c15a8cb90", "sighting--b8d2b7d6-c4b2-4da1-8745-7ed09683ca43", "sighting--885278f3-eb17-4760-acbe-7e28d9e5a75f", "sighting--c7ebb6e3-eb20-4605-b4a5-00e17dde127d", "sighting--d7e902fd-5e44-474c-837f-30054b07057d", "sighting--19ef35c5-059e-4d58-a323-6b7812ddf557", "sighting--5189997b-2be4-4e28-924c-6d6889e4a05a", "sighting--838ba673-5fe9-406e-8d2e-f641f4270800", "sighting--b7ac7559-afcf-40a4-9504-fba0945d385f", "sighting--9970297a-3294-4fb6-a461-d96ff4d415d4", "sighting--f57e3841-d358-40a0-903f-d4cdd7f1d827", "sighting--4a082e4c-59f0-41d6-ad85-750bbcc8b2fc", "sighting--c323eb76-087f-4e41-96c2-7f3565885da4", "sighting--837cdba3-96bb-43e6-a0f4-cdab80e54b84", "sighting--e01bdb6d-48d1-41c1-96ff-ef734650d4ee", "sighting--15d0f2af-9b0f-4489-a6d5-cadec01f7d72", "sighting--9eee4e0b-f9d1-46ac-aada-a6bd4b6b9a46", "sighting--25e95640-9f60-48d3-9e44-42362367b7ba", "sighting--6457acae-9696-431d-bbe1-ce6d1b776a1b", "sighting--ac39d046-51b3-42df-837f-801f1c586685", "sighting--614da0af-14e2-4e05-91e8-47bc698186c3", "sighting--43eee6fe-8ffd-413c-9b09-64d4b925fe16", "sighting--58927235-0851-4613-bfb1-2f8f09bd68b8", "sighting--52cebd71-c0ab-411c-84b7-6da90951cdcd", "sighting--4128e450-9596-495a-9e55-13b8d2e2b59f", "sighting--a95f5418-ba50-493d-bfb7-701e887fc513", "sighting--42c4d7b2-4bf1-41b5-bca7-5169a15cf625", "sighting--06184016-ca66-4416-bed0-86fd7b540f7c", "sighting--376d3ad3-d4b8-40c7-ac3a-a87fa071deb2", "sighting--c4d6883d-531c-4fdd-90cf-5d8b90e43b6d", "sighting--130fb5a7-32f1-4e20-a7e7-8b438994a433", "sighting--b287ccd5-0e2f-473e-8faa-c7ca26c390c1", "sighting--f7ef86ab-1729-4f22-be90-1e9703c388b3", "sighting--c280144d-851b-4405-8fa3-b2540718092d", "sighting--c8457c9a-1b58-4167-ad94-9d6292e06e36", "sighting--9fb2da36-8b6f-4f37-aa31-36b78435b4b5", "sighting--d7c47fb8-b5a5-4759-b4e1-8604b1233fe5", "sighting--f118dc60-6c27-4ea3-b903-45ac69906c08", "sighting--ee966690-a9b0-46ed-ae05-ae380fa80354", "sighting--2bce8745-8790-47ee-819b-fa4491d5a237", "sighting--3d70d73e-d894-411c-80b6-8503a351fbd7", "sighting--8838cd5b-61c2-4201-b540-c3c70d5ab309", "sighting--b717e9ab-b9c6-4771-a81f-ed42ec841ca9", "sighting--83e3cd9b-ce45-4305-a835-49065d7123fa", "sighting--f7d3f6f1-7d36-465f-b50f-699f2f66b15e", "sighting--7dd28476-cc7e-42c0-a43d-c0b4ded9c1fa", "sighting--c59a5fb8-824a-4cdc-8a36-de8cb5b80b8f", "sighting--ed1ff3c3-472b-4739-9d42-0558cf5b55a9", "sighting--220a0427-c3da-4a4c-891d-5c957bdb7b6b", "sighting--978182a3-5aee-4939-baae-91edf1f9a277", "sighting--73c5582e-d7c1-48a3-849e-1ccd3a7c1d42", "sighting--6bff3a88-e967-4fad-a649-d64047e4bff8", "sighting--8fe11704-af8b-4b44-b22d-dc519999dbfb", "sighting--5e54f5b5-7aa1-4926-95a9-5b88c95b1c0f", "sighting--e774adef-5639-4ccd-8eb7-342090dc9665", "sighting--a02c87d7-1e23-4705-95c0-65a2522e2cad", "sighting--392bc31c-6145-4633-a244-1590b04a4c86", "sighting--475d9315-179c-43c4-ae93-847a26d7eb29", "sighting--af607465-6601-4a55-83d5-76539eb140b2", "sighting--4b983ce1-1f38-4ffc-8d13-4a5fc29f6d34", "sighting--78dbaa2c-2928-4a8f-ba31-b5d58f5c97d9", "sighting--6c0badea-a576-426a-a46a-c9a8615892e8", "sighting--3d56642c-e971-40db-8604-73f71fada1de", "sighting--e4a79bd9-501f-4889-942d-150b1d742e08", "sighting--9e6d407d-9dec-4941-884e-7ee860b3700f", "sighting--e0f4429e-9bb0-4be1-9647-c38c9d46a8fa", "sighting--52a8646c-18c6-4361-9b3c-8d38b30d19e0", "sighting--0eef5887-74dc-4838-ac2d-bc82c8f4436a", "sighting--76afb028-59b3-4366-b50e-1a86e8a98444", "sighting--66198757-ebcf-40bf-9309-9b397e419cb0", "sighting--7b956cd8-d896-4897-9631-17335cab8b54", "sighting--b2ca0fc1-6f38-4b89-8062-a44940f357a2", "sighting--cb2ca13b-5179-41c5-8134-2944dcd67418", "sighting--538ed1fe-c1c9-48b0-8b6b-e15c6ce72f21", "sighting--0065837d-873f-4bb0-981b-66a344115180", "sighting--c3f2174d-7082-4515-8501-00fb9aaf6e6f", "sighting--b7b0cd0a-de61-40e6-8a56-6ca166196c28", "sighting--815ba22a-3078-42d0-b750-58f57837838e", "sighting--c1ac5d06-7105-46b3-b39f-e9de66efe3c1", "sighting--afb798db-4a2d-4b1a-a700-3853ccb1912f", "sighting--fef33536-d963-4be9-8d24-5567b99fe959", "sighting--1689f87a-98b9-4fad-b89b-957d241a8f11", "sighting--372e1b57-c68c-4402-b591-5f8a1cd4c071", "sighting--ffaca8b9-6442-4036-82df-9cfc9abe7b95", "sighting--941ae042-888e-4861-b2a7-4ee5749f6fc6", "sighting--38f883bb-f9b5-4e36-a6f6-80e0d3e1fbe6", "sighting--3356ec48-decf-4e8f-a5fb-2cab2292223f", "sighting--3b37b8e3-1f81-4eaa-834a-01c6b5e3251a", "sighting--088e79fa-dd7c-4828-8ae3-69066da80711", "sighting--82cfa970-6f42-4b2d-828b-3e0c5690d9d8", "sighting--7888bb9d-cd1c-44cc-a43a-4f55de144acb", "sighting--89c2828a-0399-4d0c-8f00-5d692f8571d3", "sighting--3f08b6a2-db0d-4865-b7dd-b864d500dc37", "sighting--34c02824-3c71-4dad-a7a6-ea591ddd7834", "sighting--34a41d1e-3a71-4ca5-a87f-4f235e01e847", "sighting--28d70bf0-2ee0-4434-9045-4aded9156c6b", "sighting--c1ca0141-3633-4030-aaf1-e26a66173b4a", "sighting--cc9b3a6b-585e-4a0e-9b37-abd469cd86ac", "sighting--39434c6c-e0a6-445e-b3d2-14ebce3ffd91", "sighting--111947ce-73ee-4fae-b795-572b21a16785", "sighting--66515b5e-f8eb-4a1c-801d-75e1211c52ac", "sighting--592ae375-6d17-4922-94a4-b5bd1030b43e", "sighting--acbe4e31-45ab-4520-a7fa-4f6af0f36489", "sighting--83da7de6-a0d7-4087-aef6-201045363352", "sighting--11f5513d-d2c9-4818-8f07-b1257b1887c6", "sighting--cdc0b211-3b88-476d-ba18-6d961aa34e2a", "sighting--d3b95504-8451-4c9a-a33e-7e77b307ed9d", "sighting--32430771-029e-4de8-b689-dad49601db8f", "sighting--b055ca05-7b2a-4cd5-b760-39c9e7fea289", "sighting--f27013d3-4db1-4621-b887-9542a50c8515", "sighting--438634f3-ef7e-4ff7-9986-59c194beb4e5", "sighting--ba8f8f08-f875-4548-83c4-6e0bb47a7e1e", "sighting--fde959ed-ec42-4a5c-b73c-cc624a6dca49", "sighting--4c2e8ae3-ac9c-4904-851a-ef09cb8a5b27", "sighting--e6354cd3-162d-4dd7-bcf7-d18f62706d9c", "sighting--7c671c45-6e06-4943-93e2-3d5f0d61823e", "sighting--852da853-1897-44db-a5cb-c27a5c9f898b", "sighting--77d57f76-d85f-4296-b32b-f37528df1455", "sighting--cf723f1a-44be-4c81-afb3-5fc310df34f0", "sighting--33d041e0-be95-4a18-babb-202046949a39", "sighting--d8241349-e119-4690-a4ca-a9efaf36cf75", "sighting--c46e7257-c59b-4161-9960-ee05f549871d", "sighting--ac0c4b42-3b58-4851-8412-4db7614e8d01", "sighting--6415628e-0559-43d2-aa5c-cb8a325a0661", "sighting--43077435-6dbe-4407-bedb-5004d90f4bee", "sighting--542fd0c7-f3e0-4f28-952b-48258d04607e", "sighting--882970f5-ebc4-4058-91b0-982239caf96e", "sighting--7728cb93-6020-4687-b30d-a80a9a416cca", "sighting--d636c55e-e6ca-44ba-a1cc-7b3d14910460", "sighting--0c897ef2-624a-449f-8726-d34536dae2f5", "sighting--498d3d07-fb73-4c07-a1c6-b0f74c23f16c", "sighting--94f995d4-538b-4fcf-a19f-575afcfac2ef", "sighting--747ebeb2-a885-44fe-a816-a8962daa0c44", "sighting--08dff0cd-602f-48ed-aca8-2fe11c190298", "sighting--3dc5aa69-67a4-4bad-99ef-da0b2accc8d7", "sighting--eeeaeb14-a2ac-4c18-8eef-d3c3efdbaf64", "sighting--5d98eaf6-7d1c-4d02-9ac6-3af257a4c56d", "sighting--ec64e5dd-27fe-4e69-9c4d-e1486b58344c", "sighting--60837a65-a879-4f7e-a549-2b42c51394ec", "sighting--b64467a4-a2bf-420b-b35f-5bd84952b18b", "sighting--89f73f36-8c17-42b2-b295-a1e89f7eb484", "sighting--9345ea71-0fef-474d-8805-aee159e4cb05", "sighting--e4973503-bc99-46b3-ae40-65f2b36dd9da", "sighting--fec2e0b9-a3dc-4f0f-88b8-a2cfab1bf213", "sighting--2b092474-4404-474d-b212-421174873471", "sighting--33d4c5f8-fd4e-4933-94b4-401526d9a996", "sighting--5a0d3529-2958-4b79-b533-1dfa96d5e65e", "sighting--109247cb-8348-45e5-b768-05b971d6405c", "sighting--73bf08d2-bb26-4775-9563-46da964ce391", "sighting--791f51d0-e52b-43ac-a973-0c7de60d4921", "sighting--e4fc2cab-4b77-44e3-8163-ff7fe785b0de", "sighting--002a3dcb-bebf-4fa7-99b1-5a9c522ec70c", "sighting--8f5a2e95-3b1d-4188-a7f3-dc3696afc6f5", "sighting--2a2531ec-02ad-4c1b-978a-90e0bde742c3", "sighting--14b93562-b58c-4876-8362-d3b44fc89ef0", "sighting--41f062ce-3015-49f8-a0ae-5ef9a21706db", "sighting--a363ef89-5a40-46af-9fa0-2816ad455edd", "sighting--095b06a7-6e1e-419c-9a2c-01557c2e6588", "sighting--4e119af7-6e32-42a7-ad72-fb24072f5a3b", "sighting--abf99809-a5ed-4535-8f1a-01715ebf6a33", "sighting--7beb69c6-b8fe-4c1a-a06a-3f3845f645ac", "sighting--560ae1f9-673a-41ab-a306-7dac73fbd0e6", "sighting--6dab5d46-d51d-4bc9-a6c6-ecfe3b947702", "sighting--92ddcb6c-17ab-47ed-aad7-8ea25a8f486e", "sighting--24b8065c-44de-4f73-9122-e243c2f4edca", "sighting--79a33acc-173c-4b5a-9840-b9eac028d857", "sighting--669b9637-7c16-4bfd-92a0-5df5fd166f5a", "sighting--4fe6a50c-fd51-4eb2-aa7b-f53e47afc1e7", "sighting--fb15479d-25da-47f4-88c7-33f77718548b", "sighting--a0b170b7-701b-46fa-a468-69f203deb3ea", "sighting--ddf1be4d-8c91-43bf-84e6-b8201bb14060", "sighting--61264ed9-a57b-4760-9260-5eff220c2a4e", "sighting--58ff28e3-9446-4cf4-af3d-38e14a41eee2", "sighting--d808c41c-8c25-47ac-b251-a3131a56aec7", "sighting--9c518b1d-ccdf-419a-afd9-d7c3713c71a8", "sighting--10c1e70d-5761-43dc-94a3-a0912b60b7eb", "sighting--a1faa61d-2e80-49cc-9d94-852b0582911f", "sighting--fcc405d0-326a-4575-a0dc-4084aadb9d92", "sighting--aada8791-112c-4992-a7f8-0a90579ac6f5", "sighting--9491e806-e053-4f55-bdf3-5209ac9a25ce", "sighting--5cabdc00-2b93-4da3-b95e-a7008ec51cab", "sighting--ace0f8a5-3ca3-44e6-859b-4e41c26635ab", "sighting--bef74141-1cf4-4cb8-afc2-2a3546923266", "sighting--22ede9d4-3c2d-4786-853b-36275c8d47b6", "sighting--c920200d-32bb-4a3a-924b-dfe181225cec", "sighting--25cef18b-2dd2-4b9e-aaf4-0269c960dba7", "sighting--37f6a5fa-0642-4649-8063-40fc9f2bafe3", "sighting--0bdb69bf-0999-4848-bf47-5f58a31b2b23", "sighting--e205d16d-d5b4-49be-a644-cca7dc912428", "sighting--e7a4de3e-8228-489d-8e32-4469f20e605e", "sighting--f8d89b7f-bf6e-4c9b-91de-100ac709e851", "sighting--f35f8952-8035-46d4-8252-61a64dd528e6", "sighting--22f9160d-a385-4817-ae66-7fe729b6f013", "sighting--389e4141-b747-42ef-b6aa-2d43b25502d7", "sighting--db92d76c-771f-4bed-b957-4cb8365620e7", "sighting--989b0f51-fb14-477d-bd3b-07eb741a91cd", "sighting--ff24e083-b1e2-42ff-9859-5888d93e300e", "sighting--ea991ae3-605c-44a6-9b45-fd4a0e405c37", "sighting--b430c417-1907-4e92-8dac-35e014f8842a", "sighting--7ebc844f-559e-4b25-94f5-ede1cc057020", "sighting--57065b8d-2e1c-464c-abd0-d2e7ea737166", "sighting--ff6d076b-af9d-49ed-ab52-732a9adced23", "sighting--365d09ca-0305-4058-a7d1-2f9f2960bfe2", "sighting--574e7ae3-d636-4b1d-9da0-f11df9fb564e", "sighting--113f12ac-6394-4faa-8e5f-df218d062343", "sighting--92ecc88b-7b15-4a88-bbf8-9dc5453e5561", "sighting--5b82c177-21c6-4198-86ce-0007e7095ed6", "sighting--378e1798-db2b-406e-96f3-ab8dcdf78791", "sighting--567cfeb6-9b1d-4e23-b008-a166b4e694b8", "sighting--da23361d-2383-4a06-a17c-d3143b4954a5", "sighting--4953a56c-2333-4770-bed4-ce3bee041345", "sighting--9d2289f7-311b-4357-a39e-54516a260f8a", "sighting--6a408ca0-50e1-4c78-a246-a8e444ea3889", "sighting--f9148690-3b5f-4152-b1b8-140c4aa17589", "sighting--052b18a9-b12e-4f15-bb39-7db6ad3a848b", "sighting--d3fbbd47-ab77-4ed1-8006-986fe4c587e0", "sighting--2ca6023d-bf8e-4b5d-b7ca-1187773189f9", "sighting--ebc3ce8e-73f1-4fe6-a1ce-edae07b40784", "sighting--fdb6d0f9-3649-41f4-9f69-155605a4290d", "sighting--62bfd19a-71e0-435b-9edd-a0acd713f12f", "sighting--f64b7993-8b97-4a44-82b5-4fdcd6369aa2", "sighting--10cb417c-e491-414c-9262-d5d3a9793db8", "sighting--93c04f4a-af36-4e10-b496-3d266dbe9dbc", "sighting--62bac734-07fa-4ad3-8e6a-63ca9258067e", "sighting--30b49f64-5483-47dd-a48c-404e6028b004", "sighting--8e045d9b-8947-40cc-bba1-2b6dea40b06f", "sighting--7fb299f8-5052-448d-84a7-7ac042408ab0", "sighting--3bbedf4b-832e-45bd-a926-efc322864c33", "sighting--902584fb-831b-434a-ba85-88ce85a5f5e7", "sighting--ff961fa7-2853-4306-a25a-e5cb37602f36", "sighting--f0fe43d3-0e85-4a38-9dd2-29354d63741e", "sighting--d04a5b83-3541-45c8-b5d8-59284e226bdc", "sighting--55d3b969-83d6-4061-9510-29360d43f206", "sighting--3a0c0498-7222-4244-917e-b2da967cde21", "sighting--654700b5-2a36-49de-9502-8708e775bdde", "sighting--5525ec3b-579b-463b-bf81-199f04e1b7a8", "sighting--95a4ac16-b4a6-4b14-85bc-31f33cec713b", "sighting--bfe704a9-5a51-44d9-9c69-b7bf61a2ad2b", "sighting--576abb10-473a-4e93-944b-1b87e74c2231", "sighting--3e3dc6b5-5116-47e9-9bc3-2a68d5c856e3", "sighting--0cdb2377-655b-4d2b-89b9-9ebfd7dc35f1", "sighting--62d7b62d-6a22-463b-8a98-251b2d8d0f78", "sighting--96a2fb3a-cf32-46c4-9f0c-cbf9ff4de862", "sighting--a49ec874-af25-4720-af30-d43bd217ef7e", "sighting--b71fa4ea-6a83-46e7-b57e-8d1d8a898d9b", "sighting--dc3823b1-0009-4b53-b7ff-8c5d5fce4280", "sighting--8502ca97-8826-406d-a864-a2eb18855e58", "sighting--79614134-8e13-4d18-9744-d96893b029c4", "sighting--c81d06c0-50f5-45df-bdb6-9921103f2133", "sighting--454c9529-6de5-485f-a17d-067de3c719c0", "sighting--c83a1275-2036-4aa7-bbc8-739d8a988418", "sighting--a8fc19fa-8b2d-48d0-b306-5e1fff675075", "sighting--bca7782b-d33a-45b0-b9fc-e871dfb1d728", "sighting--2f71a729-5a6e-4113-a83c-9bb98699f240", "sighting--340ad7d8-fa93-4bb8-888b-c40b6901a65d", "sighting--c729cf44-ab7f-4c55-92f9-cb7dc41f564f", "sighting--50e3a066-baad-415c-9b1c-0e71b10bc3b9", "sighting--40ebef69-7d8d-48d9-aa51-4933e474e383", "sighting--22001a82-0736-4480-8c8c-7f1d5f4409b4", "sighting--a6b2c662-a878-4a48-9fb6-00cd4a134285", "sighting--ea9aeeca-6eed-4ce1-9b9b-1df817358600", "sighting--f47b4309-ee13-4d6c-9414-6e7ad7eb0040", "sighting--41f6566a-0818-4646-8de0-20ba3292061c", "sighting--263eb446-8651-44c4-91bd-6775dfea3b2b", "sighting--d4aec66c-be33-47ce-9b8b-c34fc1325393", "sighting--28d7bb77-db12-4327-909a-7a6c2a9d0024", "sighting--6acf5b25-1ca5-4b37-a066-9c86143ef3fc", "sighting--456a8075-baa7-489c-aff6-aad8b75bae2a", "sighting--5fcb7eb3-926d-44b6-adf1-b5e49204337c", "sighting--4cb9fc21-594f-47bb-9bb6-c476ecff8a54", "sighting--ecbd2a19-5852-445a-be8c-ae3e83dc5674", "sighting--29551ed7-0cf7-49f9-8211-2951df2a9b6e", "sighting--1e201d94-e065-4ee3-a60b-c5b2f95c66cf", "sighting--77bba405-ba68-42df-a12d-065d20e3390f", "sighting--63299ca5-3760-450f-967f-f3b019e5f745", "sighting--456f911d-2a10-4a29-9f1e-1cd44853b559", "sighting--60a1d6fb-a862-40e0-8b85-ff8e7ef16350", "sighting--20578452-7b0e-4b3f-a343-84d4a94c7bfd", "sighting--3dc62b21-2979-4799-ab67-66b7a0e9a728", "sighting--21966eba-e2e0-4228-92ab-764840f94906", "sighting--60bf5975-0311-4fc1-ba90-cfbceb260b52", "sighting--c8223873-4f64-463c-9593-66f36365a6e6", "sighting--996ae2f5-4ce2-4dea-978d-629eea55a680", "sighting--d29cd830-3b27-41e0-b302-aa69527a7c6a", "sighting--e6bc04dc-2688-4b9d-88b9-dcd461fc25a3", "sighting--7567f16a-9fdc-4d25-8450-8a5068c6a48c", "sighting--104d90d0-8410-4645-b5a0-9d7bea85e87f", "sighting--5d58cd92-76d9-47cc-b964-a6788962a2b9", "sighting--bf1a7db6-a21f-4b6d-92eb-22c4117e8a08", "sighting--279a4b50-826b-4037-a955-46f71ff7f08e", "sighting--5b6b86f3-d16a-42e7-add2-882e2688edf6", "sighting--affc149b-f716-4e95-8611-e6f95815c91d", "sighting--2bcabde6-de8f-4556-9d91-39754a7a19a4", "sighting--f0825c3b-7b6a-4021-bf32-327817ed4f48", "sighting--7fe1f44c-525f-4b6e-8fb8-ac1a1199143b", "sighting--e2eb3f31-7283-467e-992c-50ee90dca848", "sighting--4159037e-c16e-4755-b0a7-4a6db3a06792", "sighting--4f381a59-d8e6-4103-9ac0-cba832d06675", "sighting--8a93d68c-7137-433d-8cc5-6191f44bf8d7", "sighting--6c58e907-44b1-4899-9107-16ad2f45061c", "sighting--9bf70c67-c946-4611-9d5e-9d6ddaf7121e", "sighting--9fb97829-8d8d-43ed-a1b9-56bd8cb4416f", "sighting--5a13f61e-982c-4919-9e50-ce363eaad199", "sighting--d798f83d-a342-4554-9408-e6d79800b6ae", "sighting--f6f499f3-3b87-4d72-b828-c3b72811805c", "sighting--6ad6c38a-e495-4a4a-a6cd-0ad56a65771e", "sighting--3bd2f28c-5928-453f-92fd-4c09388d3c71", "sighting--dcbf79e1-fd76-49fc-9224-de1b0f22f1df", "sighting--3214a87d-dab2-4e90-9d19-382cd4666bc6", "sighting--9c3dbcff-656f-4bf8-b423-242dbcd0f41b", "sighting--7769b0d7-e422-44cd-93d9-d30347615612", "sighting--28f04933-e269-4c05-86bc-22778a3360aa", "sighting--e0809aa1-c1dd-473b-bf0c-ea3dc479ab44", "sighting--321881aa-c85b-4dd2-9a57-1e60cba69075", "sighting--02904527-0c38-4ec7-9efb-122be19dfe07", "sighting--da7897be-1216-419a-9b89-9926c2e6f371", "sighting--612432a7-fcf2-4567-80bb-f4983333abe1", "sighting--8799bb18-6635-4566-af8b-584014290a57", "sighting--ff3817e2-f244-41e8-8324-80b388cf7d7f", "sighting--2700e33b-ff43-43f3-b54f-3a6a48064361", "sighting--67633d22-e252-4590-9149-2a95026d60b8", "sighting--9baa5222-4634-48f3-97c1-9778d0889daa", "sighting--d0dba4fa-420e-4b7c-9bdc-7fcc026cc716", "sighting--56465446-ec46-486c-b9ac-c2b610f8cecf", "sighting--dba77e83-6625-4817-afa1-38831edb3ce3", "sighting--37cea8ea-45c4-47cd-b6fd-cc7b43030980", "sighting--08074e13-bb3a-47da-90a1-0fe790cd3334", "sighting--12225e23-3418-43d2-9593-58462892245b", "sighting--49a96b98-d437-4bdf-a666-d55cf638b908", "sighting--da0975f6-def0-4bb4-a28c-68bdf75a9011", "sighting--67907209-5f28-41eb-b9a7-43cfd40eda8b", "sighting--2bf1f19f-50ce-48fb-b6b6-924dc378c090", "sighting--ab946382-4959-4d90-acc1-9f1f5d97cf77", "sighting--77b1d7c2-441e-490e-9f42-51b6877afcb7", "sighting--53ecadfb-c111-44f8-bf3a-48e4344e8c15", "sighting--a153ecaa-1832-40c6-8b42-7cff8826154f", "sighting--c1930304-5a51-4e90-be80-caa2c414f9ea", "sighting--58cb8073-8157-4145-95a9-0c275f55f63a", "sighting--5189a463-a2db-4830-9696-f23b807c9615", "sighting--aeb8c44d-8c82-4c29-ae91-61e9c99b2448", "sighting--5ec98853-700a-44fc-b977-cfba8c694bb2", "sighting--82185fc9-5b33-4f37-84f1-ac33d0699eec", "sighting--0f70d872-951f-4bc5-b97c-63e149a0193a", "sighting--5a62c51f-fdf8-4bda-97ad-616bc267f0f8", "sighting--85e1d91c-fd0e-4db4-b8ab-d0cec17e50a4", "sighting--d1e1c064-41ca-40d1-88b3-2cefbc4f2eea", "sighting--da7e36c2-a45a-4849-8585-1fc9199ff139", "sighting--0da24298-46f6-4f23-9e4a-71515ee58642", "sighting--ad6bd2ab-bab0-40de-bf47-f14e9b9037e1", "sighting--a76c2bd0-4950-4527-9c51-2378dc9e904d", "sighting--10910423-c491-48d3-aca9-d4a2a60699dc", "sighting--094714ac-08e5-4dc4-a680-6e9f3bf99255", "sighting--9aa792b9-1769-48ae-828a-04dd0e92ce05", "sighting--60f9e075-8b52-4259-8e41-34bd436a0822", "sighting--8aabebe2-892d-491f-a456-41fdc176eb48", "sighting--44e43611-37b2-478e-b8fc-0feca6840e65", "sighting--c4fc423c-2311-457c-ae8f-ea4411656053", "sighting--94890d79-fc08-4578-ada9-bd56522eeeab", "sighting--6383a075-22ac-4f4f-a508-f920dea77869", "sighting--1d254f48-543d-4c68-bf80-e871b7b32781", "sighting--4a12cb8b-1e09-4c44-af8a-e582137e924b", "sighting--50b7fc97-6126-41f7-a117-7eeb071d1eb3", "sighting--280bd589-bb46-42e6-a0ea-6fc70896adba", "sighting--bf4a3f45-eb57-4646-aee5-1eecb2fde2fc", "sighting--1eb3f20d-ea58-4f3e-a8dd-329725db24e5", "sighting--5b08fff2-f5a4-4ec5-b4d0-437b92f80bc5", "sighting--37b31504-b39d-4d48-976e-da2fb442fb95", "sighting--5137074b-1c26-4eb9-9642-42284c892d93", "sighting--77125991-d1c3-4fa5-b1f7-eab0357ea532", "sighting--ab10febf-9b7e-4636-9242-ede80bb6765a", "sighting--8cb15e6b-75ce-4f18-8505-2d3af1fe07ec", "sighting--aa81cc10-80a1-4b4f-86cf-92d2e18ffe2e", "sighting--7cb87e17-bb3c-441c-9556-be54f94c7054", "sighting--cdaa0b7f-8c34-476e-893b-100afb8107ca", "sighting--6494c83e-d07d-4ea6-94e0-0c4249d78e3e", "sighting--72259364-a2cc-4b0e-b41b-981284c19921", "sighting--51ed1bf2-cf85-4b0f-ad73-9ae742c1f5fd", "sighting--9ff46176-e883-4bce-ad16-5f3299d0849d", "sighting--7f00e395-8e91-43e7-933d-9943e959f029", "sighting--40381786-fea0-4407-8d30-9808f455dd63", "sighting--99ab6eae-7040-4e81-a351-b84496db54e1", "sighting--93926fbf-a051-4833-a519-fabcb5367ff4", "sighting--ddaf42e4-b816-440c-9f85-11d63d81b705", "sighting--5529404a-eceb-4b54-9cbb-e9caf772ef8e", "sighting--815d69d0-350f-4b4b-ae30-a12a91db16e1", "sighting--8f0b06f3-05b1-486e-a990-7cd8a1d7206a", "sighting--4b92fe5a-e092-4736-8713-c5d3cc57fc53", "sighting--eacadb9c-c692-438b-ac57-f7ab2f7c9062", "sighting--44de6319-6b8f-44cf-a824-c832dd7b418e", "sighting--fab97c5c-0728-4572-b71b-71fe15ca3a45", "sighting--033fa09c-bd20-4eca-81b6-8c8d4e7b1cea", "sighting--a9dd47ed-a6a3-4ca3-96ec-34ce9b6ee55a", "sighting--b5f2ffd7-af97-4bf2-90ae-af1ae135a4d3", "sighting--b33c9ccc-36bc-43a5-9e6d-1b6a341decfe", "sighting--2e71faf7-f858-4bde-a514-9dcfe0e451e0", "sighting--e709456a-3896-403d-a105-8d02d0cd45d5", "sighting--1caad8f3-4fef-4140-95a6-9eec64bc7b1a", "sighting--4d06f230-aacf-482b-8ea3-4dc08d343b1b", "sighting--027082f6-f24e-4953-8f00-860b02403432", "sighting--85edac6c-d63a-4907-85f4-6d59fbe61c8a", "sighting--6ea6f7af-0aac-47a9-bae4-dcd0afcdf429", "sighting--2f25c33d-d031-4c44-9ae5-c81798e78d95", "sighting--11b3d4ba-b822-4490-979e-74c58123090f", "sighting--cc411e64-a77f-416e-9a2c-1994efbb03a4", "sighting--cb46e818-2a44-44b1-b6f5-590988d8c747", "sighting--28b8ffb4-372a-4783-bcfc-2fd8a776c325", "sighting--aac74657-b8c6-460d-a96c-0758f01cc481", "sighting--092f5518-5651-4fc9-86a6-4e4445d198ae", "sighting--1c4bc980-c7be-4a0c-9323-f9e2b2149862", "sighting--ac9ac7e1-a8ca-45a4-a6ca-d9472e62dc87", "sighting--8c251e99-ddb1-4379-b2ac-ed9f039834c4", "sighting--7f7fde68-e550-467d-959a-45d96b60388b", "sighting--8f98acf3-f623-4e67-915f-435e3b2a013b", "sighting--9c701bb0-b07e-485b-b4fd-5abf473e6e52", "sighting--ee02cef7-be8e-4e9f-8b1b-ca36f5cfc161", "sighting--7432016b-1203-421d-8027-b6f36699b53d", "sighting--a7c00f08-d0f5-401b-94d3-ad4a5955cae7", "sighting--5cc3453e-1a37-46c0-a948-d326973d0f4b", "sighting--89d317a3-392d-4fcb-b466-24a03999220a", "sighting--06332082-f9b0-4563-bd31-b4feae444871", "sighting--e8ebbcd6-c12e-4fe7-90f4-3f91041bad3b", "sighting--143ef7c9-5911-4434-b4ac-8810803ca79d", "sighting--e5ecb1a2-35d9-4086-9e71-be7f7f978190", "sighting--f1441937-fee4-4f26-9e08-3973e3c720e9", "sighting--b7a33721-df96-4b10-9ca6-85bf4c2b072a", "sighting--8e5ec1b6-7cfd-40af-ae0b-6af8075d6ec4", "sighting--78a38e74-00b4-4d9d-8be6-e1d29a0d2efa", "sighting--d4f30cbd-31c1-4721-8f84-a83886b34500", "sighting--516c0b92-ed03-450e-baa4-3230c6b38cda", "sighting--beb309f6-31b0-41cc-8eea-1cea5d3b1144", "sighting--573c508c-7ffd-4b87-917d-666ebeb3cf7b", "sighting--d976f660-a6c7-4b47-95a5-43b764ab67dd", "sighting--026ea9a2-ac24-4bd0-89cc-d91c6d6a53a5", "sighting--586c799d-18f7-4964-a7bf-0d7e8388f490", "sighting--d052f4e6-fd07-4754-a8b9-0a2643776a62", "sighting--97de5bdc-0277-423d-9308-d3ef375191e4", "sighting--766c1900-9a9e-42f4-b960-d034312ba2e2", "sighting--15a6842b-734b-4247-996f-71acaf50ad4e", "sighting--93363e6e-bb3a-4359-8fef-56a8d726a1b1", "sighting--6e94d49f-5dfc-4c80-884b-3f56aa238e1e", "sighting--46d1490f-7e56-49b2-97d5-7d4b4caf49ca", "sighting--37ef1a19-8e99-471e-b8e1-c9f554aec9b5", "sighting--ce6dd9c0-c54b-4446-b0a6-3f9b485c0b3f", "sighting--18c0d919-1a8e-4d77-b99f-c1ca7959be54", "sighting--8027f1d7-5b0b-4e58-a36f-d262f2ef2672", "sighting--dc1b0583-db17-4008-ae10-aa2e60088306", "sighting--e01d8179-6bc1-46f9-8206-f45f8f118f4e", "sighting--c21e2aae-67e7-4f50-a598-8a396d82b19f", "sighting--0ffc338d-ce3b-4893-8b41-9d2131bbf511", "sighting--27bffacc-8a91-4b54-a8bc-377410af2fdf", "sighting--0adf3457-0344-47ef-8276-a52510795537", "sighting--6fdb706a-f0bc-40af-b2d1-428e2d062272", "sighting--06c046e2-44ab-47c5-9bb8-08a49e2be83f", "sighting--a1c5c540-2381-49bf-abdd-9aa983137ed7", "sighting--4aa49020-a7f7-490c-9826-e0f234c915a6", "sighting--b5e5e4f0-08b1-49c3-ba41-e0682639915d", "sighting--888959ae-12c9-44f4-bd68-72625b4ddb90", "sighting--c60fbe34-35ce-4ff2-a8ad-17f6d4041117", "sighting--37e93d0b-eda1-4938-8ed8-94a0144d7de1", "sighting--f04ca22f-25d7-434c-93bb-ca90bf6e1a35", "sighting--a4cd2962-69c9-423a-97a1-f940ef59f158", "sighting--3d0c2c2c-1e05-4eec-81be-b66c9bbd4a22", "sighting--97b36d2a-3d60-4f7e-8895-2c6f908158a5", "sighting--a7bf9996-c715-49f7-b9ba-6b7e7cb46299", "sighting--94587261-24c9-46f6-8f06-2c54bf3ff9e1", "sighting--e2d915b8-2d76-491f-9f75-3331bf6fee91", "sighting--156ad5a4-44bb-42f7-b504-5c7f5cbb47cc", "sighting--ff9c632b-b406-44b0-a92f-bace08af308c", "sighting--34d4759c-84f6-4990-aa1c-6a5b50e04cab", "sighting--bf68bf54-1091-42ef-94ef-ebb8cffa7607", "sighting--e62372c5-e2cb-4544-ae6b-3aab4eac2302", "sighting--6cf113af-a40c-4276-bc0b-5c6bd3b5eabc", "sighting--f149f3ff-5987-4bbe-833f-7f36e9ff9f3b", "sighting--cb8707bd-03a7-4aa7-903d-7862e768fabe", "sighting--afe0d0d5-07e3-4472-a035-308d72d6c871", "sighting--0c2b4f12-82bf-44f4-b14e-d99116720087", "sighting--dec73e95-dd57-4c8d-82c8-769fd83b40ec", "sighting--212b8975-48ee-46b1-af54-92c89994be6b", "sighting--0ba91058-1be7-4e2e-86b7-d8259db41bfb", "sighting--abd23958-7e22-4bcd-995b-8a23fd51fe63", "sighting--85968820-2fa3-41fa-879a-9dfd196e5bcc", "sighting--cf080185-7bf9-4b8e-a7cd-9e6528405e40", "sighting--cf2b914c-8ce5-4e78-9484-d8f84e33557d", "sighting--a0272a3c-d455-4181-8ce7-0b870211b78c", "sighting--e969ae1c-553d-4b5b-aa56-8d11cb5b1331", "sighting--66bd21fd-8630-4db7-a2ce-3ecb37de55c4", "sighting--a9a3286e-737e-4bc4-966b-dff70eb31f8a", "sighting--9c1ad2b3-d7ba-4598-96ec-21eef640a401", "sighting--373e2c75-c976-43b6-82f5-9ae38090b14c", "sighting--a5fd259b-8733-407f-b7f3-e215e11db29b", "sighting--3e95c694-d592-4500-9af0-d8e6528574f8", "sighting--cd430b97-c34c-4361-bc84-25608d6f2c0c", "sighting--0b92b751-32e6-4be8-819d-4b7b6d7598e4", "sighting--e4ebe642-136c-475b-b042-f0a51036dda4", "sighting--127b1818-5462-4825-9ed5-c2078b916f48", "sighting--e551a85c-9b9b-4055-8d06-d91dca7db786", "sighting--574f142e-164c-48f8-886e-3a3339e4efd8", "sighting--a6174c8a-9410-4a8b-961d-cf32c80bbb27", "sighting--4b2f0b2d-dae5-4758-b786-50ba78f8a6fe", "sighting--dda33feb-837a-4d02-8f76-fe34d6bed771", "sighting--84a83fef-00bf-4524-a583-c365474830bc", "sighting--c6c0c78a-346d-42df-b1b9-2b2164dad609", "sighting--8d9b577b-38e9-4d0a-b81d-af47319efff0", "sighting--fc6500e0-203b-4678-be07-2c26ac67cff5", "sighting--0133c286-9446-43c3-b1be-1f8220df0347", "sighting--cf373a14-f519-4b79-81f8-728f2dcd1ab6", "sighting--bb727f6f-f156-4ad2-b206-013312e36af0", "sighting--7d661d42-17ac-4eae-94ae-1c17b62a0eb6", "sighting--6e44c2ee-9d50-48d7-888e-085f4c686d9e", "sighting--129e5571-307e-4ed8-91d8-7ca8a7ae2c96", "sighting--df8e2d58-80b5-458f-99c9-51e7be5350c9", "sighting--1732a96a-c05e-4166-9f1c-a4780c20244a", "sighting--3e2ba25e-4ef6-4ace-991e-85c43745da94", "sighting--4726a08a-3bd0-4873-a03c-6c441903d335", "sighting--4b302348-bc1d-4a12-bca5-6ec140313925", "sighting--5ba1873b-cc14-4b02-b833-d39afe3a8767", "sighting--5eeeee37-281d-438e-8e0f-026f2c2d7a33", "sighting--1526d347-e295-4d4b-bf5b-05a58de5b403", "sighting--c4d71154-e4cc-42d8-bdc8-7094b9f4d520", "sighting--71647e68-0417-46a5-b52e-26159160a9a0", "sighting--cd0bf0e6-4698-4ea0-842d-147141830c3a", "sighting--db7d1aa4-3e91-4f64-b82a-01267f0b0451", "sighting--d23c6a2f-6352-42dc-a04a-5fa94a696ce6", "sighting--72535217-89bc-41c8-8229-56fb7cc930b9", "sighting--5117e5a7-a62a-4f3e-8710-8fccea0eac01", "sighting--f4e291fb-e4ff-4b16-be10-d7015e9547fc", "sighting--25af000b-74cd-4f3d-b1c3-b9aa6b6234d2", "sighting--0c375e82-43fb-434a-a15e-0b996d31c5e7", "sighting--29c928e7-78db-4979-aaf3-f18dddd86de7", "sighting--e3f6712f-3d43-484f-af34-df4f6a7b87fc", "sighting--967c5925-221a-4111-aed2-e5d3fe569a5a", "sighting--2b074826-f19c-49c2-8735-f3fb2f2589f5", "sighting--c1aa79c1-7053-4e00-8caf-ff0d6ba92f4c", "sighting--65f8b603-6e2a-4e88-b3f4-a322e88a50e8", "sighting--b7e254eb-a9e2-40ee-9294-bfa2394b3a13", "sighting--a5752f33-ca17-43f3-a849-0accf541e822", "sighting--8f14773d-1682-4382-a506-46598603b86a", "sighting--742f6e46-687e-4aaf-b574-a2b20c80a75e", "sighting--dbaa8de4-7b04-4666-b4f1-425379c13f9f", "sighting--5d882cba-0f6f-4abd-bb9c-c60491154458", "sighting--52c0fb07-c853-40c6-b146-612ca3417cfb", "sighting--43ee7492-5201-4881-af76-84ffde35a3d4", "sighting--ab547484-3ef4-411e-a9cd-d55219ccd68b", "sighting--f84592eb-98c5-4c99-a285-20316738a4ec", "sighting--915af003-acbf-4c6d-a12f-4fca2e87cee9", "sighting--fa81d9c8-96df-445e-b8c3-a89acb28443a", "sighting--0ae0a5e0-82c0-49a9-a2b7-e970438d7f37", "sighting--61397487-51f8-4e53-b886-e7c8aed4d143", "sighting--0cb8ae74-f2c1-4664-b3df-2cdf11b71355", "sighting--ec934c4d-2b89-4733-8689-5c426f4be6a3", "sighting--02f495be-8781-47e2-8ec7-4516ab684a40", "sighting--93ebf9bc-5ac2-468c-82fc-94b1efc6809d", "sighting--1e5a315b-eb18-428f-8cde-8bb16e04dda7", "sighting--c8b58238-d45a-4152-a936-69f97629cece", "sighting--cc0b2c1c-65f0-4882-ae36-d3b403abd38c", "sighting--6f07a785-b815-4082-9690-33083fae7a1d", "sighting--36796b89-7071-48b6-9237-aa131769c5ba", "sighting--050467dc-018f-41d5-aa6c-b30537bf9be4", "sighting--706ed579-dfcb-450b-9b74-52ae7094c7f2", "sighting--62d42786-b714-4769-bc96-0a57b815fd19", "sighting--cc4d368e-e171-4d14-b0b3-3d36e19650e8", "sighting--cad1c6ef-c857-4c0f-b132-3708a1ff29a3", "sighting--f3182e1b-8858-42d9-a72f-0461d09fb6f9", "sighting--2cc2e450-385b-4d0c-9aca-5b062901cdd5", "sighting--5d3e30cc-c248-4480-941d-799bf9f59716", "sighting--00cc2923-8019-4f8b-b241-1793630e6542", "sighting--304f8754-7757-4e2b-bbbc-0d2c2431b284", "sighting--19072e70-d7bc-4f82-9bd2-274d563f53cd", "sighting--0ccc6db2-3b21-4155-8437-8d70bc50c334", "sighting--ba25fbe6-441d-4253-a6a3-834a6610083a", "sighting--12254b49-6a5c-4461-9955-7ac555045f48", "sighting--66c958d2-d06d-4486-98a2-b38a2fc19d28", "sighting--ed16dbd2-dbe8-4995-beb9-5d047176222f", "sighting--95fab575-060c-42b6-a978-0f9c829686a3", "sighting--f0670fd2-b8a6-41d3-b99c-c3ce71e9f20b", "sighting--3dfbe02b-3eac-476f-90c3-ab4ad42514ee", "sighting--3906fbd2-6467-46c5-8a5d-97a5a6c85578", "sighting--66793d17-6268-4ce5-87ef-1b79a97a7322", "sighting--05ae640e-2ee2-4cd1-9727-92f772bc55ca", "sighting--afd953a4-049f-4891-8861-2fb3d56ee7c5", "sighting--27673465-e844-42cd-b196-231f74db95fa", "sighting--6410aaf7-34f5-467b-a53a-7a95aaf30056", "sighting--fc9bb1d3-aa30-4805-8cf9-ab68c5714cb5", "sighting--d1c8adbb-f0d6-4275-a21c-a20bb2a43835", "sighting--94a3efb1-ad50-4465-ad67-52c8b49c83a9", "sighting--0ff41df6-0a16-49cb-b70b-2de9beed8203", "sighting--c6d772f6-06aa-4ae0-bba9-a0ff0b2dfccc", "sighting--8574fe0c-1ccf-4be3-9e87-e754d846b5e1", "sighting--b58a3915-e68b-4683-823f-d64a5f4c60a6", "sighting--aa14d794-53ef-4d4b-9050-1ea7019b64b8", "sighting--2cc31b2a-2c8d-4a90-9821-066b915a9e92", "sighting--7e5b67c1-18a9-4a57-bb0f-28edbdade2e4", "sighting--2146e2e9-59dd-4c4f-83e8-94e6d448b805", "sighting--972683d8-54aa-4606-ad84-a23ab205b629", "sighting--069c5e95-c4b6-48cf-9ce4-4aa39fefc22d", "sighting--a1361a4c-ec85-4a66-bd51-cbd8ad3889e7", "sighting--187da6bf-083b-432e-ad70-608640eb66a3", "sighting--7b198106-d219-4cad-974a-f74b1f4fbb36", "sighting--ba30dfe4-a7a9-42ba-b7a9-a43f67ce48f0", "sighting--f465f2e9-34b5-405b-8b99-dfbc693b0229", "sighting--d8fdde0f-f289-40e8-9f8a-bec6ffc25064", "sighting--b7af6cb9-18bf-46ca-9760-3fe6617f3860", "sighting--e07d98f4-0002-41ec-bb07-ee7f5f39885b", "sighting--c0a99086-5484-4506-94f8-091c5139b887", "sighting--a3ac796c-b82d-44f9-ba02-091f573de835", "sighting--9e98aab0-cee0-466c-9849-522c1f64b9e8", "sighting--8618d930-dcc5-4c30-bb24-65089fb607ff", "sighting--4f21a762-8957-4779-b7cc-d23a35185e30", "sighting--18188111-e370-476f-b12a-0a9f6af655e0", "sighting--a992cf14-84ff-4a3b-8476-98bff4b1a958", "sighting--9d113208-04b2-4b5f-bad6-c74b6936a584", "sighting--42e297c5-93f8-44c7-83d0-9553ffac2678", "sighting--6d8ddb09-277d-4046-82e7-13ea19744cc5", "sighting--a0c2894f-5874-45af-a506-b5c4814efc17", "sighting--cf59272f-de47-4af9-8089-146f38fc8366", "sighting--02314f5b-5c0c-489e-99ac-bbee18422610", "sighting--0b7a2b9e-503e-4e9b-84d3-adfdf98ae916", "sighting--71a91346-aa1c-40a0-9f5e-53ff5a84a991", "sighting--da2950e0-3c3f-48fd-82e3-ee3e855469cc", "sighting--e1a5de89-48e2-43c1-bc46-db33d34ada06", "sighting--791a3aac-bcd0-4a1c-a79a-895de0eee099", "sighting--29ac4b07-3765-41a6-877a-cc873b1ddd9a", "sighting--74790233-2c6f-47ae-b921-907e38d3872d", "sighting--1da1d76e-aad4-4e0b-a82f-7b80415d9683", "sighting--7f8a8155-d6e7-44b3-be07-cda8d2d16968", "sighting--812e1942-dbd3-45de-b3aa-0a80855d3638", "sighting--42cdb5c2-1fda-449a-967c-d56d5e1f7b78", "sighting--8f84b81d-5f63-4c41-82e5-e8d2056deb72", "sighting--33a6f246-9483-440d-96f3-bc9dc3966b6b", "sighting--8195c13c-9e42-4438-a366-c338178c40da", "sighting--71e0d9ce-231e-4c5f-9d73-3a3885d0b4e4", "sighting--4e114c06-5943-4c24-a0f7-77efe9aae118", "sighting--5bd79b38-813c-454e-b9b0-1ca261ade14d", "sighting--26e28d53-7954-4c4b-b504-bb3be6df244e", "sighting--af2208bd-0fd3-4f1e-9488-d2a973b21b1c", "sighting--c5fbc29a-d04a-49e0-920b-df2c5341ba69", "sighting--5445b3b8-3c31-48be-a856-fbb029e484c0", "sighting--d38a8789-8914-4673-9feb-ac49251b64fd", "sighting--c45ec3c3-a91a-492b-b69f-da916fabbb45", "sighting--88ac39df-78bd-4697-a29b-1050f1ced86b", "sighting--7eeca14b-15f0-4a1c-b39b-e2e795040156", "sighting--c99bd8c6-5804-466e-af17-8a598b427640", "sighting--652f8324-76fe-432a-8df9-559e2b9b0509", "sighting--534b6ec7-96fd-4edb-ad56-3bb6b20a6619", "sighting--d0f7fe0f-2e15-46f4-b8cd-319a0a4178d0", "sighting--1e984c76-fb3e-47c1-a3f1-781494b10e9f", "sighting--d0530ac7-06b1-452c-959d-6a6829ddea0b", "sighting--a0be0ffa-51fe-4030-b9be-a3e3ac65b35a", "sighting--cccf2b1b-0690-4441-b686-486f30389fac", "sighting--e03cebd1-6d9b-4a78-aba4-037f61fb841d", "sighting--5d8c5fea-5335-401b-bcf4-7f7dc33c4b25", "sighting--76f9dfc8-fb85-47bb-ad68-db33363e8e07", "sighting--8094bb4d-1d01-4ac0-bf15-3ef1c3c44633", "sighting--55fad9e4-f9df-431e-960c-4b16b699476a", "sighting--f9ac883e-899d-4e0c-a973-117dd1b5ae80", "sighting--da397e9d-2401-40aa-99e1-e5ca4d740ced", "sighting--a7b00ab4-793b-44ff-81dc-1046b908940e", "sighting--2af6d58e-5a98-48fd-ad79-d20ba0f529c1", "sighting--f5c7198b-b02d-4099-beba-d9c5aa35a1d7", "sighting--ab71fd84-ca5d-49ae-bb09-b23b3369c58a", "sighting--e434b548-b47d-4230-a9f4-f89fac9a1170", "sighting--7983a311-7b6c-40c0-9411-ed1ccc4c47a1", "sighting--c15f5995-dbea-4d01-b3d9-33731dcd4737", "sighting--94782f77-cc79-4f2b-8c6a-c065c6ae379b", "sighting--31d265b6-8dee-4d6b-af00-0f37c56df2a9", "sighting--ee504d0e-c542-44e3-9c9d-906340140744", "sighting--e400ab83-c62a-41e6-858e-9973bfae648f", "sighting--001f5fb1-9c56-4a82-be23-d4a5817b31a0", "sighting--838131aa-c918-4689-aa41-c8513c221fc2", "sighting--086584ab-00b2-4af9-9059-322d0a7bd7a3", "sighting--0a5cf21d-089f-4406-828c-4c0c84f2b688", "sighting--d07f51df-628a-421e-919e-29b55b78bbb8", "sighting--1cb1107b-4fbb-4aff-9521-8ea5c4be6317", "sighting--028f133b-8f04-4351-97d9-f0828af90866", "sighting--40e2faeb-a7f0-4579-94e8-cf2e5b2d3af7", "sighting--279729c0-ea83-4c8f-977d-34798655e843", "sighting--7fb9bae4-3181-4f92-84ec-07b41b74c1a8", "sighting--9cd16f4b-4a58-4c40-9c6b-e604e1af9de7", "sighting--d70b869d-33ab-4af6-b3f8-aa31cd358c62", "sighting--a52f7020-236d-4cf3-aa8b-b00078955f0b", "sighting--c028e26f-291e-487f-9d1d-f25b1bff4bf5", "sighting--d09209c2-01df-4d14-b58a-0d3ad498ad05", "sighting--a962397a-f2b6-4072-9b3e-e574ebcc4bf2", "sighting--fb379e62-ba8c-4175-9e6e-301af7359a46", "sighting--96253614-d64d-4637-834d-5db951f8dc45", "sighting--06aa1ff4-9aae-4137-a752-7555b7925710", "sighting--d6bc21ac-fe46-4da1-97ee-c27c2c117fb9", "sighting--6294a4c1-a314-4b18-9bef-453147b05a71", "sighting--d97b9f42-36f9-4112-a5f5-c5736fdbe6d6", "sighting--9fb63145-e8e5-48e2-8214-20735e7a993e", "sighting--7e75ca65-0a02-462a-820e-6ddb7b908d59", "sighting--c6ceb832-3a11-4ed2-acb6-a22ba46db7de", "sighting--97bc830e-6329-4613-a20c-11a9c34cce7c", "sighting--76267612-ae40-4b43-ba57-3be9fe95fa34", "sighting--4024027d-0b22-4c19-b93b-434c9979e30b", "sighting--bcd8890d-8109-4dd4-b1fc-b119d44c12bd", "sighting--fabe6dcd-6d8b-497c-a3cc-fa4efdad8216", "sighting--6ce26b1b-651e-4ed1-8937-462cf51a6db5", "sighting--753eaaf4-79a3-4ff8-a4c7-f652fb7c4ee5", "sighting--3456e9b8-dfbb-40f8-8d33-6990c3df7bb6", "sighting--f74d2880-4915-4291-b627-a740a0899cf2", "sighting--65de3f57-548a-4c74-a0b7-457dac588aeb", "sighting--af20fca9-5603-4d04-a056-386daec443f0", "sighting--65101016-cb0a-4158-94ab-e3fda1644df7", "sighting--68fcc388-5bef-4f97-bab7-e3c8120aa1de", "sighting--3aef7bf9-179d-47e1-b8e4-34b4cd3791a6", "sighting--f0752617-12f8-43d7-81d2-9bdf91f94c1f", "sighting--130670f6-732b-4f8a-be99-938e9bc1677b", "sighting--82e9e23d-8e33-4b61-9cb6-95730b59f04b", "sighting--e9061ac6-bed9-4513-b1bf-9f89c00cfaa4", "sighting--de5a1e2a-f60e-46fe-b942-c5ad0358e077", "sighting--2b05724c-314c-4c8c-a5ad-e7f40774e556", "sighting--b40f6daf-b838-4629-9aa8-dd519a8903cd", "sighting--4ed5c693-0765-465c-9793-e34c3224c7df", "sighting--d5566e46-69cd-4b7c-acb0-6b67b6912c4d", "sighting--c028d898-2d99-4a1b-9cf6-f84b630a6766", "sighting--27b947f1-fa16-4183-b702-3854a769bce2", "sighting--11db687f-58f8-46c3-85eb-d93c46a91ffd", "sighting--212c1eb6-6c6e-464a-9e03-cc2dc50a4af5", "sighting--69303bd2-9004-4c21-82fc-94b04dee1254", "sighting--4cb9346e-9cd9-4faf-97f6-6437a38791a5", "sighting--ad64a330-468f-444a-b23b-238e8bc8ac1d", "sighting--6eb49952-8dcf-43f1-a6d1-1f5c709d010d", "sighting--bf2fbd8c-f5b2-4100-ad4c-6e6cac8c002a", "sighting--f95acee3-55e6-4c1e-81f0-113d09046181", "sighting--6ebf4477-581f-488f-b366-5680df5fb4a6", "sighting--8df47b17-073b-437f-8fde-d28b1b05f00a", "sighting--f21aad90-3fd5-435a-960d-5267e687600e", "sighting--e043e822-7abb-44ae-b5b4-f39b76a715b8", "sighting--dc5c755b-8d42-4802-9f17-46b6bb8dfa71", "sighting--a00b348e-3c62-4633-8de1-1b950fee46c1", "sighting--000733a6-b0ab-4003-872e-08dda5c6dbdf", "sighting--85e4b4b7-1793-495c-9caa-c8af5c2bbe10", "sighting--edadd57a-28bc-459d-8fed-4965ce1b2e42", "sighting--6f8c4541-ecef-43cb-bf56-7c6c3212c46b", "sighting--0ceeb354-d697-4fba-a2c4-c7e6cf16c6df", "sighting--cfe813e0-0805-427e-ad4e-80067de6c3d6", "sighting--8c75c567-65fd-4247-abfb-8bbf85846c08", "sighting--3744ce10-4c8b-4bd1-8a3b-f549788eb263", "sighting--08221f2c-9d19-4767-b18a-8202f1643485", "sighting--9095f096-fbab-4541-8a28-73571c40e63d", "sighting--2b442d9e-f872-44a7-9ea9-ca3e9f10fef1", "sighting--90cc3f74-d672-4ebe-8c41-c7628ff6131a", "sighting--962b10c3-295b-4761-a8f6-c8523345b692", "sighting--fa517f06-a4d8-491b-86e7-65a3c7d94931", "sighting--78cb9371-a1a3-4cb5-a9a7-66452e155988", "sighting--8d194065-0b88-40aa-a2e7-5c6bcf072c9e", "sighting--2cb01d85-f654-451e-a284-632f045dba9f", "sighting--802a9bf1-4bf3-4801-b9c7-2abd173c33ca", "sighting--c36c0781-f64f-4dff-b4d6-4e29e802cf6e", "sighting--76137143-cc6b-44ab-87d8-109eedf269a3", "sighting--9ba43cd9-28e4-4ea3-9792-e306947b1865", "sighting--e12ff6bb-612c-4f45-b03b-4e02a8021503", "sighting--58f516a0-d80c-42d2-a5d4-284956c1b74a", "sighting--ed7937e0-19b9-4cb8-a26d-82ced3b9bd2a", "sighting--04e36269-2b28-4d81-855f-993e9eb741f8", "sighting--52f7a585-d3c7-4c81-83eb-47b93b9b9e5f", "sighting--44148882-e9d8-4b77-bb22-06ccc3b7e75b", "sighting--281c2e50-42aa-409e-8789-6d9f0d9bc83a", "sighting--1b67a8a7-e89d-407e-a643-a66d75c0bb3f", "sighting--1ab268d8-9e1c-4715-ab54-06378cde8d4f", "sighting--566af6ae-5e25-45f0-898e-5dbcce0dca42", "sighting--572c0b37-c625-48b1-bca7-01356cf3b49d", "sighting--26c849df-eed6-40ca-b992-76ea640bbe82", "sighting--bffa506f-b9a9-4673-917f-0ac68af7149e", "sighting--1ae9d6a2-1021-4bbb-8b17-ea2b0e38dc8b", "sighting--e77da206-8344-4fad-9453-f6f83373df4a", "sighting--ebaaf6c1-79ff-4588-9e1c-6fa690950ee5", "sighting--f8ca4caf-a893-4af8-9ad2-a22e4ebd7f34", "sighting--49692c58-005d-47ba-966b-41d4e2e77525", "sighting--47fa0452-ae8b-43dc-a8cb-92f90c028b7a", "sighting--14973c84-d487-4c64-9c9a-180371ea9224", "sighting--e0e8fe07-5bf5-4528-931d-74f01f139bdf", "sighting--9e200300-cb98-4c0c-a115-4ae3a5bc7d4d", "sighting--3e39f45c-c46f-4a5c-840d-0e392fc784f8", "sighting--17d5f5b4-8faa-44fc-8010-f64336d0e145", "sighting--7eada9c0-8d88-45c6-9afd-9e5e5bfe0a31", "sighting--fffa9831-64f1-4675-93f8-443ae6a312fa", "sighting--85828b73-16eb-4008-bdcb-899799c830af", "sighting--a634b091-a1a9-479c-89a2-4377c731f74f", "sighting--a2347b4d-9268-424e-9c9b-65543b2de1fa", "sighting--67bcd405-1e07-40a2-8623-bf77fbada82e", "sighting--2d5719e1-3155-4ad1-8c82-9d82c7edcab6", "sighting--40a114f0-989a-4b0b-be37-8b832e60610b", "sighting--2888444d-3d4c-409a-b3ec-e677e22a89ac", "sighting--7a177225-4358-45f0-9960-308cad6df878", "sighting--5c3f38a9-c924-44d9-8219-6ffe442012c1", "sighting--602a8ffd-f0a2-4721-8e14-2bee4c0a07dd", "sighting--533043ab-427c-4616-8c87-d66b06c27d39", "sighting--ce021e04-971a-425d-a38e-3901bcb53d6a", "sighting--91b661c8-14ae-461b-bf84-b631e8c8c581", "sighting--623d7198-e5dc-44ba-b170-0deb0cd37b8b", "sighting--75422949-920a-40cf-af1c-2b90829b19d7", "sighting--18f564e9-e269-492b-91b8-754d33abec0f", "sighting--8796259f-987c-4031-a816-0e06f1318a36", "sighting--1978feb0-035e-487e-81d2-c726e36b4c0a", "sighting--bbde7c5e-4ccb-4794-a0f7-70af676fab55", "sighting--f139c50f-d529-407c-aaae-4c972c5b05ce", "sighting--f0d71c92-400d-4d85-86e3-3e7745e46b4f", "sighting--34f16832-2592-4887-b8b1-fffa0cf69503", "sighting--b154cfd1-45b1-4e2b-b1c2-6b25fed47f82", "sighting--78abca88-e930-489b-bd79-c64e52a09a79", "sighting--54fb53aa-56be-4199-be59-26889a7385e7", "sighting--b9128ef0-9ec0-4b08-ae5e-9c7412b73a25", "sighting--8816e39e-c3d9-49ea-afb9-f38fd6f3019e", "sighting--2f1af673-f40f-4bce-9611-7e88b0b3a7ae", "sighting--38c404ad-bf8d-4c9c-a811-cebc78f10cb7", "sighting--d231800e-2574-485b-b0cd-1003133a110e", "sighting--e35455b7-b50b-4ccb-b97d-1af26215ab43", "sighting--6d882bcb-f093-4ce4-a290-62504b28b42f", "sighting--b71f4ffe-876a-44cc-b636-f66542eb5a69", "sighting--e5315e82-8e24-48b5-b4b9-398fdb44408f", "sighting--ddbf34c7-1bf1-4c10-87ac-f42bc4e3a1b4", "sighting--55125e35-c4d4-486a-bfac-630cfcc134e1", "sighting--d68e4b77-c043-40e3-8993-f77545558171", "sighting--85b8d66e-8f81-4c98-9f6c-4d876e64367b", "sighting--d92ac3ca-83c0-4af5-a591-a3d0a352f8f8", "sighting--250fd05a-b564-4320-95e3-c57a00312d50", "sighting--50c2eb12-5651-4e0b-bf9a-67b29debe965", "sighting--d9732573-ef8d-4bf0-9333-4fb79c510220", "sighting--ce04ca8a-3ead-4718-be24-ece63e134d18", "sighting--c30836f2-36df-4293-867d-10fa41ec35fd", "sighting--2a423193-08ff-4343-a0d1-634c954b145f", "sighting--72b958fd-cd63-4773-afb3-25a887e6e3d3", "sighting--34689a88-4132-4ff8-8ede-6795fc534d02", "sighting--fb62e2c8-36cc-47c0-abcd-75098fc8905a", "sighting--3e2ee9a6-1bd3-419e-86de-89c16f18ac92", "sighting--3734997d-2ce7-4f95-a599-f353b0c29d8f", "sighting--d17ce7a8-c07a-44e1-820c-7ba480ac7808", "sighting--9a033214-da22-4e72-b26d-c6d250c5765c", "sighting--2680977d-6ba5-4eee-81a2-e985b13f71a0", "sighting--c5b2d0c4-ea2f-4f57-b236-27a42139cbb9", "sighting--ad2fabf9-4e96-46d3-b33b-222e48feba89", "sighting--29fdb691-3449-4f79-8f77-f63848296d06", "sighting--1953e592-542c-4b08-ab60-b7a3a3097dba", "sighting--9c33a3ae-12dd-4687-b14e-8c6d6dbe9063", "sighting--48f53946-ab70-4900-8cb5-4c1a7042c890", "sighting--4b3370d5-442c-4db0-93c9-8bb484290026", "sighting--2e2f896b-2862-42de-99b5-4b11535f3d60", "sighting--c6ada71a-670b-45a0-81c5-9ed56719c8f0", "sighting--00c2e5a5-f62a-494e-837f-6cbcf73a7049", "sighting--71c9ad70-3cf9-4d04-b36d-3091ce1497a1", "sighting--9ae4f377-f5fe-4302-87da-2521972417ee", "sighting--1258e2a1-7f65-4992-8f86-e06684731ba7", "sighting--ca84cd7c-23d4-4752-81db-8ef831b1fd5c", "sighting--7af50d9c-61ef-41bb-bf39-fcd799a869aa", "sighting--74841b5c-e117-43a9-a5c4-3f0fe1991ef2", "sighting--a9e61b7f-c825-4773-b883-6bf3989dc5a1", "sighting--836278b5-29e8-46be-8263-3628827a98c6", "sighting--3d477acd-d1eb-480b-b23e-8d5f350bc265", "sighting--acda40f8-e8ec-481d-8546-13104b7a7636", "sighting--6cdaee8f-02a5-4d4a-a93e-ecfc8a42afe8", "sighting--4f2537ce-5ab0-4a9d-a846-44d221a9cb26", "sighting--13a9415a-66dd-4408-bf3b-e11333791c6f", "sighting--ed138511-6f61-4247-bf92-27f2820a3707", "sighting--27efba8e-9cca-49a9-b743-9803ae76d9a6", "sighting--bb10fee1-f3e0-438b-b48f-3ba3db598efc", "sighting--ec815787-471e-4e18-ac57-d16c6ea2d8dc", "sighting--3c756fc6-2b9d-4b70-a0e9-4991afe2f989", "sighting--9638b715-e38b-413a-b2e1-accbbf50aa71", "sighting--aab6486c-c11f-4e97-b3e9-f89a91fe0fb9", "sighting--7e480937-4b76-4c3b-9fd2-e252acefb903", "sighting--db5e8763-2ccc-457b-a07f-de8c7db77c39", "sighting--5c5f511d-daf0-4a80-b810-5f1d40b208b1", "sighting--0d3fad23-afe3-4ba8-9929-a94a8d2984fd", "sighting--cd176ba2-c3d6-4cb2-8fd5-eee9255cb8d2", "sighting--6afda98b-35eb-4bf3-ad64-416ee0741a37", "sighting--fb7d4db2-2ce9-4eb2-b77a-47ed0497b83c", "sighting--0af34568-0a08-460c-aa7f-27fc6be9e999", "sighting--5908f25e-3cd8-441f-ac1a-4abe74384b21", "sighting--d447b5af-8b5a-43e5-af8d-ae7433f2e7c3", "sighting--7a3ee653-59b8-46a8-8cfa-d865fd417e63", "sighting--8a53c46a-faa5-470d-b076-2a2093f002b7", "sighting--57f0df91-899d-491f-9d37-57fa42e11be7", "sighting--8f02a805-88c6-4882-bd0f-d7c9fa6bcd89", "sighting--6addd84a-eb3b-4bfb-a3c3-2f29ed3bf870", "sighting--c36f8f37-b322-467f-95e8-72fafcff5f96", "sighting--7f147775-5481-4425-849a-bab0ef2a51d1", "sighting--ba9a5144-6352-434e-8326-aeac9ed77eb7", "sighting--097be74c-4c85-431b-b4a6-44d8659b07f8", "sighting--fffe2e80-a150-4bda-afe7-e76cd851f2ac", "sighting--2b6ca815-847d-4386-9661-19f7d25f08b4", "sighting--12448acc-be35-4649-9296-44b92964a1f7", "sighting--bf07b71c-a417-427e-b60c-c1abdd38a0c6", "sighting--8f57c780-fd5d-4213-a0c3-47bae5caf42e", "sighting--d9633005-d3b5-4318-85dd-e73d16e6aa5d", "sighting--f05dd872-1aeb-47c7-85a8-a9b5acedd98f", "sighting--e0ff1109-30a6-426f-ba1c-dbb168576484", "sighting--51520824-033a-4c6c-8a64-cf4799914b8b", "sighting--6d9706b0-9e14-46c1-9591-131618a56246", "sighting--1a8c9e71-2bc6-4a5c-8412-832dcfad522d", "sighting--b0c5aba8-5b5e-4d7e-ba8e-fd876a291a45", "sighting--8ccb490b-35c1-4326-8c60-af032e0c696c", "sighting--3c93881f-d1b5-4c18-af2c-22b13b19ecce", "sighting--99f6b022-d838-4313-812e-e86820d6a781", "sighting--7b2ebc13-2bc2-4f8f-8e36-b491f611f88e", "sighting--320fd034-f31e-46e7-a1ae-1e52ef3384cd", "sighting--ae9d6620-3e5a-4329-8edd-e5740621b477", "sighting--fb99f032-32dd-4821-ab09-7605ebe7c64d", "sighting--459bb21b-6642-4a0d-a18e-360b7547c8c2", "sighting--6b48b014-588d-447d-a388-caa21b28b2bd", "sighting--923432eb-fb41-4809-905f-9bb552afeaa3", "sighting--80181ffc-2ab5-4a76-846f-430cc7637b59", "sighting--28036c07-51cb-4cb9-9629-605723cbaafe", "sighting--ef92a38b-69d2-4605-a310-01f3c1c54a30", "sighting--9216489d-a184-4246-a1d7-b57a41a9e366", "sighting--484b0963-a0d5-4fc8-a331-49f653d95c2b", "sighting--361cbd45-aadd-49fd-9b75-93005275af6b", "sighting--f1c3d929-7e7b-4b3b-a957-c0e44f249d33", "sighting--99220dfb-cece-47cb-b890-a22d4e9902a9", "sighting--43aa4e52-d09b-4a79-bf31-7b9954858ec8", "sighting--5526e303-fb96-4435-a7c0-5489b259aa5e", "sighting--e173c9f7-a002-4aaa-8d4b-2c875388bd0d", "sighting--5f840758-f9a3-4016-912f-3f4f731380e1", "sighting--f3910605-a4fc-4717-b3a6-e350144d886e", "sighting--bb82bfb0-1881-43ac-a1c4-68cc50db2cc4", "sighting--42a4bb82-70f8-4750-ab90-e647f7a483bf", "sighting--d23d1d17-fdea-486c-84f0-bc82c33172d1", "sighting--37d4ffee-90f7-469c-8c90-fedb900cb61e", "sighting--23a9b3e6-d95d-4c55-ac87-420c500d9da7", "sighting--5ced54d6-8b20-4d6c-b7b9-6032985fa200", "sighting--8b28aeb5-5d23-4bfd-a5c6-d8ec9aca04b2", "sighting--dd2e9ced-3359-46fe-a8b8-100ca3192457", "sighting--ff484dac-3d7b-4118-af39-10936f797d27", "sighting--5cb6bb5b-599d-44dd-a76f-49c4f5759840", "sighting--e4e8ff79-e0d9-4984-be3e-50717d241f92", "sighting--9b99d606-d432-43db-9dfc-d92603e98b55", "sighting--89ca2e80-3dee-46bb-bc1c-a16c25d93c77", "sighting--929af0e8-60a4-4701-8499-1b0477e96036", "sighting--44fee9e7-be30-4b69-8a16-d69c02a3ec93", "sighting--2c90f456-eb9a-4a65-ab25-32c1715e36bd", "sighting--66a67373-3e55-462f-a72b-a45d07efa074", "sighting--4ddda4a8-89cc-47fe-ace2-9d99433118db", "sighting--55867a7b-4e59-44d4-b05c-cd670f425325", "sighting--17a626ab-e28e-40ed-8bd3-7ea9e453d918", "sighting--43279a6b-7ed6-45b2-b926-091e0e6374ba", "sighting--f7ec855d-3432-40b4-9d8f-25caf578a627", "sighting--c9aac0fb-ce74-4acf-8406-822d7d5c3f0b", "sighting--fc495a8b-0179-47de-a108-f54f02708959", "sighting--00e4413c-e7ff-4aca-87a3-8394de41fc7d", "sighting--60ef8927-ba03-4907-806e-fa98b29de03e", "sighting--fa1d28f5-acae-4704-bff7-85d9f59ab4f8", "sighting--5d57f21a-16ca-448e-a30d-422624d9a998", "sighting--19c33cde-d25b-4c27-ab0e-ae2c2170c29e", "sighting--bc538775-15b1-40eb-b09e-19f8d18fa1e3", "sighting--fc372102-ef45-478b-ad93-9f4ddc74f4a4", "sighting--5fcdbdb0-f36c-479e-a271-3c20161016ea", "sighting--c74db7e4-9459-4e0c-9c04-60ffbb401a88", "sighting--5fc401f0-c480-4939-aa80-99a28e190463", "sighting--679ea41f-179e-4c68-aad8-4e5a09d69112", "sighting--2bec3c08-afb6-4005-b650-2977db39fc4f", "sighting--52cd5d39-8861-4cbb-97ea-734d509cdde9", "sighting--806c4690-cc09-4b57-834a-8006f184ad17", "sighting--ff2e4d3b-b66a-4afd-bd0d-fa8e39b8da01", "sighting--745526ae-2ccc-4bd6-b1b1-366038a49ba0", "sighting--1f3c491e-e449-404e-b01b-5d07602fed45", "sighting--1de6f98c-63f3-467b-8e9e-74eb5f87663c", "sighting--6ed51bbe-a8f9-4109-9103-a0e69cddb356", "sighting--05ab5f65-49e7-49f9-bc29-562a7a4c41b1", "sighting--9cc04e10-b8a9-4339-b553-7c8268ec7b69", "sighting--38aa3c21-2376-4ba6-95a8-0623b1c48dd2", "sighting--59e03796-9840-4678-b11f-331f7612249e", "sighting--4cb17fc1-fc8d-436e-b331-6d9ef9f2742e", "sighting--ff717282-77c3-44e7-b7a1-09abb2488915", "sighting--d2193362-8213-4678-9f16-b5f37be703de", "sighting--18ac7ce7-c24d-4008-9fcd-bd412eeca177", "sighting--5351958a-e9f6-4c18-9687-ac2003e9ede2", "sighting--1a283648-1a8a-4f86-bf10-56f56f7497a2", "sighting--6384bdbd-4689-463d-ae8d-6eea3116851a", "sighting--37680798-d2c3-42e2-a0b9-dec495398b74", "sighting--0687edaf-9105-4dd2-a03d-4b665633f90f", "sighting--734288af-f045-4f4e-a970-2879deac3789", "sighting--29644cbb-bdd1-4c4e-8654-193584534e7a", "sighting--26502dd8-0c33-47a8-bc34-82596c0d9962", "sighting--17bd5457-8532-4693-ae03-324efc3c0714", "sighting--5a051ff8-d8ce-43cb-8083-b692466d00e9", "sighting--191ceb25-6c06-4f9d-903a-b17f84012a4d", "sighting--b4b9ef5c-a535-458f-b3b8-5a19f650ec84", "sighting--878bac0a-9d2b-4808-8299-41d308593530", "sighting--db5db5a3-3717-40c3-ab72-0196cda306c8", "sighting--287ae17b-7938-4e25-aa9f-9ec164adde41", "sighting--ab351b81-47e4-438d-8e57-23a3f728d33b", "sighting--d8f1a936-0582-4d11-949c-460e1f9367fa", "sighting--fdb65d17-1e09-40f1-ac82-0b25dac57e32", "sighting--c4c7eda5-7e95-4372-8ad7-e18d492aa8a8", "sighting--e63813b8-af3e-482b-929b-50d1f1755248", "sighting--7db79ce7-6430-4d66-a1d8-faf4b4df8fc6", "sighting--52f669d5-2b55-44b8-938e-281c6790c270", "sighting--6fcc0f21-a916-4c49-9681-f6af3116091c", "sighting--ef351f38-ef88-4f7a-8de4-4d58856f33ee", "sighting--f814367f-75c7-4930-8c42-1bd807aa428f", "sighting--236ca2eb-827c-4fc5-9ee0-d231fdf09799", "sighting--af8ca7c5-a821-4531-ae3f-d75fc52c1e17", "sighting--57cd58cf-ae8f-4daa-9a9a-7e5fd22076a7", "sighting--9dc0ef19-dcee-443d-a05a-54f1697cc019", "sighting--9ba17929-c236-4866-8d5e-3721610d2575", "sighting--da47e877-9d0b-48b3-bc35-74aff04ef0fc", "sighting--d90caf38-ab1d-485f-a09c-bb9687cf73fe", "sighting--797bb134-c31f-49d4-b209-66ed3966fba6", "sighting--b444d7ee-46e4-4d8e-b937-4547915f79a7", "sighting--174a65aa-3db1-4cca-9236-3cd89b14fd7d", "sighting--94e4438e-70fa-4c8e-8bfd-da5ddc3984a4", "sighting--17375a70-f119-44c0-9003-9abef516d7f6", "sighting--9dac0910-818e-4fcd-918a-6cd1c3be9405", "sighting--c15fc54d-2a8d-42ab-b858-6d541b791fb8", "sighting--5700f7bc-939d-4a37-a455-581e32c14800", "sighting--4282160c-b3fd-4dfd-b654-4782eae78714", "sighting--8bb46d8a-3351-487c-9648-f3025b56fb47", "sighting--523920f0-243b-4259-8c76-4fb8aa7dd65f", "sighting--34da4623-4f03-4ca1-bc39-b981e5e71dbb", "sighting--08f48cbd-073d-445c-80bf-f584409d22a8", "sighting--37f208f9-ce12-40aa-90f0-39ff4fa41855", "sighting--496caccb-cd19-4baa-bee7-a7aefe6b3fa9", "sighting--b9b0db51-c120-4392-b0cd-e2e94088caa5", "sighting--df95945e-76cf-4576-bd5e-729e03b9b00f", "sighting--9db0e79c-f458-46fb-a7c4-e89637f70388", "sighting--bddf41a3-499b-42b2-9079-3eb3bd90abfa", "sighting--edc5972d-6e96-43ec-a0b4-bf46cb28f06e", "sighting--fbd588e0-c4df-4a12-8801-8ea334575c71", "sighting--3871097e-4fe7-471e-abac-f35799200bc3", "sighting--f5bd8289-efb1-4805-a5a8-3bd6368f4950", "sighting--e92808d4-9944-4cf0-940d-59f0f660113b", "sighting--e77f5558-3af1-4753-9cd8-596d27c88c9c", "sighting--f850fbaa-0420-4c5b-8dc9-654399511493", "sighting--61886d80-6f58-473f-a308-069efc62569f", "sighting--3361ef59-e8f3-469e-b0b0-1ab56bf5744e", "sighting--49fd6589-d429-4503-bfce-6484202c49f6", "sighting--ca02d5eb-ed49-4b5f-9d17-986bb350c741", "sighting--3ce52731-d44d-4d48-9534-b426b3e913ca", "sighting--3e5ca3af-8431-4193-ad62-21cd720faa8d", "sighting--103676a6-8c4d-4f7c-b652-7e052bab3652", "sighting--de0e49c9-b861-4111-b85e-2ce6d7b9a547", "sighting--0b812618-e904-4ec9-ad80-ae98bc8bc3fe", "sighting--375fdace-2473-40de-af81-31dedc7e1db5", "sighting--2df95759-099d-4720-a038-ce8e41efe4ac", "sighting--69bd2a81-6cc0-436d-8230-c8000c62b0d7", "sighting--1d5249d7-6fd8-4f94-8d14-ebd823052e1d", "sighting--b6e4760d-26ba-4498-8a8d-b0263427663c", "sighting--dc4b3dcd-3a5d-4ed3-a020-08157f5d841a", "sighting--d7c18a74-c099-4f35-b731-5e720bc7c068", "sighting--bb703bfe-3bf5-4caa-8a8c-bdb400836b55", "sighting--63fcf3e8-5c33-4a85-9b43-ce4c79932d40", "sighting--8d7dd98a-5288-4b0d-a5f8-83b9938b4cc8", "sighting--2d1f70f1-1085-4070-b190-e6dd5ade6493", "sighting--373f8ff2-6c3c-4670-a555-c75117e56b0a", "sighting--06f8978f-0824-4b3c-a161-5edb86852a11", "sighting--3bec961c-a653-47b5-9ccd-9bd74468ef99", "sighting--6e2928a8-895b-44fa-b66d-6d27efc5119b", "sighting--dce4dd94-cd46-4cf1-aacc-01f78aa0f839", "sighting--46a8ac2d-3bc1-4905-a2b1-6658fda84d7f", "sighting--870f136b-f3c3-4154-9b49-69752cc3568c", "sighting--e8f42909-3f4f-4d45-ad8d-95f56d3bec03", "sighting--8a4da98f-de31-468a-a93d-183502e415eb", "sighting--82f0d215-d947-4c0a-b8ad-6e50004d0b0d", "sighting--61341cba-b4cd-4ea6-b16c-3d9f99fdc042", "sighting--bef6436f-ce6e-4d2c-ac2c-cf582c2764b7", "sighting--3f7cd318-cf3d-4683-a885-39a4c6a99851", "sighting--7943a423-d5dd-45ea-b923-93e5f2ac1f97", "sighting--a640544a-0851-4f8d-8b5f-b3bc62f5336a", "sighting--e141bb7b-20a2-4828-a39d-16c2ccbbfccf", "sighting--3b54fc71-8d1b-4325-85b2-2ec2638f0764", "sighting--6fd61001-6c6a-4fea-ba9d-5b688c4d207d", "sighting--9bbdcfc5-2f16-43f2-ba52-1af8abed6a7c", "sighting--a8efc59e-3139-4278-b03f-e9a763127360", "sighting--41dea704-3203-4882-8041-80ee0c4f1d5f", "sighting--163f41ff-7716-4ace-91b0-519b9532c4ee", "sighting--0d02fc58-965b-48bd-ab21-0216bd4300c2", "sighting--4b603d88-51c7-478c-8d2c-2a92fe6c2ddd", "sighting--376a121f-0e67-4461-b0f8-9ea1a0d25356", "sighting--5bff69d1-6bf8-4a29-a796-e7907a758c84", "sighting--c1c5b501-72fc-41d0-abed-999d08809243", "sighting--f7ce46a7-cbdd-44e4-9fc1-51c287791688", "sighting--d8b3a14e-064e-49ba-9abd-1c2c250ceb82", "sighting--21d72dff-0005-4b2d-beeb-0a016fd813a3", "sighting--458f1cb0-2c56-4fa5-8ef2-79390ee321ae", "sighting--e4a2384f-792b-4588-81b7-e1bfe9079a1e", "sighting--87426a5c-a319-44cb-8425-32c1789192ae", "sighting--0083884a-9073-4091-92f6-b94ae18b6b91", "sighting--891dd3a6-9444-4f77-b3cd-6972579ab266", "sighting--3db1f4d6-5bcc-42ff-93cc-7264ada33a47", "sighting--3c18aa9c-66c2-4c1f-968c-c6962f23058d", "sighting--d2b9acb7-af0c-492a-9a5a-33040d60316f", "sighting--88e53c7b-d019-482a-b4d1-e07fa3c09acb", "sighting--7c51d19e-cbde-46e3-ab1b-807baaa3a4d3", "sighting--f67be8d1-70fc-45bc-8833-ae1a523c126d", "sighting--0b11e96e-35f5-4775-943c-fe474b70d306", "sighting--8383e2f0-e7c6-4c2e-8f33-3d3c921a06e9", "sighting--d17264f9-2e5a-4807-8609-025d5f9cca94", "sighting--c41c1918-b212-4e07-992d-5cd355245241", "sighting--1088aba9-2970-4d5e-abf5-2d7541057bce", "sighting--05bc24f2-c658-442e-966f-5838a9253a29", "sighting--c3c7c054-5993-47c3-8409-39a5b63e2a04", "sighting--bc3efecf-55c4-425b-ab5f-3cb702c07145", "sighting--9536abbf-a2c5-4954-8e0f-86d98b1d4264", "sighting--0400cd36-d117-4746-9f4c-c0e5e67023a6", "sighting--e01fcdcb-2a65-404e-9fa0-8450348ca02c", "sighting--b1299d8c-b4ad-40d3-84a4-28b4f2a0f45f", "sighting--e80ae61c-e1fd-46d9-9d04-14442e4ff078", "sighting--2a354a92-9f59-47d9-907b-79d784fa2a5e", "sighting--fc57fe00-26a7-4acc-91fc-b66fb6ebf14e", "sighting--42db7d72-0cbd-4693-b88f-af72df3fa3a0", "sighting--f4bb5155-1e62-47b7-b652-be93edca9c13", "sighting--7dabf263-c933-454c-89b6-8ce1e284a3dc", "sighting--11675229-6098-4438-9945-3e8f97544914", "sighting--abd499be-bfae-4741-8b85-500f55413f58", "sighting--77a2cfb9-a645-49c6-bf9a-3b4b4a85674e", "sighting--ca84ca0e-f4a3-4bc4-881d-7cce490d8b5c", "sighting--3f50b10c-54e5-4797-9f0b-7d5513776280", "sighting--1f7b45e0-fde7-4259-86c8-1aa18fbd30f1", "sighting--533f0fba-d75f-4908-94a3-e8698dba8090", "sighting--eb504030-7717-450b-a93c-4b44f730d0e8", "sighting--8cce90a1-570c-49b6-a635-c1ab0b5f1c4d", "sighting--9073f27c-1bf4-4ebd-828f-16e578d0669f", "sighting--5c23da83-f399-4c74-8521-9a76ff3af1af", "sighting--5b7dd8c5-7c85-479a-839b-080837bc6ba7", "sighting--0f7f9d07-fcd9-4805-baae-354778f764ed", "sighting--f881f5e5-95d5-4fd3-ba82-9cbcdcd97d81", "sighting--95f21a1d-01ee-480b-acae-89cc23787fae", "sighting--ab9668a0-d5bf-4500-a4e0-c26f6d8a0bf7", "sighting--3e9b069d-ebd2-42b2-90a7-c5f4dd60b7be", "sighting--1196b89d-a699-4e01-82e5-12df865d9e54", "sighting--ca2f9db3-ac42-4a4e-9ec9-ca6deca28bb8", "sighting--20927bee-6d40-4e05-bb24-854d699b74b7", "sighting--64ac9612-9b08-4360-8f3e-956450bd34e7", "sighting--cfe1ac3e-07de-4047-b976-cfaf068e5b52", "sighting--5799e76b-dce5-4662-b84d-137b75e84432", "sighting--61db5a8e-66f6-4514-bf5f-8fa3e0b2db02"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-04T11:00:02.186Z", "modified": "2026-07-04T11:00:02.186Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}